$ rpki-client -vvf rpki.apnic.net/member_repository/A91F9C42/24A65EBE20D011EE90084F5CC4F9AE02/g3nXR_dKVe3HOg4EIcebXsDk3nY.mft File: g3nXR_dKVe3HOg4EIcebXsDk3nY.mft (raw, json) Hash identifier: JUdJXQU7nBgbsrF4g94UY9+cvuzfyY5rJbUOvAZ8ALc= Subject key identifier: 43:79:28:72:0F:DF:8F:1E:D0:1F:07:40:D7:70:33:C5:11:A9:89:BF Authority key identifier: 83:79:D7:47:F7:4A:55:ED:C7:3A:0E:04:21:C7:9B:5E:C0:E4:DE:76 Certificate issuer: /CN=A91F9C42/serialNumber=8379D747F74A55EDC73A0E0421C79B5EC0E4DE76 Certificate serial: 01C5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g3nXR_dKVe3HOg4EIcebXsDk3nY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F9C42/24A65EBE20D011EE90084F5CC4F9AE02/g3nXR_dKVe3HOg4EIcebXsDk3nY.mft Manifest number: 01BB Signing time: Wed 05 Nov 2025 03:15:01 +0000 Manifest this update: Wed 05 Nov 2025 03:15:01 +0000 Manifest next update: Wed 12 Nov 2025 03:15:01 +0000 Files and hashes: 1: g3nXR_dKVe3HOg4EIcebXsDk3nY.crl (hash: li8laI6gCpSPsDHPLuyPD/cAfPWrE4ZVe7+w/6t+4eA=) 2: 3A7527ECC1F711EF8B510B86C4F9AE02.roa (hash: 7UGzCq6Cb6amiBq87W5KeE/DUZqLNVV6OVzp45wF3WQ=) 3: 79FC546E326611F08478D72AC4F9AE02.roa (hash: ACKLgoePLs3Ke5FTi4aaIlytoIlfeMfpdj0hhLm4rHA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F9C42/24A65EBE20D011EE90084F5CC4F9AE02/g3nXR_dKVe3HOg4EIcebXsDk3nY.crl rsync://rpki.apnic.net/member_repository/A91F9C42/24A65EBE20D011EE90084F5CC4F9AE02/g3nXR_dKVe3HOg4EIcebXsDk3nY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g3nXR_dKVe3HOg4EIcebXsDk3nY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 03:15:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 453 (0x1c5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F9C42, serialNumber=8379D747F74A55EDC73A0E0421C79B5EC0E4DE76 Validity Not Before: Nov 5 03:15:01 2025 GMT Not After : Nov 12 03:15:01 2025 GMT Subject: CN=690ac135-e61e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:7a:bc:51:64:57:fe:b1:0e:f5:6e:bf:f2:94: 30:ae:c8:79:c8:b2:ae:6b:86:0f:e3:b6:73:3e:e1: 9e:4c:10:ec:33:73:ec:e8:47:e5:ca:f3:ef:fd:7f: 7b:d6:cf:9a:15:29:0c:94:ee:90:db:cb:ab:00:8c: 88:c5:9f:53:4d:af:76:bf:45:4d:09:5c:b2:d7:2e: 1c:11:aa:c9:97:d0:0d:87:8d:71:0b:11:3c:52:ac: 9c:75:b9:e2:f9:25:18:37:70:de:6f:e8:3d:0c:ce: 2c:42:03:e4:32:f8:f3:2f:26:12:d9:f5:7d:33:84: 23:c7:b7:27:cb:6f:9e:58:6a:cc:80:da:aa:15:32: d2:44:a0:e2:ba:c1:bd:7c:50:85:df:65:a4:37:21: 85:13:e6:d0:f2:67:b8:51:bc:d2:94:46:50:7e:ed: 66:58:c0:3d:e7:2f:86:86:87:e8:25:24:e7:a6:36: fa:5e:d7:d0:78:ca:40:b2:23:04:8b:fb:db:97:ee: 5d:3d:9b:70:75:dc:03:b3:70:e6:ca:47:2d:c1:8f: 05:86:10:f6:5e:c0:fa:cc:fe:d6:f4:c7:5d:10:19: c6:d0:99:57:5b:f2:cc:ba:dc:30:9e:75:70:1f:f3: 05:e1:75:39:ab:6f:d5:87:1c:79:b6:d3:9a:f1:2d: 71:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:79:28:72:0F:DF:8F:1E:D0:1F:07:40:D7:70:33:C5:11:A9:89:BF X509v3 Authority Key Identifier: keyid:83:79:D7:47:F7:4A:55:ED:C7:3A:0E:04:21:C7:9B:5E:C0:E4:DE:76 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F9C42/24A65EBE20D011EE90084F5CC4F9AE02/g3nXR_dKVe3HOg4EIcebXsDk3nY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g3nXR_dKVe3HOg4EIcebXsDk3nY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F9C42/24A65EBE20D011EE90084F5CC4F9AE02/g3nXR_dKVe3HOg4EIcebXsDk3nY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4f:1e:0a:c0:5b:3f:a6:24:06:8b:25:91:1d:3f:56:17:5f:84: 8e:6d:e7:20:ab:a3:a2:4a:34:59:87:c2:19:5a:3a:1e:8c:f3: 5c:86:ce:bb:22:6f:15:ac:db:e4:8d:b1:a1:53:e8:2f:2d:03: e5:d6:bb:89:f5:88:93:43:74:77:68:03:78:5e:10:8c:0a:5c: 4b:e6:02:ca:e9:aa:69:ac:f4:08:91:3d:45:6c:6f:cc:51:8b: ad:1e:16:cd:b5:6f:a0:61:84:77:b4:6a:9b:33:44:c8:31:0b: 3c:cf:56:40:11:29:6b:f1:ee:7d:ad:15:f3:59:4e:be:1c:99: 90:48:aa:11:02:0a:3f:ef:6f:6c:66:58:eb:0e:7c:37:35:70: 46:1f:07:be:5e:3a:d3:47:ff:21:bb:be:6d:a9:a7:59:ad:9b: f8:10:9e:47:29:e7:4d:5d:09:1b:72:ba:5e:e6:71:e1:dc:97: b7:a8:4d:03:0e:45:90:cf:93:58:19:88:5a:9f:54:9d:71:fb: 37:c2:82:55:59:ba:6e:05:6e:02:e8:e4:d7:ef:dc:6e:b5:ed: 9a:bf:27:98:0c:f9:64:f7:39:5d:dd:65:cb:18:be:25:b0:fb: 6b:a4:96:6e:1d:bc:d4:99:cd:de:c0:ae:3a:5b:3f:aa:8c:e8: 17:59:5d:8d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAcUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjlDNDIxMTAvBgNVBAUTKDgzNzlENzQ3Rjc0QTU1RURDNzNBMEUwNDIxQzc5QjVF QzBFNERFNzYwHhcNMjUxMTA1MDMxNTAxWhcNMjUxMTEyMDMxNTAxWjAYMRYwFAYD VQQDEw02OTBhYzEzNS1lNjFlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxXq8UWRX/rEO9W6/8pQwrsh5yLKua4YP47ZzPuGeTBDsM3Ps6EflyvPv/X97 1s+aFSkMlO6Q28urAIyIxZ9TTa92v0VNCVyy1y4cEarJl9ANh41xCxE8Uqycdbni +SUYN3Deb+g9DM4sQgPkMvjzLyYS2fV9M4Qjx7cny2+eWGrMgNqqFTLSRKDiusG9 fFCF32WkNyGFE+bQ8me4UbzSlEZQfu1mWMA95y+GhofoJSTnpjb6XtfQeMpAsiME i/vbl+5dPZtwddwDs3DmykctwY8FhhD2XsD6zP7W9MddEBnG0JlXW/LMutwwnnVw H/MF4XU5q2/Vhxx5ttOa8S1xGQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEN5KHIP 348e0B8HQNdwM8URqYm/MB8GA1UdIwQYMBaAFIN510f3SlXtxzoOBCHHm17A5N52 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGOUM0Mi8yNEE2NUVCRTIw RDAxMUVFOTAwODRGNUNDNEY5QUUwMi9nM25YUl9kS1ZlM0hPZzRFSWNlYlhzRGsz blkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2czblhSX2RLVmUzSE9nNEVJY2ViWHNEazNuWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG OUM0Mi8yNEE2NUVCRTIwRDAxMUVFOTAwODRGNUNDNEY5QUUwMi9nM25YUl9kS1Zl M0hPZzRFSWNlYlhzRGszblkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBPHgrAWz+mJAaLJZEdP1YXX4SObecgq6OiSjRZh8IZWjoejPNchs67 Im8VrNvkjbGhU+gvLQPl1ruJ9YiTQ3R3aAN4XhCMClxL5gLK6apprPQIkT1FbG/M UYutHhbNtW+gYYR3tGqbM0TIMQs8z1ZAESlr8e59rRXzWU6+HJmQSKoRAgo/729s ZljrDnw3NXBGHwe+XjrTR/8hu75tqadZrZv4EJ5HKedNXQkbcrpe5nHh3Je3qE0D DkWQz5NYGYhan1Sdcfs3woJVWbpuBW4C6OTX79xute2avyeYDPlk9zld3WXLGL4l sPtrpJZuHbzUmc3ewK46Wz+qjOgXWV2N -----END CERTIFICATE-----Generated at Wed Nov 5 11:37:43 2025 by rpki-client