$ rpki-client -vvf rpki.apnic.net/member_repository/A917F352/3D9D7F5EA1FB11EEA360925AC4F9AE02/Crfzan3eThH0sBWX3w3nopqAvEQ.mft File: Crfzan3eThH0sBWX3w3nopqAvEQ.mft (raw, json) Hash identifier: hGCHXNl3kH7t00Os6Ns85OBqa/AFpdZSogMjH3y34nk= Subject key identifier: 07:FA:83:34:21:7C:83:C4:ED:4F:F4:8F:6F:40:3C:39:FD:51:B9:94 Authority key identifier: 0A:B7:F3:6A:7D:DE:4E:11:F4:B0:15:97:DF:0D:E7:A2:9A:80:BC:44 Certificate issuer: /CN=A917F352/serialNumber=0AB7F36A7DDE4E11F4B01597DF0DE7A29A80BC44 Certificate serial: 0156 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Crfzan3eThH0sBWX3w3nopqAvEQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917F352/3D9D7F5EA1FB11EEA360925AC4F9AE02/Crfzan3eThH0sBWX3w3nopqAvEQ.mft Manifest number: 0154 Signing time: Sun 19 Oct 2025 06:52:14 +0000 Manifest this update: Sun 19 Oct 2025 06:52:13 +0000 Manifest next update: Sun 26 Oct 2025 06:52:13 +0000 Files and hashes: 1: Crfzan3eThH0sBWX3w3nopqAvEQ.crl (hash: FZH8bv7RqyXe3VaJLiMOS7zWvQtnVoB+wsJD1f7CGxc=) 2: 8FE6CF86A1FB11EE9773325BC4F9AE02.roa (hash: 7+HziPW8bdU4fmbvKj0ZUtapknCkvsD+7VoRTrV2tSY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917F352/3D9D7F5EA1FB11EEA360925AC4F9AE02/Crfzan3eThH0sBWX3w3nopqAvEQ.crl rsync://rpki.apnic.net/member_repository/A917F352/3D9D7F5EA1FB11EEA360925AC4F9AE02/Crfzan3eThH0sBWX3w3nopqAvEQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Crfzan3eThH0sBWX3w3nopqAvEQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 06:52:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 342 (0x156) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917F352, serialNumber=0AB7F36A7DDE4E11F4B01597DF0DE7A29A80BC44 Validity Not Before: Oct 19 06:52:13 2025 GMT Not After : Oct 26 06:52:13 2025 GMT Subject: CN=68f48a9d-c367 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:40:51:92:c9:70:7f:1b:78:03:8e:3a:84:c9: cb:76:52:24:8b:b6:39:b5:77:43:c3:f5:fe:fb:28: 2d:6b:81:47:b1:8b:d3:64:bf:54:f1:17:e8:d9:8d: 9b:84:11:cf:6c:fe:c6:4c:67:5b:36:68:7f:4f:d0: a1:f2:1f:5c:35:86:4d:49:b8:b4:02:dc:35:d7:3f: 60:54:f9:07:ca:02:c7:1c:f3:ed:11:62:dc:04:b7: c1:01:a3:cf:db:b6:a5:73:8e:65:3e:13:86:44:b6: ca:89:21:62:82:9f:86:64:94:77:c2:f4:1c:22:d5: 03:38:ac:51:42:05:32:fe:26:c0:76:f2:a8:e2:28: c9:05:2d:ed:c9:01:4b:a6:d3:c4:50:26:2a:10:12: 9b:af:13:ac:26:2c:c4:0b:45:b3:e8:2f:79:51:bc: 13:26:a9:aa:c4:41:78:62:f1:fb:b5:b4:8c:4b:39: a9:ac:06:8e:b2:c7:c5:75:4e:6a:1a:c1:d9:cd:1c: ea:50:6f:b5:50:e7:06:7f:df:16:b9:b9:6e:c9:a9: 2e:cc:b5:9e:e7:2b:31:65:aa:fc:3d:99:da:a1:d4: 61:28:50:8c:58:da:5a:55:c7:78:c6:96:b9:44:3b: 38:01:d4:89:c0:58:b4:30:ab:2a:91:7e:5e:ee:ab: c6:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:FA:83:34:21:7C:83:C4:ED:4F:F4:8F:6F:40:3C:39:FD:51:B9:94 X509v3 Authority Key Identifier: keyid:0A:B7:F3:6A:7D:DE:4E:11:F4:B0:15:97:DF:0D:E7:A2:9A:80:BC:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917F352/3D9D7F5EA1FB11EEA360925AC4F9AE02/Crfzan3eThH0sBWX3w3nopqAvEQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Crfzan3eThH0sBWX3w3nopqAvEQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917F352/3D9D7F5EA1FB11EEA360925AC4F9AE02/Crfzan3eThH0sBWX3w3nopqAvEQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 88:24:86:8b:08:45:98:5a:8e:82:bf:8f:d9:15:ea:e0:c9:f9: 97:ae:9e:d2:ab:a9:86:63:97:61:dc:e5:3c:35:b1:58:8b:09: fe:f8:37:d8:d4:13:e2:1e:85:8f:8a:8a:2b:8e:4e:10:e7:8a: e2:69:e0:c5:06:4a:72:b0:e2:94:94:bb:dc:89:6f:96:d6:c4: 3b:68:64:11:94:b7:96:17:f5:1f:8d:d6:3f:04:d1:d8:8d:73: 4c:b9:39:06:ed:9e:08:66:46:83:ec:ff:e1:53:e4:e0:a8:48: d9:76:46:9b:bf:17:48:d8:2e:23:1e:82:fb:49:4c:de:e8:c5: b0:c4:cd:b0:98:50:5f:26:db:b4:59:b7:2e:ac:76:63:2e:3d: d6:87:e1:65:f6:78:29:c3:61:71:0a:6a:ce:d7:19:23:1f:e5: 06:bb:09:6c:16:9b:21:93:77:52:fe:0c:b1:2c:64:71:d8:51: 05:b0:74:9d:c3:a0:73:87:ac:0d:9e:31:90:e3:ab:31:b2:bc: a0:00:1d:a3:1e:66:3c:54:5c:7d:fd:4d:9b:ff:63:31:19:55: fe:e7:19:ac:a5:50:32:28:cf:91:4a:67:26:5c:3a:5f:7c:6e: e4:d8:74:a1:03:77:c9:c8:22:7c:f7:03:07:e0:31:d5:8c:c3: c1:d8:20:61 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAVYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0YzNTIxMTAvBgNVBAUTKDBBQjdGMzZBN0RERTRFMTFGNEIwMTU5N0RGMERFN0Ey OUE4MEJDNDQwHhcNMjUxMDE5MDY1MjEzWhcNMjUxMDI2MDY1MjEzWjAYMRYwFAYD VQQDEw02OGY0OGE5ZC1jMzY3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtUBRkslwfxt4A446hMnLdlIki7Y5tXdDw/X++ygta4FHsYvTZL9U8Rfo2Y2b hBHPbP7GTGdbNmh/T9Ch8h9cNYZNSbi0Atw11z9gVPkHygLHHPPtEWLcBLfBAaPP 27alc45lPhOGRLbKiSFigp+GZJR3wvQcItUDOKxRQgUy/ibAdvKo4ijJBS3tyQFL ptPEUCYqEBKbrxOsJizEC0Wz6C95UbwTJqmqxEF4YvH7tbSMSzmprAaOssfFdU5q GsHZzRzqUG+1UOcGf98WubluyakuzLWe5ysxZar8PZnaodRhKFCMWNpaVcd4xpa5 RDs4AdSJwFi0MKsqkX5e7qvGBwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAf6gzQh fIPE7U/0j29APDn9UbmUMB8GA1UdIwQYMBaAFAq382p93k4R9LAVl98N56KagLxE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RjM1Mi8zRDlEN0Y1RUEx RkIxMUVFQTM2MDkyNUFDNEY5QUUwMi9DcmZ6YW4zZVRoSDBzQldYM3czbm9wcUF2 RVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NyZnphbjNlVGhIMHNCV1gzdzNub3BxQXZFUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 RjM1Mi8zRDlEN0Y1RUExRkIxMUVFQTM2MDkyNUFDNEY5QUUwMi9DcmZ6YW4zZVRo SDBzQldYM3czbm9wcUF2RVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCIJIaLCEWYWo6Cv4/ZFergyfmXrp7Sq6mGY5dh3OU8NbFYiwn++DfY 1BPiHoWPioorjk4Q54riaeDFBkpysOKUlLvciW+W1sQ7aGQRlLeWF/UfjdY/BNHY jXNMuTkG7Z4IZkaD7P/hU+TgqEjZdkabvxdI2C4jHoL7SUze6MWwxM2wmFBfJtu0 WbcurHZjLj3Wh+Fl9ngpw2FxCmrO1xkjH+UGuwlsFpshk3dS/gyxLGRx2FEFsHSd w6Bzh6wNnjGQ46sxsrygAB2jHmY8VFx9/U2b/2MxGVX+5xmspVAyKM+RSmcmXDpf fG7k2HShA3fJyCJ89wMH4DHVjMPB2CBh -----END CERTIFICATE-----Generated at Mon Oct 20 14:01:42 2025 by rpki-client