$ rpki-client -vvf rpki.apnic.net/member_repository/A9186363/B5600AECAFAC11EFB886D651C4F9AE02/Fx7dP3eF4PU4VW-e8mvtcWaejYw.mft File: Fx7dP3eF4PU4VW-e8mvtcWaejYw.mft (raw, json) Hash identifier: bTVDY9MPYbzGW8r4Vr6GkV/O6SexuJIs3bI2urgX3lg= Subject key identifier: F3:3D:E1:2F:41:05:D6:7A:A6:11:9C:FB:52:B5:17:D8:6F:3C:9B:4D Authority key identifier: 17:1E:DD:3F:77:85:E0:F5:38:55:6F:9E:F2:6B:ED:71:66:9E:8D:8C Certificate issuer: /CN=A9186363/serialNumber=171EDD3F7785E0F538556F9EF26BED71669E8D8C Certificate serial: A6 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Fx7dP3eF4PU4VW-e8mvtcWaejYw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9186363/B5600AECAFAC11EFB886D651C4F9AE02/Fx7dP3eF4PU4VW-e8mvtcWaejYw.mft Manifest number: A5 Signing time: Sun 19 Oct 2025 09:26:25 +0000 Manifest this update: Sun 19 Oct 2025 09:26:24 +0000 Manifest next update: Sun 26 Oct 2025 09:26:24 +0000 Files and hashes: 1: Fx7dP3eF4PU4VW-e8mvtcWaejYw.crl (hash: mEIOa547BmcX7syhokXlMweKFWgC23xNSUkHCdAprEU=) 2: 0FFCC5E8AFAE11EFAC818674C4F9AE02.roa (hash: P+H7fb6sxOYzaDyJFH2WCrqrlvTjPog92898KvwjrwQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9186363/B5600AECAFAC11EFB886D651C4F9AE02/Fx7dP3eF4PU4VW-e8mvtcWaejYw.crl rsync://rpki.apnic.net/member_repository/A9186363/B5600AECAFAC11EFB886D651C4F9AE02/Fx7dP3eF4PU4VW-e8mvtcWaejYw.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Fx7dP3eF4PU4VW-e8mvtcWaejYw.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 09:26:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 166 (0xa6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9186363, serialNumber=171EDD3F7785E0F538556F9EF26BED71669E8D8C Validity Not Before: Oct 19 09:26:24 2025 GMT Not After : Oct 26 09:26:24 2025 GMT Subject: CN=68f4aec1-1bf5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:62:50:b8:ce:17:2e:ea:da:1f:6a:40:10:f8: 89:c9:12:7b:ee:3b:03:eb:b6:de:dc:80:6b:01:fd: 58:ea:73:20:97:89:f7:a1:ca:1b:04:03:66:fe:2e: 5b:55:cc:3d:e6:23:fa:21:70:d0:df:d7:4f:bc:8c: 2e:66:a2:50:c9:39:9c:04:ef:33:b8:df:1c:1d:5f: fb:b8:f8:2d:26:da:d6:60:1b:87:17:89:5d:79:ef: 15:65:75:41:34:5d:80:3c:c1:47:ba:f9:cc:30:8f: 38:ce:8c:89:6e:23:d5:e2:be:cc:3a:bb:8a:1b:20: 6f:7a:e7:0a:3c:99:d4:c6:19:91:c2:62:c1:73:e3: 89:f8:1b:6c:44:0e:a1:0d:22:07:c0:6e:29:28:7b: ea:21:b1:8b:95:93:a9:c9:54:61:f6:31:b0:d2:eb: 06:8d:54:9f:45:b7:18:c8:71:37:db:6b:95:d5:10: b6:31:db:9a:3f:3d:33:17:d3:45:83:55:c4:ed:88: 0e:62:57:f8:0b:34:83:93:36:a8:b2:21:20:cc:48: 50:d5:a1:2c:bf:22:ff:3f:79:63:29:42:03:f9:3a: 94:57:cd:79:66:cb:67:51:08:93:68:a2:84:fe:cc: 89:b0:d4:8a:8d:19:3c:9a:a2:cb:1a:a7:3f:84:a8: da:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:3D:E1:2F:41:05:D6:7A:A6:11:9C:FB:52:B5:17:D8:6F:3C:9B:4D X509v3 Authority Key Identifier: keyid:17:1E:DD:3F:77:85:E0:F5:38:55:6F:9E:F2:6B:ED:71:66:9E:8D:8C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9186363/B5600AECAFAC11EFB886D651C4F9AE02/Fx7dP3eF4PU4VW-e8mvtcWaejYw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Fx7dP3eF4PU4VW-e8mvtcWaejYw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186363/B5600AECAFAC11EFB886D651C4F9AE02/Fx7dP3eF4PU4VW-e8mvtcWaejYw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2b:01:2c:c2:4a:25:74:75:1d:66:0d:85:d3:52:06:bc:bb:ab: 74:1a:f5:e7:a3:93:68:fb:9b:f2:5c:0f:d3:17:d0:37:61:e4: 5f:87:80:e5:4f:dd:21:6b:5b:b7:0b:21:f8:66:5c:d8:b4:ba: 89:7d:4b:9a:10:6b:72:25:f3:7a:91:33:94:1f:c8:bc:ec:84: 62:a0:3d:1e:c0:95:20:bb:f5:cb:43:e1:04:4c:1d:1f:f6:48: 93:65:5c:07:d3:c9:3c:a6:1e:81:4e:77:49:f5:38:c5:06:7e: 4f:34:4f:29:a6:b1:ff:59:e5:3a:f4:30:48:8f:01:da:14:24: 6b:a8:72:3f:3f:58:88:95:66:f3:1d:ac:a9:e9:f4:0d:aa:4d: e4:87:bf:db:26:b6:a0:27:ae:ff:7d:6b:ad:7f:b0:3c:2a:15: 76:df:50:4e:ca:1e:2d:6d:ab:51:5d:1d:59:79:d3:e0:67:5f: 54:a3:5d:41:f0:4c:16:09:5d:00:b1:ee:61:36:e2:6c:a3:a9: 5f:48:8b:b1:89:40:4a:ef:cc:f7:02:f4:a7:28:b6:ca:d6:45: a1:3d:29:36:76:d1:73:de:a4:6b:ab:85:05:5c:89:79:90:89: 28:1d:ea:75:33:82:66:ec:c3:12:17:1f:a2:80:ee:f6:46:1b: b4:d4:6a:05 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAKYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODYzNjMxMTAvBgNVBAUTKDE3MUVERDNGNzc4NUUwRjUzODU1NkY5RUYyNkJFRDcx NjY5RThEOEMwHhcNMjUxMDE5MDkyNjI0WhcNMjUxMDI2MDkyNjI0WjAYMRYwFAYD VQQDEw02OGY0YWVjMS0xYmY1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzGJQuM4XLuraH2pAEPiJyRJ77jsD67be3IBrAf1Y6nMgl4n3ocobBANm/i5b Vcw95iP6IXDQ39dPvIwuZqJQyTmcBO8zuN8cHV/7uPgtJtrWYBuHF4ldee8VZXVB NF2APMFHuvnMMI84zoyJbiPV4r7MOruKGyBveucKPJnUxhmRwmLBc+OJ+BtsRA6h DSIHwG4pKHvqIbGLlZOpyVRh9jGw0usGjVSfRbcYyHE322uV1RC2MduaPz0zF9NF g1XE7YgOYlf4CzSDkzaosiEgzEhQ1aEsvyL/P3ljKUID+TqUV815ZstnUQiTaKKE /syJsNSKjRk8mqLLGqc/hKjaZwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPM94S9B BdZ6phGc+1K1F9hvPJtNMB8GA1UdIwQYMBaAFBce3T93heD1OFVvnvJr7XFmno2M MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NjM2My9CNTYwMEFFQ0FG QUMxMUVGQjg4NkQ2NTFDNEY5QUUwMi9GeDdkUDNlRjRQVTRWVy1lOG12dGNXYWVq WXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0Z4N2RQM2VGNFBVNFZXLWU4bXZ0Y1dhZWpZdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NjM2My9CNTYwMEFFQ0FGQUMxMUVGQjg4NkQ2NTFDNEY5QUUwMi9GeDdkUDNlRjRQ VTRWVy1lOG12dGNXYWVqWXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQArASzCSiV0dR1mDYXTUga8u6t0GvXno5No+5vyXA/TF9A3YeRfh4Dl T90ha1u3CyH4ZlzYtLqJfUuaEGtyJfN6kTOUH8i87IRioD0ewJUgu/XLQ+EETB0f 9kiTZVwH08k8ph6BTndJ9TjFBn5PNE8pprH/WeU69DBIjwHaFCRrqHI/P1iIlWbz Hayp6fQNqk3kh7/bJragJ67/fWutf7A8KhV231BOyh4tbatRXR1ZedPgZ19Uo11B 8EwWCV0Ase5hNuJso6lfSIuxiUBK78z3AvSnKLbK1kWhPSk2dtFz3qRrq4UFXIl5 kIkoHep1M4Jm7MMSFx+igO72Rhu01GoF -----END CERTIFICATE-----Generated at Tue Oct 21 02:25:43 2025 by rpki-client