$ rpki-client -vvf rpki.apnic.net/member_repository/A91B2131/BE4A6CD07D7211EB8CB63665C4F9AE02/FAfjHIfhFiRZ2Dw660iMl1qcI_E.mft File: FAfjHIfhFiRZ2Dw660iMl1qcI_E.mft (raw, json) Hash identifier: 8W+L8r17eBP3YJ6+xa7nre6IKZgA2fHvC8D2gH9ayfw= Subject key identifier: 01:03:6B:2E:29:7D:51:91:62:E1:B9:47:CC:6C:03:7A:0E:2B:E6:C2 Authority key identifier: 14:07:E3:1C:87:E1:16:24:59:D8:3C:3A:EB:48:8C:97:5A:9C:23:F1 Certificate issuer: /CN=A91B2131/serialNumber=1407E31C87E1162459D83C3AEB488C975A9C23F1 Certificate serial: 06BB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FAfjHIfhFiRZ2Dw660iMl1qcI_E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B2131/BE4A6CD07D7211EB8CB63665C4F9AE02/FAfjHIfhFiRZ2Dw660iMl1qcI_E.mft Manifest number: 06B5 Signing time: Sat 18 Oct 2025 23:37:52 +0000 Manifest this update: Sat 18 Oct 2025 23:37:51 +0000 Manifest next update: Sat 25 Oct 2025 23:37:51 +0000 Files and hashes: 1: FAfjHIfhFiRZ2Dw660iMl1qcI_E.crl (hash: E215CeIFx+pcZiUejNU1gbQSb+00LjX7q0BAYd43VLE=) 2: D240E2EE814D11EBB1CE367FC4F9AE02.roa (hash: OcDk0+b+7yUXsyGIwS3/BcoBm4sD7lmajtFFAPMecA4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B2131/BE4A6CD07D7211EB8CB63665C4F9AE02/FAfjHIfhFiRZ2Dw660iMl1qcI_E.crl rsync://rpki.apnic.net/member_repository/A91B2131/BE4A6CD07D7211EB8CB63665C4F9AE02/FAfjHIfhFiRZ2Dw660iMl1qcI_E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FAfjHIfhFiRZ2Dw660iMl1qcI_E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 23:37:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1723 (0x6bb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B2131, serialNumber=1407E31C87E1162459D83C3AEB488C975A9C23F1 Validity Not Before: Oct 18 23:37:51 2025 GMT Not After : Oct 25 23:37:51 2025 GMT Subject: CN=68f424d0-1e86 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:2c:5d:78:c2:30:45:fe:b5:13:42:a2:af:b9: f6:60:9a:d9:2a:68:e9:51:9c:a4:21:7b:da:95:ad: 62:b4:b8:60:e8:ad:d8:dd:3d:3f:b2:e9:a1:a9:6d: eb:59:5b:b2:d2:d0:68:fa:6d:99:fe:2b:33:6c:54: cd:19:77:97:6f:31:85:a0:03:e0:bd:a7:19:85:30: bb:b7:2a:4b:c6:8e:68:66:2d:4e:a8:46:c0:92:f3: cd:40:6f:cd:4d:c0:56:9b:35:93:56:c2:1e:50:c1: e4:5c:db:11:dc:2c:f1:a4:70:85:c9:35:9d:f7:fa: 95:76:4e:21:42:d4:6c:40:cf:5e:30:48:56:98:df: 35:5b:bb:cd:ef:a2:da:66:45:ab:16:ec:2d:3e:23: 59:fd:c1:e1:d1:c3:9a:42:98:f9:bb:59:d4:97:81: a9:2d:ad:d3:ef:6a:c0:dd:06:ec:f4:da:45:6b:e8: f1:00:b4:11:8f:d5:ce:9f:e8:ae:44:65:80:46:55: 51:09:9a:eb:ff:f1:47:dc:fc:44:f5:6d:b2:cd:9a: a6:04:8f:4b:c2:49:e2:7a:0f:cd:47:d7:60:15:2d: 5b:df:b9:ff:5e:ee:79:39:97:06:6f:8e:ee:5a:f5: 79:45:a8:cd:5a:e8:55:14:86:fd:c8:24:6d:f1:df: f3:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:03:6B:2E:29:7D:51:91:62:E1:B9:47:CC:6C:03:7A:0E:2B:E6:C2 X509v3 Authority Key Identifier: keyid:14:07:E3:1C:87:E1:16:24:59:D8:3C:3A:EB:48:8C:97:5A:9C:23:F1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B2131/BE4A6CD07D7211EB8CB63665C4F9AE02/FAfjHIfhFiRZ2Dw660iMl1qcI_E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FAfjHIfhFiRZ2Dw660iMl1qcI_E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B2131/BE4A6CD07D7211EB8CB63665C4F9AE02/FAfjHIfhFiRZ2Dw660iMl1qcI_E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 66:de:01:f7:32:28:a9:87:f9:16:de:bf:98:56:c6:6f:0d:0f: d2:bd:27:cc:2e:d6:46:4a:26:46:dc:2f:33:84:8c:7c:ca:ef: e7:0c:6a:98:47:55:be:33:eb:95:46:eb:d6:5f:9e:ef:29:89: d5:96:3e:21:e3:5c:cd:ba:96:16:08:11:32:13:eb:9b:4b:da: 18:08:80:fc:e1:96:7e:84:be:8e:5f:d6:24:45:ff:e9:a8:e4: 5f:a1:bc:27:e8:86:04:c3:00:1d:22:67:f0:16:fe:16:1f:b5: 1c:6d:c2:c9:d2:e0:7a:ee:5c:ef:29:cb:a0:69:bf:3f:a2:bd: 2a:d0:6d:7b:8c:e2:60:1e:d0:59:f1:a6:35:84:c3:72:2c:c6: 02:6d:6c:84:0d:99:08:7f:fa:91:11:49:88:13:fc:92:05:58: d9:d8:1b:e7:77:29:67:ce:37:e1:9b:70:ec:3d:56:93:29:0a: 15:b1:9d:7e:f4:c6:af:48:0f:60:22:9f:a3:53:f2:9d:06:68: d3:01:b5:6b:58:f7:39:48:25:3d:9c:0c:0e:9f:d4:e9:87:5a: c6:f6:48:65:b5:f5:a7:85:68:58:e1:eb:f4:81:e0:50:6e:c5: 00:16:c8:96:c2:14:05:29:e0:12:ff:e8:38:d9:34:ac:13:5e: 81:90:56:a0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBrswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjIxMzExMTAvBgNVBAUTKDE0MDdFMzFDODdFMTE2MjQ1OUQ4M0MzQUVCNDg4Qzk3 NUE5QzIzRjEwHhcNMjUxMDE4MjMzNzUxWhcNMjUxMDI1MjMzNzUxWjAYMRYwFAYD VQQDEw02OGY0MjRkMC0xZTg2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApixdeMIwRf61E0Kir7n2YJrZKmjpUZykIXvala1itLhg6K3Y3T0/sumhqW3r WVuy0tBo+m2Z/iszbFTNGXeXbzGFoAPgvacZhTC7typLxo5oZi1OqEbAkvPNQG/N TcBWmzWTVsIeUMHkXNsR3CzxpHCFyTWd9/qVdk4hQtRsQM9eMEhWmN81W7vN76La ZkWrFuwtPiNZ/cHh0cOaQpj5u1nUl4GpLa3T72rA3Qbs9NpFa+jxALQRj9XOn+iu RGWARlVRCZrr//FH3PxE9W2yzZqmBI9Lwknieg/NR9dgFS1b37n/Xu55OZcGb47u WvV5RajNWuhVFIb9yCRt8d/zywIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAEDay4p fVGRYuG5R8xsA3oOK+bCMB8GA1UdIwQYMBaAFBQH4xyH4RYkWdg8OutIjJdanCPx MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMjEzMS9CRTRBNkNEMDdE NzIxMUVCOENCNjM2NjVDNEY5QUUwMi9GQWZqSElmaEZpUloyRHc2NjBpTWwxcWNJ X0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZBZmpISWZoRmlSWjJEdzY2MGlNbDFxY0lfRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MjEzMS9CRTRBNkNEMDdENzIxMUVCOENCNjM2NjVDNEY5QUUwMi9GQWZqSElmaEZp UloyRHc2NjBpTWwxcWNJX0UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBm3gH3Miiph/kW3r+YVsZvDQ/SvSfMLtZGSiZG3C8zhIx8yu/nDGqY R1W+M+uVRuvWX57vKYnVlj4h41zNupYWCBEyE+ubS9oYCID84ZZ+hL6OX9YkRf/p qORfobwn6IYEwwAdImfwFv4WH7UcbcLJ0uB67lzvKcugab8/or0q0G17jOJgHtBZ 8aY1hMNyLMYCbWyEDZkIf/qREUmIE/ySBVjZ2Bvndylnzjfhm3DsPVaTKQoVsZ1+ 9MavSA9gIp+jU/KdBmjTAbVrWPc5SCU9nAwOn9Tph1rG9khltfWnhWhY4ev0geBQ bsUAFsiWwhQFKeAS/+g42TSsE16BkFag -----END CERTIFICATE-----Generated at Tue Oct 21 01:01:18 2025 by rpki-client