$ rpki-client -vvf rpki.apnic.net/member_repository/A9160A05/D17C88687C8A11EF8FAB6909C4F9AE02/FN2GhClPGzOjE6-48OuhyKADeAk.mft File: FN2GhClPGzOjE6-48OuhyKADeAk.mft (raw, json) Hash identifier: 11d1Q35jylNTqK2SDRdjEQYu0eHmQxXXU4NbyCGZD3c= Subject key identifier: 6D:D8:F2:65:51:B5:70:BD:0F:6F:02:E2:C7:4C:86:CA:6E:50:8F:65 Authority key identifier: 14:DD:86:84:29:4F:1B:33:A3:13:AF:B8:F0:EB:A1:C8:A0:03:78:09 Certificate issuer: /CN=A9160A05/serialNumber=14DD8684294F1B33A313AFB8F0EBA1C8A0037809 Certificate serial: D1 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FN2GhClPGzOjE6-48OuhyKADeAk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9160A05/D17C88687C8A11EF8FAB6909C4F9AE02/FN2GhClPGzOjE6-48OuhyKADeAk.mft Manifest number: CC Signing time: Sun 19 Oct 2025 08:53:36 +0000 Manifest this update: Sun 19 Oct 2025 08:53:35 +0000 Manifest next update: Sun 26 Oct 2025 08:53:35 +0000 Files and hashes: 1: FN2GhClPGzOjE6-48OuhyKADeAk.crl (hash: nQa0kpo0BVdf9dMTKXO9CiH1O0EcZwtWENnyNEOjxfY=) 2: F7981812F38811EFAC05053AC4F9AE02.roa (hash: 5lT3BqV6fkCasuiMvgjtWS+QEDtMQ2WoJeVX5lRFOMY=) 3: E9B0903AF38811EF81B8CE39C4F9AE02.roa (hash: fdQ7jvoBEvlEALSb2JWdt2czQvJjt/S2kzFg/FmzHag=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9160A05/D17C88687C8A11EF8FAB6909C4F9AE02/FN2GhClPGzOjE6-48OuhyKADeAk.crl rsync://rpki.apnic.net/member_repository/A9160A05/D17C88687C8A11EF8FAB6909C4F9AE02/FN2GhClPGzOjE6-48OuhyKADeAk.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FN2GhClPGzOjE6-48OuhyKADeAk.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 08:53:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 209 (0xd1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9160A05, serialNumber=14DD8684294F1B33A313AFB8F0EBA1C8A0037809 Validity Not Before: Oct 19 08:53:35 2025 GMT Not After : Oct 26 08:53:35 2025 GMT Subject: CN=68f4a70f-59e9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fa:96:0b:56:6d:09:02:40:3c:ce:8d:b6:cc:d9: 54:68:50:a8:dd:11:2f:05:c1:49:93:a6:44:55:8b: f7:25:5e:53:dd:12:f3:50:41:60:74:96:16:5c:19: 60:1f:da:11:ee:a1:80:19:a0:5b:48:13:45:f1:3c: c6:eb:bf:5f:c0:f0:e2:c8:55:fb:73:73:8c:cc:70: d6:55:b4:b7:8f:38:5f:e4:a1:b8:52:ec:e2:a6:17: 04:89:8a:85:0b:eb:01:a0:ec:8f:d4:e5:5d:d4:74: 5e:c7:a0:ba:18:b5:fc:d4:78:8f:f8:04:38:79:1f: 75:89:76:00:c0:5f:47:a6:21:67:6a:2d:25:99:2b: 86:b6:27:e7:80:0c:8a:ad:4c:95:9c:e7:17:fd:55: f1:b1:2e:4f:72:d3:41:4e:85:de:a5:52:26:68:70: 61:23:bb:86:72:d7:0e:f7:64:7c:32:aa:98:60:6b: 76:31:d2:3a:0e:1b:95:7c:6b:a9:c4:cf:91:39:9f: 91:bc:b5:c6:c5:68:d8:11:a4:1c:52:5e:d5:60:6a: 94:b1:81:8a:64:19:4b:3d:45:32:4b:be:8a:64:a4: fb:a2:8e:4f:7e:27:c2:9a:60:10:47:6f:f5:6a:25: 01:2e:8f:73:60:78:d0:67:e0:c7:47:8a:0a:15:22: ed:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:D8:F2:65:51:B5:70:BD:0F:6F:02:E2:C7:4C:86:CA:6E:50:8F:65 X509v3 Authority Key Identifier: keyid:14:DD:86:84:29:4F:1B:33:A3:13:AF:B8:F0:EB:A1:C8:A0:03:78:09 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9160A05/D17C88687C8A11EF8FAB6909C4F9AE02/FN2GhClPGzOjE6-48OuhyKADeAk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FN2GhClPGzOjE6-48OuhyKADeAk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9160A05/D17C88687C8A11EF8FAB6909C4F9AE02/FN2GhClPGzOjE6-48OuhyKADeAk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 62:79:7c:b4:ae:20:86:f7:f6:2a:a2:02:0b:38:4e:2f:39:df: 39:d7:e9:ea:f7:d9:35:4a:f6:96:80:3b:8c:fb:f4:67:86:9c: 4b:ae:2a:d1:4c:ac:eb:25:e0:24:b3:5d:d8:55:c1:be:e5:8f: 8b:78:ff:60:44:e9:cd:41:75:d7:b2:d6:6f:a3:9e:e3:eb:83: ed:56:db:2a:f4:65:4e:4b:15:61:a1:5c:06:dd:d4:46:3e:2e: 30:fe:f4:4e:cc:c6:ec:80:5c:35:f5:60:33:cc:1a:2a:84:0d: ef:a1:98:1a:20:f6:0a:3b:18:ec:c7:8c:20:a5:02:82:68:a7: 5d:f6:42:e7:37:c9:a4:76:e5:91:73:0e:60:a2:56:3f:09:2b: 62:62:2d:d7:c8:6e:12:f9:86:51:be:28:a3:1a:93:bc:09:92: b3:f7:21:86:98:d5:7d:ca:10:ee:ef:94:68:ec:ae:f9:83:7c: 4f:4b:a5:a9:3e:02:d8:a8:a9:cb:62:ba:d4:13:02:fe:37:07: 46:0a:cf:71:80:34:02:37:bd:42:f0:66:ac:85:80:ab:c8:88: 08:c0:cf:db:8b:d0:95:26:00:b1:5e:c8:74:fe:4b:10:29:a1: a8:99:a8:d8:76:57:37:48:ca:f2:31:1a:54:e9:eb:92:c4:da: 42:37:a5:f5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICANEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjBBMDUxMTAvBgNVBAUTKDE0REQ4Njg0Mjk0RjFCMzNBMzEzQUZCOEYwRUJBMUM4 QTAwMzc4MDkwHhcNMjUxMDE5MDg1MzM1WhcNMjUxMDI2MDg1MzM1WjAYMRYwFAYD VQQDEw02OGY0YTcwZi01OWU5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA+pYLVm0JAkA8zo22zNlUaFCo3REvBcFJk6ZEVYv3JV5T3RLzUEFgdJYWXBlg H9oR7qGAGaBbSBNF8TzG679fwPDiyFX7c3OMzHDWVbS3jzhf5KG4UuziphcEiYqF C+sBoOyP1OVd1HRex6C6GLX81HiP+AQ4eR91iXYAwF9HpiFnai0lmSuGtifngAyK rUyVnOcX/VXxsS5PctNBToXepVImaHBhI7uGctcO92R8MqqYYGt2MdI6DhuVfGup xM+ROZ+RvLXGxWjYEaQcUl7VYGqUsYGKZBlLPUUyS76KZKT7oo5PfifCmmAQR2/1 aiUBLo9zYHjQZ+DHR4oKFSLtaQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFG3Y8mVR tXC9D28C4sdMhspuUI9lMB8GA1UdIwQYMBaAFBTdhoQpTxszoxOvuPDrocigA3gJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MEEwNS9EMTdDODg2ODdD OEExMUVGOEZBQjY5MDlDNEY5QUUwMi9GTjJHaENsUEd6T2pFNi00OE91aHlLQURl QWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0ZOMkdoQ2xQR3pPakU2LTQ4T3VoeUtBRGVBay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 MEEwNS9EMTdDODg2ODdDOEExMUVGOEZBQjY5MDlDNEY5QUUwMi9GTjJHaENsUEd6 T2pFNi00OE91aHlLQURlQWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBieXy0riCG9/YqogILOE4vOd851+nq99k1SvaWgDuM+/RnhpxLrirR TKzrJeAks13YVcG+5Y+LeP9gROnNQXXXstZvo57j64PtVtsq9GVOSxVhoVwG3dRG Pi4w/vROzMbsgFw19WAzzBoqhA3voZgaIPYKOxjsx4wgpQKCaKdd9kLnN8mkduWR cw5golY/CStiYi3XyG4S+YZRviijGpO8CZKz9yGGmNV9yhDu75Ro7K75g3xPS6Wp PgLYqKnLYrrUEwL+NwdGCs9xgDQCN71C8GashYCryIgIwM/bi9CVJgCxXsh0/ksQ KaGomajYdlc3SMryMRpU6euSxNpCN6X1 -----END CERTIFICATE-----Generated at Mon Oct 20 18:23:07 2025 by rpki-client