$ rpki-client -vvf rpki.apnic.net/member_repository/A917AFE7/F8B65374291211EC8631B854C4F9AE02/3MB6nY_-N43drzzQ5Bqe9v3TFI8.mft File: 3MB6nY_-N43drzzQ5Bqe9v3TFI8.mft (raw, json) Hash identifier: +5x24zE+db14dXk4aQqxLtGqakZekLPLvae7SpJnbac= Subject key identifier: A2:84:FE:CF:79:29:66:87:35:D8:DE:50:C7:4A:3B:E9:12:24:1A:BD Authority key identifier: DC:C0:7A:9D:8F:FE:37:8D:DD:AF:3C:D0:E4:1A:9E:F6:FD:D3:14:8F Certificate issuer: /CN=A917AFE7/serialNumber=DCC07A9D8FFE378DDDAF3CD0E41A9EF6FDD3148F Certificate serial: 0518 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3MB6nY_-N43drzzQ5Bqe9v3TFI8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917AFE7/F8B65374291211EC8631B854C4F9AE02/3MB6nY_-N43drzzQ5Bqe9v3TFI8.mft Manifest number: 0512 Signing time: Tue 04 Nov 2025 23:40:38 +0000 Manifest this update: Tue 04 Nov 2025 23:40:38 +0000 Manifest next update: Tue 11 Nov 2025 23:40:38 +0000 Files and hashes: 1: 3MB6nY_-N43drzzQ5Bqe9v3TFI8.crl (hash: dSiJTN5da8R8+yD3lJLd2oCSx8u976LcHw8/Zjq95lo=) 2: D3D1604C2B6711EC8CD1C61FC4F9AE02.roa (hash: K+U5H/gEB39S0MtkniCqyAbmgU8k6WO9RKiUyR91DCc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917AFE7/F8B65374291211EC8631B854C4F9AE02/3MB6nY_-N43drzzQ5Bqe9v3TFI8.crl rsync://rpki.apnic.net/member_repository/A917AFE7/F8B65374291211EC8631B854C4F9AE02/3MB6nY_-N43drzzQ5Bqe9v3TFI8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3MB6nY_-N43drzzQ5Bqe9v3TFI8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 23:40:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1304 (0x518) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917AFE7, serialNumber=DCC07A9D8FFE378DDDAF3CD0E41A9EF6FDD3148F Validity Not Before: Nov 4 23:40:38 2025 GMT Not After : Nov 11 23:40:38 2025 GMT Subject: CN=690a8ef6-0113 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:82:84:0d:c7:51:c4:15:ff:bd:f1:4a:2e:bc: 2d:af:23:7c:36:fd:df:4b:f4:f5:4c:f3:95:72:b2: 2d:51:b8:b7:4a:e2:d0:7e:b5:34:f2:88:d4:d8:84: b5:d1:25:a2:9a:36:ce:68:32:17:cd:67:1e:37:ac: 88:da:e7:86:47:f2:2c:3a:1a:73:d1:8e:50:22:b0: 05:1a:df:e9:ef:a5:b4:b8:f7:54:f4:f2:b4:24:23: 54:0c:42:49:36:e3:9f:f1:6e:a5:df:5d:4c:1c:9a: fa:b9:e9:fc:76:1a:80:cb:a9:59:dc:c1:7c:c9:76: 7e:51:1e:14:02:cf:94:4a:06:e0:be:5b:66:8a:ef: 9a:b8:9a:49:9d:23:48:b3:d9:f1:d3:92:32:2b:5d: bf:7a:47:20:f1:d3:5b:80:01:65:9a:53:90:39:29: e9:46:cc:e8:f2:3f:ac:58:01:76:ca:c5:2f:20:26: e9:21:d0:96:1c:fd:fc:3b:d7:9c:1c:f3:d0:b4:89: 27:a8:93:2b:ac:f4:04:1b:2b:46:2e:03:8f:10:25: 97:6d:77:56:3d:d0:53:42:01:f6:45:23:38:c7:ef: fd:10:b3:ed:59:c1:4c:ae:54:1f:b2:ae:68:0a:e5: fd:65:c9:76:dc:f0:fe:b3:b8:6a:07:31:bd:60:72: 12:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:84:FE:CF:79:29:66:87:35:D8:DE:50:C7:4A:3B:E9:12:24:1A:BD X509v3 Authority Key Identifier: keyid:DC:C0:7A:9D:8F:FE:37:8D:DD:AF:3C:D0:E4:1A:9E:F6:FD:D3:14:8F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917AFE7/F8B65374291211EC8631B854C4F9AE02/3MB6nY_-N43drzzQ5Bqe9v3TFI8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3MB6nY_-N43drzzQ5Bqe9v3TFI8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917AFE7/F8B65374291211EC8631B854C4F9AE02/3MB6nY_-N43drzzQ5Bqe9v3TFI8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 02:bc:cc:f9:80:e8:fc:66:77:b3:4f:60:2f:b2:49:22:0f:04: 03:ad:b6:1f:e9:f5:10:6a:41:c8:39:19:d1:58:60:83:ca:76: c5:01:83:05:07:32:32:8b:ed:98:bb:b1:3c:fe:cb:f3:41:a9: 4f:88:75:f8:e1:f5:55:3f:13:c3:60:56:3f:71:ff:57:ee:0b: 85:3b:2e:fa:01:e6:2a:23:f4:9e:82:f8:7b:2f:9c:43:3d:1c: 83:65:8e:95:a3:56:cf:4c:fc:1e:e1:b9:47:0b:1b:30:c7:61: 00:0e:fb:cb:f8:4d:34:76:14:96:d5:f8:dd:d3:f9:85:eb:a2: 98:ed:fb:ca:6c:37:7c:32:b9:ef:ee:0c:32:0e:53:cd:6b:8e: d4:ce:51:03:48:40:d2:d6:89:3c:81:86:e4:f0:c1:67:14:44: da:b7:9e:de:9f:77:a7:9e:85:83:d0:51:7e:42:5a:ff:a1:44: 1c:31:9c:49:f0:16:bf:dc:17:e5:d5:8d:9b:fc:de:99:03:00: 75:38:52:a0:98:ed:2e:09:6d:ab:b2:8a:cd:ff:f4:81:58:3d: ec:95:76:27:9d:b0:de:b3:83:a6:55:ab:cd:a0:0f:df:3d:50: 39:66:52:c8:c6:ad:fb:0d:39:37:4c:71:9a:99:49:63:fb:8d: 6a:29:75:a0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBRgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0FGRTcxMTAvBgNVBAUTKERDQzA3QTlEOEZGRTM3OEREREFGM0NEMEU0MUE5RUY2 RkREMzE0OEYwHhcNMjUxMTA0MjM0MDM4WhcNMjUxMTExMjM0MDM4WjAYMRYwFAYD VQQDEw02OTBhOGVmNi0wMTEzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnIKEDcdRxBX/vfFKLrwtryN8Nv3fS/T1TPOVcrItUbi3SuLQfrU08ojU2IS1 0SWimjbOaDIXzWceN6yI2ueGR/IsOhpz0Y5QIrAFGt/p76W0uPdU9PK0JCNUDEJJ NuOf8W6l311MHJr6uen8dhqAy6lZ3MF8yXZ+UR4UAs+USgbgvltmiu+auJpJnSNI s9nx05IyK12/ekcg8dNbgAFlmlOQOSnpRszo8j+sWAF2ysUvICbpIdCWHP38O9ec HPPQtIknqJMrrPQEGytGLgOPECWXbXdWPdBTQgH2RSM4x+/9ELPtWcFMrlQfsq5o CuX9Zcl23PD+s7hqBzG9YHISCQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKKE/s95 KWaHNdjeUMdKO+kSJBq9MB8GA1UdIwQYMBaAFNzAep2P/jeN3a880OQanvb90xSP MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QUZFNy9GOEI2NTM3NDI5 MTIxMUVDODYzMUI4NTRDNEY5QUUwMi8zTUI2bllfLU40M2RyenpRNUJxZTl2M1RG STguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzNNQjZuWV8tTjQzZHJ6elE1QnFlOXYzVEZJOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QUZFNy9GOEI2NTM3NDI5MTIxMUVDODYzMUI4NTRDNEY5QUUwMi8zTUI2bllfLU40 M2RyenpRNUJxZTl2M1RGSTgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQACvMz5gOj8ZnezT2AvskkiDwQDrbYf6fUQakHIORnRWGCDynbFAYMF BzIyi+2Yu7E8/svzQalPiHX44fVVPxPDYFY/cf9X7guFOy76AeYqI/Segvh7L5xD PRyDZY6Vo1bPTPwe4blHCxswx2EADvvL+E00dhSW1fjd0/mF66KY7fvKbDd8Mrnv 7gwyDlPNa47UzlEDSEDS1ok8gYbk8MFnFETat57en3ennoWD0FF+Qlr/oUQcMZxJ 8Ba/3Bfl1Y2b/N6ZAwB1OFKgmO0uCW2rsorN//SBWD3slXYnnbDes4OmVavNoA/f PVA5ZlLIxq37DTk3THGamUlj+41qKXWg -----END CERTIFICATE-----Generated at Wed Nov 5 13:35:26 2025 by rpki-client