$ rpki-client -vvf rpki.apnic.net/member_repository/A9159309/9891E92E613D11F0B036B836C4F9AE02/fY-gvvau9xvfiDhY9zYZ07WeJ3c.mft File: fY-gvvau9xvfiDhY9zYZ07WeJ3c.mft (raw, json) Hash identifier: 0/RS51bCVu+u7J5/wCJmA6+I3rtnmJUxs7aQcFIICMg= Subject key identifier: CE:FB:3A:CE:F4:BA:5A:4E:5E:DC:38:E0:53:4F:3B:2B:28:4B:EF:11 Authority key identifier: 7D:8F:A0:BE:F6:AE:F7:1B:DF:88:38:58:F7:36:19:D3:B5:9E:27:77 Certificate issuer: /CN=A9159309/serialNumber=7D8FA0BEF6AEF71BDF883858F73619D3B59E2777 Certificate serial: 3D Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fY-gvvau9xvfiDhY9zYZ07WeJ3c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9159309/9891E92E613D11F0B036B836C4F9AE02/fY-gvvau9xvfiDhY9zYZ07WeJ3c.mft Manifest number: 3B Signing time: Mon 03 Nov 2025 07:30:59 +0000 Manifest this update: Mon 03 Nov 2025 07:30:58 +0000 Manifest next update: Mon 10 Nov 2025 07:30:58 +0000 Files and hashes: 1: fY-gvvau9xvfiDhY9zYZ07WeJ3c.crl (hash: HKCM89lKVyQJvTwEfA7eNV8MlUK+/vWIoWtmSWie924=) 2: 21C5B04263A311F096468248C4F9AE02.roa (hash: Xzb62xLJbAMEkevYXMmuNbI1IlT4POMgC4Yy3OA8C7k=) 3: B32DFBA0613E11F0807A9A39C4F9AE02.roa (hash: OVSbJE+Pd0/Klp/U7r6paIfqVvKQjdcHWMz7l5HkgE0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9159309/9891E92E613D11F0B036B836C4F9AE02/fY-gvvau9xvfiDhY9zYZ07WeJ3c.crl rsync://rpki.apnic.net/member_repository/A9159309/9891E92E613D11F0B036B836C4F9AE02/fY-gvvau9xvfiDhY9zYZ07WeJ3c.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fY-gvvau9xvfiDhY9zYZ07WeJ3c.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 07:30:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61 (0x3d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9159309, serialNumber=7D8FA0BEF6AEF71BDF883858F73619D3B59E2777 Validity Not Before: Nov 3 07:30:58 2025 GMT Not After : Nov 10 07:30:58 2025 GMT Subject: CN=69085a32-f1f0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:b5:d1:1e:29:cf:b6:df:34:51:3c:6c:e0:ac: 7d:a1:29:ef:a6:2c:80:b9:35:9e:30:2f:49:ce:95: 7b:f4:b8:e4:a3:c7:40:99:9e:fb:6f:57:80:26:a0: 8a:d6:a9:41:19:81:89:9c:4e:f7:33:40:ec:78:78: 67:81:d6:1f:dc:65:11:c3:ea:09:99:ae:37:5b:0e: 2a:99:dc:ea:71:28:f4:eb:15:f0:9d:5d:15:6c:85: e1:e7:4e:bc:50:ec:6e:d1:20:a2:14:cd:2d:df:3b: 02:8d:fa:4d:9b:f6:1f:c9:8a:b8:59:02:e0:01:6f: bc:59:60:2a:29:b3:55:e4:82:63:f9:ec:75:6f:44: 49:eb:55:89:9a:22:80:90:7b:de:62:d1:9d:2e:33: a5:01:5f:7c:4f:58:56:d9:56:3d:86:9a:0d:af:26: cd:e6:8b:d9:58:01:08:48:24:3a:04:f5:41:42:2a: c3:c7:43:cb:93:24:bc:89:b3:2d:8d:d5:7b:cf:f8: 5b:2e:7b:01:bc:66:b7:41:11:53:a1:fb:26:0a:93: 37:3e:00:f2:85:04:3a:f8:ee:b7:a9:c5:39:ff:c8: 1d:e0:42:25:52:33:34:2b:85:dd:57:7f:52:d5:22: e4:ef:7c:8c:b1:0a:09:7c:95:c7:f3:c8:28:41:e7: a1:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:FB:3A:CE:F4:BA:5A:4E:5E:DC:38:E0:53:4F:3B:2B:28:4B:EF:11 X509v3 Authority Key Identifier: keyid:7D:8F:A0:BE:F6:AE:F7:1B:DF:88:38:58:F7:36:19:D3:B5:9E:27:77 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9159309/9891E92E613D11F0B036B836C4F9AE02/fY-gvvau9xvfiDhY9zYZ07WeJ3c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fY-gvvau9xvfiDhY9zYZ07WeJ3c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9159309/9891E92E613D11F0B036B836C4F9AE02/fY-gvvau9xvfiDhY9zYZ07WeJ3c.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2a:80:65:24:23:24:0b:4b:ae:0b:5f:23:a8:81:a2:74:65:30: 2e:ae:05:8d:12:f3:64:6d:78:28:52:8c:f4:82:85:fd:25:fa: 7c:ac:50:cb:f9:97:5f:84:51:72:1c:b5:bc:65:ba:d0:45:05: 04:bb:68:5d:5b:5e:30:ca:de:49:87:ae:42:19:d5:5d:3e:9e: 66:56:8f:d6:af:76:b8:b2:11:74:d9:fc:6b:9a:30:80:6f:d2: d1:7a:25:58:f3:44:85:ea:e1:71:95:ec:b7:2e:f5:89:c6:db: e5:cb:7a:4f:ad:a0:4e:36:b3:db:92:55:8b:df:b0:c0:be:24: ca:3d:dc:18:3e:16:d4:c5:e9:b3:36:47:2c:0e:5d:51:52:b9: 55:e9:f7:fe:64:27:8e:1d:63:6c:41:8a:53:22:f5:e1:72:6b: 35:ef:46:6b:9d:4a:6d:59:bc:7f:4b:cd:b1:a2:25:0b:e8:8c: 31:3c:a2:5d:fd:72:f1:18:bb:1f:ae:6a:49:78:f7:fd:52:32: a1:af:aa:68:39:bf:3f:0c:88:31:a0:cd:f0:5e:f2:ac:eb:95: 4e:0e:db:ef:7f:f0:b8:04:4c:6b:ef:65:9f:d6:9a:8d:d2:7e: 06:df:d8:ae:4e:c7:1f:3a:c0:3f:70:39:e1:60:8a:89:e5:56: 0d:46:97:ad -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBPTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1 OTMwOTExMC8GA1UEBRMoN0Q4RkEwQkVGNkFFRjcxQkRGODgzODU4RjczNjE5RDNC NTlFMjc3NzAeFw0yNTExMDMwNzMwNThaFw0yNTExMTAwNzMwNThaMBgxFjAUBgNV BAMTDTY5MDg1YTMyLWYxZjAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDEtdEeKc+23zRRPGzgrH2hKe+mLIC5NZ4wL0nOlXv0uOSjx0CZnvtvV4AmoIrW qUEZgYmcTvczQOx4eGeB1h/cZRHD6gmZrjdbDiqZ3OpxKPTrFfCdXRVsheHnTrxQ 7G7RIKIUzS3fOwKN+k2b9h/JirhZAuABb7xZYCops1XkgmP57HVvREnrVYmaIoCQ e95i0Z0uM6UBX3xPWFbZVj2Gmg2vJs3mi9lYAQhIJDoE9UFCKsPHQ8uTJLyJsy2N 1XvP+FsuewG8ZrdBEVOh+yYKkzc+APKFBDr47repxTn/yB3gQiVSMzQrhd1Xf1LV IuTvfIyxCgl8lcfzyChB56GRAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUzvs6zvS6 Wk5e3DjgU087KyhL7xEwHwYDVR0jBBgwFoAUfY+gvvau9xvfiDhY9zYZ07WeJ3cw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTU5MzA5Lzk4OTFFOTJFNjEz RDExRjBCMDM2QjgzNkM0RjlBRTAyL2ZZLWd2dmF1OXh2ZmlEaFk5ellaMDdXZUoz Yy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvZlktZ3Z2YXU5eHZmaURoWTl6WVowN1dlSjNjLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTU5 MzA5Lzk4OTFFOTJFNjEzRDExRjBCMDM2QjgzNkM0RjlBRTAyL2ZZLWd2dmF1OXh2 ZmlEaFk5ellaMDdXZUozYy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBACqAZSQjJAtLrgtfI6iBonRlMC6uBY0S82RteChSjPSChf0l+nysUMv5 l1+EUXIctbxlutBFBQS7aF1bXjDK3kmHrkIZ1V0+nmZWj9avdriyEXTZ/GuaMIBv 0tF6JVjzRIXq4XGV7Lcu9YnG2+XLek+toE42s9uSVYvfsMC+JMo93Bg+FtTF6bM2 RywOXVFSuVXp9/5kJ44dY2xBilMi9eFyazXvRmudSm1ZvH9LzbGiJQvojDE8ol39 cvEYux+uakl49/1SMqGvqmg5vz8MiDGgzfBe8qzrlU4O2+9/8LgETGvvZZ/Wmo3S fgbf2K5Oxx86wD9wOeFgionlVg1Gl60= -----END CERTIFICATE-----Generated at Tue Nov 4 19:03:02 2025 by rpki-client