$ rpki-client -vvf rpki.apnic.net/member_repository/A91C9350/3913BCA01D8711E2B42B02DF08B02CD2/z3BtgUfXeSB9ma-a053V8t_lneQ.mft File: z3BtgUfXeSB9ma-a053V8t_lneQ.mft (raw, json) Hash identifier: W5bOVMG/epEASUpK6JMpnfOEElrIVOP/Wa+p2/jnRWM= Subject key identifier: 41:A7:24:49:50:B9:0C:3B:0B:CA:65:65:B9:E9:82:45:D5:22:F9:F0 Authority key identifier: CF:70:6D:81:47:D7:79:20:7D:99:AF:9A:D3:9D:D5:F2:DF:E5:9D:E4 Certificate issuer: /CN=A91C9350/serialNumber=CF706D8147D779207D99AF9AD39DD5F2DFE59DE4 Certificate serial: 34FB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z3BtgUfXeSB9ma-a053V8t_lneQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C9350/3913BCA01D8711E2B42B02DF08B02CD2/z3BtgUfXeSB9ma-a053V8t_lneQ.mft Manifest number: 34DC Signing time: Thu 16 Oct 2025 14:30:56 +0000 Manifest this update: Thu 16 Oct 2025 14:30:55 +0000 Manifest next update: Thu 23 Oct 2025 14:30:55 +0000 Files and hashes: 1: z3BtgUfXeSB9ma-a053V8t_lneQ.crl (hash: u7x+p7cUMw5n4r5GJ05jzzfxub06oF5PtCXEXbrDVh4=) 2: 568554A2493411EF859C1D49C4F9AE02.roa (hash: Y+ojf+2jX3eowe65KYol38ex1Bpsq2OZibivyd0HsaA=) 3: 5547B77E493411EF859C1D49C4F9AE02.roa (hash: coEzJmQszrLxu4ob4mQCm0s5FabKwMGZ0/yHnUumh2Q=) 4: F5BDCB88768A11F081B6114EC4F9AE02.roa (hash: JZDrvt3y2uOvt6jcah8n1eAk+/ZZD32CSv6lmYScC9c=) 5: 56EE653C493411EF859C1D49C4F9AE02.roa (hash: plCjgN7YWhsYH+MwAwVINYh2QSCUYoeRR3x33+0+qnE=) 6: 5761FF06493411EF859C1D49C4F9AE02.roa (hash: nP3RcVP/gbGg6rx+o8wZqZToMdd4Sr+IoSCjwNOdYfA=) 7: F647E58E768A11F081B6114EC4F9AE02.roa (hash: 4tlTWNBTFbCbarJCMOHXFwX1zgwBjmDcHval7E7ErMY=) 8: 55D339CA493411EF859C1D49C4F9AE02.roa (hash: jze2dZZOQnAGOKOQ6Rz+mOGJDCU7Q1dag2aXHfDHrUY=) 9: F550BA02768A11F081B6114EC4F9AE02.roa (hash: +Emh97G4a6MC22cwrisLR6hKm25TYhC5b4mYNP17m7E=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C9350/3913BCA01D8711E2B42B02DF08B02CD2/z3BtgUfXeSB9ma-a053V8t_lneQ.crl rsync://rpki.apnic.net/member_repository/A91C9350/3913BCA01D8711E2B42B02DF08B02CD2/z3BtgUfXeSB9ma-a053V8t_lneQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z3BtgUfXeSB9ma-a053V8t_lneQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Oct 2025 14:30:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13563 (0x34fb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C9350, serialNumber=CF706D8147D779207D99AF9AD39DD5F2DFE59DE4 Validity Not Before: Oct 16 14:30:55 2025 GMT Not After : Oct 23 14:30:55 2025 GMT Subject: CN=68f1019f-ac8a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:24:04:78:d7:49:f1:f7:6d:d4:b9:38:08:20: 91:e8:7f:14:4b:62:a9:99:7a:f8:ec:aa:16:f1:0b: c7:18:eb:33:c1:30:a0:3c:f7:c7:28:64:08:74:8c: 18:f9:a3:73:7e:19:1f:2a:07:bf:dc:44:2d:2c:18: 4d:41:19:ea:a1:a0:ff:a5:01:6e:64:55:38:15:0f: 9d:14:40:5d:f6:b1:2a:ca:4b:bf:31:ef:ec:0c:b6: a0:38:6b:df:8c:e2:80:39:99:ec:f0:ec:fb:21:80: b5:27:8f:81:09:f5:f3:7a:ca:16:03:96:76:73:64: c8:40:82:52:30:b9:d7:41:cb:24:94:7d:e2:1c:e2: 17:c9:89:3d:c2:96:eb:b0:01:52:e8:b9:ee:38:af: 50:e3:4d:0d:d1:a9:0e:fe:46:61:ee:a1:5b:49:e3: ed:6d:aa:9e:97:d9:51:60:54:ea:75:0a:4b:bb:ac: d5:3d:c8:f6:d3:6a:9f:29:6c:2d:0d:7e:ee:41:49: a6:d7:a7:ce:7c:4a:33:1c:0c:31:a1:81:44:dd:0c: 5c:0a:ce:1b:52:0e:9f:5c:dd:0f:3a:9c:76:13:3b: 45:1c:a7:36:d4:d0:25:ad:ee:b8:1f:c5:c8:ee:8c: cf:61:04:60:6d:b8:fc:86:6c:91:98:73:6f:02:bd: 24:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:A7:24:49:50:B9:0C:3B:0B:CA:65:65:B9:E9:82:45:D5:22:F9:F0 X509v3 Authority Key Identifier: keyid:CF:70:6D:81:47:D7:79:20:7D:99:AF:9A:D3:9D:D5:F2:DF:E5:9D:E4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C9350/3913BCA01D8711E2B42B02DF08B02CD2/z3BtgUfXeSB9ma-a053V8t_lneQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z3BtgUfXeSB9ma-a053V8t_lneQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C9350/3913BCA01D8711E2B42B02DF08B02CD2/z3BtgUfXeSB9ma-a053V8t_lneQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3b:77:02:22:4f:98:f8:12:9b:20:6d:6d:b5:b0:70:0d:25:34: 1f:b7:ff:ac:eb:32:1b:67:9a:54:d6:39:35:23:ff:f5:8a:75: a0:e8:1a:0b:43:7a:9d:2a:b2:db:2b:b8:db:ec:26:4b:24:fc: 70:e3:58:21:44:e3:28:b5:62:8c:06:56:77:59:ef:d6:41:19: 00:67:ac:48:40:ab:de:f2:d0:71:93:7d:6e:7d:58:d0:1b:b8: 49:64:f6:27:4a:6e:88:6c:34:57:10:7c:f4:51:b8:dc:fc:43: 77:44:1d:e8:d0:a6:2d:2b:f8:33:d6:74:f3:55:eb:8f:3b:de: ed:a3:a2:5b:db:52:41:80:73:b6:96:5f:e3:58:cb:68:38:87: 37:e1:39:c9:54:31:73:19:b0:e7:25:d9:51:5e:38:bc:f8:fe: d2:7f:25:68:54:7f:4a:3b:67:e3:e7:fe:95:ca:9a:72:9b:5e: d3:03:f9:2a:44:c5:42:d3:8d:9a:a6:d7:dd:d9:01:75:92:e4: f5:86:e8:d4:5a:9d:22:18:c9:df:b4:40:8e:f3:fc:0a:81:07: 75:df:21:14:35:a4:05:53:7c:e3:8c:a1:ee:20:34:c1:7d:5c: 3f:cf:9c:84:2a:99:45:d5:02:63:d5:7d:f3:b7:61:38:84:b5: e7:74:1d:29 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNPswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzkzNTAxMTAvBgNVBAUTKENGNzA2RDgxNDdENzc5MjA3RDk5QUY5QUQzOURENUYy REZFNTlERTQwHhcNMjUxMDE2MTQzMDU1WhcNMjUxMDIzMTQzMDU1WjAYMRYwFAYD VQQDEw02OGYxMDE5Zi1hYzhhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5CQEeNdJ8fdt1Lk4CCCR6H8US2KpmXr47KoW8QvHGOszwTCgPPfHKGQIdIwY +aNzfhkfKge/3EQtLBhNQRnqoaD/pQFuZFU4FQ+dFEBd9rEqyku/Me/sDLagOGvf jOKAOZns8Oz7IYC1J4+BCfXzesoWA5Z2c2TIQIJSMLnXQcsklH3iHOIXyYk9wpbr sAFS6LnuOK9Q400N0akO/kZh7qFbSePtbaqel9lRYFTqdQpLu6zVPcj202qfKWwt DX7uQUmm16fOfEozHAwxoYFE3QxcCs4bUg6fXN0POpx2EztFHKc21NAlre64H8XI 7ozPYQRgbbj8hmyRmHNvAr0kTQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEGnJElQ uQw7C8plZbnpgkXVIvnwMB8GA1UdIwQYMBaAFM9wbYFH13kgfZmvmtOd1fLf5Z3k MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDOTM1MC8zOTEzQkNBMDFE ODcxMUUyQjQyQjAyREYwOEIwMkNEMi96M0J0Z1VmWGVTQjltYS1hMDUzVjh0X2xu ZVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ozQnRnVWZYZVNCOW1hLWEwNTNWOHRfbG5lUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD OTM1MC8zOTEzQkNBMDFEODcxMUUyQjQyQjAyREYwOEIwMkNEMi96M0J0Z1VmWGVT QjltYS1hMDUzVjh0X2xuZVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA7dwIiT5j4EpsgbW21sHANJTQft/+s6zIbZ5pU1jk1I//1inWg6BoL Q3qdKrLbK7jb7CZLJPxw41ghROMotWKMBlZ3We/WQRkAZ6xIQKve8tBxk31ufVjQ G7hJZPYnSm6IbDRXEHz0Ubjc/EN3RB3o0KYtK/gz1nTzVeuPO97to6Jb21JBgHO2 ll/jWMtoOIc34TnJVDFzGbDnJdlRXji8+P7SfyVoVH9KO2fj5/6Vyppym17TA/kq RMVC042aptfd2QF1kuT1hujUWp0iGMnftECO8/wKgQd13yEUNaQFU3zjjKHuIDTB fVw/z5yEKplF1QJj1X3zt2E4hLXndB0p -----END CERTIFICATE-----Generated at Fri Oct 17 20:52:40 2025 by rpki-client