$ rpki-client -vvf rpki.apnic.net/member_repository/A9125E89/76010778B24111EB99DAE928C4F9AE02/fCqWpakDTN8qeG9kvfJ_2KxRySs.mft File: fCqWpakDTN8qeG9kvfJ_2KxRySs.mft (raw, json) Hash identifier: U4yFUD3CaWeSdrSEACKMSkp7THMA/A37VcTLtnu5yCg= Subject key identifier: E9:76:81:5C:68:3A:D9:60:2F:01:83:B6:BB:11:E9:ED:9C:56:B7:89 Authority key identifier: 7C:2A:96:A5:A9:03:4C:DF:2A:78:6F:64:BD:F2:7F:D8:AC:51:C9:2B Certificate issuer: /CN=A9125E89/serialNumber=7C2A96A5A9034CDF2A786F64BDF27FD8AC51C92B Certificate serial: 063B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fCqWpakDTN8qeG9kvfJ_2KxRySs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9125E89/76010778B24111EB99DAE928C4F9AE02/fCqWpakDTN8qeG9kvfJ_2KxRySs.mft Manifest number: 0635 Signing time: Sun 19 Oct 2025 00:19:07 +0000 Manifest this update: Sun 19 Oct 2025 00:19:07 +0000 Manifest next update: Sun 26 Oct 2025 00:19:07 +0000 Files and hashes: 1: fCqWpakDTN8qeG9kvfJ_2KxRySs.crl (hash: +EydkZWZ+Lh6LouYhTP71D9eziL7WOs8jSLw1xOTgFk=) 2: 12CC9D1857A711EDB284106DC4F9AE02.roa (hash: HwUjEpVEx/M+axjjRSXHAAv6+7lu4B2c6Jg1jCD9mbM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9125E89/76010778B24111EB99DAE928C4F9AE02/fCqWpakDTN8qeG9kvfJ_2KxRySs.crl rsync://rpki.apnic.net/member_repository/A9125E89/76010778B24111EB99DAE928C4F9AE02/fCqWpakDTN8qeG9kvfJ_2KxRySs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fCqWpakDTN8qeG9kvfJ_2KxRySs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 00:19:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1595 (0x63b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9125E89, serialNumber=7C2A96A5A9034CDF2A786F64BDF27FD8AC51C92B Validity Not Before: Oct 19 00:19:07 2025 GMT Not After : Oct 26 00:19:07 2025 GMT Subject: CN=68f42e7b-6c49 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:7b:05:20:5a:29:b5:e8:8e:a3:68:18:fe:50: c9:a0:2b:cf:2a:23:80:b9:6d:54:7f:a1:94:49:ca: 4c:0d:01:33:ae:c0:86:68:61:98:97:73:e6:d2:29: ab:f1:d9:ac:0b:d3:79:b9:fc:37:6f:a7:21:96:3e: 9d:30:c7:46:82:3d:ae:0d:f5:82:de:b1:5a:dd:c3: b9:eb:3e:0c:6b:99:9c:bb:53:d1:cd:f4:a2:32:6e: fd:06:c2:71:17:24:fd:7c:6e:25:ef:c7:98:4f:99: 8f:62:4f:0f:dc:af:3b:90:0e:08:6a:67:8d:a2:2a: cc:2d:84:5a:7e:76:31:6c:5b:01:ce:1c:34:1e:d1: 87:ed:3e:b8:28:fc:26:bc:a3:92:40:2b:ce:a2:6a: d1:9b:1e:c8:f1:06:53:36:fa:49:4c:80:70:4f:70: 69:64:3c:33:ff:fd:e6:47:b0:65:55:71:82:eb:88: 71:f1:d9:0b:06:8c:e3:34:a4:3c:1f:af:7a:2f:71: 77:af:41:fb:08:c7:19:6f:1c:41:74:9b:f9:e3:02: 1b:a9:81:94:f8:fe:70:72:ad:0c:ad:8b:47:26:b0: 1c:57:49:3b:21:78:ba:63:41:66:76:6b:67:4b:69: 89:da:2d:a2:02:89:bf:3e:23:86:46:90:3c:8b:2a: f5:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:76:81:5C:68:3A:D9:60:2F:01:83:B6:BB:11:E9:ED:9C:56:B7:89 X509v3 Authority Key Identifier: keyid:7C:2A:96:A5:A9:03:4C:DF:2A:78:6F:64:BD:F2:7F:D8:AC:51:C9:2B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9125E89/76010778B24111EB99DAE928C4F9AE02/fCqWpakDTN8qeG9kvfJ_2KxRySs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fCqWpakDTN8qeG9kvfJ_2KxRySs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9125E89/76010778B24111EB99DAE928C4F9AE02/fCqWpakDTN8qeG9kvfJ_2KxRySs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2a:bf:05:41:6a:dc:40:a9:c3:4f:eb:1f:a1:1b:56:16:64:76: 64:9f:43:cd:eb:ed:16:05:29:ad:a5:d3:46:bc:8a:a7:d0:9d: 13:3d:71:1c:11:be:8f:7e:4f:1d:56:59:73:91:28:3c:1e:56: 37:fb:68:63:0f:4a:25:ed:68:e6:b4:45:44:35:87:eb:77:d2: 32:32:b1:67:b5:98:9c:39:80:c1:72:a0:26:5c:e2:a6:49:1c: c0:a0:3c:7c:4c:b7:74:9b:d2:04:16:6b:34:7f:d9:38:ca:d1: e2:8b:72:d8:9b:aa:64:27:fb:c8:df:7c:ac:04:3a:17:b5:10: b1:89:af:5c:77:23:b7:73:bb:40:0d:c4:7b:2d:64:46:59:75: 32:a3:c4:03:4c:5f:7b:80:e8:f8:4a:28:4f:0b:52:f2:d0:06: 38:16:1e:b0:e2:51:4b:fa:a4:85:5b:fc:66:bd:17:d6:05:67: a9:35:80:2a:ed:2b:dc:e5:d7:8e:c9:0f:16:1d:93:f1:cd:c8: b5:7b:2e:c1:a7:c9:99:66:e8:56:f0:5a:52:b8:a2:5c:02:f7: 83:b8:cd:92:b3:f1:5f:e8:ed:c7:d9:24:a9:97:b4:bc:59:e4: e5:a7:a6:88:95:f6:9b:0a:b7:70:10:93:da:69:74:2f:0f:f3: df:80:f9:31 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBjswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjVFODkxMTAvBgNVBAUTKDdDMkE5NkE1QTkwMzRDREYyQTc4NkY2NEJERjI3RkQ4 QUM1MUM5MkIwHhcNMjUxMDE5MDAxOTA3WhcNMjUxMDI2MDAxOTA3WjAYMRYwFAYD VQQDEw02OGY0MmU3Yi02YzQ5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAs3sFIFopteiOo2gY/lDJoCvPKiOAuW1Uf6GUScpMDQEzrsCGaGGYl3Pm0imr 8dmsC9N5ufw3b6chlj6dMMdGgj2uDfWC3rFa3cO56z4Ma5mcu1PRzfSiMm79BsJx FyT9fG4l78eYT5mPYk8P3K87kA4IameNoirMLYRafnYxbFsBzhw0HtGH7T64KPwm vKOSQCvOomrRmx7I8QZTNvpJTIBwT3BpZDwz//3mR7BlVXGC64hx8dkLBozjNKQ8 H696L3F3r0H7CMcZbxxBdJv54wIbqYGU+P5wcq0MrYtHJrAcV0k7IXi6Y0Fmdmtn S2mJ2i2iAom/PiOGRpA8iyr1XwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOl2gVxo OtlgLwGDtrsR6e2cVreJMB8GA1UdIwQYMBaAFHwqlqWpA0zfKnhvZL3yf9isUckr MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNUU4OS83NjAxMDc3OEIy NDExMUVCOTlEQUU5MjhDNEY5QUUwMi9mQ3FXcGFrRFROOHFlRzlrdmZKXzJLeFJ5 U3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ZDcVdwYWtEVE44cWVHOWt2ZkpfMkt4UnlTcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NUU4OS83NjAxMDc3OEIyNDExMUVCOTlEQUU5MjhDNEY5QUUwMi9mQ3FXcGFrRFRO OHFlRzlrdmZKXzJLeFJ5U3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAqvwVBatxAqcNP6x+hG1YWZHZkn0PN6+0WBSmtpdNGvIqn0J0TPXEc Eb6Pfk8dVllzkSg8HlY3+2hjD0ol7WjmtEVENYfrd9IyMrFntZicOYDBcqAmXOKm SRzAoDx8TLd0m9IEFms0f9k4ytHii3LYm6pkJ/vI33ysBDoXtRCxia9cdyO3c7tA DcR7LWRGWXUyo8QDTF97gOj4SihPC1Ly0AY4Fh6w4lFL+qSFW/xmvRfWBWepNYAq 7Svc5deOyQ8WHZPxzci1ey7Bp8mZZuhW8FpSuKJcAveDuM2Ss/Ff6O3H2SSpl7S8 WeTlp6aIlfabCrdwEJPaaXQvD/PfgPkx -----END CERTIFICATE-----Generated at Mon Oct 20 01:43:57 2025 by rpki-client