$ rpki-client -vvf rpki.apnic.net/member_repository/A91476FE/90FE4720083711F09DB91B70C4F9AE02/_3wGiSUYZz7M4Ea2pxfzU85TxQk.mft File: _3wGiSUYZz7M4Ea2pxfzU85TxQk.mft (raw, json) Hash identifier: lW8ZF59HoEN8dxw6aBQbIGN61888HhuirJ4/NDid++k= Subject key identifier: 2F:9D:4A:D9:9B:CC:DF:64:C2:87:EF:BA:FF:70:39:76:F1:4B:60:1D Authority key identifier: FF:7C:06:89:25:18:67:3E:CC:E0:46:B6:A7:17:F3:53:CE:53:C5:09 Certificate issuer: /CN=A91476FE/serialNumber=FF7C06892518673ECCE046B6A717F353CE53C509 Certificate serial: 73 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_3wGiSUYZz7M4Ea2pxfzU85TxQk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91476FE/90FE4720083711F09DB91B70C4F9AE02/_3wGiSUYZz7M4Ea2pxfzU85TxQk.mft Manifest number: 70 Signing time: Sun 19 Oct 2025 10:17:59 +0000 Manifest this update: Sun 19 Oct 2025 10:17:59 +0000 Manifest next update: Sun 26 Oct 2025 10:17:59 +0000 Files and hashes: 1: _3wGiSUYZz7M4Ea2pxfzU85TxQk.crl (hash: f0l1HKJPdi3DpW6qi5m/bD7mPyt4R5ms3XkQCwIn0xM=) 2: CC704C6639B711F09D08292CC4F9AE02.roa (hash: M1ecwuMzW/hIMvSj6913M6NZRe+PJV/YKqOHZ/y8oF0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91476FE/90FE4720083711F09DB91B70C4F9AE02/_3wGiSUYZz7M4Ea2pxfzU85TxQk.crl rsync://rpki.apnic.net/member_repository/A91476FE/90FE4720083711F09DB91B70C4F9AE02/_3wGiSUYZz7M4Ea2pxfzU85TxQk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_3wGiSUYZz7M4Ea2pxfzU85TxQk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 10:17:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 115 (0x73) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91476FE, serialNumber=FF7C06892518673ECCE046B6A717F353CE53C509 Validity Not Before: Oct 19 10:17:59 2025 GMT Not After : Oct 26 10:17:59 2025 GMT Subject: CN=68f4bad7-85dd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:b9:87:d7:56:7c:67:53:a4:e5:1b:0b:f9:87: ad:64:65:5e:cc:f7:2e:43:07:10:5b:10:51:62:c9: c7:47:fd:5f:16:57:84:f2:95:02:0f:16:9e:37:4f: 0c:07:89:56:69:f3:e9:56:b7:bb:39:0e:56:5d:1d: 65:bf:18:34:cc:b4:ac:15:01:2f:93:bc:d4:9d:e1: 6c:c7:19:b3:24:28:46:b8:cb:b7:b0:49:46:0c:d2: 11:bc:4e:ea:f3:7e:d9:c8:f9:79:a0:78:92:2e:e8: ab:c2:f9:50:e5:ea:32:9c:f5:33:ae:6f:e2:81:c6: 0f:e5:1c:cb:97:a3:20:fd:31:f1:f0:4a:23:62:73: 4a:4d:f7:4b:1a:60:83:78:1f:82:d9:a4:47:7d:53: e3:55:68:94:db:05:97:3a:79:a6:5f:aa:cc:a9:d3: 5d:32:12:8e:ec:de:46:4a:4f:74:cd:51:88:eb:49: 68:13:2a:70:b7:b3:71:0f:02:49:35:03:11:36:db: 6f:0e:41:13:d0:03:f4:b0:3e:63:3d:1e:82:a3:e3: 2e:a7:ca:5a:d7:6b:b3:64:f2:f1:d9:13:ba:fd:07: 10:d3:d3:6d:b6:d9:1e:4d:6d:0d:8c:8d:b1:0b:44: 91:26:72:09:df:c2:10:89:1b:1b:1a:02:33:a8:02: c6:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:9D:4A:D9:9B:CC:DF:64:C2:87:EF:BA:FF:70:39:76:F1:4B:60:1D X509v3 Authority Key Identifier: keyid:FF:7C:06:89:25:18:67:3E:CC:E0:46:B6:A7:17:F3:53:CE:53:C5:09 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91476FE/90FE4720083711F09DB91B70C4F9AE02/_3wGiSUYZz7M4Ea2pxfzU85TxQk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_3wGiSUYZz7M4Ea2pxfzU85TxQk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91476FE/90FE4720083711F09DB91B70C4F9AE02/_3wGiSUYZz7M4Ea2pxfzU85TxQk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a8:aa:6d:70:91:1a:52:7f:8e:1f:46:ec:7e:1f:db:6c:f3:2b: aa:7d:6b:42:d6:79:d0:3a:94:99:26:17:aa:69:60:29:69:0f: 53:e3:d6:08:b4:8b:9f:99:de:15:b3:31:c3:9f:b7:25:63:db: 80:16:50:95:d5:90:d2:fc:83:21:b8:fc:eb:d5:22:08:7b:26: 62:e9:52:32:ab:f9:67:d2:91:3f:4f:9a:cd:8d:cb:61:8c:f6: bd:a5:cf:08:58:e7:ec:cb:5f:36:18:cf:47:44:01:7e:52:8f: 4f:71:f5:36:92:1e:13:8f:39:d7:88:37:ed:0c:ae:81:a8:c7: c0:9b:ce:6e:01:c9:b8:77:9f:03:e4:04:7e:95:a6:91:0d:8b: 18:b6:de:85:7c:bb:b5:66:82:02:6c:b7:0c:58:c6:49:ca:1b: f4:c2:d6:c9:a8:86:30:39:30:5d:91:2a:df:91:d6:96:93:af: 93:c9:0b:86:0b:7e:e2:1c:8f:50:f7:ab:86:c5:6b:56:e0:ea: 9d:44:e3:1e:ce:b4:3b:e4:4e:02:68:1c:41:f8:53:09:20:60: 17:21:75:0c:cb:c2:cb:a6:db:31:ec:a1:8f:37:a7:f1:02:15: 5d:22:06:b8:b0:f8:d2:ff:c2:29:93:8f:f0:ef:e4:65:b8:a5: 6f:1e:ca:fc -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBczANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0 NzZGRTExMC8GA1UEBRMoRkY3QzA2ODkyNTE4NjczRUNDRTA0NkI2QTcxN0YzNTND RTUzQzUwOTAeFw0yNTEwMTkxMDE3NTlaFw0yNTEwMjYxMDE3NTlaMBgxFjAUBgNV BAMTDTY4ZjRiYWQ3LTg1ZGQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCquYfXVnxnU6TlGwv5h61kZV7M9y5DBxBbEFFiycdH/V8WV4TylQIPFp43TwwH iVZp8+lWt7s5DlZdHWW/GDTMtKwVAS+TvNSd4WzHGbMkKEa4y7ewSUYM0hG8Turz ftnI+XmgeJIu6KvC+VDl6jKc9TOub+KBxg/lHMuXoyD9MfHwSiNic0pN90saYIN4 H4LZpEd9U+NVaJTbBZc6eaZfqsyp010yEo7s3kZKT3TNUYjrSWgTKnC3s3EPAkk1 AxE2228OQRPQA/SwPmM9HoKj4y6nylrXa7Nk8vHZE7r9BxDT02222R5NbQ2MjbEL RJEmcgnfwhCJGxsaAjOoAsZvAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUL51K2ZvM 32TCh++6/3A5dvFLYB0wHwYDVR0jBBgwFoAU/3wGiSUYZz7M4Ea2pxfzU85TxQkw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQ3NkZFLzkwRkU0NzIwMDgz NzExRjA5REI5MUI3MEM0RjlBRTAyL18zd0dpU1VZWno3TTRFYTJweGZ6VTg1VHhR ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvXzN3R2lTVVlaejdNNEVhMnB4ZnpVODVUeFFrLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQ3 NkZFLzkwRkU0NzIwMDgzNzExRjA5REI5MUI3MEM0RjlBRTAyL18zd0dpU1VZWno3 TTRFYTJweGZ6VTg1VHhRay5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAKiqbXCRGlJ/jh9G7H4f22zzK6p9a0LWedA6lJkmF6ppYClpD1Pj1gi0 i5+Z3hWzMcOftyVj24AWUJXVkNL8gyG4/OvVIgh7JmLpUjKr+WfSkT9Pms2Ny2GM 9r2lzwhY5+zLXzYYz0dEAX5Sj09x9TaSHhOPOdeIN+0MroGox8Cbzm4Bybh3nwPk BH6VppENixi23oV8u7VmggJstwxYxknKG/TC1smohjA5MF2RKt+R1paTr5PJC4YL fuIcj1D3q4bFa1bg6p1E4x7OtDvkTgJoHEH4UwkgYBchdQzLwsum2zHsoY83p/EC FV0iBriw+NL/wimTj/Dv5GW4pW8eyvw= -----END CERTIFICATE-----Generated at Mon Oct 20 01:47:56 2025 by rpki-client