$ rpki-client -vvf rpki.apnic.net/member_repository/A913D02A/77A1D95E33BC11EA8349850BC4F9AE02/fL-BxZ4yXvAGlzELOUX-ocEGs3g.mft File: fL-BxZ4yXvAGlzELOUX-ocEGs3g.mft (raw, json) Hash identifier: NrtK3jzUMC8CXORPPFGaVpcKp2HyPwJ8SG5++W49igY= Subject key identifier: A3:16:D0:EF:58:84:B2:46:F7:94:7D:6C:59:17:17:95:51:D1:04:BB Authority key identifier: 7C:BF:81:C5:9E:32:5E:F0:06:97:31:0B:39:45:FE:A1:C1:06:B3:78 Certificate issuer: /CN=A913D02A/serialNumber=7CBF81C59E325EF00697310B3945FEA1C106B378 Certificate serial: 0B9B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fL-BxZ4yXvAGlzELOUX-ocEGs3g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913D02A/77A1D95E33BC11EA8349850BC4F9AE02/fL-BxZ4yXvAGlzELOUX-ocEGs3g.mft Manifest number: 0B98 Signing time: Sat 18 Oct 2025 19:50:33 +0000 Manifest this update: Sat 18 Oct 2025 19:50:32 +0000 Manifest next update: Sat 25 Oct 2025 19:50:32 +0000 Files and hashes: 1: fL-BxZ4yXvAGlzELOUX-ocEGs3g.crl (hash: lcsTiwDdMD4Aq8bMybvzK2fHGd/k/iZCCU1aL51vcms=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913D02A/77A1D95E33BC11EA8349850BC4F9AE02/fL-BxZ4yXvAGlzELOUX-ocEGs3g.crl rsync://rpki.apnic.net/member_repository/A913D02A/77A1D95E33BC11EA8349850BC4F9AE02/fL-BxZ4yXvAGlzELOUX-ocEGs3g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fL-BxZ4yXvAGlzELOUX-ocEGs3g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 19:50:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2971 (0xb9b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913D02A, serialNumber=7CBF81C59E325EF00697310B3945FEA1C106B378 Validity Not Before: Oct 18 19:50:32 2025 GMT Not After : Oct 25 19:50:32 2025 GMT Subject: CN=68f3ef88-d054 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:f0:b5:a9:94:5e:c1:b8:aa:e9:a3:3d:b7:81: c7:3e:a9:bb:4a:53:f9:d9:b1:d6:53:68:4f:51:6b: cf:8a:d7:54:a9:58:b9:df:f0:e1:89:d6:2a:d4:30: db:4a:04:58:d4:fd:3e:e4:6d:2c:21:fa:77:d0:f7: ca:0d:6c:46:4d:58:f2:68:10:15:d7:64:d8:7b:1a: 04:07:ca:c0:1f:3a:64:78:c0:d4:f6:76:c2:ff:aa: 9a:43:78:f0:20:c8:0c:72:a2:a0:f0:39:c0:a9:a2: 2a:3e:e4:96:40:de:c0:53:fe:98:19:35:a6:6b:02: 38:ad:1c:70:a5:6e:07:0e:07:68:3b:9b:b8:96:68: e8:00:2e:b7:b5:87:7f:64:14:33:64:2b:fc:d7:65: 36:83:a9:d5:08:d0:c0:85:3a:fa:9b:7f:a7:c2:35: 42:c2:ae:54:82:ff:0b:95:1b:08:94:75:e2:a9:94: 0b:9d:7a:5c:5a:9f:2d:49:50:68:df:f4:ab:4b:38: a5:0e:e7:36:29:2e:ea:60:fb:94:38:77:90:cb:e0: c8:7c:44:0c:6f:bf:25:0f:22:1a:12:5d:c4:6c:07: ae:36:6e:7b:11:96:59:77:c7:18:8c:df:e0:40:58: 32:27:91:cb:4c:fa:53:23:24:a6:f4:9d:73:2a:6b: f4:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:16:D0:EF:58:84:B2:46:F7:94:7D:6C:59:17:17:95:51:D1:04:BB X509v3 Authority Key Identifier: keyid:7C:BF:81:C5:9E:32:5E:F0:06:97:31:0B:39:45:FE:A1:C1:06:B3:78 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913D02A/77A1D95E33BC11EA8349850BC4F9AE02/fL-BxZ4yXvAGlzELOUX-ocEGs3g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fL-BxZ4yXvAGlzELOUX-ocEGs3g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913D02A/77A1D95E33BC11EA8349850BC4F9AE02/fL-BxZ4yXvAGlzELOUX-ocEGs3g.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b0:30:33:ca:d4:ed:3a:d8:a6:11:91:88:4f:28:8e:cc:02:5f: c1:e3:51:6b:bc:36:e0:e6:77:fe:ac:60:83:6f:9f:3c:ce:c9: a9:60:93:b6:a0:13:94:82:dd:fa:99:20:7b:e6:96:c7:ec:42: f7:5a:c0:e1:f8:7d:09:00:01:03:e9:e6:8c:a5:58:38:77:48: 10:98:7c:41:97:67:01:70:64:8c:4b:84:d4:95:dd:9f:d0:d2: 66:12:da:06:d4:e3:bd:55:ac:74:75:71:dd:f7:8e:0d:1c:6e: 68:1d:60:3f:e4:7a:0b:cc:b8:8b:74:4e:68:2a:4c:b2:16:c5: af:22:e5:f5:34:73:fa:6a:bb:89:ca:c3:a8:25:0a:3e:c6:96: 74:1e:b3:66:eb:d1:c2:04:70:80:3a:ac:c6:b1:dd:05:a7:c5: ee:e2:71:1b:9c:13:4e:32:15:1e:04:26:13:32:09:89:41:09: fe:32:b6:1a:b0:04:78:d3:93:7c:6d:5a:f3:5d:89:78:f3:c6: 16:30:91:fc:9c:bc:4b:41:89:41:9a:f7:37:9a:2e:ea:9f:43: 2e:70:66:26:38:39:a4:69:dd:4d:bd:e8:d4:8d:4d:e3:d8:bf: 1e:3b:0b:1c:5a:9d:6e:ab:0a:08:e5:e1:d5:57:27:91:16:d4: a7:43:ef:87 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC5swDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0QwMkExMTAvBgNVBAUTKDdDQkY4MUM1OUUzMjVFRjAwNjk3MzEwQjM5NDVGRUEx QzEwNkIzNzgwHhcNMjUxMDE4MTk1MDMyWhcNMjUxMDI1MTk1MDMyWjAYMRYwFAYD VQQDEw02OGYzZWY4OC1kMDU0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwPC1qZRewbiq6aM9t4HHPqm7SlP52bHWU2hPUWvPitdUqVi53/DhidYq1DDb SgRY1P0+5G0sIfp30PfKDWxGTVjyaBAV12TYexoEB8rAHzpkeMDU9nbC/6qaQ3jw IMgMcqKg8DnAqaIqPuSWQN7AU/6YGTWmawI4rRxwpW4HDgdoO5u4lmjoAC63tYd/ ZBQzZCv812U2g6nVCNDAhTr6m3+nwjVCwq5Ugv8LlRsIlHXiqZQLnXpcWp8tSVBo 3/SrSzilDuc2KS7qYPuUOHeQy+DIfEQMb78lDyIaEl3EbAeuNm57EZZZd8cYjN/g QFgyJ5HLTPpTIySm9J1zKmv0lQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKMW0O9Y hLJG95R9bFkXF5VR0QS7MB8GA1UdIwQYMBaAFHy/gcWeMl7wBpcxCzlF/qHBBrN4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzRDAyQS83N0ExRDk1RTMz QkMxMUVBODM0OTg1MEJDNEY5QUUwMi9mTC1CeFo0eVh2QUdsekVMT1VYLW9jRUdz M2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ZMLUJ4WjR5WHZBR2x6RUxPVVgtb2NFR3MzZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz RDAyQS83N0ExRDk1RTMzQkMxMUVBODM0OTg1MEJDNEY5QUUwMi9mTC1CeFo0eVh2 QUdsekVMT1VYLW9jRUdzM2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCwMDPK1O062KYRkYhPKI7MAl/B41FrvDbg5nf+rGCDb588zsmpYJO2 oBOUgt36mSB75pbH7EL3WsDh+H0JAAED6eaMpVg4d0gQmHxBl2cBcGSMS4TUld2f 0NJmEtoG1OO9Vax0dXHd944NHG5oHWA/5HoLzLiLdE5oKkyyFsWvIuX1NHP6aruJ ysOoJQo+xpZ0HrNm69HCBHCAOqzGsd0Fp8Xu4nEbnBNOMhUeBCYTMgmJQQn+MrYa sAR405N8bVrzXYl488YWMJH8nLxLQYlBmvc3mi7qn0MucGYmODmkad1NvejUjU3j 2L8eOwscWp1uqwoI5eHVVyeRFtSnQ++H -----END CERTIFICATE-----Generated at Mon Oct 20 01:44:18 2025 by rpki-client