$ rpki-client -vvf rpki.apnic.net/member_repository/A916223F/4EBF27B6F95C11E9B6272285C4F9AE02/Fu3IlWvEE8nFAhkosDvIUPx-ckc.mft File: Fu3IlWvEE8nFAhkosDvIUPx-ckc.mft (raw, json) Hash identifier: 3MfuID3A2gGZqXzhechZ23rxoT/A5eYgBN7cxOvnUjE= Subject key identifier: 0F:41:C6:07:AA:DE:74:C3:C8:47:0D:29:CF:D5:40:76:DE:E4:3E:A3 Authority key identifier: 16:ED:C8:95:6B:C4:13:C9:C5:02:19:28:B0:3B:C8:50:FC:7E:72:47 Certificate issuer: /CN=A916223F/serialNumber=16EDC8956BC413C9C5021928B03BC850FC7E7247 Certificate serial: 0CCC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fu3IlWvEE8nFAhkosDvIUPx-ckc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916223F/4EBF27B6F95C11E9B6272285C4F9AE02/Fu3IlWvEE8nFAhkosDvIUPx-ckc.mft Manifest number: 0CC5 Signing time: Sat 18 Oct 2025 18:52:42 +0000 Manifest this update: Sat 18 Oct 2025 18:52:42 +0000 Manifest next update: Sat 25 Oct 2025 18:52:42 +0000 Files and hashes: 1: Fu3IlWvEE8nFAhkosDvIUPx-ckc.crl (hash: sHbkgFUASZaK1T6ndcL+GbrqYGGcEo+8Uwzz8GMGyEI=) 2: 80392340F95D11E9ABF14387C4F9AE02.roa (hash: HyFNgnjZWsveyr1t+EGS0rR5D+l88ZMNMytH+WMJ+18=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916223F/4EBF27B6F95C11E9B6272285C4F9AE02/Fu3IlWvEE8nFAhkosDvIUPx-ckc.crl rsync://rpki.apnic.net/member_repository/A916223F/4EBF27B6F95C11E9B6272285C4F9AE02/Fu3IlWvEE8nFAhkosDvIUPx-ckc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fu3IlWvEE8nFAhkosDvIUPx-ckc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 18:52:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3276 (0xccc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916223F, serialNumber=16EDC8956BC413C9C5021928B03BC850FC7E7247 Validity Not Before: Oct 18 18:52:42 2025 GMT Not After : Oct 25 18:52:42 2025 GMT Subject: CN=68f3e1fa-d608 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:ce:54:e1:9a:c5:08:c0:ab:64:c9:f0:cd:bb: 86:a0:4c:10:4d:c7:1c:0e:0a:08:0d:b6:63:2e:d0: 2e:2f:b6:c4:0a:b4:60:38:9a:08:11:44:a1:f2:1d: 51:78:52:5c:5e:a0:98:9f:2c:bc:b6:e1:df:c9:0b: 70:00:73:21:a7:2f:67:a0:8c:27:1a:cf:e7:cb:e6: ed:df:17:91:90:34:ea:7c:72:c6:12:40:4f:6f:3b: 96:22:e3:7e:b9:9e:38:1c:ab:92:80:39:70:f3:72: 3d:fa:22:98:13:02:b8:04:65:15:0c:c6:22:f5:f0: 4a:5d:68:22:d3:63:3b:b6:9e:0f:d6:cc:33:ac:80: 72:3c:43:94:2b:91:e3:27:4b:14:6c:22:0c:80:df: d1:ed:3c:db:47:50:5a:26:d8:cc:79:70:0a:e5:26: 0c:55:c1:a2:a4:1f:28:b5:34:e8:16:02:38:df:9e: c8:d4:7f:dd:56:01:76:bc:ca:84:25:c9:f0:2e:26: e3:50:25:1f:46:65:9c:32:a0:fa:ca:7e:37:69:ce: 4b:64:15:37:f1:9a:02:80:73:a0:13:8a:02:d2:29: d1:77:d3:53:1c:81:be:bf:0d:79:2f:6d:60:4e:ac: df:b1:53:dc:fc:3a:25:98:90:d8:b7:08:d6:6c:c3: d9:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:41:C6:07:AA:DE:74:C3:C8:47:0D:29:CF:D5:40:76:DE:E4:3E:A3 X509v3 Authority Key Identifier: keyid:16:ED:C8:95:6B:C4:13:C9:C5:02:19:28:B0:3B:C8:50:FC:7E:72:47 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916223F/4EBF27B6F95C11E9B6272285C4F9AE02/Fu3IlWvEE8nFAhkosDvIUPx-ckc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fu3IlWvEE8nFAhkosDvIUPx-ckc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916223F/4EBF27B6F95C11E9B6272285C4F9AE02/Fu3IlWvEE8nFAhkosDvIUPx-ckc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 45:72:20:42:ef:72:05:02:aa:0b:9f:fc:3e:86:ec:4c:c8:a8: 1d:13:4e:59:90:ed:25:0a:cd:8f:f0:5b:d7:5f:4f:1b:3d:72: 24:79:ed:56:8c:02:f6:6a:d9:ff:18:2d:7a:c1:ae:d4:ea:9f: e7:63:c7:28:ff:d7:f8:aa:b0:e4:38:f2:53:f6:ed:d0:2b:b3: 58:b7:e0:47:d7:2d:0c:65:b4:07:e4:09:6b:9d:be:6e:fa:71: a9:59:19:be:90:c9:ac:49:d6:56:e3:25:a8:62:04:c8:52:fd: 37:99:2e:fd:b9:1e:0f:71:31:22:f6:d0:e6:d8:e8:cb:92:de: 4e:43:99:00:aa:c0:f8:3f:a5:89:a7:01:ae:f6:cb:bb:61:06: 10:5a:2f:55:b7:b7:91:18:c4:1e:10:8f:b1:fa:14:56:86:28: 34:6f:bf:c3:35:e0:0d:be:ea:a7:7c:0d:a2:e4:c9:1d:93:c1: fe:35:0c:e3:09:e6:a6:99:d4:fe:3c:b9:44:3d:dc:78:90:5c: 85:92:c6:b8:29:0b:bc:bb:0f:15:8b:ee:f3:2a:f1:42:fb:03: 5c:77:05:bc:7c:b0:1d:1c:3d:79:7e:a0:5d:96:e5:99:5f:82: 1d:da:da:b7:0c:84:5e:b0:57:7b:1d:9c:1d:20:0f:31:82:77: d8:0e:34:88 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDMwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjIyM0YxMTAvBgNVBAUTKDE2RURDODk1NkJDNDEzQzlDNTAyMTkyOEIwM0JDODUw RkM3RTcyNDcwHhcNMjUxMDE4MTg1MjQyWhcNMjUxMDI1MTg1MjQyWjAYMRYwFAYD VQQDEw02OGYzZTFmYS1kNjA4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1c5U4ZrFCMCrZMnwzbuGoEwQTcccDgoIDbZjLtAuL7bECrRgOJoIEUSh8h1R eFJcXqCYnyy8tuHfyQtwAHMhpy9noIwnGs/ny+bt3xeRkDTqfHLGEkBPbzuWIuN+ uZ44HKuSgDlw83I9+iKYEwK4BGUVDMYi9fBKXWgi02M7tp4P1swzrIByPEOUK5Hj J0sUbCIMgN/R7TzbR1BaJtjMeXAK5SYMVcGipB8otTToFgI4357I1H/dVgF2vMqE JcnwLibjUCUfRmWcMqD6yn43ac5LZBU38ZoCgHOgE4oC0inRd9NTHIG+vw15L21g TqzfsVPc/DolmJDYtwjWbMPZZwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFA9Bxgeq 3nTDyEcNKc/VQHbe5D6jMB8GA1UdIwQYMBaAFBbtyJVrxBPJxQIZKLA7yFD8fnJH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MjIzRi80RUJGMjdCNkY5 NUMxMUU5QjYyNzIyODVDNEY5QUUwMi9GdTNJbFd2RUU4bkZBaGtvc0R2SVVQeC1j a2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0Z1M0lsV3ZFRThuRkFoa29zRHZJVVB4LWNrYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 MjIzRi80RUJGMjdCNkY5NUMxMUU5QjYyNzIyODVDNEY5QUUwMi9GdTNJbFd2RUU4 bkZBaGtvc0R2SVVQeC1ja2MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBFciBC73IFAqoLn/w+huxMyKgdE05ZkO0lCs2P8FvXX08bPXIkee1W jAL2atn/GC16wa7U6p/nY8co/9f4qrDkOPJT9u3QK7NYt+BH1y0MZbQH5Alrnb5u +nGpWRm+kMmsSdZW4yWoYgTIUv03mS79uR4PcTEi9tDm2OjLkt5OQ5kAqsD4P6WJ pwGu9su7YQYQWi9Vt7eRGMQeEI+x+hRWhig0b7/DNeANvuqnfA2i5Mkdk8H+NQzj CeammdT+PLlEPdx4kFyFksa4KQu8uw8Vi+7zKvFC+wNcdwW8fLAdHD15fqBdluWZ X4Id2tq3DIResFd7HZwdIA8xgnfYDjSI -----END CERTIFICATE-----Generated at Mon Oct 20 11:40:15 2025 by rpki-client