$ rpki-client -vvf rpki.apnic.net/member_repository/A91798AD/70EFB4ACFE2A11E68F2C5A13C4F9AE02/fBoPSOpDIx-jND1ZKCHvKejSsxs.mft File: fBoPSOpDIx-jND1ZKCHvKejSsxs.mft (raw, json) Hash identifier: ZX6CBGiyWQPRdWJ8k+SSBdh5Fu8Gly5z+/QQ+2yEeNY= Subject key identifier: 02:55:0F:6E:6C:EC:3E:1D:EB:F0:D1:42:F3:61:D1:AC:49:2E:9B:7B Authority key identifier: 7C:1A:0F:48:EA:43:23:1F:A3:34:3D:59:28:21:EF:29:E8:D2:B3:1B Certificate issuer: /CN=A91798AD/serialNumber=7C1A0F48EA43231FA3343D592821EF29E8D2B31B Certificate serial: 1CAF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fBoPSOpDIx-jND1ZKCHvKejSsxs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91798AD/70EFB4ACFE2A11E68F2C5A13C4F9AE02/fBoPSOpDIx-jND1ZKCHvKejSsxs.mft Manifest number: 1C5A Signing time: Sat 18 Oct 2025 16:33:38 +0000 Manifest this update: Sat 18 Oct 2025 16:33:37 +0000 Manifest next update: Sat 25 Oct 2025 16:33:37 +0000 Files and hashes: 1: fBoPSOpDIx-jND1ZKCHvKejSsxs.crl (hash: Q5iygqJBu/a34/f/W9L+LVDdSyRmAD/0OHi0cWcqHOM=) 2: AD3B2582EF9A11EDA4E50366C4F9AE02.roa (hash: jFhmcGLcWRMJb2NQjPMrP9b0nQzmycMaQ535WZNL3p0=) 3: 98E30C12DCE411EDB446D65DC4F9AE02.roa (hash: uUULoxpQYQYmKQJvZhToS8NEpAyyIoYOFguK8s9wAW0=) 4: 398B3186FE5111E6BCEC6E72C4F9AE02.roa (hash: T9+Dc0WSoJhtGdsfkrH1jqSLtL2q8TNFDLOAk1Ci3QY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91798AD/70EFB4ACFE2A11E68F2C5A13C4F9AE02/fBoPSOpDIx-jND1ZKCHvKejSsxs.crl rsync://rpki.apnic.net/member_repository/A91798AD/70EFB4ACFE2A11E68F2C5A13C4F9AE02/fBoPSOpDIx-jND1ZKCHvKejSsxs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fBoPSOpDIx-jND1ZKCHvKejSsxs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 16:33:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7343 (0x1caf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91798AD, serialNumber=7C1A0F48EA43231FA3343D592821EF29E8D2B31B Validity Not Before: Oct 18 16:33:37 2025 GMT Not After : Oct 25 16:33:37 2025 GMT Subject: CN=68f3c161-3942 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:b7:83:71:28:bc:3e:3d:b9:08:9e:02:75:71: 56:70:c4:bb:f4:8c:b3:47:2a:5a:57:f2:04:0f:ab: fc:e2:b0:80:0e:b2:c8:95:cb:0e:f9:cf:cf:c1:08: 73:bf:d8:ad:9c:ad:79:7d:77:2b:12:08:b4:72:2f: 50:ce:87:54:4e:14:f9:5e:16:29:4a:90:3b:bd:cb: f3:d4:6d:ab:65:f5:a8:0e:68:9d:95:8f:a5:bb:c9: 1e:d8:ab:fe:37:e7:fd:f4:ad:f6:ca:56:36:0a:7a: 48:c1:76:54:6c:1d:cf:ab:a5:2f:e5:ef:f9:e9:c7: 18:0a:7c:f0:78:8d:2b:fb:f4:fd:ab:fe:b4:2b:47: 19:9b:c9:d3:c3:6a:ca:73:58:b9:0b:62:61:13:4a: 3f:0d:ad:64:2c:68:e1:63:8b:26:73:62:c4:16:66: d8:94:e1:ff:e3:5e:70:2d:9e:82:86:c8:ef:b4:b4: 5e:77:ee:39:b0:3f:0f:d5:2a:ff:fc:57:09:dc:c5: 04:00:dc:04:25:05:14:48:10:b1:28:4f:cb:8d:64: bc:c0:d7:5b:e6:c4:1c:9e:c9:23:c7:33:0b:2e:88: 1f:9f:28:bf:b0:8f:40:0a:73:ba:30:82:fa:55:e6: 54:85:ff:4a:fa:f5:18:92:15:d8:8c:69:24:5f:83: 78:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:55:0F:6E:6C:EC:3E:1D:EB:F0:D1:42:F3:61:D1:AC:49:2E:9B:7B X509v3 Authority Key Identifier: keyid:7C:1A:0F:48:EA:43:23:1F:A3:34:3D:59:28:21:EF:29:E8:D2:B3:1B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91798AD/70EFB4ACFE2A11E68F2C5A13C4F9AE02/fBoPSOpDIx-jND1ZKCHvKejSsxs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fBoPSOpDIx-jND1ZKCHvKejSsxs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91798AD/70EFB4ACFE2A11E68F2C5A13C4F9AE02/fBoPSOpDIx-jND1ZKCHvKejSsxs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a7:ac:1a:96:33:dc:49:85:9c:c9:08:99:92:34:91:a0:de:60: 79:f0:04:ac:b5:18:e3:ae:99:0e:97:41:0b:8a:84:82:b9:43: 47:39:47:2e:3a:e7:f7:57:c1:28:98:21:8e:59:5f:43:bb:0c: ec:eb:cf:8a:6d:b9:82:be:a4:d2:7d:c6:d7:ba:4f:20:5e:34: 9d:fd:87:0a:f3:1e:f7:85:48:19:e5:82:f4:68:d9:b4:17:9c: d9:df:09:fa:39:6e:89:76:32:8b:9a:df:8a:a6:5f:f1:eb:09: 60:10:f0:e2:b3:63:ca:ce:dd:80:b0:73:f0:31:70:22:81:30: b6:f9:4a:d8:fe:bc:b1:b8:ba:2e:e3:06:9b:8a:fc:35:d0:f5: d7:e0:41:23:41:15:3c:1b:ea:7d:9c:9b:48:1e:8d:eb:f3:30: 60:d3:88:9c:6d:6e:12:89:ea:a7:a0:42:ef:7c:e5:85:36:53: 16:24:10:8c:87:47:ea:7a:8a:2c:e4:90:d5:37:3d:8c:88:93: 35:f3:a5:fa:73:cb:fa:19:2f:6d:4f:8f:a1:3a:cb:d1:28:3d: f8:c4:34:f6:85:44:e8:b8:9f:cc:38:72:31:15:e4:ef:ca:2b: d1:20:ae:9f:1c:24:48:d6:d1:32:32:90:a3:d1:02:ed:0f:fa: 9d:0e:18:8d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICHK8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Nzk4QUQxMTAvBgNVBAUTKDdDMUEwRjQ4RUE0MzIzMUZBMzM0M0Q1OTI4MjFFRjI5 RThEMkIzMUIwHhcNMjUxMDE4MTYzMzM3WhcNMjUxMDI1MTYzMzM3WjAYMRYwFAYD VQQDEw02OGYzYzE2MS0zOTQyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtreDcSi8Pj25CJ4CdXFWcMS79IyzRypaV/IED6v84rCADrLIlcsO+c/PwQhz v9itnK15fXcrEgi0ci9QzodUThT5XhYpSpA7vcvz1G2rZfWoDmidlY+lu8ke2Kv+ N+f99K32ylY2CnpIwXZUbB3Pq6Uv5e/56ccYCnzweI0r+/T9q/60K0cZm8nTw2rK c1i5C2JhE0o/Da1kLGjhY4smc2LEFmbYlOH/415wLZ6ChsjvtLRed+45sD8P1Sr/ /FcJ3MUEANwEJQUUSBCxKE/LjWS8wNdb5sQcnskjxzMLLogfnyi/sI9ACnO6MIL6 VeZUhf9K+vUYkhXYjGkkX4N4sQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAJVD25s 7D4d6/DRQvNh0axJLpt7MB8GA1UdIwQYMBaAFHwaD0jqQyMfozQ9WSgh7yno0rMb MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3OThBRC83MEVGQjRBQ0ZF MkExMUU2OEYyQzVBMTNDNEY5QUUwMi9mQm9QU09wREl4LWpORDFaS0NIdktlalNz eHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ZCb1BTT3BESXgtak5EMVpLQ0h2S2VqU3N4cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 OThBRC83MEVGQjRBQ0ZFMkExMUU2OEYyQzVBMTNDNEY5QUUwMi9mQm9QU09wREl4 LWpORDFaS0NIdktlalNzeHMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCnrBqWM9xJhZzJCJmSNJGg3mB58ASstRjjrpkOl0ELioSCuUNHOUcu Ouf3V8EomCGOWV9Duwzs68+KbbmCvqTSfcbXuk8gXjSd/YcK8x73hUgZ5YL0aNm0 F5zZ3wn6OW6JdjKLmt+Kpl/x6wlgEPDis2PKzt2AsHPwMXAigTC2+UrY/ryxuLou 4wabivw10PXX4EEjQRU8G+p9nJtIHo3r8zBg04icbW4SieqnoELvfOWFNlMWJBCM h0fqeoos5JDVNz2MiJM186X6c8v6GS9tT4+hOsvRKD34xDT2hUTouJ/MOHIxFeTv yivRIK6fHCRI1tEyMpCj0QLtD/qdDhiN -----END CERTIFICATE-----Generated at Mon Oct 20 17:10:56 2025 by rpki-client