$ rpki-client -vvf rpki.apnic.net/member_repository/A911D834/DFBA50B81D8D11E2824DEDEB08B02CD2/_bJ1TZUGMOsR34TihVyqt9Fib4A.mft File: _bJ1TZUGMOsR34TihVyqt9Fib4A.mft (raw, json) Hash identifier: 453dnALi/Penz52Z5GpRKXTZcsFpzl5vgOmzOQAt8/M= Subject key identifier: 45:18:F0:93:60:88:A0:9F:7B:01:FF:E0:92:80:71:54:5D:7F:16:54 Authority key identifier: FD:B2:75:4D:95:06:30:EB:11:DF:84:E2:85:5C:AA:B7:D1:62:6F:80 Certificate issuer: /CN=A911D834/serialNumber=FDB2754D950630EB11DF84E2855CAAB7D1626F80 Certificate serial: 3530 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_bJ1TZUGMOsR34TihVyqt9Fib4A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911D834/DFBA50B81D8D11E2824DEDEB08B02CD2/_bJ1TZUGMOsR34TihVyqt9Fib4A.mft Manifest number: 34FC Signing time: Sat 18 Oct 2025 14:41:53 +0000 Manifest this update: Sat 18 Oct 2025 14:41:53 +0000 Manifest next update: Sat 25 Oct 2025 14:41:53 +0000 Files and hashes: 1: _bJ1TZUGMOsR34TihVyqt9Fib4A.crl (hash: 8dV9gzIo/VgHHXVJFTbFMphpC6HbQ1oNRYStiWJQQV0=) 2: 5F436F7E39A011EE923F683AC4F9AE02.roa (hash: 7R/SjQUQ2hP0HbRnbYfsLnedhLehfUDAaOiYlklNqvo=) 3: DA8A3692A59411F0BF072D6DC4F9AE02.roa (hash: pbD3JP/HzqcUzvlBhqeP9HbWOKNkQzUxda+U++yeQSw=) 4: 338EAE62944C11F0A5549211C4F9AE02.roa (hash: MaIZ9WJ2QSPLv1IkCG1fAbYtGbONfG/gCy6D1hTgYdk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911D834/DFBA50B81D8D11E2824DEDEB08B02CD2/_bJ1TZUGMOsR34TihVyqt9Fib4A.crl rsync://rpki.apnic.net/member_repository/A911D834/DFBA50B81D8D11E2824DEDEB08B02CD2/_bJ1TZUGMOsR34TihVyqt9Fib4A.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_bJ1TZUGMOsR34TihVyqt9Fib4A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 14:41:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13616 (0x3530) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911D834, serialNumber=FDB2754D950630EB11DF84E2855CAAB7D1626F80 Validity Not Before: Oct 18 14:41:53 2025 GMT Not After : Oct 25 14:41:53 2025 GMT Subject: CN=68f3a731-239f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:fe:cf:aa:d8:e8:56:5d:e0:18:ca:13:9c:88: 2c:eb:79:7b:cc:c7:02:8b:7a:99:5f:44:c1:5c:13: 82:05:74:84:67:fd:b9:05:24:fd:9e:47:aa:54:da: 4c:e3:40:0d:5a:00:34:ca:a4:2e:e9:a2:3e:6e:b0: 26:b4:e8:3d:77:a1:72:72:f3:26:11:c5:2d:26:ed: 37:10:d3:38:5e:f1:4c:8a:80:c8:e8:0f:1a:80:96: 3c:07:38:a9:71:31:11:52:43:53:90:b8:4a:54:bc: 1b:89:41:a4:3e:a2:49:d7:b2:e5:61:73:79:b7:8f: 6c:06:12:21:b4:67:7d:09:1a:cd:82:c4:67:30:89: 82:0a:9d:a0:65:8d:5f:77:33:bf:fe:21:90:05:88: 36:bc:72:93:8b:9f:7e:bc:8b:40:07:ee:88:9a:25: c0:ea:ca:b6:bf:3a:7a:14:0b:79:72:d9:83:6e:cf: 5c:f9:71:94:a9:01:da:51:b7:eb:f3:6b:60:4d:21: f3:06:0e:00:a6:7c:33:e7:8f:47:18:6b:46:d9:02: ce:aa:09:dd:bc:4f:a3:9b:e5:17:97:57:97:4c:20: 56:7c:1b:09:8a:e7:c7:be:da:76:ac:8e:9d:c5:a2: ae:d1:5f:a9:a7:71:12:25:20:8e:c4:dc:a6:8f:8f: 20:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:18:F0:93:60:88:A0:9F:7B:01:FF:E0:92:80:71:54:5D:7F:16:54 X509v3 Authority Key Identifier: keyid:FD:B2:75:4D:95:06:30:EB:11:DF:84:E2:85:5C:AA:B7:D1:62:6F:80 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911D834/DFBA50B81D8D11E2824DEDEB08B02CD2/_bJ1TZUGMOsR34TihVyqt9Fib4A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_bJ1TZUGMOsR34TihVyqt9Fib4A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911D834/DFBA50B81D8D11E2824DEDEB08B02CD2/_bJ1TZUGMOsR34TihVyqt9Fib4A.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0d:dd:c9:d2:59:fe:4b:7a:a5:ac:cc:e7:58:58:87:1d:92:a7: 98:b5:86:c6:66:bc:45:4f:8c:c2:28:bf:bb:81:31:df:4a:99: 23:a7:8d:d6:c5:96:09:94:1b:b0:6e:93:73:41:38:93:4e:9a: 9a:e2:0a:2f:12:b0:c1:98:ac:f7:cb:3c:c6:ce:23:97:92:a1: bf:4b:53:1b:d6:84:40:b2:2b:29:35:3f:de:17:f4:40:a0:34: 04:61:fb:0f:ad:a0:1e:0a:87:dd:95:d4:9d:63:95:17:d4:4e: 6c:aa:62:d4:c7:ea:73:53:bc:6b:33:b5:28:fb:51:62:85:27: 0d:68:1b:e5:08:7b:45:64:5a:fd:95:b9:75:a1:d8:27:64:a5: 68:bb:c2:69:04:7e:e6:18:99:95:66:5f:6d:f4:a3:43:ca:30: 99:06:a7:42:a8:9f:e6:99:66:d1:c6:e8:f4:86:e8:aa:01:e3: 20:db:92:5b:fb:1b:37:77:a3:af:10:31:e0:6b:15:5d:1d:ee: 7c:b7:f8:1d:3d:94:15:87:4b:ed:33:0e:12:2a:a8:44:a8:46: 53:61:6c:45:56:bd:d7:bf:dd:e7:89:e4:ee:f8:0b:11:48:d3: ca:a0:57:f4:9f:dc:34:16:5a:ba:22:61:4a:88:37:bf:de:33: 29:38:05:21 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNTAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUQ4MzQxMTAvBgNVBAUTKEZEQjI3NTREOTUwNjMwRUIxMURGODRFMjg1NUNBQUI3 RDE2MjZGODAwHhcNMjUxMDE4MTQ0MTUzWhcNMjUxMDI1MTQ0MTUzWjAYMRYwFAYD VQQDEw02OGYzYTczMS0yMzlmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArf7PqtjoVl3gGMoTnIgs63l7zMcCi3qZX0TBXBOCBXSEZ/25BST9nkeqVNpM 40ANWgA0yqQu6aI+brAmtOg9d6FycvMmEcUtJu03ENM4XvFMioDI6A8agJY8Bzip cTERUkNTkLhKVLwbiUGkPqJJ17LlYXN5t49sBhIhtGd9CRrNgsRnMImCCp2gZY1f dzO//iGQBYg2vHKTi59+vItAB+6ImiXA6sq2vzp6FAt5ctmDbs9c+XGUqQHaUbfr 82tgTSHzBg4Apnwz549HGGtG2QLOqgndvE+jm+UXl1eXTCBWfBsJiufHvtp2rI6d xaKu0V+pp3ESJSCOxNymj48gMwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEUY8JNg iKCfewH/4JKAcVRdfxZUMB8GA1UdIwQYMBaAFP2ydU2VBjDrEd+E4oVcqrfRYm+A MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRDgzNC9ERkJBNTBCODFE OEQxMUUyODI0REVERUIwOEIwMkNEMi9fYkoxVFpVR01Pc1IzNFRpaFZ5cXQ5Rmli NEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL19iSjFUWlVHTU9zUjM0VGloVnlxdDlGaWI0QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx RDgzNC9ERkJBNTBCODFEOEQxMUUyODI0REVERUIwOEIwMkNEMi9fYkoxVFpVR01P c1IzNFRpaFZ5cXQ5RmliNEEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAN3cnSWf5LeqWszOdYWIcdkqeYtYbGZrxFT4zCKL+7gTHfSpkjp43W xZYJlBuwbpNzQTiTTpqa4govErDBmKz3yzzGziOXkqG/S1Mb1oRAsispNT/eF/RA oDQEYfsPraAeCofdldSdY5UX1E5sqmLUx+pzU7xrM7Uo+1FihScNaBvlCHtFZFr9 lbl1odgnZKVou8JpBH7mGJmVZl9t9KNDyjCZBqdCqJ/mmWbRxuj0huiqAeMg25Jb +xs3d6OvEDHgaxVdHe58t/gdPZQVh0vtMw4SKqhEqEZTYWxFVr3Xv93nieTu+AsR SNPKoFf0n9w0Flq6ImFKiDe/3jMpOAUh -----END CERTIFICATE-----Generated at Mon Oct 20 06:53:40 2025 by rpki-client