$ rpki-client -vvf rpki.apnic.net/member_repository/A912FEAB/FDD899EC2F8411ED98B91B0AC4F9AE02/FWZDTXxsxlkckNwnSr9z3gDrBQE.mft File: FWZDTXxsxlkckNwnSr9z3gDrBQE.mft (raw, json) Hash identifier: dRpXl2EsIRdAUnY7A5U4Uf5YyvntefQRWFeT2+en9d0= Subject key identifier: 05:5B:4C:EF:77:00:BC:99:B3:F1:35:43:63:E3:87:15:84:D2:D2:93 Authority key identifier: 15:66:43:4D:7C:6C:C6:59:1C:90:DC:27:4A:BF:73:DE:00:EB:05:01 Certificate issuer: /CN=A912FEAB/serialNumber=1566434D7C6CC6591C90DC274ABF73DE00EB0501 Certificate serial: 026F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FWZDTXxsxlkckNwnSr9z3gDrBQE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912FEAB/FDD899EC2F8411ED98B91B0AC4F9AE02/FWZDTXxsxlkckNwnSr9z3gDrBQE.mft Manifest number: 026B Signing time: Sun 19 Oct 2025 03:54:42 +0000 Manifest this update: Sun 19 Oct 2025 03:54:42 +0000 Manifest next update: Sun 26 Oct 2025 03:54:42 +0000 Files and hashes: 1: FWZDTXxsxlkckNwnSr9z3gDrBQE.crl (hash: QJDbY8Fvb0RTteiUNk2yFs8HVIa5VPz/dbXbGZUQyTo=) 2: 9082B9C42F8711ED90F1090CC4F9AE02.roa (hash: ONxSWlWsPlzS3F23WNJvpVx69ftE7+2igW4xzmclKbg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912FEAB/FDD899EC2F8411ED98B91B0AC4F9AE02/FWZDTXxsxlkckNwnSr9z3gDrBQE.crl rsync://rpki.apnic.net/member_repository/A912FEAB/FDD899EC2F8411ED98B91B0AC4F9AE02/FWZDTXxsxlkckNwnSr9z3gDrBQE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FWZDTXxsxlkckNwnSr9z3gDrBQE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 03:54:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 623 (0x26f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912FEAB, serialNumber=1566434D7C6CC6591C90DC274ABF73DE00EB0501 Validity Not Before: Oct 19 03:54:42 2025 GMT Not After : Oct 26 03:54:42 2025 GMT Subject: CN=68f46102-16bc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:f3:fa:19:43:16:cd:bd:c1:13:cc:25:6d:17: ce:7c:3c:0f:c1:f3:62:55:b4:84:4f:8f:18:89:72: 4b:a2:e7:97:65:9b:d0:f2:e1:71:ba:22:7d:4f:8f: 60:d6:b5:bf:55:76:1b:42:27:d9:82:e9:b6:f1:8e: 27:57:3e:f5:fa:8a:d1:79:30:d3:df:b5:49:75:c5: c5:b8:c3:a5:49:0b:7c:0f:2d:22:cd:ab:62:b7:1a: a7:b1:a6:c1:c1:d2:29:b8:24:e9:e0:3e:d7:c9:af: cb:2b:ca:de:f1:45:0b:5a:c3:bf:58:1f:0b:bb:65: 62:33:ca:8f:fc:de:da:e9:4d:5e:f8:e2:7f:37:60: 5d:85:20:03:2e:d4:01:fb:68:8b:07:36:f0:84:a3: f4:99:5c:71:32:ef:85:f5:ab:3f:86:bb:00:07:e7: 33:b5:1a:33:a5:1a:62:01:27:17:c3:67:70:18:3f: 9f:84:83:c7:96:14:65:45:09:68:cd:79:1d:51:42: 42:9e:67:a7:9d:f6:d5:95:f3:b9:7b:d8:0a:8e:fe: 6d:4c:96:69:5a:76:41:a1:fb:3b:6e:c7:da:5a:5a: 20:9b:ae:30:e2:96:27:0a:a4:aa:ac:bc:e1:2b:95: 25:48:3c:2a:99:eb:d3:5f:fd:21:9a:c1:bd:14:fc: 3d:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:5B:4C:EF:77:00:BC:99:B3:F1:35:43:63:E3:87:15:84:D2:D2:93 X509v3 Authority Key Identifier: keyid:15:66:43:4D:7C:6C:C6:59:1C:90:DC:27:4A:BF:73:DE:00:EB:05:01 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912FEAB/FDD899EC2F8411ED98B91B0AC4F9AE02/FWZDTXxsxlkckNwnSr9z3gDrBQE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FWZDTXxsxlkckNwnSr9z3gDrBQE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912FEAB/FDD899EC2F8411ED98B91B0AC4F9AE02/FWZDTXxsxlkckNwnSr9z3gDrBQE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 10:df:fa:3c:23:f9:69:9b:13:fa:8a:1d:c2:89:8c:b4:46:60: 6d:68:90:39:a9:26:7b:2a:c7:3d:70:0c:09:cd:d2:0c:08:16: e0:26:fe:56:11:0f:39:23:b9:be:f3:4d:69:89:b3:2d:10:a8: 5a:0b:84:9a:2f:ba:46:02:e8:f9:13:63:fb:09:33:80:8b:77: 32:5e:1f:3e:75:54:59:c2:2f:c2:7c:ea:1b:70:79:4e:c9:f2: 0f:2e:f0:14:90:88:e9:d7:94:9e:7c:a5:d5:b7:04:60:26:ae: 9c:4e:f0:1c:11:bc:84:f5:b2:3e:0e:ab:82:38:16:77:df:95: d1:a4:05:3a:66:07:b9:46:7a:0a:45:80:ea:41:32:32:17:8c: 60:9f:99:ae:a3:0d:dc:6a:9e:88:c2:4a:b2:bb:87:5f:8b:76: 15:36:89:56:68:a2:ba:c6:d7:05:22:e5:51:49:35:9c:7f:af: 1d:73:fd:52:e8:db:2e:d3:07:e5:be:cb:2b:e7:21:a6:8c:4b: dd:a1:b5:80:c6:dc:8a:d9:b8:d1:ee:3a:fa:f9:df:1d:01:ec: 8b:1f:cb:7f:72:39:29:a2:89:72:d7:3b:c5:1e:a4:03:c7:d5: 2b:7b:b7:6b:5b:94:98:96:9f:9d:37:30:2d:c0:03:2e:39:e0: af:0b:7a:72 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAm8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkZFQUIxMTAvBgNVBAUTKDE1NjY0MzREN0M2Q0M2NTkxQzkwREMyNzRBQkY3M0RF MDBFQjA1MDEwHhcNMjUxMDE5MDM1NDQyWhcNMjUxMDI2MDM1NDQyWjAYMRYwFAYD VQQDEw02OGY0NjEwMi0xNmJjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0fP6GUMWzb3BE8wlbRfOfDwPwfNiVbSET48YiXJLoueXZZvQ8uFxuiJ9T49g 1rW/VXYbQifZgum28Y4nVz71+orReTDT37VJdcXFuMOlSQt8Dy0izatitxqnsabB wdIpuCTp4D7Xya/LK8re8UULWsO/WB8Lu2ViM8qP/N7a6U1e+OJ/N2BdhSADLtQB +2iLBzbwhKP0mVxxMu+F9as/hrsAB+cztRozpRpiAScXw2dwGD+fhIPHlhRlRQlo zXkdUUJCnmennfbVlfO5e9gKjv5tTJZpWnZBofs7bsfaWlogm64w4pYnCqSqrLzh K5UlSDwqmevTX/0hmsG9FPw9bwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAVbTO93 ALyZs/E1Q2PjhxWE0tKTMB8GA1UdIwQYMBaAFBVmQ018bMZZHJDcJ0q/c94A6wUB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRkVBQi9GREQ4OTlFQzJG ODQxMUVEOThCOTFCMEFDNEY5QUUwMi9GV1pEVFh4c3hsa2NrTnduU3I5ejNnRHJC UUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZXWkRUWHhzeGxrY2tOd25Tcjl6M2dEckJRRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy RkVBQi9GREQ4OTlFQzJGODQxMUVEOThCOTFCMEFDNEY5QUUwMi9GV1pEVFh4c3hs a2NrTnduU3I5ejNnRHJCUUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAQ3/o8I/lpmxP6ih3CiYy0RmBtaJA5qSZ7Ksc9cAwJzdIMCBbgJv5W EQ85I7m+801pibMtEKhaC4SaL7pGAuj5E2P7CTOAi3cyXh8+dVRZwi/CfOobcHlO yfIPLvAUkIjp15SefKXVtwRgJq6cTvAcEbyE9bI+DquCOBZ335XRpAU6Zge5RnoK RYDqQTIyF4xgn5muow3cap6Iwkqyu4dfi3YVNolWaKK6xtcFIuVRSTWcf68dc/1S 6Nsu0wflvssr5yGmjEvdobWAxtyK2bjR7jr6+d8dAeyLH8t/cjkpooly1zvFHqQD x9Ure7drW5SYlp+dNzAtwAMuOeCvC3py -----END CERTIFICATE-----Generated at Mon Oct 20 00:32:29 2025 by rpki-client