$ rpki-client -vvf rpki.apnic.net/member_repository/A912F40E/303B3D786B7811EAA713D778C4F9AE02/FOvueS5AUhzVGx8DIDp_jiq7EtI.mft File: FOvueS5AUhzVGx8DIDp_jiq7EtI.mft (raw, json) Hash identifier: l1ps4vEDWRX0YzTLu8VCt6fR8egUb8GXl/R/Hfpf6Ag= Subject key identifier: EE:4F:BB:52:2C:A6:E8:06:DD:23:1E:FE:34:48:46:87:73:53:0A:46 Authority key identifier: 14:EB:EE:79:2E:40:52:1C:D5:1B:1F:03:20:3A:7F:8E:2A:BB:12:D2 Certificate issuer: /CN=A912F40E/serialNumber=14EBEE792E40521CD51B1F03203A7F8E2ABB12D2 Certificate serial: 0A84 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FOvueS5AUhzVGx8DIDp_jiq7EtI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912F40E/303B3D786B7811EAA713D778C4F9AE02/FOvueS5AUhzVGx8DIDp_jiq7EtI.mft Manifest number: 0A7D Signing time: Sat 18 Oct 2025 20:34:37 +0000 Manifest this update: Sat 18 Oct 2025 20:34:37 +0000 Manifest next update: Sat 25 Oct 2025 20:34:37 +0000 Files and hashes: 1: FOvueS5AUhzVGx8DIDp_jiq7EtI.crl (hash: BUwy+HJBSrggKgZ2T19qATtuRiMAtpzak96slMDBnCM=) 2: 6677438E6B7B11EA908F7C82C4F9AE02.roa (hash: NUGRzsEaZYXcjIXcIhWTrYjjrRluMFcxpsApcnV+LZE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912F40E/303B3D786B7811EAA713D778C4F9AE02/FOvueS5AUhzVGx8DIDp_jiq7EtI.crl rsync://rpki.apnic.net/member_repository/A912F40E/303B3D786B7811EAA713D778C4F9AE02/FOvueS5AUhzVGx8DIDp_jiq7EtI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FOvueS5AUhzVGx8DIDp_jiq7EtI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 20:34:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2692 (0xa84) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912F40E, serialNumber=14EBEE792E40521CD51B1F03203A7F8E2ABB12D2 Validity Not Before: Oct 18 20:34:37 2025 GMT Not After : Oct 25 20:34:37 2025 GMT Subject: CN=68f3f9dd-73e4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:0c:76:32:ca:e8:90:22:22:d3:ea:2d:15:66: 58:74:14:cc:dd:05:11:ad:eb:5b:c6:46:6f:b1:f9: 18:5a:a7:70:5e:d7:2c:df:34:70:0e:02:a1:9e:61: 46:12:f9:98:d9:d5:cd:7a:e2:d7:b2:a1:fa:a9:9c: 77:fc:17:25:a7:40:9d:12:05:17:20:3b:cb:a8:0d: 2e:3c:a8:33:fe:ad:b6:ff:80:ed:fe:f6:78:9f:0f: e0:15:33:09:dc:42:44:45:34:c9:c5:ed:b2:c7:f7: 5c:9a:65:47:25:8a:5f:7c:cf:47:8f:db:49:2d:b9: 4e:55:43:c2:a3:d0:5c:2e:b3:f4:52:f9:36:f0:37: e5:10:6c:8f:28:7d:51:f3:d5:77:e7:6d:e6:b5:75: 03:f7:45:17:4f:98:44:21:1f:b9:da:54:0d:c2:c3: 31:4e:7e:15:78:18:ce:04:0d:70:62:01:88:aa:8f: ad:82:24:40:da:bf:9a:18:e1:9f:17:13:6e:85:0e: 0e:6f:c5:b4:e6:bd:b4:7b:bc:9c:89:97:f1:bd:c3: 57:cd:b3:b0:e9:6e:b1:66:7c:83:c8:8d:0f:e6:0f: b8:9f:f2:2d:5b:15:01:26:1a:21:92:7e:d5:02:38: 2b:2f:2f:1c:26:87:f1:a6:c2:a3:1e:7c:6a:ae:41: 9d:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:4F:BB:52:2C:A6:E8:06:DD:23:1E:FE:34:48:46:87:73:53:0A:46 X509v3 Authority Key Identifier: keyid:14:EB:EE:79:2E:40:52:1C:D5:1B:1F:03:20:3A:7F:8E:2A:BB:12:D2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912F40E/303B3D786B7811EAA713D778C4F9AE02/FOvueS5AUhzVGx8DIDp_jiq7EtI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FOvueS5AUhzVGx8DIDp_jiq7EtI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912F40E/303B3D786B7811EAA713D778C4F9AE02/FOvueS5AUhzVGx8DIDp_jiq7EtI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6f:33:f7:91:ea:63:78:b6:7f:a5:16:1d:fe:b8:2c:78:e4:25: e7:d0:f3:b3:b9:52:5a:9f:ec:ae:f1:45:95:55:69:c0:f5:e7: 08:50:83:51:36:c4:6f:22:5b:55:27:f6:f8:71:c6:f4:a6:ff: 45:39:5a:14:5d:c8:24:ab:41:df:22:56:d1:02:fe:63:ff:11: 2e:3b:9f:ca:22:b1:08:d0:3e:8c:f2:a6:d8:30:d0:9a:10:49: a4:0d:e5:b5:93:20:8d:f3:17:3c:29:fd:4e:34:8b:03:fa:f3: 30:d3:62:57:85:1a:39:fb:e1:5c:51:27:69:93:49:7c:ce:35: a2:7b:e3:9a:13:19:7d:21:1e:c2:b3:e7:0d:55:37:a9:7b:d6: 2f:2b:bf:b2:b2:86:99:72:74:c3:6f:be:5e:92:ce:84:c0:96: b8:35:91:8e:9c:7c:c3:e1:ce:2b:13:0b:41:78:3a:d2:03:10: 2e:67:62:ff:9d:7c:a8:a3:2b:40:68:2f:09:0c:e3:50:87:f7: 6c:00:92:fb:28:6d:7d:3c:3a:ad:7b:f8:91:0b:9b:90:16:53: 12:b4:20:31:fb:40:57:e4:87:d3:c2:7a:76:7d:f4:8d:27:d5: af:33:6f:01:bd:79:c6:b8:6b:86:c4:9f:2b:4e:07:f7:e4:21: 7e:08:d9:63 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCoQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkY0MEUxMTAvBgNVBAUTKDE0RUJFRTc5MkU0MDUyMUNENTFCMUYwMzIwM0E3RjhF MkFCQjEyRDIwHhcNMjUxMDE4MjAzNDM3WhcNMjUxMDI1MjAzNDM3WjAYMRYwFAYD VQQDEw02OGYzZjlkZC03M2U0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAygx2MsrokCIi0+otFWZYdBTM3QURretbxkZvsfkYWqdwXtcs3zRwDgKhnmFG EvmY2dXNeuLXsqH6qZx3/Bclp0CdEgUXIDvLqA0uPKgz/q22/4Dt/vZ4nw/gFTMJ 3EJERTTJxe2yx/dcmmVHJYpffM9Hj9tJLblOVUPCo9BcLrP0Uvk28DflEGyPKH1R 89V3523mtXUD90UXT5hEIR+52lQNwsMxTn4VeBjOBA1wYgGIqo+tgiRA2r+aGOGf FxNuhQ4Ob8W05r20e7yciZfxvcNXzbOw6W6xZnyDyI0P5g+4n/ItWxUBJhohkn7V AjgrLy8cJofxpsKjHnxqrkGdlwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFO5Pu1Is pugG3SMe/jRIRodzUwpGMB8GA1UdIwQYMBaAFBTr7nkuQFIc1RsfAyA6f44quxLS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRjQwRS8zMDNCM0Q3ODZC NzgxMUVBQTcxM0Q3NzhDNEY5QUUwMi9GT3Z1ZVM1QVVoelZHeDhESURwX2ppcTdF dEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZPdnVlUzVBVWh6Vkd4OERJRHBfamlxN0V0SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy RjQwRS8zMDNCM0Q3ODZCNzgxMUVBQTcxM0Q3NzhDNEY5QUUwMi9GT3Z1ZVM1QVVo elZHeDhESURwX2ppcTdFdEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBvM/eR6mN4tn+lFh3+uCx45CXn0POzuVJan+yu8UWVVWnA9ecIUINR NsRvIltVJ/b4ccb0pv9FOVoUXcgkq0HfIlbRAv5j/xEuO5/KIrEI0D6M8qbYMNCa EEmkDeW1kyCN8xc8Kf1ONIsD+vMw02JXhRo5++FcUSdpk0l8zjWie+OaExl9IR7C s+cNVTepe9YvK7+ysoaZcnTDb75eks6EwJa4NZGOnHzD4c4rEwtBeDrSAxAuZ2L/ nXyooytAaC8JDONQh/dsAJL7KG19PDqte/iRC5uQFlMStCAx+0BX5IfTwnp2ffSN J9WvM28BvXnGuGuGxJ8rTgf35CF+CNlj -----END CERTIFICATE-----Generated at Mon Oct 20 04:06:21 2025 by rpki-client