$ rpki-client -vvf rpki.apnic.net/member_repository/A914E0B6/5FBE43B4BF3011EEBE4F3C1EC4F9AE02/PsT3XmS3Koh4avS5fJhIbL1tL1Y.mft File: PsT3XmS3Koh4avS5fJhIbL1tL1Y.mft (raw, json) Hash identifier: Q5SR6UaU6qm8zs/fdn+5t4QtkyS6YDdlg2C5JXRR7ss= Subject key identifier: D6:71:CD:E4:74:F5:F5:E3:BC:C2:56:92:85:38:5B:FD:4F:2D:3D:E6 Authority key identifier: 3E:C4:F7:5E:64:B7:2A:88:78:6A:F4:B9:7C:98:48:6C:BD:6D:2F:56 Certificate issuer: /CN=A914E0B6/serialNumber=3EC4F75E64B72A88786AF4B97C98486CBD6D2F56 Certificate serial: 014C Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PsT3XmS3Koh4avS5fJhIbL1tL1Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914E0B6/5FBE43B4BF3011EEBE4F3C1EC4F9AE02/PsT3XmS3Koh4avS5fJhIbL1tL1Y.mft Manifest number: 014A Signing time: Mon 03 Nov 2025 04:17:20 +0000 Manifest this update: Mon 03 Nov 2025 04:17:20 +0000 Manifest next update: Mon 10 Nov 2025 04:17:20 +0000 Files and hashes: 1: PsT3XmS3Koh4avS5fJhIbL1tL1Y.crl (hash: ilnlPFfjox1iV9+B3jGkP6Ih+IwJz7hVATuiEwzdK/0=) 2: 36FC37FABF3111EE886C313CC4F9AE02.roa (hash: yT3Pw8KgyLGtb1vkHoOYSitDAsAc7QcaGePhN0Bj1+M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914E0B6/5FBE43B4BF3011EEBE4F3C1EC4F9AE02/PsT3XmS3Koh4avS5fJhIbL1tL1Y.crl rsync://rpki.apnic.net/member_repository/A914E0B6/5FBE43B4BF3011EEBE4F3C1EC4F9AE02/PsT3XmS3Koh4avS5fJhIbL1tL1Y.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PsT3XmS3Koh4avS5fJhIbL1tL1Y.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 04:17:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 332 (0x14c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914E0B6, serialNumber=3EC4F75E64B72A88786AF4B97C98486CBD6D2F56 Validity Not Before: Nov 3 04:17:20 2025 GMT Not After : Nov 10 04:17:20 2025 GMT Subject: CN=69082cd0-3e3b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:b6:31:a1:26:3f:8b:a3:34:81:5c:f3:e0:6e: 16:20:14:12:fb:b9:a4:ab:d1:3e:b3:69:35:86:19: 84:bc:45:c0:ee:b5:d0:4a:91:4c:dd:e7:b6:1f:ad: b8:01:c6:25:30:9e:24:85:0a:18:0f:aa:cc:a7:e7: 2a:bd:8c:4b:a7:46:ce:eb:80:f9:95:40:77:31:92: f4:34:9d:54:54:6d:6b:cc:ff:d1:4a:fa:f8:2f:5f: 21:ce:52:57:a6:15:41:f1:79:3d:60:8d:22:1f:8e: d3:8d:92:25:83:4d:5f:c4:a0:26:63:1d:d2:69:0d: 97:a9:40:f0:8b:97:96:f4:c7:65:4e:2d:bc:75:73: d7:7f:3f:a9:bb:78:27:59:4e:8b:07:fe:f3:3f:3a: d2:c6:42:b5:4d:fc:10:8b:b8:db:5a:d8:2c:d1:74: 32:cb:a2:79:12:83:fb:2f:f4:c5:34:01:f1:6e:3c: 0c:e9:86:e5:38:22:fb:57:e2:d5:4d:51:2c:33:57: 1f:e4:6e:6b:42:c1:f8:49:92:00:2a:41:08:13:a1: 02:06:6c:d4:b1:8e:44:fe:42:09:20:52:d9:93:33: 83:5a:84:90:76:bd:65:07:bc:83:94:37:76:8a:9b: 35:f3:2b:8a:94:12:d2:4b:fe:c3:39:30:68:90:3a: 97:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:71:CD:E4:74:F5:F5:E3:BC:C2:56:92:85:38:5B:FD:4F:2D:3D:E6 X509v3 Authority Key Identifier: keyid:3E:C4:F7:5E:64:B7:2A:88:78:6A:F4:B9:7C:98:48:6C:BD:6D:2F:56 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914E0B6/5FBE43B4BF3011EEBE4F3C1EC4F9AE02/PsT3XmS3Koh4avS5fJhIbL1tL1Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PsT3XmS3Koh4avS5fJhIbL1tL1Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914E0B6/5FBE43B4BF3011EEBE4F3C1EC4F9AE02/PsT3XmS3Koh4avS5fJhIbL1tL1Y.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 07:05:10:46:f5:f5:2c:5e:8f:71:18:8d:54:7f:d9:24:77:2d: 53:e5:dd:ac:b5:76:21:0d:92:ee:4f:8a:73:55:d4:9a:90:84: 75:57:c9:42:31:8c:2f:e8:45:75:f7:a7:d5:2d:c4:f4:b9:ac: 55:5b:22:29:63:60:8a:8c:f1:42:32:27:c0:fc:9d:c0:ed:29: 22:c0:1f:ad:b4:0d:e1:6e:70:05:d3:5f:a3:6c:c5:52:a8:22: 63:b5:c2:5d:d0:47:b4:e6:ec:77:38:ac:69:59:2a:f5:ea:5b: 1e:b2:ac:7f:eb:62:17:6a:d0:36:7a:8b:f1:61:5c:6a:36:1d: 17:1f:61:f3:f0:04:4a:bd:7f:65:f7:84:73:4d:0d:e8:33:39: 03:76:8b:0e:60:e5:c5:a0:ba:c3:ac:49:14:fe:9c:b8:15:c3: 00:ec:ae:f7:60:eb:52:46:6c:7b:b9:cf:b6:f7:ed:8f:1e:0e: ee:a8:3f:ca:7a:69:e9:31:d8:82:ae:8a:af:29:9d:7b:69:e7: f1:cc:60:9c:18:c2:24:66:33:8f:ff:55:56:c0:78:e6:1d:ec: 65:3c:4e:57:c4:a8:c3:36:8a:29:f6:60:c1:f3:b2:d5:fd:91: af:96:7d:6e:d6:dc:53:40:05:7f:59:ea:d6:96:78:a9:af:25: 30:ad:e9:42 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAUwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEUwQjYxMTAvBgNVBAUTKDNFQzRGNzVFNjRCNzJBODg3ODZBRjRCOTdDOTg0ODZD QkQ2RDJGNTYwHhcNMjUxMTAzMDQxNzIwWhcNMjUxMTEwMDQxNzIwWjAYMRYwFAYD VQQDEw02OTA4MmNkMC0zZTNiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtLYxoSY/i6M0gVzz4G4WIBQS+7mkq9E+s2k1hhmEvEXA7rXQSpFM3ee2H624 AcYlMJ4khQoYD6rMp+cqvYxLp0bO64D5lUB3MZL0NJ1UVG1rzP/RSvr4L18hzlJX phVB8Xk9YI0iH47TjZIlg01fxKAmYx3SaQ2XqUDwi5eW9MdlTi28dXPXfz+pu3gn WU6LB/7zPzrSxkK1TfwQi7jbWtgs0XQyy6J5EoP7L/TFNAHxbjwM6YblOCL7V+LV TVEsM1cf5G5rQsH4SZIAKkEIE6ECBmzUsY5E/kIJIFLZkzODWoSQdr1lB7yDlDd2 ips18yuKlBLSS/7DOTBokDqXPQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNZxzeR0 9fXjvMJWkoU4W/1PLT3mMB8GA1UdIwQYMBaAFD7E915ktyqIeGr0uXyYSGy9bS9W MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RTBCNi81RkJFNDNCNEJG MzAxMUVFQkU0RjNDMUVDNEY5QUUwMi9Qc1QzWG1TM0tvaDRhdlM1ZkpoSWJMMXRM MVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1BzVDNYbVMzS29oNGF2UzVmSmhJYkwxdEwxWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 RTBCNi81RkJFNDNCNEJGMzAxMUVFQkU0RjNDMUVDNEY5QUUwMi9Qc1QzWG1TM0tv aDRhdlM1ZkpoSWJMMXRMMVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAHBRBG9fUsXo9xGI1Uf9kkdy1T5d2stXYhDZLuT4pzVdSakIR1V8lC MYwv6EV196fVLcT0uaxVWyIpY2CKjPFCMifA/J3A7SkiwB+ttA3hbnAF01+jbMVS qCJjtcJd0Ee05ux3OKxpWSr16lsesqx/62IXatA2eovxYVxqNh0XH2Hz8ARKvX9l 94RzTQ3oMzkDdosOYOXFoLrDrEkU/py4FcMA7K73YOtSRmx7uc+29+2PHg7uqD/K emnpMdiCroqvKZ17aefxzGCcGMIkZjOP/1VWwHjmHexlPE5XxKjDNoop9mDB87LV /ZGvln1u1txTQAV/WerWlnipryUwrelC -----END CERTIFICATE-----Generated at Tue Nov 4 21:36:28 2025 by rpki-client