$ rpki-client -vvf rpki.apnic.net/member_repository/A91F716F/15E4DDC01D5011EE917D9C2EC4F9AE02/3w8c6PaMBxFDZw4lHrt2O9tJv9Y.mft File: 3w8c6PaMBxFDZw4lHrt2O9tJv9Y.mft (raw, json) Hash identifier: 1q7E3foTh3+Ez7R6MJdsGbqrF0d9DXu29iEHTLnUjsk= Subject key identifier: 9B:4E:B6:4A:F2:EB:6D:7B:41:EF:95:C7:CF:2C:FE:4E:FA:A6:BA:80 Authority key identifier: DF:0F:1C:E8:F6:8C:07:11:43:67:0E:25:1E:BB:76:3B:DB:49:BF:D6 Certificate issuer: /CN=A91F716F/serialNumber=DF0F1CE8F68C071143670E251EBB763BDB49BFD6 Certificate serial: 01C1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3w8c6PaMBxFDZw4lHrt2O9tJv9Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F716F/15E4DDC01D5011EE917D9C2EC4F9AE02/3w8c6PaMBxFDZw4lHrt2O9tJv9Y.mft Manifest number: 01BB Signing time: Wed 05 Nov 2025 03:13:40 +0000 Manifest this update: Wed 05 Nov 2025 03:13:39 +0000 Manifest next update: Wed 12 Nov 2025 03:13:39 +0000 Files and hashes: 1: 3w8c6PaMBxFDZw4lHrt2O9tJv9Y.crl (hash: jENv7LHz5Culrm4NpBtVlRietnq6E/mvYy776manBg4=) 2: 6F882FB01D5211EE94C36C2FC4F9AE02.roa (hash: HYndX1hAZ5qMkJtz/BumiLhkqJaaPEm/ej37V7+JGfk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F716F/15E4DDC01D5011EE917D9C2EC4F9AE02/3w8c6PaMBxFDZw4lHrt2O9tJv9Y.crl rsync://rpki.apnic.net/member_repository/A91F716F/15E4DDC01D5011EE917D9C2EC4F9AE02/3w8c6PaMBxFDZw4lHrt2O9tJv9Y.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3w8c6PaMBxFDZw4lHrt2O9tJv9Y.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 03:13:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 449 (0x1c1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F716F, serialNumber=DF0F1CE8F68C071143670E251EBB763BDB49BFD6 Validity Not Before: Nov 5 03:13:39 2025 GMT Not After : Nov 12 03:13:39 2025 GMT Subject: CN=690ac0e3-33f4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:28:3e:b6:72:b2:3a:b2:c6:ee:24:f0:fe:99: 4a:79:c5:44:15:37:d2:b9:9c:e5:b4:dd:80:24:0c: 10:61:79:92:22:2d:9e:3e:ce:83:59:23:94:99:c0: d5:4f:19:a0:99:bd:93:4f:58:f4:f9:ed:25:29:ce: a8:b5:f6:63:a2:11:48:f1:78:23:dd:6f:bf:c5:5e: 33:25:58:ec:55:ee:01:c4:9a:a9:2e:85:80:70:14: 39:2b:44:68:b4:63:d9:0b:2d:ae:56:cf:19:63:ee: 0a:e5:59:72:eb:e4:81:ec:1c:31:73:e9:c5:a2:ad: 39:93:fe:20:81:33:fd:81:b1:25:f5:c8:38:be:28: 31:f0:ae:59:ac:1d:0b:86:df:a1:61:14:a0:bb:57: 0d:91:00:02:d3:1f:b3:c0:06:b6:c0:69:9e:ef:40: d6:66:81:20:18:db:3f:9a:e5:37:66:e4:8f:cf:5d: b4:2c:d6:d5:01:f8:cf:12:50:d1:51:d0:d7:3f:50: 58:bd:b9:d9:7a:6d:a7:bb:19:b2:f1:76:1a:5d:3b: eb:76:b4:c1:6a:de:27:45:37:42:22:ad:ae:66:ec: 8a:a4:46:ec:90:ae:1b:2b:4f:1c:d3:b4:a7:38:3b: 8e:79:0a:49:e1:c0:7e:59:2e:98:ad:1f:f3:5f:ec: 87:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:4E:B6:4A:F2:EB:6D:7B:41:EF:95:C7:CF:2C:FE:4E:FA:A6:BA:80 X509v3 Authority Key Identifier: keyid:DF:0F:1C:E8:F6:8C:07:11:43:67:0E:25:1E:BB:76:3B:DB:49:BF:D6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F716F/15E4DDC01D5011EE917D9C2EC4F9AE02/3w8c6PaMBxFDZw4lHrt2O9tJv9Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3w8c6PaMBxFDZw4lHrt2O9tJv9Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F716F/15E4DDC01D5011EE917D9C2EC4F9AE02/3w8c6PaMBxFDZw4lHrt2O9tJv9Y.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a3:44:ab:f8:a1:94:f5:1a:14:87:ee:61:f8:82:42:ba:69:e6: c8:75:4c:d6:3e:55:d2:18:8b:0d:88:3d:a9:a7:7b:d9:d6:e7: 32:74:b2:b6:46:b1:46:d2:04:59:15:1a:6f:ed:9f:73:e3:0b: 9d:5b:45:68:a0:45:67:b6:ad:29:92:d0:5f:3b:aa:61:72:4e: 46:76:58:33:cd:1c:7a:12:f6:ab:cb:80:4d:26:e7:d8:b3:a4: 0e:1f:c1:6e:a5:99:53:cc:f7:26:4f:f8:b2:6a:ce:66:fd:63: 63:11:a7:b5:cf:5e:58:91:9f:51:31:15:ce:2b:fe:7f:a4:c4: a9:bc:23:c7:cc:45:db:b4:7b:91:54:4c:2d:8c:ab:22:f1:3a: 94:12:c4:2d:4f:43:d8:a7:86:9c:db:c1:e7:22:00:14:f3:fc: 33:fd:74:04:db:ca:6d:17:91:f9:c1:77:28:db:68:c3:85:ac: b8:88:91:82:71:06:68:e3:f2:86:e4:fe:06:d2:82:5c:62:2c: df:49:1b:ba:e2:18:f7:6e:9b:10:8f:db:66:d3:aa:22:7b:7c: 8a:4f:86:a6:3c:3e:c4:ec:f2:f9:44:e9:e5:2f:ea:32:ca:01: 23:c3:81:2b:ae:53:c1:ce:f5:af:82:b7:8e:02:67:8c:3b:f1: 5c:80:62:56 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAcEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjcxNkYxMTAvBgNVBAUTKERGMEYxQ0U4RjY4QzA3MTE0MzY3MEUyNTFFQkI3NjNC REI0OUJGRDYwHhcNMjUxMTA1MDMxMzM5WhcNMjUxMTEyMDMxMzM5WjAYMRYwFAYD VQQDEw02OTBhYzBlMy0zM2Y0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyig+tnKyOrLG7iTw/plKecVEFTfSuZzltN2AJAwQYXmSIi2ePs6DWSOUmcDV Txmgmb2TT1j0+e0lKc6otfZjohFI8Xgj3W+/xV4zJVjsVe4BxJqpLoWAcBQ5K0Ro tGPZCy2uVs8ZY+4K5Vly6+SB7Bwxc+nFoq05k/4ggTP9gbEl9cg4vigx8K5ZrB0L ht+hYRSgu1cNkQAC0x+zwAa2wGme70DWZoEgGNs/muU3ZuSPz120LNbVAfjPElDR UdDXP1BYvbnZem2nuxmy8XYaXTvrdrTBat4nRTdCIq2uZuyKpEbskK4bK08c07Sn ODuOeQpJ4cB+WS6YrR/zX+yHIQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJtOtkry 6217Qe+Vx88s/k76prqAMB8GA1UdIwQYMBaAFN8PHOj2jAcRQ2cOJR67djvbSb/W MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNzE2Ri8xNUU0RERDMDFE NTAxMUVFOTE3RDlDMkVDNEY5QUUwMi8zdzhjNlBhTUJ4RkRadzRsSHJ0Mk85dEp2 OVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzN3OGM2UGFNQnhGRFp3NGxIcnQyTzl0SnY5WS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NzE2Ri8xNUU0RERDMDFENTAxMUVFOTE3RDlDMkVDNEY5QUUwMi8zdzhjNlBhTUJ4 RkRadzRsSHJ0Mk85dEp2OVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCjRKv4oZT1GhSH7mH4gkK6aebIdUzWPlXSGIsNiD2pp3vZ1ucydLK2 RrFG0gRZFRpv7Z9z4wudW0VooEVntq0pktBfO6phck5GdlgzzRx6Evary4BNJufY s6QOH8FupZlTzPcmT/iyas5m/WNjEae1z15YkZ9RMRXOK/5/pMSpvCPHzEXbtHuR VEwtjKsi8TqUEsQtT0PYp4ac28HnIgAU8/wz/XQE28ptF5H5wXco22jDhay4iJGC cQZo4/KG5P4G0oJcYizfSRu64hj3bpsQj9tm06oie3yKT4amPD7E7PL5ROnlL+oy ygEjw4ErrlPBzvWvgreOAmeMO/FcgGJW -----END CERTIFICATE-----Generated at Wed Nov 5 19:28:44 2025 by rpki-client