$ rpki-client -vvf rpki.apnic.net/member_repository/A9170D3E/BDEE9E249FD711EF9E38A837C4F9AE02/B_MbR0cTs6FSxqX49I3tIJfcJB8.mft File: B_MbR0cTs6FSxqX49I3tIJfcJB8.mft (raw, json) Hash identifier: LLPF+zFOC5yJhvWUbgjpz5CRi9p7iQYPj2yF/U5jVk0= Subject key identifier: 3F:76:D8:FF:B3:40:9D:23:59:ED:6F:46:16:BF:BE:6D:F8:DE:0C:F1 Authority key identifier: 07:F3:1B:47:47:13:B3:A1:52:C6:A5:F8:F4:8D:ED:20:97:DC:24:1F Certificate issuer: /CN=A9170D3E/serialNumber=07F31B474713B3A152C6A5F8F48DED2097DC241F Certificate serial: B8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B_MbR0cTs6FSxqX49I3tIJfcJB8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9170D3E/BDEE9E249FD711EF9E38A837C4F9AE02/B_MbR0cTs6FSxqX49I3tIJfcJB8.mft Manifest number: B7 Signing time: Wed 05 Nov 2025 06:12:03 +0000 Manifest this update: Wed 05 Nov 2025 06:12:03 +0000 Manifest next update: Wed 12 Nov 2025 06:12:03 +0000 Files and hashes: 1: B_MbR0cTs6FSxqX49I3tIJfcJB8.crl (hash: OU2AffWPQa6N8D1I02ax0ZHeJRETwsV/SAomb9GC3a0=) 2: 232F490A9FD811EFA92BE338C4F9AE02.roa (hash: oshENdblJra/vyPm3h+L7O2yi470pUSFRiQdE49uRfI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9170D3E/BDEE9E249FD711EF9E38A837C4F9AE02/B_MbR0cTs6FSxqX49I3tIJfcJB8.crl rsync://rpki.apnic.net/member_repository/A9170D3E/BDEE9E249FD711EF9E38A837C4F9AE02/B_MbR0cTs6FSxqX49I3tIJfcJB8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B_MbR0cTs6FSxqX49I3tIJfcJB8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 06:12:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 184 (0xb8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9170D3E, serialNumber=07F31B474713B3A152C6A5F8F48DED2097DC241F Validity Not Before: Nov 5 06:12:03 2025 GMT Not After : Nov 12 06:12:03 2025 GMT Subject: CN=690aeab3-1b26 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:37:8e:7d:7d:9d:db:18:c5:e8:91:2d:85:f6: da:2d:a2:7a:c0:02:4e:e7:b4:21:60:d2:e0:a4:eb: 1c:22:a4:07:b3:e7:e8:09:4c:77:6a:bd:78:91:5c: 1c:f2:15:ec:3b:33:23:f4:b6:b9:60:e9:a0:d8:d1: dd:30:8b:04:9d:dd:21:a2:35:43:27:e8:14:70:67: ae:f3:43:89:98:2b:6b:a4:f6:ac:f1:21:6b:7a:ee: ef:5b:34:a1:b0:d3:4f:18:e9:b6:93:8d:3e:41:0c: 73:fb:65:ef:56:45:90:59:32:92:69:e6:11:1e:15: 67:b3:39:10:4c:16:c0:64:94:12:bc:80:54:5e:73: 2a:35:4d:08:d6:4d:12:14:63:10:18:2b:e4:9a:5f: 29:1d:34:72:b1:9c:9a:e3:d2:d4:4f:3a:2d:35:88: ee:72:2b:d2:03:37:40:b8:fc:12:05:29:84:b4:b3: 5e:ef:4a:ce:73:a3:7b:7c:2b:f3:25:ed:d6:d7:5c: b8:b3:1d:e5:98:68:ce:9f:be:67:7b:e6:94:28:50: da:27:a9:34:10:c3:48:04:d3:67:d3:1d:4b:d4:28: af:d8:b6:68:1e:7f:2f:d0:4f:dc:ff:88:e6:8f:c6: 9b:55:c4:87:fd:51:d1:4d:12:53:f3:d6:0c:e4:15: 70:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:76:D8:FF:B3:40:9D:23:59:ED:6F:46:16:BF:BE:6D:F8:DE:0C:F1 X509v3 Authority Key Identifier: keyid:07:F3:1B:47:47:13:B3:A1:52:C6:A5:F8:F4:8D:ED:20:97:DC:24:1F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9170D3E/BDEE9E249FD711EF9E38A837C4F9AE02/B_MbR0cTs6FSxqX49I3tIJfcJB8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B_MbR0cTs6FSxqX49I3tIJfcJB8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9170D3E/BDEE9E249FD711EF9E38A837C4F9AE02/B_MbR0cTs6FSxqX49I3tIJfcJB8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2d:19:cf:af:61:91:83:f2:54:42:c0:68:61:ff:19:ed:63:02: 08:85:a6:0a:22:f0:0c:0f:80:fb:6f:90:d2:80:ff:1a:b1:b9: b0:ba:13:3f:d6:fe:85:52:d8:00:c2:1a:de:4d:20:0c:01:5e: 9f:9b:49:08:f1:b7:6d:9f:8a:db:fa:23:46:53:88:23:6c:ca: a0:64:3d:0b:b8:76:61:b8:28:02:1b:17:53:c1:94:54:9e:e8: 9c:f0:bc:7b:eb:d0:13:03:05:56:37:81:77:e8:ef:22:82:4d: 43:f1:45:34:26:65:08:8e:a6:76:03:24:2e:97:a5:ef:fa:58: b3:35:be:7f:54:aa:5e:34:32:cd:c8:ef:c0:70:85:59:2f:50: ef:e1:f6:1d:db:ac:99:86:46:8a:61:e1:6d:ca:ce:b9:39:ef: 3f:b3:4b:d6:ec:01:b2:4b:16:79:80:b5:24:5e:ad:6c:99:12: f1:e1:d6:c7:a8:7f:22:79:e3:c6:a0:7f:4b:b2:df:57:1f:83: c2:14:38:2e:63:07:22:c5:19:1f:5a:9d:43:bd:c2:b9:fc:e6: 90:30:ca:1e:ef:ad:5f:63:e5:68:9b:92:ef:84:70:19:f7:b4: 79:7f:48:7f:d1:ea:01:1c:61:22:2f:e0:34:15:4b:35:19:5f: e5:0a:32:19 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICALgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzBEM0UxMTAvBgNVBAUTKDA3RjMxQjQ3NDcxM0IzQTE1MkM2QTVGOEY0OERFRDIw OTdEQzI0MUYwHhcNMjUxMTA1MDYxMjAzWhcNMjUxMTEyMDYxMjAzWjAYMRYwFAYD VQQDEw02OTBhZWFiMy0xYjI2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwjeOfX2d2xjF6JEthfbaLaJ6wAJO57QhYNLgpOscIqQHs+foCUx3ar14kVwc 8hXsOzMj9La5YOmg2NHdMIsEnd0hojVDJ+gUcGeu80OJmCtrpPas8SFreu7vWzSh sNNPGOm2k40+QQxz+2XvVkWQWTKSaeYRHhVnszkQTBbAZJQSvIBUXnMqNU0I1k0S FGMQGCvkml8pHTRysZya49LUTzotNYjucivSAzdAuPwSBSmEtLNe70rOc6N7fCvz Je3W11y4sx3lmGjOn75ne+aUKFDaJ6k0EMNIBNNn0x1L1Civ2LZoHn8v0E/c/4jm j8abVcSH/VHRTRJT89YM5BVwPQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFD922P+z QJ0jWe1vRha/vm343gzxMB8GA1UdIwQYMBaAFAfzG0dHE7OhUsal+PSN7SCX3CQf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MEQzRS9CREVFOUUyNDlG RDcxMUVGOUUzOEE4MzdDNEY5QUUwMi9CX01iUjBjVHM2RlN4cVg0OUkzdElKZmNK QjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0JfTWJSMGNUczZGU3hxWDQ5STN0SUpmY0pCOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MEQzRS9CREVFOUUyNDlGRDcxMUVGOUUzOEE4MzdDNEY5QUUwMi9CX01iUjBjVHM2 RlN4cVg0OUkzdElKZmNKQjgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAtGc+vYZGD8lRCwGhh/xntYwIIhaYKIvAMD4D7b5DSgP8asbmwuhM/ 1v6FUtgAwhreTSAMAV6fm0kI8bdtn4rb+iNGU4gjbMqgZD0LuHZhuCgCGxdTwZRU nuic8Lx769ATAwVWN4F36O8igk1D8UU0JmUIjqZ2AyQul6Xv+lizNb5/VKpeNDLN yO/AcIVZL1Dv4fYd26yZhkaKYeFtys65Oe8/s0vW7AGySxZ5gLUkXq1smRLx4dbH qH8ieePGoH9Lst9XH4PCFDguYwcixRkfWp1DvcK5/OaQMMoe761fY+Vom5LvhHAZ 97R5f0h/0eoBHGEiL+A0FUs1GV/lCjIZ -----END CERTIFICATE-----Generated at Wed Nov 5 19:28:45 2025 by rpki-client