$ rpki-client -vvf rpki.apnic.net/member_repository/A9148C7B/5BFCFF8CD63011EA940DA039C4F9AE02/f3lmXmO_PNVtwkoKcNV_mpQt0bg.mft File: f3lmXmO_PNVtwkoKcNV_mpQt0bg.mft (raw, json) Hash identifier: A5lISpFnOhUQjrnwYg5YquTVtlJVJQxjiAaC9K9uurM= Subject key identifier: 58:6B:B1:F4:F9:C0:7B:D0:70:99:4C:8B:BE:DE:21:15:70:33:31:29 Authority key identifier: 7F:79:66:5E:63:BF:3C:D5:6D:C2:4A:0A:70:D5:7F:9A:94:2D:D1:B8 Certificate issuer: /CN=A9148C7B/serialNumber=7F79665E63BF3CD56DC24A0A70D57F9A942DD1B8 Certificate serial: 08D3 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/f3lmXmO_PNVtwkoKcNV_mpQt0bg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9148C7B/5BFCFF8CD63011EA940DA039C4F9AE02/f3lmXmO_PNVtwkoKcNV_mpQt0bg.mft Manifest number: 08A3 Signing time: Mon 20 Oct 2025 14:49:48 +0000 Manifest this update: Mon 20 Oct 2025 14:49:48 +0000 Manifest next update: Mon 27 Oct 2025 14:49:48 +0000 Files and hashes: 1: f3lmXmO_PNVtwkoKcNV_mpQt0bg.crl (hash: BxtKGUtEdat93vVhPL2u4lw6laDXYiILI1b+zinW/dk=) 2: AB20F8C0DD3311EF8B8A711FC4F9AE02.roa (hash: geYBmD1DM/AUXSPUgRalrZ3WyRIJCoCzSg/oC0uheIE=) 3: 0A0B8CF8308911F0A95E944AC4F9AE02.roa (hash: zD1hAOWgfFf8imPdjoaN6Kre5zSjJhCHRQDKqb4UceI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9148C7B/5BFCFF8CD63011EA940DA039C4F9AE02/f3lmXmO_PNVtwkoKcNV_mpQt0bg.crl rsync://rpki.apnic.net/member_repository/A9148C7B/5BFCFF8CD63011EA940DA039C4F9AE02/f3lmXmO_PNVtwkoKcNV_mpQt0bg.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/f3lmXmO_PNVtwkoKcNV_mpQt0bg.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 27 Oct 2025 14:49:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2259 (0x8d3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9148C7B, serialNumber=7F79665E63BF3CD56DC24A0A70D57F9A942DD1B8 Validity Not Before: Oct 20 14:49:48 2025 GMT Not After : Oct 27 14:49:48 2025 GMT Subject: CN=68f64c0c-7e91 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:4b:b1:68:ed:c0:18:b0:9e:88:d6:a2:ac:a6: 4a:ef:a8:f5:4d:0a:50:1d:47:2a:d5:85:2f:e0:ba: e1:19:96:1c:6e:64:e8:e3:8d:57:a8:40:5b:8d:52: b9:39:f2:6e:df:12:e7:39:8d:a5:69:a6:5e:40:9d: 10:43:e0:66:26:63:6c:c0:59:d0:cc:aa:65:17:02: 83:93:aa:d7:a3:d9:26:57:1b:c9:1f:25:48:9a:ba: bc:f0:ae:36:df:31:4c:fc:ff:17:76:8a:e9:b4:e8: 17:ba:3c:69:32:d6:a0:8b:c3:0b:c2:4a:f1:d2:53: d6:47:2c:c9:5e:3c:b6:ba:24:bc:19:e6:b7:af:9a: df:c3:82:c5:fb:81:84:d7:ea:2f:c6:1d:65:4d:09: 2c:89:86:b8:6c:03:e2:0a:92:90:2d:6f:b6:5a:1c: 56:85:99:1f:c5:ec:3e:85:7a:13:6a:e5:9d:e9:df: 25:b2:31:8b:6e:d0:b2:77:ea:0d:45:b8:ed:a7:50: 9c:1f:af:64:f8:21:5a:93:34:bd:1c:2f:65:a7:44: cd:fc:48:1a:95:d1:b2:24:e5:fd:b4:41:6d:5a:d1: c5:a9:da:18:f2:ee:ec:f8:e9:da:f4:a2:c4:71:08: 26:3e:86:5f:bc:5d:14:d7:7a:2f:f4:11:da:56:44: c8:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:6B:B1:F4:F9:C0:7B:D0:70:99:4C:8B:BE:DE:21:15:70:33:31:29 X509v3 Authority Key Identifier: keyid:7F:79:66:5E:63:BF:3C:D5:6D:C2:4A:0A:70:D5:7F:9A:94:2D:D1:B8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9148C7B/5BFCFF8CD63011EA940DA039C4F9AE02/f3lmXmO_PNVtwkoKcNV_mpQt0bg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/f3lmXmO_PNVtwkoKcNV_mpQt0bg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9148C7B/5BFCFF8CD63011EA940DA039C4F9AE02/f3lmXmO_PNVtwkoKcNV_mpQt0bg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a6:eb:a1:85:48:12:9f:0d:49:ee:ad:bf:6d:ae:ec:36:99:7e: 77:a3:c4:2b:2d:2c:81:ab:b7:01:4f:da:bb:21:1f:84:1d:0b: c3:4c:02:18:7f:49:0b:05:5e:32:42:6b:8a:4d:68:9f:54:8e: ea:f4:b6:ac:34:49:b2:24:50:0f:d4:da:85:c5:9c:36:6c:54: ae:7c:15:eb:39:37:bf:c2:41:0c:3c:63:68:ea:91:02:91:97: 4d:a1:b4:d8:fe:c9:3f:eb:ce:ba:03:73:67:4e:60:a9:f0:24: 07:a5:ef:80:1e:c6:92:0a:91:0f:34:cb:02:b4:f5:5d:6f:5e: 71:01:0f:d4:34:e4:22:05:b4:ea:07:13:16:7b:e8:5c:1a:8f: 83:85:23:91:70:42:0a:02:ab:1f:be:6b:5c:82:e9:e9:8a:bb: 43:17:56:e0:63:0a:7a:6e:8a:3c:2b:55:6f:c3:e9:80:05:b8: 81:05:c1:78:8a:bf:cb:db:3d:33:66:74:5b:44:0e:c2:7c:07: 14:ea:70:0b:f9:e8:66:fd:42:d2:95:ba:3d:cd:c6:18:9b:22: 95:eb:13:0e:7f:68:00:47:38:15:97:ad:a7:df:c6:78:5f:1b: 7a:35:c8:77:48:1f:7e:b4:0a:3e:f5:1e:22:60:f4:6a:08:30: 1f:9d:87:f4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCNMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDhDN0IxMTAvBgNVBAUTKDdGNzk2NjVFNjNCRjNDRDU2REMyNEEwQTcwRDU3RjlB OTQyREQxQjgwHhcNMjUxMDIwMTQ0OTQ4WhcNMjUxMDI3MTQ0OTQ4WjAYMRYwFAYD VQQDEw02OGY2NGMwYy03ZTkxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0kuxaO3AGLCeiNairKZK76j1TQpQHUcq1YUv4LrhGZYcbmTo441XqEBbjVK5 OfJu3xLnOY2laaZeQJ0QQ+BmJmNswFnQzKplFwKDk6rXo9kmVxvJHyVImrq88K42 3zFM/P8XdorptOgXujxpMtagi8MLwkrx0lPWRyzJXjy2uiS8Gea3r5rfw4LF+4GE 1+ovxh1lTQksiYa4bAPiCpKQLW+2WhxWhZkfxew+hXoTauWd6d8lsjGLbtCyd+oN Rbjtp1CcH69k+CFakzS9HC9lp0TN/EgaldGyJOX9tEFtWtHFqdoY8u7s+Ona9KLE cQgmPoZfvF0U13ov9BHaVkTIYwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFhrsfT5 wHvQcJlMi77eIRVwMzEpMB8GA1UdIwQYMBaAFH95Zl5jvzzVbcJKCnDVf5qULdG4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0OEM3Qi81QkZDRkY4Q0Q2 MzAxMUVBOTQwREEwMzlDNEY5QUUwMi9mM2xtWG1PX1BOVnR3a29LY05WX21wUXQw YmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2YzbG1YbU9fUE5WdHdrb0tjTlZfbXBRdDBiZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 OEM3Qi81QkZDRkY4Q0Q2MzAxMUVBOTQwREEwMzlDNEY5QUUwMi9mM2xtWG1PX1BO VnR3a29LY05WX21wUXQwYmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCm66GFSBKfDUnurb9truw2mX53o8QrLSyBq7cBT9q7IR+EHQvDTAIY f0kLBV4yQmuKTWifVI7q9LasNEmyJFAP1NqFxZw2bFSufBXrOTe/wkEMPGNo6pEC kZdNobTY/sk/6866A3NnTmCp8CQHpe+AHsaSCpEPNMsCtPVdb15xAQ/UNOQiBbTq BxMWe+hcGo+DhSORcEIKAqsfvmtcgunpirtDF1bgYwp6boo8K1Vvw+mABbiBBcF4 ir/L2z0zZnRbRA7CfAcU6nAL+ehm/ULSlbo9zcYYmyKV6xMOf2gARzgVl62n38Z4 Xxt6Nch3SB9+tAo+9R4iYPRqCDAfnYf0 -----END CERTIFICATE-----Generated at Mon Oct 20 21:23:47 2025 by rpki-client