$ rpki-client -vvf rpki.apnic.net/member_repository/A9137992/18A81EF08D2E11EB9840E05FC4F9AE02/pFVIOEAp8fN2pyJjKU0GWujJRCI.mft File: pFVIOEAp8fN2pyJjKU0GWujJRCI.mft (raw, json) Hash identifier: Dk4RYy5VWAqPbSvex+tFi7ePN4iqGSfRfrRA/E0MKII= Subject key identifier: 90:76:BC:B2:48:9D:57:C4:EC:6E:DF:CF:36:D7:9C:5E:27:E4:EC:7D Authority key identifier: A4:55:48:38:40:29:F1:F3:76:A7:22:63:29:4D:06:5A:E8:C9:44:22 Certificate issuer: /CN=A9137992/serialNumber=A45548384029F1F376A72263294D065AE8C94422 Certificate serial: 0698 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/pFVIOEAp8fN2pyJjKU0GWujJRCI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9137992/18A81EF08D2E11EB9840E05FC4F9AE02/pFVIOEAp8fN2pyJjKU0GWujJRCI.mft Manifest number: 0695 Signing time: Mon 20 Oct 2025 17:15:11 +0000 Manifest this update: Mon 20 Oct 2025 17:15:09 +0000 Manifest next update: Mon 27 Oct 2025 17:15:09 +0000 Files and hashes: 1: pFVIOEAp8fN2pyJjKU0GWujJRCI.crl (hash: 6g1UQGwsMry6OqtYFngtYOmoAHpjoEGiH+mZanAFllA=) 2: 819B5C3274CB11EF941F0A71C4F9AE02.roa (hash: VjvaaM8L2XxhBSFFAzo+odtR38jKp4RPZEbo1pt7Hh0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9137992/18A81EF08D2E11EB9840E05FC4F9AE02/pFVIOEAp8fN2pyJjKU0GWujJRCI.crl rsync://rpki.apnic.net/member_repository/A9137992/18A81EF08D2E11EB9840E05FC4F9AE02/pFVIOEAp8fN2pyJjKU0GWujJRCI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/pFVIOEAp8fN2pyJjKU0GWujJRCI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 27 Oct 2025 17:04:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1688 (0x698) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9137992, serialNumber=A45548384029F1F376A72263294D065AE8C94422 Validity Not Before: Oct 20 17:15:09 2025 GMT Not After : Oct 27 17:15:09 2025 GMT Subject: CN=68f66e1e-8ebf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:d9:11:4e:78:fc:ba:eb:08:fc:66:05:4e:95: 04:73:17:25:1e:cc:98:00:c6:33:7d:1b:98:8f:5c: 40:ac:d0:6a:1c:47:8d:34:88:f5:cd:28:a4:23:81: d8:3d:69:56:ba:ba:6f:e5:1f:23:ba:53:1c:f1:15: 4b:e1:c3:4a:92:6f:91:0f:fb:1b:f0:6f:63:eb:17: 66:f4:70:d0:a5:de:a7:55:11:ea:1d:d4:e1:4d:75: be:c7:50:0e:a2:6a:5f:a0:a1:a6:3b:ed:b8:3d:7f: 21:e1:b8:8f:d9:50:90:18:b0:d0:f4:15:9a:b4:dc: b8:22:8d:24:d8:ee:ff:66:6f:81:4c:cb:63:9a:52: 6a:13:93:31:5e:d5:73:4e:18:32:a9:ea:8f:5b:aa: a3:75:a0:d3:25:2e:01:cb:0a:2d:00:3e:f8:e9:6c: 6a:af:93:35:dc:1d:99:84:7a:68:5c:38:c0:e0:ce: 56:21:8c:7e:0c:8c:2f:68:f5:14:54:c8:ca:04:3d: 61:5f:db:bb:c5:39:59:ee:f8:b7:03:ac:df:6a:48: 52:84:82:da:7d:ae:d6:19:c4:27:98:a4:d3:d5:19: 2d:61:86:f2:5b:06:fd:bb:96:98:8a:20:34:ce:fd: 2e:cd:81:dd:a1:52:0f:b9:d4:b6:36:2c:68:14:84: 9d:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:76:BC:B2:48:9D:57:C4:EC:6E:DF:CF:36:D7:9C:5E:27:E4:EC:7D X509v3 Authority Key Identifier: keyid:A4:55:48:38:40:29:F1:F3:76:A7:22:63:29:4D:06:5A:E8:C9:44:22 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9137992/18A81EF08D2E11EB9840E05FC4F9AE02/pFVIOEAp8fN2pyJjKU0GWujJRCI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/pFVIOEAp8fN2pyJjKU0GWujJRCI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9137992/18A81EF08D2E11EB9840E05FC4F9AE02/pFVIOEAp8fN2pyJjKU0GWujJRCI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 63:d3:68:f1:64:78:57:95:ee:0b:8e:8a:b8:56:75:2d:95:66: c6:33:de:8f:58:a7:2e:17:46:98:42:99:82:77:67:36:61:59: 1f:ad:a3:a0:2b:6e:84:d0:83:c5:b1:4c:d7:3f:53:31:18:83: a6:c2:05:c0:70:a7:47:25:2c:42:e7:f4:99:b0:74:59:e8:be: ea:9f:e8:63:27:9e:b9:ea:5e:ea:0e:63:37:51:ca:cc:60:b1: 2a:85:69:47:9a:4e:17:8b:16:33:7f:ba:36:6c:ad:e2:ae:e2: 85:c1:50:60:92:34:c8:1b:fb:42:75:e3:9c:f8:a7:da:5e:ec: 48:55:ae:aa:43:d1:4d:a6:8e:d6:35:74:f7:76:52:24:99:5a: 20:0b:8f:d0:5d:bd:b8:43:1f:92:8a:84:19:a4:c9:79:bd:d7: 76:28:0e:08:48:eb:7e:5f:24:0f:54:ab:ca:c3:e6:d0:09:c0: 9e:dd:e4:a8:07:f5:65:94:eb:02:46:23:df:3f:4c:33:4a:b5: 0c:0d:b9:04:e9:c3:1d:9c:89:09:74:de:64:0a:7b:bb:f8:59: 40:a9:39:a8:f0:1f:e9:c9:d0:52:15:c3:65:2a:94:d2:9e:48: 4e:a0:09:20:6f:f0:2a:95:ff:1a:82:a7:dd:04:d2:20:c3:79: 5e:ed:8b:19 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBpgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Mzc5OTIxMTAvBgNVBAUTKEE0NTU0ODM4NDAyOUYxRjM3NkE3MjI2MzI5NEQwNjVB RThDOTQ0MjIwHhcNMjUxMDIwMTcxNTA5WhcNMjUxMDI3MTcxNTA5WjAYMRYwFAYD VQQDEw02OGY2NmUxZS04ZWJmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAntkRTnj8uusI/GYFTpUEcxclHsyYAMYzfRuYj1xArNBqHEeNNIj1zSikI4HY PWlWurpv5R8julMc8RVL4cNKkm+RD/sb8G9j6xdm9HDQpd6nVRHqHdThTXW+x1AO ompfoKGmO+24PX8h4biP2VCQGLDQ9BWatNy4Io0k2O7/Zm+BTMtjmlJqE5MxXtVz ThgyqeqPW6qjdaDTJS4BywotAD746Wxqr5M13B2ZhHpoXDjA4M5WIYx+DIwvaPUU VMjKBD1hX9u7xTlZ7vi3A6zfakhShILafa7WGcQnmKTT1RktYYbyWwb9u5aYiiA0 zv0uzYHdoVIPudS2NixoFISdTQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJB2vLJI nVfE7G7fzzbXnF4n5Ox9MB8GA1UdIwQYMBaAFKRVSDhAKfHzdqciYylNBlroyUQi MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNzk5Mi8xOEE4MUVGMDhE MkUxMUVCOTg0MEUwNUZDNEY5QUUwMi9wRlZJT0VBcDhmTjJweUpqS1UwR1d1akpS Q0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3BGVklPRUFwOGZOMnB5SmpLVTBHV3VqSlJDSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz Nzk5Mi8xOEE4MUVGMDhEMkUxMUVCOTg0MEUwNUZDNEY5QUUwMi9wRlZJT0VBcDhm TjJweUpqS1UwR1d1akpSQ0kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBj02jxZHhXle4Ljoq4VnUtlWbGM96PWKcuF0aYQpmCd2c2YVkfraOg K26E0IPFsUzXP1MxGIOmwgXAcKdHJSxC5/SZsHRZ6L7qn+hjJ5656l7qDmM3UcrM YLEqhWlHmk4XixYzf7o2bK3iruKFwVBgkjTIG/tCdeOc+KfaXuxIVa6qQ9FNpo7W NXT3dlIkmVogC4/QXb24Qx+SioQZpMl5vdd2KA4ISOt+XyQPVKvKw+bQCcCe3eSo B/VllOsCRiPfP0wzSrUMDbkE6cMdnIkJdN5kCnu7+FlAqTmo8B/pydBSFcNlKpTS nkhOoAkgb/Aqlf8agqfdBNIgw3le7YsZ -----END CERTIFICATE-----Generated at Mon Oct 20 19:35:22 2025 by rpki-client