$ rpki-client -vvf rpki.apnic.net/member_repository/A91DB39A/E1DD5D42B03911EC953BFB0DC4F9AE02/Znvt9oJs9x83Ba2x89T7FITwiBQ.mft File: Znvt9oJs9x83Ba2x89T7FITwiBQ.mft (raw, json) Hash identifier: vd6SXLqz0O1VD3LS/lC0eR+1Jlybcfb3DV9awlbLFcg= Subject key identifier: CB:EA:A9:0B:72:1F:B8:73:FC:E1:B7:EA:B5:99:28:ED:5C:20:25:C8 Authority key identifier: 66:7B:ED:F6:82:6C:F7:1F:37:05:AD:B1:F3:D4:FB:14:84:F0:88:14 Certificate issuer: /CN=A91DB39A/serialNumber=667BEDF6826CF71F3705ADB1F3D4FB1484F08814 Certificate serial: 03B5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Znvt9oJs9x83Ba2x89T7FITwiBQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DB39A/E1DD5D42B03911EC953BFB0DC4F9AE02/Znvt9oJs9x83Ba2x89T7FITwiBQ.mft Manifest number: 03B0 Signing time: Sun 19 Oct 2025 02:42:25 +0000 Manifest this update: Sun 19 Oct 2025 02:42:24 +0000 Manifest next update: Sun 26 Oct 2025 02:42:24 +0000 Files and hashes: 1: Znvt9oJs9x83Ba2x89T7FITwiBQ.crl (hash: DxMW921qn5aL0QgMxuEu+tIU1Eruq8VJ7BRbKOA6KZY=) 2: 6108822AB03C11EC918CBA0EC4F9AE02.roa (hash: 1IbCI6SUsnpFHSypZmjM58SN3Uz6QJzWDA0ZH6CaOF8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DB39A/E1DD5D42B03911EC953BFB0DC4F9AE02/Znvt9oJs9x83Ba2x89T7FITwiBQ.crl rsync://rpki.apnic.net/member_repository/A91DB39A/E1DD5D42B03911EC953BFB0DC4F9AE02/Znvt9oJs9x83Ba2x89T7FITwiBQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Znvt9oJs9x83Ba2x89T7FITwiBQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 02:42:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 949 (0x3b5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DB39A, serialNumber=667BEDF6826CF71F3705ADB1F3D4FB1484F08814 Validity Not Before: Oct 19 02:42:24 2025 GMT Not After : Oct 26 02:42:24 2025 GMT Subject: CN=68f45011-018d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:37:80:0e:b8:bd:60:df:13:21:65:30:49:8e: 1c:f8:66:e7:70:25:58:02:10:5f:6b:9a:14:c1:9f: f6:96:8f:3b:5e:95:35:8e:e4:24:59:8c:72:1f:b0: f7:53:fd:17:d6:d2:2b:61:63:21:65:30:06:52:4f: e6:35:ca:bb:09:ae:7d:51:d5:90:62:a4:fc:e7:3b: 49:7f:cc:cc:3f:3f:27:be:85:f7:66:27:ca:77:34: 1f:9c:5d:98:9a:94:75:03:16:05:58:00:aa:f7:f8: a4:47:f8:4d:2b:14:2d:a0:a8:d8:ea:fe:36:93:75: 0b:08:a0:1f:88:8d:1c:9e:ac:f9:f4:a5:89:e1:9e: 4e:29:42:d6:2f:3c:0f:52:d1:f8:84:86:4b:90:00: 1b:6b:2c:36:41:e3:80:d5:31:96:7c:c2:23:81:c8: 23:16:97:9e:17:43:64:14:13:c2:95:ba:2f:c1:61: 06:c1:e3:9d:c2:ac:b2:79:4c:56:6d:ba:f8:31:55: 92:d9:d7:50:0b:ad:fe:18:5c:da:dd:b7:d9:9f:ee: b0:0d:32:b5:0e:0b:cd:6e:da:6b:e3:3c:f4:83:62: f0:7b:cd:ba:33:8d:9b:58:cf:62:16:49:d2:90:5c: f6:ad:87:05:20:a6:51:5d:11:00:61:91:b1:26:cb: e7:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:EA:A9:0B:72:1F:B8:73:FC:E1:B7:EA:B5:99:28:ED:5C:20:25:C8 X509v3 Authority Key Identifier: keyid:66:7B:ED:F6:82:6C:F7:1F:37:05:AD:B1:F3:D4:FB:14:84:F0:88:14 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DB39A/E1DD5D42B03911EC953BFB0DC4F9AE02/Znvt9oJs9x83Ba2x89T7FITwiBQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Znvt9oJs9x83Ba2x89T7FITwiBQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DB39A/E1DD5D42B03911EC953BFB0DC4F9AE02/Znvt9oJs9x83Ba2x89T7FITwiBQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3b:e4:d3:65:47:9f:47:1d:45:59:01:e8:6d:17:0b:29:44:78: 6b:86:c2:2d:47:31:3f:6a:00:5c:03:d7:fa:c4:d9:7d:82:65: 66:38:73:24:3b:7e:b7:50:88:1f:2c:e4:51:2a:13:50:ba:c8: 2c:08:83:a2:ce:47:ac:8c:97:d8:9b:c6:81:6b:9d:2a:90:f9: 79:98:7b:8c:d1:b0:17:f2:fe:fb:d8:c6:d3:46:be:29:6f:91: 2d:cd:69:19:12:72:1f:90:33:d2:14:79:cc:af:54:59:3c:20: de:35:8d:7b:51:d8:ab:21:08:a2:2a:de:47:6f:e0:1b:25:74: 95:4c:4c:78:ce:3b:73:9b:2b:5d:e5:e3:bb:54:7a:e1:5e:ef: c5:da:4f:5a:c9:1a:f8:9e:23:58:33:cc:52:d7:ec:d2:52:67: 24:39:33:1a:45:9b:d5:85:a4:61:ff:df:42:5d:6f:fd:fc:25: 5a:a9:58:c8:e6:c1:8c:a9:a6:0a:4d:09:63:4b:ed:d1:e6:c3: 46:91:d8:34:eb:ba:f5:12:f0:e1:9d:0d:8f:b4:d2:b5:b1:cb: e5:a6:a1:10:8f:4e:c6:50:c4:38:b7:fa:08:b2:c1:a8:ef:a0: 9f:d8:82:21:3d:98:1f:10:cd:66:77:46:ec:ca:2d:b7:29:08: 8a:4d:06:83 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA7UwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REIzOUExMTAvBgNVBAUTKDY2N0JFREY2ODI2Q0Y3MUYzNzA1QURCMUYzRDRGQjE0 ODRGMDg4MTQwHhcNMjUxMDE5MDI0MjI0WhcNMjUxMDI2MDI0MjI0WjAYMRYwFAYD VQQDEw02OGY0NTAxMS0wMThkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsDeADri9YN8TIWUwSY4c+GbncCVYAhBfa5oUwZ/2lo87XpU1juQkWYxyH7D3 U/0X1tIrYWMhZTAGUk/mNcq7Ca59UdWQYqT85ztJf8zMPz8nvoX3ZifKdzQfnF2Y mpR1AxYFWACq9/ikR/hNKxQtoKjY6v42k3ULCKAfiI0cnqz59KWJ4Z5OKULWLzwP UtH4hIZLkAAbayw2QeOA1TGWfMIjgcgjFpeeF0NkFBPClbovwWEGweOdwqyyeUxW bbr4MVWS2ddQC63+GFza3bfZn+6wDTK1DgvNbtpr4zz0g2Lwe826M42bWM9iFknS kFz2rYcFIKZRXREAYZGxJsvn9QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMvqqQty H7hz/OG36rWZKO1cICXIMB8GA1UdIwQYMBaAFGZ77faCbPcfNwWtsfPU+xSE8IgU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQjM5QS9FMURENUQ0MkIw MzkxMUVDOTUzQkZCMERDNEY5QUUwMi9abnZ0OW9Kczl4ODNCYTJ4ODlUN0ZJVHdp QlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1pudnQ5b0pzOXg4M0JhMng4OVQ3RklUd2lCUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE QjM5QS9FMURENUQ0MkIwMzkxMUVDOTUzQkZCMERDNEY5QUUwMi9abnZ0OW9Kczl4 ODNCYTJ4ODlUN0ZJVHdpQlEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA75NNlR59HHUVZAehtFwspRHhrhsItRzE/agBcA9f6xNl9gmVmOHMk O363UIgfLORRKhNQusgsCIOizkesjJfYm8aBa50qkPl5mHuM0bAX8v772MbTRr4p b5EtzWkZEnIfkDPSFHnMr1RZPCDeNY17UdirIQiiKt5Hb+AbJXSVTEx4zjtzmytd 5eO7VHrhXu/F2k9ayRr4niNYM8xS1+zSUmckOTMaRZvVhaRh/99CXW/9/CVaqVjI 5sGMqaYKTQljS+3R5sNGkdg067r1EvDhnQ2PtNK1scvlpqEQj07GUMQ4t/oIssGo 76Cf2IIhPZgfEM1md0bsyi23KQiKTQaD -----END CERTIFICATE-----Generated at Mon Oct 20 02:15:41 2025 by rpki-client