$ rpki-client -vvf rpki.apnic.net/member_repository/A9193267/8966D6FE6EE111EDB45FF360C4F9AE02/FggPXxr0qlYST_cZXRPoW5OllSE.mft File: FggPXxr0qlYST_cZXRPoW5OllSE.mft (raw, json) Hash identifier: e1hte7oJZ+UL+qfNBc/liupcfrZ/5VZMzSRE8PBv2UI= Subject key identifier: 27:3F:F1:16:17:4C:30:E4:FE:1D:23:FD:50:3D:F9:10:55:54:61:F3 Authority key identifier: 16:08:0F:5F:1A:F4:AA:56:12:4F:F7:19:5D:13:E8:5B:93:A5:95:21 Certificate issuer: /CN=A9193267/serialNumber=16080F5F1AF4AA56124FF7195D13E85B93A59521 Certificate serial: 0221 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FggPXxr0qlYST_cZXRPoW5OllSE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9193267/8966D6FE6EE111EDB45FF360C4F9AE02/FggPXxr0qlYST_cZXRPoW5OllSE.mft Manifest number: 021D Signing time: Sun 19 Oct 2025 04:22:23 +0000 Manifest this update: Sun 19 Oct 2025 04:22:23 +0000 Manifest next update: Sun 26 Oct 2025 04:22:23 +0000 Files and hashes: 1: FggPXxr0qlYST_cZXRPoW5OllSE.crl (hash: Wqowzr2hoy3OpNNpe0NuhMoBF2hcM8VVl1G+yUDK8SQ=) 2: F29D0E026EE311ED94338E61C4F9AE02.roa (hash: 33mYAJEejTIdphmOfEnKCIbd2zZ81lml8aEGejVT4Nk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9193267/8966D6FE6EE111EDB45FF360C4F9AE02/FggPXxr0qlYST_cZXRPoW5OllSE.crl rsync://rpki.apnic.net/member_repository/A9193267/8966D6FE6EE111EDB45FF360C4F9AE02/FggPXxr0qlYST_cZXRPoW5OllSE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FggPXxr0qlYST_cZXRPoW5OllSE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 04:22:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 545 (0x221) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9193267, serialNumber=16080F5F1AF4AA56124FF7195D13E85B93A59521 Validity Not Before: Oct 19 04:22:23 2025 GMT Not After : Oct 26 04:22:23 2025 GMT Subject: CN=68f4677f-f4c3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:69:6e:7b:31:11:be:2c:bb:ab:e0:63:fa:ce: 5b:fb:84:7b:7e:19:30:99:40:2d:b4:38:e3:a7:f7: b9:cf:43:49:55:31:51:1a:36:bf:03:7a:b6:65:77: af:cf:7c:92:d6:7a:27:0f:70:6d:90:5a:53:c3:0f: 6a:33:71:1b:64:2e:7b:f2:fe:0b:53:ae:e5:a6:df: d0:2c:59:ff:6a:bd:a6:20:8e:3f:b6:c7:86:ae:c6: 77:86:b1:3c:8b:7a:e6:41:c1:2e:36:df:d4:fa:6e: 82:5f:33:8c:b1:ab:36:ed:89:a5:0d:48:69:db:97: c8:30:ad:1c:76:25:1b:bf:79:88:09:88:2b:a6:31: 6e:2b:42:42:0d:5c:a3:74:db:e3:e1:fe:18:6f:86: 0d:6a:57:04:97:ec:ff:19:28:25:90:47:e7:cc:62: 18:fe:66:74:4c:33:4a:71:b6:f5:d0:fe:44:28:be: f7:09:9e:99:a7:d4:6c:a7:3c:a1:6a:5b:21:73:c5: 15:62:40:b8:4d:c7:eb:77:3a:7e:7e:a0:20:52:69: 5c:20:44:fb:7b:b4:00:ef:15:ce:00:c5:6f:5a:e3: 18:14:00:8c:a5:73:c6:22:f1:ea:ec:1d:c8:32:e7: b6:d3:8e:c1:9a:08:6b:da:60:64:c6:37:5e:76:3c: e2:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:3F:F1:16:17:4C:30:E4:FE:1D:23:FD:50:3D:F9:10:55:54:61:F3 X509v3 Authority Key Identifier: keyid:16:08:0F:5F:1A:F4:AA:56:12:4F:F7:19:5D:13:E8:5B:93:A5:95:21 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9193267/8966D6FE6EE111EDB45FF360C4F9AE02/FggPXxr0qlYST_cZXRPoW5OllSE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FggPXxr0qlYST_cZXRPoW5OllSE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9193267/8966D6FE6EE111EDB45FF360C4F9AE02/FggPXxr0qlYST_cZXRPoW5OllSE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 34:40:37:b8:81:5b:74:94:b4:4c:59:ed:2b:94:50:91:c1:43: db:da:8f:08:e3:15:97:27:c5:7e:af:51:cd:cc:d8:79:9c:c3: d6:1d:93:0f:10:f5:ae:cd:da:c9:71:58:32:3b:58:c2:4e:ab: 6f:65:37:1a:e7:2e:fa:74:41:0c:d2:64:52:d4:c9:52:71:b7: c9:bf:74:72:9e:48:f5:ef:3b:5f:b2:c0:14:15:e0:d8:48:99: e1:ac:9b:f8:74:52:ea:4e:76:33:d5:47:59:00:2f:19:d6:c2: a4:f0:ae:27:cf:0f:dd:0e:d8:15:60:ff:6b:bd:18:00:f2:7a: 3f:f6:cc:4c:83:b0:f2:0f:66:fa:a3:b3:66:22:80:05:44:de: fb:9f:ce:33:cf:54:f6:86:8e:c7:3e:e4:7c:56:7c:3b:d8:9d: ee:ef:77:d8:8a:b2:19:0f:a1:24:0c:f8:65:59:31:c9:bf:78: 85:a1:f9:e6:db:29:9b:bd:b4:46:8c:41:85:8c:d3:fd:de:ed: ab:e6:b8:6a:15:a3:1f:d2:08:68:fe:85:25:04:9c:04:49:35: 46:41:0d:6d:e5:64:11:95:a7:75:c3:02:cd:6c:dc:51:a2:d4: d7:be:12:62:91:fc:5a:5e:f5:71:78:ff:ed:0b:44:28:8e:00: 24:5f:f9:86 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAiEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTMyNjcxMTAvBgNVBAUTKDE2MDgwRjVGMUFGNEFBNTYxMjRGRjcxOTVEMTNFODVC OTNBNTk1MjEwHhcNMjUxMDE5MDQyMjIzWhcNMjUxMDI2MDQyMjIzWjAYMRYwFAYD VQQDEw02OGY0Njc3Zi1mNGMzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApWluezERviy7q+Bj+s5b+4R7fhkwmUAttDjjp/e5z0NJVTFRGja/A3q2ZXev z3yS1nonD3BtkFpTww9qM3EbZC578v4LU67lpt/QLFn/ar2mII4/tseGrsZ3hrE8 i3rmQcEuNt/U+m6CXzOMsas27YmlDUhp25fIMK0cdiUbv3mICYgrpjFuK0JCDVyj dNvj4f4Yb4YNalcEl+z/GSglkEfnzGIY/mZ0TDNKcbb10P5EKL73CZ6Zp9Rspzyh alshc8UVYkC4Tcfrdzp+fqAgUmlcIET7e7QA7xXOAMVvWuMYFACMpXPGIvHq7B3I Mue2047Bmghr2mBkxjdedjzigQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCc/8RYX TDDk/h0j/VA9+RBVVGHzMB8GA1UdIwQYMBaAFBYID18a9KpWEk/3GV0T6FuTpZUh MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MzI2Ny84OTY2RDZGRTZF RTExMUVEQjQ1RkYzNjBDNEY5QUUwMi9GZ2dQWHhyMHFsWVNUX2NaWFJQb1c1T2xs U0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZnZ1BYeHIwcWxZU1RfY1pYUlBvVzVPbGxTRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 MzI2Ny84OTY2RDZGRTZFRTExMUVEQjQ1RkYzNjBDNEY5QUUwMi9GZ2dQWHhyMHFs WVNUX2NaWFJQb1c1T2xsU0UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA0QDe4gVt0lLRMWe0rlFCRwUPb2o8I4xWXJ8V+r1HNzNh5nMPWHZMP EPWuzdrJcVgyO1jCTqtvZTca5y76dEEM0mRS1MlScbfJv3Rynkj17ztfssAUFeDY SJnhrJv4dFLqTnYz1UdZAC8Z1sKk8K4nzw/dDtgVYP9rvRgA8no/9sxMg7DyD2b6 o7NmIoAFRN77n84zz1T2ho7HPuR8Vnw72J3u73fYirIZD6EkDPhlWTHJv3iFofnm 2ymbvbRGjEGFjNP93u2r5rhqFaMf0gho/oUlBJwESTVGQQ1t5WQRlad1wwLNbNxR otTXvhJikfxaXvVxeP/tC0QojgAkX/mG -----END CERTIFICATE-----Generated at Mon Oct 20 01:42:55 2025 by rpki-client