$ rpki-client -vvf rpki.apnic.net/member_repository/A9170304/9EF411301D8E11E2B18226ED08B02CD2/rScP3pmx8Qadq473pXaqLCryxvA.mft File: rScP3pmx8Qadq473pXaqLCryxvA.mft (raw, json) Hash identifier: oO4iy8QL6BMEOA9azucdeq2XoFNF6ee0HTgmUTReXuU= Subject key identifier: 72:F5:51:3F:73:C2:5C:12:9E:70:31:DF:C9:42:39:6D:4B:1F:A8:E6 Authority key identifier: AD:27:0F:DE:99:B1:F1:06:9D:AB:8E:F7:A5:76:AA:2C:2A:F2:C6:F0 Certificate issuer: /CN=A9170304/serialNumber=AD270FDE99B1F1069DAB8EF7A576AA2C2AF2C6F0 Certificate serial: 350C Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/rScP3pmx8Qadq473pXaqLCryxvA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9170304/9EF411301D8E11E2B18226ED08B02CD2/rScP3pmx8Qadq473pXaqLCryxvA.mft Manifest number: 34F2 Signing time: Tue 04 Nov 2025 14:43:10 +0000 Manifest this update: Tue 04 Nov 2025 14:43:10 +0000 Manifest next update: Tue 11 Nov 2025 14:43:10 +0000 Files and hashes: 1: rScP3pmx8Qadq473pXaqLCryxvA.crl (hash: Udj904KoeV2NXnE5toJbw+1XrUK9okxL6LhtmQam13I=) 2: 5E26899A1B2211F093230420C4F9AE02.roa (hash: zE8hcTYNfmMkBUxWlaCkDNF/PasBwsyXryHfs3QbRWs=) 3: C64A9D821B2111F0B277571CC4F9AE02.roa (hash: 6EQRx6aa031JyIEDFgnynaOZ+5bnvuDSyDIypITveC4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9170304/9EF411301D8E11E2B18226ED08B02CD2/rScP3pmx8Qadq473pXaqLCryxvA.crl rsync://rpki.apnic.net/member_repository/A9170304/9EF411301D8E11E2B18226ED08B02CD2/rScP3pmx8Qadq473pXaqLCryxvA.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/rScP3pmx8Qadq473pXaqLCryxvA.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 14:43:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13580 (0x350c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9170304, serialNumber=AD270FDE99B1F1069DAB8EF7A576AA2C2AF2C6F0 Validity Not Before: Nov 4 14:43:10 2025 GMT Not After : Nov 11 14:43:10 2025 GMT Subject: CN=690a10fe-70a8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:3e:47:24:d3:b1:44:d4:3b:e1:83:9b:0c:18: c0:de:44:5c:92:f3:04:78:b4:17:94:ce:4a:8f:f4: b7:6a:55:cf:38:78:bc:df:da:9a:78:b8:5c:7b:ac: 83:49:17:43:d4:59:0c:f3:a1:74:b8:eb:86:c9:a8: 58:88:78:ef:80:c3:0d:21:ce:ba:71:57:8b:17:59: 51:62:d0:51:32:96:71:c4:90:df:f3:a8:14:fb:70: 49:96:8f:e9:12:32:4b:21:c0:f3:75:c8:8e:9b:c4: ea:57:77:90:13:58:d2:c9:3f:56:70:5e:8a:ff:7d: 25:76:fb:7d:7f:f8:0f:1c:b8:7e:84:c5:53:d5:cd: 7d:0b:25:30:67:47:65:3e:83:d9:95:b2:b8:66:34: 09:af:57:87:de:a4:73:ec:35:76:3c:fd:bd:4d:71: d4:4c:85:8c:b0:78:c4:11:bd:e9:fe:23:4f:57:fc: 9c:54:fb:9d:b2:a1:c1:51:09:bf:e1:b5:e5:f6:a0: 65:87:36:f1:8a:a1:89:f8:d9:da:ba:1f:cc:05:d8: 9d:e0:43:3d:c7:f6:53:82:8f:fc:3b:5b:2f:a0:59: 9a:54:ae:cc:eb:9c:c8:8b:06:85:e6:2f:aa:9a:46: 95:2e:b4:50:64:c9:96:0b:9a:79:85:c9:bb:67:84: c4:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:F5:51:3F:73:C2:5C:12:9E:70:31:DF:C9:42:39:6D:4B:1F:A8:E6 X509v3 Authority Key Identifier: keyid:AD:27:0F:DE:99:B1:F1:06:9D:AB:8E:F7:A5:76:AA:2C:2A:F2:C6:F0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9170304/9EF411301D8E11E2B18226ED08B02CD2/rScP3pmx8Qadq473pXaqLCryxvA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/rScP3pmx8Qadq473pXaqLCryxvA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9170304/9EF411301D8E11E2B18226ED08B02CD2/rScP3pmx8Qadq473pXaqLCryxvA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2a:01:9b:aa:2e:44:46:8a:1d:e3:25:7b:5e:bc:cf:6c:55:0e: cf:ce:1c:7c:43:43:bf:65:be:e5:fe:25:59:60:bd:40:d5:ef: ec:ef:81:c7:60:86:5d:6b:ad:27:70:6b:69:d4:61:b9:f9:b5: 2d:cf:5d:94:8f:26:1d:93:49:67:42:65:46:bc:32:fe:08:20: c9:9b:a9:15:ee:f7:30:47:84:3d:da:40:cc:94:fe:dd:9f:4d: fb:93:6d:6d:ec:3a:a1:03:2f:bb:3e:20:f0:a1:68:57:f3:e7: c1:33:c2:fa:fe:4a:3e:cb:3c:d9:1a:45:8c:9f:a3:24:2c:ef: a2:06:9e:c8:8c:92:54:1d:c8:8e:10:ed:ce:af:8c:a2:b2:61: b7:da:90:08:6d:f7:07:8a:a3:c5:3b:a8:1b:7c:03:db:fb:ed: a9:86:92:ac:67:9d:51:9c:03:63:b6:ab:54:d5:3f:ae:aa:52: f0:30:f7:56:31:4d:34:07:77:7a:9d:b4:f4:04:3c:9c:33:76: 24:6c:8d:7a:ea:b8:40:51:e6:75:53:3a:9d:a0:33:63:2f:2d: 29:b2:74:50:e0:95:63:62:5b:1f:52:e5:3d:c0:be:78:69:3a: 85:12:ec:06:bc:86:43:d5:9b:43:82:ab:79:b4:8b:25:50:f1: e9:4d:dd:b0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNQwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzAzMDQxMTAvBgNVBAUTKEFEMjcwRkRFOTlCMUYxMDY5REFCOEVGN0E1NzZBQTJD MkFGMkM2RjAwHhcNMjUxMTA0MTQ0MzEwWhcNMjUxMTExMTQ0MzEwWjAYMRYwFAYD VQQDEw02OTBhMTBmZS03MGE4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxz5HJNOxRNQ74YObDBjA3kRckvMEeLQXlM5Kj/S3alXPOHi839qaeLhce6yD SRdD1FkM86F0uOuGyahYiHjvgMMNIc66cVeLF1lRYtBRMpZxxJDf86gU+3BJlo/p EjJLIcDzdciOm8TqV3eQE1jSyT9WcF6K/30ldvt9f/gPHLh+hMVT1c19CyUwZ0dl PoPZlbK4ZjQJr1eH3qRz7DV2PP29TXHUTIWMsHjEEb3p/iNPV/ycVPudsqHBUQm/ 4bXl9qBlhzbxiqGJ+Nnauh/MBdid4EM9x/ZTgo/8O1svoFmaVK7M65zIiwaF5i+q mkaVLrRQZMmWC5p5hcm7Z4TE0QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHL1UT9z wlwSnnAx38lCOW1LH6jmMB8GA1UdIwQYMBaAFK0nD96ZsfEGnauO96V2qiwq8sbw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MDMwNC85RUY0MTEzMDFE OEUxMUUyQjE4MjI2RUQwOEIwMkNEMi9yU2NQM3BteDhRYWRxNDczcFhhcUxDcnl4 dkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3JTY1AzcG14OFFhZHE0NzNwWGFxTENyeXh2QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MDMwNC85RUY0MTEzMDFEOEUxMUUyQjE4MjI2RUQwOEIwMkNEMi9yU2NQM3BteDhR YWRxNDczcFhhcUxDcnl4dkEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAqAZuqLkRGih3jJXtevM9sVQ7Pzhx8Q0O/Zb7l/iVZYL1A1e/s74HH YIZda60ncGtp1GG5+bUtz12UjyYdk0lnQmVGvDL+CCDJm6kV7vcwR4Q92kDMlP7d n037k21t7DqhAy+7PiDwoWhX8+fBM8L6/ko+yzzZGkWMn6MkLO+iBp7IjJJUHciO EO3Or4yismG32pAIbfcHiqPFO6gbfAPb++2phpKsZ51RnANjtqtU1T+uqlLwMPdW MU00B3d6nbT0BDycM3YkbI166rhAUeZ1UzqdoDNjLy0psnRQ4JVjYlsfUuU9wL54 aTqFEuwGvIZD1ZtDgqt5tIslUPHpTd2w -----END CERTIFICATE-----Generated at Wed Nov 5 12:25:03 2025 by rpki-client