$ rpki-client -vvf rpki.apnic.net/member_repository/A9143FE9/F9E65E20443811EBAD443F74C4F9AE02/FSDys0q93K6U-pIu9HV802FA8lQ.mft File: FSDys0q93K6U-pIu9HV802FA8lQ.mft (raw, json) Hash identifier: OX/t4XXB38ExmSHGBdK/zUfGD7CFxovyZ54eAPaGeVE= Subject key identifier: E9:1E:57:E1:41:9B:CC:12:5C:36:FC:C6:0E:95:9C:0F:AF:B0:8B:03 Authority key identifier: 15:20:F2:B3:4A:BD:DC:AE:94:FA:92:2E:F4:75:7C:D3:61:40:F2:54 Certificate issuer: /CN=A9143FE9/serialNumber=1520F2B34ABDDCAE94FA922EF4757CD36140F254 Certificate serial: 075A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FSDys0q93K6U-pIu9HV802FA8lQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9143FE9/F9E65E20443811EBAD443F74C4F9AE02/FSDys0q93K6U-pIu9HV802FA8lQ.mft Manifest number: 074D Signing time: Sat 18 Oct 2025 23:06:38 +0000 Manifest this update: Sat 18 Oct 2025 23:06:38 +0000 Manifest next update: Sat 25 Oct 2025 23:06:38 +0000 Files and hashes: 1: FSDys0q93K6U-pIu9HV802FA8lQ.crl (hash: cXD+9ZtodbqwjTA7KiWN8+ND6HD+AMHGD47jx1ULqBU=) 2: A6864ACE7BA911EDB41A851EC4F9AE02.roa (hash: in5sPndy+m94d5TFTDzmLk0rnuoauLzhEu9bOOaeDaw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9143FE9/F9E65E20443811EBAD443F74C4F9AE02/FSDys0q93K6U-pIu9HV802FA8lQ.crl rsync://rpki.apnic.net/member_repository/A9143FE9/F9E65E20443811EBAD443F74C4F9AE02/FSDys0q93K6U-pIu9HV802FA8lQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FSDys0q93K6U-pIu9HV802FA8lQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 23:06:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1882 (0x75a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9143FE9, serialNumber=1520F2B34ABDDCAE94FA922EF4757CD36140F254 Validity Not Before: Oct 18 23:06:38 2025 GMT Not After : Oct 25 23:06:38 2025 GMT Subject: CN=68f41d7e-f143 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:c9:37:7d:83:b3:e0:cc:ab:0d:fd:d3:0d:43: 88:95:de:93:a1:41:a2:06:2c:81:70:6c:d1:12:f1: 54:4c:10:0a:fa:44:14:e6:c0:64:5a:62:0c:2c:33: b8:bb:4e:55:6c:62:b1:49:7d:91:cb:bc:c3:4b:07: 8b:73:20:31:21:ba:bf:64:5e:30:97:71:15:64:90: c6:fa:64:48:c9:08:fb:ae:98:d4:c7:8b:12:b9:7c: 38:b8:ec:f5:2c:b9:dd:93:95:ce:d1:af:f0:fa:85: eb:8e:c2:70:67:cd:7d:0b:a0:55:c7:f7:c5:82:2d: 9f:74:88:22:30:7a:bf:09:a5:87:63:9a:a9:dd:02: 9c:de:a4:9a:30:c2:f1:20:d0:ad:a5:b8:c3:6a:52: 70:e3:b6:5e:5d:e3:41:da:e5:37:c5:09:cf:4c:5b: e5:b0:3a:06:ed:9c:52:6c:93:45:3c:a9:c8:e7:a1: 7f:39:f2:fa:b0:b7:ea:71:87:7d:bd:0a:7f:10:7f: 7b:cd:a0:f2:1e:21:4c:96:44:c2:fe:ab:94:4b:7f: 9c:9d:65:16:15:e0:77:85:1a:91:2f:9a:fc:2b:db: 84:65:dc:44:11:14:e4:0c:7b:a3:a4:dc:17:9c:98: 4a:e0:f9:94:58:e5:0d:13:d5:e4:b2:9d:29:d0:e3: 42:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:1E:57:E1:41:9B:CC:12:5C:36:FC:C6:0E:95:9C:0F:AF:B0:8B:03 X509v3 Authority Key Identifier: keyid:15:20:F2:B3:4A:BD:DC:AE:94:FA:92:2E:F4:75:7C:D3:61:40:F2:54 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9143FE9/F9E65E20443811EBAD443F74C4F9AE02/FSDys0q93K6U-pIu9HV802FA8lQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FSDys0q93K6U-pIu9HV802FA8lQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9143FE9/F9E65E20443811EBAD443F74C4F9AE02/FSDys0q93K6U-pIu9HV802FA8lQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 67:b2:a8:7c:31:48:55:b6:0e:72:6f:19:1f:4f:1e:11:f4:fe: d0:c2:a4:21:b4:d1:b5:22:8b:ad:4b:77:e4:18:dc:d8:75:e6: ac:5e:6b:11:36:6d:71:c0:90:1b:bd:07:f7:58:11:7d:17:73: 28:8b:66:fe:c4:c0:a0:39:49:d4:4b:9e:fa:3c:93:d9:b9:28: fb:52:21:b4:fd:83:8c:57:d0:98:95:9c:0e:13:3b:61:77:d1: 4c:b6:bc:44:90:36:69:43:61:b5:6f:93:e8:18:73:ae:db:1e: ec:9b:03:58:ba:14:ea:59:69:60:71:13:33:38:06:df:88:3c: 4c:98:15:2c:a3:53:7f:64:07:cb:34:25:35:e6:d9:a9:1c:ff: a5:f7:98:72:1e:35:37:8d:27:fb:70:ed:8d:cc:c7:04:af:90: 2c:e6:70:8b:c1:4d:49:11:cb:39:89:c1:4f:bd:4a:19:3a:97: 34:2a:0f:e0:7a:26:2a:ed:65:ea:07:27:ce:f5:04:67:b0:51: 09:0b:c8:35:87:9e:99:73:fe:63:03:b5:a0:e5:9b:2f:c6:52: 2d:72:d9:cc:86:d1:83:b2:d5:63:3e:c4:3c:78:ad:23:f6:b0: ef:a0:91:f6:68:02:03:97:d1:3f:36:61:40:d2:e8:fe:3e:51: 1a:9d:5a:87 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB1owDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDNGRTkxMTAvBgNVBAUTKDE1MjBGMkIzNEFCRERDQUU5NEZBOTIyRUY0NzU3Q0Qz NjE0MEYyNTQwHhcNMjUxMDE4MjMwNjM4WhcNMjUxMDI1MjMwNjM4WjAYMRYwFAYD VQQDEw02OGY0MWQ3ZS1mMTQzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqMk3fYOz4MyrDf3TDUOIld6ToUGiBiyBcGzREvFUTBAK+kQU5sBkWmIMLDO4 u05VbGKxSX2Ry7zDSweLcyAxIbq/ZF4wl3EVZJDG+mRIyQj7rpjUx4sSuXw4uOz1 LLndk5XO0a/w+oXrjsJwZ819C6BVx/fFgi2fdIgiMHq/CaWHY5qp3QKc3qSaMMLx INCtpbjDalJw47ZeXeNB2uU3xQnPTFvlsDoG7ZxSbJNFPKnI56F/OfL6sLfqcYd9 vQp/EH97zaDyHiFMlkTC/quUS3+cnWUWFeB3hRqRL5r8K9uEZdxEERTkDHujpNwX nJhK4PmUWOUNE9Xksp0p0ONCSwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOkeV+FB m8wSXDb8xg6VnA+vsIsDMB8GA1UdIwQYMBaAFBUg8rNKvdyulPqSLvR1fNNhQPJU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0M0ZFOS9GOUU2NUUyMDQ0 MzgxMUVCQUQ0NDNGNzRDNEY5QUUwMi9GU0R5czBxOTNLNlUtcEl1OUhWODAyRkE4 bFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZTRHlzMHE5M0s2VS1wSXU5SFY4MDJGQThsUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 M0ZFOS9GOUU2NUUyMDQ0MzgxMUVCQUQ0NDNGNzRDNEY5QUUwMi9GU0R5czBxOTNL NlUtcEl1OUhWODAyRkE4bFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBnsqh8MUhVtg5ybxkfTx4R9P7QwqQhtNG1IoutS3fkGNzYdeasXmsR Nm1xwJAbvQf3WBF9F3Moi2b+xMCgOUnUS576PJPZuSj7UiG0/YOMV9CYlZwOEzth d9FMtrxEkDZpQ2G1b5PoGHOu2x7smwNYuhTqWWlgcRMzOAbfiDxMmBUso1N/ZAfL NCU15tmpHP+l95hyHjU3jSf7cO2NzMcEr5As5nCLwU1JEcs5icFPvUoZOpc0Kg/g eiYq7WXqByfO9QRnsFEJC8g1h56Zc/5jA7Wg5ZsvxlItctnMhtGDstVjPsQ8eK0j 9rDvoJH2aAIDl9E/NmFA0uj+PlEanVqH -----END CERTIFICATE-----Generated at Mon Oct 20 01:47:46 2025 by rpki-client