$ rpki-client -vvf rpki.apnic.net/member_repository/A917AB94/D2BF6B72FB8711EC972BCE13C4F9AE02/PT7k4FXE4PH9Wxe83wXZ-FLPBbw.mft File: PT7k4FXE4PH9Wxe83wXZ-FLPBbw.mft (raw, json) Hash identifier: Slw/1CP3AC9BjuEqUHMKA81pxOWVqNa+zfWYHAqqxPo= Subject key identifier: E2:34:7E:DB:7D:FC:EE:F4:EE:00:67:D5:A2:D2:7E:13:A6:1C:2F:96 Authority key identifier: 3D:3E:E4:E0:55:C4:E0:F1:FD:5B:17:BC:DF:05:D9:F8:52:CF:05:BC Certificate issuer: /CN=A917AB94/serialNumber=3D3EE4E055C4E0F1FD5B17BCDF05D9F852CF05BC Certificate serial: 0300 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PT7k4FXE4PH9Wxe83wXZ-FLPBbw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917AB94/D2BF6B72FB8711EC972BCE13C4F9AE02/PT7k4FXE4PH9Wxe83wXZ-FLPBbw.mft Manifest number: 02FA Signing time: Mon 03 Nov 2025 01:10:38 +0000 Manifest this update: Mon 03 Nov 2025 01:10:37 +0000 Manifest next update: Mon 10 Nov 2025 01:10:37 +0000 Files and hashes: 1: PT7k4FXE4PH9Wxe83wXZ-FLPBbw.crl (hash: EvqkiaNpJUZImhoQ+sboUh9kIlKtndAjLcr8PwDgKVE=) 2: 865AA3E400FC11EDAA69A61DC4F9AE02.roa (hash: lRZm7R1XzhUUnYkMhnYwCmY95i90cE75koEdjvOdBVc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917AB94/D2BF6B72FB8711EC972BCE13C4F9AE02/PT7k4FXE4PH9Wxe83wXZ-FLPBbw.crl rsync://rpki.apnic.net/member_repository/A917AB94/D2BF6B72FB8711EC972BCE13C4F9AE02/PT7k4FXE4PH9Wxe83wXZ-FLPBbw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PT7k4FXE4PH9Wxe83wXZ-FLPBbw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 01:10:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 768 (0x300) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917AB94, serialNumber=3D3EE4E055C4E0F1FD5B17BCDF05D9F852CF05BC Validity Not Before: Nov 3 01:10:37 2025 GMT Not After : Nov 10 01:10:37 2025 GMT Subject: CN=6908010e-f85b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:ba:4b:ab:7b:19:d5:19:82:cc:76:96:33:83: 97:4f:1e:8d:2b:94:cb:63:30:c8:96:80:11:04:13: f7:f4:4a:2e:ae:64:03:2d:27:5f:92:cd:30:1c:ef: 5f:1f:0e:56:22:6f:43:fd:b2:86:7a:14:e6:ca:37: 45:d0:03:ad:10:15:ce:7f:62:29:41:fa:21:2f:17: 09:b4:56:f1:47:76:90:e7:30:f8:da:06:4e:27:8f: ea:3c:a2:27:cd:88:c1:d1:86:28:b9:f6:7a:fb:f2: 95:3b:10:53:fe:a4:87:9f:2c:70:11:6f:3b:b4:2e: a2:1d:fa:c3:d6:d6:62:0a:91:43:f2:cf:e0:8c:d4: d7:58:97:fd:fc:38:3f:60:d9:c9:d9:d7:be:e0:3a: 2f:12:51:1d:d6:10:78:a2:be:30:99:40:23:14:94: 14:bf:16:57:91:7f:19:b7:be:b9:83:64:39:41:7a: c2:22:0a:25:c1:50:48:38:d5:7f:49:d9:e7:2a:3a: 6b:dc:ee:21:2a:b2:df:fc:ed:3b:c5:2d:67:47:78: 15:6c:5f:0b:82:26:56:2b:6c:21:e9:60:05:95:71: 6c:30:61:15:dd:5b:d6:8e:67:b5:e3:b7:80:2f:55: 71:65:8f:72:0c:bd:4f:3c:3b:55:15:a3:f7:73:9b: fc:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:34:7E:DB:7D:FC:EE:F4:EE:00:67:D5:A2:D2:7E:13:A6:1C:2F:96 X509v3 Authority Key Identifier: keyid:3D:3E:E4:E0:55:C4:E0:F1:FD:5B:17:BC:DF:05:D9:F8:52:CF:05:BC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917AB94/D2BF6B72FB8711EC972BCE13C4F9AE02/PT7k4FXE4PH9Wxe83wXZ-FLPBbw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PT7k4FXE4PH9Wxe83wXZ-FLPBbw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917AB94/D2BF6B72FB8711EC972BCE13C4F9AE02/PT7k4FXE4PH9Wxe83wXZ-FLPBbw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 68:fa:c4:de:49:ce:6e:7f:41:76:38:68:d0:87:23:05:e0:27: 41:7c:c8:86:b1:81:92:b8:b6:31:69:c1:db:f7:31:b2:a1:38: b3:b2:f8:20:89:97:e4:d3:46:28:cd:e1:ef:bd:d3:07:64:21: eb:a0:d1:5b:98:6d:50:01:d0:78:92:44:4f:23:17:52:07:e9: f8:76:19:18:cd:65:3f:1f:6c:81:be:56:0e:bb:26:90:fc:cc: ed:d3:5d:7c:62:be:ec:94:11:67:1d:fe:a0:94:48:0e:a8:91: d5:80:f7:5d:d8:fa:52:5e:07:0d:2e:95:73:dc:2a:85:f6:20: e4:46:d2:7f:2e:34:a4:e4:45:f5:71:b1:d5:b0:80:cf:7d:53: f0:a7:64:c4:60:a4:95:cc:78:b6:2a:67:01:99:ca:b1:f1:6c: 29:fa:49:0d:4f:57:02:c6:1d:b2:7e:bb:fe:8a:1e:97:fd:fc: 58:77:39:03:0f:b0:a3:25:ef:dc:86:6f:f2:85:9d:d0:e1:e5: 89:bc:a9:29:56:d2:87:25:97:40:ee:f2:20:fc:41:d7:b0:e2: 72:4f:4c:84:69:bb:bf:39:e6:d4:0b:c3:90:3d:3d:45:cd:9c: 88:18:11:3f:79:e6:9e:b9:17:12:15:2c:f8:aa:23:85:6f:97: 03:d1:3c:fa -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAwAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0FCOTQxMTAvBgNVBAUTKDNEM0VFNEUwNTVDNEUwRjFGRDVCMTdCQ0RGMDVEOUY4 NTJDRjA1QkMwHhcNMjUxMTAzMDExMDM3WhcNMjUxMTEwMDExMDM3WjAYMRYwFAYD VQQDEw02OTA4MDEwZS1mODViMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA57pLq3sZ1RmCzHaWM4OXTx6NK5TLYzDIloARBBP39EourmQDLSdfks0wHO9f Hw5WIm9D/bKGehTmyjdF0AOtEBXOf2IpQfohLxcJtFbxR3aQ5zD42gZOJ4/qPKIn zYjB0YYoufZ6+/KVOxBT/qSHnyxwEW87tC6iHfrD1tZiCpFD8s/gjNTXWJf9/Dg/ YNnJ2de+4DovElEd1hB4or4wmUAjFJQUvxZXkX8Zt765g2Q5QXrCIgolwVBIONV/ SdnnKjpr3O4hKrLf/O07xS1nR3gVbF8LgiZWK2wh6WAFlXFsMGEV3VvWjme147eA L1VxZY9yDL1PPDtVFaP3c5v8IQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOI0ftt9 /O707gBn1aLSfhOmHC+WMB8GA1UdIwQYMBaAFD0+5OBVxODx/VsXvN8F2fhSzwW8 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QUI5NC9EMkJGNkI3MkZC ODcxMUVDOTcyQkNFMTNDNEY5QUUwMi9QVDdrNEZYRTRQSDlXeGU4M3dYWi1GTFBC YncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1BUN2s0RlhFNFBIOVd4ZTgzd1haLUZMUEJidy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QUI5NC9EMkJGNkI3MkZCODcxMUVDOTcyQkNFMTNDNEY5QUUwMi9QVDdrNEZYRTRQ SDlXeGU4M3dYWi1GTFBCYncubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBo+sTeSc5uf0F2OGjQhyMF4CdBfMiGsYGSuLYxacHb9zGyoTizsvgg iZfk00YozeHvvdMHZCHroNFbmG1QAdB4kkRPIxdSB+n4dhkYzWU/H2yBvlYOuyaQ /Mzt0118Yr7slBFnHf6glEgOqJHVgPdd2PpSXgcNLpVz3CqF9iDkRtJ/LjSk5EX1 cbHVsIDPfVPwp2TEYKSVzHi2KmcBmcqx8Wwp+kkNT1cCxh2yfrv+ih6X/fxYdzkD D7CjJe/chm/yhZ3Q4eWJvKkpVtKHJZdA7vIg/EHXsOJyT0yEabu/OebUC8OQPT1F zZyIGBE/eeaeuRcSFSz4qiOFb5cD0Tz6 -----END CERTIFICATE-----Generated at Tue Nov 4 19:05:01 2025 by rpki-client