$ rpki-client -vvf rpki.apnic.net/member_repository/A91757CB/4ED212DCF2F811EEA3506738C4F9AE02/FzXLqe4W_oXz0oP6W7lHnZryzIY.mft File: FzXLqe4W_oXz0oP6W7lHnZryzIY.mft (raw, json) Hash identifier: dlU3LEgiYDiWz5LKtCk9ECX2+75Danvo7eSkn/SzCzs= Subject key identifier: 38:89:24:F0:46:80:9F:DA:90:D4:69:AE:82:1E:45:18:16:F0:AC:0F Authority key identifier: 17:35:CB:A9:EE:16:FE:85:F3:D2:83:FA:5B:B9:47:9D:9A:F2:CC:86 Certificate issuer: /CN=A91757CB/serialNumber=1735CBA9EE16FE85F3D283FA5BB9479D9AF2CC86 Certificate serial: 011E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FzXLqe4W_oXz0oP6W7lHnZryzIY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91757CB/4ED212DCF2F811EEA3506738C4F9AE02/FzXLqe4W_oXz0oP6W7lHnZryzIY.mft Manifest number: 011E Signing time: Sun 19 Oct 2025 07:35:27 +0000 Manifest this update: Sun 19 Oct 2025 07:35:26 +0000 Manifest next update: Sun 26 Oct 2025 07:35:26 +0000 Files and hashes: 1: FzXLqe4W_oXz0oP6W7lHnZryzIY.crl (hash: WLle2EFZyNfCc+vXlYsUIQu5wgSsoJsHT1iRCKyg7p8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91757CB/4ED212DCF2F811EEA3506738C4F9AE02/FzXLqe4W_oXz0oP6W7lHnZryzIY.crl rsync://rpki.apnic.net/member_repository/A91757CB/4ED212DCF2F811EEA3506738C4F9AE02/FzXLqe4W_oXz0oP6W7lHnZryzIY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FzXLqe4W_oXz0oP6W7lHnZryzIY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 07:35:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 286 (0x11e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91757CB, serialNumber=1735CBA9EE16FE85F3D283FA5BB9479D9AF2CC86 Validity Not Before: Oct 19 07:35:26 2025 GMT Not After : Oct 26 07:35:26 2025 GMT Subject: CN=68f494be-5ff5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:71:10:12:bb:95:fb:12:1a:0a:9c:bb:6a:52: 82:2f:6e:38:a7:89:da:e3:97:c7:f5:b7:72:cc:79: 06:09:e2:7c:15:e8:53:ec:91:85:b3:b0:59:e8:f8: 3f:c2:89:a5:89:10:00:39:2c:1e:b2:6e:9e:27:38: 2d:8f:8b:6b:31:b5:b1:5e:30:49:f6:61:30:00:6d: c2:a6:00:b1:f3:cc:27:ad:b1:94:75:bb:66:ee:28: bd:f7:ed:3a:38:4b:86:45:9a:5f:19:b9:f2:cc:44: 3a:b2:f9:a5:af:23:57:ac:83:b5:24:9d:e8:b4:2e: 52:cb:1b:da:6a:c7:cc:bf:5c:a6:1b:d9:9b:d0:f6: 40:14:3a:50:e4:85:e9:b0:73:f3:6a:69:88:b7:8e: d9:46:0a:25:df:6a:84:57:be:aa:09:7e:f1:5e:2a: 51:b7:1e:f9:7f:2f:fb:a2:bf:be:a9:5f:db:21:e0: e7:31:72:3a:ed:29:89:5d:14:f6:2c:f8:c3:58:dc: 4e:c5:5f:46:2b:ec:e3:52:9a:8e:37:1a:30:d4:a6: 07:dd:5b:c3:6e:01:8a:60:83:1b:8b:1f:91:55:13: 0e:a7:9a:0f:ba:11:2d:01:27:65:b5:5f:8e:04:ce: 20:dc:2d:23:42:84:1a:fc:86:bb:65:f3:09:f8:d3: b5:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:89:24:F0:46:80:9F:DA:90:D4:69:AE:82:1E:45:18:16:F0:AC:0F X509v3 Authority Key Identifier: keyid:17:35:CB:A9:EE:16:FE:85:F3:D2:83:FA:5B:B9:47:9D:9A:F2:CC:86 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91757CB/4ED212DCF2F811EEA3506738C4F9AE02/FzXLqe4W_oXz0oP6W7lHnZryzIY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FzXLqe4W_oXz0oP6W7lHnZryzIY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91757CB/4ED212DCF2F811EEA3506738C4F9AE02/FzXLqe4W_oXz0oP6W7lHnZryzIY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 61:4a:3a:0b:ae:91:f9:05:c5:ba:6e:04:69:b0:8f:33:f0:bc: 11:90:e0:7a:45:35:6e:b6:c8:28:01:3c:a8:c0:67:47:02:d7: 8a:07:f4:0f:9b:2d:04:fc:3f:23:e2:84:0a:7b:a5:ec:83:d3: 0b:d6:cc:1d:a4:c7:3b:e7:83:ad:f4:21:61:c8:c5:33:25:ec: 10:c8:12:ff:b3:9b:69:19:5a:cf:79:17:af:86:01:8c:d7:d6: 08:f1:da:5a:34:c8:af:59:56:16:15:e2:40:14:cc:28:9f:f7: 01:5b:90:e9:8b:9a:33:07:9f:7f:53:75:c8:9a:1e:9c:7f:1d: a2:aa:ff:06:3f:55:a1:53:d0:8e:c3:27:a1:f6:39:0b:2c:ae: bb:2c:35:05:ff:7c:d5:5e:26:fc:86:a7:ef:7a:7f:4f:d9:fe: 94:08:3f:a7:20:28:b9:2e:68:e5:4f:89:9b:e2:53:59:ea:2e: 31:9a:fd:92:9f:76:2a:ab:91:a7:08:02:fa:4a:24:2e:8d:55: fb:8d:9d:5e:a2:e1:fd:06:85:e9:69:b9:11:db:72:c5:26:d9: 7b:5a:84:a2:3f:18:2d:61:43:d3:41:6d:30:cc:7f:18:9d:f9: 95:8e:22:5e:2d:fa:6c:23:1b:5e:3c:1f:dc:03:9a:a0:32:dd: 5b:e3:bb:61 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAR4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzU3Q0IxMTAvBgNVBAUTKDE3MzVDQkE5RUUxNkZFODVGM0QyODNGQTVCQjk0NzlE OUFGMkNDODYwHhcNMjUxMDE5MDczNTI2WhcNMjUxMDI2MDczNTI2WjAYMRYwFAYD VQQDEw02OGY0OTRiZS01ZmY1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA13EQEruV+xIaCpy7alKCL244p4na45fH9bdyzHkGCeJ8FehT7JGFs7BZ6Pg/ womliRAAOSwesm6eJzgtj4trMbWxXjBJ9mEwAG3CpgCx88wnrbGUdbtm7ii99+06 OEuGRZpfGbnyzEQ6svmlryNXrIO1JJ3otC5SyxvaasfMv1ymG9mb0PZAFDpQ5IXp sHPzammIt47ZRgol32qEV76qCX7xXipRtx75fy/7or++qV/bIeDnMXI67SmJXRT2 LPjDWNxOxV9GK+zjUpqONxow1KYH3VvDbgGKYIMbix+RVRMOp5oPuhEtASdltV+O BM4g3C0jQoQa/Ia7ZfMJ+NO1pQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDiJJPBG gJ/akNRproIeRRgW8KwPMB8GA1UdIwQYMBaAFBc1y6nuFv6F89KD+lu5R52a8syG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NTdDQi80RUQyMTJEQ0Yy RjgxMUVFQTM1MDY3MzhDNEY5QUUwMi9GelhMcWU0V19vWHowb1A2VzdsSG5acnl6 SVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0Z6WExxZTRXX29YejBvUDZXN2xIblpyeXpJWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NTdDQi80RUQyMTJEQ0YyRjgxMUVFQTM1MDY3MzhDNEY5QUUwMi9GelhMcWU0V19v WHowb1A2VzdsSG5acnl6SVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBhSjoLrpH5BcW6bgRpsI8z8LwRkOB6RTVutsgoATyowGdHAteKB/QP my0E/D8j4oQKe6Xsg9ML1swdpMc754Ot9CFhyMUzJewQyBL/s5tpGVrPeRevhgGM 19YI8dpaNMivWVYWFeJAFMwon/cBW5Dpi5ozB59/U3XImh6cfx2iqv8GP1WhU9CO wyeh9jkLLK67LDUF/3zVXib8hqfven9P2f6UCD+nICi5LmjlT4mb4lNZ6i4xmv2S n3Yqq5GnCAL6SiQujVX7jZ1eouH9BoXpabkR23LFJtl7WoSiPxgtYUPTQW0wzH8Y nfmVjiJeLfpsIxtePB/cA5qgMt1b47th -----END CERTIFICATE-----Generated at Tue Oct 21 05:02:13 2025 by rpki-client