$ rpki-client -vvf rpki.apnic.net/member_repository/A9148BFA/04A24C34114311EC97369F73C4F9AE02/FXsL3g48rbKUg5vJgVZVZE2ybpE.mft File: FXsL3g48rbKUg5vJgVZVZE2ybpE.mft (raw, json) Hash identifier: /0B6ADJbPnWCfp13tkWNyXqxxfxL3eKq48l8/WiEq8I= Subject key identifier: ED:DD:AC:7A:53:57:A3:68:80:9B:7B:DB:DB:31:D1:6F:0D:27:AD:60 Authority key identifier: 15:7B:0B:DE:0E:3C:AD:B2:94:83:9B:C9:81:56:55:64:4D:B2:6E:91 Certificate issuer: /CN=A9148BFA/serialNumber=157B0BDE0E3CADB294839BC9815655644DB26E91 Certificate serial: 05A2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FXsL3g48rbKUg5vJgVZVZE2ybpE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9148BFA/04A24C34114311EC97369F73C4F9AE02/FXsL3g48rbKUg5vJgVZVZE2ybpE.mft Manifest number: 0573 Signing time: Sun 19 Oct 2025 01:12:10 +0000 Manifest this update: Sun 19 Oct 2025 01:12:09 +0000 Manifest next update: Sun 26 Oct 2025 01:12:09 +0000 Files and hashes: 1: FXsL3g48rbKUg5vJgVZVZE2ybpE.crl (hash: xoyzpmJxxDiLGQ5YxhZ88M7tWNvudHkAbOv7DdUiEqA=) 2: B589332C498611EF90B46962C4F9AE02.roa (hash: uDyhMVme3VTf+JhXqHqMKucF4UMzPNmrq3U6pJO1VaY=) 3: 93DAAB4612BA11EF901ACD28C4F9AE02.roa (hash: l7Qd9q+JWXL9sQ4Jr7CNDbb+BXG9V5k2ZQl4V+DIHCQ=) 4: 282DAABE82EC11EEB4D96065C4F9AE02.roa (hash: gm9Kdto0nMF6gnIYhzKNLY3X/9aSmX52C7f5pF3kzmE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9148BFA/04A24C34114311EC97369F73C4F9AE02/FXsL3g48rbKUg5vJgVZVZE2ybpE.crl rsync://rpki.apnic.net/member_repository/A9148BFA/04A24C34114311EC97369F73C4F9AE02/FXsL3g48rbKUg5vJgVZVZE2ybpE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FXsL3g48rbKUg5vJgVZVZE2ybpE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 01:12:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1442 (0x5a2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9148BFA, serialNumber=157B0BDE0E3CADB294839BC9815655644DB26E91 Validity Not Before: Oct 19 01:12:09 2025 GMT Not After : Oct 26 01:12:09 2025 GMT Subject: CN=68f43ae9-9ea8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:3a:62:5d:f3:63:b3:f8:13:31:e9:2f:cf:95: 07:da:1f:92:9b:d8:7e:0c:52:5b:9a:77:1a:7c:6a: 7e:d7:74:9f:21:43:d7:a4:fb:eb:f7:7c:0c:63:cf: 2a:90:07:e6:f9:fb:ae:e9:13:0c:c4:01:31:e4:e3: 1a:aa:75:e3:f4:c9:1c:9f:89:c9:1a:8d:fa:65:a5: 81:61:fc:56:72:85:f7:c6:e7:12:1d:be:fc:36:58: fb:e4:a4:6d:33:59:e0:7f:f7:00:c9:53:95:69:fa: 6d:88:d3:5d:a6:be:54:96:8b:06:d5:6c:77:1a:db: d7:6b:eb:2e:2d:3a:4f:4e:c4:5c:eb:c0:55:05:bb: 57:8f:ee:c3:b9:8a:5f:f4:84:13:7a:28:1e:a8:f7: e9:ac:9d:c5:e2:f9:dd:74:70:39:60:03:48:68:4e: 06:55:bd:67:9f:c9:16:a3:79:15:f3:a8:d9:e8:f9: 3c:c4:5d:0c:b9:99:c1:0b:48:ce:68:9e:cd:9d:81: f3:4c:2c:2b:67:be:8f:32:8b:a2:0c:9c:f2:cb:14: e1:82:bc:90:9f:94:5f:21:a5:5f:fd:3e:94:98:0f: f0:0f:cd:e4:6d:36:36:87:ff:59:03:82:1c:91:31: 15:50:db:b2:ef:a8:ea:0f:59:67:27:be:5d:f8:33: ee:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:DD:AC:7A:53:57:A3:68:80:9B:7B:DB:DB:31:D1:6F:0D:27:AD:60 X509v3 Authority Key Identifier: keyid:15:7B:0B:DE:0E:3C:AD:B2:94:83:9B:C9:81:56:55:64:4D:B2:6E:91 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9148BFA/04A24C34114311EC97369F73C4F9AE02/FXsL3g48rbKUg5vJgVZVZE2ybpE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FXsL3g48rbKUg5vJgVZVZE2ybpE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9148BFA/04A24C34114311EC97369F73C4F9AE02/FXsL3g48rbKUg5vJgVZVZE2ybpE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 53:8b:76:f2:48:82:9d:c4:56:a1:dc:e8:df:74:46:f0:04:e9: d2:b2:25:c7:9c:6d:c2:53:84:16:a8:10:37:2d:3e:7d:d3:cf: c2:ae:a6:1f:65:1a:99:99:87:ce:5d:36:59:76:f1:6e:de:f4: 70:ba:55:fa:e3:b9:74:e9:ba:53:cc:e9:e5:b3:cb:1e:28:75: 18:34:4e:2b:89:88:a0:69:98:c1:99:f4:bd:5d:6e:f7:54:91: c0:a4:50:c4:57:66:aa:8f:99:cb:4d:94:89:ee:17:8c:80:a5: 1b:4b:e7:20:06:2b:bc:a5:ca:54:5c:b8:6d:69:5c:be:4d:97: 52:25:2e:0b:d5:da:ed:eb:d3:fd:78:97:03:68:17:8d:8a:a3: 56:9a:aa:d1:98:17:b3:b8:5d:e8:28:eb:57:c1:35:cf:2c:ef: 0c:5e:ef:88:85:e4:29:66:64:be:08:05:5a:f9:9d:8c:d8:75: 3b:3d:2e:0d:47:53:7d:fd:7c:ed:c2:63:2e:2d:49:3c:86:f5: b4:51:bf:45:2e:52:26:53:b3:9b:62:57:bc:3a:1f:31:fd:cb: ce:7a:51:88:19:e8:76:48:e6:a2:65:fe:69:3f:d6:d5:ef:2a: bb:c9:73:14:83:84:62:77:59:d0:05:53:1f:e7:cc:2f:bd:98: 69:81:83:90 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBaIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDhCRkExMTAvBgNVBAUTKDE1N0IwQkRFMEUzQ0FEQjI5NDgzOUJDOTgxNTY1NTY0 NERCMjZFOTEwHhcNMjUxMDE5MDExMjA5WhcNMjUxMDI2MDExMjA5WjAYMRYwFAYD VQQDEw02OGY0M2FlOS05ZWE4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5TpiXfNjs/gTMekvz5UH2h+Sm9h+DFJbmncafGp+13SfIUPXpPvr93wMY88q kAfm+fuu6RMMxAEx5OMaqnXj9Mkcn4nJGo36ZaWBYfxWcoX3xucSHb78Nlj75KRt M1ngf/cAyVOVafptiNNdpr5UlosG1Wx3GtvXa+suLTpPTsRc68BVBbtXj+7DuYpf 9IQTeigeqPfprJ3F4vnddHA5YANIaE4GVb1nn8kWo3kV86jZ6Pk8xF0MuZnBC0jO aJ7NnYHzTCwrZ76PMouiDJzyyxThgryQn5RfIaVf/T6UmA/wD83kbTY2h/9ZA4Ic kTEVUNuy76jqD1lnJ75d+DPuJQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFO3drHpT V6NogJt729sx0W8NJ61gMB8GA1UdIwQYMBaAFBV7C94OPK2ylIObyYFWVWRNsm6R MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0OEJGQS8wNEEyNEMzNDEx NDMxMUVDOTczNjlGNzNDNEY5QUUwMi9GWHNMM2c0OHJiS1VnNXZKZ1ZaVlpFMnli cEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZYc0wzZzQ4cmJLVWc1dkpnVlpWWkUyeWJwRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 OEJGQS8wNEEyNEMzNDExNDMxMUVDOTczNjlGNzNDNEY5QUUwMi9GWHNMM2c0OHJi S1VnNXZKZ1ZaVlpFMnlicEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBTi3bySIKdxFah3OjfdEbwBOnSsiXHnG3CU4QWqBA3LT5908/CrqYf ZRqZmYfOXTZZdvFu3vRwulX647l06bpTzOnls8seKHUYNE4riYigaZjBmfS9XW73 VJHApFDEV2aqj5nLTZSJ7heMgKUbS+cgBiu8pcpUXLhtaVy+TZdSJS4L1drt69P9 eJcDaBeNiqNWmqrRmBezuF3oKOtXwTXPLO8MXu+IheQpZmS+CAVa+Z2M2HU7PS4N R1N9/XztwmMuLUk8hvW0Ub9FLlImU7ObYle8Oh8x/cvOelGIGeh2SOaiZf5pP9bV 7yq7yXMUg4Rid1nQBVMf58wvvZhpgYOQ -----END CERTIFICATE-----Generated at Mon Oct 20 19:29:37 2025 by rpki-client