$ rpki-client -vvf rpki.apnic.net/member_repository/A9166279/38B2C7BC58CD11F0AD100877C4F9AE02/R0v3Ne0o81GLzgrEYpWL7Fgs12U.mft File: R0v3Ne0o81GLzgrEYpWL7Fgs12U.mft (raw, json) Hash identifier: eRn09TFtq+TTQto3Fefo0A+4B1VpNXzDEjlsCZhCZM8= Subject key identifier: D7:45:5A:2F:35:36:9E:E6:91:BE:40:B0:B7:93:24:D9:E9:3A:00:91 Authority key identifier: 47:4B:F7:35:ED:28:F3:51:8B:CE:0A:C4:62:95:8B:EC:58:2C:D7:65 Certificate issuer: /CN=A9166279/serialNumber=474BF735ED28F3518BCE0AC462958BEC582CD765 Certificate serial: 46 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/R0v3Ne0o81GLzgrEYpWL7Fgs12U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9166279/38B2C7BC58CD11F0AD100877C4F9AE02/R0v3Ne0o81GLzgrEYpWL7Fgs12U.mft Manifest number: 43 Signing time: Mon 03 Nov 2025 07:26:07 +0000 Manifest this update: Mon 03 Nov 2025 07:26:07 +0000 Manifest next update: Mon 10 Nov 2025 07:26:07 +0000 Files and hashes: 1: R0v3Ne0o81GLzgrEYpWL7Fgs12U.crl (hash: K9inuuzInNrqTnJm2peQ73gKf2892Po65r8HKCeO+HA=) 2: C92D041297BE11F08D37F648C4F9AE02.roa (hash: XYmaKBczfnLlgbTmn4CJYfFYfwuWsZbvVOfQneBA5FM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9166279/38B2C7BC58CD11F0AD100877C4F9AE02/R0v3Ne0o81GLzgrEYpWL7Fgs12U.crl rsync://rpki.apnic.net/member_repository/A9166279/38B2C7BC58CD11F0AD100877C4F9AE02/R0v3Ne0o81GLzgrEYpWL7Fgs12U.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/R0v3Ne0o81GLzgrEYpWL7Fgs12U.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 07:26:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70 (0x46) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9166279, serialNumber=474BF735ED28F3518BCE0AC462958BEC582CD765 Validity Not Before: Nov 3 07:26:07 2025 GMT Not After : Nov 10 07:26:07 2025 GMT Subject: CN=6908590f-6a74 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:b4:2f:2a:6c:3d:0e:6a:2e:94:c8:c4:df:17: 05:bc:f8:1c:e6:a4:b5:53:f5:58:e3:c3:cf:01:4a: 4e:2b:ce:74:7c:b9:fe:c2:e5:53:a7:9f:5e:b2:eb: d6:3b:58:f1:85:91:02:08:fa:e3:b2:6d:50:fa:99: a9:1d:43:b0:1e:b3:97:63:7f:26:0d:35:ff:20:55: 2b:b9:95:e6:68:eb:80:2b:c4:22:ee:5a:f2:c3:3f: f5:b0:99:9e:be:01:f4:07:95:d1:e1:18:13:e2:d6: 07:0f:3c:9d:50:f5:1d:7f:25:21:6c:0c:67:46:56: fd:c5:1d:0e:07:95:76:e8:e2:ea:ff:7c:67:eb:e4: ca:4a:51:a5:3c:87:e6:08:f8:9e:1b:ad:be:c3:08: c2:0f:ef:c0:86:cd:f0:a9:7c:87:0f:62:40:2d:b9: fa:7e:48:90:25:ee:47:f5:29:6e:fe:96:b9:8e:6b: c4:b5:6e:c6:c7:1c:c3:32:1c:90:f8:16:97:ec:e3: 53:c9:4c:ab:0b:5f:e6:1b:bf:61:cd:db:3d:8c:38: 7c:24:6f:f9:d1:b4:25:16:1d:2c:61:60:5f:6f:f1: 1f:81:c0:d2:b8:48:d3:e4:83:12:55:a7:f5:68:b0: da:bc:43:f1:7f:fb:08:1b:2b:87:ab:8e:ac:f6:dd: 97:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:45:5A:2F:35:36:9E:E6:91:BE:40:B0:B7:93:24:D9:E9:3A:00:91 X509v3 Authority Key Identifier: keyid:47:4B:F7:35:ED:28:F3:51:8B:CE:0A:C4:62:95:8B:EC:58:2C:D7:65 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9166279/38B2C7BC58CD11F0AD100877C4F9AE02/R0v3Ne0o81GLzgrEYpWL7Fgs12U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/R0v3Ne0o81GLzgrEYpWL7Fgs12U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9166279/38B2C7BC58CD11F0AD100877C4F9AE02/R0v3Ne0o81GLzgrEYpWL7Fgs12U.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption af:52:07:8e:16:d2:08:20:f0:d9:5f:e6:9a:24:94:68:4d:55: 8e:b9:95:88:e5:0c:e2:80:92:28:19:80:98:22:d3:b1:f0:9e: 1a:51:ef:51:a2:d4:dc:3f:89:cf:47:39:6e:33:c6:10:d9:58: a9:3f:2f:41:69:f0:74:4f:7c:6c:fb:f4:d4:f5:da:67:6e:2a: 65:e4:9a:7c:36:cb:e2:9f:3b:66:ee:b8:53:68:eb:68:6b:b0: 69:7b:ac:f3:82:fd:cb:82:22:db:c2:4b:78:e8:8f:63:f3:6b: ff:cc:b1:0a:f0:9e:d0:e8:42:04:16:ed:0b:6a:57:5c:ca:37: e0:e7:50:61:f8:5c:61:7c:0a:3c:fa:df:43:46:ba:b5:b6:af: e0:f1:00:f0:a1:ec:b5:c9:d6:f8:15:3e:97:d2:f5:8c:e7:ac: 70:10:3f:be:64:a8:de:13:a2:b2:22:b3:d1:39:c8:3a:31:99: 2c:cc:25:16:28:e1:9a:1b:9b:d6:3c:b2:1a:f3:a4:08:35:12: 38:e8:f8:0a:64:5f:eb:0f:b4:b9:96:c6:1f:af:b4:9d:69:09: a0:d9:c3:ce:73:18:96:41:a5:ef:37:45:cf:02:58:b6:30:fc: 72:cc:27:08:6f:90:7a:1e:9b:34:d8:98:d0:ee:4c:af:67:1e: 55:c8:34:32 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBRjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE2 NjI3OTExMC8GA1UEBRMoNDc0QkY3MzVFRDI4RjM1MThCQ0UwQUM0NjI5NThCRUM1 ODJDRDc2NTAeFw0yNTExMDMwNzI2MDdaFw0yNTExMTAwNzI2MDdaMBgxFjAUBgNV BAMTDTY5MDg1OTBmLTZhNzQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC/tC8qbD0Oai6UyMTfFwW8+BzmpLVT9Vjjw88BSk4rznR8uf7C5VOnn16y69Y7 WPGFkQII+uOybVD6makdQ7Aes5djfyYNNf8gVSu5leZo64ArxCLuWvLDP/WwmZ6+ AfQHldHhGBPi1gcPPJ1Q9R1/JSFsDGdGVv3FHQ4HlXbo4ur/fGfr5MpKUaU8h+YI +J4brb7DCMIP78CGzfCpfIcPYkAtufp+SJAl7kf1KW7+lrmOa8S1bsbHHMMyHJD4 Fpfs41PJTKsLX+Ybv2HN2z2MOHwkb/nRtCUWHSxhYF9v8R+BwNK4SNPkgxJVp/Vo sNq8Q/F/+wgbK4erjqz23ZfLAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU10VaLzU2 nuaRvkCwt5Mk2ek6AJEwHwYDVR0jBBgwFoAUR0v3Ne0o81GLzgrEYpWL7Fgs12Uw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTY2Mjc5LzM4QjJDN0JDNThD RDExRjBBRDEwMDg3N0M0RjlBRTAyL1IwdjNOZTBvODFHTHpnckVZcFdMN0ZnczEy VS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvUjB2M05lMG84MUdMemdyRVlwV0w3RmdzMTJVLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTY2 Mjc5LzM4QjJDN0JDNThDRDExRjBBRDEwMDg3N0M0RjlBRTAyL1IwdjNOZTBvODFH THpnckVZcFdMN0ZnczEyVS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAK9SB44W0ggg8Nlf5poklGhNVY65lYjlDOKAkigZgJgi07HwnhpR71Gi 1Nw/ic9HOW4zxhDZWKk/L0Fp8HRPfGz79NT12mduKmXkmnw2y+KfO2buuFNo62hr sGl7rPOC/cuCItvCS3joj2Pza//MsQrwntDoQgQW7QtqV1zKN+DnUGH4XGF8Cjz6 30NGurW2r+DxAPCh7LXJ1vgVPpfS9YznrHAQP75kqN4TorIis9E5yDoxmSzMJRYo 4Zobm9Y8shrzpAg1Ejjo+ApkX+sPtLmWxh+vtJ1pCaDZw85zGJZBpe83Rc8CWLYw /HLMJwhvkHoemzTYmNDuTK9nHlXINDI= -----END CERTIFICATE-----Generated at Tue Nov 4 16:04:17 2025 by rpki-client