$ rpki-client -vvf rpki.apnic.net/member_repository/A91A29DA/3E624BAEDA5411EE827CA57DC4F9AE02/FtFKpRNNQRJGTXmS2_HEUvf6KaA.mft File: FtFKpRNNQRJGTXmS2_HEUvf6KaA.mft (raw, json) Hash identifier: lIRcNPdcrktGifAS2gB8ibMFSlWutclHcfLeT2JQW8Y= Subject key identifier: DD:87:22:2A:E1:72:C0:14:BB:F1:A8:C8:FD:E3:6E:7D:BA:0A:5A:DF Authority key identifier: 16:D1:4A:A5:13:4D:41:12:46:4D:79:92:DB:F1:C4:52:F7:FA:29:A0 Certificate issuer: /CN=A91A29DA/serialNumber=16D14AA5134D4112464D7992DBF1C452F7FA29A0 Certificate serial: 0130 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FtFKpRNNQRJGTXmS2_HEUvf6KaA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A29DA/3E624BAEDA5411EE827CA57DC4F9AE02/FtFKpRNNQRJGTXmS2_HEUvf6KaA.mft Manifest number: 012F Signing time: Sun 19 Oct 2025 07:22:21 +0000 Manifest this update: Sun 19 Oct 2025 07:22:21 +0000 Manifest next update: Sun 26 Oct 2025 07:22:21 +0000 Files and hashes: 1: FtFKpRNNQRJGTXmS2_HEUvf6KaA.crl (hash: Me0U+FhBkG0vj0WQbTRIBCHLc6QU0ny3yM9/V049S4Q=) 2: C1F74E665C1611F0B0B40A35C4F9AE02.roa (hash: cyzmbSkuoaF4EDWEAACeoUMvRNItS2PdfJUezyi8Vms=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A29DA/3E624BAEDA5411EE827CA57DC4F9AE02/FtFKpRNNQRJGTXmS2_HEUvf6KaA.crl rsync://rpki.apnic.net/member_repository/A91A29DA/3E624BAEDA5411EE827CA57DC4F9AE02/FtFKpRNNQRJGTXmS2_HEUvf6KaA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FtFKpRNNQRJGTXmS2_HEUvf6KaA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 07:22:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 304 (0x130) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A29DA, serialNumber=16D14AA5134D4112464D7992DBF1C452F7FA29A0 Validity Not Before: Oct 19 07:22:21 2025 GMT Not After : Oct 26 07:22:21 2025 GMT Subject: CN=68f491ad-bd62 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:e9:f6:c0:8f:38:ab:8b:1f:71:01:4f:ba:31: ac:44:52:18:ca:a0:69:4c:ec:eb:45:94:9c:98:29: 92:b6:5c:b6:f7:eb:28:46:05:ae:d7:e4:58:28:9a: 66:c4:1c:d0:ea:c7:e4:6a:f3:9c:b3:d7:fb:3c:89: a4:76:ed:a4:fe:77:a5:9f:56:81:36:bd:d9:db:d7: e8:22:ed:8d:9f:f4:83:3f:72:c6:08:2f:c0:14:e5: 11:43:63:7c:69:70:62:32:0f:f9:a4:24:1d:35:77: 9e:e5:81:74:97:9c:02:a0:f1:42:39:b2:e4:7c:96: cf:13:9e:77:2a:29:f7:68:cd:c9:be:7d:62:79:d0: 0b:2d:80:59:f2:20:24:c8:ed:a7:29:13:b0:11:71: c5:a8:e1:e7:83:cf:dd:ef:d1:6f:84:05:53:08:0a: 9d:fc:66:8a:59:9e:79:76:8d:d4:09:53:ae:f1:1b: 27:8e:a0:2f:ac:63:88:61:2b:fb:2b:a4:4c:b0:59: 7f:b5:65:40:db:d6:a1:09:cd:3b:4d:73:99:61:ec: f2:93:93:d5:7c:2d:ca:83:b9:ed:aa:3c:02:67:06: 85:50:3a:92:02:4d:fb:a7:f2:2d:7f:70:f5:bb:28: 95:4b:c0:36:17:2d:4c:1a:9b:c5:97:9d:8c:a3:37: 89:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:87:22:2A:E1:72:C0:14:BB:F1:A8:C8:FD:E3:6E:7D:BA:0A:5A:DF X509v3 Authority Key Identifier: keyid:16:D1:4A:A5:13:4D:41:12:46:4D:79:92:DB:F1:C4:52:F7:FA:29:A0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A29DA/3E624BAEDA5411EE827CA57DC4F9AE02/FtFKpRNNQRJGTXmS2_HEUvf6KaA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FtFKpRNNQRJGTXmS2_HEUvf6KaA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A29DA/3E624BAEDA5411EE827CA57DC4F9AE02/FtFKpRNNQRJGTXmS2_HEUvf6KaA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 24:39:97:21:8e:66:2a:c3:59:6d:e4:a6:e2:d5:bd:f2:5c:6c: dc:9c:21:cc:8a:c4:21:93:00:9f:bb:b6:d0:59:87:57:36:a2: 42:bb:a7:20:73:90:dc:c9:97:89:fb:23:13:97:2f:27:59:eb: 6e:33:58:49:2b:61:34:86:cb:31:89:6b:c3:bb:12:88:71:fa: 8e:da:26:ec:f6:a1:2a:2f:bb:cc:25:c9:3f:f1:a2:f1:b9:46: 59:ad:19:c7:09:6f:c2:47:15:06:3f:e5:a5:57:1e:75:d8:de: 11:9a:c0:39:fb:91:4a:04:54:07:3a:9f:77:30:8a:cb:56:76: df:5c:4c:c3:59:00:18:ba:25:f7:0f:b9:cc:61:57:98:ab:69: 62:05:81:e5:2e:8f:16:75:81:91:0a:22:5f:f3:87:62:17:38: a2:44:75:75:c8:da:6a:d9:3f:b0:56:e2:e0:49:f8:fb:f6:1c: da:4f:d6:71:77:4b:c5:b9:11:9e:21:f6:c3:5c:3d:8e:0c:82: 9d:9a:04:fa:36:88:38:3f:73:a6:ff:bf:79:65:78:5e:2d:7a: d0:38:13:2d:fc:39:62:80:da:90:ce:c3:35:55:a8:e9:2a:3c: a4:53:f5:f4:46:9c:c7:c5:b3:a7:11:df:c2:36:d7:f2:47:d0: 6e:e2:d2:03 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICATAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTI5REExMTAvBgNVBAUTKDE2RDE0QUE1MTM0RDQxMTI0NjRENzk5MkRCRjFDNDUy RjdGQTI5QTAwHhcNMjUxMDE5MDcyMjIxWhcNMjUxMDI2MDcyMjIxWjAYMRYwFAYD VQQDEw02OGY0OTFhZC1iZDYyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsun2wI84q4sfcQFPujGsRFIYyqBpTOzrRZScmCmStly29+soRgWu1+RYKJpm xBzQ6sfkavOcs9f7PImkdu2k/neln1aBNr3Z29foIu2Nn/SDP3LGCC/AFOURQ2N8 aXBiMg/5pCQdNXee5YF0l5wCoPFCObLkfJbPE553Kin3aM3Jvn1iedALLYBZ8iAk yO2nKROwEXHFqOHng8/d79FvhAVTCAqd/GaKWZ55do3UCVOu8RsnjqAvrGOIYSv7 K6RMsFl/tWVA29ahCc07TXOZYezyk5PVfC3Kg7ntqjwCZwaFUDqSAk37p/Itf3D1 uyiVS8A2Fy1MGpvFl52MozeJQQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFN2HIirh csAUu/GoyP3jbn26ClrfMB8GA1UdIwQYMBaAFBbRSqUTTUESRk15ktvxxFL3+img MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMjlEQS8zRTYyNEJBRURB NTQxMUVFODI3Q0E1N0RDNEY5QUUwMi9GdEZLcFJOTlFSSkdUWG1TMl9IRVV2ZjZL YUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0Z0RktwUk5OUVJKR1RYbVMyX0hFVXZmNkthQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB MjlEQS8zRTYyNEJBRURBNTQxMUVFODI3Q0E1N0RDNEY5QUUwMi9GdEZLcFJOTlFS SkdUWG1TMl9IRVV2ZjZLYUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAkOZchjmYqw1lt5Kbi1b3yXGzcnCHMisQhkwCfu7bQWYdXNqJCu6cg c5DcyZeJ+yMTly8nWetuM1hJK2E0hssxiWvDuxKIcfqO2ibs9qEqL7vMJck/8aLx uUZZrRnHCW/CRxUGP+WlVx512N4RmsA5+5FKBFQHOp93MIrLVnbfXEzDWQAYuiX3 D7nMYVeYq2liBYHlLo8WdYGRCiJf84diFziiRHV1yNpq2T+wVuLgSfj79hzaT9Zx d0vFuRGeIfbDXD2ODIKdmgT6Nog4P3Om/795ZXheLXrQOBMt/DligNqQzsM1Vajp KjykU/X0RpzHxbOnEd/CNtfyR9Bu4tID -----END CERTIFICATE-----Generated at Mon Oct 20 14:35:27 2025 by rpki-client