$ rpki-client -vvf rpki.apnic.net/member_repository/A91E4696/5FCD9FD4005511EEBE7A9241C4F9AE02/3nORs21uduLMQKkEd3LACw93Umw.mft File: 3nORs21uduLMQKkEd3LACw93Umw.mft (raw, json) Hash identifier: 7yWdrvsESsUecjBBMaRhK4Wjjo7zEC5cOltlUvSnTXI= Subject key identifier: D2:7D:3B:A9:06:84:BD:B1:41:2B:AA:EA:64:97:5B:4D:A2:32:44:E0 Authority key identifier: DE:73:91:B3:6D:6E:76:E2:CC:40:A9:04:77:72:C0:0B:0F:77:52:6C Certificate issuer: /CN=A91E4696/serialNumber=DE7391B36D6E76E2CC40A9047772C00B0F77526C Certificate serial: 01BD Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/3nORs21uduLMQKkEd3LACw93Umw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E4696/5FCD9FD4005511EEBE7A9241C4F9AE02/3nORs21uduLMQKkEd3LACw93Umw.mft Manifest number: 01BD Signing time: Sun 19 Oct 2025 04:40:37 +0000 Manifest this update: Sun 19 Oct 2025 04:40:36 +0000 Manifest next update: Sun 26 Oct 2025 04:40:36 +0000 Files and hashes: 1: 3nORs21uduLMQKkEd3LACw93Umw.crl (hash: QbEit/RAUpKvdMRW0tPk5SL2HPgvuk/xDENGSxOE6jM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E4696/5FCD9FD4005511EEBE7A9241C4F9AE02/3nORs21uduLMQKkEd3LACw93Umw.crl rsync://rpki.apnic.net/member_repository/A91E4696/5FCD9FD4005511EEBE7A9241C4F9AE02/3nORs21uduLMQKkEd3LACw93Umw.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/3nORs21uduLMQKkEd3LACw93Umw.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 04:40:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 445 (0x1bd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E4696, serialNumber=DE7391B36D6E76E2CC40A9047772C00B0F77526C Validity Not Before: Oct 19 04:40:36 2025 GMT Not After : Oct 26 04:40:36 2025 GMT Subject: CN=68f46bc4-cbac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:dc:7d:05:eb:08:b4:e1:4c:4d:81:ed:41:e2: 99:33:1e:3b:14:dc:36:ea:bd:4f:00:d1:d9:26:1c: f7:37:3e:93:29:bf:ef:c7:c5:01:9c:09:7a:ba:9f: 8c:44:8e:0a:11:07:e4:1e:74:da:f4:c5:69:8a:88: 4a:72:3d:7e:76:c4:a1:8a:a2:f5:7f:e1:96:56:61: dc:7b:d9:83:b3:0a:7a:c2:6d:31:5c:4f:14:92:7c: 06:8b:dd:90:f9:39:70:34:a6:25:3d:c4:fc:9c:42: e4:72:c6:87:35:5a:bb:a3:66:68:3d:67:69:38:fe: f5:cd:51:65:4f:21:5e:03:26:bb:db:9b:72:51:78: 97:6e:f6:c0:e4:23:89:a8:72:93:1b:99:16:28:78: 81:9d:ee:45:a0:67:73:33:dd:6b:26:57:a0:bb:b6: 3a:20:90:c8:1b:73:dd:19:b9:eb:c4:37:91:53:11: 11:66:bb:11:c5:b9:32:d1:9e:73:3a:d7:7b:1c:19: a4:47:c2:37:49:32:0a:5a:1d:46:5c:7e:59:80:c5: 94:bc:e8:d7:29:e8:2b:36:30:c0:91:2c:e4:14:c3: da:e3:9b:f6:20:fe:81:4e:68:ca:96:0b:8f:1e:c8: dd:8b:df:bb:e3:74:02:b5:2e:f4:2c:19:39:3a:1b: 26:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:7D:3B:A9:06:84:BD:B1:41:2B:AA:EA:64:97:5B:4D:A2:32:44:E0 X509v3 Authority Key Identifier: keyid:DE:73:91:B3:6D:6E:76:E2:CC:40:A9:04:77:72:C0:0B:0F:77:52:6C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E4696/5FCD9FD4005511EEBE7A9241C4F9AE02/3nORs21uduLMQKkEd3LACw93Umw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/3nORs21uduLMQKkEd3LACw93Umw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E4696/5FCD9FD4005511EEBE7A9241C4F9AE02/3nORs21uduLMQKkEd3LACw93Umw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 47:8e:ad:67:4d:33:89:54:32:df:06:d4:88:f9:51:d0:c1:6b: 5f:58:91:4c:ef:45:e6:6c:ff:dd:f2:0f:f7:f1:03:d7:c9:54: 97:bf:f0:b1:57:12:eb:67:ea:61:a0:ad:b8:c3:50:13:84:3c: 5c:bd:0f:c8:f8:ff:e3:13:e5:bd:34:e8:86:17:03:05:76:30: f5:91:ae:74:2a:b5:03:ef:1c:a6:a0:26:49:45:57:c4:cc:16: 20:d4:58:8c:1c:e6:3c:1c:33:fe:05:73:05:63:77:30:a1:9a: a0:e3:5c:fd:ad:e2:50:da:f3:b6:65:31:af:58:6d:88:74:4d: 99:4a:6f:99:38:ec:cd:7e:cd:14:62:ab:71:f1:05:43:59:c2: de:b1:f7:2b:90:01:ae:ca:66:05:3d:23:e4:80:79:1c:ce:6f: d3:bb:10:b7:d9:11:dd:cd:ef:b6:c9:9d:ef:7c:c3:23:aa:af: d5:de:6f:17:30:55:4e:08:dc:95:99:b5:96:df:4f:14:53:6f: 74:18:54:8c:81:81:1a:84:a8:bd:00:44:5c:04:35:fe:36:97: 9f:2a:57:89:f2:c9:4a:21:01:ac:52:3b:a2:90:b9:61:fb:0c: 90:cf:01:9a:c3:d0:35:54:ff:13:74:29:11:b0:b0:41:b1:98: 3b:4b:18:61 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAb0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTQ2OTYxMTAvBgNVBAUTKERFNzM5MUIzNkQ2RTc2RTJDQzQwQTkwNDc3NzJDMDBC MEY3NzUyNkMwHhcNMjUxMDE5MDQ0MDM2WhcNMjUxMDI2MDQ0MDM2WjAYMRYwFAYD VQQDEw02OGY0NmJjNC1jYmFjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAutx9BesItOFMTYHtQeKZMx47FNw26r1PANHZJhz3Nz6TKb/vx8UBnAl6up+M RI4KEQfkHnTa9MVpiohKcj1+dsShiqL1f+GWVmHce9mDswp6wm0xXE8UknwGi92Q +TlwNKYlPcT8nELkcsaHNVq7o2ZoPWdpOP71zVFlTyFeAya725tyUXiXbvbA5COJ qHKTG5kWKHiBne5FoGdzM91rJlegu7Y6IJDIG3PdGbnrxDeRUxERZrsRxbky0Z5z Otd7HBmkR8I3STIKWh1GXH5ZgMWUvOjXKegrNjDAkSzkFMPa45v2IP6BTmjKlguP Hsjdi9+743QCtS70LBk5OhsmQQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNJ9O6kG hL2xQSuq6mSXW02iMkTgMB8GA1UdIwQYMBaAFN5zkbNtbnbizECpBHdywAsPd1Js MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNDY5Ni81RkNEOUZENDAw NTUxMUVFQkU3QTkyNDFDNEY5QUUwMi8zbk9SczIxdWR1TE1RS2tFZDNMQUN3OTNV bXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzNuT1JzMjF1ZHVMTVFLa0VkM0xBQ3c5M1Vtdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NDY5Ni81RkNEOUZENDAwNTUxMUVFQkU3QTkyNDFDNEY5QUUwMi8zbk9SczIxdWR1 TE1RS2tFZDNMQUN3OTNVbXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBHjq1nTTOJVDLfBtSI+VHQwWtfWJFM70XmbP/d8g/38QPXyVSXv/Cx VxLrZ+phoK24w1AThDxcvQ/I+P/jE+W9NOiGFwMFdjD1ka50KrUD7xymoCZJRVfE zBYg1FiMHOY8HDP+BXMFY3cwoZqg41z9reJQ2vO2ZTGvWG2IdE2ZSm+ZOOzNfs0U Yqtx8QVDWcLesfcrkAGuymYFPSPkgHkczm/TuxC32RHdze+2yZ3vfMMjqq/V3m8X MFVOCNyVmbWW308UU290GFSMgYEahKi9AERcBDX+NpefKleJ8slKIQGsUjuikLlh +wyQzwGaw9A1VP8TdCkRsLBBsZg7Sxhh -----END CERTIFICATE-----Generated at Tue Oct 21 02:10:30 2025 by rpki-client