$ rpki-client -vvf rpki.apnic.net/member_repository/A917877E/389A62D25D5D11F0B49A7847C4F9AE02/bYq2_eUh3BBvlIKStQL9Wgc0g3w.mft File: bYq2_eUh3BBvlIKStQL9Wgc0g3w.mft (raw, json) Hash identifier: vPre8LQZf5ceszRsYdp4nLwaqz6uZ8/KJmguDVGkiHQ= Subject key identifier: 79:1C:B6:E9:F4:AF:94:A0:CB:01:5E:AE:15:D6:EE:0F:DD:04:B8:D9 Authority key identifier: 6D:8A:B6:FD:E5:21:DC:10:6F:94:82:92:B5:02:FD:5A:07:34:83:7C Certificate issuer: /CN=A917877E/serialNumber=6D8AB6FDE521DC106F948292B502FD5A0734837C Certificate serial: 3F Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/bYq2_eUh3BBvlIKStQL9Wgc0g3w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917877E/389A62D25D5D11F0B49A7847C4F9AE02/bYq2_eUh3BBvlIKStQL9Wgc0g3w.mft Manifest number: 3E Signing time: Mon 03 Nov 2025 07:27:46 +0000 Manifest this update: Mon 03 Nov 2025 07:27:46 +0000 Manifest next update: Mon 10 Nov 2025 07:27:46 +0000 Files and hashes: 1: bYq2_eUh3BBvlIKStQL9Wgc0g3w.crl (hash: pWi6frovqYJpWegbnxutdE3oNVA4znodAVGDcB2Xugo=) 2: 9EA96DF25D5D11F08A574048C4F9AE02.roa (hash: q6ZblRMV0uyhkappWvL+RGy5XexsiemwGej/lfgL9RI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917877E/389A62D25D5D11F0B49A7847C4F9AE02/bYq2_eUh3BBvlIKStQL9Wgc0g3w.crl rsync://rpki.apnic.net/member_repository/A917877E/389A62D25D5D11F0B49A7847C4F9AE02/bYq2_eUh3BBvlIKStQL9Wgc0g3w.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/bYq2_eUh3BBvlIKStQL9Wgc0g3w.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 07:27:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 63 (0x3f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917877E, serialNumber=6D8AB6FDE521DC106F948292B502FD5A0734837C Validity Not Before: Nov 3 07:27:46 2025 GMT Not After : Nov 10 07:27:46 2025 GMT Subject: CN=69085972-7678 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:b4:b0:01:c6:69:ea:ea:00:45:af:ad:1e:ad: 88:8b:e6:c2:99:92:09:46:7c:0d:29:73:94:9d:d0: 4d:5d:69:36:6c:51:62:a6:dc:49:3b:73:06:4f:08: 78:6e:cf:7d:8e:48:91:fa:90:cc:35:cc:c0:1a:08: c5:66:2e:79:45:68:cb:70:d8:3f:bf:dc:cb:99:18: e6:f5:5f:7c:67:f5:8a:79:b0:fb:1e:c0:c6:47:41: 94:de:5b:52:99:a9:e9:1b:10:bb:ae:48:a5:b2:7a: 28:f0:6c:a8:88:2e:83:63:4b:c2:5a:aa:c2:44:77: ed:77:a5:d1:10:cb:bc:13:b1:16:bf:1d:29:e1:0b: 26:5a:65:b3:24:77:38:a3:a3:6a:75:51:af:c0:86: 53:41:2e:fa:d7:34:fe:4e:82:58:54:f2:1b:c1:1d: 98:0c:fb:39:4c:92:b4:89:13:4d:01:1b:b9:26:46: bc:59:43:e2:44:7f:e9:ca:01:22:81:64:94:8e:dd: 43:04:d4:cc:5d:f0:62:10:a9:d9:76:59:8a:9f:27: 9d:0b:88:5c:d2:57:53:9a:0a:57:53:09:fb:04:3b: 8e:12:95:08:60:62:88:1c:b9:3d:f2:94:23:c0:47: 63:fe:a8:f6:c8:87:9d:ae:b4:98:df:84:47:91:93: a2:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:1C:B6:E9:F4:AF:94:A0:CB:01:5E:AE:15:D6:EE:0F:DD:04:B8:D9 X509v3 Authority Key Identifier: keyid:6D:8A:B6:FD:E5:21:DC:10:6F:94:82:92:B5:02:FD:5A:07:34:83:7C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917877E/389A62D25D5D11F0B49A7847C4F9AE02/bYq2_eUh3BBvlIKStQL9Wgc0g3w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/bYq2_eUh3BBvlIKStQL9Wgc0g3w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917877E/389A62D25D5D11F0B49A7847C4F9AE02/bYq2_eUh3BBvlIKStQL9Wgc0g3w.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0b:f3:2a:c2:3e:85:d6:bc:29:72:d2:f3:d4:7d:ea:94:9d:19: 1a:5b:1c:2c:03:62:93:d4:91:76:b1:47:a6:3a:3a:6e:18:8e: c3:1e:b3:a0:81:fb:eb:a6:c1:71:be:37:4c:1d:ba:ca:e1:81: ae:f3:0a:74:19:ed:65:f2:0f:d0:4d:1f:73:c5:1b:b2:d8:0c: b3:25:0d:58:9f:1f:0e:88:5d:02:88:63:9c:79:cc:39:32:a2: 7c:12:95:ed:c7:73:a7:37:5f:60:6a:7b:0d:5b:3d:49:9c:dd: de:cb:64:78:dd:69:4b:9e:b3:22:3f:a7:0d:e9:3a:8d:25:84: 76:61:db:80:ac:14:09:e3:8f:b2:8b:65:ff:18:68:53:3d:2c: 13:69:02:a4:f9:fc:8a:7e:52:e0:a7:6b:f6:e4:71:77:31:f6: 61:9e:b0:24:fa:40:ab:86:a7:3d:2c:ce:7e:fc:a5:74:d8:ef: 23:5a:44:c6:21:c1:43:1f:15:bf:fa:e2:5b:8a:ae:aa:af:ff: 5f:4e:24:fd:79:35:4e:63:e2:d2:8c:83:c9:33:95:23:d7:d3: 28:0f:26:83:99:90:fb:4e:6b:19:e1:f2:b0:16:55:08:71:2f: 60:cd:da:89:c4:25:8d:47:ae:f9:3d:73:73:12:17:b0:d4:3e: 07:4e:7f:da -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBPzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3 ODc3RTExMC8GA1UEBRMoNkQ4QUI2RkRFNTIxREMxMDZGOTQ4MjkyQjUwMkZENUEw NzM0ODM3QzAeFw0yNTExMDMwNzI3NDZaFw0yNTExMTAwNzI3NDZaMBgxFjAUBgNV BAMTDTY5MDg1OTcyLTc2NzgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDOtLABxmnq6gBFr60erYiL5sKZkglGfA0pc5Sd0E1daTZsUWKm3Ek7cwZPCHhu z32OSJH6kMw1zMAaCMVmLnlFaMtw2D+/3MuZGOb1X3xn9Yp5sPsewMZHQZTeW1KZ qekbELuuSKWyeijwbKiILoNjS8JaqsJEd+13pdEQy7wTsRa/HSnhCyZaZbMkdzij o2p1Ua/AhlNBLvrXNP5OglhU8hvBHZgM+zlMkrSJE00BG7kmRrxZQ+JEf+nKASKB ZJSO3UME1Mxd8GIQqdl2WYqfJ50LiFzSV1OaCldTCfsEO44SlQhgYogcuT3ylCPA R2P+qPbIh52utJjfhEeRk6JzAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUeRy26fSv lKDLAV6uFdbuD90EuNkwHwYDVR0jBBgwFoAUbYq2/eUh3BBvlIKStQL9Wgc0g3ww DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTc4NzdFLzM4OUE2MkQyNUQ1 RDExRjBCNDlBNzg0N0M0RjlBRTAyL2JZcTJfZVVoM0JCdmxJS1N0UUw5V2djMGcz dy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvYllxMl9lVWgzQkJ2bElLU3RRTDlXZ2MwZzN3LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTc4 NzdFLzM4OUE2MkQyNUQ1RDExRjBCNDlBNzg0N0M0RjlBRTAyL2JZcTJfZVVoM0JC dmxJS1N0UUw5V2djMGczdy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAAvzKsI+hda8KXLS89R96pSdGRpbHCwDYpPUkXaxR6Y6Om4YjsMes6CB ++umwXG+N0wdusrhga7zCnQZ7WXyD9BNH3PFG7LYDLMlDVifHw6IXQKIY5x5zDky onwSle3Hc6c3X2Bqew1bPUmc3d7LZHjdaUuesyI/pw3pOo0lhHZh24CsFAnjj7KL Zf8YaFM9LBNpAqT5/Ip+UuCna/bkcXcx9mGesCT6QKuGpz0szn78pXTY7yNaRMYh wUMfFb/64luKrqqv/19OJP15NU5j4tKMg8kzlSPX0ygPJoOZkPtOaxnh8rAWVQhx L2DN2onEJY1Hrvk9c3MSF7DUPgdOf9o= -----END CERTIFICATE-----Generated at Wed Nov 5 05:15:42 2025 by rpki-client