$ rpki-client -vvf rpki.apnic.net/member_repository/A916C473/FEAE12A25DDF11F0A5BFD66FC4F9AE02/-3sFh4NlHpP6MN2W1iZebi81JVQ.mft File: -3sFh4NlHpP6MN2W1iZebi81JVQ.mft (raw, json) Hash identifier: yWbsyXwI9wLBsR6DOTHtnhByqs8/CI3G3jnBgP5k88Y= Subject key identifier: B6:40:B6:4B:58:0A:C3:6F:DA:0E:AC:E3:68:7E:11:2D:7C:06:45:1C Authority key identifier: FB:7B:05:87:83:65:1E:93:FA:30:DD:96:D6:26:5E:6E:2F:35:25:54 Certificate issuer: /CN=A916C473/serialNumber=FB7B058783651E93FA30DD96D6265E6E2F352554 Certificate serial: 36 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-3sFh4NlHpP6MN2W1iZebi81JVQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916C473/FEAE12A25DDF11F0A5BFD66FC4F9AE02/-3sFh4NlHpP6MN2W1iZebi81JVQ.mft Manifest number: 35 Signing time: Sun 19 Oct 2025 11:03:24 +0000 Manifest this update: Sun 19 Oct 2025 11:03:23 +0000 Manifest next update: Sun 26 Oct 2025 11:03:23 +0000 Files and hashes: 1: -3sFh4NlHpP6MN2W1iZebi81JVQ.crl (hash: u+gbtiwNoZAqvlmpnsRqDvjDriIaKX7GwuxHd7PrO5Y=) 2: 2BB9711E5DE111F09B775D76C4F9AE02.roa (hash: p5eDJJHEh4Ku0YkaqmxVa+vpX9QHKpmMPC5rYwtTVzI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916C473/FEAE12A25DDF11F0A5BFD66FC4F9AE02/-3sFh4NlHpP6MN2W1iZebi81JVQ.crl rsync://rpki.apnic.net/member_repository/A916C473/FEAE12A25DDF11F0A5BFD66FC4F9AE02/-3sFh4NlHpP6MN2W1iZebi81JVQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-3sFh4NlHpP6MN2W1iZebi81JVQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 11:03:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54 (0x36) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916C473, serialNumber=FB7B058783651E93FA30DD96D6265E6E2F352554 Validity Not Before: Oct 19 11:03:23 2025 GMT Not After : Oct 26 11:03:23 2025 GMT Subject: CN=68f4c57c-5565 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:99:7f:da:04:13:b7:68:3e:50:02:99:88:8d: 88:85:ff:47:3f:09:a6:83:41:e8:55:c6:ef:8a:8d: bf:20:8f:3f:35:ce:3a:fd:bf:5b:d3:e8:22:1f:84: fb:11:09:07:c3:40:e6:b7:4e:85:8e:ed:20:f8:00: d3:fb:46:b9:2f:a8:90:81:c0:a6:e9:31:3f:98:65: 50:94:e2:c7:16:ce:1a:88:e8:55:99:42:ee:5f:4f: f8:48:bc:60:65:66:31:f6:ed:bb:26:87:c5:16:ba: 40:77:e8:4d:24:61:20:8f:14:20:9c:a9:59:0f:4b: 4e:e1:fa:bf:e9:f3:59:39:97:82:6c:41:93:e8:f7: 57:f3:7e:de:93:71:36:bf:5d:df:64:0b:26:03:ab: c6:ad:fb:03:81:2d:b2:f7:d2:62:4e:6c:8a:10:e8: a3:df:b4:29:d4:df:fe:90:a7:61:ec:c9:d6:d0:c2: 13:db:91:42:7c:b9:53:aa:cf:57:37:da:2f:9e:bc: 62:3c:39:f5:a9:e2:43:95:10:6b:fe:87:42:1f:65: a2:e3:c5:a7:1a:89:7a:0c:38:9c:52:67:46:4a:2d: 6e:88:44:cd:02:a0:bb:bf:a4:32:66:f7:a8:cd:c8: ce:af:47:21:0d:1c:1b:8f:d0:ca:1a:05:8d:3f:94: 6c:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:40:B6:4B:58:0A:C3:6F:DA:0E:AC:E3:68:7E:11:2D:7C:06:45:1C X509v3 Authority Key Identifier: keyid:FB:7B:05:87:83:65:1E:93:FA:30:DD:96:D6:26:5E:6E:2F:35:25:54 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916C473/FEAE12A25DDF11F0A5BFD66FC4F9AE02/-3sFh4NlHpP6MN2W1iZebi81JVQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-3sFh4NlHpP6MN2W1iZebi81JVQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916C473/FEAE12A25DDF11F0A5BFD66FC4F9AE02/-3sFh4NlHpP6MN2W1iZebi81JVQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2c:fa:42:70:ca:8c:7f:d5:21:2c:4c:cf:d0:95:94:05:6c:61: f3:b0:17:87:7a:57:b3:59:ab:40:39:78:dc:d3:15:2d:30:2e: e9:44:21:98:4f:0c:5e:06:1b:b9:73:d0:5a:e6:42:50:7a:80: ff:94:f3:a9:bd:a2:1c:8b:83:cb:cd:19:ce:27:87:13:0c:04: 41:76:82:36:de:1c:93:7d:b1:ca:a9:1c:84:b0:ed:c1:59:c7: df:8c:bb:05:c1:a7:55:ce:b0:9f:8b:eb:97:d7:8a:85:4d:cc: f1:dc:44:62:78:48:42:9c:9c:52:07:a6:8b:eb:d9:4e:31:06: fd:4a:3a:b2:7b:dc:d5:8c:90:f8:74:2e:ac:7e:81:50:8f:b8: ed:58:d3:4c:1c:82:3a:a3:51:98:45:67:ce:48:7f:c1:95:63: 66:c3:ec:09:4f:fd:d2:9c:e6:1f:46:07:cf:cd:fc:49:75:b2: 55:57:33:d0:c3:a4:a5:7f:36:c5:1f:2f:ba:8c:01:6d:14:1a: 39:99:a3:79:cb:97:92:59:3b:d1:56:1d:dc:3f:01:d1:6d:7d: 1b:8d:e8:3e:34:b5:ca:1c:4a:81:84:ad:72:99:15:e3:90:36: 52:16:50:a0:f3:65:6c:71:85:52:99:3b:7d:b7:56:dc:41:9a: e4:ae:76:52 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBNjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE2 QzQ3MzExMC8GA1UEBRMoRkI3QjA1ODc4MzY1MUU5M0ZBMzBERDk2RDYyNjVFNkUy RjM1MjU1NDAeFw0yNTEwMTkxMTAzMjNaFw0yNTEwMjYxMTAzMjNaMBgxFjAUBgNV BAMTDTY4ZjRjNTdjLTU1NjUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDBmX/aBBO3aD5QApmIjYiF/0c/CaaDQehVxu+Kjb8gjz81zjr9v1vT6CIfhPsR CQfDQOa3ToWO7SD4ANP7RrkvqJCBwKbpMT+YZVCU4scWzhqI6FWZQu5fT/hIvGBl ZjH27bsmh8UWukB36E0kYSCPFCCcqVkPS07h+r/p81k5l4JsQZPo91fzft6TcTa/ Xd9kCyYDq8at+wOBLbL30mJObIoQ6KPftCnU3/6Qp2HsydbQwhPbkUJ8uVOqz1c3 2i+evGI8OfWp4kOVEGv+h0IfZaLjxacaiXoMOJxSZ0ZKLW6IRM0CoLu/pDJm96jN yM6vRyENHBuP0MoaBY0/lGz7AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUtkC2S1gK w2/aDqzjaH4RLXwGRRwwHwYDVR0jBBgwFoAU+3sFh4NlHpP6MN2W1iZebi81JVQw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTZDNDczL0ZFQUUxMkEyNURE RjExRjBBNUJGRDY2RkM0RjlBRTAyLy0zc0ZoNE5sSHBQNk1OMlcxaVplYmk4MUpW US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvLTNzRmg0TmxIcFA2TU4yVzFpWmViaTgxSlZRLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTZD NDczL0ZFQUUxMkEyNURERjExRjBBNUJGRDY2RkM0RjlBRTAyLy0zc0ZoNE5sSHBQ Nk1OMlcxaVplYmk4MUpWUS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBACz6QnDKjH/VISxMz9CVlAVsYfOwF4d6V7NZq0A5eNzTFS0wLulEIZhP DF4GG7lz0FrmQlB6gP+U86m9ohyLg8vNGc4nhxMMBEF2gjbeHJN9scqpHISw7cFZ x9+MuwXBp1XOsJ+L65fXioVNzPHcRGJ4SEKcnFIHpovr2U4xBv1KOrJ73NWMkPh0 Lqx+gVCPuO1Y00wcgjqjUZhFZ85If8GVY2bD7AlP/dKc5h9GB8/N/El1slVXM9DD pKV/NsUfL7qMAW0UGjmZo3nLl5JZO9FWHdw/AdFtfRuN6D40tcocSoGErXKZFeOQ NlIWUKDzZWxxhVKZO323VtxBmuSudlI= -----END CERTIFICATE-----Generated at Mon Oct 20 19:30:22 2025 by rpki-client