$ rpki-client -vvf rpki.apnic.net/member_repository/A917F352/3D9D7F5EA1FB11EEA360925AC4F9AE02/Crfzan3eThH0sBWX3w3nopqAvEQ.mft File: Crfzan3eThH0sBWX3w3nopqAvEQ.mft (raw, json) Hash identifier: GHBQTHsP9bWgyQvNe3pPyzXBMASM3qNojh22e5P6yEU= Subject key identifier: 88:47:FC:F3:AD:48:1A:FB:72:09:CF:92:32:B7:9A:AA:4A:25:7E:74 Authority key identifier: 0A:B7:F3:6A:7D:DE:4E:11:F4:B0:15:97:DF:0D:E7:A2:9A:80:BC:44 Certificate issuer: /CN=A917F352/serialNumber=0AB7F36A7DDE4E11F4B01597DF0DE7A29A80BC44 Certificate serial: 0160 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Crfzan3eThH0sBWX3w3nopqAvEQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917F352/3D9D7F5EA1FB11EEA360925AC4F9AE02/Crfzan3eThH0sBWX3w3nopqAvEQ.mft Manifest number: 015D Signing time: Mon 03 Nov 2025 04:04:26 +0000 Manifest this update: Mon 03 Nov 2025 04:04:25 +0000 Manifest next update: Mon 10 Nov 2025 04:04:25 +0000 Files and hashes: 1: Crfzan3eThH0sBWX3w3nopqAvEQ.crl (hash: r6uWrsWvQWkJrtvPaHMVqiSfcgq/E30XgbpUr0uPxeo=) 2: 8FE6CF86A1FB11EE9773325BC4F9AE02.roa (hash: f4bAe1+5wb0cwDVNLjPL2QNz/OBAZDY7LyZRiQiFweU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917F352/3D9D7F5EA1FB11EEA360925AC4F9AE02/Crfzan3eThH0sBWX3w3nopqAvEQ.crl rsync://rpki.apnic.net/member_repository/A917F352/3D9D7F5EA1FB11EEA360925AC4F9AE02/Crfzan3eThH0sBWX3w3nopqAvEQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Crfzan3eThH0sBWX3w3nopqAvEQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 04:04:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 352 (0x160) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917F352, serialNumber=0AB7F36A7DDE4E11F4B01597DF0DE7A29A80BC44 Validity Not Before: Nov 3 04:04:25 2025 GMT Not After : Nov 10 04:04:25 2025 GMT Subject: CN=690829c9-bceb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:29:2b:17:39:5c:fa:55:08:a6:4d:ff:64:d8: 3e:9b:38:aa:5f:3f:22:51:ac:b2:cc:fc:c4:0f:06: a9:55:fc:20:b0:51:70:27:b1:37:50:16:15:2a:69: 66:9a:d8:31:9c:d2:96:bc:e1:b6:0c:66:8d:44:26: ff:d8:16:1e:24:6c:73:32:9f:72:59:78:c4:14:3d: 55:d5:77:80:bd:9d:7e:e6:16:63:12:b1:40:a4:03: c3:81:6d:e2:06:a1:6f:58:20:44:45:53:87:8c:d8: 98:4a:5b:60:34:c0:b8:2b:83:c7:c1:c5:3a:5a:34: 2a:f3:bb:41:f0:16:37:f2:0d:44:4f:5a:2a:ec:d2: 59:5f:05:69:d3:2a:91:dc:e4:17:a3:da:5b:e1:8d: 21:fe:75:79:53:3b:ef:89:36:5d:3b:49:b6:7b:37: c2:71:63:93:e0:aa:d0:86:46:36:ad:55:40:86:fa: f3:af:b8:2d:96:4f:55:14:52:37:1a:4c:eb:f2:1a: 3e:f2:5d:fd:c4:1e:e6:c0:d4:91:9a:fb:9b:82:25: 87:9e:f8:06:e9:73:e1:f6:a9:43:8f:6d:2d:f3:bd: cd:58:44:1b:33:a3:8f:a4:2e:30:09:21:e3:c3:75: f4:54:9c:65:d2:b8:38:74:35:14:e0:5d:c4:e8:2f: bd:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:47:FC:F3:AD:48:1A:FB:72:09:CF:92:32:B7:9A:AA:4A:25:7E:74 X509v3 Authority Key Identifier: keyid:0A:B7:F3:6A:7D:DE:4E:11:F4:B0:15:97:DF:0D:E7:A2:9A:80:BC:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917F352/3D9D7F5EA1FB11EEA360925AC4F9AE02/Crfzan3eThH0sBWX3w3nopqAvEQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Crfzan3eThH0sBWX3w3nopqAvEQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917F352/3D9D7F5EA1FB11EEA360925AC4F9AE02/Crfzan3eThH0sBWX3w3nopqAvEQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 58:28:83:82:16:30:8d:70:b5:b8:fe:c4:a6:1e:c2:fc:20:01: e5:67:10:85:39:52:64:d3:53:cd:d2:4a:6c:2c:2d:ea:6d:45: 25:b9:64:c8:c9:66:df:2f:f6:1a:30:f0:67:39:6b:99:54:d1: b0:9d:6e:03:89:37:f8:17:71:e4:bc:36:12:75:90:5e:e1:2f: 88:63:04:53:c1:8a:2c:33:5f:86:e8:49:7c:e0:74:ee:28:bf: ec:a8:a3:22:e6:9c:bd:f6:c7:87:cb:11:83:e4:a8:a2:6f:54: 0a:ce:77:4f:1a:7c:47:23:a2:21:8e:f3:d0:c4:d2:e1:2f:05: 4c:20:17:24:0f:1a:63:fb:cc:bb:10:a6:9f:ea:eb:91:4c:c1: 3e:7e:ce:4b:4d:c8:8f:cc:2c:2f:ea:4c:44:3e:00:d3:5e:34: dd:db:be:38:3e:01:3e:9d:32:43:3f:e3:4b:ab:2c:05:72:fd: 2d:90:6a:7c:73:b6:06:d7:b6:83:dd:17:8b:c9:3a:5d:a8:7e: 91:b3:66:9c:44:5b:ff:e4:51:0b:73:05:30:75:1a:1f:1a:b4: 74:1c:25:7c:3e:39:7c:b7:8c:ef:e4:5c:9a:fa:8d:e0:e3:49: 00:52:49:29:8f:ee:3b:90:0b:f7:eb:de:dc:b6:f6:eb:b2:99: 41:3f:3f:52 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAWAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0YzNTIxMTAvBgNVBAUTKDBBQjdGMzZBN0RERTRFMTFGNEIwMTU5N0RGMERFN0Ey OUE4MEJDNDQwHhcNMjUxMTAzMDQwNDI1WhcNMjUxMTEwMDQwNDI1WjAYMRYwFAYD VQQDEw02OTA4MjljOS1iY2ViMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1ikrFzlc+lUIpk3/ZNg+mziqXz8iUayyzPzEDwapVfwgsFFwJ7E3UBYVKmlm mtgxnNKWvOG2DGaNRCb/2BYeJGxzMp9yWXjEFD1V1XeAvZ1+5hZjErFApAPDgW3i BqFvWCBERVOHjNiYSltgNMC4K4PHwcU6WjQq87tB8BY38g1ET1oq7NJZXwVp0yqR 3OQXo9pb4Y0h/nV5UzvviTZdO0m2ezfCcWOT4KrQhkY2rVVAhvrzr7gtlk9VFFI3 Gkzr8ho+8l39xB7mwNSRmvubgiWHnvgG6XPh9qlDj20t873NWEQbM6OPpC4wCSHj w3X0VJxl0rg4dDUU4F3E6C+97wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIhH/POt SBr7cgnPkjK3mqpKJX50MB8GA1UdIwQYMBaAFAq382p93k4R9LAVl98N56KagLxE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RjM1Mi8zRDlEN0Y1RUEx RkIxMUVFQTM2MDkyNUFDNEY5QUUwMi9DcmZ6YW4zZVRoSDBzQldYM3czbm9wcUF2 RVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NyZnphbjNlVGhIMHNCV1gzdzNub3BxQXZFUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 RjM1Mi8zRDlEN0Y1RUExRkIxMUVFQTM2MDkyNUFDNEY5QUUwMi9DcmZ6YW4zZVRo SDBzQldYM3czbm9wcUF2RVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBYKIOCFjCNcLW4/sSmHsL8IAHlZxCFOVJk01PN0kpsLC3qbUUluWTI yWbfL/YaMPBnOWuZVNGwnW4DiTf4F3HkvDYSdZBe4S+IYwRTwYosM1+G6El84HTu KL/sqKMi5py99seHyxGD5Kiib1QKzndPGnxHI6IhjvPQxNLhLwVMIBckDxpj+8y7 EKaf6uuRTME+fs5LTciPzCwv6kxEPgDTXjTd2744PgE+nTJDP+NLqywFcv0tkGp8 c7YG17aD3ReLyTpdqH6Rs2acRFv/5FELcwUwdRofGrR0HCV8Pjl8t4zv5Fya+o3g 40kAUkkpj+47kAv3697ctvbrsplBPz9S -----END CERTIFICATE-----Generated at Tue Nov 4 01:04:17 2025 by rpki-client