$ rpki-client -vvf rpki.apnic.net/member_repository/A91645D3/7620BC0C0C2011EB8AE6394DC4F9AE02/fcUQye6vE3-r4XHlViRtskYeJxU.mft File: fcUQye6vE3-r4XHlViRtskYeJxU.mft (raw, json) Hash identifier: fArZ+N6u+2Pkv9H8+I141Jht362eIOGjzV5JKuck2k0= Subject key identifier: ED:17:B0:60:F0:63:A0:1C:E1:E7:D2:1B:4B:E7:AA:81:99:C1:81:9E Authority key identifier: 7D:C5:10:C9:EE:AF:13:7F:AB:E1:71:E5:56:24:6D:B2:46:1E:27:15 Certificate issuer: /CN=A91645D3/serialNumber=7DC510C9EEAF137FABE171E556246DB2461E2715 Certificate serial: 07E0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fcUQye6vE3-r4XHlViRtskYeJxU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91645D3/7620BC0C0C2011EB8AE6394DC4F9AE02/fcUQye6vE3-r4XHlViRtskYeJxU.mft Manifest number: 07D9 Signing time: Sat 18 Oct 2025 22:25:05 +0000 Manifest this update: Sat 18 Oct 2025 22:25:04 +0000 Manifest next update: Sat 25 Oct 2025 22:25:04 +0000 Files and hashes: 1: fcUQye6vE3-r4XHlViRtskYeJxU.crl (hash: XeGVJbO84oL36HDsVveQPQaPb6h6j+hLEVwfWczFv2w=) 2: 58DAB5900FF311EBB0C3265EC4F9AE02.roa (hash: /rykGvLbUlrN0XXQSSOg6Z/Y2O6GIy4F1RxGecU5aLc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91645D3/7620BC0C0C2011EB8AE6394DC4F9AE02/fcUQye6vE3-r4XHlViRtskYeJxU.crl rsync://rpki.apnic.net/member_repository/A91645D3/7620BC0C0C2011EB8AE6394DC4F9AE02/fcUQye6vE3-r4XHlViRtskYeJxU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fcUQye6vE3-r4XHlViRtskYeJxU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 22:25:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2016 (0x7e0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91645D3, serialNumber=7DC510C9EEAF137FABE171E556246DB2461E2715 Validity Not Before: Oct 18 22:25:04 2025 GMT Not After : Oct 25 22:25:04 2025 GMT Subject: CN=68f413c1-852d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:0f:97:a3:38:24:c9:13:d8:60:37:dd:45:a8: 0c:d9:0a:8b:60:68:0a:f9:a0:5e:ca:f5:c1:b8:d2: 30:9b:a1:15:86:fe:bf:33:cd:19:3c:bb:9e:4f:2d: 2a:a3:f7:2a:f7:59:c4:dd:76:32:92:be:97:69:94: af:90:69:fa:00:db:d9:56:f1:46:61:b9:7d:20:2b: 74:03:81:e8:45:7b:22:2d:fb:5d:61:99:1f:8e:f8: c6:63:53:ee:ef:77:23:f3:7c:e5:63:1d:70:08:5d: 2b:06:e6:d5:9f:f3:95:7a:e2:28:53:ab:a2:23:1e: 08:36:24:cc:48:fb:ce:2f:3c:f5:1d:58:bd:6d:31: ac:3e:b9:6d:5e:f0:a5:fb:ab:1e:66:fe:9c:5c:d2: 09:f7:dd:f4:68:33:70:46:db:4b:cf:10:26:b3:11: 58:8f:c7:5a:f0:84:72:3f:52:59:64:7b:13:b0:56: d3:19:0a:72:aa:96:3a:19:df:d4:57:7f:35:42:b5: 8f:09:de:e0:0d:60:bb:2c:99:55:a1:53:75:e4:11: e5:de:1f:29:6d:38:81:66:76:ab:2a:8a:8c:05:9d: 21:47:5f:d3:08:02:1a:dc:10:4d:e1:8b:bb:ef:a7: d2:d8:29:b1:74:57:42:45:43:c5:ed:05:fd:4f:15: 2f:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:17:B0:60:F0:63:A0:1C:E1:E7:D2:1B:4B:E7:AA:81:99:C1:81:9E X509v3 Authority Key Identifier: keyid:7D:C5:10:C9:EE:AF:13:7F:AB:E1:71:E5:56:24:6D:B2:46:1E:27:15 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91645D3/7620BC0C0C2011EB8AE6394DC4F9AE02/fcUQye6vE3-r4XHlViRtskYeJxU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fcUQye6vE3-r4XHlViRtskYeJxU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91645D3/7620BC0C0C2011EB8AE6394DC4F9AE02/fcUQye6vE3-r4XHlViRtskYeJxU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 11:4d:ac:08:61:e2:e4:ed:03:b6:ed:b9:8e:09:bb:cd:22:ca: d4:49:17:74:e1:0a:35:e5:4b:69:f6:88:cd:2d:39:a6:f7:ea: 47:3c:fa:dd:4a:11:6c:a8:e7:86:46:93:13:86:8b:f1:d8:63: 4b:48:76:8b:a7:cc:86:0c:b9:91:ee:1f:12:12:dd:c7:0e:9b: d7:f0:5d:1d:4f:7a:8d:22:db:f6:15:b8:fa:3c:82:45:fd:d1: e4:b1:4c:98:d1:21:00:d8:73:f8:b6:f5:5b:59:90:7a:fd:1b: e9:52:71:b0:46:d2:b6:27:34:60:24:0a:77:3e:17:d5:c4:1e: ae:46:8d:a1:d3:76:85:6f:79:be:69:12:30:a2:2b:c4:88:fc: bc:52:32:b3:99:55:7f:9d:9f:d9:e0:73:e2:9c:cc:01:3d:97: 60:d4:68:46:28:b2:65:99:8e:8e:68:30:56:96:0b:f8:61:68: f1:b7:28:8a:e2:01:87:0a:fc:e2:69:36:f6:d9:6b:81:46:cc: 82:1b:d5:44:10:1a:32:c2:b1:d3:d1:1d:2d:26:63:3b:6e:8a: 64:81:cc:41:de:79:65:7b:fa:5b:61:ad:fe:b8:5e:2d:cf:0f: 1a:67:8b:db:8c:b8:83:91:28:ee:9d:c3:2f:97:91:9c:3c:c8: 83:92:fd:fd -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB+AwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjQ1RDMxMTAvBgNVBAUTKDdEQzUxMEM5RUVBRjEzN0ZBQkUxNzFFNTU2MjQ2REIy NDYxRTI3MTUwHhcNMjUxMDE4MjIyNTA0WhcNMjUxMDI1MjIyNTA0WjAYMRYwFAYD VQQDEw02OGY0MTNjMS04NTJkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqg+XozgkyRPYYDfdRagM2QqLYGgK+aBeyvXBuNIwm6EVhv6/M80ZPLueTy0q o/cq91nE3XYykr6XaZSvkGn6ANvZVvFGYbl9ICt0A4HoRXsiLftdYZkfjvjGY1Pu 73cj83zlYx1wCF0rBubVn/OVeuIoU6uiIx4INiTMSPvOLzz1HVi9bTGsPrltXvCl +6seZv6cXNIJ9930aDNwRttLzxAmsxFYj8da8IRyP1JZZHsTsFbTGQpyqpY6Gd/U V381QrWPCd7gDWC7LJlVoVN15BHl3h8pbTiBZnarKoqMBZ0hR1/TCAIa3BBN4Yu7 76fS2CmxdFdCRUPF7QX9TxUvTQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFO0XsGDw Y6Ac4efSG0vnqoGZwYGeMB8GA1UdIwQYMBaAFH3FEMnurxN/q+Fx5VYkbbJGHicV MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NDVEMy83NjIwQkMwQzBD MjAxMUVCOEFFNjM5NERDNEY5QUUwMi9mY1VReWU2dkUzLXI0WEhsVmlSdHNrWWVK eFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ZjVVF5ZTZ2RTMtcjRYSGxWaVJ0c2tZZUp4VS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 NDVEMy83NjIwQkMwQzBDMjAxMUVCOEFFNjM5NERDNEY5QUUwMi9mY1VReWU2dkUz LXI0WEhsVmlSdHNrWWVKeFUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQARTawIYeLk7QO27bmOCbvNIsrUSRd04Qo15Utp9ojNLTmm9+pHPPrd ShFsqOeGRpMThovx2GNLSHaLp8yGDLmR7h8SEt3HDpvX8F0dT3qNItv2Fbj6PIJF /dHksUyY0SEA2HP4tvVbWZB6/RvpUnGwRtK2JzRgJAp3PhfVxB6uRo2h03aFb3m+ aRIwoivEiPy8UjKzmVV/nZ/Z4HPinMwBPZdg1GhGKLJlmY6OaDBWlgv4YWjxtyiK 4gGHCvziaTb22WuBRsyCG9VEEBoywrHT0R0tJmM7bopkgcxB3nlle/pbYa3+uF4t zw8aZ4vbjLiDkSjuncMvl5GcPMiDkv39 -----END CERTIFICATE-----Generated at Mon Oct 20 10:35:11 2025 by rpki-client