$ rpki-client -vvf rpki.apnic.net/member_repository/A918259F/0F8B5910CDAB11EA8837520CC4F9AE02/FnXb2ew5zu2Bu7veQsx4z3oWJ8U.mft File: FnXb2ew5zu2Bu7veQsx4z3oWJ8U.mft (raw, json) Hash identifier: Afpbck30GidR48nBkT+gupdAVzRH+gW3AjwcMTuwDrs= Subject key identifier: F4:4F:1A:C1:14:7C:6B:E1:2D:BD:CD:D1:FE:4A:4A:94:CC:C8:81:C2 Authority key identifier: 16:75:DB:D9:EC:39:CE:ED:81:BB:BB:DE:42:CC:78:CF:7A:16:27:C5 Certificate issuer: /CN=A918259F/serialNumber=1675DBD9EC39CEED81BBBBDE42CC78CF7A1627C5 Certificate serial: 088F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FnXb2ew5zu2Bu7veQsx4z3oWJ8U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918259F/0F8B5910CDAB11EA8837520CC4F9AE02/FnXb2ew5zu2Bu7veQsx4z3oWJ8U.mft Manifest number: 0887 Signing time: Sat 18 Oct 2025 21:44:02 +0000 Manifest this update: Sat 18 Oct 2025 21:44:01 +0000 Manifest next update: Sat 25 Oct 2025 21:44:01 +0000 Files and hashes: 1: FnXb2ew5zu2Bu7veQsx4z3oWJ8U.crl (hash: RJoCDoqB60bUmEeWew3rIalijHqjT1KJ0VlVtSBch40=) 2: 760B9414D50911EB81567986C4F9AE02.roa (hash: QPsDfSV6so0OjIlOy/DIgPY7VNOYY4wsn5e2KkaKPCI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918259F/0F8B5910CDAB11EA8837520CC4F9AE02/FnXb2ew5zu2Bu7veQsx4z3oWJ8U.crl rsync://rpki.apnic.net/member_repository/A918259F/0F8B5910CDAB11EA8837520CC4F9AE02/FnXb2ew5zu2Bu7veQsx4z3oWJ8U.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FnXb2ew5zu2Bu7veQsx4z3oWJ8U.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 21:44:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2191 (0x88f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918259F, serialNumber=1675DBD9EC39CEED81BBBBDE42CC78CF7A1627C5 Validity Not Before: Oct 18 21:44:01 2025 GMT Not After : Oct 25 21:44:01 2025 GMT Subject: CN=68f40a21-8bc1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:94:ed:22:83:0c:63:2e:39:32:23:4d:ee:26: 1d:4a:20:55:01:36:30:fb:ce:e9:36:64:cf:65:b4: ed:a9:3a:37:69:18:07:cf:81:c7:b9:29:a1:d0:a0: 3f:e5:c8:cd:18:53:d4:37:fc:6a:ad:8e:43:f4:98: 88:f6:5d:a9:37:9b:87:8d:d7:c3:9b:cd:34:cb:0a: f3:a0:4a:75:af:0f:b0:49:89:a3:c3:67:44:e9:d0: fd:4b:f8:98:b8:98:ef:30:85:0a:77:60:12:9b:7a: 9e:ef:8b:4e:45:5b:3a:25:8e:1f:c3:e7:ab:61:9d: a3:a6:dd:eb:ce:9a:6c:e6:47:e4:d6:6b:0d:a5:40: 9d:8a:90:de:03:d6:e0:73:9c:ea:fb:ed:46:c7:b9: 78:3b:44:7e:7a:a4:39:1f:9c:7e:cc:9a:22:96:da: 39:6d:54:ab:e0:09:15:36:61:85:19:87:6b:72:5b: 56:22:93:f0:a5:fa:cc:3d:4e:6c:8d:41:b7:cb:7c: c6:46:61:0b:82:ca:c3:7a:59:69:f0:2c:c5:e3:12: 7f:4c:0e:12:d7:6f:1e:f4:26:58:b7:da:14:9d:ca: 5d:fe:b1:3e:70:fe:ae:f4:55:8d:64:e4:d3:6f:88: 29:50:4e:9f:f4:5f:1c:76:86:96:db:98:f4:16:7c: bf:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:4F:1A:C1:14:7C:6B:E1:2D:BD:CD:D1:FE:4A:4A:94:CC:C8:81:C2 X509v3 Authority Key Identifier: keyid:16:75:DB:D9:EC:39:CE:ED:81:BB:BB:DE:42:CC:78:CF:7A:16:27:C5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918259F/0F8B5910CDAB11EA8837520CC4F9AE02/FnXb2ew5zu2Bu7veQsx4z3oWJ8U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FnXb2ew5zu2Bu7veQsx4z3oWJ8U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918259F/0F8B5910CDAB11EA8837520CC4F9AE02/FnXb2ew5zu2Bu7veQsx4z3oWJ8U.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 15:49:89:5b:c7:b2:ed:8e:0f:53:0e:4b:70:13:ed:e9:cc:a9: f0:96:05:bf:e8:40:6f:e8:9b:9f:70:0a:7a:c6:08:d7:8b:c5: df:96:2b:93:49:02:46:7c:41:62:f2:3a:36:f7:df:3e:06:44: 46:16:f3:8d:66:a1:21:7e:8a:90:54:c5:9b:78:69:78:fa:7d: 0e:2e:fc:87:3d:9a:4c:00:4a:7c:e9:15:bc:fb:a5:2b:f1:9a: 88:a1:43:42:94:cd:d6:d7:2c:61:bb:50:82:31:b4:75:b4:98: 8d:c7:e0:f2:d8:59:4c:a8:7f:40:e7:12:92:c2:48:a8:a8:4e: 87:94:01:1a:82:ac:83:5d:71:9c:1f:98:90:51:47:08:fd:a4: ad:b2:e1:2a:9d:fb:19:0c:94:34:c8:c4:67:39:11:b6:59:00: 38:8f:a9:40:da:18:f3:89:c4:64:0a:c3:28:40:b3:7d:66:e1: a5:37:79:3a:54:b1:a4:3d:a6:e1:f2:6b:17:f8:ca:c3:01:06: 5f:90:16:14:9c:27:bb:2e:6e:6f:09:db:37:6f:b1:11:74:2f: 99:00:a4:10:f9:cb:f4:b7:bc:06:1c:d9:09:ac:a6:79:a9:ab: 33:53:41:6a:97:0b:f8:20:3a:ff:8f:38:27:6c:94:40:0b:6e: a8:a9:89:47 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCI8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODI1OUYxMTAvBgNVBAUTKDE2NzVEQkQ5RUMzOUNFRUQ4MUJCQkJERTQyQ0M3OENG N0ExNjI3QzUwHhcNMjUxMDE4MjE0NDAxWhcNMjUxMDI1MjE0NDAxWjAYMRYwFAYD VQQDEw02OGY0MGEyMS04YmMxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvJTtIoMMYy45MiNN7iYdSiBVATYw+87pNmTPZbTtqTo3aRgHz4HHuSmh0KA/ 5cjNGFPUN/xqrY5D9JiI9l2pN5uHjdfDm800ywrzoEp1rw+wSYmjw2dE6dD9S/iY uJjvMIUKd2ASm3qe74tORVs6JY4fw+erYZ2jpt3rzpps5kfk1msNpUCdipDeA9bg c5zq++1Gx7l4O0R+eqQ5H5x+zJoilto5bVSr4AkVNmGFGYdrcltWIpPwpfrMPU5s jUG3y3zGRmELgsrDellp8CzF4xJ/TA4S128e9CZYt9oUncpd/rE+cP6u9FWNZOTT b4gpUE6f9F8cdoaW25j0Fny/awIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPRPGsEU fGvhLb3N0f5KSpTMyIHCMB8GA1UdIwQYMBaAFBZ129nsOc7tgbu73kLMeM96FifF MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MjU5Ri8wRjhCNTkxMENE QUIxMUVBODgzNzUyMENDNEY5QUUwMi9GblhiMmV3NXp1MkJ1N3ZlUXN4NHozb1dK OFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZuWGIyZXc1enUyQnU3dmVRc3g0ejNvV0o4VS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 MjU5Ri8wRjhCNTkxMENEQUIxMUVBODgzNzUyMENDNEY5QUUwMi9GblhiMmV3NXp1 MkJ1N3ZlUXN4NHozb1dKOFUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAVSYlbx7Ltjg9TDktwE+3pzKnwlgW/6EBv6JufcAp6xgjXi8XfliuT SQJGfEFi8jo2998+BkRGFvONZqEhfoqQVMWbeGl4+n0OLvyHPZpMAEp86RW8+6Ur 8ZqIoUNClM3W1yxhu1CCMbR1tJiNx+Dy2FlMqH9A5xKSwkioqE6HlAEagqyDXXGc H5iQUUcI/aStsuEqnfsZDJQ0yMRnORG2WQA4j6lA2hjzicRkCsMoQLN9ZuGlN3k6 VLGkPabh8msX+MrDAQZfkBYUnCe7Lm5vCds3b7ERdC+ZAKQQ+cv0t7wGHNkJrKZ5 qaszU0Fqlwv4IDr/jzgnbJRAC26oqYlH -----END CERTIFICATE-----Generated at Mon Oct 20 04:47:14 2025 by rpki-client