$ rpki-client -vvf rpki.apnic.net/member_repository/A9194D56/E5D407FE86B311E598F37F1AC4F9AE02/fFt0FOPMgEBZvKhsxRY6B0PkHIU.mft File: fFt0FOPMgEBZvKhsxRY6B0PkHIU.mft (raw, json) Hash identifier: EL2hpCKAPDileE4li8gy0bSpA/OK69CdS1vAcgR72z4= Subject key identifier: DE:9A:DF:FA:BA:C8:E0:BA:39:F3:88:A5:B8:65:DB:FF:D8:28:F2:F3 Authority key identifier: 7C:5B:74:14:E3:CC:80:40:59:BC:A8:6C:C5:16:3A:07:43:E4:1C:85 Certificate issuer: /CN=A9194D56/serialNumber=7C5B7414E3CC804059BCA86CC5163A0743E41C85 Certificate serial: 23B6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fFt0FOPMgEBZvKhsxRY6B0PkHIU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9194D56/E5D407FE86B311E598F37F1AC4F9AE02/fFt0FOPMgEBZvKhsxRY6B0PkHIU.mft Manifest number: 2395 Signing time: Sat 18 Oct 2025 16:04:17 +0000 Manifest this update: Sat 18 Oct 2025 16:04:16 +0000 Manifest next update: Sat 25 Oct 2025 16:04:16 +0000 Files and hashes: 1: fFt0FOPMgEBZvKhsxRY6B0PkHIU.crl (hash: r+/SNpdd1ZIg0OAVrqH8Hux+1k2P3/UlN+142o7ihPI=) 2: AD8187A41FF511ED8DD6D661C4F9AE02.roa (hash: hlAH68hEjJH34E2Ep5RK/KWypzVM/kESjdq2XtDtpa0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9194D56/E5D407FE86B311E598F37F1AC4F9AE02/fFt0FOPMgEBZvKhsxRY6B0PkHIU.crl rsync://rpki.apnic.net/member_repository/A9194D56/E5D407FE86B311E598F37F1AC4F9AE02/fFt0FOPMgEBZvKhsxRY6B0PkHIU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fFt0FOPMgEBZvKhsxRY6B0PkHIU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 16:04:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9142 (0x23b6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9194D56, serialNumber=7C5B7414E3CC804059BCA86CC5163A0743E41C85 Validity Not Before: Oct 18 16:04:16 2025 GMT Not After : Oct 25 16:04:16 2025 GMT Subject: CN=68f3ba81-7caa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:da:3c:63:10:a8:3d:b0:5e:b2:26:ac:ee:72: a8:00:ae:60:b9:44:aa:3c:8e:2e:d6:39:9d:d8:1a: 80:22:c0:b0:57:88:67:89:34:37:13:aa:3e:4d:e1: 25:a9:bd:43:aa:7f:2b:09:ae:16:59:96:df:56:f6: ea:95:45:f9:d0:48:12:db:38:dc:b0:bc:4a:37:e3: b1:52:55:c5:0d:84:ce:d5:23:3f:2f:34:b9:83:01: 59:2a:72:5e:2b:84:10:cf:a7:77:7c:99:95:2e:d3: 8b:bb:2a:58:a5:f0:fe:8c:2d:6c:b4:bb:b7:3f:7e: 60:1b:2b:b2:ff:55:6c:e2:9b:b5:75:e7:2d:17:4d: de:56:1f:62:27:30:aa:f4:2e:47:68:9d:1e:6c:1f: 40:8a:e4:0e:74:4a:6b:89:10:1d:c8:2e:da:7f:7d: fc:9f:19:41:32:57:9a:dd:87:ed:d8:3d:44:47:8b: 27:60:11:25:ff:fb:9e:98:02:43:4a:ed:87:83:7c: 0a:db:6c:fb:92:29:5f:a3:31:9e:af:2f:33:b7:d0: 76:40:98:a3:32:23:68:0d:a2:67:dc:64:f6:23:fd: 5d:b6:fc:15:2b:2b:6e:a0:e9:1d:6b:0b:6f:fc:5c: fb:22:af:ce:6e:76:4b:0d:fd:77:ad:b4:8a:fb:f9: 3e:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:9A:DF:FA:BA:C8:E0:BA:39:F3:88:A5:B8:65:DB:FF:D8:28:F2:F3 X509v3 Authority Key Identifier: keyid:7C:5B:74:14:E3:CC:80:40:59:BC:A8:6C:C5:16:3A:07:43:E4:1C:85 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9194D56/E5D407FE86B311E598F37F1AC4F9AE02/fFt0FOPMgEBZvKhsxRY6B0PkHIU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fFt0FOPMgEBZvKhsxRY6B0PkHIU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9194D56/E5D407FE86B311E598F37F1AC4F9AE02/fFt0FOPMgEBZvKhsxRY6B0PkHIU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3d:1a:b9:56:b2:bc:19:72:e7:f0:e2:d5:6f:42:4a:6c:09:30: e9:d6:08:d4:38:14:d7:18:7c:b7:39:4c:ef:7e:3a:b7:ce:60: c5:3c:89:27:30:f1:1c:36:f7:2d:cb:02:10:24:2b:6e:ee:cb: 7a:2c:3e:91:d5:6a:5d:aa:5c:a6:47:7e:48:a3:4c:d4:a4:67: 0b:04:26:d0:10:89:0f:46:3a:f0:8f:f2:45:39:e0:01:66:de: 51:ef:bd:45:75:06:cf:81:fe:27:60:4e:7d:39:78:97:40:c2: 5c:21:b2:c1:86:6b:a7:d2:ec:aa:b2:92:65:27:7b:4e:f8:e1: 64:1e:03:bc:c7:24:21:3c:b5:bb:30:69:13:ee:d0:4e:fe:b0: 21:db:ad:69:4d:92:f4:90:27:8a:60:3e:7d:57:d9:d4:37:f2: e0:24:38:bf:33:31:0b:75:f8:74:5c:68:4c:45:28:15:3f:2f: 36:cb:27:e0:ac:e3:84:e2:c6:a7:34:95:f8:b0:c6:ff:96:84: 42:97:be:be:99:bf:5c:43:1d:e8:24:c6:53:96:b1:ad:6d:49: 05:06:e9:cc:73:f1:b9:4f:90:cd:b7:15:78:2e:dc:ec:c1:c9: 85:11:6d:e7:6c:12:f9:4c:2f:22:94:4c:25:2d:f0:31:d6:b3: 99:74:7a:64 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICI7YwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTRENTYxMTAvBgNVBAUTKDdDNUI3NDE0RTNDQzgwNDA1OUJDQTg2Q0M1MTYzQTA3 NDNFNDFDODUwHhcNMjUxMDE4MTYwNDE2WhcNMjUxMDI1MTYwNDE2WjAYMRYwFAYD VQQDEw02OGYzYmE4MS03Y2FhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnto8YxCoPbBesias7nKoAK5guUSqPI4u1jmd2BqAIsCwV4hniTQ3E6o+TeEl qb1Dqn8rCa4WWZbfVvbqlUX50EgS2zjcsLxKN+OxUlXFDYTO1SM/LzS5gwFZKnJe K4QQz6d3fJmVLtOLuypYpfD+jC1stLu3P35gGyuy/1Vs4pu1dectF03eVh9iJzCq 9C5HaJ0ebB9AiuQOdEpriRAdyC7af338nxlBMlea3Yft2D1ER4snYBEl//uemAJD Su2Hg3wK22z7kilfozGery8zt9B2QJijMiNoDaJn3GT2I/1dtvwVKytuoOkdawtv /Fz7Iq/ObnZLDf13rbSK+/k+lwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFN6a3/q6 yOC6OfOIpbhl2//YKPLzMB8GA1UdIwQYMBaAFHxbdBTjzIBAWbyobMUWOgdD5ByF MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NEQ1Ni9FNUQ0MDdGRTg2 QjMxMUU1OThGMzdGMUFDNEY5QUUwMi9mRnQwRk9QTWdFQlp2S2hzeFJZNkIwUGtI SVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ZGdDBGT1BNZ0VCWnZLaHN4Ulk2QjBQa0hJVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NEQ1Ni9FNUQ0MDdGRTg2QjMxMUU1OThGMzdGMUFDNEY5QUUwMi9mRnQwRk9QTWdF Qlp2S2hzeFJZNkIwUGtISVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA9GrlWsrwZcufw4tVvQkpsCTDp1gjUOBTXGHy3OUzvfjq3zmDFPIkn MPEcNvctywIQJCtu7st6LD6R1WpdqlymR35Io0zUpGcLBCbQEIkPRjrwj/JFOeAB Zt5R771FdQbPgf4nYE59OXiXQMJcIbLBhmun0uyqspJlJ3tO+OFkHgO8xyQhPLW7 MGkT7tBO/rAh261pTZL0kCeKYD59V9nUN/LgJDi/MzELdfh0XGhMRSgVPy82yyfg rOOE4sanNJX4sMb/loRCl76+mb9cQx3oJMZTlrGtbUkFBunMc/G5T5DNtxV4Ltzs wcmFEW3nbBL5TC8ilEwlLfAx1rOZdHpk -----END CERTIFICATE-----Generated at Mon Oct 20 10:15:41 2025 by rpki-client