$ rpki-client -vvf rpki.apnic.net/member_repository/A9170304/9EF411301D8E11E2B18226ED08B02CD2/rScP3pmx8Qadq473pXaqLCryxvA.mft File: rScP3pmx8Qadq473pXaqLCryxvA.mft (raw, json) Hash identifier: IqHu7dwN5Wtov+y4l3suaX3zfuwsw1HsyrwyyHxrPkc= Subject key identifier: 3E:AF:45:5E:7E:8D:08:82:13:20:A4:CF:71:A0:99:07:0C:60:14:15 Authority key identifier: AD:27:0F:DE:99:B1:F1:06:9D:AB:8E:F7:A5:76:AA:2C:2A:F2:C6:F0 Certificate issuer: /CN=A9170304/serialNumber=AD270FDE99B1F1069DAB8EF7A576AA2C2AF2C6F0 Certificate serial: 3503 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/rScP3pmx8Qadq473pXaqLCryxvA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9170304/9EF411301D8E11E2B18226ED08B02CD2/rScP3pmx8Qadq473pXaqLCryxvA.mft Manifest number: 34E9 Signing time: Sat 18 Oct 2025 14:43:17 +0000 Manifest this update: Sat 18 Oct 2025 14:43:17 +0000 Manifest next update: Sat 25 Oct 2025 14:43:17 +0000 Files and hashes: 1: rScP3pmx8Qadq473pXaqLCryxvA.crl (hash: gT3UOftKA+Mzwj3wqqKb4y2h0UQsMSQKu4cDY5c8OBw=) 2: 5E26899A1B2211F093230420C4F9AE02.roa (hash: zE8hcTYNfmMkBUxWlaCkDNF/PasBwsyXryHfs3QbRWs=) 3: C64A9D821B2111F0B277571CC4F9AE02.roa (hash: 6EQRx6aa031JyIEDFgnynaOZ+5bnvuDSyDIypITveC4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9170304/9EF411301D8E11E2B18226ED08B02CD2/rScP3pmx8Qadq473pXaqLCryxvA.crl rsync://rpki.apnic.net/member_repository/A9170304/9EF411301D8E11E2B18226ED08B02CD2/rScP3pmx8Qadq473pXaqLCryxvA.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/rScP3pmx8Qadq473pXaqLCryxvA.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 14:43:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13571 (0x3503) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9170304, serialNumber=AD270FDE99B1F1069DAB8EF7A576AA2C2AF2C6F0 Validity Not Before: Oct 18 14:43:17 2025 GMT Not After : Oct 25 14:43:17 2025 GMT Subject: CN=68f3a785-d864 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:73:51:ce:9f:36:e3:85:75:25:91:b5:3b:bd: 72:8b:2a:22:44:75:56:00:e8:8a:53:5b:b2:4a:17: c8:02:cd:c0:44:1b:20:97:01:f6:f4:ae:cc:f4:22: 18:aa:ee:47:6f:cb:25:05:c4:7d:b6:fd:f5:33:d0: b7:52:98:c1:31:33:94:16:a5:fa:02:0f:17:66:08: 8e:69:3e:0f:6b:ab:49:ee:d4:a0:51:a7:f8:f5:22: 4a:33:a1:3f:fe:76:c2:b7:87:f7:d1:6c:f2:1f:7f: e4:86:30:f6:97:07:9a:3d:fb:69:c5:cf:ea:c2:28: 96:c7:d6:bd:3d:af:78:44:bb:2c:58:35:79:84:b3: d4:63:e8:fe:af:44:95:67:be:5a:41:75:de:f8:51: 8f:46:32:e8:a8:f9:1d:7e:5a:9e:ff:7e:6c:16:03: 6e:45:91:21:86:ca:c0:70:33:1e:8f:7b:72:57:4a: 9e:e4:96:de:ad:8b:df:67:23:f7:db:75:01:80:30: 6c:79:e8:f8:ec:67:23:36:8f:25:bc:fe:a3:17:3f: f2:52:ab:83:9e:d2:10:5f:5b:2e:6e:8c:a7:dd:8d: 96:79:36:84:b8:ba:60:12:7c:fe:67:c9:f7:33:0e: 40:93:bb:b7:8e:72:b7:b8:bb:6c:85:57:a8:57:ff: d6:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:AF:45:5E:7E:8D:08:82:13:20:A4:CF:71:A0:99:07:0C:60:14:15 X509v3 Authority Key Identifier: keyid:AD:27:0F:DE:99:B1:F1:06:9D:AB:8E:F7:A5:76:AA:2C:2A:F2:C6:F0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9170304/9EF411301D8E11E2B18226ED08B02CD2/rScP3pmx8Qadq473pXaqLCryxvA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/rScP3pmx8Qadq473pXaqLCryxvA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9170304/9EF411301D8E11E2B18226ED08B02CD2/rScP3pmx8Qadq473pXaqLCryxvA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8c:70:e4:5f:9c:7a:64:2f:de:58:f8:6f:60:87:91:e0:09:28: 8f:7c:b8:97:98:1f:bf:24:7e:3f:5b:0b:27:dc:50:09:12:49: 55:ca:1f:a9:2a:62:e9:4e:51:f4:b8:bd:70:71:45:94:9a:61: ba:6a:19:1c:3f:4e:4d:89:d1:79:e3:05:c1:c0:73:c4:e0:3f: 56:6b:c8:64:97:d9:9a:42:7b:4d:18:5b:ef:75:3a:f8:14:33: 4a:76:6e:b1:50:c5:8b:ab:47:f9:bf:93:12:68:59:24:b3:bc: b3:1e:59:ad:c6:d9:b6:31:a4:e6:f4:b6:80:46:11:b9:f9:ef: 29:20:a2:d6:57:d2:43:0f:04:af:d9:ae:19:52:b7:b1:a0:e2: 04:08:92:a1:be:5e:2c:2e:0e:59:47:61:28:cf:68:f0:eb:1b: e9:1f:c3:63:a9:0a:39:59:20:7a:a1:ab:47:bc:62:7b:70:33: c2:cf:a2:ed:45:fd:73:29:fb:80:f6:ee:82:83:5a:78:25:7c: 2f:5c:a8:03:2f:b5:ac:72:f4:29:44:0c:ca:d8:71:ce:c4:36: 22:1b:4d:01:8b:67:4e:d7:12:5e:1f:02:7b:4f:bb:32:85:fc: 87:d7:b0:02:d6:10:39:26:f6:6a:b8:ba:34:2f:29:f6:bc:98: 17:c9:fc:80 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNQMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzAzMDQxMTAvBgNVBAUTKEFEMjcwRkRFOTlCMUYxMDY5REFCOEVGN0E1NzZBQTJD MkFGMkM2RjAwHhcNMjUxMDE4MTQ0MzE3WhcNMjUxMDI1MTQ0MzE3WjAYMRYwFAYD VQQDEw02OGYzYTc4NS1kODY0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5XNRzp8244V1JZG1O71yiyoiRHVWAOiKU1uyShfIAs3ARBsglwH29K7M9CIY qu5Hb8slBcR9tv31M9C3UpjBMTOUFqX6Ag8XZgiOaT4Pa6tJ7tSgUaf49SJKM6E/ /nbCt4f30WzyH3/khjD2lweaPftpxc/qwiiWx9a9Pa94RLssWDV5hLPUY+j+r0SV Z75aQXXe+FGPRjLoqPkdflqe/35sFgNuRZEhhsrAcDMej3tyV0qe5JberYvfZyP3 23UBgDBseej47GcjNo8lvP6jFz/yUquDntIQX1suboyn3Y2WeTaEuLpgEnz+Z8n3 Mw5Ak7u3jnK3uLtshVeoV//WgQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFD6vRV5+ jQiCEyCkz3GgmQcMYBQVMB8GA1UdIwQYMBaAFK0nD96ZsfEGnauO96V2qiwq8sbw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MDMwNC85RUY0MTEzMDFE OEUxMUUyQjE4MjI2RUQwOEIwMkNEMi9yU2NQM3BteDhRYWRxNDczcFhhcUxDcnl4 dkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3JTY1AzcG14OFFhZHE0NzNwWGFxTENyeXh2QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MDMwNC85RUY0MTEzMDFEOEUxMUUyQjE4MjI2RUQwOEIwMkNEMi9yU2NQM3BteDhR YWRxNDczcFhhcUxDcnl4dkEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCMcORfnHpkL95Y+G9gh5HgCSiPfLiXmB+/JH4/Wwsn3FAJEklVyh+p KmLpTlH0uL1wcUWUmmG6ahkcP05NidF54wXBwHPE4D9Wa8hkl9maQntNGFvvdTr4 FDNKdm6xUMWLq0f5v5MSaFkks7yzHlmtxtm2MaTm9LaARhG5+e8pIKLWV9JDDwSv 2a4ZUrexoOIECJKhvl4sLg5ZR2Eoz2jw6xvpH8NjqQo5WSB6oatHvGJ7cDPCz6Lt Rf1zKfuA9u6Cg1p4JXwvXKgDL7WscvQpRAzK2HHOxDYiG00Bi2dO1xJeHwJ7T7sy hfyH17AC1hA5JvZquLo0Lyn2vJgXyfyA -----END CERTIFICATE-----Generated at Mon Oct 20 14:12:35 2025 by rpki-client