$ rpki-client -vvf rpki.apnic.net/member_repository/A91983E5/7038386CF4AF11E9A51CF05AC4F9AE02/cFP_gf7PBZo-i9cPhdZJQ9EU5TY.mft File: cFP_gf7PBZo-i9cPhdZJQ9EU5TY.mft (raw, json) Hash identifier: T7ycrFxr2b8/ye9nk949Oz2t9kjDodUAlG7VKRs4Keg= Subject key identifier: A8:EA:1E:C1:87:1A:C2:2A:19:E5:B6:34:8D:7E:37:F3:67:0C:A6:02 Authority key identifier: 70:53:FF:81:FE:CF:05:9A:3E:8B:D7:0F:85:D6:49:43:D1:14:E5:36 Certificate issuer: /CN=A91983E5/serialNumber=7053FF81FECF059A3E8BD70F85D64943D114E536 Certificate serial: 0CE3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cFP_gf7PBZo-i9cPhdZJQ9EU5TY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91983E5/7038386CF4AF11E9A51CF05AC4F9AE02/cFP_gf7PBZo-i9cPhdZJQ9EU5TY.mft Manifest number: 0CDD Signing time: Sat 18 Oct 2025 18:48:42 +0000 Manifest this update: Sat 18 Oct 2025 18:48:41 +0000 Manifest next update: Sat 25 Oct 2025 18:48:41 +0000 Files and hashes: 1: cFP_gf7PBZo-i9cPhdZJQ9EU5TY.crl (hash: Y9ZKL8JhntpPNbpAPsD6e3crFlUuvDDE99hF3U45qmA=) 2: 430E6130F4B011E99BB3425CC4F9AE02.roa (hash: srN4MybkybSjP5c+l2pI3OXFvu05+GspG1m/SkxGd6Y=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91983E5/7038386CF4AF11E9A51CF05AC4F9AE02/cFP_gf7PBZo-i9cPhdZJQ9EU5TY.crl rsync://rpki.apnic.net/member_repository/A91983E5/7038386CF4AF11E9A51CF05AC4F9AE02/cFP_gf7PBZo-i9cPhdZJQ9EU5TY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cFP_gf7PBZo-i9cPhdZJQ9EU5TY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 18:48:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3299 (0xce3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91983E5, serialNumber=7053FF81FECF059A3E8BD70F85D64943D114E536 Validity Not Before: Oct 18 18:48:41 2025 GMT Not After : Oct 25 18:48:41 2025 GMT Subject: CN=68f3e109-6790 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:98:25:09:e6:06:57:2e:83:9a:9c:09:98:13: c3:cf:1f:3c:7a:7e:4f:4e:ed:51:9c:03:e3:00:60: 0a:79:64:7e:b7:a0:44:77:01:93:25:8d:23:06:61: bc:65:d3:5e:40:44:f5:96:af:73:97:8c:e4:47:e7: 8e:6e:f9:06:cd:99:be:6f:25:f4:81:1b:a9:e9:99: bd:ce:90:9d:c0:5f:28:43:74:4e:6c:86:20:42:40: 1d:8e:95:79:69:00:4c:52:5b:b9:68:6c:59:b8:62: 0b:88:55:c2:04:89:66:c9:d1:3f:58:af:f3:82:ac: 5c:99:ee:fb:91:33:f6:35:c5:78:2d:a9:7f:b3:b9: 26:0a:8a:32:ea:93:ab:b2:22:50:88:0a:6c:52:3d: e1:ca:7e:22:5f:ab:c7:9b:5f:e6:ef:b8:0d:13:a4: 12:27:75:08:48:66:63:89:c3:02:36:0d:01:68:4b: 26:3d:93:7d:7a:84:e3:08:02:d8:18:d6:61:0d:86: e7:3b:4c:f1:67:09:af:f2:21:12:4f:ee:2d:f8:a3: 69:37:fa:e0:d4:3d:f9:8f:f4:42:65:a5:4d:1e:84: 20:9b:81:1b:bd:e1:91:98:e8:2b:6d:32:40:96:a4: 69:82:9c:4b:bb:d4:d2:c2:ab:da:48:6a:44:de:85: 2f:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:EA:1E:C1:87:1A:C2:2A:19:E5:B6:34:8D:7E:37:F3:67:0C:A6:02 X509v3 Authority Key Identifier: keyid:70:53:FF:81:FE:CF:05:9A:3E:8B:D7:0F:85:D6:49:43:D1:14:E5:36 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91983E5/7038386CF4AF11E9A51CF05AC4F9AE02/cFP_gf7PBZo-i9cPhdZJQ9EU5TY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cFP_gf7PBZo-i9cPhdZJQ9EU5TY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91983E5/7038386CF4AF11E9A51CF05AC4F9AE02/cFP_gf7PBZo-i9cPhdZJQ9EU5TY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4e:d7:8f:22:f0:ca:50:a9:16:a0:83:63:f2:09:b6:52:80:e3: a5:23:a9:dc:a8:e3:94:b4:c2:91:8a:13:15:26:8f:88:11:2a: 83:13:90:93:34:dd:26:65:15:17:a3:2f:22:ca:50:41:c4:d1: ea:25:d4:09:44:de:e9:bf:18:75:0c:77:15:9c:09:d1:3c:1e: 8b:0b:51:5b:d8:f8:30:32:41:e0:7f:bc:ea:9b:af:03:12:b2: 28:35:37:e9:25:8f:23:7d:51:8d:f4:ba:70:8b:b9:09:f1:86: d5:db:7e:87:11:07:b1:30:46:f8:82:05:0d:7e:56:83:9e:bc: 36:ed:d7:fe:f6:6c:e5:4d:f7:42:ee:90:1e:03:d7:2f:e8:22: 0a:9a:3b:15:9a:66:98:ea:27:b7:a1:7a:a5:82:0a:6c:bc:f6: 53:d2:a4:aa:09:29:9f:28:09:4c:8d:ec:c3:52:64:c0:62:e9: e1:24:b3:06:c9:0a:1b:6e:a0:87:a3:22:16:1b:ba:87:6d:51: e2:3b:fe:82:80:3b:db:00:8c:34:84:3b:60:b3:e5:5d:e1:8c: 39:b5:be:84:9a:c8:a9:06:37:5f:89:eb:ae:fc:b0:92:90:8e: 56:50:04:14:7f:66:33:79:27:3d:ff:c9:55:6d:5e:12:4b:8f: 60:33:16:6c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDOMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTgzRTUxMTAvBgNVBAUTKDcwNTNGRjgxRkVDRjA1OUEzRThCRDcwRjg1RDY0OTQz RDExNEU1MzYwHhcNMjUxMDE4MTg0ODQxWhcNMjUxMDI1MTg0ODQxWjAYMRYwFAYD VQQDEw02OGYzZTEwOS02NzkwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3ZglCeYGVy6DmpwJmBPDzx88en5PTu1RnAPjAGAKeWR+t6BEdwGTJY0jBmG8 ZdNeQET1lq9zl4zkR+eObvkGzZm+byX0gRup6Zm9zpCdwF8oQ3RObIYgQkAdjpV5 aQBMUlu5aGxZuGILiFXCBIlmydE/WK/zgqxcme77kTP2NcV4Lal/s7kmCooy6pOr siJQiApsUj3hyn4iX6vHm1/m77gNE6QSJ3UISGZjicMCNg0BaEsmPZN9eoTjCALY GNZhDYbnO0zxZwmv8iEST+4t+KNpN/rg1D35j/RCZaVNHoQgm4EbveGRmOgrbTJA lqRpgpxLu9TSwqvaSGpE3oUv6QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKjqHsGH GsIqGeW2NI1+N/NnDKYCMB8GA1UdIwQYMBaAFHBT/4H+zwWaPovXD4XWSUPRFOU2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5ODNFNS83MDM4Mzg2Q0Y0 QUYxMUU5QTUxQ0YwNUFDNEY5QUUwMi9jRlBfZ2Y3UEJaby1pOWNQaGRaSlE5RVU1 VFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NGUF9nZjdQQlpvLWk5Y1BoZFpKUTlFVTVUWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 ODNFNS83MDM4Mzg2Q0Y0QUYxMUU5QTUxQ0YwNUFDNEY5QUUwMi9jRlBfZ2Y3UEJa by1pOWNQaGRaSlE5RVU1VFkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBO148i8MpQqRagg2PyCbZSgOOlI6ncqOOUtMKRihMVJo+IESqDE5CT NN0mZRUXoy8iylBBxNHqJdQJRN7pvxh1DHcVnAnRPB6LC1Fb2PgwMkHgf7zqm68D ErIoNTfpJY8jfVGN9Lpwi7kJ8YbV236HEQexMEb4ggUNflaDnrw27df+9mzlTfdC 7pAeA9cv6CIKmjsVmmaY6ie3oXqlggpsvPZT0qSqCSmfKAlMjezDUmTAYunhJLMG yQobbqCHoyIWG7qHbVHiO/6CgDvbAIw0hDtgs+Vd4Yw5tb6EmsipBjdfieuu/LCS kI5WUAQUf2YzeSc9/8lVbV4SS49gMxZs -----END CERTIFICATE-----Generated at Mon Oct 20 04:05:59 2025 by rpki-client