$ rpki-client -vvf rpki.apnic.net/member_repository/A9134309/D41FA32C3EE311F0B9398442C4F9AE02/B3vNZjsOY7316bgJr3Gu8eWt9js.mft File: B3vNZjsOY7316bgJr3Gu8eWt9js.mft (raw, json) Hash identifier: N7bIirBYrUYOogHjkD6M5EQbVMBzAtfLtRznyWkMaiY= Subject key identifier: 47:AA:69:7F:8A:20:6C:7E:8B:97:03:64:7E:BD:4D:40:21:F3:96:B7 Authority key identifier: 07:7B:CD:66:3B:0E:63:BD:F5:E9:B8:09:AF:71:AE:F1:E5:AD:F6:3B Certificate issuer: /CN=A9134309/serialNumber=077BCD663B0E63BDF5E9B809AF71AEF1E5ADF63B Certificate serial: 53 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/B3vNZjsOY7316bgJr3Gu8eWt9js.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9134309/D41FA32C3EE311F0B9398442C4F9AE02/B3vNZjsOY7316bgJr3Gu8eWt9js.mft Manifest number: 50 Signing time: Wed 29 Oct 2025 07:06:12 +0000 Manifest this update: Wed 29 Oct 2025 07:06:11 +0000 Manifest next update: Wed 05 Nov 2025 07:06:11 +0000 Files and hashes: 1: B3vNZjsOY7316bgJr3Gu8eWt9js.crl (hash: fRcKhCbO63lW1fcsFCAZdR6MKqqvOsGXHBpLVQKAu9Y=) 2: 0322BF5A6D3411F0A208C05DC4F9AE02.roa (hash: WQ8BuE65YXtQyTIurkyDNftfUcfnYZp85uvlHfPR7PU=) 3: 13CC532280EC11F0A973810CC4F9AE02.roa (hash: YUDZaJzqTJAMIH2aYnffmm6rXB/hTcHYJMvuVkjpDWs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9134309/D41FA32C3EE311F0B9398442C4F9AE02/B3vNZjsOY7316bgJr3Gu8eWt9js.crl rsync://rpki.apnic.net/member_repository/A9134309/D41FA32C3EE311F0B9398442C4F9AE02/B3vNZjsOY7316bgJr3Gu8eWt9js.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/B3vNZjsOY7316bgJr3Gu8eWt9js.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Nov 2025 07:06:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 83 (0x53) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9134309, serialNumber=077BCD663B0E63BDF5E9B809AF71AEF1E5ADF63B Validity Not Before: Oct 29 07:06:11 2025 GMT Not After : Nov 5 07:06:11 2025 GMT Subject: CN=6901bce4-8b9d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:96:80:60:d8:b6:e9:d2:7a:1b:17:d4:8a:dd: a1:75:2f:13:78:6e:ef:21:18:0e:d1:4c:be:ed:8d: 07:29:b1:8d:23:29:c2:fd:04:69:ec:2a:a4:0b:40: 80:22:a6:a4:b5:f0:7a:4a:cd:83:6f:a1:e7:12:d7: 7b:58:12:00:cf:1e:52:33:33:53:8b:a1:db:26:aa: 85:b3:44:30:10:d2:3e:7b:dc:cf:72:11:69:a7:ff: 95:c1:e9:14:d4:ac:06:ac:62:e3:c4:6b:da:53:bf: 33:fe:f3:3a:7e:34:65:68:2c:b7:28:e3:e3:09:96: 69:72:ad:da:a6:f6:fc:43:a5:a9:ff:d6:2a:07:65: 11:c8:a7:7b:67:a6:72:80:83:66:37:36:95:75:39: c6:6f:5e:21:b5:f4:83:12:a6:19:74:8f:3b:81:76: e8:2f:b8:7c:45:80:c8:8f:73:6d:54:e2:15:d2:9e: e2:57:d0:ff:b6:75:56:bd:25:22:6f:54:3b:26:83: fe:c4:8e:e5:cb:65:13:21:20:5a:49:53:ee:c9:5c: 3e:89:c2:cb:19:bf:ba:06:a1:b3:30:d1:b0:b6:bf: b6:ba:cc:c2:26:da:04:6b:2d:8a:77:13:2a:33:65: 67:f4:61:7c:31:72:0c:e5:e0:fa:37:01:62:9b:b1: 29:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:AA:69:7F:8A:20:6C:7E:8B:97:03:64:7E:BD:4D:40:21:F3:96:B7 X509v3 Authority Key Identifier: keyid:07:7B:CD:66:3B:0E:63:BD:F5:E9:B8:09:AF:71:AE:F1:E5:AD:F6:3B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9134309/D41FA32C3EE311F0B9398442C4F9AE02/B3vNZjsOY7316bgJr3Gu8eWt9js.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/B3vNZjsOY7316bgJr3Gu8eWt9js.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9134309/D41FA32C3EE311F0B9398442C4F9AE02/B3vNZjsOY7316bgJr3Gu8eWt9js.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 40:2b:a7:54:3a:58:fd:1e:ef:7a:df:30:d9:b6:43:bb:d2:f1: 9e:99:74:43:f7:4b:a9:02:b4:47:70:be:7c:57:1b:8e:0c:19: 73:4a:a6:27:34:51:b0:7f:fd:00:c1:0a:54:15:62:f2:fb:c3: 12:5c:b4:4b:7d:5f:cc:21:d7:5f:71:00:7e:38:f6:fd:11:08: 74:cd:f4:f1:2f:e9:37:74:e9:45:8c:6c:3a:b9:37:3a:ec:83: 73:e9:98:73:02:61:ac:48:e4:fa:32:6c:5c:50:46:a8:02:62: 0b:e6:be:92:5a:9e:a9:43:84:fe:13:a8:a6:ef:5b:fb:aa:12: c0:a8:26:c3:76:5f:0c:d0:76:4b:9b:80:74:21:27:1e:4a:cc: 0c:20:b6:64:06:d3:9a:42:af:05:80:e8:f1:b5:56:b0:df:f2: ba:9e:c8:c7:ed:b1:d4:33:2f:e5:b3:9c:0d:bc:09:41:0a:9c: c6:7e:03:64:c4:2a:32:fd:f8:08:9e:ea:57:af:65:2c:76:35: fb:17:f7:62:68:df:64:15:13:24:95:b4:94:49:88:c8:a5:f3: 19:ab:9f:67:69:23:54:49:41:c1:b3:d9:0e:f8:de:17:fc:d5: 66:19:12:8b:2f:b8:b5:a2:6f:04:dc:47:f6:ee:57:3f:59:fd: 3d:cf:d7:80 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBUzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEz NDMwOTExMC8GA1UEBRMoMDc3QkNENjYzQjBFNjNCREY1RTlCODA5QUY3MUFFRjFF NUFERjYzQjAeFw0yNTEwMjkwNzA2MTFaFw0yNTExMDUwNzA2MTFaMBgxFjAUBgNV BAMTDTY5MDFiY2U0LThiOWQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDDloBg2Lbp0nobF9SK3aF1LxN4bu8hGA7RTL7tjQcpsY0jKcL9BGnsKqQLQIAi pqS18HpKzYNvoecS13tYEgDPHlIzM1OLodsmqoWzRDAQ0j573M9yEWmn/5XB6RTU rAasYuPEa9pTvzP+8zp+NGVoLLco4+MJlmlyrdqm9vxDpan/1ioHZRHIp3tnpnKA g2Y3NpV1OcZvXiG19IMSphl0jzuBdugvuHxFgMiPc21U4hXSnuJX0P+2dVa9JSJv VDsmg/7EjuXLZRMhIFpJU+7JXD6JwssZv7oGobMw0bC2v7a6zMIm2gRrLYp3Eyoz ZWf0YXwxcgzl4Po3AWKbsSkpAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUR6ppf4og bH6LlwNkfr1NQCHzlrcwHwYDVR0jBBgwFoAUB3vNZjsOY7316bgJr3Gu8eWt9jsw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTM0MzA5L0Q0MUZBMzJDM0VF MzExRjBCOTM5ODQ0MkM0RjlBRTAyL0Izdk5aanNPWTczMTZiZ0pyM0d1OGVXdDlq cy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvQjN2Tlpqc09ZNzMxNmJnSnIzR3U4ZVd0OWpzLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTM0 MzA5L0Q0MUZBMzJDM0VFMzExRjBCOTM5ODQ0MkM0RjlBRTAyL0Izdk5aanNPWTcz MTZiZ0pyM0d1OGVXdDlqcy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAEArp1Q6WP0e73rfMNm2Q7vS8Z6ZdEP3S6kCtEdwvnxXG44MGXNKpic0 UbB//QDBClQVYvL7wxJctEt9X8wh119xAH449v0RCHTN9PEv6Td06UWMbDq5Nzrs g3PpmHMCYaxI5PoybFxQRqgCYgvmvpJanqlDhP4TqKbvW/uqEsCoJsN2XwzQdkub gHQhJx5KzAwgtmQG05pCrwWA6PG1VrDf8rqeyMftsdQzL+WznA28CUEKnMZ+A2TE KjL9+Aie6levZSx2NfsX92Jo32QVEySVtJRJiMil8xmrn2dpI1RJQcGz2Q743hf8 1WYZEosvuLWibwTcR/buVz9Z/T3P14A= -----END CERTIFICATE-----Generated at Thu Oct 30 03:36:45 2025 by rpki-client