$ rpki-client -vvf rpki.apnic.net/member_repository/A91E00A5/A6483A3C7ABB11EF9379AE52C4F9AE02/3obmXuoeCzDk_Y2SRYft9XI9UH0.mft File: 3obmXuoeCzDk_Y2SRYft9XI9UH0.mft (raw, json) Hash identifier: EniuHlb5EJV19LLYyq06reFU4y4NM+ZU5q5wxtuiEfM= Subject key identifier: 12:2C:4E:5F:44:97:1F:78:88:61:66:38:59:C2:DC:0A:BC:35:46:76 Authority key identifier: DE:86:E6:5E:EA:1E:0B:30:E4:FD:8D:92:45:87:ED:F5:72:3D:50:7D Certificate issuer: /CN=A91E00A5/serialNumber=DE86E65EEA1E0B30E4FD8D924587EDF5723D507D Certificate serial: D2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3obmXuoeCzDk_Y2SRYft9XI9UH0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E00A5/A6483A3C7ABB11EF9379AE52C4F9AE02/3obmXuoeCzDk_Y2SRYft9XI9UH0.mft Manifest number: D0 Signing time: Mon 03 Nov 2025 05:40:22 +0000 Manifest this update: Mon 03 Nov 2025 05:40:22 +0000 Manifest next update: Mon 10 Nov 2025 05:40:22 +0000 Files and hashes: 1: 3obmXuoeCzDk_Y2SRYft9XI9UH0.crl (hash: ARdOaY0QMjX1wnc/0Z0tWGesnGr86Zqqrc7rY9E30a4=) 2: 1F63E4347ABC11EF9E53E753C4F9AE02.roa (hash: HKA4VosuvqKj93QksjNsBERDuKRgYc9/Nd6hWkYBCUw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E00A5/A6483A3C7ABB11EF9379AE52C4F9AE02/3obmXuoeCzDk_Y2SRYft9XI9UH0.crl rsync://rpki.apnic.net/member_repository/A91E00A5/A6483A3C7ABB11EF9379AE52C4F9AE02/3obmXuoeCzDk_Y2SRYft9XI9UH0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3obmXuoeCzDk_Y2SRYft9XI9UH0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 05:40:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 210 (0xd2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E00A5, serialNumber=DE86E65EEA1E0B30E4FD8D924587EDF5723D507D Validity Not Before: Nov 3 05:40:22 2025 GMT Not After : Nov 10 05:40:22 2025 GMT Subject: CN=69084046-8c51 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:e1:9e:94:85:df:c2:e7:92:e8:27:dd:4c:3b: 07:18:df:c6:0d:ef:ab:35:92:e5:70:53:dc:a3:12: e8:c8:d3:b7:f6:f7:c7:5f:ff:c0:85:3c:ac:bd:e2: 80:bd:a7:f8:1f:dd:33:35:b3:a6:28:c7:c8:ee:81: 35:71:36:6b:57:3f:9f:ee:63:1f:9c:65:d0:40:01: 6b:fb:3b:1f:87:7b:4e:9f:64:85:71:77:3e:c9:c9: 41:4a:03:b2:82:e4:53:3d:97:b6:fd:5f:90:6b:a8: 88:00:4b:12:a8:7a:af:33:bc:95:db:42:75:44:c9: 43:05:a0:fc:87:d2:63:d1:6e:dd:57:42:70:a3:e4: d3:41:26:8b:1a:1f:09:e1:82:2b:0d:53:79:c5:62: 6a:55:99:a1:e3:b9:3c:41:67:b4:63:fe:1d:b6:05: ec:66:6d:7d:fc:04:17:c1:43:c2:13:fd:e8:1d:32: b0:8d:20:40:cb:f8:b8:09:2c:69:28:65:50:b9:45: 63:bf:a0:36:6c:8c:36:9f:49:6b:74:13:87:9a:c2: 87:b8:2f:a0:61:bc:e5:41:86:23:86:7d:0c:a6:39: 20:dc:bd:4d:2b:8e:74:84:e8:28:be:2a:2c:f9:70: c2:08:55:d1:18:91:0f:36:13:a3:02:81:e6:ec:a6: f7:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:2C:4E:5F:44:97:1F:78:88:61:66:38:59:C2:DC:0A:BC:35:46:76 X509v3 Authority Key Identifier: keyid:DE:86:E6:5E:EA:1E:0B:30:E4:FD:8D:92:45:87:ED:F5:72:3D:50:7D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E00A5/A6483A3C7ABB11EF9379AE52C4F9AE02/3obmXuoeCzDk_Y2SRYft9XI9UH0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3obmXuoeCzDk_Y2SRYft9XI9UH0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E00A5/A6483A3C7ABB11EF9379AE52C4F9AE02/3obmXuoeCzDk_Y2SRYft9XI9UH0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 39:d7:56:a0:3e:ca:3c:16:f3:d1:1b:eb:36:b2:6d:68:d7:96: 66:8e:66:22:4b:3f:f9:6f:77:8e:6b:90:3c:e3:9d:ec:e8:3f: 73:67:0e:9d:55:a3:58:a5:28:bb:75:69:ca:21:ec:27:1e:96: fe:38:58:4f:a5:9d:07:e7:5f:e2:76:4b:8b:53:e1:96:38:1d: 90:50:b7:a4:59:92:62:42:95:65:d6:5b:f0:5a:0b:c0:58:2c: ab:3b:96:b6:3e:9e:bc:05:70:ca:7b:ec:17:e1:5c:47:a7:7d: f9:30:a6:dc:00:a7:d1:ee:43:d4:1f:2a:f7:4e:d9:37:11:9e: 37:bf:d4:38:ca:57:ec:9b:d1:1c:18:e8:46:72:c2:1a:e2:74: 56:26:ce:5a:15:e6:48:ca:00:b8:c9:f8:d9:6c:37:c8:cf:16: 89:41:15:b6:7a:59:1e:44:89:51:6d:d7:87:7f:7e:19:41:fb: a7:8d:27:e3:d8:3e:cd:23:94:13:59:0c:50:dc:f3:5f:ef:54: 2c:e5:b0:0d:c6:c7:12:36:88:00:63:b2:3c:a9:08:9c:c5:cf: 17:eb:5b:ee:6f:9d:9d:02:8b:ff:37:61:e4:b7:8d:a4:de:db: df:50:dd:c6:d4:18:bd:fa:25:bd:55:88:fb:5a:ca:d7:e2:e4: 14:d4:4a:f1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICANIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTAwQTUxMTAvBgNVBAUTKERFODZFNjVFRUExRTBCMzBFNEZEOEQ5MjQ1ODdFREY1 NzIzRDUwN0QwHhcNMjUxMTAzMDU0MDIyWhcNMjUxMTEwMDU0MDIyWjAYMRYwFAYD VQQDEw02OTA4NDA0Ni04YzUxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqeGelIXfwueS6CfdTDsHGN/GDe+rNZLlcFPcoxLoyNO39vfHX//AhTysveKA vaf4H90zNbOmKMfI7oE1cTZrVz+f7mMfnGXQQAFr+zsfh3tOn2SFcXc+yclBSgOy guRTPZe2/V+Qa6iIAEsSqHqvM7yV20J1RMlDBaD8h9Jj0W7dV0Jwo+TTQSaLGh8J 4YIrDVN5xWJqVZmh47k8QWe0Y/4dtgXsZm19/AQXwUPCE/3oHTKwjSBAy/i4CSxp KGVQuUVjv6A2bIw2n0lrdBOHmsKHuC+gYbzlQYYjhn0Mpjkg3L1NK450hOgovios +XDCCFXRGJEPNhOjAoHm7Kb36wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBIsTl9E lx94iGFmOFnC3Aq8NUZ2MB8GA1UdIwQYMBaAFN6G5l7qHgsw5P2NkkWH7fVyPVB9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMDBBNS9BNjQ4M0EzQzdB QkIxMUVGOTM3OUFFNTJDNEY5QUUwMi8zb2JtWHVvZUN6RGtfWTJTUllmdDlYSTlV SDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzNvYm1YdW9lQ3pEa19ZMlNSWWZ0OVhJOVVIMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MDBBNS9BNjQ4M0EzQzdBQkIxMUVGOTM3OUFFNTJDNEY5QUUwMi8zb2JtWHVvZUN6 RGtfWTJTUllmdDlYSTlVSDAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA511agPso8FvPRG+s2sm1o15ZmjmYiSz/5b3eOa5A8453s6D9zZw6d VaNYpSi7dWnKIewnHpb+OFhPpZ0H51/idkuLU+GWOB2QULekWZJiQpVl1lvwWgvA WCyrO5a2Pp68BXDKe+wX4VxHp335MKbcAKfR7kPUHyr3Ttk3EZ43v9Q4ylfsm9Ec GOhGcsIa4nRWJs5aFeZIygC4yfjZbDfIzxaJQRW2elkeRIlRbdeHf34ZQfunjSfj 2D7NI5QTWQxQ3PNf71Qs5bANxscSNogAY7I8qQicxc8X61vub52dAov/N2Hkt42k 3tvfUN3G1Bi9+iW9VYj7WsrX4uQU1Erx -----END CERTIFICATE-----Generated at Mon Nov 3 18:06:59 2025 by rpki-client