$ rpki-client -vvf rpki.apnic.net/member_repository/A914410E/2F03298A108611F08AEA480CC4F9AE02/SJpvztfcY7erNmbjW9UJ2eoVdeA.mft File: SJpvztfcY7erNmbjW9UJ2eoVdeA.mft (raw, json) Hash identifier: t4K73OBPYtK+4P7EXeMvIOvorDc1e5vRhjJU3MoTHXA= Subject key identifier: 3B:5C:29:C8:98:67:58:CA:0C:D9:D2:2F:44:10:2F:9F:2D:74:24:79 Authority key identifier: 48:9A:6F:CE:D7:DC:63:B7:AB:36:66:E3:5B:D5:09:D9:EA:15:75:E0 Certificate issuer: /CN=A914410E/serialNumber=489A6FCED7DC63B7AB3666E35BD509D9EA1575E0 Certificate serial: 73 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SJpvztfcY7erNmbjW9UJ2eoVdeA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914410E/2F03298A108611F08AEA480CC4F9AE02/SJpvztfcY7erNmbjW9UJ2eoVdeA.mft Manifest number: 70 Signing time: Mon 03 Nov 2025 06:56:07 +0000 Manifest this update: Mon 03 Nov 2025 06:56:07 +0000 Manifest next update: Mon 10 Nov 2025 06:56:07 +0000 Files and hashes: 1: SJpvztfcY7erNmbjW9UJ2eoVdeA.crl (hash: 1ixCusaSSxp4aejA9nXnppk+GzMRbhO5EcnNRjZqymM=) 2: 3057138E143F11F08A345E0AC4F9AE02.roa (hash: litZH04YNtCR4iuEOlm91tI8Ccgt0oYZlfR5gRznpNA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914410E/2F03298A108611F08AEA480CC4F9AE02/SJpvztfcY7erNmbjW9UJ2eoVdeA.crl rsync://rpki.apnic.net/member_repository/A914410E/2F03298A108611F08AEA480CC4F9AE02/SJpvztfcY7erNmbjW9UJ2eoVdeA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SJpvztfcY7erNmbjW9UJ2eoVdeA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 06:56:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 115 (0x73) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914410E, serialNumber=489A6FCED7DC63B7AB3666E35BD509D9EA1575E0 Validity Not Before: Nov 3 06:56:07 2025 GMT Not After : Nov 10 06:56:07 2025 GMT Subject: CN=69085207-a258 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:b9:18:6c:11:03:34:33:92:d0:e9:d1:ee:9b: 78:89:3c:18:00:e0:0b:9a:6f:92:f1:92:7a:c5:7f: f5:7c:3e:d1:80:c7:8e:50:b7:fd:29:4d:11:0f:02: cd:ec:49:9c:dd:8f:fe:4b:b6:aa:64:0c:4b:55:71: 05:9f:c0:c0:19:a3:23:e1:f9:12:76:38:ee:d6:5f: 86:cb:f4:00:e8:da:67:4b:fd:e4:be:ba:6b:bd:20: 99:16:62:06:27:36:b8:1b:0f:fd:28:96:72:c3:b0: cc:22:80:40:e9:cf:c7:23:8e:55:7a:da:36:bb:9d: 7a:ec:03:6d:f4:16:2d:f4:43:57:be:37:b4:d3:a4: c3:69:9a:53:f3:3c:2d:b1:52:e3:7e:61:64:b6:83: 77:b4:71:8c:65:e1:d1:aa:27:bc:57:54:90:2f:a8: 29:96:e9:1e:4e:9f:db:14:66:79:1d:d4:85:12:c6: 44:88:ab:c3:7d:f5:da:55:66:c0:5d:dd:15:b7:e6: a9:4f:7a:64:5a:81:ff:17:99:0f:43:fa:8b:1f:d0: bb:85:9d:f6:93:3e:84:b5:31:4b:56:f5:59:db:0a: 23:25:b7:de:f0:f6:41:67:1f:a3:0d:ce:d9:3a:f3: 02:31:5d:5d:c7:77:e3:27:e8:07:ea:48:30:f7:92: 48:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:5C:29:C8:98:67:58:CA:0C:D9:D2:2F:44:10:2F:9F:2D:74:24:79 X509v3 Authority Key Identifier: keyid:48:9A:6F:CE:D7:DC:63:B7:AB:36:66:E3:5B:D5:09:D9:EA:15:75:E0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914410E/2F03298A108611F08AEA480CC4F9AE02/SJpvztfcY7erNmbjW9UJ2eoVdeA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SJpvztfcY7erNmbjW9UJ2eoVdeA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914410E/2F03298A108611F08AEA480CC4F9AE02/SJpvztfcY7erNmbjW9UJ2eoVdeA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 50:d0:6d:5c:15:5b:83:34:ae:86:5e:3c:a0:b1:3d:26:1a:02: e7:c4:0b:b2:74:5c:d9:d2:76:00:03:86:e4:4d:ca:f0:56:31: 14:67:40:f9:ac:c5:39:0a:47:0f:15:fa:27:c6:97:10:18:31: 1c:f4:d5:03:e3:71:87:5d:fd:e4:9b:5b:57:5c:e8:56:1d:8e: 80:62:96:39:92:19:bd:f4:3c:02:69:f5:04:8e:3e:82:21:4e: c2:2b:61:19:ce:7e:e2:4a:4f:de:c6:f7:e9:96:71:95:40:a1: ab:b2:5a:90:83:07:b2:cf:6e:ae:1f:d2:47:48:7a:b5:0b:8f: c6:41:d5:63:e9:04:65:47:a2:b3:53:34:a5:a7:9b:23:98:be: d2:66:0f:33:28:d6:24:24:e5:eb:e6:5a:a1:ec:e8:88:9d:fc: d6:e3:a0:4f:aa:9e:09:5f:d1:1f:3b:6c:66:b5:32:11:d5:23: ef:98:d7:0a:fa:e1:3b:1e:07:cf:2e:b7:0e:58:88:fd:cc:81: 5a:d5:c8:d4:2a:d1:f3:78:1c:f6:f1:67:42:72:00:a3:2e:f3: 5f:b5:75:ec:5f:0c:f2:9f:9c:2a:95:95:60:55:bf:a4:12:13: 82:44:df:e1:8f:0b:9e:d8:29:65:76:d2:92:33:b3:3b:1c:2c: 00:a4:d4:95 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBczANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0 NDEwRTExMC8GA1UEBRMoNDg5QTZGQ0VEN0RDNjNCN0FCMzY2NkUzNUJENTA5RDlF QTE1NzVFMDAeFw0yNTExMDMwNjU2MDdaFw0yNTExMTAwNjU2MDdaMBgxFjAUBgNV BAMTDTY5MDg1MjA3LWEyNTgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDXuRhsEQM0M5LQ6dHum3iJPBgA4Auab5LxknrFf/V8PtGAx45Qt/0pTREPAs3s SZzdj/5LtqpkDEtVcQWfwMAZoyPh+RJ2OO7WX4bL9ADo2mdL/eS+umu9IJkWYgYn NrgbD/0olnLDsMwigEDpz8cjjlV62ja7nXrsA230Fi30Q1e+N7TTpMNpmlPzPC2x UuN+YWS2g3e0cYxl4dGqJ7xXVJAvqCmW6R5On9sUZnkd1IUSxkSIq8N99dpVZsBd 3RW35qlPemRagf8XmQ9D+osf0LuFnfaTPoS1MUtW9VnbCiMlt97w9kFnH6MNztk6 8wIxXV3Hd+Mn6AfqSDD3kkhvAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUO1wpyJhn WMoM2dIvRBAvny10JHkwHwYDVR0jBBgwFoAUSJpvztfcY7erNmbjW9UJ2eoVdeAw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQ0MTBFLzJGMDMyOThBMTA4 NjExRjA4QUVBNDgwQ0M0RjlBRTAyL1NKcHZ6dGZjWTdlck5tYmpXOVVKMmVvVmRl QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvU0pwdnp0ZmNZN2VyTm1ialc5VUoyZW9WZGVBLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQ0 MTBFLzJGMDMyOThBMTA4NjExRjA4QUVBNDgwQ0M0RjlBRTAyL1NKcHZ6dGZjWTdl ck5tYmpXOVVKMmVvVmRlQS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAFDQbVwVW4M0roZePKCxPSYaAufEC7J0XNnSdgADhuRNyvBWMRRnQPms xTkKRw8V+ifGlxAYMRz01QPjcYdd/eSbW1dc6FYdjoBiljmSGb30PAJp9QSOPoIh TsIrYRnOfuJKT97G9+mWcZVAoauyWpCDB7LPbq4f0kdIerULj8ZB1WPpBGVHorNT NKWnmyOYvtJmDzMo1iQk5evmWqHs6Iid/NbjoE+qnglf0R87bGa1MhHVI++Y1wr6 4TseB88utw5YiP3MgVrVyNQq0fN4HPbxZ0JyAKMu81+1dexfDPKfnCqVlWBVv6QS E4JE3+GPC57YKWV20pIzszscLACk1JU= -----END CERTIFICATE-----Generated at Mon Nov 3 18:14:41 2025 by rpki-client