$ rpki-client -vvf rpki.apnic.net/member_repository/A91A86D0/8D8F0ABE0B5A11EA90923066C4F9AE02/FjMWdiEa7mdzSFtlIzxiw6RYev0.mft File: FjMWdiEa7mdzSFtlIzxiw6RYev0.mft (raw, json) Hash identifier: d4ddDZScemtBdNH4MyZqXRt18RvfrqbFouEhyxyj/hg= Subject key identifier: 4A:F5:84:1D:D1:6A:96:5B:31:A1:18:45:E7:C6:D0:25:E1:47:AF:92 Authority key identifier: 16:33:16:76:21:1A:EE:67:73:48:5B:65:23:3C:62:C3:A4:58:7A:FD Certificate issuer: /CN=A91A86D0/serialNumber=16331676211AEE6773485B65233C62C3A4587AFD Certificate serial: 0C7A Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/FjMWdiEa7mdzSFtlIzxiw6RYev0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A86D0/8D8F0ABE0B5A11EA90923066C4F9AE02/FjMWdiEa7mdzSFtlIzxiw6RYev0.mft Manifest number: 0C6D Signing time: Mon 20 Oct 2025 05:24:39 +0000 Manifest this update: Mon 20 Oct 2025 05:24:38 +0000 Manifest next update: Mon 27 Oct 2025 05:24:38 +0000 Files and hashes: 1: FjMWdiEa7mdzSFtlIzxiw6RYev0.crl (hash: YI90BstwslAg+nELDUfA7WWpieFPmLjr2/6856Azuos=) 2: CDD0C38ECCE111EB90AF2C7AC4F9AE02.roa (hash: e16SVTPpwjEg2RE9Hpi4GSSEsMxTTKPyjdQEKVYgs6Q=) 3: CF1B3152CCE111EB90AF2C7AC4F9AE02.roa (hash: ZahlDvvl4xqyMO4InfL5NLuVKGcItekitU1WQ9tGmBk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A86D0/8D8F0ABE0B5A11EA90923066C4F9AE02/FjMWdiEa7mdzSFtlIzxiw6RYev0.crl rsync://rpki.apnic.net/member_repository/A91A86D0/8D8F0ABE0B5A11EA90923066C4F9AE02/FjMWdiEa7mdzSFtlIzxiw6RYev0.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/FjMWdiEa7mdzSFtlIzxiw6RYev0.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 27 Oct 2025 05:24:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3194 (0xc7a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A86D0, serialNumber=16331676211AEE6773485B65233C62C3A4587AFD Validity Not Before: Oct 20 05:24:38 2025 GMT Not After : Oct 27 05:24:38 2025 GMT Subject: CN=68f5c797-8cba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:47:0a:67:50:a2:3c:ec:f1:8c:90:58:4f:62: 85:a9:8a:0f:b6:78:95:f2:68:6a:e1:3b:cc:80:5b: ed:6a:7d:d7:13:88:4c:d8:84:ae:10:41:b1:9c:ce: 40:aa:30:5a:bd:f0:68:67:75:a7:e8:89:7d:cc:fc: 06:45:2b:2f:7e:a7:97:34:79:40:25:7d:d5:fa:af: 26:9a:2e:7f:c3:e8:c9:f4:32:4f:fe:84:e4:f9:d5: cd:0c:cf:a4:eb:37:3d:d1:8e:a7:fb:89:db:d6:d9: 10:10:5f:1a:76:22:d1:28:ae:3a:f6:ad:e5:49:4d: a7:52:26:81:35:13:08:3e:c6:ee:b8:86:37:7c:3a: 02:13:32:f3:36:f4:8b:2f:ba:11:8b:49:34:02:0f: b4:0e:4a:23:55:7e:90:d4:ef:05:08:b9:b9:9a:21: 5e:08:e0:96:3c:75:6a:c4:81:da:87:8c:66:db:c4: ab:4f:b7:13:7d:6a:f6:87:01:f7:50:fb:ef:9d:cc: 01:bb:a0:69:46:d4:55:6b:b0:e4:78:39:f2:9f:8f: 0c:a8:86:61:87:3e:29:86:11:82:6a:9f:89:93:5c: cb:92:0c:00:b0:86:84:c1:5e:45:0a:82:3e:db:2c: 8c:af:4a:aa:75:26:87:8e:2c:86:f3:8a:bd:70:cf: aa:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:F5:84:1D:D1:6A:96:5B:31:A1:18:45:E7:C6:D0:25:E1:47:AF:92 X509v3 Authority Key Identifier: keyid:16:33:16:76:21:1A:EE:67:73:48:5B:65:23:3C:62:C3:A4:58:7A:FD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A86D0/8D8F0ABE0B5A11EA90923066C4F9AE02/FjMWdiEa7mdzSFtlIzxiw6RYev0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/FjMWdiEa7mdzSFtlIzxiw6RYev0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A86D0/8D8F0ABE0B5A11EA90923066C4F9AE02/FjMWdiEa7mdzSFtlIzxiw6RYev0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7a:67:5d:ce:6a:92:c9:6b:1d:07:0e:48:6f:fc:e5:3c:d2:82: 7a:71:17:28:86:cb:6e:17:24:fc:27:f8:22:82:9f:7a:ba:9d: df:5f:6a:85:9b:63:d9:18:eb:81:10:89:a9:c2:55:e3:58:b4: 9e:e3:a9:4b:eb:89:1e:85:e6:fe:af:40:68:ce:32:7d:69:47: 7a:b0:ed:b9:17:5d:42:68:17:81:87:96:da:c7:16:21:d6:38: 09:36:34:65:61:57:a6:cf:9f:f3:82:71:ad:19:0f:9c:a0:de: ff:70:ce:0a:b6:21:75:14:1b:63:64:7e:cf:bd:35:d5:21:00: fb:73:3a:e8:18:34:f7:88:41:ba:55:27:a8:b6:8d:cb:d2:71: 61:ec:84:64:e6:6a:80:d2:2c:bf:8a:15:50:9c:98:01:bc:7f: ac:13:33:27:11:51:70:44:ee:27:a4:94:10:7e:6f:27:c8:03: eb:cd:6c:99:4e:6e:42:f6:3f:87:e5:cc:73:60:d4:39:fe:31: ad:a6:9b:89:2f:44:1a:11:0c:31:68:94:8a:21:e5:66:15:29: dc:e1:8e:9f:7f:b7:7a:38:95:05:d3:1b:f6:52:76:cb:86:11: 1c:78:3c:a4:e6:42:8c:34:5d:a2:15:48:ce:11:4d:b9:f3:2e: 55:f6:ec:3e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDHowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTg2RDAxMTAvBgNVBAUTKDE2MzMxNjc2MjExQUVFNjc3MzQ4NUI2NTIzM0M2MkMz QTQ1ODdBRkQwHhcNMjUxMDIwMDUyNDM4WhcNMjUxMDI3MDUyNDM4WjAYMRYwFAYD VQQDEw02OGY1Yzc5Ny04Y2JhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvkcKZ1CiPOzxjJBYT2KFqYoPtniV8mhq4TvMgFvtan3XE4hM2ISuEEGxnM5A qjBavfBoZ3Wn6Il9zPwGRSsvfqeXNHlAJX3V+q8mmi5/w+jJ9DJP/oTk+dXNDM+k 6zc90Y6n+4nb1tkQEF8adiLRKK469q3lSU2nUiaBNRMIPsbuuIY3fDoCEzLzNvSL L7oRi0k0Ag+0DkojVX6Q1O8FCLm5miFeCOCWPHVqxIHah4xm28SrT7cTfWr2hwH3 UPvvncwBu6BpRtRVa7DkeDnyn48MqIZhhz4phhGCap+Jk1zLkgwAsIaEwV5FCoI+ 2yyMr0qqdSaHjiyG84q9cM+qIQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEr1hB3R apZbMaEYRefG0CXhR6+SMB8GA1UdIwQYMBaAFBYzFnYhGu5nc0hbZSM8YsOkWHr9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBODZEMC84RDhGMEFCRTBC NUExMUVBOTA5MjMwNjZDNEY5QUUwMi9Gak1XZGlFYTdtZHpTRnRsSXp4aXc2Ulll djAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyL0ZqTVdkaUVhN21kelNGdGxJenhpdzZSWWV2MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB ODZEMC84RDhGMEFCRTBCNUExMUVBOTA5MjMwNjZDNEY5QUUwMi9Gak1XZGlFYTdt ZHpTRnRsSXp4aXc2UllldjAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB6Z13OapLJax0HDkhv/OU80oJ6cRcohstuFyT8J/gigp96up3fX2qF m2PZGOuBEImpwlXjWLSe46lL64keheb+r0BozjJ9aUd6sO25F11CaBeBh5baxxYh 1jgJNjRlYVemz5/zgnGtGQ+coN7/cM4KtiF1FBtjZH7PvTXVIQD7czroGDT3iEG6 VSeoto3L0nFh7IRk5mqA0iy/ihVQnJgBvH+sEzMnEVFwRO4npJQQfm8nyAPrzWyZ Tm5C9j+H5cxzYNQ5/jGtppuJL0QaEQwxaJSKIeVmFSnc4Y6ff7d6OJUF0xv2UnbL hhEceDyk5kKMNF2iFUjOEU258y5V9uw+ -----END CERTIFICATE-----Generated at Mon Oct 20 18:26:00 2025 by rpki-client