$ rpki-client -vvf rpki.apnic.net/member_repository/A911D834/DFBA50B81D8D11E2824DEDEB08B02CD2/_bJ1TZUGMOsR34TihVyqt9Fib4A.mft File: _bJ1TZUGMOsR34TihVyqt9Fib4A.mft (raw, json) Hash identifier: mXtmRCh0nV6TT/QOUwinKWgEENFwQHkVqa8fbRTbXg8= Subject key identifier: 24:32:A6:8E:4D:9E:D5:41:E6:E5:A6:67:76:14:14:81:C8:ED:68:53 Authority key identifier: FD:B2:75:4D:95:06:30:EB:11:DF:84:E2:85:5C:AA:B7:D1:62:6F:80 Certificate issuer: /CN=A911D834/serialNumber=FDB2754D950630EB11DF84E2855CAAB7D1626F80 Certificate serial: 3538 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_bJ1TZUGMOsR34TihVyqt9Fib4A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911D834/DFBA50B81D8D11E2824DEDEB08B02CD2/_bJ1TZUGMOsR34TihVyqt9Fib4A.mft Manifest number: 3504 Signing time: Sun 02 Nov 2025 14:38:57 +0000 Manifest this update: Sun 02 Nov 2025 14:38:56 +0000 Manifest next update: Sun 09 Nov 2025 14:38:56 +0000 Files and hashes: 1: _bJ1TZUGMOsR34TihVyqt9Fib4A.crl (hash: P2odt6bnw9Ji3BxIDvzQez3Q+d9/JTDKI6FkYG+sZV8=) 2: 5F436F7E39A011EE923F683AC4F9AE02.roa (hash: 7R/SjQUQ2hP0HbRnbYfsLnedhLehfUDAaOiYlklNqvo=) 3: DA8A3692A59411F0BF072D6DC4F9AE02.roa (hash: pbD3JP/HzqcUzvlBhqeP9HbWOKNkQzUxda+U++yeQSw=) 4: 338EAE62944C11F0A5549211C4F9AE02.roa (hash: MaIZ9WJ2QSPLv1IkCG1fAbYtGbONfG/gCy6D1hTgYdk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911D834/DFBA50B81D8D11E2824DEDEB08B02CD2/_bJ1TZUGMOsR34TihVyqt9Fib4A.crl rsync://rpki.apnic.net/member_repository/A911D834/DFBA50B81D8D11E2824DEDEB08B02CD2/_bJ1TZUGMOsR34TihVyqt9Fib4A.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_bJ1TZUGMOsR34TihVyqt9Fib4A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 14:38:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13624 (0x3538) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911D834, serialNumber=FDB2754D950630EB11DF84E2855CAAB7D1626F80 Validity Not Before: Nov 2 14:38:56 2025 GMT Not After : Nov 9 14:38:56 2025 GMT Subject: CN=69076d01-5cfc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:59:53:7b:37:c4:6a:dd:a9:30:aa:dd:11:d7: d0:1b:60:bc:f0:95:61:04:b4:46:d8:36:8a:9c:86: 72:f6:b6:8d:9f:ab:7f:ca:a8:e2:be:50:16:1a:fa: e6:f6:df:29:5b:8e:8f:ec:67:09:8b:33:ce:ad:69: b5:47:16:60:70:45:08:91:3b:c3:7c:c3:8b:54:4d: 4f:e1:a0:4c:ef:21:15:61:1f:25:29:65:17:cf:2a: 0d:8f:b7:e3:d4:46:64:e2:94:5b:8e:ed:a7:cc:7a: 8f:ba:1a:41:63:75:c6:ef:7d:cd:bd:7b:14:34:be: e9:73:f1:d6:f4:e4:3f:ad:0f:b2:06:38:28:5b:a7: a9:f0:fb:55:c5:fb:12:27:61:e7:0a:38:ee:7e:14: 1a:db:b0:59:26:e6:0b:07:88:aa:7a:66:c5:34:34: a9:26:22:e1:25:d2:98:6f:08:26:3e:08:3e:26:bb: 94:75:d8:bf:96:af:f0:55:8c:86:1d:87:a9:90:ae: 4a:71:c7:05:1a:fb:e7:95:3e:18:69:19:a3:01:da: 0f:7c:b2:d4:a6:9b:16:f4:41:18:49:f5:e2:0f:3d: bf:b8:da:55:15:34:34:63:19:60:4c:0d:08:4d:6d: 2f:4b:17:d5:b0:9f:c3:91:9b:10:31:46:86:90:c6: c0:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:32:A6:8E:4D:9E:D5:41:E6:E5:A6:67:76:14:14:81:C8:ED:68:53 X509v3 Authority Key Identifier: keyid:FD:B2:75:4D:95:06:30:EB:11:DF:84:E2:85:5C:AA:B7:D1:62:6F:80 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911D834/DFBA50B81D8D11E2824DEDEB08B02CD2/_bJ1TZUGMOsR34TihVyqt9Fib4A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_bJ1TZUGMOsR34TihVyqt9Fib4A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911D834/DFBA50B81D8D11E2824DEDEB08B02CD2/_bJ1TZUGMOsR34TihVyqt9Fib4A.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 13:3a:c7:46:e3:43:db:c6:9a:b0:39:11:a2:e5:01:f4:54:e8: 21:94:ac:d8:da:86:61:e1:6a:7a:1c:bc:11:08:91:d1:4a:14: 62:77:25:58:0c:94:16:bf:a5:48:aa:65:e9:74:3a:2d:82:3d: c5:e2:5e:58:85:9b:39:6d:63:a8:03:f2:4e:14:9e:05:da:d4: 28:f6:9e:b2:bc:6f:e0:13:ea:d2:46:08:8f:94:44:3f:b5:ca: 5b:2b:37:bf:94:70:ae:9c:05:77:bf:81:96:a8:43:83:d3:39: d4:4a:76:d1:b5:b1:6a:51:e4:0f:c2:43:9d:9b:1d:a1:89:92: 72:36:6b:66:db:4d:53:08:a1:39:a1:f3:4c:65:69:04:a0:ee: 72:00:6a:23:2c:89:f2:5e:74:da:14:3b:10:83:8c:32:b6:ae: fe:de:2b:d2:58:40:cf:11:60:62:8e:07:90:9c:ee:42:ea:87: 94:4f:6f:4a:e4:2c:51:c2:21:1d:79:24:14:17:33:ff:5c:67: c4:1a:a6:fc:b0:c1:79:3f:a6:da:9d:ec:87:73:b3:47:64:63: dd:10:a2:5d:7b:c0:6c:80:df:13:d0:94:a5:68:16:d9:93:58: d0:a3:48:51:41:46:01:62:92:1e:f8:ff:5e:d0:16:81:1d:61: e3:11:88:22 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNTgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUQ4MzQxMTAvBgNVBAUTKEZEQjI3NTREOTUwNjMwRUIxMURGODRFMjg1NUNBQUI3 RDE2MjZGODAwHhcNMjUxMTAyMTQzODU2WhcNMjUxMTA5MTQzODU2WjAYMRYwFAYD VQQDEw02OTA3NmQwMS01Y2ZjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvllTezfEat2pMKrdEdfQG2C88JVhBLRG2DaKnIZy9raNn6t/yqjivlAWGvrm 9t8pW46P7GcJizPOrWm1RxZgcEUIkTvDfMOLVE1P4aBM7yEVYR8lKWUXzyoNj7fj 1EZk4pRbju2nzHqPuhpBY3XG733NvXsUNL7pc/HW9OQ/rQ+yBjgoW6ep8PtVxfsS J2HnCjjufhQa27BZJuYLB4iqembFNDSpJiLhJdKYbwgmPgg+JruUddi/lq/wVYyG HYepkK5KcccFGvvnlT4YaRmjAdoPfLLUppsW9EEYSfXiDz2/uNpVFTQ0YxlgTA0I TW0vSxfVsJ/DkZsQMUaGkMbALQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCQypo5N ntVB5uWmZ3YUFIHI7WhTMB8GA1UdIwQYMBaAFP2ydU2VBjDrEd+E4oVcqrfRYm+A MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRDgzNC9ERkJBNTBCODFE OEQxMUUyODI0REVERUIwOEIwMkNEMi9fYkoxVFpVR01Pc1IzNFRpaFZ5cXQ5Rmli NEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL19iSjFUWlVHTU9zUjM0VGloVnlxdDlGaWI0QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx RDgzNC9ERkJBNTBCODFEOEQxMUUyODI0REVERUIwOEIwMkNEMi9fYkoxVFpVR01P c1IzNFRpaFZ5cXQ5RmliNEEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQATOsdG40PbxpqwORGi5QH0VOghlKzY2oZh4Wp6HLwRCJHRShRidyVY DJQWv6VIqmXpdDotgj3F4l5YhZs5bWOoA/JOFJ4F2tQo9p6yvG/gE+rSRgiPlEQ/ tcpbKze/lHCunAV3v4GWqEOD0znUSnbRtbFqUeQPwkOdmx2hiZJyNmtm201TCKE5 ofNMZWkEoO5yAGojLInyXnTaFDsQg4wytq7+3ivSWEDPEWBijgeQnO5C6oeUT29K 5CxRwiEdeSQUFzP/XGfEGqb8sMF5P6baneyHc7NHZGPdEKJde8BsgN8T0JSlaBbZ k1jQo0hRQUYBYpIe+P9e0BaBHWHjEYgi -----END CERTIFICATE-----Generated at Tue Nov 4 08:28:04 2025 by rpki-client