$ rpki-client -vvf rpki.apnic.net/member_repository/A91B2BC9/66D37AA6915611ED8D4B773DC4F9AE02/fsx3osytqtpjQvwPRGkYdeo_koc.mft File: fsx3osytqtpjQvwPRGkYdeo_koc.mft (raw, json) Hash identifier: 2OLArHlBHgzeryyBC+TVEmYucbh2zvlCVFIP9gwS/o4= Subject key identifier: DD:57:BF:78:E9:04:50:89:2F:CA:7D:B7:EC:4C:BE:37:66:1A:F4:15 Authority key identifier: 7E:CC:77:A2:CC:AD:AA:DA:63:42:FC:0F:44:69:18:75:EA:3F:92:87 Certificate issuer: /CN=A91B2BC9/serialNumber=7ECC77A2CCADAADA6342FC0F44691875EA3F9287 Certificate serial: 020A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fsx3osytqtpjQvwPRGkYdeo_koc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B2BC9/66D37AA6915611ED8D4B773DC4F9AE02/fsx3osytqtpjQvwPRGkYdeo_koc.mft Manifest number: 0206 Signing time: Sun 19 Oct 2025 04:41:08 +0000 Manifest this update: Sun 19 Oct 2025 04:41:07 +0000 Manifest next update: Sun 26 Oct 2025 04:41:07 +0000 Files and hashes: 1: fsx3osytqtpjQvwPRGkYdeo_koc.crl (hash: gAE6goMFxCfEA2hLMqc2OtbuX1skmaW8FVF+Zj8tF7o=) 2: 044E6658915A11ED8D2FBE43C4F9AE02.roa (hash: 5eORjOKdJA5R5JqKv9kUobgVioj38QF3cQAhkx2yC1U=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B2BC9/66D37AA6915611ED8D4B773DC4F9AE02/fsx3osytqtpjQvwPRGkYdeo_koc.crl rsync://rpki.apnic.net/member_repository/A91B2BC9/66D37AA6915611ED8D4B773DC4F9AE02/fsx3osytqtpjQvwPRGkYdeo_koc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fsx3osytqtpjQvwPRGkYdeo_koc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 04:41:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 522 (0x20a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B2BC9, serialNumber=7ECC77A2CCADAADA6342FC0F44691875EA3F9287 Validity Not Before: Oct 19 04:41:07 2025 GMT Not After : Oct 26 04:41:07 2025 GMT Subject: CN=68f46be4-6da0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:d5:9c:fd:bd:6f:06:ff:03:4a:d8:02:aa:86: a3:2d:2e:90:43:65:05:94:3d:ce:72:71:48:4f:29: 6d:d5:07:4e:c1:ef:79:b9:6c:91:9f:8d:70:b1:59: 7f:59:98:e0:4b:f9:d0:cd:fa:ad:a8:2a:9d:a6:f5: 56:3e:1f:13:32:88:61:fa:ca:e5:0f:5d:d8:f6:8f: af:1e:a7:40:e5:83:e4:7a:70:fe:ac:07:f2:42:63: 00:86:be:02:e7:78:ff:22:be:5b:5d:0e:44:69:d8: 43:65:2c:85:c8:2a:f7:ec:80:cf:98:8e:bb:df:3c: e8:2e:65:0c:49:31:e3:12:6d:65:aa:2d:7e:e8:9c: ef:5f:a4:71:75:96:80:d1:22:45:7e:f8:6f:58:fa: 7e:6d:c9:29:c7:18:d4:38:7b:a6:e8:77:6a:06:23: 25:7c:99:dd:ad:27:cf:7c:62:e0:9e:56:e7:59:0b: aa:d4:73:33:3c:e5:ce:9d:99:f1:32:4b:32:54:54: e3:a6:3b:af:30:7a:e3:4f:f0:67:3f:db:34:bf:af: 7b:03:b0:78:0e:2f:e8:4a:2f:35:5a:9b:2d:01:c0: 04:6f:8e:ce:82:3c:34:10:7e:3f:a7:05:c6:7c:0f: ed:76:f0:fd:6e:78:73:d2:fc:38:91:8c:e8:5f:bb: f3:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:57:BF:78:E9:04:50:89:2F:CA:7D:B7:EC:4C:BE:37:66:1A:F4:15 X509v3 Authority Key Identifier: keyid:7E:CC:77:A2:CC:AD:AA:DA:63:42:FC:0F:44:69:18:75:EA:3F:92:87 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B2BC9/66D37AA6915611ED8D4B773DC4F9AE02/fsx3osytqtpjQvwPRGkYdeo_koc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fsx3osytqtpjQvwPRGkYdeo_koc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B2BC9/66D37AA6915611ED8D4B773DC4F9AE02/fsx3osytqtpjQvwPRGkYdeo_koc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 09:7b:fa:d2:08:6d:b5:d5:2b:26:e6:96:8f:26:16:cc:e1:9b: dc:8d:0a:2f:c8:89:bf:4d:30:dd:9f:4e:1c:20:4f:32:47:de: 61:95:b7:82:7a:df:f9:38:9a:26:9d:81:7b:cd:04:f6:ae:14: f6:67:ec:ee:1f:4d:b2:ab:66:b4:83:59:e1:fb:45:3f:dd:f8: d2:30:2b:e9:66:31:36:62:b4:cc:ec:75:fa:73:c0:32:bc:31: 43:44:b6:95:d7:12:05:c8:6b:cd:11:30:0b:d2:54:30:ba:f5: 64:5d:db:a6:cc:3c:0f:33:47:55:3c:f5:eb:62:f4:2c:9a:71: a3:56:95:74:6d:c5:22:cb:ff:ab:c4:50:64:d3:9e:ed:7e:a2: 21:a5:07:2b:0c:74:8f:89:c2:15:83:c3:5a:6e:e0:bf:0d:a2: 3a:5b:95:22:bc:90:f6:d3:7c:cf:15:79:37:5a:5d:ff:06:aa: ba:f5:2c:bd:79:11:fd:fa:31:73:94:cb:8e:5a:07:6e:46:9d: 90:19:51:6d:bf:1f:ab:fe:b1:26:48:82:0d:e2:fd:0d:ed:c2: 72:a7:9e:9d:79:09:e0:fb:96:1c:5f:94:b0:cf:18:fd:e8:b6: 1e:24:0d:c0:09:1d:ff:01:69:7d:66:2e:f8:f9:d2:34:7d:6c: 70:ee:85:a5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAgowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjJCQzkxMTAvBgNVBAUTKDdFQ0M3N0EyQ0NBREFBREE2MzQyRkMwRjQ0NjkxODc1 RUEzRjkyODcwHhcNMjUxMDE5MDQ0MTA3WhcNMjUxMDI2MDQ0MTA3WjAYMRYwFAYD VQQDEw02OGY0NmJlNC02ZGEwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAutWc/b1vBv8DStgCqoajLS6QQ2UFlD3OcnFITylt1QdOwe95uWyRn41wsVl/ WZjgS/nQzfqtqCqdpvVWPh8TMohh+srlD13Y9o+vHqdA5YPkenD+rAfyQmMAhr4C 53j/Ir5bXQ5EadhDZSyFyCr37IDPmI673zzoLmUMSTHjEm1lqi1+6JzvX6RxdZaA 0SJFfvhvWPp+bckpxxjUOHum6HdqBiMlfJndrSfPfGLgnlbnWQuq1HMzPOXOnZnx MksyVFTjpjuvMHrjT/BnP9s0v697A7B4Di/oSi81WpstAcAEb47Ogjw0EH4/pwXG fA/tdvD9bnhz0vw4kYzoX7vzQQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFN1Xv3jp BFCJL8p9t+xMvjdmGvQVMB8GA1UdIwQYMBaAFH7Md6LMraraY0L8D0RpGHXqP5KH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMkJDOS82NkQzN0FBNjkx NTYxMUVEOEQ0Qjc3M0RDNEY5QUUwMi9mc3gzb3N5dHF0cGpRdndQUkdrWWRlb19r b2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ZzeDNvc3l0cXRwalF2d1BSR2tZZGVvX2tvYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MkJDOS82NkQzN0FBNjkxNTYxMUVEOEQ0Qjc3M0RDNEY5QUUwMi9mc3gzb3N5dHF0 cGpRdndQUkdrWWRlb19rb2MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAJe/rSCG211Ssm5paPJhbM4ZvcjQovyIm/TTDdn04cIE8yR95hlbeC et/5OJomnYF7zQT2rhT2Z+zuH02yq2a0g1nh+0U/3fjSMCvpZjE2YrTM7HX6c8Ay vDFDRLaV1xIFyGvNETAL0lQwuvVkXdumzDwPM0dVPPXrYvQsmnGjVpV0bcUiy/+r xFBk057tfqIhpQcrDHSPicIVg8NabuC/DaI6W5UivJD203zPFXk3Wl3/Bqq69Sy9 eRH9+jFzlMuOWgduRp2QGVFtvx+r/rEmSIIN4v0N7cJyp56deQng+5YcX5Swzxj9 6LYeJA3ACR3/AWl9Zi74+dI0fWxw7oWl -----END CERTIFICATE-----Generated at Mon Oct 20 06:58:09 2025 by rpki-client