$ rpki-client -vvf rpki.apnic.net/member_repository/A917F352/3D9D7F5EA1FB11EEA360925AC4F9AE02/Crfzan3eThH0sBWX3w3nopqAvEQ.mft File: Crfzan3eThH0sBWX3w3nopqAvEQ.mft (raw, json) Hash identifier: tlkokjhumNrfEpCkn5XMEDzPvnQP9yAJ7yBt9OHXKvg= Subject key identifier: 46:1F:AE:F7:04:0B:72:D7:EC:73:77:60:50:42:C5:3F:00:FB:30:BA Authority key identifier: 0A:B7:F3:6A:7D:DE:4E:11:F4:B0:15:97:DF:0D:E7:A2:9A:80:BC:44 Certificate issuer: /CN=A917F352/serialNumber=0AB7F36A7DDE4E11F4B01597DF0DE7A29A80BC44 Certificate serial: 0161 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Crfzan3eThH0sBWX3w3nopqAvEQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917F352/3D9D7F5EA1FB11EEA360925AC4F9AE02/Crfzan3eThH0sBWX3w3nopqAvEQ.mft Manifest number: 015E Signing time: Wed 05 Nov 2025 04:12:58 +0000 Manifest this update: Wed 05 Nov 2025 04:12:58 +0000 Manifest next update: Wed 12 Nov 2025 04:12:58 +0000 Files and hashes: 1: Crfzan3eThH0sBWX3w3nopqAvEQ.crl (hash: XymStYKHEKxBHLYYLsS3YtB47++xla/gLevvdA6NkaQ=) 2: 8FE6CF86A1FB11EE9773325BC4F9AE02.roa (hash: f4bAe1+5wb0cwDVNLjPL2QNz/OBAZDY7LyZRiQiFweU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917F352/3D9D7F5EA1FB11EEA360925AC4F9AE02/Crfzan3eThH0sBWX3w3nopqAvEQ.crl rsync://rpki.apnic.net/member_repository/A917F352/3D9D7F5EA1FB11EEA360925AC4F9AE02/Crfzan3eThH0sBWX3w3nopqAvEQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Crfzan3eThH0sBWX3w3nopqAvEQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 04:12:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 353 (0x161) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917F352, serialNumber=0AB7F36A7DDE4E11F4B01597DF0DE7A29A80BC44 Validity Not Before: Nov 5 04:12:58 2025 GMT Not After : Nov 12 04:12:58 2025 GMT Subject: CN=690aceca-f5f2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:f0:56:82:16:86:6a:5a:94:a8:df:4c:c7:8c: 87:18:12:c5:33:7b:23:1f:89:13:aa:b8:67:0a:1f: 15:8b:29:37:b1:90:38:ae:95:c6:ed:e5:8b:94:54: 47:2a:9c:bb:28:de:12:48:02:3d:1d:e1:26:d5:60: b3:fe:44:fb:aa:07:c3:1d:57:4d:cd:25:11:79:cf: 98:23:58:a7:2d:11:cf:01:46:91:c5:88:65:82:ce: 60:e7:56:db:5e:fb:f1:e0:2c:a1:c5:0e:de:cc:ae: 2d:e5:ee:0a:11:86:82:1b:81:9d:99:be:6a:3d:fb: f1:5e:b3:3e:e3:89:0a:9d:93:67:0e:c2:cf:ea:71: 1f:9a:ac:f6:ae:55:3d:d5:59:ce:db:e3:c5:28:09: 5b:ce:31:2c:17:7c:d4:43:6a:26:68:52:76:62:6f: 7b:41:b6:c0:bb:f7:1e:a5:d3:3b:04:67:cc:a4:e8: ed:3c:5b:e5:d0:7e:31:5c:43:5b:8e:f7:8a:b0:63: ec:9f:1e:8c:63:6e:e1:a2:8b:46:3d:14:1d:10:b8: c8:83:f3:d1:ca:25:6d:7b:f0:62:78:d3:27:5a:d6: 55:87:8a:e1:28:98:27:53:66:1b:bb:03:f9:9b:d2: 70:69:df:52:62:bb:15:be:73:31:ef:a6:6b:20:a3: 00:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:1F:AE:F7:04:0B:72:D7:EC:73:77:60:50:42:C5:3F:00:FB:30:BA X509v3 Authority Key Identifier: keyid:0A:B7:F3:6A:7D:DE:4E:11:F4:B0:15:97:DF:0D:E7:A2:9A:80:BC:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917F352/3D9D7F5EA1FB11EEA360925AC4F9AE02/Crfzan3eThH0sBWX3w3nopqAvEQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Crfzan3eThH0sBWX3w3nopqAvEQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917F352/3D9D7F5EA1FB11EEA360925AC4F9AE02/Crfzan3eThH0sBWX3w3nopqAvEQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 03:90:6e:ec:5e:81:5f:49:a2:be:7a:96:c5:8e:4a:6b:03:63: 0e:79:02:34:e7:61:88:b2:08:b6:cd:ab:fd:b7:30:f1:ad:e2: 35:e8:1c:0f:3f:d5:5d:37:8d:b8:2b:ac:5c:da:f2:2d:d9:53: 31:ee:f5:0b:7b:82:b5:af:c1:04:b3:42:c6:3d:b0:8b:d1:bc: e5:95:bb:17:cd:a5:d3:31:e5:0f:83:40:7e:e8:4e:df:05:4d: f3:25:7b:56:12:be:b7:20:13:30:0b:1d:e8:5a:af:20:05:22: 38:43:7d:7d:34:70:dc:0d:e0:89:af:bc:47:a7:d6:d8:e7:52: 45:cf:80:70:0e:06:41:e2:4e:5a:5c:08:e6:58:77:47:ce:0a: 21:73:bb:08:41:1e:e4:4a:03:00:43:60:43:32:5f:7a:e0:ba: 6c:37:9d:cd:0d:4e:82:51:ae:76:4d:b5:2c:d8:4f:32:ae:48: 0e:56:c1:c3:55:07:c4:fa:ad:d2:4b:cb:f5:bd:69:86:be:36: 9d:f5:3b:06:11:3a:32:eb:a7:73:61:da:d9:07:31:1b:f3:e4: 33:d5:76:df:1e:32:d8:d8:14:c8:5b:81:25:cf:4d:66:d5:39: 0a:35:5b:63:8f:44:b3:d1:a3:3e:a1:1c:ba:cc:4d:4f:90:67: 21:87:d7:3f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAWEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0YzNTIxMTAvBgNVBAUTKDBBQjdGMzZBN0RERTRFMTFGNEIwMTU5N0RGMERFN0Ey OUE4MEJDNDQwHhcNMjUxMTA1MDQxMjU4WhcNMjUxMTEyMDQxMjU4WjAYMRYwFAYD VQQDEw02OTBhY2VjYS1mNWYyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwfBWghaGalqUqN9Mx4yHGBLFM3sjH4kTqrhnCh8Viyk3sZA4rpXG7eWLlFRH Kpy7KN4SSAI9HeEm1WCz/kT7qgfDHVdNzSURec+YI1inLRHPAUaRxYhlgs5g51bb Xvvx4CyhxQ7ezK4t5e4KEYaCG4Gdmb5qPfvxXrM+44kKnZNnDsLP6nEfmqz2rlU9 1VnO2+PFKAlbzjEsF3zUQ2omaFJ2Ym97QbbAu/cepdM7BGfMpOjtPFvl0H4xXENb jveKsGPsnx6MY27hootGPRQdELjIg/PRyiVte/BieNMnWtZVh4rhKJgnU2YbuwP5 m9Jwad9SYrsVvnMx76ZrIKMAuQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEYfrvcE C3LX7HN3YFBCxT8A+zC6MB8GA1UdIwQYMBaAFAq382p93k4R9LAVl98N56KagLxE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RjM1Mi8zRDlEN0Y1RUEx RkIxMUVFQTM2MDkyNUFDNEY5QUUwMi9DcmZ6YW4zZVRoSDBzQldYM3czbm9wcUF2 RVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NyZnphbjNlVGhIMHNCV1gzdzNub3BxQXZFUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 RjM1Mi8zRDlEN0Y1RUExRkIxMUVFQTM2MDkyNUFDNEY5QUUwMi9DcmZ6YW4zZVRo SDBzQldYM3czbm9wcUF2RVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQADkG7sXoFfSaK+epbFjkprA2MOeQI052GIsgi2zav9tzDxreI16BwP P9VdN424K6xc2vIt2VMx7vULe4K1r8EEs0LGPbCL0bzllbsXzaXTMeUPg0B+6E7f BU3zJXtWEr63IBMwCx3oWq8gBSI4Q319NHDcDeCJr7xHp9bY51JFz4BwDgZB4k5a XAjmWHdHzgohc7sIQR7kSgMAQ2BDMl964LpsN53NDU6CUa52TbUs2E8yrkgOVsHD VQfE+q3SS8v1vWmGvjad9TsGEToy66dzYdrZBzEb8+Qz1XbfHjLY2BTIW4Elz01m 1TkKNVtjj0Sz0aM+oRy6zE1PkGchh9c/ -----END CERTIFICATE-----Generated at Wed Nov 5 17:57:01 2025 by rpki-client