$ rpki-client -vvf rpki.apnic.net/member_repository/A91F86D2/39DDCCDCA97511ECBA5BDC33C4F9AE02/uK3V-E0RutdH--lY1GutO6kTGQM.mft File: uK3V-E0RutdH--lY1GutO6kTGQM.mft (raw, json) Hash identifier: r+y4/8Y88XDqeyG/h0ndq342QwaXUtgRULfyvngwZ3E= Subject key identifier: 69:5D:C9:E8:16:D3:C3:8F:D0:DB:8B:5E:12:18:9B:7C:83:C0:05:35 Authority key identifier: B8:AD:D5:F8:4D:11:BA:D7:47:FB:E9:58:D4:6B:AD:3B:A9:13:19:03 Certificate issuer: /CN=A91F86D2/serialNumber=B8ADD5F84D11BAD747FBE958D46BAD3BA9131903 Certificate serial: 03DC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uK3V-E0RutdH--lY1GutO6kTGQM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F86D2/39DDCCDCA97511ECBA5BDC33C4F9AE02/uK3V-E0RutdH--lY1GutO6kTGQM.mft Manifest number: 03D1 Signing time: Mon 03 Nov 2025 00:36:06 +0000 Manifest this update: Mon 03 Nov 2025 00:36:05 +0000 Manifest next update: Mon 10 Nov 2025 00:36:05 +0000 Files and hashes: 1: uK3V-E0RutdH--lY1GutO6kTGQM.crl (hash: Xp1Z1ByAECaDrUHbbXcc6q1XHsXKgCMjMjNoD38PnmE=) 2: 1A377B907A7811EF9D5ED47CC4F9AE02.roa (hash: 2FKrneZIYdwek2LQDep+qpyFwMcW7v1PTDAdjyafS0U=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F86D2/39DDCCDCA97511ECBA5BDC33C4F9AE02/uK3V-E0RutdH--lY1GutO6kTGQM.crl rsync://rpki.apnic.net/member_repository/A91F86D2/39DDCCDCA97511ECBA5BDC33C4F9AE02/uK3V-E0RutdH--lY1GutO6kTGQM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uK3V-E0RutdH--lY1GutO6kTGQM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 00:36:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 988 (0x3dc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F86D2, serialNumber=B8ADD5F84D11BAD747FBE958D46BAD3BA9131903 Validity Not Before: Nov 3 00:36:05 2025 GMT Not After : Nov 10 00:36:05 2025 GMT Subject: CN=6907f8f6-3d77 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:85:71:d9:0e:62:fd:c3:27:5f:04:77:f3:55: bd:c1:ce:20:cd:f9:72:7d:ba:3b:cc:5e:7a:2c:cb: 5c:57:11:af:64:d1:8c:ac:7a:f7:5d:2e:e9:7e:9d: e5:43:d6:6a:53:b4:6e:34:cd:bf:8e:83:97:bd:80: 6d:d4:75:06:d7:21:55:3d:b1:04:18:67:a1:20:bd: 02:cf:d0:a4:ef:95:03:9b:90:c9:96:94:b9:2a:47: db:f1:09:6c:81:50:14:22:ca:ba:93:05:39:93:c5: 09:1e:e1:60:85:89:d5:94:0f:55:0e:b5:68:a2:ba: e9:71:58:89:6e:94:fc:5d:1c:0d:c3:5d:74:32:81: ac:39:d1:03:24:60:92:3a:96:87:b6:1c:b0:36:c4: cd:40:41:94:b2:c3:d1:e9:cd:4c:2c:13:57:4c:39: d6:ef:76:bb:5c:6a:de:71:46:7c:9f:3c:48:2e:14: 08:e0:bd:86:e9:23:79:81:b7:0f:e2:e4:e2:38:07: fc:6e:a6:77:7c:91:2d:b8:ee:9c:a4:1b:b7:e9:f1: 90:1f:d9:23:c8:b9:78:90:26:d1:9a:c9:28:6e:95: f6:54:c8:4f:d5:cc:f8:2b:75:f8:44:d9:2c:b3:6b: ba:30:00:f3:43:00:f0:48:3c:a0:4b:63:11:b8:a9: cd:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:5D:C9:E8:16:D3:C3:8F:D0:DB:8B:5E:12:18:9B:7C:83:C0:05:35 X509v3 Authority Key Identifier: keyid:B8:AD:D5:F8:4D:11:BA:D7:47:FB:E9:58:D4:6B:AD:3B:A9:13:19:03 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F86D2/39DDCCDCA97511ECBA5BDC33C4F9AE02/uK3V-E0RutdH--lY1GutO6kTGQM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uK3V-E0RutdH--lY1GutO6kTGQM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F86D2/39DDCCDCA97511ECBA5BDC33C4F9AE02/uK3V-E0RutdH--lY1GutO6kTGQM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 73:e9:07:7c:f7:44:09:21:5c:d6:50:01:e2:96:08:70:e7:e4: 74:d3:37:e3:5e:ff:d2:89:df:33:5a:b5:eb:2c:81:a4:a9:77: 81:19:1e:32:7c:0d:3c:4a:73:3e:a7:7b:3f:9c:44:f1:72:5f: 74:88:15:af:60:cc:65:75:74:37:57:44:d4:0e:e9:fa:e7:76: 9c:e7:ea:31:a0:a1:fe:b2:22:33:76:8f:43:0e:51:b5:75:d5: 31:67:b0:6c:62:fd:34:c2:35:35:88:ef:f2:22:a6:f6:42:87: 36:65:6b:40:39:d3:cc:e7:b8:f0:f5:6b:a7:47:9f:13:55:2c: 97:3e:6c:21:56:5a:28:5f:f0:ea:3a:4f:47:d1:0d:a7:ee:1b: c4:a0:90:cf:ce:0f:5c:f6:50:40:81:58:10:2a:8a:3c:88:03: 2b:57:22:33:bd:aa:a6:19:fb:80:1f:99:34:a2:16:de:20:11: 69:28:57:e6:37:05:56:01:b1:63:27:4b:19:39:7d:b7:d0:35: 6b:22:99:b7:d8:df:26:a4:5c:ec:18:67:44:d9:c0:ca:86:30: 5e:a3:d6:07:0b:65:69:ad:1a:a3:7e:23:3b:33:46:1b:af:cf: df:19:8f:11:86:27:6d:44:a3:bc:89:24:fa:dd:8c:01:37:81: ad:f8:0c:10 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA9wwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Rjg2RDIxMTAvBgNVBAUTKEI4QURENUY4NEQxMUJBRDc0N0ZCRTk1OEQ0NkJBRDNC QTkxMzE5MDMwHhcNMjUxMTAzMDAzNjA1WhcNMjUxMTEwMDAzNjA1WjAYMRYwFAYD VQQDEw02OTA3ZjhmNi0zZDc3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvYVx2Q5i/cMnXwR381W9wc4gzflyfbo7zF56LMtcVxGvZNGMrHr3XS7pfp3l Q9ZqU7RuNM2/joOXvYBt1HUG1yFVPbEEGGehIL0Cz9Ck75UDm5DJlpS5Kkfb8Qls gVAUIsq6kwU5k8UJHuFghYnVlA9VDrVoorrpcViJbpT8XRwNw110MoGsOdEDJGCS OpaHthywNsTNQEGUssPR6c1MLBNXTDnW73a7XGrecUZ8nzxILhQI4L2G6SN5gbcP 4uTiOAf8bqZ3fJEtuO6cpBu36fGQH9kjyLl4kCbRmskobpX2VMhP1cz4K3X4RNks s2u6MADzQwDwSDygS2MRuKnN2QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGldyegW 08OP0NuLXhIYm3yDwAU1MB8GA1UdIwQYMBaAFLit1fhNEbrXR/vpWNRrrTupExkD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGODZEMi8zOUREQ0NEQ0E5 NzUxMUVDQkE1QkRDMzNDNEY5QUUwMi91SzNWLUUwUnV0ZEgtLWxZMUd1dE82a1RH UU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3VLM1YtRTBSdXRkSC0tbFkxR3V0TzZrVEdRTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG ODZEMi8zOUREQ0NEQ0E5NzUxMUVDQkE1QkRDMzNDNEY5QUUwMi91SzNWLUUwUnV0 ZEgtLWxZMUd1dE82a1RHUU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBz6Qd890QJIVzWUAHilghw5+R00zfjXv/Sid8zWrXrLIGkqXeBGR4y fA08SnM+p3s/nETxcl90iBWvYMxldXQ3V0TUDun653ac5+oxoKH+siIzdo9DDlG1 ddUxZ7BsYv00wjU1iO/yIqb2Qoc2ZWtAOdPM57jw9WunR58TVSyXPmwhVlooX/Dq Ok9H0Q2n7hvEoJDPzg9c9lBAgVgQKoo8iAMrVyIzvaqmGfuAH5k0ohbeIBFpKFfm NwVWAbFjJ0sZOX230DVrIpm32N8mpFzsGGdE2cDKhjBeo9YHC2VprRqjfiM7M0Yb r8/fGY8RhidtRKO8iST63YwBN4Gt+AwQ -----END CERTIFICATE-----Generated at Mon Nov 3 18:07:34 2025 by rpki-client