$ rpki-client -vvf rpki.apnic.net/member_repository/A91A7273/FC50500EE77111EF9DFBDD50C4F9AE02/3aSfQfYYpV-cp8_FW66nthbZV2I.mft File: 3aSfQfYYpV-cp8_FW66nthbZV2I.mft (raw, json) Hash identifier: Sa52extb8Ymf3suhEfcdosqczNd+kF2zh7O3sdnte1A= Subject key identifier: 55:06:F1:3A:A1:6F:6D:4D:FF:49:88:8D:F2:EA:AD:5F:FD:FA:8B:96 Authority key identifier: DD:A4:9F:41:F6:18:A5:5F:9C:A7:CF:C5:5B:AE:A7:B6:16:D9:57:62 Certificate issuer: /CN=A91A7273/serialNumber=DDA49F41F618A55F9CA7CFC55BAEA7B616D95762 Certificate serial: 8E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3aSfQfYYpV-cp8_FW66nthbZV2I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A7273/FC50500EE77111EF9DFBDD50C4F9AE02/3aSfQfYYpV-cp8_FW66nthbZV2I.mft Manifest number: 8D Signing time: Fri 07 Nov 2025 01:56:40 +0000 Manifest this update: Fri 07 Nov 2025 01:56:40 +0000 Manifest next update: Fri 14 Nov 2025 01:56:40 +0000 Files and hashes: 1: 3aSfQfYYpV-cp8_FW66nthbZV2I.crl (hash: 2rE87KATSUEsHn5KvC96nRb6X3scaJfC0b4oeFX3mTA=) 2: 3958EEC642BB11F0B449BB81C4F9AE02.roa (hash: SygYrtM3v/MPPC9qe7TYDUy1/kulSQDEnXRN8vMuKwo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A7273/FC50500EE77111EF9DFBDD50C4F9AE02/3aSfQfYYpV-cp8_FW66nthbZV2I.crl rsync://rpki.apnic.net/member_repository/A91A7273/FC50500EE77111EF9DFBDD50C4F9AE02/3aSfQfYYpV-cp8_FW66nthbZV2I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3aSfQfYYpV-cp8_FW66nthbZV2I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 14 Nov 2025 01:56:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 142 (0x8e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A7273, serialNumber=DDA49F41F618A55F9CA7CFC55BAEA7B616D95762 Validity Not Before: Nov 7 01:56:40 2025 GMT Not After : Nov 14 01:56:40 2025 GMT Subject: CN=690d51d8-05d6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:1c:31:06:b4:20:ec:a1:99:4a:f9:18:26:63: 8a:57:85:6b:46:6e:6c:34:29:42:de:0f:3f:a4:7f: a0:bd:e3:60:ef:30:e9:ad:e2:b3:97:c5:f6:b3:5a: 26:ad:f7:16:d6:a3:a9:e6:4c:04:0d:bf:21:b9:01: 8f:6e:55:b7:be:e2:46:e5:eb:88:55:bb:a6:25:65: 8a:94:4c:80:e7:82:e6:d6:38:48:d6:eb:3e:15:25: 29:c7:fa:a2:e0:37:77:11:ab:16:6c:be:10:b3:e6: 31:77:09:60:00:c7:14:90:75:ea:4f:f7:f7:4c:f4: c0:44:41:07:03:3e:e6:ef:ae:0e:7a:ec:8f:5b:c4: 16:67:5d:36:b4:f1:1f:d0:31:09:c8:6f:4c:b2:83: 06:c5:08:22:bd:e3:95:c9:c0:a6:7f:3d:5e:6c:15: bd:a8:50:48:7b:37:7d:07:d8:13:51:7f:2b:54:e3: 53:6b:4c:f9:d0:2d:e1:88:55:0d:89:2a:48:11:95: fb:2e:0f:19:93:11:f6:7e:82:39:78:d7:9e:8c:91: 9a:85:e9:9c:33:e6:7c:cc:d7:71:b2:62:b0:7a:85: 45:17:4c:ec:2f:a8:a5:d6:b9:fd:36:a8:ec:9b:32: 4e:d5:9e:24:10:c5:38:56:57:a8:50:77:8b:2a:85: 61:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:06:F1:3A:A1:6F:6D:4D:FF:49:88:8D:F2:EA:AD:5F:FD:FA:8B:96 X509v3 Authority Key Identifier: keyid:DD:A4:9F:41:F6:18:A5:5F:9C:A7:CF:C5:5B:AE:A7:B6:16:D9:57:62 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A7273/FC50500EE77111EF9DFBDD50C4F9AE02/3aSfQfYYpV-cp8_FW66nthbZV2I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3aSfQfYYpV-cp8_FW66nthbZV2I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A7273/FC50500EE77111EF9DFBDD50C4F9AE02/3aSfQfYYpV-cp8_FW66nthbZV2I.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2a:1a:a9:1c:da:59:5e:ea:c1:9a:9d:7b:9e:ab:dd:ed:ad:43: 9b:57:3a:eb:23:f2:35:92:80:dd:ba:b0:22:87:7c:5b:aa:ea: 7f:49:d4:16:bd:4e:38:e9:e8:8a:65:35:cf:f7:60:a5:7b:ad: d8:fe:6d:23:83:1d:74:27:36:e4:b3:03:73:3c:a8:47:3f:00: cd:d9:8a:20:2b:bc:39:68:5a:26:cf:ca:8b:d4:c0:43:6c:ce: 80:32:77:a0:37:ac:06:46:36:e8:97:c0:87:e2:1f:f9:d4:a1: 94:2f:d4:33:5a:3c:4f:d3:bb:06:f1:9c:56:37:1d:0a:68:04: 6e:eb:39:7f:76:70:07:9f:b8:b2:a4:5a:04:10:38:ec:14:96: 7e:d6:87:43:ac:3e:b1:76:5a:61:d1:66:c9:6d:50:55:45:3f: 0a:0d:2e:ea:6b:f5:56:60:de:99:ad:47:f3:06:14:d4:01:3b: 6e:d9:4e:15:6c:a3:34:be:a6:6e:45:9d:79:5c:67:5a:34:f0: 28:94:a6:2d:86:67:56:12:c5:d1:9b:77:bd:09:78:b3:4c:b2: 94:fa:95:43:55:89:8c:97:88:3e:5c:b2:72:8a:97:aa:62:45: 89:5c:f2:46:23:59:4d:e2:b9:ca:44:2e:42:97:e4:08:c4:6b: 53:70:08:84 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAI4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTcyNzMxMTAvBgNVBAUTKEREQTQ5RjQxRjYxOEE1NUY5Q0E3Q0ZDNTVCQUVBN0I2 MTZEOTU3NjIwHhcNMjUxMTA3MDE1NjQwWhcNMjUxMTE0MDE1NjQwWjAYMRYwFAYD VQQDEw02OTBkNTFkOC0wNWQ2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyhwxBrQg7KGZSvkYJmOKV4VrRm5sNClC3g8/pH+gveNg7zDpreKzl8X2s1om rfcW1qOp5kwEDb8huQGPblW3vuJG5euIVbumJWWKlEyA54Lm1jhI1us+FSUpx/qi 4Dd3EasWbL4Qs+YxdwlgAMcUkHXqT/f3TPTAREEHAz7m764OeuyPW8QWZ102tPEf 0DEJyG9MsoMGxQgiveOVycCmfz1ebBW9qFBIezd9B9gTUX8rVONTa0z50C3hiFUN iSpIEZX7Lg8ZkxH2foI5eNeejJGahemcM+Z8zNdxsmKweoVFF0zsL6il1rn9Nqjs mzJO1Z4kEMU4VleoUHeLKoVh4wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFUG8Tqh b21N/0mIjfLqrV/9+ouWMB8GA1UdIwQYMBaAFN2kn0H2GKVfnKfPxVuup7YW2Vdi MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNzI3My9GQzUwNTAwRUU3 NzExMUVGOURGQkRENTBDNEY5QUUwMi8zYVNmUWZZWXBWLWNwOF9GVzY2bnRoYlpW MkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzNhU2ZRZllZcFYtY3A4X0ZXNjZudGhiWlYySS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NzI3My9GQzUwNTAwRUU3NzExMUVGOURGQkRENTBDNEY5QUUwMi8zYVNmUWZZWXBW LWNwOF9GVzY2bnRoYlpWMkkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAqGqkc2lle6sGanXueq93trUObVzrrI/I1koDdurAih3xbqup/SdQW vU446eiKZTXP92Cle63Y/m0jgx10JzbkswNzPKhHPwDN2YogK7w5aFomz8qL1MBD bM6AMnegN6wGRjbol8CH4h/51KGUL9QzWjxP07sG8ZxWNx0KaARu6zl/dnAHn7iy pFoEEDjsFJZ+1odDrD6xdlph0WbJbVBVRT8KDS7qa/VWYN6ZrUfzBhTUATtu2U4V bKM0vqZuRZ15XGdaNPAolKYthmdWEsXRm3e9CXizTLKU+pVDVYmMl4g+XLJyipeq YkWJXPJGI1lN4rnKRC5Cl+QIxGtTcAiE -----END CERTIFICATE-----Generated at Fri Nov 7 15:21:25 2025 by rpki-client