$ rpki-client -vvf rpki.apnic.net/member_repository/A9173EFB/738DBFFAB42411EC96728235C4F9AE02/3Y0sg7tKHqnhN3dvzFURBMqyuCM.mft File: 3Y0sg7tKHqnhN3dvzFURBMqyuCM.mft (raw, json) Hash identifier: IpycMZzwM3AtBuFovib7/RolWhIxHwcLqir/5NRSGj0= Subject key identifier: 36:11:D2:94:16:DF:42:86:52:ED:A1:AA:8A:74:05:B3:3F:E2:38:C5 Authority key identifier: DD:8D:2C:83:BB:4A:1E:A9:E1:37:77:6F:CC:55:11:04:CA:B2:B8:23 Certificate issuer: /CN=A9173EFB/serialNumber=DD8D2C83BB4A1EA9E137776FCC551104CAB2B823 Certificate serial: 03B9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3Y0sg7tKHqnhN3dvzFURBMqyuCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9173EFB/738DBFFAB42411EC96728235C4F9AE02/3Y0sg7tKHqnhN3dvzFURBMqyuCM.mft Manifest number: 03AE Signing time: Mon 03 Nov 2025 00:40:18 +0000 Manifest this update: Mon 03 Nov 2025 00:40:17 +0000 Manifest next update: Mon 10 Nov 2025 00:40:17 +0000 Files and hashes: 1: 3Y0sg7tKHqnhN3dvzFURBMqyuCM.crl (hash: NYW1PMGQrifFz04lO1l1ossQix07MNxILCWajfs1GFs=) 2: 39F3DCDABBB711EC8B27B129C4F9AE02.roa (hash: VoAVUvu0RGCpHsijS5GqgKUIxTiLWbCjwLzsf95x2lc=) 3: 7618919ABBB411EC91E89B0CC4F9AE02.roa (hash: hUzt8IMEIBlwCzrfPiZDjkxnbLcZAVIhss6xbv6P8Jg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9173EFB/738DBFFAB42411EC96728235C4F9AE02/3Y0sg7tKHqnhN3dvzFURBMqyuCM.crl rsync://rpki.apnic.net/member_repository/A9173EFB/738DBFFAB42411EC96728235C4F9AE02/3Y0sg7tKHqnhN3dvzFURBMqyuCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3Y0sg7tKHqnhN3dvzFURBMqyuCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 00:40:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 953 (0x3b9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9173EFB, serialNumber=DD8D2C83BB4A1EA9E137776FCC551104CAB2B823 Validity Not Before: Nov 3 00:40:17 2025 GMT Not After : Nov 10 00:40:17 2025 GMT Subject: CN=6907f9f2-9846 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:d1:49:6e:d6:93:eb:47:f9:00:24:02:d5:71: 94:5b:87:2c:dc:d1:d5:ca:b0:71:1b:24:82:21:01: 4e:11:95:67:cd:56:4c:c4:e0:1a:aa:cf:01:08:f6: f9:85:36:f0:60:6d:83:bd:c2:9d:7e:ff:7c:f8:f3: 21:18:57:e4:78:e1:e4:98:fa:c8:1a:ce:99:61:62: c4:10:98:d5:e7:45:e7:89:c8:eb:79:38:29:21:5f: 7e:a5:d5:85:d0:7f:f8:fb:c0:e7:5e:58:9e:f5:03: 4d:ba:b3:6e:b6:8d:fc:d2:2f:44:45:4d:3b:c6:fd: c6:cf:77:06:86:26:ab:e5:9b:86:b3:86:95:06:5b: 98:98:07:80:4f:16:7f:59:51:d3:cc:04:18:51:ee: 65:cb:50:63:05:de:3d:da:5f:29:26:42:83:63:8c: 35:5e:1c:e8:dd:e1:18:1c:37:41:ca:b3:a5:c4:eb: d9:cb:64:e4:ed:d6:dd:32:57:3a:cb:95:18:67:a7: d0:ef:78:2b:c6:f3:a6:1f:2a:8e:95:59:a4:74:b0: ec:97:d1:22:73:61:30:1a:82:d0:4e:95:16:6b:3a: e5:a9:7a:ad:68:97:82:d0:41:dd:f8:e6:bb:94:e9: d3:3e:21:a5:7e:10:69:ae:66:3d:00:40:99:6f:40: 32:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:11:D2:94:16:DF:42:86:52:ED:A1:AA:8A:74:05:B3:3F:E2:38:C5 X509v3 Authority Key Identifier: keyid:DD:8D:2C:83:BB:4A:1E:A9:E1:37:77:6F:CC:55:11:04:CA:B2:B8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9173EFB/738DBFFAB42411EC96728235C4F9AE02/3Y0sg7tKHqnhN3dvzFURBMqyuCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3Y0sg7tKHqnhN3dvzFURBMqyuCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9173EFB/738DBFFAB42411EC96728235C4F9AE02/3Y0sg7tKHqnhN3dvzFURBMqyuCM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 87:d7:b9:d2:7d:57:49:ea:68:0e:da:8a:a9:92:99:88:fe:c5: 61:fb:20:6d:74:43:0f:4b:c3:60:b6:6a:c3:01:17:62:ae:a9: e1:27:c2:aa:9f:63:1b:57:3a:41:c1:92:f1:57:18:15:51:3b: 9c:58:36:f7:07:04:a4:74:4f:b8:0c:83:04:81:a4:da:73:d6: 90:fb:a9:cd:54:99:17:33:fa:85:a1:ef:59:db:02:7e:f9:b7: c3:aa:0a:11:af:91:05:54:fb:60:82:e3:c0:fb:67:2c:6e:8c: ed:db:1f:7d:95:aa:62:65:eb:7f:c5:ae:c0:a4:23:ec:84:1f: 25:56:a8:29:55:b6:8f:27:99:e9:b6:0e:ed:3c:7b:50:9c:a4: 87:36:ec:ca:fa:97:b9:92:7e:68:98:b7:99:23:39:25:e0:8a: 06:95:a4:4a:ee:bb:93:40:d5:6a:95:41:f7:22:31:5e:19:93: 74:82:72:6a:d8:65:82:7f:8a:43:10:57:d9:2e:a3:2b:72:97: 64:72:0d:05:a9:c2:4a:d6:02:23:bc:81:dc:ae:da:22:7c:cb: 89:ee:75:07:91:36:62:10:6c:ed:49:c4:bc:a2:56:47:dc:d1: df:30:4d:e8:09:95:07:12:0c:27:95:bf:1d:05:56:83:40:98: ba:65:7d:18 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA7kwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzNFRkIxMTAvBgNVBAUTKEREOEQyQzgzQkI0QTFFQTlFMTM3Nzc2RkNDNTUxMTA0 Q0FCMkI4MjMwHhcNMjUxMTAzMDA0MDE3WhcNMjUxMTEwMDA0MDE3WjAYMRYwFAYD VQQDEw02OTA3ZjlmMi05ODQ2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv9FJbtaT60f5ACQC1XGUW4cs3NHVyrBxGySCIQFOEZVnzVZMxOAaqs8BCPb5 hTbwYG2DvcKdfv98+PMhGFfkeOHkmPrIGs6ZYWLEEJjV50XnicjreTgpIV9+pdWF 0H/4+8DnXlie9QNNurNuto380i9ERU07xv3Gz3cGhiar5ZuGs4aVBluYmAeATxZ/ WVHTzAQYUe5ly1BjBd492l8pJkKDY4w1Xhzo3eEYHDdByrOlxOvZy2Tk7dbdMlc6 y5UYZ6fQ73grxvOmHyqOlVmkdLDsl9Eic2EwGoLQTpUWazrlqXqtaJeC0EHd+Oa7 lOnTPiGlfhBprmY9AECZb0AyfwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDYR0pQW 30KGUu2hqop0BbM/4jjFMB8GA1UdIwQYMBaAFN2NLIO7Sh6p4Td3b8xVEQTKsrgj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3M0VGQi83MzhEQkZGQUI0 MjQxMUVDOTY3MjgyMzVDNEY5QUUwMi8zWTBzZzd0S0hxbmhOM2R2ekZVUkJNcXl1 Q00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzNZMHNnN3RLSHFuaE4zZHZ6RlVSQk1xeXVDTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 M0VGQi83MzhEQkZGQUI0MjQxMUVDOTY3MjgyMzVDNEY5QUUwMi8zWTBzZzd0S0hx bmhOM2R2ekZVUkJNcXl1Q00ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCH17nSfVdJ6mgO2oqpkpmI/sVh+yBtdEMPS8NgtmrDARdirqnhJ8Kq n2MbVzpBwZLxVxgVUTucWDb3BwSkdE+4DIMEgaTac9aQ+6nNVJkXM/qFoe9Z2wJ+ +bfDqgoRr5EFVPtgguPA+2csbozt2x99lapiZet/xa7ApCPshB8lVqgpVbaPJ5np tg7tPHtQnKSHNuzK+pe5kn5omLeZIzkl4IoGlaRK7ruTQNVqlUH3IjFeGZN0gnJq 2GWCf4pDEFfZLqMrcpdkcg0FqcJK1gIjvIHcrtoifMuJ7nUHkTZiEGztScS8olZH 3NHfME3oCZUHEgwnlb8dBVaDQJi6ZX0Y -----END CERTIFICATE-----Generated at Mon Nov 3 18:11:07 2025 by rpki-client