$ rpki-client -vvf rpki.apnic.net/member_repository/A91E46A5/0231C154006B11EA97C1BD5FC4F9AE02/su3iAzROnKc1AcVRQvmugWCeiYc.mft File: su3iAzROnKc1AcVRQvmugWCeiYc.mft (raw, json) Hash identifier: rfG+6l2hFeMuuiyjBk4T+N7PnwIzRdamg3GWtlDhyYc= Subject key identifier: 97:27:96:59:E7:5C:CF:3E:5C:FB:FA:0A:8D:E4:E2:39:85:EF:04:B1 Authority key identifier: B2:ED:E2:03:34:4E:9C:A7:35:01:C5:51:42:F9:AE:81:60:9E:89:87 Certificate issuer: /CN=A91E46A5/serialNumber=B2EDE203344E9CA73501C55142F9AE81609E8987 Certificate serial: 0CC2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/su3iAzROnKc1AcVRQvmugWCeiYc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E46A5/0231C154006B11EA97C1BD5FC4F9AE02/su3iAzROnKc1AcVRQvmugWCeiYc.mft Manifest number: 0CB5 Signing time: Sun 02 Nov 2025 18:13:35 +0000 Manifest this update: Sun 02 Nov 2025 18:13:35 +0000 Manifest next update: Sun 09 Nov 2025 18:13:35 +0000 Files and hashes: 1: su3iAzROnKc1AcVRQvmugWCeiYc.crl (hash: 4pdc29KhsHmwvCl7ADr3HFu89d4Z88F/7cBsgu36E2k=) 2: CE094B08006B11EAA2719060C4F9AE02.roa (hash: 3at8OHhr3TWPa09hDLUXiFFjg44cS/0xW9KQOVKngqA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E46A5/0231C154006B11EA97C1BD5FC4F9AE02/su3iAzROnKc1AcVRQvmugWCeiYc.crl rsync://rpki.apnic.net/member_repository/A91E46A5/0231C154006B11EA97C1BD5FC4F9AE02/su3iAzROnKc1AcVRQvmugWCeiYc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/su3iAzROnKc1AcVRQvmugWCeiYc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 18:13:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3266 (0xcc2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E46A5, serialNumber=B2EDE203344E9CA73501C55142F9AE81609E8987 Validity Not Before: Nov 2 18:13:35 2025 GMT Not After : Nov 9 18:13:35 2025 GMT Subject: CN=69079f4f-919b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:ac:63:c9:98:d2:1c:5b:77:20:9e:a5:ad:7b: c6:52:24:50:7f:c3:26:e0:66:1f:56:3d:02:ea:11: dc:64:a0:95:c7:c4:84:db:fc:e4:80:34:9d:1c:65: dc:db:08:7d:64:6d:5e:b9:ed:15:1a:8d:57:50:f5: 0a:e3:18:51:93:20:b3:53:95:f8:50:ad:2b:e5:2d: 2d:07:7e:34:4f:ff:d9:3e:e9:15:9c:c5:2e:96:aa: be:60:67:6c:0a:a0:13:3f:eb:fa:8a:e5:78:72:26: e9:dd:5a:5d:a3:93:32:6c:3d:7a:4e:c1:2b:a6:b3: 79:65:70:4c:cb:ea:4c:4e:8d:37:ac:de:d7:69:81: 9d:de:35:73:8e:14:fd:07:8e:c7:c7:45:c0:21:d2: ca:cb:2b:af:28:81:37:cd:98:04:69:0a:b1:89:a1: 0b:4c:f3:e4:98:1c:25:87:fb:60:22:33:0f:50:61: 29:3e:73:92:13:cf:e4:fe:ca:ea:82:ea:35:a1:23: bf:de:66:b4:fc:64:e3:03:d6:4a:d8:4e:7f:7e:7b: 96:ca:15:16:08:c8:4d:9e:c4:21:46:2b:6d:bc:00: 04:2d:3a:45:c4:4c:07:8e:6d:72:28:d8:27:fd:a3: b4:a6:53:66:8a:81:76:2a:fb:da:ef:99:22:0a:16: df:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:27:96:59:E7:5C:CF:3E:5C:FB:FA:0A:8D:E4:E2:39:85:EF:04:B1 X509v3 Authority Key Identifier: keyid:B2:ED:E2:03:34:4E:9C:A7:35:01:C5:51:42:F9:AE:81:60:9E:89:87 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E46A5/0231C154006B11EA97C1BD5FC4F9AE02/su3iAzROnKc1AcVRQvmugWCeiYc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/su3iAzROnKc1AcVRQvmugWCeiYc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E46A5/0231C154006B11EA97C1BD5FC4F9AE02/su3iAzROnKc1AcVRQvmugWCeiYc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 37:62:ba:b0:eb:9d:73:7d:85:91:3e:19:8a:87:ac:aa:40:da: de:77:9c:ee:91:6e:ec:3d:84:51:d3:d8:68:60:59:07:79:15: aa:53:d5:f0:48:b9:e6:a2:d9:44:d8:3f:2e:27:ef:ed:c1:12: 08:c2:fc:89:88:38:9e:37:18:36:3e:28:11:05:b2:e0:54:cb: 48:52:d0:a3:8e:d1:ff:aa:7c:86:39:d0:62:be:fa:c5:3d:80: 96:09:59:a5:dd:14:76:64:5d:7a:7c:c0:d9:68:32:95:64:51: a3:ae:79:98:be:5f:91:a4:51:d7:71:81:25:09:32:ad:bb:a8: fd:37:f9:55:61:c7:51:97:1d:3b:64:05:58:52:a8:24:b2:7e: a3:f0:ef:d3:e7:6e:c1:be:79:7e:3e:f3:55:4b:ec:10:45:7b: 9a:41:20:25:b3:c9:50:27:bf:46:b4:4d:9d:10:9b:a6:52:da: ac:60:8f:01:fc:b4:55:cd:c6:a5:55:fa:63:32:ba:b4:bc:be: a8:5d:dc:1e:a4:de:2e:cf:a7:53:07:5e:a6:e5:13:64:74:df: 13:5a:bc:46:06:12:69:b2:b2:12:97:fa:61:66:54:00:36:fd: a0:e2:e4:49:91:fc:97:9d:0e:0c:a1:30:95:13:37:bb:ce:c4: b7:b0:40:5c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDMIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTQ2QTUxMTAvBgNVBAUTKEIyRURFMjAzMzQ0RTlDQTczNTAxQzU1MTQyRjlBRTgx NjA5RTg5ODcwHhcNMjUxMTAyMTgxMzM1WhcNMjUxMTA5MTgxMzM1WjAYMRYwFAYD VQQDEw02OTA3OWY0Zi05MTliMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyaxjyZjSHFt3IJ6lrXvGUiRQf8Mm4GYfVj0C6hHcZKCVx8SE2/zkgDSdHGXc 2wh9ZG1eue0VGo1XUPUK4xhRkyCzU5X4UK0r5S0tB340T//ZPukVnMUulqq+YGds CqATP+v6iuV4cibp3Vpdo5MybD16TsErprN5ZXBMy+pMTo03rN7XaYGd3jVzjhT9 B47Hx0XAIdLKyyuvKIE3zZgEaQqxiaELTPPkmBwlh/tgIjMPUGEpPnOSE8/k/srq guo1oSO/3ma0/GTjA9ZK2E5/fnuWyhUWCMhNnsQhRittvAAELTpFxEwHjm1yKNgn /aO0plNmioF2Kvva75kiChbfKQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJcnllnn XM8+XPv6Co3k4jmF7wSxMB8GA1UdIwQYMBaAFLLt4gM0TpynNQHFUUL5roFgnomH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNDZBNS8wMjMxQzE1NDAw NkIxMUVBOTdDMUJENUZDNEY5QUUwMi9zdTNpQXpST25LYzFBY1ZSUXZtdWdXQ2Vp WWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3N1M2lBelJPbktjMUFjVlJRdm11Z1dDZWlZYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NDZBNS8wMjMxQzE1NDAwNkIxMUVBOTdDMUJENUZDNEY5QUUwMi9zdTNpQXpST25L YzFBY1ZSUXZtdWdXQ2VpWWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA3Yrqw651zfYWRPhmKh6yqQNred5zukW7sPYRR09hoYFkHeRWqU9Xw SLnmotlE2D8uJ+/twRIIwvyJiDieNxg2PigRBbLgVMtIUtCjjtH/qnyGOdBivvrF PYCWCVml3RR2ZF16fMDZaDKVZFGjrnmYvl+RpFHXcYElCTKtu6j9N/lVYcdRlx07 ZAVYUqgksn6j8O/T527Bvnl+PvNVS+wQRXuaQSAls8lQJ79GtE2dEJumUtqsYI8B /LRVzcalVfpjMrq0vL6oXdwepN4uz6dTB16m5RNkdN8TWrxGBhJpsrISl/phZlQA Nv2g4uRJkfyXnQ4MoTCVEze7zsS3sEBc -----END CERTIFICATE-----Generated at Mon Nov 3 18:08:08 2025 by rpki-client