$ rpki-client -vvf rpki.apnic.net/member_repository/A91AE6B9/526E16A4044E11EA8442D40FC4F9AE02/3qLQJgwXCVFn4eO81lmJ_nZHy2o.mft File: 3qLQJgwXCVFn4eO81lmJ_nZHy2o.mft (raw, json) Hash identifier: IGXx3fYng8V2T5jzZw+HC9x46kOA7wP+w+/RCZ48Shw= Subject key identifier: BC:48:06:BB:B3:7A:00:59:EB:06:17:B9:9E:1F:C5:8E:55:35:DB:F1 Authority key identifier: DE:A2:D0:26:0C:17:09:51:67:E1:E3:BC:D6:59:89:FE:76:47:CB:6A Certificate issuer: /CN=A91AE6B9/serialNumber=DEA2D0260C17095167E1E3BCD65989FE7647CB6A Certificate serial: 0C97 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3qLQJgwXCVFn4eO81lmJ_nZHy2o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AE6B9/526E16A4044E11EA8442D40FC4F9AE02/3qLQJgwXCVFn4eO81lmJ_nZHy2o.mft Manifest number: 0C90 Signing time: Sat 18 Oct 2025 19:01:29 +0000 Manifest this update: Sat 18 Oct 2025 19:01:29 +0000 Manifest next update: Sat 25 Oct 2025 19:01:29 +0000 Files and hashes: 1: 3qLQJgwXCVFn4eO81lmJ_nZHy2o.crl (hash: z5otHQv9WAkwz6me3zZ1+L0Ivds8ccR9UvazbVsfSjo=) 2: D91746DE044F11EA8C37D012C4F9AE02.roa (hash: alyiVZNnvo5j+FeNDvZT50h35M8ryhRQyKsBnyLFnkg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AE6B9/526E16A4044E11EA8442D40FC4F9AE02/3qLQJgwXCVFn4eO81lmJ_nZHy2o.crl rsync://rpki.apnic.net/member_repository/A91AE6B9/526E16A4044E11EA8442D40FC4F9AE02/3qLQJgwXCVFn4eO81lmJ_nZHy2o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3qLQJgwXCVFn4eO81lmJ_nZHy2o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 19:01:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3223 (0xc97) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AE6B9, serialNumber=DEA2D0260C17095167E1E3BCD65989FE7647CB6A Validity Not Before: Oct 18 19:01:29 2025 GMT Not After : Oct 25 19:01:29 2025 GMT Subject: CN=68f3e409-5337 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:47:ae:05:f7:17:db:35:47:5a:c0:10:b8:eb: 65:f7:2f:84:6d:3b:7a:76:65:10:93:4b:31:02:5b: e2:14:5c:9c:18:93:df:e5:90:c8:ce:60:18:05:e5: b3:99:c6:ec:2d:34:69:d9:c9:73:ba:71:ee:80:7d: e8:74:e1:e9:9b:d6:1f:4c:6b:70:26:ac:2e:b3:2c: fb:e4:6f:da:9f:c1:4d:79:54:0c:35:55:3e:8c:92: d7:09:78:67:3c:aa:75:c7:b2:3d:50:dc:c5:37:19: 39:06:21:4e:3e:49:5f:f2:bb:a2:74:b6:36:67:fe: da:fe:6a:5a:8c:91:0c:8a:ea:cf:8c:65:94:ff:6d: 72:df:d1:27:0b:3e:0b:c5:8f:76:c9:bb:2b:e8:0d: 07:a9:6b:8e:1d:88:4c:2d:f2:ee:d3:89:41:b0:5c: 3c:07:92:00:0a:04:b8:98:01:a1:e4:3a:1b:66:49: 98:6f:d0:81:89:4b:c4:01:58:1e:72:44:16:fc:29: 2a:0f:a6:84:86:01:5f:0e:03:19:0b:ff:41:30:f5: 01:40:13:38:3b:4a:42:7a:86:eb:41:5c:8a:59:a2: e9:90:fd:b7:01:04:cf:d5:c9:da:01:8d:12:89:af: ad:38:b6:16:7c:e9:75:f2:de:e5:9d:39:18:a5:7f: 52:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:48:06:BB:B3:7A:00:59:EB:06:17:B9:9E:1F:C5:8E:55:35:DB:F1 X509v3 Authority Key Identifier: keyid:DE:A2:D0:26:0C:17:09:51:67:E1:E3:BC:D6:59:89:FE:76:47:CB:6A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AE6B9/526E16A4044E11EA8442D40FC4F9AE02/3qLQJgwXCVFn4eO81lmJ_nZHy2o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3qLQJgwXCVFn4eO81lmJ_nZHy2o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AE6B9/526E16A4044E11EA8442D40FC4F9AE02/3qLQJgwXCVFn4eO81lmJ_nZHy2o.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a5:cc:4f:6e:c3:d5:28:c6:59:fc:de:dc:68:fc:77:19:f1:1a: 29:e7:66:b4:17:a8:12:23:1b:a6:a9:11:65:ce:bb:5e:30:10: 80:9d:7a:61:90:b3:a2:a1:0c:4e:d4:55:ab:89:13:ae:af:7d: 65:f3:c1:78:fe:75:a6:e2:8b:b5:6b:1a:ce:d2:00:a4:5e:f1: 96:26:3f:90:cd:8a:49:98:ba:4d:41:6e:56:f1:52:ab:45:60: 56:dd:e9:9d:3b:fc:37:cb:8f:50:71:c6:da:90:96:82:6d:e1: b5:4f:09:38:e6:bc:f7:0e:97:f6:83:67:b8:3b:f6:8a:39:5e: c6:68:31:01:a3:27:0a:0c:66:07:ce:37:e4:fe:d1:6e:6a:f4: 9b:9c:b6:48:06:d0:80:7d:d2:ab:e7:7d:50:a2:c9:e1:1f:39: 20:08:74:6a:66:e8:80:a6:4b:ff:b3:4f:6e:49:a6:86:8d:58: 8f:a8:27:73:00:29:de:8a:b2:8a:41:5b:24:69:c2:43:9e:07: 3a:a6:d0:9b:35:23:a0:25:82:ef:10:76:d7:64:c0:af:e9:40: d4:e3:84:a5:90:d2:e2:88:7e:a9:31:70:0c:04:00:a3:94:07: 4d:a6:6f:76:c3:69:5f:03:c0:e6:f5:a5:8e:1b:c8:70:75:07: 2a:e3:a5:a3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDJcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUU2QjkxMTAvBgNVBAUTKERFQTJEMDI2MEMxNzA5NTE2N0UxRTNCQ0Q2NTk4OUZF NzY0N0NCNkEwHhcNMjUxMDE4MTkwMTI5WhcNMjUxMDI1MTkwMTI5WjAYMRYwFAYD VQQDEw02OGYzZTQwOS01MzM3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0UeuBfcX2zVHWsAQuOtl9y+EbTt6dmUQk0sxAlviFFycGJPf5ZDIzmAYBeWz mcbsLTRp2clzunHugH3odOHpm9YfTGtwJqwusyz75G/an8FNeVQMNVU+jJLXCXhn PKp1x7I9UNzFNxk5BiFOPklf8ruidLY2Z/7a/mpajJEMiurPjGWU/21y39EnCz4L xY92ybsr6A0HqWuOHYhMLfLu04lBsFw8B5IACgS4mAGh5DobZkmYb9CBiUvEAVge ckQW/CkqD6aEhgFfDgMZC/9BMPUBQBM4O0pCeobrQVyKWaLpkP23AQTP1cnaAY0S ia+tOLYWfOl18t7lnTkYpX9SFQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLxIBruz egBZ6wYXuZ4fxY5VNdvxMB8GA1UdIwQYMBaAFN6i0CYMFwlRZ+HjvNZZif52R8tq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBRTZCOS81MjZFMTZBNDA0 NEUxMUVBODQ0MkQ0MEZDNEY5QUUwMi8zcUxRSmd3WENWRm40ZU84MWxtSl9uWkh5 Mm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzNxTFFKZ3dYQ1ZGbjRlTzgxbG1KX25aSHkyby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB RTZCOS81MjZFMTZBNDA0NEUxMUVBODQ0MkQ0MEZDNEY5QUUwMi8zcUxRSmd3WENW Rm40ZU84MWxtSl9uWkh5Mm8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQClzE9uw9Uoxln83txo/HcZ8Rop52a0F6gSIxumqRFlzrteMBCAnXph kLOioQxO1FWriROur31l88F4/nWm4ou1axrO0gCkXvGWJj+QzYpJmLpNQW5W8VKr RWBW3emdO/w3y49QccbakJaCbeG1Twk45rz3Dpf2g2e4O/aKOV7GaDEBoycKDGYH zjfk/tFuavSbnLZIBtCAfdKr531QosnhHzkgCHRqZuiApkv/s09uSaaGjViPqCdz ACneirKKQVskacJDngc6ptCbNSOgJYLvEHbXZMCv6UDU44SlkNLiiH6pMXAMBACj lAdNpm92w2lfA8Dm9aWOG8hwdQcq46Wj -----END CERTIFICATE-----Generated at Mon Oct 20 01:46:08 2025 by rpki-client