$ rpki-client -vvf rpki.apnic.net/member_repository/A91C66D4/BD9875027A8E11EBA90CCE22C4F9AE02/Fa9eqD_fKJoNZhz127iziIvHWOs.mft File: Fa9eqD_fKJoNZhz127iziIvHWOs.mft (raw, json) Hash identifier: f1jysCsCeW1z9FsV3DiS3bT3xXg9NvRAoj6fyawu8lg= Subject key identifier: 64:7E:25:21:83:65:95:DD:C3:DB:EF:7B:D2:7D:57:E8:0E:D4:6E:6F Authority key identifier: 15:AF:5E:A8:3F:DF:28:9A:0D:66:1C:F5:DB:B8:B3:88:8B:C7:58:EB Certificate issuer: /CN=A91C66D4/serialNumber=15AF5EA83FDF289A0D661CF5DBB8B3888BC758EB Certificate serial: 06C9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fa9eqD_fKJoNZhz127iziIvHWOs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C66D4/BD9875027A8E11EBA90CCE22C4F9AE02/Fa9eqD_fKJoNZhz127iziIvHWOs.mft Manifest number: 06C1 Signing time: Sat 18 Oct 2025 23:33:34 +0000 Manifest this update: Sat 18 Oct 2025 23:33:34 +0000 Manifest next update: Sat 25 Oct 2025 23:33:34 +0000 Files and hashes: 1: Fa9eqD_fKJoNZhz127iziIvHWOs.crl (hash: hV0z5Wb6VO4WDBnKPhRguXrPMKa+MGEatVzjLqe5GNg=) 2: A33A3E10755611ED9BD81B73C4F9AE02.roa (hash: CJrC42fEHsl4a4F29xS9BQgj5clgqDLXG0TYmKNYKAw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C66D4/BD9875027A8E11EBA90CCE22C4F9AE02/Fa9eqD_fKJoNZhz127iziIvHWOs.crl rsync://rpki.apnic.net/member_repository/A91C66D4/BD9875027A8E11EBA90CCE22C4F9AE02/Fa9eqD_fKJoNZhz127iziIvHWOs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fa9eqD_fKJoNZhz127iziIvHWOs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 23:33:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1737 (0x6c9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C66D4, serialNumber=15AF5EA83FDF289A0D661CF5DBB8B3888BC758EB Validity Not Before: Oct 18 23:33:34 2025 GMT Not After : Oct 25 23:33:34 2025 GMT Subject: CN=68f423ce-a7ec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:65:bb:d1:5f:40:90:a8:90:74:84:7d:94:67: 07:3c:cc:98:eb:02:1a:6c:52:c9:1e:e8:7c:c2:86: 22:66:d3:64:d2:c7:c3:42:be:b8:31:5c:76:e1:8c: 10:d5:7e:31:38:c4:4b:5b:c1:e4:22:a4:10:6e:b0: 1d:a0:ae:2c:aa:15:40:80:f1:83:54:fa:0b:0a:59: 87:f8:fa:38:90:fe:33:58:99:cf:ca:ff:07:6e:bf: d9:aa:4c:f8:fc:01:e0:37:d7:05:ba:09:ad:01:98: ac:8a:af:2e:4f:0a:f4:4f:86:12:d6:f9:65:d3:60: 90:67:d8:01:82:1f:e6:cd:9a:60:06:0b:30:7e:da: 0b:c5:4b:a1:9f:a6:5f:e0:d9:50:3e:45:f9:a7:05: 12:6f:16:e9:77:c6:08:8e:72:3c:bc:6e:61:fe:2e: 7f:e9:70:b1:c7:c6:3f:53:81:a9:aa:a6:af:ab:f2: 57:d1:d2:27:99:74:1a:cf:7f:a9:b4:45:b4:f4:cc: ad:25:b0:7f:aa:c2:d3:d6:b2:ab:3d:06:15:c7:42: 59:63:e0:7d:84:29:63:e3:e4:ff:23:66:62:5f:9c: 98:4a:ed:d4:86:ea:02:81:11:f0:da:63:7a:9a:8d: f5:e3:e4:3b:45:b6:c2:01:32:81:e7:f7:69:21:28: 12:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:7E:25:21:83:65:95:DD:C3:DB:EF:7B:D2:7D:57:E8:0E:D4:6E:6F X509v3 Authority Key Identifier: keyid:15:AF:5E:A8:3F:DF:28:9A:0D:66:1C:F5:DB:B8:B3:88:8B:C7:58:EB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C66D4/BD9875027A8E11EBA90CCE22C4F9AE02/Fa9eqD_fKJoNZhz127iziIvHWOs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fa9eqD_fKJoNZhz127iziIvHWOs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C66D4/BD9875027A8E11EBA90CCE22C4F9AE02/Fa9eqD_fKJoNZhz127iziIvHWOs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 34:8a:52:22:01:f7:dd:2c:0a:f1:c3:e0:b5:02:e8:7d:f4:40: b3:57:d3:e7:67:70:54:97:84:af:5a:c4:dc:b6:4b:48:a4:bb: 20:72:c1:aa:dd:4d:4e:7e:59:1a:45:6c:cf:f4:3f:c9:4c:c0: 7f:e1:03:01:2d:f1:6a:e6:4d:49:67:8b:03:98:b9:aa:24:89: 00:aa:ee:6c:54:d1:89:14:d0:e2:7c:05:88:6c:d7:55:49:19: 88:01:65:2f:a6:ef:0f:59:86:e7:11:ca:fc:79:bb:76:03:ae: d4:83:88:64:87:ee:29:d1:c4:93:73:1c:12:0c:3a:20:da:aa: 0d:62:2d:9e:c0:7b:0b:cf:17:99:07:b7:90:71:48:ac:40:22: d2:b8:86:96:89:c1:4c:33:ae:e7:ee:d3:06:b5:56:f9:11:05: b3:ef:1e:8f:d5:15:86:76:f3:d9:18:5b:d5:cd:04:05:49:ac: 3e:e2:98:fe:61:21:30:06:a6:e9:a5:8f:fa:f7:70:f3:3a:81: 67:62:96:9e:be:0a:80:bf:ab:64:c0:af:7c:ed:dd:0e:c5:d5: 48:19:e3:82:5f:0b:65:3c:e3:f5:21:b3:30:70:43:69:6c:1f: 99:bb:aa:66:91:1e:66:8a:86:a3:86:2c:d1:66:22:d6:65:7f: 4b:fa:ab:17 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBskwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzY2RDQxMTAvBgNVBAUTKDE1QUY1RUE4M0ZERjI4OUEwRDY2MUNGNURCQjhCMzg4 OEJDNzU4RUIwHhcNMjUxMDE4MjMzMzM0WhcNMjUxMDI1MjMzMzM0WjAYMRYwFAYD VQQDEw02OGY0MjNjZS1hN2VjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAumW70V9AkKiQdIR9lGcHPMyY6wIabFLJHuh8woYiZtNk0sfDQr64MVx24YwQ 1X4xOMRLW8HkIqQQbrAdoK4sqhVAgPGDVPoLClmH+Po4kP4zWJnPyv8Hbr/Zqkz4 /AHgN9cFugmtAZisiq8uTwr0T4YS1vll02CQZ9gBgh/mzZpgBgswftoLxUuhn6Zf 4NlQPkX5pwUSbxbpd8YIjnI8vG5h/i5/6XCxx8Y/U4Gpqqavq/JX0dInmXQaz3+p tEW09MytJbB/qsLT1rKrPQYVx0JZY+B9hClj4+T/I2ZiX5yYSu3UhuoCgRHw2mN6 mo314+Q7RbbCATKB5/dpISgSDQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGR+JSGD ZZXdw9vve9J9V+gO1G5vMB8GA1UdIwQYMBaAFBWvXqg/3yiaDWYc9du4s4iLx1jr MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNjZENC9CRDk4NzUwMjdB OEUxMUVCQTkwQ0NFMjJDNEY5QUUwMi9GYTllcURfZktKb05aaHoxMjdpemlJdkhX T3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZhOWVxRF9mS0pvTlpoejEyN2l6aUl2SFdPcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NjZENC9CRDk4NzUwMjdBOEUxMUVCQTkwQ0NFMjJDNEY5QUUwMi9GYTllcURfZktK b05aaHoxMjdpemlJdkhXT3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA0ilIiAffdLArxw+C1Auh99ECzV9PnZ3BUl4SvWsTctktIpLsgcsGq 3U1OflkaRWzP9D/JTMB/4QMBLfFq5k1JZ4sDmLmqJIkAqu5sVNGJFNDifAWIbNdV SRmIAWUvpu8PWYbnEcr8ebt2A67Ug4hkh+4p0cSTcxwSDDog2qoNYi2ewHsLzxeZ B7eQcUisQCLSuIaWicFMM67n7tMGtVb5EQWz7x6P1RWGdvPZGFvVzQQFSaw+4pj+ YSEwBqbppY/693DzOoFnYpaevgqAv6tkwK987d0OxdVIGeOCXwtlPOP1IbMwcENp bB+Zu6pmkR5mioajhizRZiLWZX9L+qsX -----END CERTIFICATE-----Generated at Mon Oct 20 04:49:52 2025 by rpki-client