$ rpki-client -vvf rpki.apnic.net/member_repository/A9197FBD/7FFF457446EA11EEA6EDEA63C4F9AE02/FgI4SbnGTVbe3K6bEoY9BzGIrC4.mft File: FgI4SbnGTVbe3K6bEoY9BzGIrC4.mft (raw, json) Hash identifier: m2AwibRLBhDgY1PW/Awgw5NhciLsbeJ2HxhC9B9c8Xg= Subject key identifier: 0A:2C:6B:07:4F:F0:7D:85:73:94:8B:A4:9F:2D:05:71:0A:17:4A:35 Authority key identifier: 16:02:38:49:B9:C6:4D:56:DE:DC:AE:9B:12:86:3D:07:31:88:AC:2E Certificate issuer: /CN=A9197FBD/serialNumber=16023849B9C64D56DEDCAE9B12863D073188AC2E Certificate serial: 018F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FgI4SbnGTVbe3K6bEoY9BzGIrC4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9197FBD/7FFF457446EA11EEA6EDEA63C4F9AE02/FgI4SbnGTVbe3K6bEoY9BzGIrC4.mft Manifest number: 018F Signing time: Sun 19 Oct 2025 06:02:24 +0000 Manifest this update: Sun 19 Oct 2025 06:02:23 +0000 Manifest next update: Sun 26 Oct 2025 06:02:23 +0000 Files and hashes: 1: FgI4SbnGTVbe3K6bEoY9BzGIrC4.crl (hash: 3xfVBZCnMfDfg6qoBWQ8r1X012lCyfbndFBmBox56AU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9197FBD/7FFF457446EA11EEA6EDEA63C4F9AE02/FgI4SbnGTVbe3K6bEoY9BzGIrC4.crl rsync://rpki.apnic.net/member_repository/A9197FBD/7FFF457446EA11EEA6EDEA63C4F9AE02/FgI4SbnGTVbe3K6bEoY9BzGIrC4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FgI4SbnGTVbe3K6bEoY9BzGIrC4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 06:02:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 399 (0x18f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9197FBD, serialNumber=16023849B9C64D56DEDCAE9B12863D073188AC2E Validity Not Before: Oct 19 06:02:23 2025 GMT Not After : Oct 26 06:02:23 2025 GMT Subject: CN=68f47ef0-acf1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:cd:2a:f6:aa:46:34:a9:31:1e:1f:1c:bb:c6: ec:e6:cb:0f:02:8b:34:fc:7b:b0:0f:bd:e1:ae:f3: 22:ea:69:1b:0d:73:af:a3:1d:82:fb:08:aa:3e:e5: aa:63:dd:21:e0:12:97:0d:9e:89:ba:86:05:fc:7f: fc:43:b9:6b:18:ac:05:45:0c:64:83:56:b1:ca:df: a2:66:13:bf:e3:e8:4b:7f:2e:61:d4:78:6f:13:a8: e7:58:34:88:4d:2d:19:f0:c9:23:3b:d1:bf:62:72: ae:b2:90:c6:0b:01:7c:2d:6f:28:ea:b1:28:83:3f: fa:37:0b:2a:ef:f6:06:86:1b:f9:1a:c0:46:ea:94: 66:d1:59:7d:25:c8:e2:1d:39:50:3a:e4:df:e7:48: 0a:74:c4:6f:38:39:e5:b5:22:c0:82:77:52:2e:90: 41:3c:bc:0b:d9:be:4d:d2:cd:22:ab:14:79:f7:7d: 3e:66:8f:09:8a:71:e8:1c:ff:27:5b:29:44:7a:e1: 83:38:bb:56:14:df:c3:f3:75:a9:b0:a5:e8:3a:71: 30:c2:2b:56:65:1e:58:37:ca:34:ea:00:3e:09:0c: 89:e4:ef:6f:54:d0:bb:31:dc:b4:49:93:a7:07:c5: cd:93:44:1e:74:b0:60:47:cd:86:09:ef:2a:a0:4b: 46:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:2C:6B:07:4F:F0:7D:85:73:94:8B:A4:9F:2D:05:71:0A:17:4A:35 X509v3 Authority Key Identifier: keyid:16:02:38:49:B9:C6:4D:56:DE:DC:AE:9B:12:86:3D:07:31:88:AC:2E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9197FBD/7FFF457446EA11EEA6EDEA63C4F9AE02/FgI4SbnGTVbe3K6bEoY9BzGIrC4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FgI4SbnGTVbe3K6bEoY9BzGIrC4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9197FBD/7FFF457446EA11EEA6EDEA63C4F9AE02/FgI4SbnGTVbe3K6bEoY9BzGIrC4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 41:36:9e:1d:26:7f:c7:3a:9a:10:07:ed:e1:b3:37:e9:0c:52: a9:db:7c:04:89:e3:5d:e9:e8:48:3a:7b:f4:29:29:22:f7:47: 4c:de:a7:5d:63:c2:0a:80:88:f2:30:c0:d1:11:1f:61:40:69: 11:4b:99:3e:d8:b7:49:8f:b4:ed:85:b6:7c:62:4a:bc:51:0b: 64:ec:71:6d:43:3f:f3:35:fa:57:12:c1:48:33:6d:88:29:db: 00:8b:53:1a:4a:d5:5e:52:ea:42:d1:21:52:ad:6c:ab:a8:d1: e5:d1:13:00:c9:8f:08:f7:50:5e:4c:c8:77:b2:ab:b9:b5:65: 94:5f:d7:d3:ff:3e:c5:bb:f3:09:fd:6f:a3:d4:94:49:37:ad: 0f:64:78:c7:b9:b5:a2:66:20:4a:6f:30:ca:43:16:f9:9e:b0: bc:36:aa:30:35:a5:c2:13:74:98:55:50:d6:f0:1a:f9:1c:83: 95:df:1d:a7:89:6d:f8:2c:8f:64:72:c5:64:eb:5c:eb:2d:87: e2:44:68:8c:2d:49:ff:7e:c4:d0:69:54:e0:67:1b:6c:b7:90: 06:db:cc:fd:90:bf:dc:3d:c4:3b:73:f4:56:1d:66:26:1c:6d: cd:6a:35:13:b0:9b:f6:86:77:a6:78:e1:82:c5:39:56:e5:02: 5b:7e:77:20 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAY8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTdGQkQxMTAvBgNVBAUTKDE2MDIzODQ5QjlDNjRENTZERURDQUU5QjEyODYzRDA3 MzE4OEFDMkUwHhcNMjUxMDE5MDYwMjIzWhcNMjUxMDI2MDYwMjIzWjAYMRYwFAYD VQQDEw02OGY0N2VmMC1hY2YxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApM0q9qpGNKkxHh8cu8bs5ssPAos0/HuwD73hrvMi6mkbDXOvox2C+wiqPuWq Y90h4BKXDZ6JuoYF/H/8Q7lrGKwFRQxkg1axyt+iZhO/4+hLfy5h1HhvE6jnWDSI TS0Z8MkjO9G/YnKuspDGCwF8LW8o6rEogz/6Nwsq7/YGhhv5GsBG6pRm0Vl9Jcji HTlQOuTf50gKdMRvODnltSLAgndSLpBBPLwL2b5N0s0iqxR5930+Zo8JinHoHP8n WylEeuGDOLtWFN/D83WpsKXoOnEwwitWZR5YN8o06gA+CQyJ5O9vVNC7Mdy0SZOn B8XNk0QedLBgR82GCe8qoEtG+wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAosawdP 8H2Fc5SLpJ8tBXEKF0o1MB8GA1UdIwQYMBaAFBYCOEm5xk1W3tyumxKGPQcxiKwu MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5N0ZCRC83RkZGNDU3NDQ2 RUExMUVFQTZFREVBNjNDNEY5QUUwMi9GZ0k0U2JuR1RWYmUzSzZiRW9ZOUJ6R0ly QzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZnSTRTYm5HVFZiZTNLNmJFb1k5QnpHSXJDNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 N0ZCRC83RkZGNDU3NDQ2RUExMUVFQTZFREVBNjNDNEY5QUUwMi9GZ0k0U2JuR1RW YmUzSzZiRW9ZOUJ6R0lyQzQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBBNp4dJn/HOpoQB+3hszfpDFKp23wEieNd6ehIOnv0KSki90dM3qdd Y8IKgIjyMMDRER9hQGkRS5k+2LdJj7TthbZ8Ykq8UQtk7HFtQz/zNfpXEsFIM22I KdsAi1MaStVeUupC0SFSrWyrqNHl0RMAyY8I91BeTMh3squ5tWWUX9fT/z7Fu/MJ /W+j1JRJN60PZHjHubWiZiBKbzDKQxb5nrC8NqowNaXCE3SYVVDW8Br5HIOV3x2n iW34LI9kcsVk61zrLYfiRGiMLUn/fsTQaVTgZxtst5AG28z9kL/cPcQ7c/RWHWYm HG3NajUTsJv2hnemeOGCxTlW5QJbfncg -----END CERTIFICATE-----Generated at Mon Oct 20 19:30:12 2025 by rpki-client