$ rpki-client -vvf rpki.apnic.net/member_repository/A91CDB75/DCD2D494BB7711EEAAD7B241C4F9AE02/FYg0tWOnwztJgzS8-jD41rZ03J4.mft File: FYg0tWOnwztJgzS8-jD41rZ03J4.mft (raw, json) Hash identifier: 2qkdamzKU1jLd/K4ULELQHnLoitqA9oWIN6QZZPCvfM= Subject key identifier: 8E:A5:A2:F3:D5:63:D9:2E:F4:A3:69:27:07:D3:52:B7:04:6D:51:AA Authority key identifier: 15:88:34:B5:63:A7:C3:3B:49:83:34:BC:FA:30:F8:D6:B6:74:DC:9E Certificate issuer: /CN=A91CDB75/serialNumber=158834B563A7C33B498334BCFA30F8D6B674DC9E Certificate serial: 014B Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FYg0tWOnwztJgzS8-jD41rZ03J4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CDB75/DCD2D494BB7711EEAAD7B241C4F9AE02/FYg0tWOnwztJgzS8-jD41rZ03J4.mft Manifest number: 0147 Signing time: Sun 19 Oct 2025 07:06:24 +0000 Manifest this update: Sun 19 Oct 2025 07:06:24 +0000 Manifest next update: Sun 26 Oct 2025 07:06:24 +0000 Files and hashes: 1: FYg0tWOnwztJgzS8-jD41rZ03J4.crl (hash: sNR5Mhvh3IWc3KIM4OpZ5g+a+xCftri0r1OH1i2iJXc=) 2: C5589FB4BF9C11EEAAE7743EC4F9AE02.roa (hash: dUufcGrEf1g89p6hQjifaNkQf1XSBUMLG147+uIrEko=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CDB75/DCD2D494BB7711EEAAD7B241C4F9AE02/FYg0tWOnwztJgzS8-jD41rZ03J4.crl rsync://rpki.apnic.net/member_repository/A91CDB75/DCD2D494BB7711EEAAD7B241C4F9AE02/FYg0tWOnwztJgzS8-jD41rZ03J4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FYg0tWOnwztJgzS8-jD41rZ03J4.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 07:06:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 331 (0x14b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CDB75, serialNumber=158834B563A7C33B498334BCFA30F8D6B674DC9E Validity Not Before: Oct 19 07:06:24 2025 GMT Not After : Oct 26 07:06:24 2025 GMT Subject: CN=68f48df0-4fdb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:b2:89:76:6b:58:f7:08:27:39:d6:c9:84:da: fa:c0:99:e2:bf:94:7f:d6:8b:7f:da:70:3d:c6:62: d3:d3:61:d2:e0:a3:11:92:59:52:8a:4c:6f:e3:49: de:7d:f6:62:5a:53:0a:db:7d:f6:ca:d1:0c:60:6b: d0:43:26:8d:d4:6b:95:22:8d:6a:f7:ba:ba:69:2d: 4c:ac:f3:d6:f1:c8:27:b4:88:e4:7e:86:ca:c0:2b: ee:2b:84:2a:20:61:59:36:8a:1b:98:42:f4:bb:ae: cf:9e:69:ed:7f:7d:89:ac:dc:9e:26:98:e2:a3:02: 1d:90:70:d4:1d:29:07:80:ed:eb:05:d2:72:94:8a: 69:24:2c:07:99:7a:0b:63:b7:c4:01:61:c9:e5:d6: f9:29:4a:ed:e9:05:dc:2f:06:a5:bb:c7:84:d3:d7: bd:e4:94:61:2a:99:7d:59:4e:3a:cd:c6:24:f7:cd: 7c:4a:7d:49:a7:e0:10:b0:6f:7e:44:2c:cb:41:ee: e1:c4:12:e5:f8:07:99:cb:67:dd:e5:28:dc:51:aa: 08:5b:ee:52:a0:ef:f0:8d:07:ee:de:7d:6d:52:17: aa:30:6c:51:8f:4f:64:04:c3:c3:21:4e:ab:0d:4b: 9c:34:33:2a:ff:59:11:2a:b4:16:a9:5c:fd:8d:9c: e4:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:A5:A2:F3:D5:63:D9:2E:F4:A3:69:27:07:D3:52:B7:04:6D:51:AA X509v3 Authority Key Identifier: keyid:15:88:34:B5:63:A7:C3:3B:49:83:34:BC:FA:30:F8:D6:B6:74:DC:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CDB75/DCD2D494BB7711EEAAD7B241C4F9AE02/FYg0tWOnwztJgzS8-jD41rZ03J4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FYg0tWOnwztJgzS8-jD41rZ03J4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CDB75/DCD2D494BB7711EEAAD7B241C4F9AE02/FYg0tWOnwztJgzS8-jD41rZ03J4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 46:5a:c3:ac:70:c6:63:17:0f:db:74:d3:0d:30:dc:f8:5a:94: 98:6f:0d:fb:1a:00:0b:a7:3c:81:bc:3e:9b:ff:3d:0e:66:b5: 3e:76:37:ba:c6:f5:e5:4a:51:40:23:8a:6e:df:52:33:3e:b3: f1:22:ac:e0:8c:2c:c7:02:b1:b4:13:9f:88:91:e4:98:71:91: 03:1a:0c:37:cb:21:70:f3:1a:02:ac:4b:eb:7f:d7:40:56:01: 3e:b6:1e:3f:17:ae:55:03:fd:83:91:f0:07:bf:c1:9c:55:99: 34:68:8d:d0:a9:65:34:b4:6e:7e:50:65:d9:4a:5f:38:a8:e7: 8c:1e:51:18:df:88:63:81:52:0a:b8:9e:da:59:52:c1:cd:f5: ae:4e:e2:1b:88:0a:bf:c5:62:ba:e5:5f:96:cb:89:d7:77:f7: a1:32:20:f1:26:55:22:59:38:b5:c0:b8:90:ab:bf:83:d6:3b: 4e:48:09:b8:02:ad:64:2a:ce:00:0c:bb:11:d6:c7:d9:1c:f5: 8e:11:c2:7a:e5:c7:dd:2d:b8:b8:77:a2:b6:72:ce:42:26:9c: b5:12:ab:fa:ec:1c:30:60:2c:50:c9:89:a8:7b:16:ff:28:42: 7b:b5:f7:d2:2e:d4:cb:33:e7:de:5c:a0:6d:91:1e:18:3d:57: ba:46:64:b3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAUswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0RCNzUxMTAvBgNVBAUTKDE1ODgzNEI1NjNBN0MzM0I0OTgzMzRCQ0ZBMzBGOEQ2 QjY3NERDOUUwHhcNMjUxMDE5MDcwNjI0WhcNMjUxMDI2MDcwNjI0WjAYMRYwFAYD VQQDEw02OGY0OGRmMC00ZmRiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmrKJdmtY9wgnOdbJhNr6wJniv5R/1ot/2nA9xmLT02HS4KMRkllSikxv40ne ffZiWlMK2332ytEMYGvQQyaN1GuVIo1q97q6aS1MrPPW8cgntIjkfobKwCvuK4Qq IGFZNoobmEL0u67Pnmntf32JrNyeJpjiowIdkHDUHSkHgO3rBdJylIppJCwHmXoL Y7fEAWHJ5db5KUrt6QXcLwalu8eE09e95JRhKpl9WU46zcYk9818Sn1Jp+AQsG9+ RCzLQe7hxBLl+AeZy2fd5SjcUaoIW+5SoO/wjQfu3n1tUheqMGxRj09kBMPDIU6r DUucNDMq/1kRKrQWqVz9jZzkywIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFI6lovPV Y9ku9KNpJwfTUrcEbVGqMB8GA1UdIwQYMBaAFBWINLVjp8M7SYM0vPow+Na2dNye MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDREI3NS9EQ0QyRDQ5NEJC NzcxMUVFQUFEN0IyNDFDNEY5QUUwMi9GWWcwdFdPbnd6dEpnelM4LWpENDFyWjAz SjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0ZZZzB0V09ud3p0Smd6UzgtakQ0MXJaMDNKNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD REI3NS9EQ0QyRDQ5NEJCNzcxMUVFQUFEN0IyNDFDNEY5QUUwMi9GWWcwdFdPbnd6 dEpnelM4LWpENDFyWjAzSjQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBGWsOscMZjFw/bdNMNMNz4WpSYbw37GgALpzyBvD6b/z0OZrU+dje6 xvXlSlFAI4pu31IzPrPxIqzgjCzHArG0E5+IkeSYcZEDGgw3yyFw8xoCrEvrf9dA VgE+th4/F65VA/2DkfAHv8GcVZk0aI3QqWU0tG5+UGXZSl84qOeMHlEY34hjgVIK uJ7aWVLBzfWuTuIbiAq/xWK65V+Wy4nXd/ehMiDxJlUiWTi1wLiQq7+D1jtOSAm4 Aq1kKs4ADLsR1sfZHPWOEcJ65cfdLbi4d6K2cs5CJpy1Eqv67BwwYCxQyYmoexb/ KEJ7tffSLtTLM+feXKBtkR4YPVe6RmSz -----END CERTIFICATE-----Generated at Mon Oct 20 23:34:20 2025 by rpki-client