$ rpki-client -vvf rpki.apnic.net/member_repository/A9174685/2D159182A97311EA9AABE923C4F9AE02/pfBl_MntoR3KTQ38bXyZB1KY1_8.mft File: pfBl_MntoR3KTQ38bXyZB1KY1_8.mft (raw, json) Hash identifier: B0aFP4/Qv1BSKID/IS3FticqGJnrfCcd4KrczUMc6+M= Subject key identifier: 6C:8A:6F:E5:F1:27:65:76:8A:66:0D:9C:01:CF:86:39:3F:0B:A9:0D Authority key identifier: A5:F0:65:FC:C9:ED:A1:1D:CA:4D:0D:FC:6D:7C:99:07:52:98:D7:FF Certificate issuer: /CN=A9174685/serialNumber=A5F065FCC9EDA11DCA4D0DFC6D7C99075298D7FF Certificate serial: 0966 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pfBl_MntoR3KTQ38bXyZB1KY1_8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9174685/2D159182A97311EA9AABE923C4F9AE02/pfBl_MntoR3KTQ38bXyZB1KY1_8.mft Manifest number: 0950 Signing time: Sat 18 Oct 2025 21:15:22 +0000 Manifest this update: Sat 18 Oct 2025 21:15:22 +0000 Manifest next update: Sat 25 Oct 2025 21:15:22 +0000 Files and hashes: 1: pfBl_MntoR3KTQ38bXyZB1KY1_8.crl (hash: pWBgx8qU7HleqfPlmbdomY/jaKWRG9R8BjM1n1aNQy0=) 2: 8BBD25F4EAE311EF95C23D4DC4F9AE02.roa (hash: JxYPfmW8Tav5SjQHIMJfNEwgSNWW1t6Utgf2ZPhePRI=) 3: 31B2B528217811EEBACF3324C4F9AE02.roa (hash: qYcH8o+mgIEkOx3pGeKtDuFDXODm4W8utEiDwxXgwKU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9174685/2D159182A97311EA9AABE923C4F9AE02/pfBl_MntoR3KTQ38bXyZB1KY1_8.crl rsync://rpki.apnic.net/member_repository/A9174685/2D159182A97311EA9AABE923C4F9AE02/pfBl_MntoR3KTQ38bXyZB1KY1_8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pfBl_MntoR3KTQ38bXyZB1KY1_8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 21:15:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2406 (0x966) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9174685, serialNumber=A5F065FCC9EDA11DCA4D0DFC6D7C99075298D7FF Validity Not Before: Oct 18 21:15:22 2025 GMT Not After : Oct 25 21:15:22 2025 GMT Subject: CN=68f4036a-9730 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:18:f9:d3:0e:5c:1f:42:b9:ef:45:78:a3:cd: a2:d2:9d:94:f4:af:0e:f4:34:b3:1b:eb:a5:1b:13: ef:5c:2f:17:f8:40:29:3f:91:33:d2:c2:e4:41:0d: c4:83:2c:3c:24:2e:c2:b8:04:c2:0b:01:d1:80:3a: ef:45:b1:e6:e6:0f:e2:16:50:7c:43:14:42:e9:99: 9c:8c:cd:7b:56:8e:18:98:c5:1a:c6:92:89:74:5e: 8c:0c:00:93:f6:6a:d0:24:05:de:8b:0a:19:af:4d: 7e:93:9b:9b:91:a3:18:8a:2f:64:7e:01:33:7b:4f: 11:e5:a8:b6:92:62:84:69:67:e7:69:2f:81:25:ae: 6d:d8:91:7d:19:a0:be:42:f7:e0:2a:87:b0:55:b1: 81:90:42:f0:38:17:73:47:0f:6a:63:26:97:d7:43: 74:ab:53:82:6d:b4:d1:39:7f:cc:72:f2:41:12:ea: 75:34:32:73:0d:66:a5:bd:66:51:78:fc:ee:83:c6: 05:39:6f:eb:09:ea:b3:a8:6d:cc:86:c1:b0:ea:c8: db:b2:d2:55:a6:58:ff:4e:90:7c:e0:33:20:b8:5c: 2c:f3:55:4a:68:44:bb:df:4b:d3:23:68:9b:d1:72: ab:9b:06:d5:21:4f:36:63:11:f8:ba:6b:6b:f0:24: 67:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:8A:6F:E5:F1:27:65:76:8A:66:0D:9C:01:CF:86:39:3F:0B:A9:0D X509v3 Authority Key Identifier: keyid:A5:F0:65:FC:C9:ED:A1:1D:CA:4D:0D:FC:6D:7C:99:07:52:98:D7:FF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9174685/2D159182A97311EA9AABE923C4F9AE02/pfBl_MntoR3KTQ38bXyZB1KY1_8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pfBl_MntoR3KTQ38bXyZB1KY1_8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9174685/2D159182A97311EA9AABE923C4F9AE02/pfBl_MntoR3KTQ38bXyZB1KY1_8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 36:34:d9:72:15:90:40:74:32:29:b0:01:c0:e8:d0:5a:72:55: bd:85:58:5f:91:17:18:d1:84:92:8c:0e:1b:f2:fb:a8:59:83: d8:a5:d3:e9:2e:f7:31:a0:de:75:f4:6f:a0:a5:66:7e:fb:5c: 3b:c4:45:76:d9:7f:6f:81:65:47:85:75:f6:69:d5:c7:e1:74: ef:27:59:55:81:26:b0:42:cf:ac:22:94:49:de:5b:27:8f:f0: 98:8e:52:cf:97:06:4e:64:48:4a:a3:b1:79:aa:b8:94:b6:d6: 11:8d:81:6b:46:54:c9:32:28:7b:fa:17:1f:17:d2:52:d4:a8: cf:7b:4b:e9:3b:8a:a5:58:6f:51:9c:75:7a:d7:05:9d:fb:b7: fe:0c:2c:63:67:ea:04:5d:90:a9:fa:e5:ed:3a:ac:0f:d4:ac: d0:c7:cc:55:60:e6:7c:af:26:93:5f:83:ce:41:23:c5:c4:d8: 05:87:43:eb:00:ae:80:28:32:a3:20:de:11:ae:4f:a7:68:0b: dd:e8:77:31:d9:ae:34:bd:e5:01:cf:72:c2:d5:ae:c5:15:db: ab:9b:47:90:c9:58:5d:d8:23:e9:c3:6e:39:7e:21:5b:dc:b8: ac:57:4c:1a:c4:c9:55:16:e2:7a:82:5c:2c:e9:24:c0:60:e6: 56:60:3d:ea -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCWYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzQ2ODUxMTAvBgNVBAUTKEE1RjA2NUZDQzlFREExMURDQTREMERGQzZEN0M5OTA3 NTI5OEQ3RkYwHhcNMjUxMDE4MjExNTIyWhcNMjUxMDI1MjExNTIyWjAYMRYwFAYD VQQDEw02OGY0MDM2YS05NzMwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2Rj50w5cH0K570V4o82i0p2U9K8O9DSzG+ulGxPvXC8X+EApP5Ez0sLkQQ3E gyw8JC7CuATCCwHRgDrvRbHm5g/iFlB8QxRC6ZmcjM17Vo4YmMUaxpKJdF6MDACT 9mrQJAXeiwoZr01+k5ubkaMYii9kfgEze08R5ai2kmKEaWfnaS+BJa5t2JF9GaC+ QvfgKoewVbGBkELwOBdzRw9qYyaX10N0q1OCbbTROX/McvJBEup1NDJzDWalvWZR ePzug8YFOW/rCeqzqG3MhsGw6sjbstJVplj/TpB84DMguFws81VKaES730vTI2ib 0XKrmwbVIU82YxH4umtr8CRnxwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGyKb+Xx J2V2imYNnAHPhjk/C6kNMB8GA1UdIwQYMBaAFKXwZfzJ7aEdyk0N/G18mQdSmNf/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NDY4NS8yRDE1OTE4MkE5 NzMxMUVBOUFBQkU5MjNDNEY5QUUwMi9wZkJsX01udG9SM0tUUTM4Ylh5WkIxS1kx XzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3BmQmxfTW50b1IzS1RRMzhiWHlaQjFLWTFfOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NDY4NS8yRDE1OTE4MkE5NzMxMUVBOUFBQkU5MjNDNEY5QUUwMi9wZkJsX01udG9S M0tUUTM4Ylh5WkIxS1kxXzgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA2NNlyFZBAdDIpsAHA6NBaclW9hVhfkRcY0YSSjA4b8vuoWYPYpdPp LvcxoN519G+gpWZ++1w7xEV22X9vgWVHhXX2adXH4XTvJ1lVgSawQs+sIpRJ3lsn j/CYjlLPlwZOZEhKo7F5qriUttYRjYFrRlTJMih7+hcfF9JS1KjPe0vpO4qlWG9R nHV61wWd+7f+DCxjZ+oEXZCp+uXtOqwP1KzQx8xVYOZ8ryaTX4POQSPFxNgFh0Pr AK6AKDKjIN4Rrk+naAvd6Hcx2a40veUBz3LC1a7FFdurm0eQyVhd2CPpw245fiFb 3LisV0waxMlVFuJ6glws6STAYOZWYD3q -----END CERTIFICATE-----Generated at Mon Oct 20 13:50:29 2025 by rpki-client