$ rpki-client -vvf rpki.apnic.net/member_repository/A9192A47/15907C22B82111EFAAE6F567C4F9AE02/f3dZIELjyHvlbu2B2cyw6XQCzdc.mft File: f3dZIELjyHvlbu2B2cyw6XQCzdc.mft (raw, json) Hash identifier: UnpvXShTKVPFUWaUhgbUpoPetfBxFavtZ6xTjlv7tCQ= Subject key identifier: 39:42:60:6F:07:22:6D:86:4D:EA:C6:0F:32:82:36:8D:25:B5:05:97 Authority key identifier: 7F:77:59:20:42:E3:C8:7B:E5:6E:ED:81:D9:CC:B0:E9:74:02:CD:D7 Certificate issuer: /CN=A9192A47/serialNumber=7F77592042E3C87BE56EED81D9CCB0E97402CDD7 Certificate serial: AB Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/f3dZIELjyHvlbu2B2cyw6XQCzdc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9192A47/15907C22B82111EFAAE6F567C4F9AE02/f3dZIELjyHvlbu2B2cyw6XQCzdc.mft Manifest number: A8 Signing time: Mon 27 Oct 2025 08:36:00 +0000 Manifest this update: Mon 27 Oct 2025 08:36:00 +0000 Manifest next update: Mon 03 Nov 2025 08:36:00 +0000 Files and hashes: 1: f3dZIELjyHvlbu2B2cyw6XQCzdc.crl (hash: U7rYhanf84T7WWCRvhSoVGk/AIsQPQZ5R6kLXatuze0=) 2: 43631816B82211EFB74FF56BC4F9AE02.roa (hash: 96lGjI+rVLrvfkE2WsUYkz8c8INkPpGaZ8hTU2N39nI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9192A47/15907C22B82111EFAAE6F567C4F9AE02/f3dZIELjyHvlbu2B2cyw6XQCzdc.crl rsync://rpki.apnic.net/member_repository/A9192A47/15907C22B82111EFAAE6F567C4F9AE02/f3dZIELjyHvlbu2B2cyw6XQCzdc.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/f3dZIELjyHvlbu2B2cyw6XQCzdc.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Nov 2025 08:35:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 171 (0xab) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9192A47, serialNumber=7F77592042E3C87BE56EED81D9CCB0E97402CDD7 Validity Not Before: Oct 27 08:36:00 2025 GMT Not After : Nov 3 08:36:00 2025 GMT Subject: CN=68ff2ef0-e661 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:97:f3:13:7c:4e:c2:c8:e7:a4:30:2b:c6:b7: 58:3f:9b:65:6b:70:fd:ff:12:2c:78:1c:3d:8c:2c: ea:7a:97:3d:fb:01:cc:6d:27:79:0d:e0:65:b0:5b: c7:f4:ee:2e:c0:b7:8d:01:b0:ed:44:8b:35:ef:df: df:f3:b4:47:65:79:64:5e:0e:45:db:b7:59:75:d0: 63:a9:19:c3:32:78:fb:37:0c:e6:ea:ed:d6:e6:58: 5f:f6:be:9d:5f:6c:93:e8:b2:7c:e2:1e:5a:5a:65: 5b:58:00:48:b8:9f:20:f1:11:5e:27:ce:39:60:52: 0e:be:e0:73:44:ea:49:23:16:53:21:46:9a:5b:de: 4f:04:d0:0a:71:9b:f7:bf:83:e1:6d:96:73:33:87: e6:2a:88:cd:6b:d8:5e:2d:ee:26:bb:04:42:09:13: c8:c4:b7:e7:b1:d2:47:bc:ef:78:b1:37:57:2f:88: 4e:a7:62:e3:a8:d2:ef:93:90:63:97:08:82:fb:e4: 19:8f:2a:0e:b3:a1:77:de:07:db:0b:ab:6d:7e:9f: 14:62:0b:23:9d:0e:1f:bc:71:03:58:0f:16:6f:ee: 45:ca:0d:a3:95:bd:b8:c4:87:50:4f:52:7b:c5:01: 41:cf:27:c4:5b:18:11:e9:a5:4d:55:73:3d:4e:f4: 49:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:42:60:6F:07:22:6D:86:4D:EA:C6:0F:32:82:36:8D:25:B5:05:97 X509v3 Authority Key Identifier: keyid:7F:77:59:20:42:E3:C8:7B:E5:6E:ED:81:D9:CC:B0:E9:74:02:CD:D7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9192A47/15907C22B82111EFAAE6F567C4F9AE02/f3dZIELjyHvlbu2B2cyw6XQCzdc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/f3dZIELjyHvlbu2B2cyw6XQCzdc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9192A47/15907C22B82111EFAAE6F567C4F9AE02/f3dZIELjyHvlbu2B2cyw6XQCzdc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2b:a1:92:a8:3d:71:e2:3b:b0:af:90:f5:e6:a4:b4:ed:d2:9c: 50:3f:96:bb:fd:26:07:57:3e:b0:50:ac:c5:11:4f:e4:b3:b6: 20:0e:c1:fb:8f:8a:7e:62:af:3a:68:54:d3:b5:5e:37:7e:06: 5d:f5:7b:16:3d:0e:ae:4c:4b:dd:66:63:06:80:71:81:66:85: 90:b6:82:df:f1:37:9c:88:fc:fe:92:97:5b:b4:f7:1b:03:86: c9:17:3e:39:31:a9:89:90:a4:84:52:6c:57:7e:9e:06:96:91: b3:ca:8e:e5:00:82:5c:4f:46:ec:5c:b2:93:64:f1:b3:6f:b4: d2:9e:69:ad:0d:d9:74:61:68:f9:dd:f7:24:a8:a8:65:33:3b: 5a:4e:13:91:77:02:04:64:52:12:f8:d6:b6:a1:99:a0:d8:73: 51:87:1f:5c:72:7a:ef:ec:89:63:c0:ae:78:ee:ad:79:2b:13: d8:3c:b9:ce:d9:4a:bb:4a:c7:96:57:92:4b:ae:8c:c2:5b:31: f3:cd:17:c7:40:b7:31:e0:90:f5:5c:1e:c4:e5:c7:46:ac:39: 66:ae:a7:0b:c5:12:01:49:24:52:e6:ca:7e:ec:8e:4b:97:da: ff:63:0e:01:7b:33:78:e6:12:d0:0b:49:05:a1:10:e9:f6:b9: 81:79:70:e1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAKswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTJBNDcxMTAvBgNVBAUTKDdGNzc1OTIwNDJFM0M4N0JFNTZFRUQ4MUQ5Q0NCMEU5 NzQwMkNERDcwHhcNMjUxMDI3MDgzNjAwWhcNMjUxMTAzMDgzNjAwWjAYMRYwFAYD VQQDEw02OGZmMmVmMC1lNjYxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtJfzE3xOwsjnpDArxrdYP5tla3D9/xIseBw9jCzqepc9+wHMbSd5DeBlsFvH 9O4uwLeNAbDtRIs179/f87RHZXlkXg5F27dZddBjqRnDMnj7Nwzm6u3W5lhf9r6d X2yT6LJ84h5aWmVbWABIuJ8g8RFeJ845YFIOvuBzROpJIxZTIUaaW95PBNAKcZv3 v4PhbZZzM4fmKojNa9heLe4muwRCCRPIxLfnsdJHvO94sTdXL4hOp2LjqNLvk5Bj lwiC++QZjyoOs6F33gfbC6ttfp8UYgsjnQ4fvHEDWA8Wb+5Fyg2jlb24xIdQT1J7 xQFBzyfEWxgR6aVNVXM9TvRJYwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDlCYG8H Im2GTerGDzKCNo0ltQWXMB8GA1UdIwQYMBaAFH93WSBC48h75W7tgdnMsOl0As3X MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MkE0Ny8xNTkwN0MyMkI4 MjExMUVGQUFFNkY1NjdDNEY5QUUwMi9mM2RaSUVManlIdmxidTJCMmN5dzZYUUN6 ZGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyL2YzZFpJRUxqeUh2bGJ1MkIyY3l3NlhRQ3pkYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 MkE0Ny8xNTkwN0MyMkI4MjExMUVGQUFFNkY1NjdDNEY5QUUwMi9mM2RaSUVManlI dmxidTJCMmN5dzZYUUN6ZGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAroZKoPXHiO7CvkPXmpLTt0pxQP5a7/SYHVz6wUKzFEU/ks7YgDsH7 j4p+Yq86aFTTtV43fgZd9XsWPQ6uTEvdZmMGgHGBZoWQtoLf8TeciPz+kpdbtPcb A4bJFz45MamJkKSEUmxXfp4GlpGzyo7lAIJcT0bsXLKTZPGzb7TSnmmtDdl0YWj5 3fckqKhlMztaThORdwIEZFIS+Na2oZmg2HNRhx9ccnrv7IljwK547q15KxPYPLnO 2Uq7SseWV5JLrozCWzHzzRfHQLcx4JD1XB7E5cdGrDlmrqcLxRIBSSRS5sp+7I5L l9r/Yw4BezN45hLQC0kFoRDp9rmBeXDh -----END CERTIFICATE-----Generated at Mon Oct 27 21:45:19 2025 by rpki-client