$ rpki-client -vvf rpki.apnic.net/member_repository/A91F8CAA/DCD02A20E1EA11EE999C702AC4F9AE02/N3hUTiRpVIvwm1Td2APX19kPfmI.mft File: N3hUTiRpVIvwm1Td2APX19kPfmI.mft (raw, json) Hash identifier: 5GDn87cvLsFPGQ3P2REELtoR6vqtfC8jGUjTyzXk1S4= Subject key identifier: 0A:32:EA:1B:00:DB:24:1C:82:2E:6E:86:3A:E1:67:B5:9D:46:11:9D Authority key identifier: 37:78:54:4E:24:69:54:8B:F0:9B:54:DD:D8:03:D7:D7:D9:0F:7E:62 Certificate issuer: /CN=A91F8CAA/serialNumber=3778544E2469548BF09B54DDD803D7D7D90F7E62 Certificate serial: 0138 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N3hUTiRpVIvwm1Td2APX19kPfmI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F8CAA/DCD02A20E1EA11EE999C702AC4F9AE02/N3hUTiRpVIvwm1Td2APX19kPfmI.mft Manifest number: 0130 Signing time: Mon 03 Nov 2025 04:31:42 +0000 Manifest this update: Mon 03 Nov 2025 04:31:41 +0000 Manifest next update: Mon 10 Nov 2025 04:31:41 +0000 Files and hashes: 1: N3hUTiRpVIvwm1Td2APX19kPfmI.crl (hash: ppdcAb1mYrSeVLpiCSpRFIhdX/ZO6K+0dz7dtxAhwgw=) 2: 1EC90968E1F211EEA360BE22C4F9AE02.roa (hash: XRFVx29hjFc5pKNr7AkvLob3HQjLTaD9Ns3C1RRvN4w=) 3: 1E4548E4E1F211EEA360BE22C4F9AE02.roa (hash: elMINW9VmQY5nycCbQ/QKtRjE+I0nxMVlzRRTvQng4k=) 4: 1DDBD99AE1F211EEA360BE22C4F9AE02.roa (hash: E3gtntzxmL6luEWEYnHzIxmyJjY7WSBf3VBE5/D496g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F8CAA/DCD02A20E1EA11EE999C702AC4F9AE02/N3hUTiRpVIvwm1Td2APX19kPfmI.crl rsync://rpki.apnic.net/member_repository/A91F8CAA/DCD02A20E1EA11EE999C702AC4F9AE02/N3hUTiRpVIvwm1Td2APX19kPfmI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N3hUTiRpVIvwm1Td2APX19kPfmI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 04:31:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 312 (0x138) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F8CAA, serialNumber=3778544E2469548BF09B54DDD803D7D7D90F7E62 Validity Not Before: Nov 3 04:31:41 2025 GMT Not After : Nov 10 04:31:41 2025 GMT Subject: CN=6908302d-72b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:4a:6f:0f:9a:db:5a:7d:60:7f:b2:7a:8f:75: dc:d2:58:d9:80:6d:43:12:61:bb:8a:ec:6f:96:92: 45:b6:23:13:62:d1:bc:a1:27:93:4c:b6:90:4b:fe: ad:ef:62:71:51:11:2e:47:a8:e6:91:d2:1e:1d:e3: d4:1b:c9:3f:ab:ec:eb:55:48:76:62:3a:3d:7d:a2: ab:05:fe:82:9c:bd:9e:0f:f3:b1:fd:18:dc:39:80: b9:88:2e:c9:bd:99:76:fc:9b:43:2a:b5:1a:f0:1b: ad:98:64:25:b8:50:9f:29:60:e2:37:68:ee:48:37: e0:ff:68:a5:e6:d9:51:d6:c7:75:cb:61:8f:a4:4e: 17:e5:d7:dd:14:6f:32:93:8b:4a:53:c8:bd:10:df: 7b:f6:f4:60:f9:43:e6:de:a0:3d:90:21:43:10:df: 72:b7:80:0f:02:33:a7:29:c7:f7:dc:c1:7e:2c:e3: 86:ef:18:01:ce:64:73:ae:f9:ca:93:12:12:82:62: a1:6e:cf:e9:08:b7:4f:6c:07:a4:cc:3c:1f:15:61: d6:22:50:9b:4b:25:71:3f:83:90:d4:34:5b:65:83: 43:7e:e4:6e:f6:9a:5f:b0:ce:93:2d:10:19:d2:1e: 95:bb:e8:50:31:b6:e8:c6:29:31:e3:68:0d:8c:fe: b6:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:32:EA:1B:00:DB:24:1C:82:2E:6E:86:3A:E1:67:B5:9D:46:11:9D X509v3 Authority Key Identifier: keyid:37:78:54:4E:24:69:54:8B:F0:9B:54:DD:D8:03:D7:D7:D9:0F:7E:62 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F8CAA/DCD02A20E1EA11EE999C702AC4F9AE02/N3hUTiRpVIvwm1Td2APX19kPfmI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N3hUTiRpVIvwm1Td2APX19kPfmI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F8CAA/DCD02A20E1EA11EE999C702AC4F9AE02/N3hUTiRpVIvwm1Td2APX19kPfmI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3a:26:23:25:15:3b:e5:21:f5:ab:03:c5:83:19:04:e1:18:46: 13:88:4a:7f:eb:57:55:3e:31:2f:26:2c:f4:0d:22:7e:51:25: 41:97:6f:85:7e:3b:4b:e0:5a:f3:da:63:a3:41:4c:38:62:88: 16:96:8a:d3:0a:59:88:3e:ee:74:c6:8e:27:36:70:5c:44:f8: 0c:86:03:3d:b1:04:6e:ca:61:a3:f0:a1:a5:6e:de:71:63:dc: 21:08:11:75:99:f8:3a:b7:1d:15:4d:91:44:49:c5:f3:7d:ce: 26:2b:9b:cb:58:17:d2:35:50:b6:2a:4e:6b:b9:ef:45:4b:58: 1b:b5:35:e8:bd:a7:68:0b:4b:3f:2c:d9:33:67:67:8e:79:f6: e5:21:9c:ae:c7:86:fb:a4:34:88:9d:5e:41:e8:c8:1b:6d:51: 40:3e:5f:33:cc:3d:2c:71:3d:21:8f:4c:36:ea:ae:1e:be:85: 96:0d:3a:f9:aa:01:a1:9a:08:4b:99:14:c1:64:36:dc:7f:22: d3:4f:cc:3d:d3:ad:09:e2:f7:8f:de:53:ab:f4:3a:df:13:a6: 17:db:d7:df:04:15:f8:4b:cc:d0:6a:5a:10:7f:3a:7d:cf:1f: 4b:a2:16:c5:3e:59:65:b5:39:7d:82:7c:6c:03:60:30:90:63: 35:8b:e0:ff -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICATgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjhDQUExMTAvBgNVBAUTKDM3Nzg1NDRFMjQ2OTU0OEJGMDlCNTREREQ4MDNEN0Q3 RDkwRjdFNjIwHhcNMjUxMTAzMDQzMTQxWhcNMjUxMTEwMDQzMTQxWjAYMRYwFAYD VQQDEw02OTA4MzAyZC03MmI4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA40pvD5rbWn1gf7J6j3Xc0ljZgG1DEmG7iuxvlpJFtiMTYtG8oSeTTLaQS/6t 72JxUREuR6jmkdIeHePUG8k/q+zrVUh2Yjo9faKrBf6CnL2eD/Ox/RjcOYC5iC7J vZl2/JtDKrUa8ButmGQluFCfKWDiN2juSDfg/2il5tlR1sd1y2GPpE4X5dfdFG8y k4tKU8i9EN979vRg+UPm3qA9kCFDEN9yt4APAjOnKcf33MF+LOOG7xgBzmRzrvnK kxISgmKhbs/pCLdPbAekzDwfFWHWIlCbSyVxP4OQ1DRbZYNDfuRu9ppfsM6TLRAZ 0h6Vu+hQMbboxikx42gNjP62hwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAoy6hsA 2yQcgi5uhjrhZ7WdRhGdMB8GA1UdIwQYMBaAFDd4VE4kaVSL8JtU3dgD19fZD35i MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGOENBQS9EQ0QwMkEyMEUx RUExMUVFOTk5QzcwMkFDNEY5QUUwMi9OM2hVVGlScFZJdndtMVRkMkFQWDE5a1Bm bUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL04zaFVUaVJwVkl2d20xVGQyQVBYMTlrUGZtSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG OENBQS9EQ0QwMkEyMEUxRUExMUVFOTk5QzcwMkFDNEY5QUUwMi9OM2hVVGlScFZJ dndtMVRkMkFQWDE5a1BmbUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA6JiMlFTvlIfWrA8WDGQThGEYTiEp/61dVPjEvJiz0DSJ+USVBl2+F fjtL4Frz2mOjQUw4YogWlorTClmIPu50xo4nNnBcRPgMhgM9sQRuymGj8KGlbt5x Y9whCBF1mfg6tx0VTZFEScXzfc4mK5vLWBfSNVC2Kk5rue9FS1gbtTXovadoC0s/ LNkzZ2eOefblIZyux4b7pDSInV5B6MgbbVFAPl8zzD0scT0hj0w26q4evoWWDTr5 qgGhmghLmRTBZDbcfyLTT8w9060J4veP3lOr9DrfE6YX29ffBBX4S8zQaloQfzp9 zx9LohbFPllltTl9gnxsA2AwkGM1i+D/ -----END CERTIFICATE-----Generated at Mon Nov 3 18:06:42 2025 by rpki-client