$ rpki-client -vvf rpki.apnic.net/member_repository/A91319EA/D26C4128F8E811EC8B577271C4F9AE02/fT3bIK_-cUyPNUllHB7oD1VgEbg.mft File: fT3bIK_-cUyPNUllHB7oD1VgEbg.mft (raw, json) Hash identifier: j8srPntt8AwR4bofGd5rCS8l7S0kwUEasmrLwneq99g= Subject key identifier: 44:47:EC:BA:D4:99:A8:E2:5F:E1:1F:B4:4F:34:71:C8:83:E9:E8:A0 Authority key identifier: 7D:3D:DB:20:AF:FE:71:4C:8F:35:49:65:1C:1E:E8:0F:55:60:11:B8 Certificate issuer: /CN=A91319EA/serialNumber=7D3DDB20AFFE714C8F3549651C1EE80F556011B8 Certificate serial: 02F8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fT3bIK_-cUyPNUllHB7oD1VgEbg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91319EA/D26C4128F8E811EC8B577271C4F9AE02/fT3bIK_-cUyPNUllHB7oD1VgEbg.mft Manifest number: 02F4 Signing time: Sun 19 Oct 2025 03:19:35 +0000 Manifest this update: Sun 19 Oct 2025 03:19:34 +0000 Manifest next update: Sun 26 Oct 2025 03:19:34 +0000 Files and hashes: 1: fT3bIK_-cUyPNUllHB7oD1VgEbg.crl (hash: 16rTTqOANZj/Hxg+3qkd6bS6QbiqMKp4s7bTQiPKPCE=) 2: BFD5E8EAF8EB11EC9C39C677C4F9AE02.roa (hash: 42NoXRc68AJI33l+b1k0SiSR1RteYpJ6pHpYeUhh2BI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91319EA/D26C4128F8E811EC8B577271C4F9AE02/fT3bIK_-cUyPNUllHB7oD1VgEbg.crl rsync://rpki.apnic.net/member_repository/A91319EA/D26C4128F8E811EC8B577271C4F9AE02/fT3bIK_-cUyPNUllHB7oD1VgEbg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fT3bIK_-cUyPNUllHB7oD1VgEbg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 03:19:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 760 (0x2f8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91319EA, serialNumber=7D3DDB20AFFE714C8F3549651C1EE80F556011B8 Validity Not Before: Oct 19 03:19:34 2025 GMT Not After : Oct 26 03:19:34 2025 GMT Subject: CN=68f458c6-d861 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:12:cd:66:e0:e5:09:c1:72:e8:61:9f:a2:5e: 2a:38:5d:95:2e:94:88:00:a4:ea:83:57:20:b2:2d: bc:bc:92:ad:24:a7:35:a8:07:59:1e:6a:46:1d:b5: 0e:5f:39:d5:b3:d6:02:f3:6b:72:7d:ba:98:09:3a: d4:59:62:76:5b:41:bc:72:ae:04:da:6d:a6:3a:42: f4:cf:e4:a3:c4:66:b7:03:cb:36:59:22:3f:5e:0d: 53:2a:04:6b:fe:49:f7:54:2c:54:1e:f3:72:74:b5: e3:a2:fd:a2:db:62:ac:87:4e:aa:d0:a3:e3:5c:81: 33:41:e3:06:3c:79:a2:ba:ae:c6:00:00:df:d1:fc: 5d:15:c1:d7:3b:b0:db:b3:78:53:cb:9c:a7:f0:ea: 7b:fe:9c:33:dc:8b:a5:eb:02:66:11:a1:96:7f:8f: b3:24:82:b8:a6:67:80:63:82:51:1e:9b:78:3c:47: 7e:e5:1c:13:ad:bb:83:fe:42:76:ed:0a:b5:5a:ce: dd:e9:36:42:22:19:4b:17:47:15:31:92:d0:15:6f: 5b:56:62:eb:02:64:b4:4f:46:7a:f6:ac:ce:b2:93: 90:94:9f:f8:a2:03:58:3e:cf:30:33:19:7c:8f:95: cc:87:b5:1d:52:00:a6:2e:0c:d9:cf:9f:74:9c:3a: 7c:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:47:EC:BA:D4:99:A8:E2:5F:E1:1F:B4:4F:34:71:C8:83:E9:E8:A0 X509v3 Authority Key Identifier: keyid:7D:3D:DB:20:AF:FE:71:4C:8F:35:49:65:1C:1E:E8:0F:55:60:11:B8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91319EA/D26C4128F8E811EC8B577271C4F9AE02/fT3bIK_-cUyPNUllHB7oD1VgEbg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fT3bIK_-cUyPNUllHB7oD1VgEbg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91319EA/D26C4128F8E811EC8B577271C4F9AE02/fT3bIK_-cUyPNUllHB7oD1VgEbg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 42:1d:c8:29:39:87:cf:c5:4d:21:2e:9e:d1:c6:41:aa:24:d6: f0:6c:db:44:04:bb:a1:dd:0d:44:13:16:06:1c:0e:5d:47:20: 05:f2:f2:cf:9f:c9:f2:bf:be:88:d4:de:57:74:32:dc:f1:ae: eb:44:f2:21:85:c4:f6:dd:17:40:e6:4b:30:a1:db:31:b5:57: 29:9d:40:28:91:05:9e:8a:56:b0:fe:44:0a:ef:ad:ee:2c:e2: 6e:10:87:64:18:7b:30:99:14:96:33:99:d0:a7:be:54:3f:1c: 3e:5e:ce:a9:37:12:57:f5:d5:25:8f:26:ec:e1:b0:87:80:32: ab:8f:5e:f8:dd:4d:8f:74:c5:29:3f:83:e8:ef:78:eb:b8:24: ed:97:9c:85:c4:0b:16:97:53:ba:35:4e:84:ce:88:9c:29:0a: ac:52:3d:bd:65:3b:82:11:b2:b6:9f:b0:53:70:b5:aa:27:9c: b5:b2:b9:48:98:70:aa:e8:b7:14:0a:11:69:83:ee:58:fb:da: da:64:38:43:62:07:a6:e1:31:20:cb:ee:18:7b:ae:09:c8:cc: c0:62:62:c6:f2:d9:eb:b1:c2:49:6a:e5:d8:db:07:c8:cf:e5: d4:ec:9c:b3:97:69:38:22:5f:99:08:c6:58:9e:2f:d8:e8:d4: 78:d9:39:67 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAvgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzE5RUExMTAvBgNVBAUTKDdEM0REQjIwQUZGRTcxNEM4RjM1NDk2NTFDMUVFODBG NTU2MDExQjgwHhcNMjUxMDE5MDMxOTM0WhcNMjUxMDI2MDMxOTM0WjAYMRYwFAYD VQQDEw02OGY0NThjNi1kODYxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3RLNZuDlCcFy6GGfol4qOF2VLpSIAKTqg1cgsi28vJKtJKc1qAdZHmpGHbUO XznVs9YC82tyfbqYCTrUWWJ2W0G8cq4E2m2mOkL0z+SjxGa3A8s2WSI/Xg1TKgRr /kn3VCxUHvNydLXjov2i22Ksh06q0KPjXIEzQeMGPHmiuq7GAADf0fxdFcHXO7Db s3hTy5yn8Op7/pwz3Iul6wJmEaGWf4+zJIK4pmeAY4JRHpt4PEd+5RwTrbuD/kJ2 7Qq1Ws7d6TZCIhlLF0cVMZLQFW9bVmLrAmS0T0Z69qzOspOQlJ/4ogNYPs8wMxl8 j5XMh7UdUgCmLgzZz590nDp81QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFERH7LrU majiX+EftE80cciD6eigMB8GA1UdIwQYMBaAFH092yCv/nFMjzVJZRwe6A9VYBG4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMTlFQS9EMjZDNDEyOEY4 RTgxMUVDOEI1NzcyNzFDNEY5QUUwMi9mVDNiSUtfLWNVeVBOVWxsSEI3b0QxVmdF YmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ZUM2JJS18tY1V5UE5VbGxIQjdvRDFWZ0ViZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MTlFQS9EMjZDNDEyOEY4RTgxMUVDOEI1NzcyNzFDNEY5QUUwMi9mVDNiSUtfLWNV eVBOVWxsSEI3b0QxVmdFYmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBCHcgpOYfPxU0hLp7RxkGqJNbwbNtEBLuh3Q1EExYGHA5dRyAF8vLP n8nyv76I1N5XdDLc8a7rRPIhhcT23RdA5kswodsxtVcpnUAokQWeilaw/kQK763u LOJuEIdkGHswmRSWM5nQp75UPxw+Xs6pNxJX9dUljybs4bCHgDKrj1743U2PdMUp P4Po73jruCTtl5yFxAsWl1O6NU6EzoicKQqsUj29ZTuCEbK2n7BTcLWqJ5y1srlI mHCq6LcUChFpg+5Y+9raZDhDYgem4TEgy+4Ye64JyMzAYmLG8tnrscJJauXY2wfI z+XU7Jyzl2k4Il+ZCMZYni/Y6NR42Tln -----END CERTIFICATE-----Generated at Mon Oct 20 16:34:50 2025 by rpki-client