$ rpki-client -vvf rpki.apnic.net/member_repository/A917EFB8/D980A1721D9511E292150E7E08B02CD2/Fw6cdnZDw8H2BXlAhkij8NqEBFo.mft File: Fw6cdnZDw8H2BXlAhkij8NqEBFo.mft (raw, json) Hash identifier: MVPzef2iJow6T0TsN1zcTH0WxSuW/nBkjRyd7Q40tcM= Subject key identifier: BC:73:1C:76:69:A1:A8:4D:3B:13:00:6A:6C:1D:C0:08:58:CD:9C:DB Authority key identifier: 17:0E:9C:76:76:43:C3:C1:F6:05:79:40:86:48:A3:F0:DA:84:04:5A Certificate issuer: /CN=A917EFB8/serialNumber=170E9C767643C3C1F60579408648A3F0DA84045A Certificate serial: 34D8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fw6cdnZDw8H2BXlAhkij8NqEBFo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917EFB8/D980A1721D9511E292150E7E08B02CD2/Fw6cdnZDw8H2BXlAhkij8NqEBFo.mft Manifest number: 34D2 Signing time: Sat 18 Oct 2025 14:55:10 +0000 Manifest this update: Sat 18 Oct 2025 14:55:09 +0000 Manifest next update: Sat 25 Oct 2025 14:55:09 +0000 Files and hashes: 1: Fw6cdnZDw8H2BXlAhkij8NqEBFo.crl (hash: OgK2qvcdyhChDs667DI87RChXTegYAEchwVQZmIJUXM=) 2: E68E0FD4077B11EB98CA5D1CC4F9AE02.roa (hash: uVTYtUHXjzvA/dK6fjacM7pKV07g+NehzxqIMydfuDY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917EFB8/D980A1721D9511E292150E7E08B02CD2/Fw6cdnZDw8H2BXlAhkij8NqEBFo.crl rsync://rpki.apnic.net/member_repository/A917EFB8/D980A1721D9511E292150E7E08B02CD2/Fw6cdnZDw8H2BXlAhkij8NqEBFo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fw6cdnZDw8H2BXlAhkij8NqEBFo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 14:55:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13528 (0x34d8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917EFB8, serialNumber=170E9C767643C3C1F60579408648A3F0DA84045A Validity Not Before: Oct 18 14:55:09 2025 GMT Not After : Oct 25 14:55:09 2025 GMT Subject: CN=68f3aa4e-8cbb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:aa:37:52:bb:f9:79:34:33:f7:20:44:ce:d6: 07:5b:a8:48:75:98:ec:a0:a0:ed:82:4b:cd:a0:31: 44:16:ea:4b:08:23:d4:d3:4c:0a:ef:cc:f4:af:53: da:ec:f9:3f:06:c5:f0:e0:76:f4:6d:2c:8a:5d:b6: 8d:9b:24:5c:aa:31:89:84:1c:70:14:3e:08:61:49: 3d:55:d1:a4:10:15:cd:ef:21:f0:12:56:2b:0e:04: 46:e0:e0:ef:9c:73:ce:c4:86:a6:95:1d:48:26:a0: 09:2a:59:56:d8:cb:03:1a:b9:ea:ef:b8:44:fd:7b: ec:b0:6e:43:ac:05:4a:4d:59:9f:e7:51:d5:60:e3: c3:1d:73:3a:50:43:62:71:a3:f9:6e:c3:b5:93:26: 97:bd:7d:81:bb:37:a4:bf:34:32:6e:d7:c2:e2:56: 59:43:8d:91:0d:a1:d2:d9:42:64:dc:83:35:75:b0: 2e:d1:6e:44:2f:62:73:a0:c3:c7:26:64:35:16:8d: f0:3b:26:4b:b4:57:62:01:55:b3:9e:de:7c:6d:e3: ac:7d:e5:20:33:ef:82:28:be:91:6e:ae:97:c6:25: 9e:a7:28:f0:34:b7:50:37:dd:52:34:a1:d2:ce:97: f1:8f:b7:c6:41:f1:2e:35:1d:78:f9:72:76:98:0f: 32:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:73:1C:76:69:A1:A8:4D:3B:13:00:6A:6C:1D:C0:08:58:CD:9C:DB X509v3 Authority Key Identifier: keyid:17:0E:9C:76:76:43:C3:C1:F6:05:79:40:86:48:A3:F0:DA:84:04:5A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917EFB8/D980A1721D9511E292150E7E08B02CD2/Fw6cdnZDw8H2BXlAhkij8NqEBFo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fw6cdnZDw8H2BXlAhkij8NqEBFo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917EFB8/D980A1721D9511E292150E7E08B02CD2/Fw6cdnZDw8H2BXlAhkij8NqEBFo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8f:a4:07:53:68:af:bf:8a:7f:ad:de:79:56:43:d7:5a:b0:9b: a2:4f:15:d0:a1:4b:b8:1b:3c:23:fc:97:12:a8:53:3f:b4:d9: c4:fc:c3:b6:81:0b:d7:c7:89:c7:aa:7f:c6:05:5f:76:36:59: 13:52:2e:eb:f4:8d:9f:f9:22:46:a4:f0:ef:05:6b:6e:25:1e: 9f:fb:bf:83:28:b1:a7:65:83:90:f5:4b:ad:8b:0f:2a:00:94: 5c:be:8f:f8:21:cb:87:45:c5:68:a2:8d:a9:42:70:6f:dc:31: 8d:3a:c3:d1:30:1d:37:4c:2d:ed:ef:b6:04:5b:2b:37:f5:15: 38:33:86:11:83:66:8a:8b:62:18:e3:05:85:60:b7:86:8d:e9: 92:e0:08:bb:00:42:2e:9b:c8:b0:81:91:09:35:0f:78:73:4a: a5:bd:ce:cf:52:57:70:e8:c7:68:0f:37:bf:c6:18:d7:71:af: 6c:13:27:41:6d:ff:78:9b:e8:0d:86:65:30:6e:cc:81:e5:bd: 44:f9:3c:d5:6e:93:0d:74:e1:87:6c:92:88:e2:37:e0:30:f8: 44:56:50:ad:e5:58:bb:5b:2d:43:05:a0:3a:6e:e3:67:d6:e0: 88:bf:d0:0d:60:55:2c:74:3a:63:ee:a0:33:18:d0:f3:dd:aa: 31:e2:35:de -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNNgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0VGQjgxMTAvBgNVBAUTKDE3MEU5Qzc2NzY0M0MzQzFGNjA1Nzk0MDg2NDhBM0Yw REE4NDA0NUEwHhcNMjUxMDE4MTQ1NTA5WhcNMjUxMDI1MTQ1NTA5WjAYMRYwFAYD VQQDEw02OGYzYWE0ZS04Y2JiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAn6o3Urv5eTQz9yBEztYHW6hIdZjsoKDtgkvNoDFEFupLCCPU00wK78z0r1Pa 7Pk/BsXw4Hb0bSyKXbaNmyRcqjGJhBxwFD4IYUk9VdGkEBXN7yHwElYrDgRG4ODv nHPOxIamlR1IJqAJKllW2MsDGrnq77hE/XvssG5DrAVKTVmf51HVYOPDHXM6UENi caP5bsO1kyaXvX2BuzekvzQybtfC4lZZQ42RDaHS2UJk3IM1dbAu0W5EL2JzoMPH JmQ1Fo3wOyZLtFdiAVWznt58beOsfeUgM++CKL6Rbq6XxiWepyjwNLdQN91SNKHS zpfxj7fGQfEuNR14+XJ2mA8yEQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLxzHHZp oahNOxMAamwdwAhYzZzbMB8GA1UdIwQYMBaAFBcOnHZ2Q8PB9gV5QIZIo/DahARa MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RUZCOC9EOTgwQTE3MjFE OTUxMUUyOTIxNTBFN0UwOEIwMkNEMi9GdzZjZG5aRHc4SDJCWGxBaGtpajhOcUVC Rm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0Z3NmNkblpEdzhIMkJYbEFoa2lqOE5xRUJGby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 RUZCOC9EOTgwQTE3MjFEOTUxMUUyOTIxNTBFN0UwOEIwMkNEMi9GdzZjZG5aRHc4 SDJCWGxBaGtpajhOcUVCRm8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCPpAdTaK+/in+t3nlWQ9dasJuiTxXQoUu4Gzwj/JcSqFM/tNnE/MO2 gQvXx4nHqn/GBV92NlkTUi7r9I2f+SJGpPDvBWtuJR6f+7+DKLGnZYOQ9Uutiw8q AJRcvo/4IcuHRcVooo2pQnBv3DGNOsPRMB03TC3t77YEWys39RU4M4YRg2aKi2IY 4wWFYLeGjemS4Ai7AEIum8iwgZEJNQ94c0qlvc7PUldw6MdoDze/xhjXca9sEydB bf94m+gNhmUwbsyB5b1E+TzVbpMNdOGHbJKI4jfgMPhEVlCt5Vi7Wy1DBaA6buNn 1uCIv9ANYFUsdDpj7qAzGNDz3aox4jXe -----END CERTIFICATE-----Generated at Mon Oct 20 09:38:19 2025 by rpki-client