$ rpki-client -vvf rpki.apnic.net/member_repository/A917F4A6/3B67AD8E63B711F088DDF365C4F9AE02/c3WC7E6P4530LA3CKbo30bazhlo.mft File: c3WC7E6P4530LA3CKbo30bazhlo.mft (raw, json) Hash identifier: MH4mV9nK3wHHErshyNn1BDJs1IH3QY4Zi7Q355Uc9TY= Subject key identifier: 73:95:7F:87:70:B7:1F:CA:0D:43:6F:7E:C2:89:C5:EC:54:A0:B6:79 Authority key identifier: 73:75:82:EC:4E:8F:E3:9D:F4:2C:0D:C2:29:BA:37:D1:B6:B3:86:5A Certificate issuer: /CN=A917F4A6/serialNumber=737582EC4E8FE39DF42C0DC229BA37D1B6B3865A Certificate serial: 4D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c3WC7E6P4530LA3CKbo30bazhlo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917F4A6/3B67AD8E63B711F088DDF365C4F9AE02/c3WC7E6P4530LA3CKbo30bazhlo.mft Manifest number: 45 Signing time: Mon 03 Nov 2025 07:32:59 +0000 Manifest this update: Mon 03 Nov 2025 07:32:59 +0000 Manifest next update: Mon 10 Nov 2025 07:32:59 +0000 Files and hashes: 1: c3WC7E6P4530LA3CKbo30bazhlo.crl (hash: 0huUl/dAGqt7Vmxf7ylSC2jaL4un8O/rsWS3uT8nUYQ=) 2: 254F258E7ED011F083509E2BC4F9AE02.roa (hash: CSetpI3z0nRywdagrYhbtYI0LFEAfY7qgb1M0CIYRF0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917F4A6/3B67AD8E63B711F088DDF365C4F9AE02/c3WC7E6P4530LA3CKbo30bazhlo.crl rsync://rpki.apnic.net/member_repository/A917F4A6/3B67AD8E63B711F088DDF365C4F9AE02/c3WC7E6P4530LA3CKbo30bazhlo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c3WC7E6P4530LA3CKbo30bazhlo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 07:32:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 77 (0x4d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917F4A6, serialNumber=737582EC4E8FE39DF42C0DC229BA37D1B6B3865A Validity Not Before: Nov 3 07:32:59 2025 GMT Not After : Nov 10 07:32:59 2025 GMT Subject: CN=69085aab-6ce6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:9a:a1:0c:b6:c5:d2:73:70:0d:76:0c:7e:22: 1a:19:d0:00:ff:78:0f:63:12:d1:0c:d1:26:96:2f: 85:43:d7:4d:cf:42:48:36:07:d1:7d:cd:dc:7d:23: 9a:32:9f:55:99:47:4d:ae:13:1c:25:af:cc:23:c2: ca:3b:8e:b2:73:6a:5a:7b:f3:5d:66:a0:ff:5a:ee: 6d:63:dc:bc:c5:36:e5:d9:96:9d:ec:d1:c7:c1:ff: 4e:4f:b0:8a:57:b5:91:1e:44:a8:e2:c1:bc:73:16: 77:1e:af:a0:2e:86:94:05:43:c0:eb:79:b7:c1:0c: 69:c2:f2:93:b5:4a:da:6d:7e:8a:f9:ac:0d:b2:41: 4f:08:66:a5:83:f6:3f:fd:c4:7e:35:47:5f:7e:71: d7:58:83:4d:20:6e:ae:5a:1d:81:fd:e9:4e:fe:8d: ad:f5:78:e1:cc:d7:c0:a1:e1:aa:91:f8:fe:9c:ce: 9f:52:31:b6:72:3c:eb:23:8b:83:ea:76:ee:fb:cd: d9:c2:e8:ca:1c:2b:87:a1:6e:41:76:a1:70:ba:f9: 14:b4:3c:31:2f:44:a9:75:6d:67:b0:86:98:e6:cc: ed:47:4c:3c:27:ef:b0:fe:6f:b1:9c:e2:c0:64:62: 83:e9:d4:39:cd:d3:03:b6:25:03:2d:d8:94:07:54: ca:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:95:7F:87:70:B7:1F:CA:0D:43:6F:7E:C2:89:C5:EC:54:A0:B6:79 X509v3 Authority Key Identifier: keyid:73:75:82:EC:4E:8F:E3:9D:F4:2C:0D:C2:29:BA:37:D1:B6:B3:86:5A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917F4A6/3B67AD8E63B711F088DDF365C4F9AE02/c3WC7E6P4530LA3CKbo30bazhlo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c3WC7E6P4530LA3CKbo30bazhlo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917F4A6/3B67AD8E63B711F088DDF365C4F9AE02/c3WC7E6P4530LA3CKbo30bazhlo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b2:f3:1c:32:1b:56:ef:d1:6c:d6:5d:1e:ff:1c:38:b5:f8:d2: 66:56:31:17:25:90:13:d8:3b:53:23:f2:2f:08:1c:93:b6:9d: b0:3a:74:8b:c0:23:6b:c6:df:ae:04:23:5f:5d:0d:3f:d3:f2: f6:e3:ff:ad:b6:10:eb:23:56:60:c2:45:7b:90:6d:f2:79:b6: bb:8c:b0:99:e7:c3:05:0b:10:0e:b0:91:9e:c8:89:3a:f9:15: cd:83:b4:e2:4d:74:b4:21:c5:94:f4:26:f3:42:dc:a3:76:9a: 13:01:78:21:14:5a:1c:00:b4:86:1b:1d:ac:55:a7:4e:dd:62: 5b:2a:11:96:55:85:39:db:7e:ac:9e:d7:5d:f0:c1:f0:77:e7: 5e:5e:53:f9:88:d5:b6:2a:c1:d0:87:11:ee:30:7c:96:72:a4: 5f:80:ff:96:11:c9:ce:bb:2b:19:96:b4:a3:27:2e:55:c4:01: 5f:42:ef:37:6f:00:e9:90:28:1a:a6:42:70:72:b9:c9:6c:ac: 22:b9:d1:32:99:0f:78:f7:d7:21:23:8a:c9:0a:ba:e1:82:3b: a5:c6:76:97:14:d9:77:fb:e6:7f:67:a5:52:58:1c:e4:11:82: 7c:5c:95:f0:05:9f:00:4a:ca:a6:2d:82:78:20:9b:f4:4b:7b: 07:86:f4:98 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBTTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3 RjRBNjExMC8GA1UEBRMoNzM3NTgyRUM0RThGRTM5REY0MkMwREMyMjlCQTM3RDFC NkIzODY1QTAeFw0yNTExMDMwNzMyNTlaFw0yNTExMTAwNzMyNTlaMBgxFjAUBgNV BAMTDTY5MDg1YWFiLTZjZTYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDTmqEMtsXSc3ANdgx+IhoZ0AD/eA9jEtEM0SaWL4VD103PQkg2B9F9zdx9I5oy n1WZR02uExwlr8wjwso7jrJzalp7811moP9a7m1j3LzFNuXZlp3s0cfB/05PsIpX tZEeRKjiwbxzFncer6AuhpQFQ8DrebfBDGnC8pO1Stptfor5rA2yQU8IZqWD9j/9 xH41R19+cddYg00gbq5aHYH96U7+ja31eOHM18Ch4aqR+P6czp9SMbZyPOsji4Pq du77zdnC6MocK4ehbkF2oXC6+RS0PDEvRKl1bWewhpjmzO1HTDwn77D+b7Gc4sBk YoPp1DnN0wO2JQMt2JQHVMpxAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUc5V/h3C3 H8oNQ29+wonF7FSgtnkwHwYDVR0jBBgwFoAUc3WC7E6P4530LA3CKbo30bazhlow DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTdGNEE2LzNCNjdBRDhFNjNC NzExRjA4OERERjM2NUM0RjlBRTAyL2MzV0M3RTZQNDUzMExBM0NLYm8zMGJhemhs by5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvYzNXQzdFNlA0NTMwTEEzQ0tibzMwYmF6aGxvLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTdG NEE2LzNCNjdBRDhFNjNCNzExRjA4OERERjM2NUM0RjlBRTAyL2MzV0M3RTZQNDUz MExBM0NLYm8zMGJhemhsby5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBALLzHDIbVu/RbNZdHv8cOLX40mZWMRclkBPYO1Mj8i8IHJO2nbA6dIvA I2vG364EI19dDT/T8vbj/622EOsjVmDCRXuQbfJ5truMsJnnwwULEA6wkZ7IiTr5 Fc2DtOJNdLQhxZT0JvNC3KN2mhMBeCEUWhwAtIYbHaxVp07dYlsqEZZVhTnbfqye 113wwfB3515eU/mI1bYqwdCHEe4wfJZypF+A/5YRyc67KxmWtKMnLlXEAV9C7zdv AOmQKBqmQnByuclsrCK50TKZD3j31yEjiskKuuGCO6XGdpcU2Xf75n9npVJYHOQR gnxclfAFnwBKyqYtgnggm/RLeweG9Jg= -----END CERTIFICATE-----Generated at Mon Nov 3 18:07:13 2025 by rpki-client