$ rpki-client -vvf rpki.apnic.net/member_repository/A9156E6F/B1B5B3D606D511EAA8BA3E4FC4F9AE02/fONyLR7LAIObJGf9XDmmrUamImE.mft File: fONyLR7LAIObJGf9XDmmrUamImE.mft (raw, json) Hash identifier: lEGHJD7cbEiyhSOgvcBuUvysZtkoUShBl6XMV4N6/so= Subject key identifier: 31:D7:D8:52:74:97:60:CE:43:63:39:06:B0:58:CD:A7:A3:71:C1:70 Authority key identifier: 7C:E3:72:2D:1E:CB:00:83:9B:24:67:FD:5C:39:A6:AD:46:A6:22:61 Certificate issuer: /CN=A9156E6F/serialNumber=7CE3722D1ECB00839B2467FD5C39A6AD46A62261 Certificate serial: 0C8E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fONyLR7LAIObJGf9XDmmrUamImE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9156E6F/B1B5B3D606D511EAA8BA3E4FC4F9AE02/fONyLR7LAIObJGf9XDmmrUamImE.mft Manifest number: 0C86 Signing time: Sat 18 Oct 2025 19:09:41 +0000 Manifest this update: Sat 18 Oct 2025 19:09:41 +0000 Manifest next update: Sat 25 Oct 2025 19:09:41 +0000 Files and hashes: 1: fONyLR7LAIObJGf9XDmmrUamImE.crl (hash: AL1W5Xl/oC0/pznMqRDm3hZFoN9ttfi3fo7+SMkvKeU=) 2: ABD61D2E06D611EA8EBBEA50C4F9AE02.roa (hash: oMSMtDUOK/K2eVg/KodU05EhZSFOtXitxY9io4e/C/0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9156E6F/B1B5B3D606D511EAA8BA3E4FC4F9AE02/fONyLR7LAIObJGf9XDmmrUamImE.crl rsync://rpki.apnic.net/member_repository/A9156E6F/B1B5B3D606D511EAA8BA3E4FC4F9AE02/fONyLR7LAIObJGf9XDmmrUamImE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fONyLR7LAIObJGf9XDmmrUamImE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 19:09:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3214 (0xc8e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9156E6F, serialNumber=7CE3722D1ECB00839B2467FD5C39A6AD46A62261 Validity Not Before: Oct 18 19:09:41 2025 GMT Not After : Oct 25 19:09:41 2025 GMT Subject: CN=68f3e5f5-d88e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:bb:3b:a3:fd:90:76:38:c7:e0:71:af:17:cc: 70:05:8b:34:32:0f:cd:f5:ab:bc:d1:31:e2:2e:5a: d8:93:85:2b:7f:a6:95:0d:bd:6c:b6:54:9b:52:23: 63:ec:6d:cf:9a:81:05:56:f7:ce:59:1a:e6:12:15: 97:5b:54:91:7d:68:54:72:d9:1a:cc:f3:b2:e1:09: ee:a2:8a:4a:04:d0:d3:d2:01:d2:cc:82:a4:5d:bd: f6:3d:dc:51:ba:de:10:2a:ec:61:4b:f4:21:51:0b: 0f:7b:ed:ce:8a:4b:82:cb:11:8d:c3:d7:27:ba:bf: ca:f8:11:7e:a8:88:8c:5b:76:8c:67:73:ff:4a:dd: 4f:91:34:1c:cc:28:b6:0e:b5:4b:a1:1f:52:f4:2d: ea:a2:c3:b1:16:f6:44:97:66:b7:02:6c:0b:e0:89: 2a:d5:91:70:89:7e:17:de:88:90:6a:7d:83:ec:7e: 2d:c2:5a:75:3d:92:35:1e:3a:7b:6e:97:83:5e:f2: 91:dc:6a:21:58:6d:8e:79:d2:8c:42:9b:1e:c7:69: 8b:ec:df:0e:cd:28:26:9d:f6:33:ec:40:f5:79:fb: 9e:a4:38:5e:97:ee:57:b3:40:59:87:a0:7f:ee:9e: 47:32:a8:43:97:98:af:4a:e7:93:85:ba:e9:ab:e5: 2f:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:D7:D8:52:74:97:60:CE:43:63:39:06:B0:58:CD:A7:A3:71:C1:70 X509v3 Authority Key Identifier: keyid:7C:E3:72:2D:1E:CB:00:83:9B:24:67:FD:5C:39:A6:AD:46:A6:22:61 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9156E6F/B1B5B3D606D511EAA8BA3E4FC4F9AE02/fONyLR7LAIObJGf9XDmmrUamImE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fONyLR7LAIObJGf9XDmmrUamImE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9156E6F/B1B5B3D606D511EAA8BA3E4FC4F9AE02/fONyLR7LAIObJGf9XDmmrUamImE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 30:79:7e:14:78:c9:9f:c5:e0:ac:95:cc:3a:39:58:13:7b:13: 9e:6a:2f:9b:06:2b:f7:87:8c:89:9b:f4:48:c9:9e:0c:60:e4: ea:fe:2d:46:4e:91:49:a9:6d:69:30:19:ac:47:a8:b3:6f:94: de:b0:12:93:91:fe:80:54:7f:f0:bd:d5:3e:d3:91:3a:1b:de: 5d:16:52:a3:a6:3d:f5:df:ed:40:9c:33:43:5e:7b:2e:40:3f: 72:e5:85:c2:7f:6b:44:60:7f:94:7f:81:de:fb:c2:f1:ce:ab: 0f:89:cb:a7:5c:5c:58:02:ae:c9:5b:ad:e0:34:a0:1b:98:9f: 15:42:2f:52:42:e3:4b:71:63:62:c2:50:29:0a:a4:42:f8:15: 87:da:ad:87:01:dc:46:96:86:a2:4a:1b:1a:8e:06:3b:f5:91: eb:14:db:0d:e1:0e:64:20:af:5b:be:48:1c:7a:e6:88:c5:c3: e3:e7:5a:1c:fe:27:02:27:63:57:aa:69:33:16:9a:33:e7:36: 03:60:6b:7c:d7:e3:fb:76:5c:d3:78:58:dc:25:3c:43:c3:6b: 23:19:91:1e:89:f3:e8:ac:07:40:e9:ca:04:14:0b:76:93:e4: cc:eb:f5:e8:d8:f1:14:2b:0e:76:fa:ae:81:08:9d:56:c8:01: 05:7c:be:c0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDI4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTZFNkYxMTAvBgNVBAUTKDdDRTM3MjJEMUVDQjAwODM5QjI0NjdGRDVDMzlBNkFE NDZBNjIyNjEwHhcNMjUxMDE4MTkwOTQxWhcNMjUxMDI1MTkwOTQxWjAYMRYwFAYD VQQDEw02OGYzZTVmNS1kODhlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsLs7o/2QdjjH4HGvF8xwBYs0Mg/N9au80THiLlrYk4Urf6aVDb1stlSbUiNj 7G3PmoEFVvfOWRrmEhWXW1SRfWhUctkazPOy4QnuoopKBNDT0gHSzIKkXb32PdxR ut4QKuxhS/QhUQsPe+3OikuCyxGNw9cnur/K+BF+qIiMW3aMZ3P/St1PkTQczCi2 DrVLoR9S9C3qosOxFvZEl2a3AmwL4Ikq1ZFwiX4X3oiQan2D7H4twlp1PZI1Hjp7 bpeDXvKR3GohWG2OedKMQpsex2mL7N8OzSgmnfYz7ED1efuepDhel+5Xs0BZh6B/ 7p5HMqhDl5ivSueThbrpq+Uv6wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDHX2FJ0 l2DOQ2M5BrBYzaejccFwMB8GA1UdIwQYMBaAFHzjci0eywCDmyRn/Vw5pq1GpiJh MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NkU2Ri9CMUI1QjNENjA2 RDUxMUVBQThCQTNFNEZDNEY5QUUwMi9mT055TFI3TEFJT2JKR2Y5WERtbXJVYW1J bUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ZPTnlMUjdMQUlPYkpHZjlYRG1tclVhbUltRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NkU2Ri9CMUI1QjNENjA2RDUxMUVBQThCQTNFNEZDNEY5QUUwMi9mT055TFI3TEFJ T2JKR2Y5WERtbXJVYW1JbUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAweX4UeMmfxeCslcw6OVgTexOeai+bBiv3h4yJm/RIyZ4MYOTq/i1G TpFJqW1pMBmsR6izb5TesBKTkf6AVH/wvdU+05E6G95dFlKjpj313+1AnDNDXnsu QD9y5YXCf2tEYH+Uf4He+8LxzqsPicunXFxYAq7JW63gNKAbmJ8VQi9SQuNLcWNi wlApCqRC+BWH2q2HAdxGloaiShsajgY79ZHrFNsN4Q5kIK9bvkgceuaIxcPj51oc /icCJ2NXqmkzFpoz5zYDYGt81+P7dlzTeFjcJTxDw2sjGZEeifPorAdA6coEFAt2 k+TM6/Xo2PEUKw52+q6BCJ1WyAEFfL7A -----END CERTIFICATE-----Generated at Mon Oct 20 10:41:32 2025 by rpki-client