$ rpki-client -vvf rpki.apnic.net/member_repository/A917AFE7/F8B65374291211EC8631B854C4F9AE02/3MB6nY_-N43drzzQ5Bqe9v3TFI8.mft File: 3MB6nY_-N43drzzQ5Bqe9v3TFI8.mft (raw, json) Hash identifier: nyjwxsBGIddqKtzXVlytQLHoTixQCh0LSY1eaL/mxY8= Subject key identifier: 9E:C7:A5:A9:03:E5:44:F8:F7:09:32:4A:8C:CC:3E:D2:BF:EF:FB:9E Authority key identifier: DC:C0:7A:9D:8F:FE:37:8D:DD:AF:3C:D0:E4:1A:9E:F6:FD:D3:14:8F Certificate issuer: /CN=A917AFE7/serialNumber=DCC07A9D8FFE378DDDAF3CD0E41A9EF6FDD3148F Certificate serial: 0510 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3MB6nY_-N43drzzQ5Bqe9v3TFI8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917AFE7/F8B65374291211EC8631B854C4F9AE02/3MB6nY_-N43drzzQ5Bqe9v3TFI8.mft Manifest number: 050A Signing time: Sun 19 Oct 2025 01:23:37 +0000 Manifest this update: Sun 19 Oct 2025 01:23:37 +0000 Manifest next update: Sun 26 Oct 2025 01:23:37 +0000 Files and hashes: 1: 3MB6nY_-N43drzzQ5Bqe9v3TFI8.crl (hash: HTFcVxg4vXXZxcWPybZYXWZWxGO4q7kMRHrW49ueOFk=) 2: D3D1604C2B6711EC8CD1C61FC4F9AE02.roa (hash: K+U5H/gEB39S0MtkniCqyAbmgU8k6WO9RKiUyR91DCc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917AFE7/F8B65374291211EC8631B854C4F9AE02/3MB6nY_-N43drzzQ5Bqe9v3TFI8.crl rsync://rpki.apnic.net/member_repository/A917AFE7/F8B65374291211EC8631B854C4F9AE02/3MB6nY_-N43drzzQ5Bqe9v3TFI8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3MB6nY_-N43drzzQ5Bqe9v3TFI8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 01:23:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1296 (0x510) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917AFE7, serialNumber=DCC07A9D8FFE378DDDAF3CD0E41A9EF6FDD3148F Validity Not Before: Oct 19 01:23:37 2025 GMT Not After : Oct 26 01:23:37 2025 GMT Subject: CN=68f43d99-db73 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:63:83:66:52:99:45:6c:af:96:37:b2:8b:10: e2:f7:cd:e4:d8:c7:a9:08:0b:da:0b:dc:61:5c:37: d3:e7:b3:71:70:90:d3:90:e1:42:d9:b2:c0:6f:78: 58:3f:75:57:50:1e:64:fb:8d:4f:ee:2a:f7:17:da: aa:de:f9:90:ad:31:bd:1f:c2:b1:02:14:d9:ce:60: 60:cf:50:cd:f3:98:ee:d6:3c:23:04:6a:85:e6:35: a6:12:1b:d9:9d:a0:bf:b5:7b:2f:16:9d:3b:e4:e0: 13:18:8f:1d:11:12:1d:bc:2e:31:58:d9:ef:a3:69: 82:a7:9f:53:2b:a4:cd:b4:42:83:92:f4:45:54:a4: d9:c0:af:53:ff:be:ff:e0:20:e6:53:95:2b:7b:fe: 85:14:8b:f2:18:47:70:37:cb:35:96:bc:29:29:cd: 98:d4:ec:50:d3:54:24:ba:80:75:2d:b0:04:8b:cd: 38:b6:4e:2c:af:05:ce:5b:dd:79:1d:6e:dd:d9:d6: bd:43:ad:17:94:1b:c1:de:22:a6:d2:72:f1:1b:9e: 82:2b:c2:de:ee:18:6a:23:6e:1d:35:f0:65:b5:2f: 38:27:6b:a7:d7:e5:1d:50:3a:93:27:eb:ae:d0:a6: 34:35:cf:dc:65:07:f3:b8:69:0d:f8:74:ff:fb:83: 71:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:C7:A5:A9:03:E5:44:F8:F7:09:32:4A:8C:CC:3E:D2:BF:EF:FB:9E X509v3 Authority Key Identifier: keyid:DC:C0:7A:9D:8F:FE:37:8D:DD:AF:3C:D0:E4:1A:9E:F6:FD:D3:14:8F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917AFE7/F8B65374291211EC8631B854C4F9AE02/3MB6nY_-N43drzzQ5Bqe9v3TFI8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3MB6nY_-N43drzzQ5Bqe9v3TFI8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917AFE7/F8B65374291211EC8631B854C4F9AE02/3MB6nY_-N43drzzQ5Bqe9v3TFI8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2b:33:dd:b8:35:a7:d4:3d:fd:3a:8d:ac:f3:28:30:84:91:51: c8:ed:63:40:72:ce:66:5a:3c:eb:b9:80:a3:8f:de:35:9b:15: ee:8c:7a:a5:54:6b:9d:34:3e:3f:75:46:f9:ab:29:15:a1:76: 40:70:23:e2:37:57:78:c0:d8:6a:5b:72:3a:84:ab:5f:9c:d5: e2:fc:99:0c:89:08:06:a2:f4:dc:a4:4b:83:84:2b:c6:07:9e: c4:f5:f2:e2:8c:64:ad:a3:10:e5:79:a6:fa:7b:50:4a:aa:7a: 4b:93:b9:96:fd:b4:0a:e6:dc:a2:bb:0b:dd:5c:ad:bf:d6:7b: 73:31:a6:02:3e:2f:e6:3e:fd:59:65:ff:c0:37:c4:da:3d:3b: 8d:f1:27:e8:23:f2:70:c5:29:44:ed:85:51:ba:5a:e7:ae:36: 32:10:14:4e:dc:7d:28:82:a1:bf:90:62:87:cf:76:3d:c7:e9: 24:b9:89:f3:07:94:c0:32:6c:26:41:dd:2b:d7:26:c9:70:63: dd:50:e1:ec:83:9c:c9:29:4e:b9:10:be:09:6d:c6:5e:ca:cb: e5:19:b6:88:7a:76:6b:18:97:88:a5:93:8f:02:69:a2:31:c7: fc:39:5a:f4:44:65:a7:77:31:50:9c:66:4c:01:1a:18:64:6a: c4:b5:65:06 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBRAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0FGRTcxMTAvBgNVBAUTKERDQzA3QTlEOEZGRTM3OEREREFGM0NEMEU0MUE5RUY2 RkREMzE0OEYwHhcNMjUxMDE5MDEyMzM3WhcNMjUxMDI2MDEyMzM3WjAYMRYwFAYD VQQDEw02OGY0M2Q5OS1kYjczMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqGODZlKZRWyvljeyixDi983k2MepCAvaC9xhXDfT57NxcJDTkOFC2bLAb3hY P3VXUB5k+41P7ir3F9qq3vmQrTG9H8KxAhTZzmBgz1DN85ju1jwjBGqF5jWmEhvZ naC/tXsvFp075OATGI8dERIdvC4xWNnvo2mCp59TK6TNtEKDkvRFVKTZwK9T/77/ 4CDmU5Ure/6FFIvyGEdwN8s1lrwpKc2Y1OxQ01QkuoB1LbAEi804tk4srwXOW915 HW7d2da9Q60XlBvB3iKm0nLxG56CK8Le7hhqI24dNfBltS84J2un1+UdUDqTJ+uu 0KY0Nc/cZQfzuGkN+HT/+4NxnQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJ7HpakD 5UT49wkySozMPtK/7/ueMB8GA1UdIwQYMBaAFNzAep2P/jeN3a880OQanvb90xSP MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QUZFNy9GOEI2NTM3NDI5 MTIxMUVDODYzMUI4NTRDNEY5QUUwMi8zTUI2bllfLU40M2RyenpRNUJxZTl2M1RG STguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzNNQjZuWV8tTjQzZHJ6elE1QnFlOXYzVEZJOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QUZFNy9GOEI2NTM3NDI5MTIxMUVDODYzMUI4NTRDNEY5QUUwMi8zTUI2bllfLU40 M2RyenpRNUJxZTl2M1RGSTgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQArM924NafUPf06jazzKDCEkVHI7WNAcs5mWjzruYCjj941mxXujHql VGudND4/dUb5qykVoXZAcCPiN1d4wNhqW3I6hKtfnNXi/JkMiQgGovTcpEuDhCvG B57E9fLijGStoxDleab6e1BKqnpLk7mW/bQK5tyiuwvdXK2/1ntzMaYCPi/mPv1Z Zf/AN8TaPTuN8SfoI/JwxSlE7YVRulrnrjYyEBRO3H0ogqG/kGKHz3Y9x+kkuYnz B5TAMmwmQd0r1ybJcGPdUOHsg5zJKU65EL4JbcZeysvlGbaIenZrGJeIpZOPAmmi Mcf8OVr0RGWndzFQnGZMARoYZGrEtWUG -----END CERTIFICATE-----Generated at Mon Oct 20 13:51:15 2025 by rpki-client