$ rpki-client -vvf rpki.apnic.net/member_repository/A9149E0D/904E747E390911EAB0DE3F49C4F9AE02/FrgD2zk43LFdxZooyXcZ2h_yClM.mft File: FrgD2zk43LFdxZooyXcZ2h_yClM.mft (raw, json) Hash identifier: ii0JXQcfN0pPQZ6ys17o5vMKNhkG3GpuyFQPjeg49xg= Subject key identifier: B5:A6:15:99:38:85:FF:1C:29:D2:5E:49:DB:5B:42:E4:0B:99:56:3A Authority key identifier: 16:B8:03:DB:39:38:DC:B1:5D:C5:9A:28:C9:77:19:DA:1F:F2:0A:53 Certificate issuer: /CN=A9149E0D/serialNumber=16B803DB3938DCB15DC59A28C97719DA1FF20A53 Certificate serial: 0B91 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FrgD2zk43LFdxZooyXcZ2h_yClM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9149E0D/904E747E390911EAB0DE3F49C4F9AE02/FrgD2zk43LFdxZooyXcZ2h_yClM.mft Manifest number: 0B86 Signing time: Mon 20 Oct 2025 19:43:33 +0000 Manifest this update: Mon 20 Oct 2025 19:43:33 +0000 Manifest next update: Mon 27 Oct 2025 19:43:33 +0000 Files and hashes: 1: FrgD2zk43LFdxZooyXcZ2h_yClM.crl (hash: grmvcoXHSrQrE4VSipd8Zk0h6eMTx0srvliUtK1VgdA=) 2: C8FB48F808AF11EBAB78DF6BC4F9AE02.roa (hash: QwMnRtpt+1eT07NMpTybXiiH3v3R91ylnqw2cVEHLL0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9149E0D/904E747E390911EAB0DE3F49C4F9AE02/FrgD2zk43LFdxZooyXcZ2h_yClM.crl rsync://rpki.apnic.net/member_repository/A9149E0D/904E747E390911EAB0DE3F49C4F9AE02/FrgD2zk43LFdxZooyXcZ2h_yClM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FrgD2zk43LFdxZooyXcZ2h_yClM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 27 Oct 2025 19:43:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2961 (0xb91) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9149E0D, serialNumber=16B803DB3938DCB15DC59A28C97719DA1FF20A53 Validity Not Before: Oct 20 19:43:33 2025 GMT Not After : Oct 27 19:43:33 2025 GMT Subject: CN=68f690e5-59e3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:47:06:25:1d:bb:96:74:cf:e5:28:62:c4:1a: 17:72:db:0e:ea:3f:00:05:10:17:26:57:84:9f:c9: be:f8:ef:a1:3f:17:0b:d7:a2:52:3b:65:6e:49:30: d6:9b:81:be:3a:6a:e0:fe:a7:31:c2:3c:db:e7:e1: 6e:1b:de:08:a9:da:74:a4:42:73:7a:d4:0f:18:1d: 49:70:42:c9:e2:1b:07:98:43:a3:ac:06:ea:41:69: 3b:f8:d1:fa:72:12:8c:6b:ac:46:5a:d8:60:ad:6b: e9:a8:f8:25:b0:52:a7:e6:e6:34:38:5c:63:43:65: 0b:0c:e1:53:4a:eb:aa:03:43:6e:54:34:5c:f1:84: df:b5:61:55:be:a4:05:a6:d0:79:c6:85:eb:2f:aa: 84:1a:29:d1:27:59:6f:78:d6:6f:71:ff:6d:f6:3a: 26:15:bb:25:31:c6:64:db:1d:75:79:1a:ee:e3:7e: ca:2f:2b:2b:12:a3:52:cf:95:fc:79:f5:ec:94:50: 88:81:ea:6b:9a:e7:7d:0f:f5:56:b0:8b:bb:6b:8a: 31:b6:d1:28:01:f7:9c:13:6d:2b:d9:42:99:6a:24: 31:6f:e2:e0:cb:4a:82:bf:2d:9b:32:74:67:a7:be: cf:cd:c9:84:ae:20:48:50:1c:0b:3b:7a:0e:19:96: 01:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:A6:15:99:38:85:FF:1C:29:D2:5E:49:DB:5B:42:E4:0B:99:56:3A X509v3 Authority Key Identifier: keyid:16:B8:03:DB:39:38:DC:B1:5D:C5:9A:28:C9:77:19:DA:1F:F2:0A:53 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9149E0D/904E747E390911EAB0DE3F49C4F9AE02/FrgD2zk43LFdxZooyXcZ2h_yClM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FrgD2zk43LFdxZooyXcZ2h_yClM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9149E0D/904E747E390911EAB0DE3F49C4F9AE02/FrgD2zk43LFdxZooyXcZ2h_yClM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 12:44:ee:ad:d7:6e:ea:0a:a9:af:ac:56:5d:51:05:d9:22:6a: 9b:a9:54:93:f5:66:90:80:d1:f4:21:57:8e:5f:23:24:0d:61: ab:28:6e:cc:7c:d1:d3:b6:0e:8d:10:ec:ad:86:f7:fc:99:3a: d8:82:18:f1:4d:c9:26:79:1b:c6:19:54:8e:a4:94:58:0a:96: ce:91:3f:9a:cb:cc:64:0e:62:47:bb:45:e5:ac:b0:e5:80:ab: 9c:ee:96:a6:44:4a:cc:50:cf:01:c1:69:96:46:6f:ce:01:d5: 90:03:48:d8:ba:29:1f:c5:da:46:fc:2c:57:16:88:d1:82:10: 13:ec:e9:fe:9b:e3:85:1d:3a:0f:a8:ea:b9:87:70:6e:3c:3e: 6f:ed:93:cf:de:a9:74:4b:ed:2e:ef:33:b1:04:96:f8:fc:2f: c5:de:44:2d:40:9e:ce:8a:95:1a:54:e1:9a:9f:57:52:9a:bc: 2d:38:bc:b1:af:63:05:d6:42:54:96:7a:c1:da:27:db:6f:63: 44:6f:00:cd:75:fd:d6:ef:77:b1:a4:7b:23:87:05:27:0d:a4: 69:80:25:c1:7e:f0:03:19:76:1a:de:21:9d:db:43:91:1e:12: 0a:26:c6:b0:54:ae:99:54:e4:1a:b7:6a:31:96:bf:d4:59:3e: eb:ba:64:fd -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC5EwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDlFMEQxMTAvBgNVBAUTKDE2QjgwM0RCMzkzOERDQjE1REM1OUEyOEM5NzcxOURB MUZGMjBBNTMwHhcNMjUxMDIwMTk0MzMzWhcNMjUxMDI3MTk0MzMzWjAYMRYwFAYD VQQDEw02OGY2OTBlNS01OWUzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAokcGJR27lnTP5ShixBoXctsO6j8ABRAXJleEn8m++O+hPxcL16JSO2VuSTDW m4G+Omrg/qcxwjzb5+FuG94Iqdp0pEJzetQPGB1JcELJ4hsHmEOjrAbqQWk7+NH6 chKMa6xGWthgrWvpqPglsFKn5uY0OFxjQ2ULDOFTSuuqA0NuVDRc8YTftWFVvqQF ptB5xoXrL6qEGinRJ1lveNZvcf9t9jomFbslMcZk2x11eRru437KLysrEqNSz5X8 efXslFCIgeprmud9D/VWsIu7a4oxttEoAfecE20r2UKZaiQxb+Lgy0qCvy2bMnRn p77PzcmEriBIUBwLO3oOGZYBDwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLWmFZk4 hf8cKdJeSdtbQuQLmVY6MB8GA1UdIwQYMBaAFBa4A9s5ONyxXcWaKMl3Gdof8gpT MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0OUUwRC85MDRFNzQ3RTM5 MDkxMUVBQjBERTNGNDlDNEY5QUUwMi9GcmdEMnprNDNMRmR4Wm9veVhjWjJoX3lD bE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZyZ0Qyems0M0xGZHhab295WGNaMmhfeUNsTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 OUUwRC85MDRFNzQ3RTM5MDkxMUVBQjBERTNGNDlDNEY5QUUwMi9GcmdEMnprNDNM RmR4Wm9veVhjWjJoX3lDbE0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQASRO6t127qCqmvrFZdUQXZImqbqVST9WaQgNH0IVeOXyMkDWGrKG7M fNHTtg6NEOythvf8mTrYghjxTckmeRvGGVSOpJRYCpbOkT+ay8xkDmJHu0XlrLDl gKuc7pamRErMUM8BwWmWRm/OAdWQA0jYuikfxdpG/CxXFojRghAT7On+m+OFHToP qOq5h3BuPD5v7ZPP3ql0S+0u7zOxBJb4/C/F3kQtQJ7OipUaVOGan1dSmrwtOLyx r2MF1kJUlnrB2ifbb2NEbwDNdf3W73expHsjhwUnDaRpgCXBfvADGXYa3iGd20OR HhIKJsawVK6ZVOQat2oxlr/UWT7rumT9 -----END CERTIFICATE-----Generated at Tue Oct 21 01:02:39 2025 by rpki-client