$ rpki-client -vvf rpki.apnic.net/member_repository/A91F4D54/D2877DB6E9EB11EFA4542B18C4F9AE02/r3YSV94snaXzPnHGQZ4meoYt-2I.mft File: r3YSV94snaXzPnHGQZ4meoYt-2I.mft (raw, json) Hash identifier: X+g3557QdcuVXItuczs1301G2InyRAG5Oixz7GNamZ0= Subject key identifier: 22:55:9E:FE:F9:F0:5A:23:0E:02:B8:D1:E6:22:8C:30:F3:B2:F8:D1 Authority key identifier: AF:76:12:57:DE:2C:9D:A5:F3:3E:71:C6:41:9E:26:7A:86:2D:FB:62 Certificate issuer: /CN=A91F4D54/serialNumber=AF761257DE2C9DA5F33E71C6419E267A862DFB62 Certificate serial: 84 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r3YSV94snaXzPnHGQZ4meoYt-2I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F4D54/D2877DB6E9EB11EFA4542B18C4F9AE02/r3YSV94snaXzPnHGQZ4meoYt-2I.mft Manifest number: 82 Signing time: Thu 23 Oct 2025 08:47:19 +0000 Manifest this update: Thu 23 Oct 2025 08:47:18 +0000 Manifest next update: Thu 30 Oct 2025 08:47:18 +0000 Files and hashes: 1: r3YSV94snaXzPnHGQZ4meoYt-2I.crl (hash: Cb9OFU21empnrDyvMMCT8nzGxWPRWXvKUO3hhPR0z90=) 2: 61AAFCCAE9EC11EFB6D6D21BC4F9AE02.roa (hash: EzMoudDWuTdlnNruCHKgAEy3hjxWEtpDs8wnwjR1b6o=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F4D54/D2877DB6E9EB11EFA4542B18C4F9AE02/r3YSV94snaXzPnHGQZ4meoYt-2I.crl rsync://rpki.apnic.net/member_repository/A91F4D54/D2877DB6E9EB11EFA4542B18C4F9AE02/r3YSV94snaXzPnHGQZ4meoYt-2I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r3YSV94snaXzPnHGQZ4meoYt-2I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Oct 2025 08:47:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 132 (0x84) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F4D54, serialNumber=AF761257DE2C9DA5F33E71C6419E267A862DFB62 Validity Not Before: Oct 23 08:47:18 2025 GMT Not After : Oct 30 08:47:18 2025 GMT Subject: CN=68f9eb96-9def Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:52:28:1f:1e:4d:98:58:4c:02:10:d8:c5:c9: dc:59:3f:c3:95:82:5a:7d:d4:fc:6f:24:70:6f:08: 31:7e:2b:18:22:66:0b:76:b6:05:56:e3:bc:3a:15: 4e:d7:74:6e:72:17:92:87:a4:ac:e0:d7:98:26:91: 6d:5e:b2:b6:19:d2:5e:b1:e1:3a:17:f2:f3:f3:e4: 34:52:2e:0c:9c:5c:77:55:cf:0d:bd:61:1d:72:a6: d8:f2:1d:30:00:55:10:23:0e:1b:1a:c7:86:f6:29: 53:8e:a1:31:15:40:b4:8a:b1:6a:4e:44:aa:17:58: 45:c3:f1:7d:de:31:5a:a7:d7:05:98:0d:ff:ec:1d: 66:bb:eb:f3:ec:8c:f0:53:d4:89:4a:52:c3:d9:e9: 04:1b:a4:c4:71:0e:2d:1e:b7:80:7c:ab:c3:43:20: 72:46:00:52:89:89:a2:cf:8a:40:c3:d6:ea:19:05: 52:64:de:18:6f:d2:5d:ad:07:de:76:f4:7d:64:a7: 71:c1:93:8e:63:c7:e7:6d:5c:a6:f8:c5:99:93:18: c5:0e:ad:f7:c3:86:98:e0:69:3e:d6:5d:a0:18:6d: 5e:09:1b:61:e8:7b:80:37:c5:92:1b:60:82:73:bc: d8:39:5b:be:78:da:f5:6a:a7:b5:a9:77:ec:a2:a2: a8:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:55:9E:FE:F9:F0:5A:23:0E:02:B8:D1:E6:22:8C:30:F3:B2:F8:D1 X509v3 Authority Key Identifier: keyid:AF:76:12:57:DE:2C:9D:A5:F3:3E:71:C6:41:9E:26:7A:86:2D:FB:62 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F4D54/D2877DB6E9EB11EFA4542B18C4F9AE02/r3YSV94snaXzPnHGQZ4meoYt-2I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r3YSV94snaXzPnHGQZ4meoYt-2I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F4D54/D2877DB6E9EB11EFA4542B18C4F9AE02/r3YSV94snaXzPnHGQZ4meoYt-2I.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 69:9e:c9:33:f6:89:4b:17:28:10:b1:8f:24:e0:ff:53:3e:86: 13:af:f3:84:2f:b3:32:aa:08:5d:11:14:28:f2:2b:9e:83:6a: ad:3b:67:29:3f:e5:d0:f0:f0:e3:2f:e4:65:ca:8a:12:55:7f: f5:e8:91:2d:d1:63:91:f6:5a:8a:1a:fc:fc:06:6e:c0:00:d3: 9b:da:2d:b3:89:bf:da:d8:24:89:8b:61:e1:03:14:f0:a1:b6: 1c:a0:97:7a:fc:e7:e1:96:b5:38:17:c5:ee:f0:8c:c8:78:e3: 92:9a:15:39:47:cc:7f:c5:40:4b:df:95:d2:53:37:92:05:54: cf:11:ce:11:d4:72:54:ff:94:9b:e2:35:48:ea:4d:b6:6a:9d: db:b8:f9:ee:ef:56:9c:32:6b:30:6c:2a:e9:32:fc:1d:0e:1b: b8:29:df:fb:01:1a:98:53:7d:5f:72:99:8b:f7:c5:63:4e:1d: 1e:ce:00:2d:cd:53:ed:c8:e4:6a:3a:da:9f:73:bc:78:bf:ac: 45:b1:7c:e5:c3:61:e1:49:0b:a4:23:0a:7c:02:f3:43:17:5d: 1f:8b:8e:ab:8c:19:39:23:25:a2:af:17:93:ce:7c:4d:53:77: 98:79:0e:90:f8:c4:39:c9:bc:c4:68:94:53:19:07:75:7a:96: 6d:1a:e7:06 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAIQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjRENTQxMTAvBgNVBAUTKEFGNzYxMjU3REUyQzlEQTVGMzNFNzFDNjQxOUUyNjdB ODYyREZCNjIwHhcNMjUxMDIzMDg0NzE4WhcNMjUxMDMwMDg0NzE4WjAYMRYwFAYD VQQDEw02OGY5ZWI5Ni05ZGVmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA01IoHx5NmFhMAhDYxcncWT/DlYJafdT8byRwbwgxfisYImYLdrYFVuO8OhVO 13RucheSh6Ss4NeYJpFtXrK2GdJeseE6F/Lz8+Q0Ui4MnFx3Vc8NvWEdcqbY8h0w AFUQIw4bGseG9ilTjqExFUC0irFqTkSqF1hFw/F93jFap9cFmA3/7B1mu+vz7Izw U9SJSlLD2ekEG6TEcQ4tHreAfKvDQyByRgBSiYmiz4pAw9bqGQVSZN4Yb9JdrQfe dvR9ZKdxwZOOY8fnbVym+MWZkxjFDq33w4aY4Gk+1l2gGG1eCRth6HuAN8WSG2CC c7zYOVu+eNr1aqe1qXfsoqKojQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCJVnv75 8FojDgK40eYijDDzsvjRMB8GA1UdIwQYMBaAFK92ElfeLJ2l8z5xxkGeJnqGLfti MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNEQ1NC9EMjg3N0RCNkU5 RUIxMUVGQTQ1NDJCMThDNEY5QUUwMi9yM1lTVjk0c25hWHpQbkhHUVo0bWVvWXQt MkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3IzWVNWOTRzbmFYelBuSEdRWjRtZW9ZdC0ySS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NEQ1NC9EMjg3N0RCNkU5RUIxMUVGQTQ1NDJCMThDNEY5QUUwMi9yM1lTVjk0c25h WHpQbkhHUVo0bWVvWXQtMkkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBpnskz9olLFygQsY8k4P9TPoYTr/OEL7MyqghdERQo8iueg2qtO2cp P+XQ8PDjL+RlyooSVX/16JEt0WOR9lqKGvz8Bm7AANOb2i2zib/a2CSJi2HhAxTw obYcoJd6/OfhlrU4F8Xu8IzIeOOSmhU5R8x/xUBL35XSUzeSBVTPEc4R1HJU/5Sb 4jVI6k22ap3buPnu71acMmswbCrpMvwdDhu4Kd/7ARqYU31fcpmL98VjTh0ezgAt zVPtyORqOtqfc7x4v6xFsXzlw2HhSQukIwp8AvNDF10fi46rjBk5IyWirxeTznxN U3eYeQ6Q+MQ5ybzEaJRTGQd1epZtGucG -----END CERTIFICATE-----Generated at Fri Oct 24 06:12:12 2025 by rpki-client