$ rpki-client -vvf rpki.apnic.net/member_repository/A91F39A9/525486B8566211ECB8EC7331C4F9AE02/u3-5V71tGEoIkjFpTPg4nbaI_lM.mft File: u3-5V71tGEoIkjFpTPg4nbaI_lM.mft (raw, json) Hash identifier: TDAhv+e19TFDEWZpyjOtKLs67SA9BP666sRG1eQncs8= Subject key identifier: 34:65:59:AA:29:01:30:98:AE:DC:5C:42:01:BA:16:D7:AF:7B:E7:35 Authority key identifier: BB:7F:B9:57:BD:6D:18:4A:08:92:31:69:4C:F8:38:9D:B6:88:FE:53 Certificate issuer: /CN=A91F39A9/serialNumber=BB7FB957BD6D184A089231694CF8389DB688FE53 Certificate serial: 04A8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u3-5V71tGEoIkjFpTPg4nbaI_lM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F39A9/525486B8566211ECB8EC7331C4F9AE02/u3-5V71tGEoIkjFpTPg4nbaI_lM.mft Manifest number: 04A2 Signing time: Wed 05 Nov 2025 00:04:15 +0000 Manifest this update: Wed 05 Nov 2025 00:04:14 +0000 Manifest next update: Wed 12 Nov 2025 00:04:14 +0000 Files and hashes: 1: u3-5V71tGEoIkjFpTPg4nbaI_lM.crl (hash: GxDcBHAY/+k/WoT8TkwgSo46GBg+0m0al6D+yGj1wZA=) 2: 12702794577711ECB7FD0C6FC4F9AE02.roa (hash: 7OgpQvkBU6+tUiHR/xeuBjYzt4Evz4MreUzB4Ql4bWc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F39A9/525486B8566211ECB8EC7331C4F9AE02/u3-5V71tGEoIkjFpTPg4nbaI_lM.crl rsync://rpki.apnic.net/member_repository/A91F39A9/525486B8566211ECB8EC7331C4F9AE02/u3-5V71tGEoIkjFpTPg4nbaI_lM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u3-5V71tGEoIkjFpTPg4nbaI_lM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 00:04:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1192 (0x4a8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F39A9, serialNumber=BB7FB957BD6D184A089231694CF8389DB688FE53 Validity Not Before: Nov 5 00:04:14 2025 GMT Not After : Nov 12 00:04:14 2025 GMT Subject: CN=690a947e-9c42 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:7f:96:e8:5d:63:a4:d7:f1:fa:0b:76:d9:02: 69:ee:77:fc:dc:7f:29:b8:bf:52:ba:92:d3:8c:df: 38:bb:23:4a:43:fb:76:1d:93:d2:bf:3a:2c:2e:82: 2a:bb:8c:38:8b:cf:ce:2c:ae:cc:95:d4:be:0c:d5: f8:f1:f2:69:64:04:52:b3:a3:f2:38:0c:63:67:4c: ff:dd:06:83:fa:cd:70:41:2f:b8:78:79:9d:ca:85: ac:2b:4f:58:cc:d4:48:da:60:73:d0:30:d9:cc:21: ee:8a:d0:12:8f:0f:c4:de:06:f4:18:e0:2b:e4:51: 4a:98:9f:43:2f:69:81:59:74:30:ee:5c:1d:5c:5a: c5:bb:e4:03:66:97:d6:72:7a:03:dc:91:9f:14:81: 02:04:e4:e2:02:18:14:70:6b:f0:12:d5:43:cf:9c: d6:e6:fb:03:cb:ef:97:3c:67:2d:1f:9b:f3:2f:f6: fe:b2:2d:e1:2a:fe:d6:15:91:4c:94:9b:c4:a6:27: 12:f5:b8:44:87:9b:94:90:04:4e:35:60:0c:97:c4: 9f:0b:5a:65:f4:01:ae:69:bf:d3:4c:6c:f2:bc:71: e6:9d:89:57:24:a4:51:55:92:48:98:cd:e2:6f:a3: 64:f1:14:67:00:40:ad:8d:47:4e:41:0b:02:79:4a: 84:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:65:59:AA:29:01:30:98:AE:DC:5C:42:01:BA:16:D7:AF:7B:E7:35 X509v3 Authority Key Identifier: keyid:BB:7F:B9:57:BD:6D:18:4A:08:92:31:69:4C:F8:38:9D:B6:88:FE:53 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F39A9/525486B8566211ECB8EC7331C4F9AE02/u3-5V71tGEoIkjFpTPg4nbaI_lM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u3-5V71tGEoIkjFpTPg4nbaI_lM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F39A9/525486B8566211ECB8EC7331C4F9AE02/u3-5V71tGEoIkjFpTPg4nbaI_lM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0f:cb:c3:68:a4:64:1e:03:f0:e3:e2:1c:0c:ce:9a:da:28:e9: 77:8f:fe:51:d7:f7:c2:a1:20:f8:80:0b:d7:84:65:72:8a:dc: c5:46:35:e2:69:39:be:85:a9:6a:0e:31:88:e8:bc:cc:2c:21: 4b:3b:8d:05:f0:e4:f4:55:04:4e:d2:85:90:b3:ce:17:84:31: d6:1d:ff:78:c2:b7:ba:64:3a:d4:71:e0:86:63:d7:09:c8:f0: 7e:39:2b:25:69:da:87:8e:f7:b1:a2:85:e3:36:91:17:f2:f9: 6d:50:26:c6:a4:41:ff:79:28:65:6b:e6:77:6a:70:84:c1:ff: 63:aa:a8:a5:4f:93:3e:dd:aa:84:36:b6:ea:bd:51:9c:23:a4: ad:48:e2:90:6f:a7:29:b0:3b:eb:26:3c:06:17:69:c8:d6:72: 84:05:3c:3f:de:5e:eb:62:51:14:e2:36:53:de:c6:a7:27:f2: f1:fa:ac:fd:22:1d:11:ca:73:35:f7:38:2f:a1:fb:52:86:59: 51:7c:d9:22:01:0e:a3:4a:e6:93:4e:9f:28:2f:db:b6:7e:98: 64:dd:0c:75:23:86:b9:c9:87:44:66:81:24:e3:fd:7f:19:51: cc:a1:29:47:1b:10:90:47:5a:b6:56:96:f2:73:b5:e6:2a:dd: ae:80:63:59 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBKgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjM5QTkxMTAvBgNVBAUTKEJCN0ZCOTU3QkQ2RDE4NEEwODkyMzE2OTRDRjgzODlE QjY4OEZFNTMwHhcNMjUxMTA1MDAwNDE0WhcNMjUxMTEyMDAwNDE0WjAYMRYwFAYD VQQDEw02OTBhOTQ3ZS05YzQyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAkX+W6F1jpNfx+gt22QJp7nf83H8puL9SupLTjN84uyNKQ/t2HZPSvzosLoIq u4w4i8/OLK7MldS+DNX48fJpZARSs6PyOAxjZ0z/3QaD+s1wQS+4eHmdyoWsK09Y zNRI2mBz0DDZzCHuitASjw/E3gb0GOAr5FFKmJ9DL2mBWXQw7lwdXFrFu+QDZpfW cnoD3JGfFIECBOTiAhgUcGvwEtVDz5zW5vsDy++XPGctH5vzL/b+si3hKv7WFZFM lJvEpicS9bhEh5uUkARONWAMl8SfC1pl9AGuab/TTGzyvHHmnYlXJKRRVZJImM3i b6Nk8RRnAECtjUdOQQsCeUqE7QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDRlWaop ATCYrtxcQgG6Fteve+c1MB8GA1UdIwQYMBaAFLt/uVe9bRhKCJIxaUz4OJ22iP5T MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMzlBOS81MjU0ODZCODU2 NjIxMUVDQjhFQzczMzFDNEY5QUUwMi91My01VjcxdEdFb0lrakZwVFBnNG5iYUlf bE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3UzLTVWNzF0R0VvSWtqRnBUUGc0bmJhSV9sTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG MzlBOS81MjU0ODZCODU2NjIxMUVDQjhFQzczMzFDNEY5QUUwMi91My01VjcxdEdF b0lrakZwVFBnNG5iYUlfbE0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAPy8NopGQeA/Dj4hwMzpraKOl3j/5R1/fCoSD4gAvXhGVyitzFRjXi aTm+halqDjGI6LzMLCFLO40F8OT0VQRO0oWQs84XhDHWHf94wre6ZDrUceCGY9cJ yPB+OSsladqHjvexooXjNpEX8vltUCbGpEH/eShla+Z3anCEwf9jqqilT5M+3aqE NrbqvVGcI6StSOKQb6cpsDvrJjwGF2nI1nKEBTw/3l7rYlEU4jZT3sanJ/Lx+qz9 Ih0RynM19zgvoftShllRfNkiAQ6jSuaTTp8oL9u2fphk3Qx1I4a5yYdEZoEk4/1/ GVHMoSlHGxCQR1q2Vpbyc7XmKt2ugGNZ -----END CERTIFICATE-----Generated at Wed Nov 5 05:27:06 2025 by rpki-client