$ rpki-client -vvf rpki.apnic.net/member_repository/A91AC232/41730086598D11EBAECC8321C4F9AE02/fToi3tGr8M05CSgLibI3bFRfbwc.mft File: fToi3tGr8M05CSgLibI3bFRfbwc.mft (raw, json) Hash identifier: CzCzXYHAV4tCT9sr8V5wNBD+gDlXZesnKoAySCYAMIk= Subject key identifier: F2:5D:86:96:27:A3:DB:B4:AE:D3:67:87:69:0E:AD:5D:36:BA:9F:13 Authority key identifier: 7D:3A:22:DE:D1:AB:F0:CD:39:09:28:0B:89:B2:37:6C:54:5F:6F:07 Certificate issuer: /CN=A91AC232/serialNumber=7D3A22DED1ABF0CD3909280B89B2376C545F6F07 Certificate serial: 071B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fToi3tGr8M05CSgLibI3bFRfbwc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AC232/41730086598D11EBAECC8321C4F9AE02/fToi3tGr8M05CSgLibI3bFRfbwc.mft Manifest number: 0714 Signing time: Sat 18 Oct 2025 23:16:48 +0000 Manifest this update: Sat 18 Oct 2025 23:16:48 +0000 Manifest next update: Sat 25 Oct 2025 23:16:48 +0000 Files and hashes: 1: fToi3tGr8M05CSgLibI3bFRfbwc.crl (hash: 7U69YOB+/BLSpHa4DJ0gatxTJX7LgESFDZcSTPm1QVo=) 2: D93244BAF2EF11ED91F08A4FC4F9AE02.roa (hash: hUqHFifGF2RTMr5P0bZj3vJ6RCASWQ9bPokCmECeKBM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AC232/41730086598D11EBAECC8321C4F9AE02/fToi3tGr8M05CSgLibI3bFRfbwc.crl rsync://rpki.apnic.net/member_repository/A91AC232/41730086598D11EBAECC8321C4F9AE02/fToi3tGr8M05CSgLibI3bFRfbwc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fToi3tGr8M05CSgLibI3bFRfbwc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 23:16:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1819 (0x71b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AC232, serialNumber=7D3A22DED1ABF0CD3909280B89B2376C545F6F07 Validity Not Before: Oct 18 23:16:48 2025 GMT Not After : Oct 25 23:16:48 2025 GMT Subject: CN=68f41fe0-f7e7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:fd:8f:9b:5c:f2:d5:8c:33:4b:a3:8e:ce:35: 5c:a3:6d:04:a4:2c:14:9d:d5:45:46:5a:9d:fe:6c: 3a:c0:e3:cd:c5:fd:c6:64:20:23:d3:07:64:5e:cf: a6:d6:e2:2c:de:9c:73:66:df:de:d3:72:31:2b:8e: 5c:9c:4a:df:ea:b2:9f:a7:d3:61:70:44:8b:ab:83: fe:3e:ec:7b:10:79:13:ad:31:39:06:44:23:b0:11: 11:cc:78:c3:12:6d:5c:5e:46:5e:11:e7:9c:2f:d8: 2b:dc:67:30:05:f8:85:43:04:22:c9:b6:ac:38:33: c8:37:f4:5e:f4:3c:a0:e8:a7:0a:27:4a:2d:90:0b: 52:9d:f9:41:cb:94:25:34:0f:6b:22:4f:b8:3c:9b: f7:ba:33:84:0f:d3:47:22:91:e3:dc:b3:c8:11:bd: 44:1f:e4:22:cd:65:a5:c0:17:ef:98:3a:a0:d3:b9: 92:ef:15:e7:9f:97:2c:55:69:99:45:b2:1d:6e:96: 4d:40:cf:e7:e7:87:07:62:c7:75:fc:03:f5:e7:6f: 06:78:63:64:49:1b:f2:e6:3b:e3:ff:e7:2b:a3:31: 01:2f:71:cf:dc:53:b2:c2:79:65:94:ab:6a:a4:31: 81:56:22:92:54:ab:fd:f0:03:36:09:01:54:f4:29: 66:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:5D:86:96:27:A3:DB:B4:AE:D3:67:87:69:0E:AD:5D:36:BA:9F:13 X509v3 Authority Key Identifier: keyid:7D:3A:22:DE:D1:AB:F0:CD:39:09:28:0B:89:B2:37:6C:54:5F:6F:07 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AC232/41730086598D11EBAECC8321C4F9AE02/fToi3tGr8M05CSgLibI3bFRfbwc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fToi3tGr8M05CSgLibI3bFRfbwc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AC232/41730086598D11EBAECC8321C4F9AE02/fToi3tGr8M05CSgLibI3bFRfbwc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 91:4a:16:83:69:21:58:b5:c8:d1:88:1a:eb:25:a7:08:12:6e: 47:24:46:67:1e:1c:7d:cc:a6:18:aa:c4:79:db:b4:27:00:ab: 3f:f4:ca:a4:ab:be:32:26:1c:0c:fd:ef:d2:51:58:05:0b:4c: 2d:2c:15:21:41:30:e9:4e:7f:d1:6b:7d:d6:ed:20:85:65:c7: 25:c1:9e:8f:ff:46:17:8d:fb:4b:62:68:0d:f5:fe:27:69:c4: 30:04:84:31:56:4e:6e:93:81:7d:06:ff:9c:04:9a:b6:41:ba: 0b:9d:0d:a8:1b:bc:28:97:89:36:0d:c3:5d:d1:f9:da:e5:33: c4:14:7d:ac:4e:ad:15:05:9f:c3:2f:be:a9:48:76:d9:75:0c: bd:b8:93:ee:e1:6b:01:a4:6c:1e:f8:c5:5b:8a:12:0b:2d:c9: d6:2e:83:18:7e:19:72:98:d5:1e:a2:96:ae:9a:26:af:5c:46: be:4f:6e:e8:5b:6e:d5:e4:31:c2:86:e2:60:40:64:1b:d1:c2: c8:9d:6f:f3:94:e0:e6:b9:44:93:77:f6:73:65:69:c6:2b:da: 6d:b7:0f:40:c7:c1:ad:b2:88:6b:89:6d:f7:6d:0f:fb:91:4f: b6:92:02:57:b3:12:ac:bf:01:72:a0:4d:98:4c:47:f0:77:0a: e2:b2:f0:0c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBxswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUMyMzIxMTAvBgNVBAUTKDdEM0EyMkRFRDFBQkYwQ0QzOTA5MjgwQjg5QjIzNzZD NTQ1RjZGMDcwHhcNMjUxMDE4MjMxNjQ4WhcNMjUxMDI1MjMxNjQ4WjAYMRYwFAYD VQQDEw02OGY0MWZlMC1mN2U3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArv2Pm1zy1YwzS6OOzjVco20EpCwUndVFRlqd/mw6wOPNxf3GZCAj0wdkXs+m 1uIs3pxzZt/e03IxK45cnErf6rKfp9NhcESLq4P+Pux7EHkTrTE5BkQjsBERzHjD Em1cXkZeEeecL9gr3GcwBfiFQwQiybasODPIN/Re9Dyg6KcKJ0otkAtSnflBy5Ql NA9rIk+4PJv3ujOED9NHIpHj3LPIEb1EH+QizWWlwBfvmDqg07mS7xXnn5csVWmZ RbIdbpZNQM/n54cHYsd1/AP1528GeGNkSRvy5jvj/+crozEBL3HP3FOywnlllKtq pDGBViKSVKv98AM2CQFU9ClmJQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPJdhpYn o9u0rtNnh2kOrV02up8TMB8GA1UdIwQYMBaAFH06It7Rq/DNOQkoC4myN2xUX28H MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQzIzMi80MTczMDA4NjU5 OEQxMUVCQUVDQzgzMjFDNEY5QUUwMi9mVG9pM3RHcjhNMDVDU2dMaWJJM2JGUmZi d2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ZUb2kzdEdyOE0wNUNTZ0xpYkkzYkZSZmJ3Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB QzIzMi80MTczMDA4NjU5OEQxMUVCQUVDQzgzMjFDNEY5QUUwMi9mVG9pM3RHcjhN MDVDU2dMaWJJM2JGUmZid2MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCRShaDaSFYtcjRiBrrJacIEm5HJEZnHhx9zKYYqsR527QnAKs/9Mqk q74yJhwM/e/SUVgFC0wtLBUhQTDpTn/Ra33W7SCFZcclwZ6P/0YXjftLYmgN9f4n acQwBIQxVk5uk4F9Bv+cBJq2QboLnQ2oG7wol4k2DcNd0fna5TPEFH2sTq0VBZ/D L76pSHbZdQy9uJPu4WsBpGwe+MVbihILLcnWLoMYfhlymNUeopaumiavXEa+T27o W27V5DHChuJgQGQb0cLInW/zlODmuUSTd/ZzZWnGK9pttw9Ax8GtsohriW33bQ/7 kU+2kgJXsxKsvwFyoE2YTEfwdwrisvAM -----END CERTIFICATE-----Generated at Mon Oct 20 19:41:09 2025 by rpki-client