$ rpki-client -vvf rpki.apnic.net/member_repository/A91C93EE/6858F6880E0211EAA9B1DB65C4F9AE02/_Fbn4Hb3_QqEvsycPiKRQqCQH-w.mft File: _Fbn4Hb3_QqEvsycPiKRQqCQH-w.mft (raw, json) Hash identifier: Igui7bSYf8f/0DIpMUywgXbc8HqU18EWbxhL1295sVk= Subject key identifier: 63:B7:0F:29:DA:4F:DB:72:71:BB:8F:6B:4E:5C:E4:CD:6A:86:6C:FE Authority key identifier: FC:56:E7:E0:76:F7:FD:0A:84:BE:CC:9C:3E:22:91:42:A0:90:1F:EC Certificate issuer: /CN=A91C93EE/serialNumber=FC56E7E076F7FD0A84BECC9C3E229142A0901FEC Certificate serial: 0CD8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_Fbn4Hb3_QqEvsycPiKRQqCQH-w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C93EE/6858F6880E0211EAA9B1DB65C4F9AE02/_Fbn4Hb3_QqEvsycPiKRQqCQH-w.mft Manifest number: 0C9F Signing time: Sat 18 Oct 2025 19:20:18 +0000 Manifest this update: Sat 18 Oct 2025 19:20:17 +0000 Manifest next update: Sat 25 Oct 2025 19:20:17 +0000 Files and hashes: 1: _Fbn4Hb3_QqEvsycPiKRQqCQH-w.crl (hash: 5K5SsH5yASV7wh7y1r+t23QEdXAsxe3vCBiddsIrxRM=) 2: 34E6B680511A11F0B256FA65C4F9AE02.roa (hash: DotKGlewQf4vCmtjp0W5XPKIyQK3DWXLsRQy4LfbCHQ=) 3: B256D8FC479711F09A25BE59C4F9AE02.roa (hash: g0SoJEOW6hbapp+G2W5wkFaJTTHS/dc2FgUbvjsjuIM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C93EE/6858F6880E0211EAA9B1DB65C4F9AE02/_Fbn4Hb3_QqEvsycPiKRQqCQH-w.crl rsync://rpki.apnic.net/member_repository/A91C93EE/6858F6880E0211EAA9B1DB65C4F9AE02/_Fbn4Hb3_QqEvsycPiKRQqCQH-w.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_Fbn4Hb3_QqEvsycPiKRQqCQH-w.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 19:20:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3288 (0xcd8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C93EE, serialNumber=FC56E7E076F7FD0A84BECC9C3E229142A0901FEC Validity Not Before: Oct 18 19:20:17 2025 GMT Not After : Oct 25 19:20:17 2025 GMT Subject: CN=68f3e871-9f00 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:02:7f:cc:a1:0d:27:db:83:d8:31:dc:b5:d7: c0:d2:65:5b:1b:5f:ff:75:84:3e:72:e6:c8:f8:9e: a2:7e:f5:b2:69:ed:5c:a7:a6:43:06:be:0e:57:c8: f8:8f:04:72:3d:fb:38:07:84:11:37:f6:9d:2e:81: d5:24:13:8f:c9:98:d6:b4:80:aa:19:03:87:39:af: 00:fb:43:0f:f2:97:b1:c4:26:72:59:ce:d3:1e:17: 25:a9:43:e0:bd:c7:c2:95:79:ee:08:f0:90:1c:23: 05:0d:a7:8e:2d:43:8c:cf:3a:33:8d:42:53:4d:8f: e1:7b:0b:af:e3:1b:b3:a5:24:24:87:32:e9:92:6f: 0d:5c:62:fb:f9:33:86:e4:f4:b9:b8:ca:7c:d8:0a: 29:cf:6c:eb:c8:3d:22:61:f0:a1:99:4a:d3:be:99: 74:2d:af:69:b1:bf:b2:5f:a7:ab:0e:c2:f4:6d:5c: 40:46:3e:7f:5a:38:b1:bd:47:7c:32:cc:96:c6:71: c7:b9:83:08:66:30:9f:66:c4:a6:fe:36:d5:a4:e0: c2:e5:7b:b4:62:d7:f4:7f:9c:e9:0c:09:56:6f:6c: ce:2a:5a:fb:59:ae:2b:7b:cd:6f:d4:c6:21:1b:e6: 8a:7a:32:8f:9b:aa:8f:be:d9:ad:c5:ce:45:6a:38: 1f:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:B7:0F:29:DA:4F:DB:72:71:BB:8F:6B:4E:5C:E4:CD:6A:86:6C:FE X509v3 Authority Key Identifier: keyid:FC:56:E7:E0:76:F7:FD:0A:84:BE:CC:9C:3E:22:91:42:A0:90:1F:EC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C93EE/6858F6880E0211EAA9B1DB65C4F9AE02/_Fbn4Hb3_QqEvsycPiKRQqCQH-w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_Fbn4Hb3_QqEvsycPiKRQqCQH-w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C93EE/6858F6880E0211EAA9B1DB65C4F9AE02/_Fbn4Hb3_QqEvsycPiKRQqCQH-w.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 79:bb:dd:2d:55:05:99:0b:98:4f:f0:7f:5b:66:69:c4:e7:f0: be:84:47:29:0c:e2:a5:c2:23:34:51:a1:f8:48:79:43:86:40: 16:46:9e:0e:9b:87:72:18:cd:52:68:01:93:ac:9b:cb:a6:de: 38:c2:77:b5:7b:89:21:bd:6e:d1:4a:72:29:0a:31:e3:1b:bb: 4d:d5:62:81:b8:4b:7d:7f:5c:1b:dc:4a:7e:34:e4:bf:5c:ba: 85:d4:26:b1:99:1b:6a:d9:dd:18:3f:a6:15:ae:93:fa:b2:ac: 6f:7c:c7:c0:d6:9f:d8:3c:32:32:68:39:5c:9d:e0:6a:26:84: b9:90:64:ee:5d:68:ec:79:12:42:2a:2d:c9:c1:b5:88:f6:6c: 53:bb:63:51:92:ea:ff:a1:da:a6:49:f4:11:80:47:5c:56:6a: 7f:dd:d9:d1:4f:ce:5d:cc:36:0e:65:82:d2:9f:2a:f2:89:fa: 0f:ed:06:72:c9:38:55:cc:0e:bf:2c:9a:5c:c2:0a:24:5f:1b: e3:4e:ca:28:1c:ea:ce:9f:df:ab:f9:eb:85:60:e4:8d:d7:ba: e4:86:2e:a2:60:c9:18:6f:ce:2c:95:1b:48:18:c8:d4:45:47: 42:4c:a5:e0:9a:b4:ef:be:bc:11:c6:8e:57:71:71:ed:42:45: 73:06:90:d6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDNgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzkzRUUxMTAvBgNVBAUTKEZDNTZFN0UwNzZGN0ZEMEE4NEJFQ0M5QzNFMjI5MTQy QTA5MDFGRUMwHhcNMjUxMDE4MTkyMDE3WhcNMjUxMDI1MTkyMDE3WjAYMRYwFAYD VQQDEw02OGYzZTg3MS05ZjAwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvwJ/zKENJ9uD2DHctdfA0mVbG1//dYQ+cubI+J6ifvWyae1cp6ZDBr4OV8j4 jwRyPfs4B4QRN/adLoHVJBOPyZjWtICqGQOHOa8A+0MP8pexxCZyWc7THhclqUPg vcfClXnuCPCQHCMFDaeOLUOMzzozjUJTTY/hewuv4xuzpSQkhzLpkm8NXGL7+TOG 5PS5uMp82Aopz2zryD0iYfChmUrTvpl0La9psb+yX6erDsL0bVxARj5/WjixvUd8 MsyWxnHHuYMIZjCfZsSm/jbVpODC5Xu0Ytf0f5zpDAlWb2zOKlr7Wa4re81v1MYh G+aKejKPm6qPvtmtxc5FajgfpwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGO3Dyna T9tycbuPa05c5M1qhmz+MB8GA1UdIwQYMBaAFPxW5+B29/0KhL7MnD4ikUKgkB/s MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDOTNFRS82ODU4RjY4ODBF MDIxMUVBQTlCMURCNjVDNEY5QUUwMi9fRmJuNEhiM19RcUV2c3ljUGlLUlFxQ1FI LXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL19GYm40SGIzX1FxRXZzeWNQaUtSUXFDUUgtdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD OTNFRS82ODU4RjY4ODBFMDIxMUVBQTlCMURCNjVDNEY5QUUwMi9fRmJuNEhiM19R cUV2c3ljUGlLUlFxQ1FILXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB5u90tVQWZC5hP8H9bZmnE5/C+hEcpDOKlwiM0UaH4SHlDhkAWRp4O m4dyGM1SaAGTrJvLpt44wne1e4khvW7RSnIpCjHjG7tN1WKBuEt9f1wb3Ep+NOS/ XLqF1CaxmRtq2d0YP6YVrpP6sqxvfMfA1p/YPDIyaDlcneBqJoS5kGTuXWjseRJC Ki3JwbWI9mxTu2NRkur/odqmSfQRgEdcVmp/3dnRT85dzDYOZYLSnyryifoP7QZy yThVzA6/LJpcwgokXxvjTsooHOrOn9+r+euFYOSN17rkhi6iYMkYb84slRtIGMjU RUdCTKXgmrTvvrwRxo5XcXHtQkVzBpDW -----END CERTIFICATE-----Generated at Mon Oct 20 09:38:13 2025 by rpki-client