$ rpki-client -vvf rpki.apnic.net/member_repository/A91E9F31/092D2516BE6211EE8C37CB3BC4F9AE02/3NoGnj7_iVbAFXKBanAjUZXwZyU.mft File: 3NoGnj7_iVbAFXKBanAjUZXwZyU.mft (raw, json) Hash identifier: RHggqYxXlHCuicFAP+We+auxz2cox9b5gkaxVig03NA= Subject key identifier: 42:30:F2:53:E7:0B:F7:32:7D:D1:7C:EF:50:1C:2D:AF:3D:18:56:A0 Authority key identifier: DC:DA:06:9E:3E:FF:89:56:C0:15:72:81:6A:70:23:51:95:F0:67:25 Certificate issuer: /CN=A91E9F31/serialNumber=DCDA069E3EFF8956C01572816A70235195F06725 Certificate serial: 014A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3NoGnj7_iVbAFXKBanAjUZXwZyU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E9F31/092D2516BE6211EE8C37CB3BC4F9AE02/3NoGnj7_iVbAFXKBanAjUZXwZyU.mft Manifest number: 0147 Signing time: Sun 19 Oct 2025 07:07:18 +0000 Manifest this update: Sun 19 Oct 2025 07:07:17 +0000 Manifest next update: Sun 26 Oct 2025 07:07:17 +0000 Files and hashes: 1: 3NoGnj7_iVbAFXKBanAjUZXwZyU.crl (hash: 6boAwApDAUWet/1jpom2Xnbe9ku1SW/RxiFpWuxfcuA=) 2: 37D72D7CC17C11EE8391A218C4F9AE02.roa (hash: coWHQK+5srkvJCmtuWOSC8KHDobmPnetCsZNTnS3ZsU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E9F31/092D2516BE6211EE8C37CB3BC4F9AE02/3NoGnj7_iVbAFXKBanAjUZXwZyU.crl rsync://rpki.apnic.net/member_repository/A91E9F31/092D2516BE6211EE8C37CB3BC4F9AE02/3NoGnj7_iVbAFXKBanAjUZXwZyU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3NoGnj7_iVbAFXKBanAjUZXwZyU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 07:07:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 330 (0x14a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E9F31, serialNumber=DCDA069E3EFF8956C01572816A70235195F06725 Validity Not Before: Oct 19 07:07:17 2025 GMT Not After : Oct 26 07:07:17 2025 GMT Subject: CN=68f48e25-92ac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:e4:fe:d0:5f:68:77:20:21:ba:f6:e2:a1:31: aa:ef:b0:e7:5b:94:b7:b3:68:31:1a:42:48:9a:01: e6:3a:e8:10:9e:4f:6c:bb:d3:f4:76:5e:3b:69:a6: ad:4f:df:f7:e5:27:f1:c1:1c:eb:98:f5:83:74:00: 89:41:4b:c4:26:71:e2:11:38:7e:82:bf:32:c3:e3: 9b:f2:41:43:6c:61:a0:16:1c:36:82:46:1b:2d:7a: 62:57:01:ca:0c:c1:71:2c:d1:e3:ee:1c:9f:2c:47: 4b:3e:2f:11:bf:4f:d5:2f:71:1d:f0:89:0b:02:a3: 30:f3:ec:39:a0:e7:ff:32:28:6d:a4:a4:94:f6:72: ed:5a:5e:67:53:c4:bc:09:2b:01:02:95:a2:f0:8d: 8b:6f:72:19:ba:8f:6a:10:7b:e3:80:2f:6e:82:3c: 49:28:99:fd:33:6d:8c:64:85:7b:f3:1b:3e:6c:e6: bd:ee:3d:7e:8a:1a:10:b0:8c:e3:34:ac:3d:01:16: d7:a3:da:bb:78:ea:2f:f9:fc:a1:b9:4f:b1:02:a8: 49:c7:c4:16:db:08:cb:2a:b3:84:d8:41:5a:25:90: d6:b5:f3:b2:bc:e7:39:8d:eb:ba:94:59:91:59:fb: 11:4c:b0:4d:61:35:d0:a7:b0:fb:f3:8b:e8:8c:bd: 34:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:30:F2:53:E7:0B:F7:32:7D:D1:7C:EF:50:1C:2D:AF:3D:18:56:A0 X509v3 Authority Key Identifier: keyid:DC:DA:06:9E:3E:FF:89:56:C0:15:72:81:6A:70:23:51:95:F0:67:25 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E9F31/092D2516BE6211EE8C37CB3BC4F9AE02/3NoGnj7_iVbAFXKBanAjUZXwZyU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3NoGnj7_iVbAFXKBanAjUZXwZyU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E9F31/092D2516BE6211EE8C37CB3BC4F9AE02/3NoGnj7_iVbAFXKBanAjUZXwZyU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0a:6b:c5:46:cc:e7:69:bc:06:5e:f4:ce:53:4a:7c:99:4c:c7: 43:7d:f3:7e:63:ab:3c:cb:bd:1c:2e:ac:64:06:b5:7e:bf:9e: 51:03:a0:8c:84:f0:f4:9d:90:16:12:8d:92:62:68:bb:bd:0c: ef:15:58:7f:54:36:4c:f8:19:6a:7e:4a:4f:46:fb:41:bb:b5: 43:ac:bf:03:c5:15:09:f8:d4:f0:d8:e9:a0:f1:45:e2:e7:96: 26:43:0d:8b:56:10:4e:60:ce:47:cd:6c:ec:ab:61:7a:26:53: 4b:ca:b9:ad:ba:ec:7c:28:39:82:ce:1a:1e:77:d4:2a:b0:af: 8d:9b:d3:3b:df:b8:38:b9:77:a3:85:0e:df:10:6a:59:21:ba: 66:4b:21:81:46:7c:33:b1:9e:1e:90:a6:9e:ca:80:12:91:b5: 1a:8f:fd:12:cc:f6:6f:57:67:f9:1d:a6:c4:fc:9c:d4:07:f6: ea:82:f6:d0:98:ad:54:b4:7c:2a:25:fe:0a:10:a3:aa:ea:29: 69:33:92:f2:c4:a1:00:ac:e1:3a:84:bc:9a:a5:3e:8a:51:4c: c6:ad:58:cf:d5:06:ee:45:1d:95:cc:ee:03:80:30:6f:fc:18: 04:23:2c:42:0f:e7:53:36:4f:09:a7:d8:ec:54:9e:0d:c9:51: c8:28:b0:50 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAUowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTlGMzExMTAvBgNVBAUTKERDREEwNjlFM0VGRjg5NTZDMDE1NzI4MTZBNzAyMzUx OTVGMDY3MjUwHhcNMjUxMDE5MDcwNzE3WhcNMjUxMDI2MDcwNzE3WjAYMRYwFAYD VQQDEw02OGY0OGUyNS05MmFjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxeT+0F9odyAhuvbioTGq77DnW5S3s2gxGkJImgHmOugQnk9su9P0dl47aaat T9/35SfxwRzrmPWDdACJQUvEJnHiETh+gr8yw+Ob8kFDbGGgFhw2gkYbLXpiVwHK DMFxLNHj7hyfLEdLPi8Rv0/VL3Ed8IkLAqMw8+w5oOf/MihtpKSU9nLtWl5nU8S8 CSsBApWi8I2Lb3IZuo9qEHvjgC9ugjxJKJn9M22MZIV78xs+bOa97j1+ihoQsIzj NKw9ARbXo9q7eOov+fyhuU+xAqhJx8QW2wjLKrOE2EFaJZDWtfOyvOc5jeu6lFmR WfsRTLBNYTXQp7D784vojL00XQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEIw8lPn C/cyfdF871AcLa89GFagMB8GA1UdIwQYMBaAFNzaBp4+/4lWwBVygWpwI1GV8Gcl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFOUYzMS8wOTJEMjUxNkJF NjIxMUVFOEMzN0NCM0JDNEY5QUUwMi8zTm9Hbmo3X2lWYkFGWEtCYW5BalVaWHda eVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzNOb0duajdfaVZiQUZYS0JhbkFqVVpYd1p5VS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF OUYzMS8wOTJEMjUxNkJFNjIxMUVFOEMzN0NCM0JDNEY5QUUwMi8zTm9Hbmo3X2lW YkFGWEtCYW5BalVaWHdaeVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAKa8VGzOdpvAZe9M5TSnyZTMdDffN+Y6s8y70cLqxkBrV+v55RA6CM hPD0nZAWEo2SYmi7vQzvFVh/VDZM+BlqfkpPRvtBu7VDrL8DxRUJ+NTw2Omg8UXi 55YmQw2LVhBOYM5HzWzsq2F6JlNLyrmtuux8KDmCzhoed9QqsK+Nm9M737g4uXej hQ7fEGpZIbpmSyGBRnwzsZ4ekKaeyoASkbUaj/0SzPZvV2f5HabE/JzUB/bqgvbQ mK1UtHwqJf4KEKOq6ilpM5LyxKEArOE6hLyapT6KUUzGrVjP1QbuRR2VzO4DgDBv /BgEIyxCD+dTNk8Jp9jsVJ4NyVHIKLBQ -----END CERTIFICATE-----Generated at Mon Oct 20 18:40:01 2025 by rpki-client