$ rpki-client -vvf rpki.apnic.net/member_repository/A918E951/51BD7DDA623A11F0A7E2760BC4F9AE02/FbuDXdtfKLfj9RKIflfp_jFzh0Q.mft File: FbuDXdtfKLfj9RKIflfp_jFzh0Q.mft (raw, json) Hash identifier: Z2ihyebLsPuaZDFaC9ON7MYl76lxPr+dJFeDgDAMAZk= Subject key identifier: 24:8F:80:CE:8F:1B:0D:6A:D0:DD:39:6A:0E:85:18:9A:FB:03:D7:17 Authority key identifier: 15:BB:83:5D:DB:5F:28:B7:E3:F5:12:88:7E:57:E9:FE:31:73:87:44 Certificate issuer: /CN=A918E951/serialNumber=15BB835DDB5F28B7E3F512887E57E9FE31738744 Certificate serial: 34 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FbuDXdtfKLfj9RKIflfp_jFzh0Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918E951/51BD7DDA623A11F0A7E2760BC4F9AE02/FbuDXdtfKLfj9RKIflfp_jFzh0Q.mft Manifest number: 33 Signing time: Sun 19 Oct 2025 11:08:24 +0000 Manifest this update: Sun 19 Oct 2025 11:08:23 +0000 Manifest next update: Sun 26 Oct 2025 11:08:23 +0000 Files and hashes: 1: FbuDXdtfKLfj9RKIflfp_jFzh0Q.crl (hash: WjEvsxCycqUzDxh8XGpQaQ8fQiFKoCGOYLT3GEr0bwg=) 2: A1E831AA623B11F0BEB49510C4F9AE02.roa (hash: lW7fDVCe8bhLbHVbi9D8490xI/Aio6OMPBNi0xrKgHI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918E951/51BD7DDA623A11F0A7E2760BC4F9AE02/FbuDXdtfKLfj9RKIflfp_jFzh0Q.crl rsync://rpki.apnic.net/member_repository/A918E951/51BD7DDA623A11F0A7E2760BC4F9AE02/FbuDXdtfKLfj9RKIflfp_jFzh0Q.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FbuDXdtfKLfj9RKIflfp_jFzh0Q.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 11:08:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52 (0x34) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918E951, serialNumber=15BB835DDB5F28B7E3F512887E57E9FE31738744 Validity Not Before: Oct 19 11:08:23 2025 GMT Not After : Oct 26 11:08:23 2025 GMT Subject: CN=68f4c6a7-c614 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:7f:b2:92:4a:b5:1a:8e:27:e0:b1:22:6e:31: 53:f3:8d:7d:03:cb:63:ad:61:fc:69:f1:dc:46:06: df:91:34:4f:be:f5:54:a0:f0:ab:b4:2b:6e:43:2a: 86:6c:05:2d:5b:5e:16:e0:96:5f:53:8d:0a:f3:86: ce:09:ca:68:d9:63:c6:b9:bb:27:11:7e:3a:28:84: e5:e4:01:22:48:73:b3:da:34:73:94:2c:ee:b6:b8: b4:14:30:bd:18:bb:1b:69:cd:65:d5:5b:04:8c:df: 04:50:ac:4e:af:7a:ea:3c:28:d8:25:95:f3:fe:c8: ca:1d:4d:78:9e:17:56:df:3c:e6:69:64:75:b1:ab: da:45:a8:79:0c:2b:57:1d:ce:92:13:f0:db:d8:90: 3e:31:92:46:98:36:01:ff:e4:69:f7:02:5a:f5:9c: 4e:37:a6:42:42:b3:51:14:54:99:ff:e7:52:87:15: 58:4a:48:01:c7:71:7e:9b:d6:73:b1:ab:bc:89:1c: d9:f5:11:e4:8d:bf:57:eb:23:6a:8d:9d:80:46:18: 12:fc:72:5c:8b:b7:27:bc:ec:82:59:68:5d:22:95: d3:8d:bb:de:03:2f:1d:e5:14:f1:10:23:1a:bd:4e: a7:ff:ce:66:86:ce:f5:f3:93:32:e2:f6:aa:cd:dd: 72:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:8F:80:CE:8F:1B:0D:6A:D0:DD:39:6A:0E:85:18:9A:FB:03:D7:17 X509v3 Authority Key Identifier: keyid:15:BB:83:5D:DB:5F:28:B7:E3:F5:12:88:7E:57:E9:FE:31:73:87:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918E951/51BD7DDA623A11F0A7E2760BC4F9AE02/FbuDXdtfKLfj9RKIflfp_jFzh0Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FbuDXdtfKLfj9RKIflfp_jFzh0Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918E951/51BD7DDA623A11F0A7E2760BC4F9AE02/FbuDXdtfKLfj9RKIflfp_jFzh0Q.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6d:6f:af:5b:19:3a:97:f6:41:a2:68:77:93:94:9e:7e:ac:f9: ee:31:17:82:b7:b9:61:aa:93:b2:94:26:49:9c:62:aa:de:8b: 2b:49:2d:05:17:d0:74:85:1e:5a:ec:da:3b:9a:0f:70:4b:a9: ac:2d:8a:45:c1:bc:37:d9:3d:8a:e0:d0:9f:33:df:30:ef:fb: 4d:3d:bb:dc:e8:c9:15:b1:ff:e7:a2:30:f6:9e:d6:ae:e8:9b: a4:1e:e1:dd:0b:55:c1:f8:b7:89:c2:be:ea:78:77:4c:9d:5c: c9:00:e4:1a:5b:e4:83:a4:ab:0c:1d:cf:98:1b:8f:47:5c:a3: e7:7c:a3:80:89:a8:ff:65:de:f5:c2:5c:69:08:28:61:5c:6c: 9b:39:07:ee:cc:a5:b4:a2:86:b9:6e:78:24:d9:80:78:60:15: f1:ed:a4:7e:2c:f6:1c:15:18:6e:d0:30:57:5d:fb:b9:72:5d: 27:81:32:8c:82:c4:cd:63:0c:7a:d0:77:bc:74:0b:f6:12:2d: d7:ac:ef:b5:93:d6:d2:03:fa:5a:db:ee:24:6b:77:69:dc:1d: 4b:07:85:a0:9d:15:be:e8:71:e8:45:48:f1:af:6d:50:cd:e5: f9:d1:a4:95:4b:51:09:19:23:1e:ca:18:bf:5e:35:f7:93:d2: 8f:1e:59:16 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBNDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE4 RTk1MTExMC8GA1UEBRMoMTVCQjgzNUREQjVGMjhCN0UzRjUxMjg4N0U1N0U5RkUz MTczODc0NDAeFw0yNTEwMTkxMTA4MjNaFw0yNTEwMjYxMTA4MjNaMBgxFjAUBgNV BAMTDTY4ZjRjNmE3LWM2MTQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDPf7KSSrUajifgsSJuMVPzjX0Dy2OtYfxp8dxGBt+RNE++9VSg8Ku0K25DKoZs BS1bXhbgll9TjQrzhs4JymjZY8a5uycRfjoohOXkASJIc7PaNHOULO62uLQUML0Y uxtpzWXVWwSM3wRQrE6veuo8KNgllfP+yModTXieF1bfPOZpZHWxq9pFqHkMK1cd zpIT8NvYkD4xkkaYNgH/5Gn3Alr1nE43pkJCs1EUVJn/51KHFVhKSAHHcX6b1nOx q7yJHNn1EeSNv1frI2qNnYBGGBL8clyLtye87IJZaF0ildONu94DLx3lFPEQIxq9 Tqf/zmaGzvXzkzLi9qrN3XJpAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUJI+Azo8b DWrQ3TlqDoUYmvsD1xcwHwYDVR0jBBgwFoAUFbuDXdtfKLfj9RKIflfp/jFzh0Qw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MThFOTUxLzUxQkQ3RERBNjIz QTExRjBBN0UyNzYwQkM0RjlBRTAyL0ZidURYZHRmS0xmajlSS0lmbGZwX2pGemgw US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvRmJ1RFhkdGZLTGZqOVJLSWZsZnBfakZ6aDBRLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MThF OTUxLzUxQkQ3RERBNjIzQTExRjBBN0UyNzYwQkM0RjlBRTAyL0ZidURYZHRmS0xm ajlSS0lmbGZwX2pGemgwUS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAG1vr1sZOpf2QaJod5OUnn6s+e4xF4K3uWGqk7KUJkmcYqreiytJLQUX 0HSFHlrs2juaD3BLqawtikXBvDfZPYrg0J8z3zDv+009u9zoyRWx/+eiMPae1q7o m6Qe4d0LVcH4t4nCvup4d0ydXMkA5Bpb5IOkqwwdz5gbj0dco+d8o4CJqP9l3vXC XGkIKGFcbJs5B+7MpbSihrlueCTZgHhgFfHtpH4s9hwVGG7QMFdd+7lyXSeBMoyC xM1jDHrQd7x0C/YSLdes77WT1tID+lrb7iRrd2ncHUsHhaCdFb7ocehFSPGvbVDN 5fnRpJVLUQkZIx7KGL9eNfeT0o8eWRY= -----END CERTIFICATE-----Generated at Tue Oct 21 02:25:43 2025 by rpki-client