$ rpki-client -vvf rpki.apnic.net/member_repository/A91BDC68/56FCE08C519711F0B6E9785EC4F9AE02/fjrGkZwij5gBrPkHXZCOUS3W2jQ.mft File: fjrGkZwij5gBrPkHXZCOUS3W2jQ.mft (raw, json) Hash identifier: 0EdDdrTukJNuziHIK2+HVwNeeVMJ6wAxwTFuUpPb1jg= Subject key identifier: 82:65:10:90:D6:52:39:ED:52:87:02:AA:8A:EB:68:33:27:81:57:23 Authority key identifier: 7E:3A:C6:91:9C:22:8F:98:01:AC:F9:07:5D:90:8E:51:2D:D6:DA:34 Certificate issuer: /CN=A91BDC68/serialNumber=7E3AC6919C228F9801ACF9075D908E512DD6DA34 Certificate serial: 48 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fjrGkZwij5gBrPkHXZCOUS3W2jQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BDC68/56FCE08C519711F0B6E9785EC4F9AE02/fjrGkZwij5gBrPkHXZCOUS3W2jQ.mft Manifest number: 43 Signing time: Sun 19 Oct 2025 10:56:27 +0000 Manifest this update: Sun 19 Oct 2025 10:56:26 +0000 Manifest next update: Sun 26 Oct 2025 10:56:26 +0000 Files and hashes: 1: fjrGkZwij5gBrPkHXZCOUS3W2jQ.crl (hash: gRQxfItAUgCJpHdGjV6ErTT8JRnd8BCcdCo5aa+XXgE=) 2: 6C18BEE0519811F08E123360C4F9AE02.roa (hash: qiTyDM4L6mog1MdHqwGPY5fp1OlDtmdk/4+Gu1p7lHs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BDC68/56FCE08C519711F0B6E9785EC4F9AE02/fjrGkZwij5gBrPkHXZCOUS3W2jQ.crl rsync://rpki.apnic.net/member_repository/A91BDC68/56FCE08C519711F0B6E9785EC4F9AE02/fjrGkZwij5gBrPkHXZCOUS3W2jQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fjrGkZwij5gBrPkHXZCOUS3W2jQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 10:56:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 72 (0x48) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BDC68, serialNumber=7E3AC6919C228F9801ACF9075D908E512DD6DA34 Validity Not Before: Oct 19 10:56:26 2025 GMT Not After : Oct 26 10:56:26 2025 GMT Subject: CN=68f4c3db-2811 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:68:f3:19:01:1d:d4:8b:a0:6c:f3:19:6b:0c: 99:ce:2e:1d:a6:4b:51:06:60:74:79:40:6a:f5:b9: b9:e5:61:16:fe:81:50:06:b3:0d:a7:19:28:0e:a9: 3e:e5:18:c8:4a:d9:b3:23:bb:08:b6:7f:0d:d5:96: 68:60:68:b1:6e:5a:4d:99:08:6c:26:b1:f6:07:b4: c1:9a:d8:38:3e:e1:33:b3:72:d9:4b:11:4a:67:2e: c3:16:b3:d3:c2:c1:89:4a:f1:bd:3f:26:00:cf:f6: 8f:d9:d3:6e:90:b7:be:6b:e5:d3:ff:bb:b6:ef:0a: 90:14:fb:7a:68:a1:78:0b:ea:04:18:6b:5b:8f:68: eb:f5:12:6a:22:c0:65:c1:4e:2e:bc:96:fb:b4:9e: ca:25:e5:0a:85:a4:e8:4a:69:f0:b6:08:ed:13:79: 58:fc:94:ce:e7:40:17:af:a0:27:c5:9a:0b:c8:9d: 03:08:c5:72:f4:e0:28:d9:b4:e4:b9:0f:b9:62:3c: 0b:d1:87:c1:c3:11:b4:64:14:16:49:a1:7c:41:dd: a9:4a:52:23:14:c9:0f:c1:2d:14:3d:c9:81:7d:5f: 33:c0:46:09:d3:a1:d7:92:86:cd:8b:1d:80:24:ac: c5:72:4d:7f:64:62:78:c4:d8:87:90:9c:f2:e3:63: d4:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:65:10:90:D6:52:39:ED:52:87:02:AA:8A:EB:68:33:27:81:57:23 X509v3 Authority Key Identifier: keyid:7E:3A:C6:91:9C:22:8F:98:01:AC:F9:07:5D:90:8E:51:2D:D6:DA:34 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BDC68/56FCE08C519711F0B6E9785EC4F9AE02/fjrGkZwij5gBrPkHXZCOUS3W2jQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fjrGkZwij5gBrPkHXZCOUS3W2jQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BDC68/56FCE08C519711F0B6E9785EC4F9AE02/fjrGkZwij5gBrPkHXZCOUS3W2jQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8a:85:e8:90:17:fc:22:45:d2:75:85:bb:18:a5:0f:c8:93:6a: 67:14:90:74:8c:96:76:e5:1f:10:3d:de:f0:a6:6d:b4:d7:77: 8d:0f:2a:04:2d:12:65:8f:4c:72:82:99:15:c3:2f:c1:55:86: 37:86:1d:11:dd:67:11:7f:c9:72:7e:d9:19:a5:8c:01:d0:42: 40:eb:0f:44:ff:56:1a:42:3e:92:dc:9b:f2:65:18:fb:f6:da: b6:70:20:6b:ec:33:a0:cb:3a:57:ce:dc:f9:5f:00:ea:b6:26: de:45:dc:58:c9:ac:60:9d:6f:10:c6:f9:34:49:3b:d0:7f:48: 50:ea:60:a3:50:86:ae:57:3a:28:b4:fa:25:75:69:b4:64:6e: da:00:3e:59:78:f0:5c:11:02:0f:4f:3e:d2:07:d8:cb:4e:78: 63:e0:19:ce:26:57:d9:66:f2:b6:7a:b0:c7:f0:4c:4a:a7:c0: 08:29:af:0e:69:94:1a:90:eb:67:19:66:31:95:c0:a4:dd:02: 0f:74:9d:ec:5d:19:f5:35:5d:c5:05:a2:b7:0c:8d:5c:b9:fb: b3:12:14:83:b0:86:bc:29:31:0a:f2:c7:71:1f:ae:bc:8f:83: d5:c9:67:e6:85:08:97:73:54:39:bb:96:ba:0e:dc:d2:1e:84: 4c:6f:f9:a3 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBSDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC REM2ODExMC8GA1UEBRMoN0UzQUM2OTE5QzIyOEY5ODAxQUNGOTA3NUQ5MDhFNTEy REQ2REEzNDAeFw0yNTEwMTkxMDU2MjZaFw0yNTEwMjYxMDU2MjZaMBgxFjAUBgNV BAMTDTY4ZjRjM2RiLTI4MTEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDaaPMZAR3Ui6Bs8xlrDJnOLh2mS1EGYHR5QGr1ubnlYRb+gVAGsw2nGSgOqT7l GMhK2bMjuwi2fw3VlmhgaLFuWk2ZCGwmsfYHtMGa2Dg+4TOzctlLEUpnLsMWs9PC wYlK8b0/JgDP9o/Z026Qt75r5dP/u7bvCpAU+3pooXgL6gQYa1uPaOv1EmoiwGXB Ti68lvu0nsol5QqFpOhKafC2CO0TeVj8lM7nQBevoCfFmgvInQMIxXL04CjZtOS5 D7liPAvRh8HDEbRkFBZJoXxB3alKUiMUyQ/BLRQ9yYF9XzPARgnTodeShs2LHYAk rMVyTX9kYnjE2IeQnPLjY9TbAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUgmUQkNZS Oe1ShwKqiutoMyeBVyMwHwYDVR0jBBgwFoAUfjrGkZwij5gBrPkHXZCOUS3W2jQw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUJEQzY4LzU2RkNFMDhDNTE5 NzExRjBCNkU5Nzg1RUM0RjlBRTAyL2ZqckdrWndpajVnQnJQa0hYWkNPVVMzVzJq US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvZmpyR2tad2lqNWdCclBrSFhaQ09VUzNXMmpRLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUJE QzY4LzU2RkNFMDhDNTE5NzExRjBCNkU5Nzg1RUM0RjlBRTAyL2ZqckdrWndpajVn QnJQa0hYWkNPVVMzVzJqUS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAIqF6JAX/CJF0nWFuxilD8iTamcUkHSMlnblHxA93vCmbbTXd40PKgQt EmWPTHKCmRXDL8FVhjeGHRHdZxF/yXJ+2RmljAHQQkDrD0T/VhpCPpLcm/JlGPv2 2rZwIGvsM6DLOlfO3PlfAOq2Jt5F3FjJrGCdbxDG+TRJO9B/SFDqYKNQhq5XOii0 +iV1abRkbtoAPll48FwRAg9PPtIH2MtOeGPgGc4mV9lm8rZ6sMfwTEqnwAgprw5p lBqQ62cZZjGVwKTdAg90nexdGfU1XcUForcMjVy5+7MSFIOwhrwpMQryx3EfrryP g9XJZ+aFCJdzVDm7lroO3NIehExv+aM= -----END CERTIFICATE-----Generated at Mon Oct 20 01:44:41 2025 by rpki-client