$ rpki-client -vvf rpki.apnic.net/member_repository/A91128AE/53EE318EEDAD11ED9166FA53C4F9AE02/fjub3aUOjafVD_OnwzKc9IPVF-k.mft File: fjub3aUOjafVD_OnwzKc9IPVF-k.mft (raw, json) Hash identifier: lCoSe77HvU30MY4wXlwYvt+Pogd/DhIvbp17HfZVdJI= Subject key identifier: 47:9A:40:E1:15:07:8C:9A:30:26:C9:4C:ED:C7:34:60:49:14:E8:D3 Authority key identifier: 7E:3B:9B:DD:A5:0E:8D:A7:D5:0F:F3:A7:C3:32:9C:F4:83:D5:17:E9 Certificate issuer: /CN=A91128AE/serialNumber=7E3B9BDDA50E8DA7D50FF3A7C3329CF483D517E9 Certificate serial: 01D9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fjub3aUOjafVD_OnwzKc9IPVF-k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91128AE/53EE318EEDAD11ED9166FA53C4F9AE02/fjub3aUOjafVD_OnwzKc9IPVF-k.mft Manifest number: 01D2 Signing time: Sun 19 Oct 2025 05:18:19 +0000 Manifest this update: Sun 19 Oct 2025 05:18:19 +0000 Manifest next update: Sun 26 Oct 2025 05:18:19 +0000 Files and hashes: 1: fjub3aUOjafVD_OnwzKc9IPVF-k.crl (hash: qlUp8+HsSF8wnnIGF/QWQfsv92HeYpq6cum0Ud3upJU=) 2: 12671028EDB211EDBD7A5059C4F9AE02.roa (hash: Obgr2Zd1OVsSRpdsU4YgCxrRpE7FbkGE3q8rgEYfK/4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91128AE/53EE318EEDAD11ED9166FA53C4F9AE02/fjub3aUOjafVD_OnwzKc9IPVF-k.crl rsync://rpki.apnic.net/member_repository/A91128AE/53EE318EEDAD11ED9166FA53C4F9AE02/fjub3aUOjafVD_OnwzKc9IPVF-k.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fjub3aUOjafVD_OnwzKc9IPVF-k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 05:18:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 473 (0x1d9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91128AE, serialNumber=7E3B9BDDA50E8DA7D50FF3A7C3329CF483D517E9 Validity Not Before: Oct 19 05:18:19 2025 GMT Not After : Oct 26 05:18:19 2025 GMT Subject: CN=68f4749b-4421 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:5f:34:cf:08:7e:cd:88:3e:1d:30:f9:bc:7c: b0:72:a7:c1:be:07:c7:f8:47:df:9f:ab:89:94:fd: db:a8:fb:fd:48:11:42:8b:15:d9:0c:51:ac:7a:ca: 88:a7:5e:4a:78:11:8b:ef:6d:36:45:d8:e4:1e:54: 6b:16:1d:19:a8:67:9b:cc:f3:d4:b5:59:15:88:6e: c2:31:b1:37:61:13:24:6f:47:56:0a:63:07:f4:ab: 33:fb:46:b4:d4:62:67:25:a1:88:b2:c3:6f:36:91: ec:73:d8:8b:4e:97:c2:01:27:9c:4e:65:ff:9a:d7: c9:e9:51:2f:6e:4c:f6:3a:f6:23:82:04:c3:7e:e3: a0:9d:01:2d:80:24:42:7d:e8:d1:3d:9a:57:d0:d1: 9f:1c:76:eb:4e:53:f0:fb:52:ae:12:97:b0:81:f4: 63:95:d5:50:89:e3:45:8d:39:00:d3:56:a1:f8:95: 6e:27:63:1c:3e:cb:f4:31:0e:f9:40:36:ca:21:09: dd:ee:67:0e:8d:dc:69:59:54:5f:f6:a2:a5:ab:66: 8f:38:94:f6:7d:20:38:3d:43:b0:a3:d9:2c:aa:be: 55:9e:6b:bd:12:8c:de:90:be:c1:b0:80:66:48:87: 25:d0:4d:06:79:2b:83:bb:37:c1:71:32:d0:97:28: ae:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:9A:40:E1:15:07:8C:9A:30:26:C9:4C:ED:C7:34:60:49:14:E8:D3 X509v3 Authority Key Identifier: keyid:7E:3B:9B:DD:A5:0E:8D:A7:D5:0F:F3:A7:C3:32:9C:F4:83:D5:17:E9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91128AE/53EE318EEDAD11ED9166FA53C4F9AE02/fjub3aUOjafVD_OnwzKc9IPVF-k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fjub3aUOjafVD_OnwzKc9IPVF-k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91128AE/53EE318EEDAD11ED9166FA53C4F9AE02/fjub3aUOjafVD_OnwzKc9IPVF-k.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption db:38:47:be:74:e4:24:7b:70:9f:f7:b0:95:54:48:e1:70:cd: 5d:78:a7:56:c3:fa:dd:4e:14:07:d2:98:a0:b9:92:6c:8e:9f: 86:31:4d:d6:70:bd:ef:40:24:23:8e:d3:c6:cb:43:13:a8:49: 1b:ff:c2:27:2d:46:15:31:22:0c:b2:96:70:0d:2b:87:40:d2: 8b:97:fd:55:13:27:c6:4b:fa:b4:52:bd:23:f4:01:9f:c6:b3: d1:55:95:35:81:90:bc:f9:e1:b0:5a:f6:c0:1a:89:d0:d3:e5: 7f:0b:0a:05:e4:8e:23:c2:71:5a:c8:f5:3f:cd:9f:6c:2e:ce: 83:a5:26:16:52:ae:92:5e:81:46:bc:1b:40:50:af:c4:89:27: cd:96:df:96:44:0d:20:39:47:04:1c:8e:4b:7d:e6:6f:a4:eb: 49:1c:5e:3d:51:96:36:aa:78:10:23:e4:79:dd:d8:bd:4b:ab: 1c:6f:a6:3e:8a:cd:30:0e:73:7d:88:bf:a0:9f:20:98:ca:49: 81:52:48:33:49:4d:8f:76:b0:c2:31:89:6d:44:43:93:c6:b3: ce:cf:a2:f1:77:b9:66:ee:cf:ad:1d:7d:1c:70:e2:de:b0:da: c8:a4:f7:d3:33:23:7c:f1:a0:cd:49:5c:bf:47:cb:5e:d8:79: 47:7b:4a:55 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAdkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTI4QUUxMTAvBgNVBAUTKDdFM0I5QkREQTUwRThEQTdENTBGRjNBN0MzMzI5Q0Y0 ODNENTE3RTkwHhcNMjUxMDE5MDUxODE5WhcNMjUxMDI2MDUxODE5WjAYMRYwFAYD VQQDEw02OGY0NzQ5Yi00NDIxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAo180zwh+zYg+HTD5vHywcqfBvgfH+Effn6uJlP3bqPv9SBFCixXZDFGsesqI p15KeBGL7202RdjkHlRrFh0ZqGebzPPUtVkViG7CMbE3YRMkb0dWCmMH9Ksz+0a0 1GJnJaGIssNvNpHsc9iLTpfCASecTmX/mtfJ6VEvbkz2OvYjggTDfuOgnQEtgCRC fejRPZpX0NGfHHbrTlPw+1KuEpewgfRjldVQieNFjTkA01ah+JVuJ2McPsv0MQ75 QDbKIQnd7mcOjdxpWVRf9qKlq2aPOJT2fSA4PUOwo9ksqr5Vnmu9EozekL7BsIBm SIcl0E0GeSuDuzfBcTLQlyiuXQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEeaQOEV B4yaMCbJTO3HNGBJFOjTMB8GA1UdIwQYMBaAFH47m92lDo2n1Q/zp8MynPSD1Rfp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMjhBRS81M0VFMzE4RUVE QUQxMUVEOTE2NkZBNTNDNEY5QUUwMi9manViM2FVT2phZlZEX09ud3pLYzlJUFZG LWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ZqdWIzYVVPamFmVkRfT253ektjOUlQVkYtay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx MjhBRS81M0VFMzE4RUVEQUQxMUVEOTE2NkZBNTNDNEY5QUUwMi9manViM2FVT2ph ZlZEX09ud3pLYzlJUFZGLWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDbOEe+dOQke3Cf97CVVEjhcM1deKdWw/rdThQH0piguZJsjp+GMU3W cL3vQCQjjtPGy0MTqEkb/8InLUYVMSIMspZwDSuHQNKLl/1VEyfGS/q0Ur0j9AGf xrPRVZU1gZC8+eGwWvbAGonQ0+V/CwoF5I4jwnFayPU/zZ9sLs6DpSYWUq6SXoFG vBtAUK/EiSfNlt+WRA0gOUcEHI5LfeZvpOtJHF49UZY2qngQI+R53di9S6scb6Y+ is0wDnN9iL+gnyCYykmBUkgzSU2PdrDCMYltREOTxrPOz6Lxd7lm7s+tHX0ccOLe sNrIpPfTMyN88aDNSVy/R8te2HlHe0pV -----END CERTIFICATE-----Generated at Mon Oct 20 10:01:55 2025 by rpki-client