$ rpki-client -vvf rpki.apnic.net/member_repository/A91E9F31/092D2516BE6211EE8C37CB3BC4F9AE02/3NoGnj7_iVbAFXKBanAjUZXwZyU.mft File: 3NoGnj7_iVbAFXKBanAjUZXwZyU.mft (raw, json) Hash identifier: sAgw3MHbY4a/Ru66fuJNtUE2MeyL8XpRv8pP6gy4fEA= Subject key identifier: 76:FD:8C:03:35:D6:6B:6E:C0:0C:96:47:98:17:AA:13:3B:54:76:34 Authority key identifier: DC:DA:06:9E:3E:FF:89:56:C0:15:72:81:6A:70:23:51:95:F0:67:25 Certificate issuer: /CN=A91E9F31/serialNumber=DCDA069E3EFF8956C01572816A70235195F06725 Certificate serial: 0152 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3NoGnj7_iVbAFXKBanAjUZXwZyU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E9F31/092D2516BE6211EE8C37CB3BC4F9AE02/3NoGnj7_iVbAFXKBanAjUZXwZyU.mft Manifest number: 014F Signing time: Wed 05 Nov 2025 04:25:40 +0000 Manifest this update: Wed 05 Nov 2025 04:25:40 +0000 Manifest next update: Wed 12 Nov 2025 04:25:39 +0000 Files and hashes: 1: 3NoGnj7_iVbAFXKBanAjUZXwZyU.crl (hash: 0dmIZestfE/kJb/MT+DOGCfkz3mBJWpCVK2H5MwaxCo=) 2: 37D72D7CC17C11EE8391A218C4F9AE02.roa (hash: coWHQK+5srkvJCmtuWOSC8KHDobmPnetCsZNTnS3ZsU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E9F31/092D2516BE6211EE8C37CB3BC4F9AE02/3NoGnj7_iVbAFXKBanAjUZXwZyU.crl rsync://rpki.apnic.net/member_repository/A91E9F31/092D2516BE6211EE8C37CB3BC4F9AE02/3NoGnj7_iVbAFXKBanAjUZXwZyU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3NoGnj7_iVbAFXKBanAjUZXwZyU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 04:25:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 338 (0x152) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E9F31, serialNumber=DCDA069E3EFF8956C01572816A70235195F06725 Validity Not Before: Nov 5 04:25:40 2025 GMT Not After : Nov 12 04:25:39 2025 GMT Subject: CN=690ad1c4-9bb0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:df:64:23:48:9e:d4:1c:7a:0a:a4:59:6c:d0: 2e:ae:5b:f7:27:ce:ce:46:82:03:7c:54:20:8f:52: 88:10:30:85:d0:47:ea:86:87:fe:8f:61:0f:c1:95: 41:ac:7b:5e:8a:e7:13:8e:14:95:a8:08:26:86:95: c2:48:f4:b3:98:ff:d3:c0:3f:67:97:e6:f2:07:41: 1f:44:65:83:f9:91:a6:10:b9:24:4a:8f:10:34:7c: c3:b2:ff:ae:04:4a:7d:07:cf:04:57:0b:d5:0b:ab: 5d:dd:af:fc:28:af:40:17:e8:1b:c8:ef:1a:6a:da: f0:f9:18:91:81:9e:4f:f4:18:12:d3:e2:45:2d:fc: f1:64:46:5f:70:d6:ca:aa:08:57:b2:30:d6:e8:8b: 30:02:c7:39:06:98:15:f3:76:d6:46:e2:70:2e:0a: 28:a0:47:5f:d8:3f:11:ab:6f:c8:17:fe:07:60:b4: 1b:2b:b0:cc:95:8d:2a:02:ae:e7:21:50:dd:83:53: 3e:eb:da:4f:14:bd:88:2e:0c:eb:81:a7:0d:50:bc: d3:f9:64:45:f9:01:96:80:37:1f:8b:b5:95:42:b2: cb:a6:d0:b3:bb:4a:95:0c:04:39:5d:da:42:06:d3: 22:0d:df:09:73:d4:a0:49:d4:3a:9b:56:8b:8b:15: 99:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:FD:8C:03:35:D6:6B:6E:C0:0C:96:47:98:17:AA:13:3B:54:76:34 X509v3 Authority Key Identifier: keyid:DC:DA:06:9E:3E:FF:89:56:C0:15:72:81:6A:70:23:51:95:F0:67:25 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E9F31/092D2516BE6211EE8C37CB3BC4F9AE02/3NoGnj7_iVbAFXKBanAjUZXwZyU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3NoGnj7_iVbAFXKBanAjUZXwZyU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E9F31/092D2516BE6211EE8C37CB3BC4F9AE02/3NoGnj7_iVbAFXKBanAjUZXwZyU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9a:75:f4:ac:0e:32:39:9b:76:b0:c8:9b:4a:31:31:1b:ba:50: d2:eb:99:2d:f3:62:1f:37:ec:cd:fb:f6:48:8b:d6:ce:19:ba: 39:5d:c6:0a:e9:79:f1:65:de:c0:5e:b2:56:39:e4:d1:69:e7: de:ad:3f:43:6e:5f:b4:c3:89:9b:52:88:0e:c8:1d:8b:08:11: 18:07:e8:34:ce:d2:9b:d3:56:fc:34:4c:d2:6c:08:7a:62:c6: 40:1a:08:c6:56:8f:8e:1c:45:4d:a6:28:e1:b2:4e:98:4a:0e: 2f:a4:f2:0c:e0:9c:57:db:97:51:12:eb:aa:f8:fb:f9:99:14: 08:9e:98:72:75:e4:97:8d:a9:ae:9f:f4:45:a4:94:a8:2a:34: de:82:cf:46:ef:ac:db:9b:0c:ea:77:fc:84:a1:83:f7:9f:50: 9b:20:eb:94:3d:fb:ea:72:86:54:bc:b4:b5:f3:31:b0:a6:ce: 64:89:ee:4c:bb:2c:b2:79:37:2a:b1:25:37:5e:b3:84:f4:78: f2:08:c0:9f:e9:4d:c1:04:63:86:ee:3d:14:af:7e:f1:35:e6: 45:e7:93:f5:a8:eb:68:43:3d:e7:f9:17:5f:a6:88:6b:7f:d3: f8:61:57:c1:44:44:2b:31:d1:45:e4:f0:77:b3:65:d1:6a:88: 89:b4:fa:3c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAVIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTlGMzExMTAvBgNVBAUTKERDREEwNjlFM0VGRjg5NTZDMDE1NzI4MTZBNzAyMzUx OTVGMDY3MjUwHhcNMjUxMTA1MDQyNTQwWhcNMjUxMTEyMDQyNTM5WjAYMRYwFAYD VQQDEw02OTBhZDFjNC05YmIwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyN9kI0ie1Bx6CqRZbNAurlv3J87ORoIDfFQgj1KIEDCF0Efqhof+j2EPwZVB rHteiucTjhSVqAgmhpXCSPSzmP/TwD9nl+byB0EfRGWD+ZGmELkkSo8QNHzDsv+u BEp9B88EVwvVC6td3a/8KK9AF+gbyO8aatrw+RiRgZ5P9BgS0+JFLfzxZEZfcNbK qghXsjDW6IswAsc5BpgV83bWRuJwLgoooEdf2D8Rq2/IF/4HYLQbK7DMlY0qAq7n IVDdg1M+69pPFL2ILgzrgacNULzT+WRF+QGWgDcfi7WVQrLLptCzu0qVDAQ5XdpC BtMiDd8Jc9SgSdQ6m1aLixWZ/QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHb9jAM1 1mtuwAyWR5gXqhM7VHY0MB8GA1UdIwQYMBaAFNzaBp4+/4lWwBVygWpwI1GV8Gcl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFOUYzMS8wOTJEMjUxNkJF NjIxMUVFOEMzN0NCM0JDNEY5QUUwMi8zTm9Hbmo3X2lWYkFGWEtCYW5BalVaWHda eVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzNOb0duajdfaVZiQUZYS0JhbkFqVVpYd1p5VS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF OUYzMS8wOTJEMjUxNkJFNjIxMUVFOEMzN0NCM0JDNEY5QUUwMi8zTm9Hbmo3X2lW YkFGWEtCYW5BalVaWHdaeVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCadfSsDjI5m3awyJtKMTEbulDS65kt82IfN+zN+/ZIi9bOGbo5XcYK 6XnxZd7AXrJWOeTRaeferT9Dbl+0w4mbUogOyB2LCBEYB+g0ztKb01b8NEzSbAh6 YsZAGgjGVo+OHEVNpijhsk6YSg4vpPIM4JxX25dREuuq+Pv5mRQInphydeSXjamu n/RFpJSoKjTegs9G76zbmwzqd/yEoYP3n1CbIOuUPfvqcoZUvLS18zGwps5kie5M uyyyeTcqsSU3XrOE9HjyCMCf6U3BBGOG7j0Ur37xNeZF55P1qOtoQz3n+Rdfpohr f9P4YVfBREQrMdFF5PB3s2XRaoiJtPo8 -----END CERTIFICATE-----Generated at Wed Nov 5 12:11:06 2025 by rpki-client