$ rpki-client -vvf rpki.apnic.net/member_repository/A9148C7B/5BFCFF8CD63011EA940DA039C4F9AE02/f3lmXmO_PNVtwkoKcNV_mpQt0bg.mft File: f3lmXmO_PNVtwkoKcNV_mpQt0bg.mft (raw, json) Hash identifier: avXUsj7MK0P7dryfYnA67TzaTg+08x/ULz7jezg1y54= Subject key identifier: E9:15:08:CF:F2:2A:64:0D:65:95:7E:47:C3:42:1B:BA:AC:90:AC:F8 Authority key identifier: 7F:79:66:5E:63:BF:3C:D5:6D:C2:4A:0A:70:D5:7F:9A:94:2D:D1:B8 Certificate issuer: /CN=A9148C7B/serialNumber=7F79665E63BF3CD56DC24A0A70D57F9A942DD1B8 Certificate serial: 08DB Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/f3lmXmO_PNVtwkoKcNV_mpQt0bg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9148C7B/5BFCFF8CD63011EA940DA039C4F9AE02/f3lmXmO_PNVtwkoKcNV_mpQt0bg.mft Manifest number: 08AB Signing time: Tue 04 Nov 2025 14:49:24 +0000 Manifest this update: Tue 04 Nov 2025 14:49:23 +0000 Manifest next update: Tue 11 Nov 2025 14:49:23 +0000 Files and hashes: 1: f3lmXmO_PNVtwkoKcNV_mpQt0bg.crl (hash: a6UlMigd8QUAoTxPXAM/UzgYE4qboU8EKfLER2pyX6U=) 2: AB20F8C0DD3311EF8B8A711FC4F9AE02.roa (hash: geYBmD1DM/AUXSPUgRalrZ3WyRIJCoCzSg/oC0uheIE=) 3: 0A0B8CF8308911F0A95E944AC4F9AE02.roa (hash: zD1hAOWgfFf8imPdjoaN6Kre5zSjJhCHRQDKqb4UceI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9148C7B/5BFCFF8CD63011EA940DA039C4F9AE02/f3lmXmO_PNVtwkoKcNV_mpQt0bg.crl rsync://rpki.apnic.net/member_repository/A9148C7B/5BFCFF8CD63011EA940DA039C4F9AE02/f3lmXmO_PNVtwkoKcNV_mpQt0bg.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/f3lmXmO_PNVtwkoKcNV_mpQt0bg.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 14:49:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2267 (0x8db) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9148C7B, serialNumber=7F79665E63BF3CD56DC24A0A70D57F9A942DD1B8 Validity Not Before: Nov 4 14:49:23 2025 GMT Not After : Nov 11 14:49:23 2025 GMT Subject: CN=690a1273-1835 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:a5:c5:b9:78:f6:8d:50:5c:c7:fb:27:4b:c1: ff:ce:e2:77:bb:b8:ff:52:45:65:65:db:9f:ce:39: da:bc:d9:d0:84:ad:38:95:b0:46:ae:cc:f8:d3:b0: 87:55:b6:25:7c:2a:0f:57:6d:2c:99:c3:c5:3d:a0: 0e:10:03:c1:d3:09:19:f2:97:74:83:e4:95:63:27: 7e:12:b1:73:85:b7:e7:1e:a6:9b:a4:f9:43:79:06: 36:a1:ee:a7:a4:10:87:97:20:68:51:cc:4c:47:00: d9:d0:3c:76:c8:2d:04:d4:ae:54:87:cd:e3:2c:84: 57:c5:0e:42:b6:64:da:70:7a:f4:7a:df:ed:9e:68: ca:2f:c8:40:b0:45:0e:b8:51:f3:35:0d:69:f4:cf: 9a:a4:cc:a1:1f:16:bb:c2:56:1a:67:9d:13:06:a5: 03:61:a8:59:3e:08:9c:92:57:33:97:69:81:7c:90: 59:d5:e0:58:6a:df:b8:40:26:d8:3d:51:e7:c3:95: 12:0d:94:29:1a:94:1c:97:d4:4f:ff:d0:ff:3e:e7: 93:80:5e:d9:fe:57:c7:97:ab:91:e4:cb:ca:16:2a: 2d:a4:37:27:99:8b:ec:28:7a:63:f1:5b:3a:65:a6: 84:05:1b:50:a6:4e:52:0f:f3:6a:d6:14:95:32:62: 32:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:15:08:CF:F2:2A:64:0D:65:95:7E:47:C3:42:1B:BA:AC:90:AC:F8 X509v3 Authority Key Identifier: keyid:7F:79:66:5E:63:BF:3C:D5:6D:C2:4A:0A:70:D5:7F:9A:94:2D:D1:B8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9148C7B/5BFCFF8CD63011EA940DA039C4F9AE02/f3lmXmO_PNVtwkoKcNV_mpQt0bg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/f3lmXmO_PNVtwkoKcNV_mpQt0bg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9148C7B/5BFCFF8CD63011EA940DA039C4F9AE02/f3lmXmO_PNVtwkoKcNV_mpQt0bg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 52:77:a6:d7:0b:d7:0a:a5:18:a7:30:d2:50:17:6b:ae:4f:5c: e4:bd:bd:f7:5f:d8:d7:d7:0e:91:7b:54:cd:ed:8a:9a:7a:3a: a2:8a:02:e3:ea:a6:b7:ba:0c:bd:ed:42:42:58:04:b1:20:db: 90:84:06:80:8d:f4:b7:7f:f5:6c:61:4e:c2:f9:32:c4:99:65: 66:5e:b6:cc:00:4e:13:21:bb:a0:bc:d7:95:17:62:fd:cf:ef: 72:44:b3:c8:8e:d1:95:85:fa:8c:29:72:42:65:af:2a:3e:80: 4d:e6:a3:35:18:7c:d2:f3:ea:21:f9:92:e8:a4:a8:b2:9a:db: 92:65:c7:23:1b:8e:62:b7:dc:90:f5:4a:d0:80:8b:a3:ef:45: f0:f7:44:42:1e:6e:83:55:c9:e4:9e:cb:1c:e3:da:18:3f:21: 90:4a:9f:c3:80:44:0f:13:dd:d0:c7:52:18:8b:50:e4:2c:d2: 6a:25:6e:0b:fc:6a:ed:6b:c3:c7:a3:39:86:e8:16:2a:cf:3a: e9:16:52:6e:db:88:fd:88:2e:83:9a:7f:e1:f0:b3:0f:b0:12: dd:6f:e1:23:5f:c5:17:03:22:3c:74:77:54:0b:85:44:18:da: ac:40:5c:22:ea:dc:a5:f8:ca:95:a4:4f:0c:eb:40:08:bf:87: 8e:98:b9:59 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCNswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDhDN0IxMTAvBgNVBAUTKDdGNzk2NjVFNjNCRjNDRDU2REMyNEEwQTcwRDU3RjlB OTQyREQxQjgwHhcNMjUxMTA0MTQ0OTIzWhcNMjUxMTExMTQ0OTIzWjAYMRYwFAYD VQQDEw02OTBhMTI3My0xODM1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqKXFuXj2jVBcx/snS8H/zuJ3u7j/UkVlZdufzjnavNnQhK04lbBGrsz407CH VbYlfCoPV20smcPFPaAOEAPB0wkZ8pd0g+SVYyd+ErFzhbfnHqabpPlDeQY2oe6n pBCHlyBoUcxMRwDZ0Dx2yC0E1K5Uh83jLIRXxQ5CtmTacHr0et/tnmjKL8hAsEUO uFHzNQ1p9M+apMyhHxa7wlYaZ50TBqUDYahZPgicklczl2mBfJBZ1eBYat+4QCbY PVHnw5USDZQpGpQcl9RP/9D/PueTgF7Z/lfHl6uR5MvKFiotpDcnmYvsKHpj8Vs6 ZaaEBRtQpk5SD/Nq1hSVMmIy8QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOkVCM/y KmQNZZV+R8NCG7qskKz4MB8GA1UdIwQYMBaAFH95Zl5jvzzVbcJKCnDVf5qULdG4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0OEM3Qi81QkZDRkY4Q0Q2 MzAxMUVBOTQwREEwMzlDNEY5QUUwMi9mM2xtWG1PX1BOVnR3a29LY05WX21wUXQw YmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2YzbG1YbU9fUE5WdHdrb0tjTlZfbXBRdDBiZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 OEM3Qi81QkZDRkY4Q0Q2MzAxMUVBOTQwREEwMzlDNEY5QUUwMi9mM2xtWG1PX1BO VnR3a29LY05WX21wUXQwYmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBSd6bXC9cKpRinMNJQF2uuT1zkvb33X9jX1w6Re1TN7YqaejqiigLj 6qa3ugy97UJCWASxINuQhAaAjfS3f/VsYU7C+TLEmWVmXrbMAE4TIbugvNeVF2L9 z+9yRLPIjtGVhfqMKXJCZa8qPoBN5qM1GHzS8+oh+ZLopKiymtuSZccjG45it9yQ 9UrQgIuj70Xw90RCHm6DVcnknssc49oYPyGQSp/DgEQPE93Qx1IYi1DkLNJqJW4L /Grta8PHozmG6BYqzzrpFlJu24j9iC6Dmn/h8LMPsBLdb+EjX8UXAyI8dHdUC4VE GNqsQFwi6tyl+MqVpE8M60AIv4eOmLlZ -----END CERTIFICATE-----Generated at Tue Nov 4 21:32:55 2025 by rpki-client