$ rpki-client -vvf rpki.apnic.net/member_repository/A9158E3F/C24322BA544611EA8C05651DC4F9AE02/fjE6t_8m54PgPAeFFhJ1GIGuSRg.mft File: fjE6t_8m54PgPAeFFhJ1GIGuSRg.mft (raw, json) Hash identifier: xfNRRFgyfGkMh2KIgDrF5by3bJfvOmS5rAnSYoksWp8= Subject key identifier: A2:1A:3E:61:F1:72:ED:CA:65:74:8B:BF:DF:AF:B6:80:14:FF:6C:D1 Authority key identifier: 7E:31:3A:B7:FF:26:E7:83:E0:3C:07:85:16:12:75:18:81:AE:49:18 Certificate issuer: /CN=A9158E3F/serialNumber=7E313AB7FF26E783E03C07851612751881AE4918 Certificate serial: 0C67 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fjE6t_8m54PgPAeFFhJ1GIGuSRg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9158E3F/C24322BA544611EA8C05651DC4F9AE02/fjE6t_8m54PgPAeFFhJ1GIGuSRg.mft Manifest number: 0BB1 Signing time: Sat 18 Oct 2025 20:18:54 +0000 Manifest this update: Sat 18 Oct 2025 20:18:54 +0000 Manifest next update: Sat 25 Oct 2025 20:18:54 +0000 Files and hashes: 1: fjE6t_8m54PgPAeFFhJ1GIGuSRg.crl (hash: vJPh6daZbs2hXT9yGaCErySgqBs50krSugZjubyUHfs=) 2: E8819018178811EC876F5F50C4F9AE02.roa (hash: TUeSGThA71gPmHqcyXZanu8mExqUQgocKEFv3yzea/g=) 3: 52863B4C9DBA11EB83364624C4F9AE02.roa (hash: xgcAPmybhdKKX1LB8rArE+ilDIHuIkSGwEMHOrxxz6w=) 4: 958CC8DA1C2611ECB416AA68C4F9AE02.roa (hash: SlT7b5WGF4xDvO5UnYsRWIEsNMsfCj2P0RDQ0c4uxVg=) 5: 8008F5CA620C11ECAFF5941AC4F9AE02.roa (hash: zf45ltuWfmdAtT9A7Ih3Fv5EL5oWc6vkxJu3n9BqugE=) 6: CB67A9DC8D1311EF9895E61CC4F9AE02.roa (hash: fKITGlH8Ym4FGCNTLdBz3N/9fT41O0ewrHeW85uprek=) 7: 1605F9B6169E11EC9D259855C4F9AE02.roa (hash: pWNi2zqUl2KymH0GwVdvbCWQHY1sj05kmoe0wb+HqN0=) 8: 065A717E9B6E11EFBCAB692BC4F9AE02.roa (hash: fpApiu1FjrarZlPUsOOK6GGIbKmnMiZ6mCyLBRP/A/k=) 9: 206969823B9411EB9F059D7EC4F9AE02.roa (hash: RxzJdhNL3XRe6UM0O5+yODZOZOT+QSs+nHTsvvP7oUM=) 10: C3290D00636F11F0A1C6DA70C4F9AE02.roa (hash: kxUXf7mA4CW5b99j/+9BBjl+HFe5y/+Il84nYKPjkAg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9158E3F/C24322BA544611EA8C05651DC4F9AE02/fjE6t_8m54PgPAeFFhJ1GIGuSRg.crl rsync://rpki.apnic.net/member_repository/A9158E3F/C24322BA544611EA8C05651DC4F9AE02/fjE6t_8m54PgPAeFFhJ1GIGuSRg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fjE6t_8m54PgPAeFFhJ1GIGuSRg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 20:18:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3175 (0xc67) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9158E3F, serialNumber=7E313AB7FF26E783E03C07851612751881AE4918 Validity Not Before: Oct 18 20:18:54 2025 GMT Not After : Oct 25 20:18:54 2025 GMT Subject: CN=68f3f62e-5936 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:5f:fa:f8:1d:77:43:5d:26:33:84:7b:7c:a2: 37:e1:b6:83:d9:6a:f8:33:a1:35:98:87:3e:3d:c5: 3b:b4:f1:ff:f8:89:f1:80:05:4b:ae:3c:0f:b9:77: 00:50:9f:96:35:74:3b:10:4e:a7:d2:43:8f:3f:19: 46:08:c1:84:71:51:c1:3f:e6:1a:6e:21:f5:2b:ad: b5:16:8f:c0:01:c5:28:60:51:35:4f:0a:41:87:46: 4f:c5:04:2c:ed:00:00:d9:9e:a5:7d:d2:92:6d:de: 1b:2a:cc:ee:20:b5:ed:82:f0:8f:56:14:b7:fa:c3: 22:b0:69:e0:cc:7d:ee:42:a2:67:0d:e5:d5:14:70: 82:c4:ba:17:eb:84:ef:5d:1b:33:05:a5:92:0e:2c: 9c:f3:29:05:10:be:ea:0a:99:57:10:15:61:76:6d: 1c:92:40:ac:3c:c2:0f:50:a3:5f:f2:77:ff:c7:0b: 9e:57:92:f8:c5:7b:6d:8b:f2:55:75:7f:08:0e:e2: c2:d1:14:d5:39:5e:3d:71:1c:70:0b:8a:2a:32:bb: 22:62:6f:19:05:3f:3a:1b:ad:91:bf:1f:e3:47:8e: 7c:26:28:75:b0:5a:81:54:aa:b4:fd:05:b6:d4:59: 13:41:6c:fd:0b:43:92:85:d1:b2:9f:c3:03:99:e4: 97:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:1A:3E:61:F1:72:ED:CA:65:74:8B:BF:DF:AF:B6:80:14:FF:6C:D1 X509v3 Authority Key Identifier: keyid:7E:31:3A:B7:FF:26:E7:83:E0:3C:07:85:16:12:75:18:81:AE:49:18 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9158E3F/C24322BA544611EA8C05651DC4F9AE02/fjE6t_8m54PgPAeFFhJ1GIGuSRg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fjE6t_8m54PgPAeFFhJ1GIGuSRg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9158E3F/C24322BA544611EA8C05651DC4F9AE02/fjE6t_8m54PgPAeFFhJ1GIGuSRg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 32:7e:d8:92:5b:ae:44:1d:fb:f4:97:21:fe:26:6e:19:cf:d4: 66:23:d9:ad:e5:b4:ec:ad:d7:31:65:eb:93:0e:65:6c:21:23: 56:17:f9:42:bd:64:f9:e9:ca:e7:db:3a:94:66:67:5b:d9:01: 92:5d:52:24:66:21:25:01:7a:0b:9c:7a:60:a3:1c:2a:01:72: 33:f1:9e:e3:26:98:4f:31:e1:91:a4:33:17:11:fa:35:8c:52: d9:05:ed:c3:06:fb:d1:92:21:67:7a:59:50:93:03:82:0e:ea: de:4a:86:1a:0a:53:d8:71:e4:7b:dc:05:77:56:1d:f6:d6:97: 2c:5d:a3:da:49:bb:76:08:81:dc:c9:c8:6f:59:fe:87:0b:49: f2:2b:07:50:c9:17:0a:a5:3b:5f:52:78:8a:52:70:07:3c:9e: 54:59:0f:71:ef:2b:6d:08:77:32:7d:fe:2e:5c:b5:dc:c2:11: 0d:84:4d:8d:3a:ff:fa:50:bd:2c:f2:16:b6:91:53:19:43:e7: 52:a9:40:1d:6d:4e:aa:61:0c:1a:c0:74:b7:50:0b:db:e0:ab: 77:d9:d4:a2:30:bf:d6:c9:b1:49:24:6d:2f:50:f9:24:a0:37: 7e:b2:c2:2a:ab:5a:eb:b3:52:14:37:dc:7d:1a:f8:11:f0:e6: d8:2e:e9:1f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDGcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NThFM0YxMTAvBgNVBAUTKDdFMzEzQUI3RkYyNkU3ODNFMDNDMDc4NTE2MTI3NTE4 ODFBRTQ5MTgwHhcNMjUxMDE4MjAxODU0WhcNMjUxMDI1MjAxODU0WjAYMRYwFAYD VQQDEw02OGYzZjYyZS01OTM2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAz1/6+B13Q10mM4R7fKI34baD2Wr4M6E1mIc+PcU7tPH/+InxgAVLrjwPuXcA UJ+WNXQ7EE6n0kOPPxlGCMGEcVHBP+YabiH1K621Fo/AAcUoYFE1TwpBh0ZPxQQs 7QAA2Z6lfdKSbd4bKszuILXtgvCPVhS3+sMisGngzH3uQqJnDeXVFHCCxLoX64Tv XRszBaWSDiyc8ykFEL7qCplXEBVhdm0ckkCsPMIPUKNf8nf/xwueV5L4xXtti/JV dX8IDuLC0RTVOV49cRxwC4oqMrsiYm8ZBT86G62Rvx/jR458Jih1sFqBVKq0/QW2 1FkTQWz9C0OShdGyn8MDmeSXEwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKIaPmHx cu3KZXSLv9+vtoAU/2zRMB8GA1UdIwQYMBaAFH4xOrf/JueD4DwHhRYSdRiBrkkY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1OEUzRi9DMjQzMjJCQTU0 NDYxMUVBOEMwNTY1MURDNEY5QUUwMi9makU2dF84bTU0UGdQQWVGRmhKMUdJR3VT UmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ZqRTZ0XzhtNTRQZ1BBZUZGaEoxR0lHdVNSZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 OEUzRi9DMjQzMjJCQTU0NDYxMUVBOEMwNTY1MURDNEY5QUUwMi9makU2dF84bTU0 UGdQQWVGRmhKMUdJR3VTUmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAyftiSW65EHfv0lyH+Jm4Zz9RmI9mt5bTsrdcxZeuTDmVsISNWF/lC vWT56crn2zqUZmdb2QGSXVIkZiElAXoLnHpgoxwqAXIz8Z7jJphPMeGRpDMXEfo1 jFLZBe3DBvvRkiFnellQkwOCDureSoYaClPYceR73AV3Vh321pcsXaPaSbt2CIHc ychvWf6HC0nyKwdQyRcKpTtfUniKUnAHPJ5UWQ9x7yttCHcyff4uXLXcwhENhE2N Ov/6UL0s8ha2kVMZQ+dSqUAdbU6qYQwawHS3UAvb4Kt32dSiML/WybFJJG0vUPkk oDd+ssIqq1rrs1IUN9x9GvgR8ObYLukf -----END CERTIFICATE-----Generated at Mon Oct 20 07:55:47 2025 by rpki-client