$ rpki-client -vvf rpki.apnic.net/member_repository/A917AB94/D2BF6B72FB8711EC972BCE13C4F9AE02/PT7k4FXE4PH9Wxe83wXZ-FLPBbw.mft File: PT7k4FXE4PH9Wxe83wXZ-FLPBbw.mft (raw, json) Hash identifier: viFGeXnpMQVSy8ztiixYnd7jBL0YC999XNWcLA8RtYQ= Subject key identifier: 38:F2:4F:81:8E:D2:A8:A5:31:34:6F:EA:61:82:9E:26:44:C2:C4:03 Authority key identifier: 3D:3E:E4:E0:55:C4:E0:F1:FD:5B:17:BC:DF:05:D9:F8:52:CF:05:BC Certificate issuer: /CN=A917AB94/serialNumber=3D3EE4E055C4E0F1FD5B17BCDF05D9F852CF05BC Certificate serial: 0301 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PT7k4FXE4PH9Wxe83wXZ-FLPBbw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917AB94/D2BF6B72FB8711EC972BCE13C4F9AE02/PT7k4FXE4PH9Wxe83wXZ-FLPBbw.mft Manifest number: 02FB Signing time: Wed 05 Nov 2025 01:18:22 +0000 Manifest this update: Wed 05 Nov 2025 01:18:22 +0000 Manifest next update: Wed 12 Nov 2025 01:18:22 +0000 Files and hashes: 1: PT7k4FXE4PH9Wxe83wXZ-FLPBbw.crl (hash: RYIPvcCj8hdww0HypjcvVeraviahRB1aw1modHqrOAo=) 2: 865AA3E400FC11EDAA69A61DC4F9AE02.roa (hash: lRZm7R1XzhUUnYkMhnYwCmY95i90cE75koEdjvOdBVc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917AB94/D2BF6B72FB8711EC972BCE13C4F9AE02/PT7k4FXE4PH9Wxe83wXZ-FLPBbw.crl rsync://rpki.apnic.net/member_repository/A917AB94/D2BF6B72FB8711EC972BCE13C4F9AE02/PT7k4FXE4PH9Wxe83wXZ-FLPBbw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PT7k4FXE4PH9Wxe83wXZ-FLPBbw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 01:18:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 769 (0x301) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917AB94, serialNumber=3D3EE4E055C4E0F1FD5B17BCDF05D9F852CF05BC Validity Not Before: Nov 5 01:18:22 2025 GMT Not After : Nov 12 01:18:22 2025 GMT Subject: CN=690aa5de-6247 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:c7:7a:77:1b:59:70:92:94:34:89:3a:b2:c8: 77:6d:1c:7b:06:a4:c4:18:d1:7a:6d:f4:72:1f:8c: 63:c3:ee:4a:4c:4f:7e:4d:0d:0d:51:95:47:7a:c0: 54:22:62:1d:a1:24:d0:5c:14:34:a8:0e:a6:7e:06: d9:7e:74:52:81:0d:5b:cb:15:ea:ee:63:d6:40:30: 38:72:62:03:56:3a:2e:b4:2f:d4:9c:de:95:26:8b: a5:ad:c7:77:72:40:81:5e:6f:24:13:b1:7f:f9:5f: a9:b9:f8:9d:ba:17:ce:66:0b:37:1e:f7:e0:1b:d4: 92:61:4f:29:70:e0:56:6d:da:d5:4e:1d:51:32:41: d2:8d:41:e4:22:d1:21:36:2b:f0:d4:c7:3e:00:ac: e1:e2:97:57:8d:bc:c3:78:4c:f4:d3:4c:47:d3:57: 92:bf:a0:03:8e:18:29:8b:ef:6f:04:93:ef:24:1b: 4c:f9:17:0a:e7:45:59:24:f8:27:8d:ef:f5:2b:08: 85:80:2d:3b:b9:4b:7d:7e:96:c8:5e:16:ee:a7:1f: df:e8:71:79:0a:9e:0f:20:9e:68:29:0e:44:53:4c: b0:3b:40:b0:df:5e:f5:7a:94:1e:68:11:4c:48:5a: 19:e7:b6:16:bb:7a:f6:27:f9:71:0c:8d:16:b9:73: 46:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:F2:4F:81:8E:D2:A8:A5:31:34:6F:EA:61:82:9E:26:44:C2:C4:03 X509v3 Authority Key Identifier: keyid:3D:3E:E4:E0:55:C4:E0:F1:FD:5B:17:BC:DF:05:D9:F8:52:CF:05:BC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917AB94/D2BF6B72FB8711EC972BCE13C4F9AE02/PT7k4FXE4PH9Wxe83wXZ-FLPBbw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PT7k4FXE4PH9Wxe83wXZ-FLPBbw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917AB94/D2BF6B72FB8711EC972BCE13C4F9AE02/PT7k4FXE4PH9Wxe83wXZ-FLPBbw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 24:07:9f:e4:3c:61:eb:3e:a7:67:f0:52:c4:f1:2f:a9:88:e2: c6:a3:73:c3:87:fd:e4:d4:60:61:5f:ed:7b:b4:bd:ef:33:95: 9e:d7:7a:53:4d:d5:26:fc:cb:15:76:bc:b0:16:46:46:8d:62: c1:38:69:20:61:b9:71:31:7a:28:c0:5e:8c:b7:4b:c3:3e:90: 5c:05:47:90:b5:74:9a:08:87:7a:1b:94:1c:85:f7:7f:c6:76: 0e:59:14:0d:9e:3a:39:57:3a:72:72:b4:9b:59:fb:f8:45:31: 14:47:eb:90:b2:64:87:2b:e7:d5:7f:c7:f9:45:d1:41:7b:4b: fa:d4:d2:f0:e6:e4:f3:e8:fb:85:1d:53:05:0a:fc:8c:dc:c6: 25:09:00:85:b9:4a:28:36:d5:a6:d9:9d:3d:a1:a6:c3:df:0c: 39:e5:fc:02:59:f5:16:9a:16:ed:a6:72:4f:4e:f8:e2:4b:e5: 82:5b:19:ec:d8:c0:43:81:3f:1e:39:70:fd:0e:f2:ed:14:7d: 82:29:6c:57:d5:7c:1b:60:70:6e:61:03:fc:ed:26:ad:ac:fc: df:2e:9d:de:70:19:e9:d4:60:6b:06:f0:62:6e:45:20:bc:9e: 36:8e:69:2f:f4:cf:05:ef:8e:0b:bf:3d:86:73:06:d3:ea:d1: e5:38:dd:4d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAwEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0FCOTQxMTAvBgNVBAUTKDNEM0VFNEUwNTVDNEUwRjFGRDVCMTdCQ0RGMDVEOUY4 NTJDRjA1QkMwHhcNMjUxMTA1MDExODIyWhcNMjUxMTEyMDExODIyWjAYMRYwFAYD VQQDEw02OTBhYTVkZS02MjQ3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAt8d6dxtZcJKUNIk6ssh3bRx7BqTEGNF6bfRyH4xjw+5KTE9+TQ0NUZVHesBU ImIdoSTQXBQ0qA6mfgbZfnRSgQ1byxXq7mPWQDA4cmIDVjoutC/UnN6VJoulrcd3 ckCBXm8kE7F/+V+pufiduhfOZgs3HvfgG9SSYU8pcOBWbdrVTh1RMkHSjUHkItEh Nivw1Mc+AKzh4pdXjbzDeEz000xH01eSv6ADjhgpi+9vBJPvJBtM+RcK50VZJPgn je/1KwiFgC07uUt9fpbIXhbupx/f6HF5Cp4PIJ5oKQ5EU0ywO0Cw3171epQeaBFM SFoZ57YWu3r2J/lxDI0WuXNGcwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDjyT4GO 0qilMTRv6mGCniZEwsQDMB8GA1UdIwQYMBaAFD0+5OBVxODx/VsXvN8F2fhSzwW8 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QUI5NC9EMkJGNkI3MkZC ODcxMUVDOTcyQkNFMTNDNEY5QUUwMi9QVDdrNEZYRTRQSDlXeGU4M3dYWi1GTFBC YncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1BUN2s0RlhFNFBIOVd4ZTgzd1haLUZMUEJidy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QUI5NC9EMkJGNkI3MkZCODcxMUVDOTcyQkNFMTNDNEY5QUUwMi9QVDdrNEZYRTRQ SDlXeGU4M3dYWi1GTFBCYncubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAkB5/kPGHrPqdn8FLE8S+piOLGo3PDh/3k1GBhX+17tL3vM5We13pT TdUm/MsVdrywFkZGjWLBOGkgYblxMXoowF6Mt0vDPpBcBUeQtXSaCId6G5Qchfd/ xnYOWRQNnjo5VzpycrSbWfv4RTEUR+uQsmSHK+fVf8f5RdFBe0v61NLw5uTz6PuF HVMFCvyM3MYlCQCFuUooNtWm2Z09oabD3ww55fwCWfUWmhbtpnJPTvjiS+WCWxns 2MBDgT8eOXD9DvLtFH2CKWxX1XwbYHBuYQP87SatrPzfLp3ecBnp1GBrBvBibkUg vJ42jmkv9M8F744Lvz2GcwbT6tHlON1N -----END CERTIFICATE-----Generated at Wed Nov 5 15:04:47 2025 by rpki-client