$ rpki-client -vvf rpki.apnic.net/member_repository/A912434D/FC20913858DD11F08FAADE66C4F9AE02/MNcZ-cbTfirJ9NbUsffZeOwqMok.mft File: MNcZ-cbTfirJ9NbUsffZeOwqMok.mft (raw, json) Hash identifier: DNydRnVf6It4ZGUsL3tStsR9tKy4IGV4ba6R6MdtTw8= Subject key identifier: DF:70:82:A4:02:5A:E6:02:FD:54:64:91:54:68:14:A0:65:44:65:E4 Authority key identifier: 30:D7:19:F9:C6:D3:7E:2A:C9:F4:D6:D4:B1:F7:D9:78:EC:2A:32:89 Certificate issuer: /CN=A912434D/serialNumber=30D719F9C6D37E2AC9F4D6D4B1F7D978EC2A3289 Certificate serial: 3A Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MNcZ-cbTfirJ9NbUsffZeOwqMok.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912434D/FC20913858DD11F08FAADE66C4F9AE02/MNcZ-cbTfirJ9NbUsffZeOwqMok.mft Manifest number: 39 Signing time: Sun 19 Oct 2025 11:00:24 +0000 Manifest this update: Sun 19 Oct 2025 11:00:24 +0000 Manifest next update: Sun 26 Oct 2025 11:00:24 +0000 Files and hashes: 1: MNcZ-cbTfirJ9NbUsffZeOwqMok.crl (hash: Jbpl9SBhK2bBX9kymqR73Sqs0ESwrYXmiBFWRZqmzyE=) 2: CD9B554E58DF11F0A0F08D09C4F9AE02.roa (hash: O8Z/SaLnBNWGRjL6AfyE+33fscQi14WCCS2K6DsHHDc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912434D/FC20913858DD11F08FAADE66C4F9AE02/MNcZ-cbTfirJ9NbUsffZeOwqMok.crl rsync://rpki.apnic.net/member_repository/A912434D/FC20913858DD11F08FAADE66C4F9AE02/MNcZ-cbTfirJ9NbUsffZeOwqMok.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MNcZ-cbTfirJ9NbUsffZeOwqMok.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 11:00:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58 (0x3a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912434D, serialNumber=30D719F9C6D37E2AC9F4D6D4B1F7D978EC2A3289 Validity Not Before: Oct 19 11:00:24 2025 GMT Not After : Oct 26 11:00:24 2025 GMT Subject: CN=68f4c4c8-8dfd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:92:fb:a3:32:72:61:d8:19:a3:60:08:48:57: 0a:c5:8e:c2:ef:e1:22:48:50:a1:c3:5c:e5:4b:76: d6:6a:93:e4:2d:84:6f:a8:00:6d:44:69:e3:de:31: 09:be:df:98:23:09:f3:d5:b6:37:52:17:ce:fb:e9: 49:39:82:c6:00:5a:9e:3b:a8:ed:00:55:42:ae:3f: 71:55:7a:ad:f1:df:68:d1:6b:c9:01:b3:e2:b6:28: 3b:f8:ef:e1:f6:a7:f7:1e:ae:bf:70:30:b0:4a:8d: 61:0a:c2:65:56:34:fc:48:b9:f4:a6:3c:89:4a:39: a9:01:a8:8c:63:a0:52:2d:fe:5b:3b:db:6b:09:9b: c8:19:a2:83:49:1f:07:e3:15:07:21:88:c1:9f:97: 9b:eb:dd:f1:59:8e:72:f3:af:47:d3:44:27:bc:17: 70:1c:48:56:8e:e0:a1:cb:9b:75:00:4a:11:be:3b: 07:79:38:f5:56:73:14:0d:7c:1e:1a:fa:66:e6:e8: a3:ac:69:36:18:1a:e2:ba:6b:ff:16:f4:c2:db:de: d0:0d:46:f2:02:b9:f6:18:4b:98:9f:09:97:28:c5: c1:19:0d:c2:5d:e0:fd:79:f0:7b:fc:27:d6:a0:97: df:76:34:e8:4a:1c:9b:27:fa:38:1f:25:9f:62:f6: 98:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:70:82:A4:02:5A:E6:02:FD:54:64:91:54:68:14:A0:65:44:65:E4 X509v3 Authority Key Identifier: keyid:30:D7:19:F9:C6:D3:7E:2A:C9:F4:D6:D4:B1:F7:D9:78:EC:2A:32:89 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912434D/FC20913858DD11F08FAADE66C4F9AE02/MNcZ-cbTfirJ9NbUsffZeOwqMok.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MNcZ-cbTfirJ9NbUsffZeOwqMok.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912434D/FC20913858DD11F08FAADE66C4F9AE02/MNcZ-cbTfirJ9NbUsffZeOwqMok.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 83:c5:33:de:b3:e3:88:18:c0:fa:94:40:29:20:25:6d:cf:fc: ed:b8:52:c8:4f:ee:b5:6b:2d:df:4b:ba:68:62:68:f5:15:a7: e9:52:e0:26:d8:5f:75:35:76:6e:ed:af:b1:36:04:14:ad:d9: 4a:ed:30:f2:48:1c:bf:ae:21:5b:6b:03:e6:3e:e2:e0:3f:b2: a6:2f:42:81:54:59:19:30:d8:6c:ab:e9:cf:d2:26:7e:6b:c9: 81:ff:e3:8a:22:d6:89:46:26:9c:fa:9c:af:8b:48:c1:9b:02: b3:6b:4e:5f:d3:ae:27:e7:ad:48:91:aa:22:67:c6:5b:74:f5: 32:db:e3:33:bf:df:b4:e3:4d:bd:f8:4f:83:0d:00:a6:93:27: 7e:b4:0a:c9:e9:36:af:ce:9d:44:45:7f:d6:f7:a4:0c:66:77: 10:4a:fa:82:9d:94:35:86:39:0d:7e:d7:19:50:fb:9d:39:2d: 5c:65:26:d2:b6:96:60:3b:a0:d2:ec:cc:7b:04:71:dd:1b:33: 33:e4:79:58:54:e7:af:f1:28:6d:86:3c:bc:0e:43:f7:7e:bb: c6:92:3f:20:7b:6b:de:e6:0c:a2:52:ae:24:9c:08:e9:50:a6: f8:4a:55:16:34:04:cc:35:66:32:91:52:a3:c7:8f:19:ac:89: 10:b7:f0:a8 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBOjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEy NDM0RDExMC8GA1UEBRMoMzBENzE5RjlDNkQzN0UyQUM5RjRENkQ0QjFGN0Q5NzhF QzJBMzI4OTAeFw0yNTEwMTkxMTAwMjRaFw0yNTEwMjYxMTAwMjRaMBgxFjAUBgNV BAMTDTY4ZjRjNGM4LThkZmQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQClkvujMnJh2BmjYAhIVwrFjsLv4SJIUKHDXOVLdtZqk+QthG+oAG1EaePeMQm+ 35gjCfPVtjdSF8776Uk5gsYAWp47qO0AVUKuP3FVeq3x32jRa8kBs+K2KDv47+H2 p/cerr9wMLBKjWEKwmVWNPxIufSmPIlKOakBqIxjoFIt/ls722sJm8gZooNJHwfj FQchiMGfl5vr3fFZjnLzr0fTRCe8F3AcSFaO4KHLm3UAShG+Owd5OPVWcxQNfB4a +mbm6KOsaTYYGuK6a/8W9MLb3tANRvICufYYS5ifCZcoxcEZDcJd4P158Hv8J9ag l992NOhKHJsn+jgfJZ9i9pjvAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU33CCpAJa 5gL9VGSRVGgUoGVEZeQwHwYDVR0jBBgwFoAUMNcZ+cbTfirJ9NbUsffZeOwqMokw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTI0MzREL0ZDMjA5MTM4NThE RDExRjA4RkFBREU2NkM0RjlBRTAyL01OY1otY2JUZmlySjlOYlVzZmZaZU93cU1v ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvTU5jWi1jYlRmaXJKOU5iVXNmZlplT3dxTW9rLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTI0 MzREL0ZDMjA5MTM4NThERDExRjA4RkFBREU2NkM0RjlBRTAyL01OY1otY2JUZmly SjlOYlVzZmZaZU93cU1vay5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAIPFM96z44gYwPqUQCkgJW3P/O24UshP7rVrLd9LumhiaPUVp+lS4CbY X3U1dm7tr7E2BBSt2UrtMPJIHL+uIVtrA+Y+4uA/sqYvQoFUWRkw2Gyr6c/SJn5r yYH/44oi1olGJpz6nK+LSMGbArNrTl/TrifnrUiRqiJnxlt09TLb4zO/37TjTb34 T4MNAKaTJ360CsnpNq/OnURFf9b3pAxmdxBK+oKdlDWGOQ1+1xlQ+505LVxlJtK2 lmA7oNLszHsEcd0bMzPkeVhU56/xKG2GPLwOQ/d+u8aSPyB7a97mDKJSriScCOlQ pvhKVRY0BMw1ZjKRUqPHjxmsiRC38Kg= -----END CERTIFICATE-----Generated at Tue Oct 21 00:03:55 2025 by rpki-client