$ rpki-client -vvf rpki.apnic.net/member_repository/A91EAB64/9B44EB748F2911ECB6A6996CC4F9AE02/3UAamS3TKfk027INWAtMpyeQ37E.mft File: 3UAamS3TKfk027INWAtMpyeQ37E.mft (raw, json) Hash identifier: wLX77wgrW0a1nb00cfkFK6d1IoS/snHYrDnUNB13Oes= Subject key identifier: A5:95:1C:C6:BC:0E:24:3C:F7:6C:AD:13:F5:8C:F6:9B:D7:EA:53:96 Authority key identifier: DD:40:1A:99:2D:D3:29:F9:34:DB:B2:0D:58:0B:4C:A7:27:90:DF:B1 Certificate issuer: /CN=A91EAB64/serialNumber=DD401A992DD329F934DBB20D580B4CA72790DFB1 Certificate serial: 040E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3UAamS3TKfk027INWAtMpyeQ37E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EAB64/9B44EB748F2911ECB6A6996CC4F9AE02/3UAamS3TKfk027INWAtMpyeQ37E.mft Manifest number: 05E8 Signing time: Mon 03 Nov 2025 00:23:07 +0000 Manifest this update: Mon 03 Nov 2025 00:23:07 +0000 Manifest next update: Mon 10 Nov 2025 00:23:07 +0000 Files and hashes: 1: 3UAamS3TKfk027INWAtMpyeQ37E.crl (hash: y8PRU3L5BZ4dz5EnPiVlllJjh4St+6Ipgf3e4fT8Rpw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EAB64/9B44EB748F2911ECB6A6996CC4F9AE02/3UAamS3TKfk027INWAtMpyeQ37E.crl rsync://rpki.apnic.net/member_repository/A91EAB64/9B44EB748F2911ECB6A6996CC4F9AE02/3UAamS3TKfk027INWAtMpyeQ37E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3UAamS3TKfk027INWAtMpyeQ37E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 00:23:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1038 (0x40e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EAB64, serialNumber=DD401A992DD329F934DBB20D580B4CA72790DFB1 Validity Not Before: Nov 3 00:23:07 2025 GMT Not After : Nov 10 00:23:07 2025 GMT Subject: CN=6907f5eb-7432 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:6d:cb:3e:09:5a:de:6c:5f:23:c7:21:f1:de: ea:f3:c3:52:6f:fe:53:9c:2f:11:51:d3:f6:ce:6d: bb:14:d7:3c:fc:dc:27:52:60:43:0c:55:10:a5:61: 00:2c:4a:f7:6f:d9:62:56:23:51:2e:6b:a3:55:e1: f7:3b:89:30:5f:f7:cb:28:0d:60:cc:20:42:89:48: fc:ca:d2:84:58:7a:ab:79:3b:ed:98:4f:8a:98:19: 82:ac:80:fb:ee:f2:7e:62:e9:14:e0:56:2d:87:a6: 25:e8:d8:6c:74:bd:8f:88:2e:59:87:19:0f:d1:03: a1:10:29:61:33:9a:5f:e4:35:41:0e:1b:e3:7a:bb: d9:67:a2:0a:f1:ac:94:60:07:af:91:60:b5:e0:2c: dd:32:36:88:ba:3b:b2:4f:a5:c3:bf:03:88:3a:a7: a7:7d:20:3a:6c:fa:e8:ba:a3:a4:16:53:04:b3:0c: b4:a7:4e:12:da:3c:48:63:7e:4a:81:30:c4:f9:13: 43:30:30:b1:bb:1d:9d:aa:5d:a8:a7:2c:af:87:30: fe:16:9e:7b:cd:28:23:c0:6c:34:ee:bf:f4:44:c9: bc:1f:6c:d7:20:7f:25:b5:86:32:22:12:b0:f7:2c: ae:0a:03:d7:5b:27:3b:42:bd:c7:6a:31:39:d9:d0: f1:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:95:1C:C6:BC:0E:24:3C:F7:6C:AD:13:F5:8C:F6:9B:D7:EA:53:96 X509v3 Authority Key Identifier: keyid:DD:40:1A:99:2D:D3:29:F9:34:DB:B2:0D:58:0B:4C:A7:27:90:DF:B1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EAB64/9B44EB748F2911ECB6A6996CC4F9AE02/3UAamS3TKfk027INWAtMpyeQ37E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3UAamS3TKfk027INWAtMpyeQ37E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EAB64/9B44EB748F2911ECB6A6996CC4F9AE02/3UAamS3TKfk027INWAtMpyeQ37E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 04:46:cc:3a:b1:bc:96:7d:d1:01:76:a4:a9:c3:e9:ed:85:18: 15:9b:f6:62:b2:e0:4f:18:ec:d0:30:36:78:4b:a0:70:2d:c6: dd:cb:2d:34:4d:e7:ac:18:fe:d3:8e:2c:60:0d:82:0e:77:7e: 76:d1:88:9e:fc:1b:34:8c:32:88:dd:b7:1b:bf:95:20:89:9e: 3e:ce:d1:66:87:c9:de:80:b3:a3:02:ad:e1:59:84:50:9d:3c: 3a:cb:28:75:b2:6e:e7:2a:18:78:b4:29:c9:4d:42:b4:58:fe: 62:8f:ed:9e:5c:98:4f:5b:27:9b:74:0f:92:9b:a2:b3:d1:e4: 56:92:49:95:fc:af:15:c0:d7:7a:4c:f7:ab:12:58:32:d7:1a: 2e:51:06:d3:d1:e8:21:18:92:f7:3d:d8:b8:ab:6d:8f:c9:e5: e0:ca:26:b9:a3:aa:2e:5f:b0:69:56:80:9b:be:07:f1:1c:90: 18:79:41:fe:d7:18:84:8a:f2:80:d8:09:d3:b9:b1:8b:9a:35: fd:02:4a:a0:fe:de:aa:6e:ca:8b:36:e9:03:17:12:ab:3e:54: bf:b1:04:38:43:f1:62:08:7b:18:c2:5e:75:26:ef:16:ff:78: 98:45:11:2e:e8:b4:3e:6f:0e:7c:cd:92:e7:44:84:0b:c5:70: 17:af:5e:e7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBA4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUFCNjQxMTAvBgNVBAUTKERENDAxQTk5MkREMzI5RjkzNERCQjIwRDU4MEI0Q0E3 Mjc5MERGQjEwHhcNMjUxMTAzMDAyMzA3WhcNMjUxMTEwMDAyMzA3WjAYMRYwFAYD VQQDEw02OTA3ZjVlYi03NDMyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAo23LPgla3mxfI8ch8d7q88NSb/5TnC8RUdP2zm27FNc8/NwnUmBDDFUQpWEA LEr3b9liViNRLmujVeH3O4kwX/fLKA1gzCBCiUj8ytKEWHqreTvtmE+KmBmCrID7 7vJ+YukU4FYth6Yl6NhsdL2PiC5ZhxkP0QOhEClhM5pf5DVBDhvjervZZ6IK8ayU YAevkWC14CzdMjaIujuyT6XDvwOIOqenfSA6bProuqOkFlMEswy0p04S2jxIY35K gTDE+RNDMDCxux2dql2opyyvhzD+Fp57zSgjwGw07r/0RMm8H2zXIH8ltYYyIhKw 9yyuCgPXWyc7Qr3HajE52dDxqwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKWVHMa8 DiQ892ytE/WM9pvX6lOWMB8GA1UdIwQYMBaAFN1AGpkt0yn5NNuyDVgLTKcnkN+x MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQUI2NC85QjQ0RUI3NDhG MjkxMUVDQjZBNjk5NkNDNEY5QUUwMi8zVUFhbVMzVEtmazAyN0lOV0F0TXB5ZVEz N0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzNVQWFtUzNUS2ZrMDI3SU5XQXRNcHllUTM3RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF QUI2NC85QjQ0RUI3NDhGMjkxMUVDQjZBNjk5NkNDNEY5QUUwMi8zVUFhbVMzVEtm azAyN0lOV0F0TXB5ZVEzN0UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAERsw6sbyWfdEBdqSpw+nthRgVm/ZisuBPGOzQMDZ4S6BwLcbdyy00 TeesGP7TjixgDYIOd3520Yie/Bs0jDKI3bcbv5UgiZ4+ztFmh8negLOjAq3hWYRQ nTw6yyh1sm7nKhh4tCnJTUK0WP5ij+2eXJhPWyebdA+Sm6Kz0eRWkkmV/K8VwNd6 TPerElgy1xouUQbT0eghGJL3Pdi4q22PyeXgyia5o6ouX7BpVoCbvgfxHJAYeUH+ 1xiEivKA2AnTubGLmjX9Akqg/t6qbsqLNukDFxKrPlS/sQQ4Q/FiCHsYwl51Ju8W /3iYRREu6LQ+bw58zZLnRIQLxXAXr17n -----END CERTIFICATE-----Generated at Mon Nov 3 18:14:34 2025 by rpki-client