$ rpki-client -vvf rpki.apnic.net/member_repository/A91983BD/BE7CD02A1D8C11E2AEF045E808B02CD2/FiENxlKhYN7k5AFbvLQJ-odyRkA.mft File: FiENxlKhYN7k5AFbvLQJ-odyRkA.mft (raw, json) Hash identifier: NJYWjBYen5ZoFx72HwotaqgHxcyRh3JrBUTE5V5BOXw= Subject key identifier: D8:45:98:C2:80:6E:18:4D:B3:60:D9:CB:3E:10:C7:D9:05:EF:B5:F4 Authority key identifier: 16:21:0D:C6:52:A1:60:DE:E4:E4:01:5B:BC:B4:09:FA:87:72:46:40 Certificate issuer: /CN=A91983BD/serialNumber=16210DC652A160DEE4E4015BBCB409FA87724640 Certificate serial: 34CD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FiENxlKhYN7k5AFbvLQJ-odyRkA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91983BD/BE7CD02A1D8C11E2AEF045E808B02CD2/FiENxlKhYN7k5AFbvLQJ-odyRkA.mft Manifest number: 394A Signing time: Sat 18 Oct 2025 14:40:11 +0000 Manifest this update: Sat 18 Oct 2025 14:40:10 +0000 Manifest next update: Sat 25 Oct 2025 14:40:10 +0000 Files and hashes: 1: FiENxlKhYN7k5AFbvLQJ-odyRkA.crl (hash: HqOYk2O4Xd9TnEBWpML2+Opvk2wVQ7YSwE17dHVH7xI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91983BD/BE7CD02A1D8C11E2AEF045E808B02CD2/FiENxlKhYN7k5AFbvLQJ-odyRkA.crl rsync://rpki.apnic.net/member_repository/A91983BD/BE7CD02A1D8C11E2AEF045E808B02CD2/FiENxlKhYN7k5AFbvLQJ-odyRkA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FiENxlKhYN7k5AFbvLQJ-odyRkA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 14:40:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13517 (0x34cd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91983BD, serialNumber=16210DC652A160DEE4E4015BBCB409FA87724640 Validity Not Before: Oct 18 14:40:10 2025 GMT Not After : Oct 25 14:40:10 2025 GMT Subject: CN=68f3a6cb-10bb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:7b:12:f1:5c:24:d8:82:6f:e1:23:aa:d8:b5: 31:7d:05:fa:1a:5b:7e:af:f4:6c:e6:0c:92:79:46: c1:8e:ca:c5:da:89:20:25:6d:44:07:f5:62:77:54: 81:89:a1:cb:69:db:7a:2c:92:da:95:ec:cb:70:cc: c6:9e:23:95:43:83:fd:f2:d7:31:8c:e4:46:50:d5: 40:28:4d:ab:27:cb:19:cc:49:4c:6b:1c:7c:fd:94: ed:7e:60:76:d8:75:9b:d2:b1:62:1d:29:fa:e3:b0: 30:04:17:0f:42:79:b9:f2:45:16:8a:a0:fa:0e:45: dd:e3:fe:76:91:dc:b1:57:d0:67:ae:04:9c:0f:cf: 7b:89:5b:ed:10:bf:db:72:56:4c:c9:9c:c9:94:48: 5b:ca:54:60:2c:1c:e6:91:d9:21:fa:bc:10:81:00: 44:6d:95:28:89:e7:4e:b9:33:05:28:fd:cc:30:3d: e9:ed:14:e2:cc:e4:77:9c:bc:44:40:3d:bb:94:25: 7a:d9:2c:80:58:4f:92:19:92:95:2d:71:3d:c9:4b: 05:9a:08:21:51:cd:22:3f:98:b3:f4:82:3c:85:7b: 89:11:fb:f0:2d:0f:c3:08:9f:bc:e0:1e:3a:32:70: 49:2d:1f:f7:39:55:92:ea:eb:88:99:81:b1:21:cd: e2:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:45:98:C2:80:6E:18:4D:B3:60:D9:CB:3E:10:C7:D9:05:EF:B5:F4 X509v3 Authority Key Identifier: keyid:16:21:0D:C6:52:A1:60:DE:E4:E4:01:5B:BC:B4:09:FA:87:72:46:40 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91983BD/BE7CD02A1D8C11E2AEF045E808B02CD2/FiENxlKhYN7k5AFbvLQJ-odyRkA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FiENxlKhYN7k5AFbvLQJ-odyRkA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91983BD/BE7CD02A1D8C11E2AEF045E808B02CD2/FiENxlKhYN7k5AFbvLQJ-odyRkA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 34:40:ca:02:3f:bb:f2:73:95:2b:0e:bd:81:97:97:3d:9b:d7: 98:7d:97:ac:ce:c8:d6:ba:23:52:2f:39:24:0f:ef:76:37:78: 14:1e:7f:59:9f:82:1c:ca:e7:c9:83:e3:15:33:94:16:c5:15: 9b:db:2a:4e:73:4e:ea:01:4b:9a:b3:31:5f:37:67:f2:42:9b: da:08:da:26:37:14:2c:39:cc:76:94:2c:4c:61:56:01:70:86: 34:07:c2:68:35:99:aa:53:a8:c9:1e:e9:e8:b2:a6:30:7d:35: ee:d9:5b:33:6d:fe:da:08:0c:b2:fa:57:17:3f:48:f6:84:b9: c6:83:4b:3d:27:30:48:f2:52:72:80:1a:1e:47:3f:ea:0d:5c: e3:c1:a4:32:12:ee:35:73:8e:0e:24:f3:90:91:c8:f4:50:41: 2b:2c:42:db:1b:a4:92:13:1f:47:c2:f1:d1:a4:d2:e8:c8:4d: d5:12:ad:aa:48:68:5a:00:9d:73:a8:fa:98:a2:7d:0a:20:2a: 82:20:e1:cf:d6:23:39:0a:d1:91:e1:0c:2f:7b:eb:8b:4c:27: 83:38:30:64:e8:06:02:c8:ef:96:e3:e5:d6:23:37:fd:4d:e9: 00:22:c2:7d:e9:1a:2e:f3:3e:87:12:a6:fd:bf:32:ec:4e:08: 81:14:3d:ff -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNM0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTgzQkQxMTAvBgNVBAUTKDE2MjEwREM2NTJBMTYwREVFNEU0MDE1QkJDQjQwOUZB ODc3MjQ2NDAwHhcNMjUxMDE4MTQ0MDEwWhcNMjUxMDI1MTQ0MDEwWjAYMRYwFAYD VQQDEw02OGYzYTZjYi0xMGJiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAznsS8Vwk2IJv4SOq2LUxfQX6Glt+r/Rs5gySeUbBjsrF2okgJW1EB/Vid1SB iaHLadt6LJLalezLcMzGniOVQ4P98tcxjORGUNVAKE2rJ8sZzElMaxx8/ZTtfmB2 2HWb0rFiHSn647AwBBcPQnm58kUWiqD6DkXd4/52kdyxV9BnrgScD897iVvtEL/b clZMyZzJlEhbylRgLBzmkdkh+rwQgQBEbZUoiedOuTMFKP3MMD3p7RTizOR3nLxE QD27lCV62SyAWE+SGZKVLXE9yUsFmgghUc0iP5iz9II8hXuJEfvwLQ/DCJ+84B46 MnBJLR/3OVWS6uuImYGxIc3iSQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNhFmMKA bhhNs2DZyz4Qx9kF77X0MB8GA1UdIwQYMBaAFBYhDcZSoWDe5OQBW7y0CfqHckZA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5ODNCRC9CRTdDRDAyQTFE OEMxMUUyQUVGMDQ1RTgwOEIwMkNEMi9GaUVOeGxLaFlON2s1QUZidkxRSi1vZHlS a0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZpRU54bEtoWU43azVBRmJ2TFFKLW9keVJrQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 ODNCRC9CRTdDRDAyQTFEOEMxMUUyQUVGMDQ1RTgwOEIwMkNEMi9GaUVOeGxLaFlO N2s1QUZidkxRSi1vZHlSa0EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA0QMoCP7vyc5UrDr2Bl5c9m9eYfZeszsjWuiNSLzkkD+92N3gUHn9Z n4IcyufJg+MVM5QWxRWb2ypOc07qAUuaszFfN2fyQpvaCNomNxQsOcx2lCxMYVYB cIY0B8JoNZmqU6jJHunosqYwfTXu2Vszbf7aCAyy+lcXP0j2hLnGg0s9JzBI8lJy gBoeRz/qDVzjwaQyEu41c44OJPOQkcj0UEErLELbG6SSEx9HwvHRpNLoyE3VEq2q SGhaAJ1zqPqYon0KICqCIOHP1iM5CtGR4Qwve+uLTCeDODBk6AYCyO+W4+XWIzf9 TekAIsJ96Rou8z6HEqb9vzLsTgiBFD3/ -----END CERTIFICATE-----Generated at Mon Oct 20 03:52:54 2025 by rpki-client