$ rpki-client -vvf rpki.apnic.net/member_repository/A91474C3/6F8B52A01D7011E2BC11DAB408B02CD2/8_70YqTY4vf6BzWmq2Re5WNdqPI.mft File: 8_70YqTY4vf6BzWmq2Re5WNdqPI.mft (raw, json) Hash identifier: Yd2ZqSeemKe72kFbmEJ4AqfXOFFmU7+7UjLYcyEAGL8= Subject key identifier: 97:5E:CE:F9:61:5B:56:0C:27:73:DE:8D:8D:35:E9:5E:6E:98:5E:C5 Authority key identifier: F3:FE:F4:62:A4:D8:E2:F7:FA:07:35:A6:AB:64:5E:E5:63:5D:A8:F2 Certificate issuer: /CN=A91474C3/serialNumber=F3FEF462A4D8E2F7FA0735A6AB645EE5635DA8F2 Certificate serial: 3549 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8_70YqTY4vf6BzWmq2Re5WNdqPI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91474C3/6F8B52A01D7011E2BC11DAB408B02CD2/8_70YqTY4vf6BzWmq2Re5WNdqPI.mft Manifest number: 34E5 Signing time: Sat 18 Oct 2025 14:20:21 +0000 Manifest this update: Sat 18 Oct 2025 14:20:21 +0000 Manifest next update: Sat 25 Oct 2025 14:20:21 +0000 Files and hashes: 1: 8_70YqTY4vf6BzWmq2Re5WNdqPI.crl (hash: cWBAV+yfYX3jTyIyPtVBrb16fSWbDTLUpnnn/8ol6G8=) 2: D80ABAE0B0F811E595E0F761C4F9AE02.roa (hash: zlRoAfBvEWm+ICqeN72JyYaPMqWwx3agcrGPpHWXNEA=) 3: DCA7C1ECB0F811E595E0F761C4F9AE02.roa (hash: 3Mq/Cwn5cDCgj9zQnKM9HEluAVsQJa4HhEZnAObnmxU=) 4: DB386CDAB0F811E595E0F761C4F9AE02.roa (hash: nJ3Mr6afajFFS4CO5aqKdc3WGM4N36WcDo4SVgiHTXM=) 5: DE0EF67CB0F811E595E0F761C4F9AE02.roa (hash: UqX9c9LLoIvVH1794mXP6T0vE+zC8ZKzhsccgA6TkpI=) 6: D96D4614B0F811E595E0F761C4F9AE02.roa (hash: kY2rjuppUd4UGAcVEwItvPQGG6DPd7eeHrFYcVM9F2I=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91474C3/6F8B52A01D7011E2BC11DAB408B02CD2/8_70YqTY4vf6BzWmq2Re5WNdqPI.crl rsync://rpki.apnic.net/member_repository/A91474C3/6F8B52A01D7011E2BC11DAB408B02CD2/8_70YqTY4vf6BzWmq2Re5WNdqPI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8_70YqTY4vf6BzWmq2Re5WNdqPI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 14:20:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13641 (0x3549) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91474C3, serialNumber=F3FEF462A4D8E2F7FA0735A6AB645EE5635DA8F2 Validity Not Before: Oct 18 14:20:21 2025 GMT Not After : Oct 25 14:20:21 2025 GMT Subject: CN=68f3a225-db43 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:0c:b9:6d:2b:6e:0f:2d:48:5f:bc:d2:4a:a1: 4f:b9:96:86:ca:06:83:1f:8e:bb:37:2b:af:e3:9e: c4:4c:35:76:3a:5a:ff:63:88:01:c8:89:99:70:65: b2:53:75:19:4d:0b:c1:b1:ef:38:fc:bc:17:24:08: 1f:5e:56:6f:c8:7c:9d:8f:d5:a6:76:9a:fd:ff:5f: ed:cd:5d:75:cc:85:fe:5d:77:a4:3e:9c:69:9a:bd: f7:6e:3b:b8:00:61:4d:ce:9b:4e:50:75:f9:9d:b4: 2e:2b:43:a0:15:d9:82:f3:28:c6:fa:5b:3a:48:0d: 4b:c8:bf:a3:a0:8a:2f:c3:2f:33:17:f5:9e:65:32: 43:f1:c2:b9:c7:67:e6:3e:1b:3f:63:ee:58:21:50: bb:af:f7:a5:bc:f4:7c:1c:79:7b:d5:a0:e9:e4:13: 19:24:98:bb:4d:4b:a7:a0:1c:60:8f:e9:d6:ad:84: 8f:02:3d:c2:7d:7d:62:79:3a:16:3d:2a:aa:06:d1: ae:2f:3a:ff:8e:d2:65:e9:d5:18:bf:78:74:a4:ef: fc:4c:9e:26:d0:27:70:30:51:cd:2d:58:0e:dc:e3: c5:0e:09:84:ef:ff:45:03:a0:5c:05:d6:c4:d7:78: b7:eb:2e:78:4a:9c:31:9d:43:96:07:cb:0f:c4:c0: ed:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:5E:CE:F9:61:5B:56:0C:27:73:DE:8D:8D:35:E9:5E:6E:98:5E:C5 X509v3 Authority Key Identifier: keyid:F3:FE:F4:62:A4:D8:E2:F7:FA:07:35:A6:AB:64:5E:E5:63:5D:A8:F2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91474C3/6F8B52A01D7011E2BC11DAB408B02CD2/8_70YqTY4vf6BzWmq2Re5WNdqPI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8_70YqTY4vf6BzWmq2Re5WNdqPI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91474C3/6F8B52A01D7011E2BC11DAB408B02CD2/8_70YqTY4vf6BzWmq2Re5WNdqPI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 84:bf:42:b9:01:23:ca:c8:30:ab:3a:c3:67:aa:7a:b1:19:c3: 6a:c0:37:db:cc:69:c0:39:12:8f:a4:76:eb:e8:28:64:e4:8a: 27:6e:4c:2c:03:b6:f0:76:78:fd:9d:5d:3f:c9:1b:ce:8e:80: f8:dd:61:68:eb:2a:d3:6a:81:ce:9a:63:d9:a4:cb:b9:cc:af: 27:3b:85:83:95:86:6b:4e:92:1b:1c:f2:8a:0a:d8:a6:89:56: 71:6d:b8:c1:2b:35:aa:12:1e:49:16:3f:b0:5e:0f:d8:34:20: 47:b6:80:88:4e:7b:5a:d6:54:ed:56:1f:ee:c8:f1:af:05:de: a0:e3:f3:8a:70:07:82:e0:ed:32:3a:4c:00:2a:38:b2:d5:b7: 78:f6:32:70:32:46:03:e1:38:22:6c:92:df:61:0a:9c:53:bf: 6b:bc:a5:7d:f2:86:b4:8b:72:a5:fe:46:38:40:6d:89:72:f1: 42:96:49:62:be:13:90:5c:04:92:14:af:bf:e2:cf:7b:26:bd: 8b:b2:06:a3:cd:d3:35:00:0d:1a:13:ce:b7:1e:7a:b6:bf:af: a4:0f:fc:fa:1f:8a:75:da:8d:e2:ac:bd:74:90:84:42:3b:88: 60:bc:4f:60:f3:b4:d2:09:c6:e4:83:b5:f6:4e:68:b2:57:2a: 8d:d8:ca:f6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNUkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDc0QzMxMTAvBgNVBAUTKEYzRkVGNDYyQTREOEUyRjdGQTA3MzVBNkFCNjQ1RUU1 NjM1REE4RjIwHhcNMjUxMDE4MTQyMDIxWhcNMjUxMDI1MTQyMDIxWjAYMRYwFAYD VQQDEw02OGYzYTIyNS1kYjQzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvgy5bStuDy1IX7zSSqFPuZaGygaDH467Nyuv457ETDV2Olr/Y4gByImZcGWy U3UZTQvBse84/LwXJAgfXlZvyHydj9Wmdpr9/1/tzV11zIX+XXekPpxpmr33bju4 AGFNzptOUHX5nbQuK0OgFdmC8yjG+ls6SA1LyL+joIovwy8zF/WeZTJD8cK5x2fm Phs/Y+5YIVC7r/elvPR8HHl71aDp5BMZJJi7TUunoBxgj+nWrYSPAj3CfX1ieToW PSqqBtGuLzr/jtJl6dUYv3h0pO/8TJ4m0CdwMFHNLVgO3OPFDgmE7/9FA6BcBdbE 13i36y54SpwxnUOWB8sPxMDtfwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJdezvlh W1YMJ3PejY016V5umF7FMB8GA1UdIwQYMBaAFPP+9GKk2OL3+gc1pqtkXuVjXajy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NzRDMy82RjhCNTJBMDFE NzAxMUUyQkMxMURBQjQwOEIwMkNEMi84XzcwWXFUWTR2ZjZCeldtcTJSZTVXTmRx UEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhfNzBZcVRZNHZmNkJ6V21xMlJlNVdOZHFQSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NzRDMy82RjhCNTJBMDFENzAxMUUyQkMxMURBQjQwOEIwMkNEMi84XzcwWXFUWTR2 ZjZCeldtcTJSZTVXTmRxUEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCEv0K5ASPKyDCrOsNnqnqxGcNqwDfbzGnAORKPpHbr6Chk5Ionbkws A7bwdnj9nV0/yRvOjoD43WFo6yrTaoHOmmPZpMu5zK8nO4WDlYZrTpIbHPKKCtim iVZxbbjBKzWqEh5JFj+wXg/YNCBHtoCITnta1lTtVh/uyPGvBd6g4/OKcAeC4O0y OkwAKjiy1bd49jJwMkYD4TgibJLfYQqcU79rvKV98oa0i3Kl/kY4QG2JcvFClkli vhOQXASSFK+/4s97Jr2LsgajzdM1AA0aE863Hnq2v6+kD/z6H4p12o3irL10kIRC O4hgvE9g87TSCcbkg7X2TmiyVyqN2Mr2 -----END CERTIFICATE-----Generated at Mon Oct 20 09:31:20 2025 by rpki-client