$ rpki-client -vvf rpki.apnic.net/member_repository/A91AAE2E/E71A0BBCF21711EEBCCC3120C4F9AE02/3SQy2K1rs-npllWAu8bSIhkHs_c.mft File: 3SQy2K1rs-npllWAu8bSIhkHs_c.mft (raw, json) Hash identifier: 1SAchLL4QhgRbtGh3sB4z0yULwALi784kBtdOVb5/n0= Subject key identifier: B1:BC:B5:7D:1B:FA:73:D7:3A:CF:E3:E7:2F:BF:87:D0:10:D7:F5:46 Authority key identifier: DD:24:32:D8:AD:6B:B3:E9:E9:96:55:80:BB:C6:D2:22:19:07:B3:F7 Certificate issuer: /CN=A91AAE2E/serialNumber=DD2432D8AD6BB3E9E9965580BBC6D2221907B3F7 Certificate serial: 0125 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3SQy2K1rs-npllWAu8bSIhkHs_c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AAE2E/E71A0BBCF21711EEBCCC3120C4F9AE02/3SQy2K1rs-npllWAu8bSIhkHs_c.mft Manifest number: 0122 Signing time: Sun 19 Oct 2025 07:34:58 +0000 Manifest this update: Sun 19 Oct 2025 07:34:57 +0000 Manifest next update: Sun 26 Oct 2025 07:34:57 +0000 Files and hashes: 1: 3SQy2K1rs-npllWAu8bSIhkHs_c.crl (hash: AjOIV/EwOEnlLj7XqVn0kEZtTj2WvE7YglmKXi9HWyA=) 2: 121E99A8F21911EE95F21158C4F9AE02.roa (hash: /IMJX7XsSqXWSBpPQa+GU6jkXrtHKjX0kCU46WfMzTI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AAE2E/E71A0BBCF21711EEBCCC3120C4F9AE02/3SQy2K1rs-npllWAu8bSIhkHs_c.crl rsync://rpki.apnic.net/member_repository/A91AAE2E/E71A0BBCF21711EEBCCC3120C4F9AE02/3SQy2K1rs-npllWAu8bSIhkHs_c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3SQy2K1rs-npllWAu8bSIhkHs_c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 07:34:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 293 (0x125) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AAE2E, serialNumber=DD2432D8AD6BB3E9E9965580BBC6D2221907B3F7 Validity Not Before: Oct 19 07:34:57 2025 GMT Not After : Oct 26 07:34:57 2025 GMT Subject: CN=68f494a2-38a9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:73:cb:97:67:8d:cd:38:85:ce:eb:7d:7c:4c: 17:24:32:a2:65:b9:9c:e9:0a:a5:cc:cf:e7:f8:3a: 4e:02:d6:67:2d:ac:81:91:12:74:84:f6:f6:5f:2a: 3d:f0:e0:82:ab:fc:b3:91:6b:ba:f3:13:f5:b8:50: 1e:b3:5c:52:46:21:b1:36:74:f4:f8:9d:84:47:0e: 3b:df:9a:4f:5e:9d:ef:d1:64:28:7c:6f:9c:bb:ae: 57:ac:8a:76:e5:a6:49:ad:54:d2:c8:fb:fc:f2:17: 19:9d:e5:91:c8:33:5f:57:02:58:e0:21:eb:20:fd: be:5b:9c:7b:ee:1a:a9:e3:2b:ce:6b:47:94:0d:f5: b6:ca:f8:74:71:b9:2b:c1:7e:2c:7b:60:63:da:12: 9a:f4:7a:9e:ed:e3:ff:f4:58:f1:e3:ef:f4:ca:be: d9:f6:8f:27:4d:1c:f1:42:1c:65:34:52:da:fe:0f: d1:e4:23:bf:67:11:08:04:25:85:d1:ee:18:31:ca: 6f:ce:43:23:0d:13:79:79:55:c1:6c:8e:21:04:1b: aa:37:9e:c3:f0:88:6f:5b:e0:ff:6b:f3:a4:d0:c5: e7:02:6c:b8:a4:57:19:6c:6f:74:87:a4:fb:c7:8a: 86:29:59:b0:b3:34:dd:00:30:76:07:f0:90:49:d6: f8:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:BC:B5:7D:1B:FA:73:D7:3A:CF:E3:E7:2F:BF:87:D0:10:D7:F5:46 X509v3 Authority Key Identifier: keyid:DD:24:32:D8:AD:6B:B3:E9:E9:96:55:80:BB:C6:D2:22:19:07:B3:F7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AAE2E/E71A0BBCF21711EEBCCC3120C4F9AE02/3SQy2K1rs-npllWAu8bSIhkHs_c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3SQy2K1rs-npllWAu8bSIhkHs_c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AAE2E/E71A0BBCF21711EEBCCC3120C4F9AE02/3SQy2K1rs-npllWAu8bSIhkHs_c.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5a:a8:17:52:69:75:40:d8:1e:b8:37:1e:2b:72:5c:25:1c:cb: 4d:08:5c:d9:4f:8e:65:69:e5:82:93:2f:9a:33:a1:63:83:1d: 80:37:fd:47:4b:bf:9d:51:14:58:f1:93:e5:f9:07:7f:4e:21: 6c:22:17:c8:11:c2:02:e8:1d:82:73:2c:82:d5:10:62:64:cd: 42:3c:e2:22:bb:74:f6:06:da:d9:3a:d8:be:73:20:71:98:6d: 13:e8:80:6c:71:bc:bd:cb:09:53:f2:0c:c5:a3:51:0c:66:ce: 2b:22:8c:d3:e5:b1:75:f3:d8:5c:53:88:41:ca:1a:1d:5c:e5: 6c:66:cc:53:7e:e6:5d:63:b4:d8:38:cf:f7:3a:56:59:bf:06: ce:80:c5:3b:71:a0:fa:d9:26:c1:db:30:bb:a8:a1:4f:e3:8a: 11:56:38:da:1e:9a:6f:04:94:72:d8:9d:de:f0:31:ea:bc:90: 65:c5:f7:07:b1:c2:40:d9:bf:22:09:8e:71:bf:04:b0:13:68: 5e:86:35:5b:66:be:9f:a7:8b:62:9b:3a:ec:6b:3b:af:1f:ad: 14:a8:04:ca:a5:39:a0:11:0e:4a:9a:33:a1:e5:37:a4:d4:16: 94:76:bb:cf:14:d0:c0:74:dd:63:d7:21:c9:ea:f4:ca:de:d7: 91:f0:1d:65 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICASUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUFFMkUxMTAvBgNVBAUTKEREMjQzMkQ4QUQ2QkIzRTlFOTk2NTU4MEJCQzZEMjIy MTkwN0IzRjcwHhcNMjUxMDE5MDczNDU3WhcNMjUxMDI2MDczNDU3WjAYMRYwFAYD VQQDEw02OGY0OTRhMi0zOGE5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApXPLl2eNzTiFzut9fEwXJDKiZbmc6QqlzM/n+DpOAtZnLayBkRJ0hPb2Xyo9 8OCCq/yzkWu68xP1uFAes1xSRiGxNnT0+J2ERw4735pPXp3v0WQofG+cu65XrIp2 5aZJrVTSyPv88hcZneWRyDNfVwJY4CHrIP2+W5x77hqp4yvOa0eUDfW2yvh0cbkr wX4se2Bj2hKa9Hqe7eP/9Fjx4+/0yr7Z9o8nTRzxQhxlNFLa/g/R5CO/ZxEIBCWF 0e4YMcpvzkMjDRN5eVXBbI4hBBuqN57D8IhvW+D/a/Ok0MXnAmy4pFcZbG90h6T7 x4qGKVmwszTdADB2B/CQSdb4ewIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLG8tX0b +nPXOs/j5y+/h9AQ1/VGMB8GA1UdIwQYMBaAFN0kMtita7Pp6ZZVgLvG0iIZB7P3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQUUyRS9FNzFBMEJCQ0Yy MTcxMUVFQkNDQzMxMjBDNEY5QUUwMi8zU1F5MksxcnMtbnBsbFdBdThiU0loa0hz X2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzNTUXkySzFycy1ucGxsV0F1OGJTSWhrSHNfYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB QUUyRS9FNzFBMEJCQ0YyMTcxMUVFQkNDQzMxMjBDNEY5QUUwMi8zU1F5MksxcnMt bnBsbFdBdThiU0loa0hzX2MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBaqBdSaXVA2B64Nx4rclwlHMtNCFzZT45laeWCky+aM6Fjgx2AN/1H S7+dURRY8ZPl+Qd/TiFsIhfIEcIC6B2CcyyC1RBiZM1CPOIiu3T2BtrZOti+cyBx mG0T6IBscby9ywlT8gzFo1EMZs4rIozT5bF189hcU4hByhodXOVsZsxTfuZdY7TY OM/3OlZZvwbOgMU7caD62SbB2zC7qKFP44oRVjjaHppvBJRy2J3e8DHqvJBlxfcH scJA2b8iCY5xvwSwE2hehjVbZr6fp4timzrsazuvH60UqATKpTmgEQ5KmjOh5Tek 1BaUdrvPFNDAdN1j1yHJ6vTK3teR8B1l -----END CERTIFICATE-----Generated at Mon Oct 20 12:43:30 2025 by rpki-client