$ rpki-client -vvf rpki.apnic.net/member_repository/A9149F3E/9A85BB501D8211E2BC6417D708B02CD2/vw5vTuDhfd6MSiS_iX0ZuHqldZ8.mft File: vw5vTuDhfd6MSiS_iX0ZuHqldZ8.mft (raw, json) Hash identifier: uRiCH3Im75xlhOkRtePlplgrcZ9+L7OoPuK2lL7hM+Y= Subject key identifier: BC:A5:8A:F0:F7:A5:F0:27:AA:7A:83:AA:37:02:C6:EC:F8:76:AC:20 Authority key identifier: BF:0E:6F:4E:E0:E1:7D:DE:8C:4A:24:BF:89:7D:19:B8:7A:A5:75:9F Certificate issuer: /CN=A9149F3E/serialNumber=BF0E6F4EE0E17DDE8C4A24BF897D19B87AA5759F Certificate serial: 3551 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vw5vTuDhfd6MSiS_iX0ZuHqldZ8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9149F3E/9A85BB501D8211E2BC6417D708B02CD2/vw5vTuDhfd6MSiS_iX0ZuHqldZ8.mft Manifest number: 351E Signing time: Tue 04 Nov 2025 14:22:20 +0000 Manifest this update: Tue 04 Nov 2025 14:22:19 +0000 Manifest next update: Tue 11 Nov 2025 14:22:19 +0000 Files and hashes: 1: vw5vTuDhfd6MSiS_iX0ZuHqldZ8.crl (hash: ceL9/il/njzcH0fxONU/iYFRoJse2iLkLyDDdQuNDFQ=) 2: 666EE7025B7211EF8C1A8E4EC4F9AE02.roa (hash: yQ9Zz2wr8tjKdfaxVczUpLIfv3iNt/pg9a1JKFuCtos=) 3: 583C86380BB211ED8F05E427C4F9AE02.roa (hash: z0+u6Iw9nBsWkBxEBsOze7XPIpbGqUrpaAbGEfXztn0=) 4: 66EFC4305B7211EF8C1A8E4EC4F9AE02.roa (hash: C0b11kHxUkGRgJNkSLgXVrGvFc4MAtKBux3nfA6wsg8=) 5: AC0031765B6E11EF997EC429C4F9AE02.roa (hash: SUsUIXE/tKa73O2xJJTZ5W41hRd+PFlpRhUTlZjlrnU=) 6: A82F26B0466911F0ACD64867C4F9AE02.roa (hash: kSoWVtHpQDZmqJOLsTM1OyzxMP9B0go+eKmJku7wZ+M=) 7: 30941278EF2011EF9264077FC4F9AE02.roa (hash: xIEk46u13Lcmpz8W5GI7/U4Vwo0brhJQ4NAAEPzEgVA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9149F3E/9A85BB501D8211E2BC6417D708B02CD2/vw5vTuDhfd6MSiS_iX0ZuHqldZ8.crl rsync://rpki.apnic.net/member_repository/A9149F3E/9A85BB501D8211E2BC6417D708B02CD2/vw5vTuDhfd6MSiS_iX0ZuHqldZ8.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vw5vTuDhfd6MSiS_iX0ZuHqldZ8.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 14:22:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13649 (0x3551) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9149F3E, serialNumber=BF0E6F4EE0E17DDE8C4A24BF897D19B87AA5759F Validity Not Before: Nov 4 14:22:19 2025 GMT Not After : Nov 11 14:22:19 2025 GMT Subject: CN=690a0c1b-0829 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:7f:06:03:ac:45:34:14:79:b9:69:70:4b:e7: 4b:61:9d:3c:39:cb:9f:d5:d1:eb:f6:6f:79:e4:3a: e9:77:92:27:f9:ea:23:32:54:72:5a:19:73:48:98: 40:bc:61:d5:9c:3b:90:e0:18:2e:72:e6:64:62:9f: a5:c1:eb:ae:b8:66:5c:fc:2b:a0:a8:58:a1:6e:07: bd:63:41:e5:61:13:32:e0:d9:b2:46:3a:07:4d:ee: 54:1b:b4:fa:82:92:a3:87:e5:dd:3e:ab:9c:21:24: 66:78:c9:5e:a9:04:bf:a3:0d:b8:86:04:ed:9b:7b: b5:a3:7c:a1:7a:cb:b9:d4:58:49:e4:5a:97:cc:a7: cb:36:a5:e1:1d:8d:1c:a3:63:6b:c6:4b:3d:f9:c3: 8b:6c:2b:00:76:3d:be:80:7d:27:24:f0:6a:ba:6b: 05:2f:50:12:d2:fe:ee:e9:e7:3a:d6:00:9a:6a:d2: 59:0f:a5:8a:32:42:5a:07:7d:2e:f2:36:73:92:6d: bd:18:f0:90:f8:e1:83:ef:3e:a6:31:ee:cf:d3:b5: 03:0f:44:53:52:dd:3c:f6:00:e5:2d:ab:b9:3e:83: 1d:58:ef:36:c1:23:60:f7:72:02:b8:a9:e1:b6:40: c5:5c:ee:d8:12:5a:56:c1:e5:d1:1d:f1:68:4b:f3: 81:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:A5:8A:F0:F7:A5:F0:27:AA:7A:83:AA:37:02:C6:EC:F8:76:AC:20 X509v3 Authority Key Identifier: keyid:BF:0E:6F:4E:E0:E1:7D:DE:8C:4A:24:BF:89:7D:19:B8:7A:A5:75:9F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9149F3E/9A85BB501D8211E2BC6417D708B02CD2/vw5vTuDhfd6MSiS_iX0ZuHqldZ8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vw5vTuDhfd6MSiS_iX0ZuHqldZ8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9149F3E/9A85BB501D8211E2BC6417D708B02CD2/vw5vTuDhfd6MSiS_iX0ZuHqldZ8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 03:ab:52:7d:f9:ac:86:69:8f:14:56:c6:23:d9:70:e6:67:17: 64:ce:48:e4:ab:21:b3:20:11:e4:d8:eb:fd:c4:ad:0a:c1:cf: 8c:3a:df:7a:cf:f9:ae:6a:7b:6c:f5:ae:20:4e:50:b8:55:45: 30:75:b5:11:2a:12:56:76:e8:38:76:b1:e5:3e:c5:f5:92:56: 4b:eb:74:be:9a:fa:6d:70:51:33:d1:c6:2c:e8:49:ed:48:6f: 8f:5b:e1:8d:05:ba:b8:cd:23:4d:94:04:b6:cc:3a:54:be:cb: 78:31:7c:aa:bf:4e:32:9e:f9:08:f9:54:09:29:3a:ca:50:70: 48:01:ff:42:1f:5b:dd:0e:c7:cb:a4:9c:cb:3a:81:16:ca:55: c3:7a:ae:20:1f:41:eb:d3:09:5b:d5:cc:31:29:cf:92:ef:36: 25:39:ed:8e:e1:bf:47:2b:62:ca:c4:b9:4b:29:32:21:34:9b: ae:02:7c:71:1c:5d:fa:73:73:b5:0d:93:06:03:5c:5c:15:1f: be:37:54:c4:cf:4e:2f:c2:47:70:57:2f:24:7d:05:f4:3b:a2: 24:71:1a:a1:5f:0d:e3:49:81:7d:9d:38:bc:1f:6d:3b:65:2b: 01:9f:e7:18:72:70:8f:81:0a:97:9c:06:0d:aa:6e:7f:7b:af: 34:45:da:50 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNVEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDlGM0UxMTAvBgNVBAUTKEJGMEU2RjRFRTBFMTdEREU4QzRBMjRCRjg5N0QxOUI4 N0FBNTc1OUYwHhcNMjUxMTA0MTQyMjE5WhcNMjUxMTExMTQyMjE5WjAYMRYwFAYD VQQDEw02OTBhMGMxYi0wODI5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAs38GA6xFNBR5uWlwS+dLYZ08Ocuf1dHr9m955Drpd5In+eojMlRyWhlzSJhA vGHVnDuQ4BgucuZkYp+lweuuuGZc/CugqFihbge9Y0HlYRMy4NmyRjoHTe5UG7T6 gpKjh+XdPqucISRmeMleqQS/ow24hgTtm3u1o3yhesu51FhJ5FqXzKfLNqXhHY0c o2Nrxks9+cOLbCsAdj2+gH0nJPBqumsFL1AS0v7u6ec61gCaatJZD6WKMkJaB30u 8jZzkm29GPCQ+OGD7z6mMe7P07UDD0RTUt089gDlLau5PoMdWO82wSNg93ICuKnh tkDFXO7YElpWweXRHfFoS/OBuwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLylivD3 pfAnqnqDqjcCxuz4dqwgMB8GA1UdIwQYMBaAFL8Ob07g4X3ejEokv4l9Gbh6pXWf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0OUYzRS85QTg1QkI1MDFE ODIxMUUyQkM2NDE3RDcwOEIwMkNEMi92dzV2VHVEaGZkNk1TaVNfaVgwWnVIcWxk WjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3Z3NXZUdURoZmQ2TVNpU19pWDBadUhxbGRaOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 OUYzRS85QTg1QkI1MDFEODIxMUUyQkM2NDE3RDcwOEIwMkNEMi92dzV2VHVEaGZk Nk1TaVNfaVgwWnVIcWxkWjgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQADq1J9+ayGaY8UVsYj2XDmZxdkzkjkqyGzIBHk2Ov9xK0Kwc+MOt96 z/muants9a4gTlC4VUUwdbURKhJWdug4drHlPsX1klZL63S+mvptcFEz0cYs6Ent SG+PW+GNBbq4zSNNlAS2zDpUvst4MXyqv04ynvkI+VQJKTrKUHBIAf9CH1vdDsfL pJzLOoEWylXDeq4gH0Hr0wlb1cwxKc+S7zYlOe2O4b9HK2LKxLlLKTIhNJuuAnxx HF36c3O1DZMGA1xcFR++N1TEz04vwkdwVy8kfQX0O6IkcRqhXw3jSYF9nTi8H207 ZSsBn+cYcnCPgQqXnAYNqm5/e680RdpQ -----END CERTIFICATE-----Generated at Wed Nov 5 12:24:14 2025 by rpki-client