$ rpki-client -vvf rpki.apnic.net/member_repository/A91B0049/7EC909760DFC11EBB2F1381BC4F9AE02/F3JfretEo_qLMf_wpjy8UVWpB9g.mft File: F3JfretEo_qLMf_wpjy8UVWpB9g.mft (raw, json) Hash identifier: 2MN+rD9VP74cgYCM5MGsVg0WN0tW1M3Lc63TqHf1XMM= Subject key identifier: 7D:50:F6:DB:3F:4E:91:15:8A:B2:A8:E6:63:3B:4B:8C:E9:02:22:B0 Authority key identifier: 17:72:5F:AD:EB:44:A3:FA:8B:31:FF:F0:A6:3C:BC:51:55:A9:07:D8 Certificate issuer: /CN=A91B0049/serialNumber=17725FADEB44A3FA8B31FFF0A63CBC5155A907D8 Certificate serial: 07D9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F3JfretEo_qLMf_wpjy8UVWpB9g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B0049/7EC909760DFC11EBB2F1381BC4F9AE02/F3JfretEo_qLMf_wpjy8UVWpB9g.mft Manifest number: 07D3 Signing time: Sat 18 Oct 2025 22:28:09 +0000 Manifest this update: Sat 18 Oct 2025 22:28:09 +0000 Manifest next update: Sat 25 Oct 2025 22:28:09 +0000 Files and hashes: 1: F3JfretEo_qLMf_wpjy8UVWpB9g.crl (hash: R3JLRE3+yvlbwxfBQz9Fig68n3XQRCYYhXyYgdbWUhA=) 2: C6591C620DFD11EBAD63A21CC4F9AE02.roa (hash: wiuGLfhX4Abp89BeKvQrP2ym0zYLw1999qfgLcOKlHk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B0049/7EC909760DFC11EBB2F1381BC4F9AE02/F3JfretEo_qLMf_wpjy8UVWpB9g.crl rsync://rpki.apnic.net/member_repository/A91B0049/7EC909760DFC11EBB2F1381BC4F9AE02/F3JfretEo_qLMf_wpjy8UVWpB9g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F3JfretEo_qLMf_wpjy8UVWpB9g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 22:28:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2009 (0x7d9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B0049, serialNumber=17725FADEB44A3FA8B31FFF0A63CBC5155A907D8 Validity Not Before: Oct 18 22:28:09 2025 GMT Not After : Oct 25 22:28:09 2025 GMT Subject: CN=68f41479-17dc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:20:34:41:0c:68:3d:bb:b3:36:73:9d:c8:90: 00:63:42:64:56:59:0b:6d:ee:b7:c4:bb:c5:f9:04: 7e:59:96:06:dd:47:12:54:2e:bb:8e:7c:ce:c3:71: f4:ec:cb:d8:68:ba:3c:13:9c:28:8f:19:03:30:d6: ce:fd:6a:6e:08:fa:c0:fb:a5:9a:a1:e7:5f:ce:04: 58:8a:0a:fe:51:e7:b0:1b:4d:34:ab:38:35:1d:90: 4a:36:5e:d1:74:69:c0:3b:2f:96:e4:25:af:ab:e6: 71:75:c3:b1:20:67:25:97:f8:19:12:be:ca:b8:0b: ba:ea:46:2f:5d:21:2c:57:e2:21:d7:68:81:49:e1: 74:ab:92:ef:12:69:cd:c2:d5:60:f8:c6:b3:1a:c6: 26:f3:07:a2:f2:05:1d:10:62:48:a9:7c:e8:a8:11: 4d:c1:c7:1f:ec:5d:60:f0:48:3a:2b:c3:e3:6c:6e: 23:c0:db:b2:60:ea:19:5a:ac:98:5b:67:ef:3e:3e: 46:d1:2e:4c:01:08:fb:89:64:87:0f:0e:17:01:ff: 2f:38:dd:08:af:3a:28:c4:14:ff:c5:68:a4:76:b8: 82:d5:a2:54:95:6b:d8:06:8a:76:c4:fd:b4:7d:92: ce:ea:d5:d6:2a:c5:68:df:63:c9:16:f4:03:f6:fb: 73:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:50:F6:DB:3F:4E:91:15:8A:B2:A8:E6:63:3B:4B:8C:E9:02:22:B0 X509v3 Authority Key Identifier: keyid:17:72:5F:AD:EB:44:A3:FA:8B:31:FF:F0:A6:3C:BC:51:55:A9:07:D8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B0049/7EC909760DFC11EBB2F1381BC4F9AE02/F3JfretEo_qLMf_wpjy8UVWpB9g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F3JfretEo_qLMf_wpjy8UVWpB9g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B0049/7EC909760DFC11EBB2F1381BC4F9AE02/F3JfretEo_qLMf_wpjy8UVWpB9g.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4f:1c:fe:66:4b:74:7f:ef:54:0f:a9:a4:ae:b3:c1:c0:0c:c9: f4:b5:a2:ee:f7:ed:e2:5b:07:8d:f4:e0:8a:0e:80:c6:b0:fc: 0d:1a:e6:b8:9f:be:b3:63:78:69:ea:22:87:74:ca:30:67:7e: 56:8b:68:f4:a4:03:07:f5:0d:20:f6:71:40:bd:db:be:23:50: 51:5c:2b:6a:e6:d0:d0:8e:2b:21:cf:e9:88:99:d1:74:40:c6: 32:64:82:98:13:b4:33:b0:b2:37:ec:ee:d0:d0:fe:99:96:50: 35:b8:15:32:ab:0d:6e:90:19:c0:bd:82:63:86:e4:b2:0a:86: 88:c9:15:91:5e:70:6e:42:fc:b3:1d:b1:4f:62:85:7a:51:16: 58:e4:2e:c5:f6:0c:1f:9d:0b:19:93:15:a5:b8:4e:6b:24:d2: 93:89:ba:76:99:53:e1:24:fa:20:5d:eb:f8:48:d2:1e:3a:71: 47:bd:91:e1:e4:34:a0:4a:58:ed:47:e1:de:b8:45:ac:cd:2e: 54:c7:e4:b4:e4:1a:63:af:11:77:f4:26:bf:bb:c8:72:a2:60: ef:ad:46:6a:3e:28:16:60:fe:b9:2f:a4:29:d4:d6:08:12:e3: f0:65:ec:b3:4c:f0:a8:42:f7:55:03:ad:48:99:bc:eb:ac:ec: 6f:7b:3f:63 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB9kwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjAwNDkxMTAvBgNVBAUTKDE3NzI1RkFERUI0NEEzRkE4QjMxRkZGMEE2M0NCQzUx NTVBOTA3RDgwHhcNMjUxMDE4MjIyODA5WhcNMjUxMDI1MjIyODA5WjAYMRYwFAYD VQQDEw02OGY0MTQ3OS0xN2RjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2CA0QQxoPbuzNnOdyJAAY0JkVlkLbe63xLvF+QR+WZYG3UcSVC67jnzOw3H0 7MvYaLo8E5wojxkDMNbO/WpuCPrA+6WaoedfzgRYigr+UeewG000qzg1HZBKNl7R dGnAOy+W5CWvq+ZxdcOxIGcll/gZEr7KuAu66kYvXSEsV+Ih12iBSeF0q5LvEmnN wtVg+MazGsYm8wei8gUdEGJIqXzoqBFNwccf7F1g8Eg6K8PjbG4jwNuyYOoZWqyY W2fvPj5G0S5MAQj7iWSHDw4XAf8vON0IrzooxBT/xWikdriC1aJUlWvYBop2xP20 fZLO6tXWKsVo32PJFvQD9vtzjQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFH1Q9ts/ TpEVirKo5mM7S4zpAiKwMB8GA1UdIwQYMBaAFBdyX63rRKP6izH/8KY8vFFVqQfY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMDA0OS83RUM5MDk3NjBE RkMxMUVCQjJGMTM4MUJDNEY5QUUwMi9GM0pmcmV0RW9fcUxNZl93cGp5OFVWV3BC OWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0YzSmZyZXRFb19xTE1mX3dwank4VVZXcEI5Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MDA0OS83RUM5MDk3NjBERkMxMUVCQjJGMTM4MUJDNEY5QUUwMi9GM0pmcmV0RW9f cUxNZl93cGp5OFVWV3BCOWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBPHP5mS3R/71QPqaSus8HADMn0taLu9+3iWweN9OCKDoDGsPwNGua4 n76zY3hp6iKHdMowZ35Wi2j0pAMH9Q0g9nFAvdu+I1BRXCtq5tDQjishz+mImdF0 QMYyZIKYE7QzsLI37O7Q0P6ZllA1uBUyqw1ukBnAvYJjhuSyCoaIyRWRXnBuQvyz HbFPYoV6URZY5C7F9gwfnQsZkxWluE5rJNKTibp2mVPhJPogXev4SNIeOnFHvZHh 5DSgSljtR+HeuEWszS5Ux+S05BpjrxF39Ca/u8hyomDvrUZqPigWYP65L6Qp1NYI EuPwZeyzTPCoQvdVA61ImbzrrOxvez9j -----END CERTIFICATE-----Generated at Sun Oct 19 23:32:10 2025 by rpki-client