$ rpki-client -vvf rpki.apnic.net/member_repository/A9121188/84BAA06C836311EEBC191B1EC4F9AE02/FGZAd1io17k1aUiW1QJ1KAZ5ryk.mft File: FGZAd1io17k1aUiW1QJ1KAZ5ryk.mft (raw, json) Hash identifier: lGMqT1veL5bVb9wYJoBnFELrfS/dP48gKhmQeUkEHY8= Subject key identifier: 83:0A:A3:F4:B3:2A:BB:86:60:E2:7F:3C:FB:05:E4:2D:55:07:3D:F7 Authority key identifier: 14:66:40:77:58:A8:D7:B9:35:69:48:96:D5:02:75:28:06:79:AF:29 Certificate issuer: /CN=A9121188/serialNumber=1466407758A8D7B935694896D50275280679AF29 Certificate serial: 016C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FGZAd1io17k1aUiW1QJ1KAZ5ryk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9121188/84BAA06C836311EEBC191B1EC4F9AE02/FGZAd1io17k1aUiW1QJ1KAZ5ryk.mft Manifest number: 0169 Signing time: Sun 19 Oct 2025 06:35:10 +0000 Manifest this update: Sun 19 Oct 2025 06:35:10 +0000 Manifest next update: Sun 26 Oct 2025 06:35:10 +0000 Files and hashes: 1: FGZAd1io17k1aUiW1QJ1KAZ5ryk.crl (hash: 4zPErb9pfQZiovKMmrBFwQ8fhExBGCzfU+njjhaV9qw=) 2: 91FC411C836411EE80C08641C4F9AE02.roa (hash: wBNq6qKZKki1MEW6RuBHHAWRuhM23JZZju/jw5M2+o0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9121188/84BAA06C836311EEBC191B1EC4F9AE02/FGZAd1io17k1aUiW1QJ1KAZ5ryk.crl rsync://rpki.apnic.net/member_repository/A9121188/84BAA06C836311EEBC191B1EC4F9AE02/FGZAd1io17k1aUiW1QJ1KAZ5ryk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FGZAd1io17k1aUiW1QJ1KAZ5ryk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 06:35:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 364 (0x16c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9121188, serialNumber=1466407758A8D7B935694896D50275280679AF29 Validity Not Before: Oct 19 06:35:10 2025 GMT Not After : Oct 26 06:35:10 2025 GMT Subject: CN=68f4869e-14f6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:93:47:33:1e:ab:97:0d:0c:27:0f:b0:83:1b: 6a:64:e8:16:29:24:2e:5b:1a:0e:fb:3e:1d:e4:c6: 8e:81:45:78:a9:de:ba:42:e6:e7:22:d7:c7:87:6c: 24:c9:21:07:30:8d:f9:0e:90:44:c4:fe:4e:06:53: ad:bb:2e:cd:0c:27:39:70:3b:ab:69:e7:21:8a:4e: c7:6d:42:0b:7c:44:ea:66:fb:31:de:32:42:36:e0: 51:b8:db:80:3c:51:b5:09:ca:bb:dc:39:98:c7:a2: df:f7:8c:55:a4:6c:db:68:75:c8:b5:b1:4c:04:d8: 63:98:60:1f:b9:1e:83:66:17:7b:15:31:2f:b5:3e: 2c:da:1d:56:1d:7e:bd:c5:d8:ab:db:81:17:24:66: 99:d6:77:14:e8:d7:17:11:6d:19:0e:ba:95:41:95: cd:d8:7c:7a:c8:8f:cf:f1:96:04:e3:76:85:13:ab: 04:40:49:2f:b6:c3:fa:cc:5e:4e:09:52:0c:2c:92: 86:3e:38:60:b6:d8:38:51:a9:c4:94:bb:c5:f5:88: a0:e8:23:60:a8:1f:c1:79:ee:ab:01:64:dd:34:f6: 47:2b:25:d4:8f:9c:ed:ac:9e:21:f2:5d:4a:4f:01: 46:79:76:7b:06:24:5f:90:4e:b9:71:90:c0:55:78: 13:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:0A:A3:F4:B3:2A:BB:86:60:E2:7F:3C:FB:05:E4:2D:55:07:3D:F7 X509v3 Authority Key Identifier: keyid:14:66:40:77:58:A8:D7:B9:35:69:48:96:D5:02:75:28:06:79:AF:29 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9121188/84BAA06C836311EEBC191B1EC4F9AE02/FGZAd1io17k1aUiW1QJ1KAZ5ryk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FGZAd1io17k1aUiW1QJ1KAZ5ryk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9121188/84BAA06C836311EEBC191B1EC4F9AE02/FGZAd1io17k1aUiW1QJ1KAZ5ryk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 14:a9:b6:02:46:02:9d:57:59:f7:a6:62:3c:0e:76:b3:8a:c0: 24:39:9f:13:51:8c:ca:95:f6:e2:73:1e:b4:e8:de:18:8a:98: b2:59:11:26:ca:c2:7d:af:a3:38:c1:0b:75:14:f2:50:fd:0f: e5:13:85:2e:c8:a5:83:5c:8c:93:7d:0e:aa:07:c9:48:74:d2: a6:3a:69:c4:67:49:6b:cd:17:31:e1:89:bd:06:55:b1:37:3c: e3:ed:32:62:7b:20:73:40:fb:20:7d:0f:f5:d1:9d:fb:b6:a0: 66:97:23:5f:3c:b8:a3:c0:df:91:15:9f:b9:fb:d1:42:97:d8: 59:06:df:26:cf:11:3e:3a:12:00:6c:d6:31:03:18:28:ce:e4: c2:aa:64:97:cb:9a:5c:1c:c8:f0:23:70:9d:e7:69:2b:f4:68: 55:3f:90:ed:58:fd:6d:b8:3a:77:1f:fd:14:27:b5:a7:94:80: 5c:ae:be:c7:9b:2e:15:66:5f:23:d6:9b:89:ff:23:fc:eb:fc: 85:3a:9a:a2:63:5f:22:9d:68:88:07:99:94:96:43:11:ae:e8: 41:19:9d:45:6f:8e:26:83:14:61:2a:48:fd:f4:17:e9:96:c3: 09:83:06:e5:ce:99:d5:65:86:cc:d1:5c:9a:9d:a6:0c:2f:8c: bf:2e:5d:70 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAWwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjExODgxMTAvBgNVBAUTKDE0NjY0MDc3NThBOEQ3QjkzNTY5NDg5NkQ1MDI3NTI4 MDY3OUFGMjkwHhcNMjUxMDE5MDYzNTEwWhcNMjUxMDI2MDYzNTEwWjAYMRYwFAYD VQQDEw02OGY0ODY5ZS0xNGY2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtpNHMx6rlw0MJw+wgxtqZOgWKSQuWxoO+z4d5MaOgUV4qd66QubnItfHh2wk ySEHMI35DpBExP5OBlOtuy7NDCc5cDuraechik7HbUILfETqZvsx3jJCNuBRuNuA PFG1Ccq73DmYx6Lf94xVpGzbaHXItbFMBNhjmGAfuR6DZhd7FTEvtT4s2h1WHX69 xdir24EXJGaZ1ncU6NcXEW0ZDrqVQZXN2Hx6yI/P8ZYE43aFE6sEQEkvtsP6zF5O CVIMLJKGPjhgttg4UanElLvF9Yig6CNgqB/Bee6rAWTdNPZHKyXUj5ztrJ4h8l1K TwFGeXZ7BiRfkE65cZDAVXgT1QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIMKo/Sz KruGYOJ/PPsF5C1VBz33MB8GA1UdIwQYMBaAFBRmQHdYqNe5NWlIltUCdSgGea8p MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMTE4OC84NEJBQTA2Qzgz NjMxMUVFQkMxOTFCMUVDNEY5QUUwMi9GR1pBZDFpbzE3azFhVWlXMVFKMUtBWjVy eWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZHWkFkMWlvMTdrMWFVaVcxUUoxS0FaNXJ5ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MTE4OC84NEJBQTA2QzgzNjMxMUVFQkMxOTFCMUVDNEY5QUUwMi9GR1pBZDFpbzE3 azFhVWlXMVFKMUtBWjVyeWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAUqbYCRgKdV1n3pmI8DnazisAkOZ8TUYzKlfbicx606N4YipiyWREm ysJ9r6M4wQt1FPJQ/Q/lE4UuyKWDXIyTfQ6qB8lIdNKmOmnEZ0lrzRcx4Ym9BlWx Nzzj7TJieyBzQPsgfQ/10Z37tqBmlyNfPLijwN+RFZ+5+9FCl9hZBt8mzxE+OhIA bNYxAxgozuTCqmSXy5pcHMjwI3Cd52kr9GhVP5DtWP1tuDp3H/0UJ7WnlIBcrr7H my4VZl8j1puJ/yP86/yFOpqiY18inWiIB5mUlkMRruhBGZ1Fb44mgxRhKkj99Bfp lsMJgwblzpnVZYbM0VyanaYML4y/Ll1w -----END CERTIFICATE-----Generated at Mon Oct 20 04:24:42 2025 by rpki-client