$ rpki-client -vvf rpki.apnic.net/member_repository/A916FD2B/3F86D79AA83511EDA776AB30C4F9AE02/1h3BeAj1jg-ZsoUs50hg-FPLINs.mft File: 1h3BeAj1jg-ZsoUs50hg-FPLINs.mft (raw, json) Hash identifier: eyGukzPJjlWWa6d2hu2Cztx2bNhgJTOfyh7OebcVtts= Subject key identifier: 8C:AA:0E:7F:87:38:BB:B7:FB:51:C1:92:1F:AB:8E:34:70:9D:06:18 Authority key identifier: D6:1D:C1:78:08:F5:8E:0F:99:B2:85:2C:E7:48:60:F8:53:CB:20:DB Certificate issuer: /CN=A916FD2B/serialNumber=D61DC17808F58E0F99B2852CE74860F853CB20DB Certificate serial: 0207 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1h3BeAj1jg-ZsoUs50hg-FPLINs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916FD2B/3F86D79AA83511EDA776AB30C4F9AE02/1h3BeAj1jg-ZsoUs50hg-FPLINs.mft Manifest number: 0202 Signing time: Mon 03 Nov 2025 02:21:19 +0000 Manifest this update: Mon 03 Nov 2025 02:21:18 +0000 Manifest next update: Mon 10 Nov 2025 02:21:18 +0000 Files and hashes: 1: 1h3BeAj1jg-ZsoUs50hg-FPLINs.crl (hash: aRtUffWaCrD1tabOoH0aYNSXCLdFzx3AAeuYy13hDnw=) 2: FB4FC092A83811ED94EE0437C4F9AE02.roa (hash: PwUsQccop9Cf8FtxwxhpO1uR6/Yqyp0+oubBrUUdudU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916FD2B/3F86D79AA83511EDA776AB30C4F9AE02/1h3BeAj1jg-ZsoUs50hg-FPLINs.crl rsync://rpki.apnic.net/member_repository/A916FD2B/3F86D79AA83511EDA776AB30C4F9AE02/1h3BeAj1jg-ZsoUs50hg-FPLINs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1h3BeAj1jg-ZsoUs50hg-FPLINs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 02:21:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 519 (0x207) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916FD2B, serialNumber=D61DC17808F58E0F99B2852CE74860F853CB20DB Validity Not Before: Nov 3 02:21:18 2025 GMT Not After : Nov 10 02:21:18 2025 GMT Subject: CN=6908119f-13cd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:b6:86:7f:20:38:7e:ee:36:5e:0e:24:17:aa: ba:76:99:b2:f5:ff:d7:7d:00:56:ed:37:c3:74:c2: b4:3a:04:9d:fd:5c:83:61:cb:70:5a:2f:66:ad:5c: 0f:b0:72:95:0d:ae:85:77:51:eb:cf:74:82:6d:f4: a4:7d:b5:b7:77:9b:16:53:19:08:f1:22:8f:34:ca: e0:e3:5b:a4:e1:78:27:63:01:3f:ee:ae:0c:8a:41: 63:4a:36:bd:90:59:ea:d9:75:8e:a4:d3:e2:14:06: 48:35:97:b1:86:b5:91:22:25:94:c4:1f:30:3c:e6: 3f:e1:cc:68:ad:39:3f:a6:c7:5e:57:1a:0c:21:40: d2:e9:d7:86:39:16:c3:b8:18:da:53:6d:f1:18:5e: db:d6:e6:9b:d2:b0:9b:ee:1d:64:a1:93:b9:e2:ab: 4a:e9:90:16:00:9d:4b:74:ac:b2:a8:a0:c3:e7:62: ee:93:bc:8f:e6:bb:91:60:eb:34:7a:4e:cd:26:e6: 4a:ce:2f:2a:da:25:1b:b8:2d:92:b6:47:44:02:d5: 6f:cd:5b:2b:9e:18:7b:64:12:2b:4c:13:08:50:c7: 62:fc:74:f5:bd:7c:4a:b7:cf:ba:dc:1b:cf:b5:50: b7:c1:2b:90:c9:2f:39:16:04:47:2c:9d:2e:76:88: 12:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:AA:0E:7F:87:38:BB:B7:FB:51:C1:92:1F:AB:8E:34:70:9D:06:18 X509v3 Authority Key Identifier: keyid:D6:1D:C1:78:08:F5:8E:0F:99:B2:85:2C:E7:48:60:F8:53:CB:20:DB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916FD2B/3F86D79AA83511EDA776AB30C4F9AE02/1h3BeAj1jg-ZsoUs50hg-FPLINs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1h3BeAj1jg-ZsoUs50hg-FPLINs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916FD2B/3F86D79AA83511EDA776AB30C4F9AE02/1h3BeAj1jg-ZsoUs50hg-FPLINs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 85:c7:b7:6a:83:8d:70:66:a3:61:48:68:bf:2f:d1:bc:f0:10: 1f:84:ba:6e:54:7e:c8:42:67:27:e7:40:bc:d1:bf:b3:02:d6: ae:c2:60:e5:13:bf:0d:0d:be:96:50:ba:b2:54:de:2a:3a:22: d1:37:68:30:02:bf:65:f7:b1:4d:30:be:7b:c5:88:f1:bf:64: 34:cb:15:4a:62:2f:cc:42:ae:23:07:f0:d2:16:91:cc:d8:b3: 78:e0:fa:64:c7:c4:ac:be:6b:2f:f5:e2:72:24:03:52:60:39: 35:8e:de:57:a3:6f:2e:80:3f:88:5d:9f:ea:68:46:20:cc:04: 80:b9:2b:96:4a:b6:70:7c:b7:56:56:74:5a:6c:dd:01:d8:80: e9:42:0a:4d:27:86:42:ba:f8:d4:75:df:05:4e:45:18:73:3b: 4f:12:54:0c:82:27:9f:0c:4c:f7:4d:83:e9:8e:41:fa:ef:58: 46:eb:e9:21:3c:ae:f0:b8:86:c7:bb:73:b2:0d:a1:7f:51:2e: 79:c4:86:09:15:3c:5a:48:ca:58:f4:5c:14:7a:78:58:43:3c: 99:07:63:96:b6:96:cf:c5:d6:24:88:9a:62:51:c8:f5:7f:02: 56:e5:d0:aa:9d:33:23:38:bc:cd:50:40:93:62:ff:c9:78:a7: 53:89:39:2a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAgcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkZEMkIxMTAvBgNVBAUTKEQ2MURDMTc4MDhGNThFMEY5OUIyODUyQ0U3NDg2MEY4 NTNDQjIwREIwHhcNMjUxMTAzMDIyMTE4WhcNMjUxMTEwMDIyMTE4WjAYMRYwFAYD VQQDEw02OTA4MTE5Zi0xM2NkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0raGfyA4fu42Xg4kF6q6dpmy9f/XfQBW7TfDdMK0OgSd/VyDYctwWi9mrVwP sHKVDa6Fd1Hrz3SCbfSkfbW3d5sWUxkI8SKPNMrg41uk4XgnYwE/7q4MikFjSja9 kFnq2XWOpNPiFAZINZexhrWRIiWUxB8wPOY/4cxorTk/psdeVxoMIUDS6deGORbD uBjaU23xGF7b1uab0rCb7h1koZO54qtK6ZAWAJ1LdKyyqKDD52Luk7yP5ruRYOs0 ek7NJuZKzi8q2iUbuC2StkdEAtVvzVsrnhh7ZBIrTBMIUMdi/HT1vXxKt8+63BvP tVC3wSuQyS85FgRHLJ0udogSuQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIyqDn+H OLu3+1HBkh+rjjRwnQYYMB8GA1UdIwQYMBaAFNYdwXgI9Y4PmbKFLOdIYPhTyyDb MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2RkQyQi8zRjg2RDc5QUE4 MzUxMUVEQTc3NkFCMzBDNEY5QUUwMi8xaDNCZUFqMWpnLVpzb1VzNTBoZy1GUExJ TnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzFoM0JlQWoxamctWnNvVXM1MGhnLUZQTElOcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 RkQyQi8zRjg2RDc5QUE4MzUxMUVEQTc3NkFCMzBDNEY5QUUwMi8xaDNCZUFqMWpn LVpzb1VzNTBoZy1GUExJTnMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCFx7dqg41wZqNhSGi/L9G88BAfhLpuVH7IQmcn50C80b+zAtauwmDl E78NDb6WULqyVN4qOiLRN2gwAr9l97FNML57xYjxv2Q0yxVKYi/MQq4jB/DSFpHM 2LN44Ppkx8Ssvmsv9eJyJANSYDk1jt5Xo28ugD+IXZ/qaEYgzASAuSuWSrZwfLdW VnRabN0B2IDpQgpNJ4ZCuvjUdd8FTkUYcztPElQMgiefDEz3TYPpjkH671hG6+kh PK7wuIbHu3OyDaF/US55xIYJFTxaSMpY9FwUenhYQzyZB2OWtpbPxdYkiJpiUcj1 fwJW5dCqnTMjOLzNUECTYv/JeKdTiTkq -----END CERTIFICATE-----Generated at Mon Nov 3 18:10:17 2025 by rpki-client