$ rpki-client -vvf rpki.apnic.net/member_repository/A913B4BE/78BD3224CCF711EE9E89D67AC4F9AE02/3TbkXHHT2Ss80actX1qzJbNGrco.mft File: 3TbkXHHT2Ss80actX1qzJbNGrco.mft (raw, json) Hash identifier: /Gmz3PKZ0MBYy4D4sa2YoEN4vWh8Fd8fsDaW97fnmh4= Subject key identifier: 82:08:17:6C:4A:62:28:A5:40:79:9B:41:9D:49:C8:04:50:5C:93:21 Authority key identifier: DD:36:E4:5C:71:D3:D9:2B:3C:D1:A7:2D:5F:5A:B3:25:B3:46:AD:CA Certificate issuer: /CN=A913B4BE/serialNumber=DD36E45C71D3D92B3CD1A72D5F5AB325B346ADCA Certificate serial: 0144 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3TbkXHHT2Ss80actX1qzJbNGrco.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913B4BE/78BD3224CCF711EE9E89D67AC4F9AE02/3TbkXHHT2Ss80actX1qzJbNGrco.mft Manifest number: 0141 Signing time: Mon 03 Nov 2025 04:23:16 +0000 Manifest this update: Mon 03 Nov 2025 04:23:15 +0000 Manifest next update: Mon 10 Nov 2025 04:23:15 +0000 Files and hashes: 1: 3TbkXHHT2Ss80actX1qzJbNGrco.crl (hash: xTzYj+0Bq7TCwG7yhrKrskmh4aXV0Tb4QtE9Lpk22U0=) 2: 89D7E6869E9211EF8726F76AC4F9AE02.roa (hash: 1uxD9+JBsmHAELgtODtowZ9H7bGY5PrdUNrrDTftS4k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913B4BE/78BD3224CCF711EE9E89D67AC4F9AE02/3TbkXHHT2Ss80actX1qzJbNGrco.crl rsync://rpki.apnic.net/member_repository/A913B4BE/78BD3224CCF711EE9E89D67AC4F9AE02/3TbkXHHT2Ss80actX1qzJbNGrco.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3TbkXHHT2Ss80actX1qzJbNGrco.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 04:23:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 324 (0x144) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913B4BE, serialNumber=DD36E45C71D3D92B3CD1A72D5F5AB325B346ADCA Validity Not Before: Nov 3 04:23:15 2025 GMT Not After : Nov 10 04:23:15 2025 GMT Subject: CN=69082e33-7e29 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:89:a2:f4:60:3e:36:cc:15:91:60:7c:23:fe: bd:2c:a8:1b:b1:ef:f5:f5:73:58:ee:e6:35:3e:6a: e7:bd:9f:94:0f:bb:8b:38:14:f1:33:1d:0d:bf:f8: cd:1b:6d:ea:4c:e2:82:3e:b4:10:4a:72:98:3a:54: d9:d6:08:cf:79:1f:5d:57:f4:ba:46:c3:8b:b6:84: ea:dc:53:47:b6:a2:45:81:75:f7:66:82:cb:18:90: 04:6c:67:15:ad:54:a6:66:55:a5:ef:f9:f0:c8:fb: e4:83:9b:56:f7:2a:55:a4:2f:69:eb:3f:f1:36:fa: 6b:8b:f5:d9:3e:da:ae:c3:62:b0:3d:40:98:cf:8c: be:05:57:00:5b:dc:50:3a:d3:7e:90:29:35:08:fa: 37:f4:77:c9:a3:31:72:36:76:ea:c2:ae:0b:aa:44: 40:3b:e8:17:94:30:33:60:d2:3e:6e:b1:67:4e:e3: ef:ab:1f:08:74:c3:c4:d8:50:70:7d:1e:af:c4:c9: 5a:8a:cf:c7:49:3d:1c:07:c1:74:bf:ad:78:42:90: 20:9f:ae:22:93:ae:78:d3:0e:b1:e5:da:c9:02:e0: 26:86:0c:16:2f:15:d1:ef:3e:f0:28:b5:12:2a:c0: fa:47:eb:a4:16:ed:7a:5c:0f:72:3c:e0:b9:be:7d: db:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:08:17:6C:4A:62:28:A5:40:79:9B:41:9D:49:C8:04:50:5C:93:21 X509v3 Authority Key Identifier: keyid:DD:36:E4:5C:71:D3:D9:2B:3C:D1:A7:2D:5F:5A:B3:25:B3:46:AD:CA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913B4BE/78BD3224CCF711EE9E89D67AC4F9AE02/3TbkXHHT2Ss80actX1qzJbNGrco.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3TbkXHHT2Ss80actX1qzJbNGrco.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913B4BE/78BD3224CCF711EE9E89D67AC4F9AE02/3TbkXHHT2Ss80actX1qzJbNGrco.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 03:7c:6e:9d:c5:c2:00:41:6c:45:e8:bd:49:07:35:39:77:01: cf:5a:55:6f:f3:0d:0d:84:ca:4b:e4:db:e3:e8:f0:af:63:da: 20:de:37:5c:10:7d:d7:d7:85:bb:e7:b8:50:b0:4c:af:4e:91: 92:4a:3b:60:b3:69:c7:0e:5c:50:a0:73:61:5d:8d:d8:44:79: c2:8c:eb:b7:88:d6:6e:9c:f6:28:46:46:fc:5c:66:d5:2d:83: 85:cb:67:db:5e:53:c0:63:0c:83:f4:ed:25:38:a9:62:d4:10: 3b:0d:44:e8:58:4e:9c:be:45:c8:1a:f6:22:16:40:d6:30:bb: e0:42:33:42:85:8f:29:5e:fe:33:22:e2:7b:8c:13:24:32:63: a0:63:a5:00:7f:17:22:7f:c7:7c:c7:40:9f:99:54:ae:f8:29: d8:c0:f5:b6:5a:af:61:c4:be:20:2d:25:2f:81:af:7f:6a:ca: 86:87:38:5b:c1:23:02:b2:c1:df:90:c4:42:c4:d9:d9:11:43: 13:41:2e:e7:e3:9c:80:ad:b1:60:51:a8:df:0f:0c:2d:c5:f2: 73:46:d6:6c:85:de:7f:ef:10:50:90:98:ac:4a:5e:46:02:ed: 38:5b:30:06:29:6e:de:bb:8b:2a:b3:1d:f7:1b:f8:16:5e:89: a1:e1:3b:f9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAUQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0I0QkUxMTAvBgNVBAUTKEREMzZFNDVDNzFEM0Q5MkIzQ0QxQTcyRDVGNUFCMzI1 QjM0NkFEQ0EwHhcNMjUxMTAzMDQyMzE1WhcNMjUxMTEwMDQyMzE1WjAYMRYwFAYD VQQDEw02OTA4MmUzMy03ZTI5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAt4mi9GA+NswVkWB8I/69LKgbse/19XNY7uY1PmrnvZ+UD7uLOBTxMx0Nv/jN G23qTOKCPrQQSnKYOlTZ1gjPeR9dV/S6RsOLtoTq3FNHtqJFgXX3ZoLLGJAEbGcV rVSmZlWl7/nwyPvkg5tW9ypVpC9p6z/xNvpri/XZPtquw2KwPUCYz4y+BVcAW9xQ OtN+kCk1CPo39HfJozFyNnbqwq4LqkRAO+gXlDAzYNI+brFnTuPvqx8IdMPE2FBw fR6vxMlais/HST0cB8F0v614QpAgn64ik6540w6x5drJAuAmhgwWLxXR7z7wKLUS KsD6R+ukFu16XA9yPOC5vn3bJwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIIIF2xK YiilQHmbQZ1JyARQXJMhMB8GA1UdIwQYMBaAFN025Fxx09krPNGnLV9asyWzRq3K MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzQjRCRS83OEJEMzIyNEND RjcxMUVFOUU4OUQ2N0FDNEY5QUUwMi8zVGJrWEhIVDJTczgwYWN0WDFxekpiTkdy Y28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzNUYmtYSEhUMlNzODBhY3RYMXF6SmJOR3Jjby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz QjRCRS83OEJEMzIyNENDRjcxMUVFOUU4OUQ2N0FDNEY5QUUwMi8zVGJrWEhIVDJT czgwYWN0WDFxekpiTkdyY28ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQADfG6dxcIAQWxF6L1JBzU5dwHPWlVv8w0NhMpL5Nvj6PCvY9og3jdc EH3X14W757hQsEyvTpGSSjtgs2nHDlxQoHNhXY3YRHnCjOu3iNZunPYoRkb8XGbV LYOFy2fbXlPAYwyD9O0lOKli1BA7DUToWE6cvkXIGvYiFkDWMLvgQjNChY8pXv4z IuJ7jBMkMmOgY6UAfxcif8d8x0CfmVSu+CnYwPW2Wq9hxL4gLSUvga9/asqGhzhb wSMCssHfkMRCxNnZEUMTQS7n45yArbFgUajfDwwtxfJzRtZshd5/7xBQkJisSl5G Au04WzAGKW7eu4sqsx33G/gWXomh4Tv5 -----END CERTIFICATE-----Generated at Tue Nov 4 21:36:15 2025 by rpki-client