$ rpki-client -vvf rpki.apnic.net/member_repository/A917ACF1/86835506A03911EC8A1F1C23C4F9AE02/7ITWD3lr9Bb4-B0Yutov_4fBXyY.mft File: 7ITWD3lr9Bb4-B0Yutov_4fBXyY.mft (raw, json) Hash identifier: KrV68XGY3fdTdqA2o03pJ2EadHFB4WEkcXfEytHJtis= Subject key identifier: E5:E2:BB:EA:EB:18:C5:68:19:60:6B:AB:95:9F:F4:57:37:60:55:A4 Authority key identifier: EC:84:D6:0F:79:6B:F4:16:F8:F8:1D:18:BA:DA:2F:FF:87:C1:5F:26 Certificate issuer: /CN=A917ACF1/serialNumber=EC84D60F796BF416F8F81D18BADA2FFF87C15F26 Certificate serial: 03E7 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/7ITWD3lr9Bb4-B0Yutov_4fBXyY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917ACF1/86835506A03911EC8A1F1C23C4F9AE02/7ITWD3lr9Bb4-B0Yutov_4fBXyY.mft Manifest number: 03E0 Signing time: Mon 03 Nov 2025 00:33:01 +0000 Manifest this update: Mon 03 Nov 2025 00:33:00 +0000 Manifest next update: Mon 10 Nov 2025 00:33:00 +0000 Files and hashes: 1: 7ITWD3lr9Bb4-B0Yutov_4fBXyY.crl (hash: B33OLRIpruuf27ZxRlxiZDAy/FHYcASRu/Bq1o5y/do=) 2: 5895821AB62611ECB410C81DC4F9AE02.roa (hash: hC/jX3h+m4kRJTL+3r4qE/OapWO5r8a4N2e8hzVBff0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917ACF1/86835506A03911EC8A1F1C23C4F9AE02/7ITWD3lr9Bb4-B0Yutov_4fBXyY.crl rsync://rpki.apnic.net/member_repository/A917ACF1/86835506A03911EC8A1F1C23C4F9AE02/7ITWD3lr9Bb4-B0Yutov_4fBXyY.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/7ITWD3lr9Bb4-B0Yutov_4fBXyY.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 00:33:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 999 (0x3e7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917ACF1, serialNumber=EC84D60F796BF416F8F81D18BADA2FFF87C15F26 Validity Not Before: Nov 3 00:33:00 2025 GMT Not After : Nov 10 00:33:00 2025 GMT Subject: CN=6907f83d-da85 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:b7:1e:d3:7c:60:ec:b8:ba:f4:f7:f9:07:7b: 0c:f8:aa:18:e8:db:bf:61:fd:8e:e5:b8:39:a0:dd: cb:0c:0e:8b:74:61:68:66:45:98:44:d3:58:e1:55: ad:5e:9a:32:83:7e:b8:72:84:a3:29:20:d0:ce:b3: af:f7:0e:71:6c:e3:7e:4e:50:42:5f:6d:42:c5:50: b2:82:be:9c:67:5a:33:35:e3:48:51:0c:b7:8d:75: e0:d4:19:c6:dd:54:29:e5:a5:27:2e:07:ca:e1:9a: 03:e5:5e:6c:91:ea:86:cc:b9:2f:97:9c:1a:8e:97: a7:60:bb:00:06:54:50:d3:c5:49:4e:2d:03:65:b5: 81:21:38:57:ee:d1:d8:e8:cf:fe:99:f5:b1:52:9f: 11:85:bc:ab:fd:dc:cc:2f:71:b7:b6:46:47:38:d2: ea:b4:87:bc:fa:96:91:c5:3a:82:fd:0a:1f:f8:5a: 27:ca:2e:fc:18:48:7b:04:65:5a:ff:b5:23:f3:30: b1:d5:bb:c1:b2:86:47:e5:e4:2a:bd:15:ae:ee:ff: 2f:b1:06:be:2c:dc:c0:79:5f:1c:78:b1:70:95:ff: 05:9a:60:a8:c9:15:5a:91:c2:88:bd:27:e6:85:bc: ca:06:cf:c5:55:6e:c4:97:f1:5b:8a:dc:14:73:fd: 17:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:E2:BB:EA:EB:18:C5:68:19:60:6B:AB:95:9F:F4:57:37:60:55:A4 X509v3 Authority Key Identifier: keyid:EC:84:D6:0F:79:6B:F4:16:F8:F8:1D:18:BA:DA:2F:FF:87:C1:5F:26 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917ACF1/86835506A03911EC8A1F1C23C4F9AE02/7ITWD3lr9Bb4-B0Yutov_4fBXyY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/7ITWD3lr9Bb4-B0Yutov_4fBXyY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917ACF1/86835506A03911EC8A1F1C23C4F9AE02/7ITWD3lr9Bb4-B0Yutov_4fBXyY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 62:d4:95:f7:89:cd:38:e4:44:9a:57:e3:db:1a:23:9d:92:46: 94:5b:ef:de:c4:c7:c3:28:14:1f:0b:1b:c6:fd:e3:8e:64:a4: 06:c7:69:9d:73:64:be:be:d4:31:95:03:5d:9c:c1:1d:d1:8f: 9b:79:9c:c7:df:12:04:10:9a:23:b7:d2:ae:61:b1:fa:6a:9b: 36:09:58:03:4c:31:10:f0:53:e3:bf:e0:e5:ee:9d:40:e6:af: fb:74:66:dc:9f:ed:32:cf:0e:de:e7:6a:0c:c7:55:a8:c4:02: ea:48:29:a9:c7:ef:cd:b5:f6:9c:ae:6d:cd:cc:f5:5c:8b:8e: 41:51:02:c7:5c:db:37:40:06:da:48:73:c3:a3:49:1f:6b:b1: 45:05:46:04:85:f6:5c:ef:ae:c5:a5:7d:41:f6:f2:9c:4d:31: f8:40:2e:03:76:71:90:06:23:20:9b:1a:ba:14:fe:70:39:ed: 99:4f:5b:97:f2:ce:d7:72:4f:d3:d2:ef:02:7a:11:97:69:18: 29:b5:38:e9:8b:46:1d:06:e4:7c:60:2f:c4:26:38:3a:ac:4d: 84:22:4e:42:e7:52:a7:3c:bc:9e:88:90:6c:89:cb:32:9c:11: 05:b1:b2:2c:39:92:c1:d5:2f:56:ad:c8:6a:77:57:7c:9b:d7: 5c:c0:3a:a9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA+cwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0FDRjExMTAvBgNVBAUTKEVDODRENjBGNzk2QkY0MTZGOEY4MUQxOEJBREEyRkZG ODdDMTVGMjYwHhcNMjUxMTAzMDAzMzAwWhcNMjUxMTEwMDAzMzAwWjAYMRYwFAYD VQQDEw02OTA3ZjgzZC1kYTg1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwbce03xg7Li69Pf5B3sM+KoY6Nu/Yf2O5bg5oN3LDA6LdGFoZkWYRNNY4VWt Xpoyg364coSjKSDQzrOv9w5xbON+TlBCX21CxVCygr6cZ1ozNeNIUQy3jXXg1BnG 3VQp5aUnLgfK4ZoD5V5skeqGzLkvl5wajpenYLsABlRQ08VJTi0DZbWBIThX7tHY 6M/+mfWxUp8Rhbyr/dzML3G3tkZHONLqtIe8+paRxTqC/Qof+Fonyi78GEh7BGVa /7Uj8zCx1bvBsoZH5eQqvRWu7v8vsQa+LNzAeV8ceLFwlf8FmmCoyRVakcKIvSfm hbzKBs/FVW7El/FbitwUc/0XCQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOXiu+rr GMVoGWBrq5Wf9Fc3YFWkMB8GA1UdIwQYMBaAFOyE1g95a/QW+PgdGLraL/+HwV8m MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QUNGMS84NjgzNTUwNkEw MzkxMUVDOEExRjFDMjNDNEY5QUUwMi83SVRXRDNscjlCYjQtQjBZdXRvdl80ZkJY eVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzdJVFdEM2xyOUJiNC1CMFl1dG92XzRmQlh5WS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QUNGMS84NjgzNTUwNkEwMzkxMUVDOEExRjFDMjNDNEY5QUUwMi83SVRXRDNscjlC YjQtQjBZdXRvdl80ZkJYeVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBi1JX3ic045ESaV+PbGiOdkkaUW+/exMfDKBQfCxvG/eOOZKQGx2md c2S+vtQxlQNdnMEd0Y+beZzH3xIEEJojt9KuYbH6aps2CVgDTDEQ8FPjv+Dl7p1A 5q/7dGbcn+0yzw7e52oMx1WoxALqSCmpx+/Ntfacrm3NzPVci45BUQLHXNs3QAba SHPDo0kfa7FFBUYEhfZc767FpX1B9vKcTTH4QC4DdnGQBiMgmxq6FP5wOe2ZT1uX 8s7Xck/T0u8CehGXaRgptTjpi0YdBuR8YC/EJjg6rE2EIk5C51KnPLyeiJBsicsy nBEFsbIsOZLB1S9Wrchqd1d8m9dcwDqp -----END CERTIFICATE-----Generated at Tue Nov 4 19:04:21 2025 by rpki-client