$ rpki-client -vvf rpki.apnic.net/member_repository/A9125A95/AA60C8EC617211ECA3172086C4F9AE02/_fz0IvXEZi3h5GQ6JxwEax4hxK0.mft File: _fz0IvXEZi3h5GQ6JxwEax4hxK0.mft (raw, json) Hash identifier: 2bfqpSgfPcLJwLrv6JNglSlmdH/hO4m9GkZ7MWSxKE4= Subject key identifier: F6:84:C3:9E:37:1D:0A:38:05:B8:F7:42:6C:F4:5F:89:48:18:3C:55 Authority key identifier: FD:FC:F4:22:F5:C4:66:2D:E1:E4:64:3A:27:1C:04:6B:1E:21:C4:AD Certificate issuer: /CN=A9125A95/serialNumber=FDFCF422F5C4662DE1E4643A271C046B1E21C4AD Certificate serial: 047A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_fz0IvXEZi3h5GQ6JxwEax4hxK0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9125A95/AA60C8EC617211ECA3172086C4F9AE02/_fz0IvXEZi3h5GQ6JxwEax4hxK0.mft Manifest number: 0476 Signing time: Sun 19 Oct 2025 01:59:35 +0000 Manifest this update: Sun 19 Oct 2025 01:59:34 +0000 Manifest next update: Sun 26 Oct 2025 01:59:34 +0000 Files and hashes: 1: _fz0IvXEZi3h5GQ6JxwEax4hxK0.crl (hash: lFhZNfQlr+jYilAXD0w0AV4bQQndYtYkVlza3k+hLp0=) 2: AF506F14630811EC97879243C4F9AE02.roa (hash: 2rxDZmn8FcPG24Wlb4Jg090ASKMT6CB+r3+3kvhWtoQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9125A95/AA60C8EC617211ECA3172086C4F9AE02/_fz0IvXEZi3h5GQ6JxwEax4hxK0.crl rsync://rpki.apnic.net/member_repository/A9125A95/AA60C8EC617211ECA3172086C4F9AE02/_fz0IvXEZi3h5GQ6JxwEax4hxK0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_fz0IvXEZi3h5GQ6JxwEax4hxK0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 01:59:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1146 (0x47a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9125A95, serialNumber=FDFCF422F5C4662DE1E4643A271C046B1E21C4AD Validity Not Before: Oct 19 01:59:34 2025 GMT Not After : Oct 26 01:59:34 2025 GMT Subject: CN=68f44606-ef81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:82:c9:39:d7:7f:96:fb:eb:dd:43:4c:1e:63: ac:02:53:8c:d4:78:0e:6a:72:7f:f2:30:12:ec:17: c5:6f:40:20:f6:19:97:cb:9b:3b:58:83:96:07:0b: 84:9f:15:ef:d1:1c:2e:98:05:40:70:59:bc:19:7b: 07:9a:c9:9d:1e:94:31:8c:a4:a4:93:15:d3:05:f0: 34:02:bf:71:50:d6:15:65:34:7b:d1:80:d6:3e:b0: 27:0f:e5:91:00:bd:93:e2:33:05:9c:44:73:7c:f6: f0:ab:89:81:ed:c6:2b:99:39:cf:96:4a:23:7b:0f: 55:bf:f6:8c:19:c9:fc:cc:49:e7:41:46:33:12:86: 58:f5:9c:aa:2c:16:69:75:c8:6a:88:8d:59:47:e6: d0:d5:64:9a:af:13:7a:18:ab:03:7d:98:54:29:91: 38:81:c6:15:54:91:3e:a6:0a:d3:b8:e4:29:4f:f8: fe:26:da:67:2e:8b:17:4e:bd:44:4d:93:9a:69:9c: 04:07:00:46:c8:1a:5d:27:11:e0:e3:f9:6d:04:7a: 61:6e:ca:e4:dd:14:23:62:75:ef:d5:66:e3:92:37: f2:e6:f3:4b:44:0c:1c:33:69:37:b4:bb:55:b6:a3: 19:21:bb:1c:6a:3e:85:91:dd:d7:95:10:9b:98:e9: 71:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:84:C3:9E:37:1D:0A:38:05:B8:F7:42:6C:F4:5F:89:48:18:3C:55 X509v3 Authority Key Identifier: keyid:FD:FC:F4:22:F5:C4:66:2D:E1:E4:64:3A:27:1C:04:6B:1E:21:C4:AD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9125A95/AA60C8EC617211ECA3172086C4F9AE02/_fz0IvXEZi3h5GQ6JxwEax4hxK0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_fz0IvXEZi3h5GQ6JxwEax4hxK0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9125A95/AA60C8EC617211ECA3172086C4F9AE02/_fz0IvXEZi3h5GQ6JxwEax4hxK0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2b:39:9b:a4:87:e7:cc:8a:d4:76:1a:ce:e1:c2:be:5f:ea:05: 28:63:95:c9:d6:cf:0b:8e:a3:49:89:d6:58:a5:e3:cf:9f:63: a1:66:fe:df:05:e3:c0:12:51:6c:de:ff:e5:3a:13:59:e5:7a: 5b:1f:ac:5f:5d:db:31:10:c8:81:34:4b:a4:a1:4e:ad:a2:66: 19:1d:7c:fd:53:ba:b7:30:a5:8e:39:1d:66:ae:4e:c2:02:e2: f8:4d:05:73:d8:ea:5e:1d:29:93:c9:ee:05:da:38:3f:32:38: b1:67:28:c7:c1:89:f1:79:4d:a1:68:1b:b1:e8:c8:2d:5a:d3: 63:0f:cd:07:59:ff:85:62:fd:93:f1:36:50:76:1f:af:c1:9d: e8:2a:0c:bd:de:ff:01:64:26:1e:73:58:26:a3:71:be:05:db: 7e:af:f3:df:a4:c1:8a:0b:67:12:e8:9f:c9:02:ff:39:75:b1: 3e:00:60:66:63:85:b1:b3:42:bc:a2:93:42:06:f4:c1:b9:b6: 56:72:9f:08:02:0b:91:95:f6:a1:c6:6c:a2:0b:ed:6d:4d:8d: 57:0a:f2:b7:9f:0d:cd:d8:70:46:46:ee:70:8e:3a:d1:db:88: 59:18:79:bc:00:44:98:65:fe:3c:2a:a0:27:e9:d6:f3:93:9d: 82:c6:fd:22 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBHowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjVBOTUxMTAvBgNVBAUTKEZERkNGNDIyRjVDNDY2MkRFMUU0NjQzQTI3MUMwNDZC MUUyMUM0QUQwHhcNMjUxMDE5MDE1OTM0WhcNMjUxMDI2MDE1OTM0WjAYMRYwFAYD VQQDEw02OGY0NDYwNi1lZjgxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw4LJOdd/lvvr3UNMHmOsAlOM1HgOanJ/8jAS7BfFb0Ag9hmXy5s7WIOWBwuE nxXv0RwumAVAcFm8GXsHmsmdHpQxjKSkkxXTBfA0Ar9xUNYVZTR70YDWPrAnD+WR AL2T4jMFnERzfPbwq4mB7cYrmTnPlkojew9Vv/aMGcn8zEnnQUYzEoZY9ZyqLBZp dchqiI1ZR+bQ1WSarxN6GKsDfZhUKZE4gcYVVJE+pgrTuOQpT/j+JtpnLosXTr1E TZOaaZwEBwBGyBpdJxHg4/ltBHphbsrk3RQjYnXv1Wbjkjfy5vNLRAwcM2k3tLtV tqMZIbscaj6Fkd3XlRCbmOlxkQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPaEw543 HQo4Bbj3Qmz0X4lIGDxVMB8GA1UdIwQYMBaAFP389CL1xGYt4eRkOiccBGseIcSt MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNUE5NS9BQTYwQzhFQzYx NzIxMUVDQTMxNzIwODZDNEY5QUUwMi9fZnowSXZYRVppM2g1R1E2Snh3RWF4NGh4 SzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL19mejBJdlhFWmkzaDVHUTZKeHdFYXg0aHhLMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NUE5NS9BQTYwQzhFQzYxNzIxMUVDQTMxNzIwODZDNEY5QUUwMi9fZnowSXZYRVpp M2g1R1E2Snh3RWF4NGh4SzAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQArOZukh+fMitR2Gs7hwr5f6gUoY5XJ1s8LjqNJidZYpePPn2OhZv7f BePAElFs3v/lOhNZ5XpbH6xfXdsxEMiBNEukoU6tomYZHXz9U7q3MKWOOR1mrk7C AuL4TQVz2OpeHSmTye4F2jg/MjixZyjHwYnxeU2haBux6MgtWtNjD80HWf+FYv2T 8TZQdh+vwZ3oKgy93v8BZCYec1gmo3G+Bdt+r/PfpMGKC2cS6J/JAv85dbE+AGBm Y4Wxs0K8opNCBvTBubZWcp8IAguRlfahxmyiC+1tTY1XCvK3nw3N2HBGRu5wjjrR 24hZGHm8AESYZf48KqAn6dbzk52Cxv0i -----END CERTIFICATE-----Generated at Mon Oct 20 22:23:53 2025 by rpki-client