$ rpki-client -vvf rpki.apnic.net/member_repository/A9173EFB/738DBFFAB42411EC96728235C4F9AE02/3Y0sg7tKHqnhN3dvzFURBMqyuCM.mft File: 3Y0sg7tKHqnhN3dvzFURBMqyuCM.mft (raw, json) Hash identifier: WWC0IF662oEmyIL4I+ysUAxt/QCMZ59Ixv0VmI4qZYI= Subject key identifier: 69:70:28:7C:3C:8D:83:7D:50:BD:93:C7:01:E3:86:2C:9C:97:9A:42 Authority key identifier: DD:8D:2C:83:BB:4A:1E:A9:E1:37:77:6F:CC:55:11:04:CA:B2:B8:23 Certificate issuer: /CN=A9173EFB/serialNumber=DD8D2C83BB4A1EA9E137776FCC551104CAB2B823 Certificate serial: 03BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3Y0sg7tKHqnhN3dvzFURBMqyuCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9173EFB/738DBFFAB42411EC96728235C4F9AE02/3Y0sg7tKHqnhN3dvzFURBMqyuCM.mft Manifest number: 03AF Signing time: Wed 05 Nov 2025 00:47:58 +0000 Manifest this update: Wed 05 Nov 2025 00:47:58 +0000 Manifest next update: Wed 12 Nov 2025 00:47:58 +0000 Files and hashes: 1: 3Y0sg7tKHqnhN3dvzFURBMqyuCM.crl (hash: hqowX7mvSOX/73Anm/jEz3Cxv0JKZ3lcgAmmvwLKH3Y=) 2: 39F3DCDABBB711EC8B27B129C4F9AE02.roa (hash: VoAVUvu0RGCpHsijS5GqgKUIxTiLWbCjwLzsf95x2lc=) 3: 7618919ABBB411EC91E89B0CC4F9AE02.roa (hash: hUzt8IMEIBlwCzrfPiZDjkxnbLcZAVIhss6xbv6P8Jg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9173EFB/738DBFFAB42411EC96728235C4F9AE02/3Y0sg7tKHqnhN3dvzFURBMqyuCM.crl rsync://rpki.apnic.net/member_repository/A9173EFB/738DBFFAB42411EC96728235C4F9AE02/3Y0sg7tKHqnhN3dvzFURBMqyuCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3Y0sg7tKHqnhN3dvzFURBMqyuCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 00:47:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 954 (0x3ba) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9173EFB, serialNumber=DD8D2C83BB4A1EA9E137776FCC551104CAB2B823 Validity Not Before: Nov 5 00:47:58 2025 GMT Not After : Nov 12 00:47:58 2025 GMT Subject: CN=690a9ebe-f268 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:46:02:be:93:9d:b2:b5:fa:6b:0f:83:17:6b: 23:b6:d1:93:b5:50:3f:8e:d7:3f:58:db:9c:b2:fd: dd:ec:0a:42:09:b6:f5:ed:94:f7:d0:11:6f:95:5e: 1a:c4:ee:b3:46:2a:6a:c2:26:2f:cb:6e:f2:33:47: 49:52:3c:59:c7:9e:26:eb:f7:d6:27:0d:71:ab:18: 73:d8:43:0f:df:b4:a4:cf:04:0e:de:6f:32:0f:83: 2b:c6:ba:7b:f0:0a:a1:9b:fb:b0:8d:87:0d:42:91: 85:e2:a3:39:71:d5:ff:08:f1:08:7f:c1:2d:ef:3e: c9:b7:36:9b:00:7a:01:49:58:28:ba:9a:3a:21:26: ea:6d:1f:55:d2:31:77:f6:44:37:55:36:13:f3:c2: f4:1d:4f:d6:ba:e6:ce:db:1a:1f:15:21:06:01:26: 0c:92:00:80:7e:4b:78:ec:4e:72:6c:a9:3c:e4:00: af:f8:60:99:3c:fa:91:55:db:21:8e:63:e1:bc:11: e9:2d:de:c3:30:e8:46:38:a5:53:cd:e5:8a:0c:b5: fe:04:78:66:aa:8c:d5:a4:ad:62:68:fb:9c:95:e8: 74:ef:16:76:57:01:c3:fa:10:61:1f:56:56:15:bd: ee:be:9c:2a:60:d7:6a:16:59:d1:86:ce:60:5f:03: 0b:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:70:28:7C:3C:8D:83:7D:50:BD:93:C7:01:E3:86:2C:9C:97:9A:42 X509v3 Authority Key Identifier: keyid:DD:8D:2C:83:BB:4A:1E:A9:E1:37:77:6F:CC:55:11:04:CA:B2:B8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9173EFB/738DBFFAB42411EC96728235C4F9AE02/3Y0sg7tKHqnhN3dvzFURBMqyuCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3Y0sg7tKHqnhN3dvzFURBMqyuCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9173EFB/738DBFFAB42411EC96728235C4F9AE02/3Y0sg7tKHqnhN3dvzFURBMqyuCM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 83:7d:8b:55:44:10:97:e7:04:cf:80:94:79:ed:89:00:7a:29: 0b:f2:5b:bf:05:fb:e5:29:09:45:16:d7:98:d3:2b:5a:d4:21: 91:ef:88:35:e5:d2:18:e2:17:71:90:5e:75:9d:1d:3f:e4:a1: bb:19:41:fb:f7:17:b5:86:f7:34:41:27:08:ce:90:72:28:7f: 4e:77:1b:9e:19:28:62:b0:70:74:0f:82:c0:a1:f6:5e:b8:5f: 14:60:a6:dc:cf:87:cf:3c:32:82:3c:96:dc:34:8a:38:73:43: 92:dd:32:d6:fd:7d:75:15:d1:12:dc:00:40:da:03:23:7d:f6: 0a:bc:df:49:90:19:ca:77:c3:1a:27:83:95:dd:e5:71:52:87: 7d:2f:27:27:66:4a:89:e2:56:47:9e:46:48:8c:6e:89:77:1a: 8f:e8:98:a6:9f:78:33:fc:d0:81:90:48:8c:da:e2:8c:18:fe: 13:bd:fd:28:23:8d:55:c1:2b:e0:cc:f5:3c:ac:d6:02:15:c5: b8:3f:26:5e:32:36:a4:42:c3:fe:c5:63:f4:6d:6c:60:96:74: f7:33:91:42:ac:cc:e1:50:10:f1:83:27:ef:80:80:86:c4:e6: 99:8e:84:9b:13:f4:65:2c:9f:6f:23:b0:f8:8d:4e:d6:ff:bc: 5f:8a:d8:e2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA7owDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzNFRkIxMTAvBgNVBAUTKEREOEQyQzgzQkI0QTFFQTlFMTM3Nzc2RkNDNTUxMTA0 Q0FCMkI4MjMwHhcNMjUxMTA1MDA0NzU4WhcNMjUxMTEyMDA0NzU4WjAYMRYwFAYD VQQDEw02OTBhOWViZS1mMjY4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzUYCvpOdsrX6aw+DF2sjttGTtVA/jtc/WNucsv3d7ApCCbb17ZT30BFvlV4a xO6zRipqwiYvy27yM0dJUjxZx54m6/fWJw1xqxhz2EMP37SkzwQO3m8yD4Mrxrp7 8Aqhm/uwjYcNQpGF4qM5cdX/CPEIf8Et7z7JtzabAHoBSVgoupo6ISbqbR9V0jF3 9kQ3VTYT88L0HU/WuubO2xofFSEGASYMkgCAfkt47E5ybKk85ACv+GCZPPqRVdsh jmPhvBHpLd7DMOhGOKVTzeWKDLX+BHhmqozVpK1iaPucleh07xZ2VwHD+hBhH1ZW Fb3uvpwqYNdqFlnRhs5gXwML+wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGlwKHw8 jYN9UL2TxwHjhiycl5pCMB8GA1UdIwQYMBaAFN2NLIO7Sh6p4Td3b8xVEQTKsrgj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3M0VGQi83MzhEQkZGQUI0 MjQxMUVDOTY3MjgyMzVDNEY5QUUwMi8zWTBzZzd0S0hxbmhOM2R2ekZVUkJNcXl1 Q00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzNZMHNnN3RLSHFuaE4zZHZ6RlVSQk1xeXVDTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 M0VGQi83MzhEQkZGQUI0MjQxMUVDOTY3MjgyMzVDNEY5QUUwMi8zWTBzZzd0S0hx bmhOM2R2ekZVUkJNcXl1Q00ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCDfYtVRBCX5wTPgJR57YkAeikL8lu/BfvlKQlFFteY0yta1CGR74g1 5dIY4hdxkF51nR0/5KG7GUH79xe1hvc0QScIzpByKH9OdxueGShisHB0D4LAofZe uF8UYKbcz4fPPDKCPJbcNIo4c0OS3TLW/X11FdES3ABA2gMjffYKvN9JkBnKd8Ma J4OV3eVxUod9LycnZkqJ4lZHnkZIjG6JdxqP6Jimn3gz/NCBkEiM2uKMGP4Tvf0o I41VwSvgzPU8rNYCFcW4PyZeMjakQsP+xWP0bWxglnT3M5FCrMzhUBDxgyfvgICG xOaZjoSbE/RlLJ9vI7D4jU7W/7xfitji -----END CERTIFICATE-----Generated at Wed Nov 5 13:36:36 2025 by rpki-client