$ rpki-client -vvf rpki.apnic.net/member_repository/A9195661/EDC71444D5CE11ECA9DB2462C4F9AE02/FZNmkyrLwvOB-BEGIpgEpBUrNfE.mft File: FZNmkyrLwvOB-BEGIpgEpBUrNfE.mft (raw, json) Hash identifier: 5AKSbu6U2hpIFE3gA2nQ9rBbA+xsRjEeuY8Ar3uCAV0= Subject key identifier: 36:D5:5D:E9:FB:E5:E8:D8:D4:8D:18:A7:32:2C:E7:E0:C8:FD:2C:7B Authority key identifier: 15:93:66:93:2A:CB:C2:F3:81:F8:11:06:22:98:04:A4:15:2B:35:F1 Certificate issuer: /CN=A9195661/serialNumber=159366932ACBC2F381F81106229804A4152B35F1 Certificate serial: 0351 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FZNmkyrLwvOB-BEGIpgEpBUrNfE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9195661/EDC71444D5CE11ECA9DB2462C4F9AE02/FZNmkyrLwvOB-BEGIpgEpBUrNfE.mft Manifest number: 034D Signing time: Sun 19 Oct 2025 03:02:59 +0000 Manifest this update: Sun 19 Oct 2025 03:02:58 +0000 Manifest next update: Sun 26 Oct 2025 03:02:58 +0000 Files and hashes: 1: FZNmkyrLwvOB-BEGIpgEpBUrNfE.crl (hash: rzoAEg5RNriEJCC06bjyRvPBpCuXJMyvMc9pg9OoC5U=) 2: 31A11606D5D411ECA6C65869C4F9AE02.roa (hash: VogHJglI9rky4AydWtAfoBxunD313LfIB0cTNRda674=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9195661/EDC71444D5CE11ECA9DB2462C4F9AE02/FZNmkyrLwvOB-BEGIpgEpBUrNfE.crl rsync://rpki.apnic.net/member_repository/A9195661/EDC71444D5CE11ECA9DB2462C4F9AE02/FZNmkyrLwvOB-BEGIpgEpBUrNfE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FZNmkyrLwvOB-BEGIpgEpBUrNfE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 03:02:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 849 (0x351) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9195661, serialNumber=159366932ACBC2F381F81106229804A4152B35F1 Validity Not Before: Oct 19 03:02:58 2025 GMT Not After : Oct 26 03:02:58 2025 GMT Subject: CN=68f454e2-ceab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:cc:f8:3e:1b:89:ab:fb:4e:bd:c1:fb:ac:24: 4b:e4:bc:09:9f:08:ba:74:4c:af:05:04:aa:8e:2c: 3a:9b:b3:17:41:e7:01:18:83:7c:09:f3:b2:d3:1a: 7a:f9:f7:6e:21:dd:d1:4d:af:1b:f4:f8:b2:78:84: ec:74:ec:22:1d:18:00:f6:ec:dd:e3:ed:2a:74:2f: e2:d5:05:f0:a3:26:cd:e8:29:8f:43:f4:fd:e5:c4: d2:aa:d2:2f:59:aa:bc:fb:a2:d0:17:a4:3a:db:8d: 4b:ef:1c:f8:be:47:b2:2a:da:cb:60:ca:97:73:3a: 40:3c:c3:53:dd:1f:37:2e:84:94:c1:b7:c9:2b:bf: 78:58:17:4c:0b:c0:3c:28:5a:32:1f:a8:44:cd:10: 6b:81:d2:f2:4e:50:ac:eb:62:37:6c:be:f8:0f:7c: c9:54:ac:1d:6d:ac:7d:37:3d:bf:5a:64:35:c1:4a: 78:00:36:f5:7e:da:6c:df:bf:a8:b5:fc:b2:e7:e3: 80:c0:ba:e9:67:01:e7:e5:71:1b:c7:17:b6:3b:ac: f7:e8:94:4f:3b:ef:16:aa:41:9d:49:f1:85:98:3d: a0:c6:8b:3c:c6:73:d7:96:a6:2a:73:f9:39:2c:d3: d6:5d:94:f0:05:f7:ff:58:89:a9:0b:36:29:fa:73: 99:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:D5:5D:E9:FB:E5:E8:D8:D4:8D:18:A7:32:2C:E7:E0:C8:FD:2C:7B X509v3 Authority Key Identifier: keyid:15:93:66:93:2A:CB:C2:F3:81:F8:11:06:22:98:04:A4:15:2B:35:F1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9195661/EDC71444D5CE11ECA9DB2462C4F9AE02/FZNmkyrLwvOB-BEGIpgEpBUrNfE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FZNmkyrLwvOB-BEGIpgEpBUrNfE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9195661/EDC71444D5CE11ECA9DB2462C4F9AE02/FZNmkyrLwvOB-BEGIpgEpBUrNfE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8b:5f:68:88:53:60:d3:b0:bb:a4:c4:c2:fb:26:fe:64:44:1f: 68:b6:42:3b:c8:63:79:df:93:df:5e:47:19:a4:70:fd:43:d4: 36:e8:92:b4:20:5b:6d:67:d2:a8:fa:6b:76:5f:22:f2:fc:c2: 75:a2:79:dd:bc:2e:fa:ce:78:01:d2:4c:fb:31:ae:05:6b:4d: 04:81:eb:32:2a:26:d0:dd:96:81:28:a5:64:ba:6f:4b:e7:b7: ad:89:1a:ec:29:6b:3e:a1:bb:4e:93:32:99:71:ec:d8:d3:b7: d6:b3:6b:26:a4:2a:b4:7a:8c:20:b1:60:b3:a9:d9:8b:97:9d: c7:74:cb:fd:23:43:4c:fb:24:d2:db:b1:d8:99:54:45:5e:64: 31:5e:8b:db:b4:c6:a2:75:1a:46:f2:fe:fb:3c:a3:63:87:3f: 16:16:d0:10:b9:4a:71:20:fa:9c:2d:10:9a:2d:d5:b4:39:58: 45:e9:dd:9c:43:6f:d4:44:54:96:a2:b3:3f:e7:1e:8f:ae:ea: f0:3e:9a:b6:f7:e9:c3:67:56:4d:54:2b:ec:62:50:c0:c0:ca: 1b:35:24:93:31:5a:7d:43:fe:82:39:30:c6:8c:80:41:77:f9: 99:0a:9c:0f:d2:e3:e4:27:cf:08:0e:0b:ac:0a:fe:99:15:70: 6e:20:28:78 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA1EwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTU2NjExMTAvBgNVBAUTKDE1OTM2NjkzMkFDQkMyRjM4MUY4MTEwNjIyOTgwNEE0 MTUyQjM1RjEwHhcNMjUxMDE5MDMwMjU4WhcNMjUxMDI2MDMwMjU4WjAYMRYwFAYD VQQDEw02OGY0NTRlMi1jZWFiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqsz4PhuJq/tOvcH7rCRL5LwJnwi6dEyvBQSqjiw6m7MXQecBGIN8CfOy0xp6 +fduId3RTa8b9PiyeITsdOwiHRgA9uzd4+0qdC/i1QXwoybN6CmPQ/T95cTSqtIv Waq8+6LQF6Q6241L7xz4vkeyKtrLYMqXczpAPMNT3R83LoSUwbfJK794WBdMC8A8 KFoyH6hEzRBrgdLyTlCs62I3bL74D3zJVKwdbax9Nz2/WmQ1wUp4ADb1ftps37+o tfyy5+OAwLrpZwHn5XEbxxe2O6z36JRPO+8WqkGdSfGFmD2gxos8xnPXlqYqc/k5 LNPWXZTwBff/WImpCzYp+nOZEQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDbVXen7 5ejY1I0YpzIs5+DI/Sx7MB8GA1UdIwQYMBaAFBWTZpMqy8LzgfgRBiKYBKQVKzXx MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NTY2MS9FREM3MTQ0NEQ1 Q0UxMUVDQTlEQjI0NjJDNEY5QUUwMi9GWk5ta3lyTHd2T0ItQkVHSXBnRXBCVXJO ZkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZaTm1reXJMd3ZPQi1CRUdJcGdFcEJVck5mRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NTY2MS9FREM3MTQ0NEQ1Q0UxMUVDQTlEQjI0NjJDNEY5QUUwMi9GWk5ta3lyTHd2 T0ItQkVHSXBnRXBCVXJOZkUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCLX2iIU2DTsLukxML7Jv5kRB9otkI7yGN535PfXkcZpHD9Q9Q26JK0 IFttZ9Ko+mt2XyLy/MJ1onndvC76zngB0kz7Ma4Fa00EgesyKibQ3ZaBKKVkum9L 57etiRrsKWs+obtOkzKZcezY07fWs2smpCq0eowgsWCzqdmLl53HdMv9I0NM+yTS 27HYmVRFXmQxXovbtMaidRpG8v77PKNjhz8WFtAQuUpxIPqcLRCaLdW0OVhF6d2c Q2/URFSWorM/5x6PrurwPpq29+nDZ1ZNVCvsYlDAwMobNSSTMVp9Q/6COTDGjIBB d/mZCpwP0uPkJ88IDgusCv6ZFXBuICh4 -----END CERTIFICATE-----Generated at Mon Oct 20 01:44:30 2025 by rpki-client