$ rpki-client -vvf rpki.apnic.net/member_repository/A91D12C2/B2FE35DE378011EAB2141374C4F9AE02/FmUgpBWnVONYZSxXkM6GtLJjLdE.mft File: FmUgpBWnVONYZSxXkM6GtLJjLdE.mft (raw, json) Hash identifier: Bkf25o2FYsNrj3n4zuLEc5BBV/gmi0P5sQSjs9w5qtw= Subject key identifier: 45:6E:D1:29:09:B6:71:02:39:D8:6E:10:F8:0F:91:E7:D4:71:16:24 Authority key identifier: 16:65:20:A4:15:A7:54:E3:58:65:2C:57:90:CE:86:B4:B2:63:2D:D1 Certificate issuer: /CN=A91D12C2/serialNumber=166520A415A754E358652C5790CE86B4B2632DD1 Certificate serial: 0B8B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FmUgpBWnVONYZSxXkM6GtLJjLdE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D12C2/B2FE35DE378011EAB2141374C4F9AE02/FmUgpBWnVONYZSxXkM6GtLJjLdE.mft Manifest number: 0B85 Signing time: Sat 18 Oct 2025 19:52:51 +0000 Manifest this update: Sat 18 Oct 2025 19:52:50 +0000 Manifest next update: Sat 25 Oct 2025 19:52:50 +0000 Files and hashes: 1: FmUgpBWnVONYZSxXkM6GtLJjLdE.crl (hash: KC7L2HKDA6jbA+eWTdxougXhOe3/onR6n//XsjMa5oE=) 2: 6C8823E2378211EA8FE81077C4F9AE02.roa (hash: 3OliuZVliVTkOKrmZ0yV8rIfa0MivGBxDdTvZBywfOE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D12C2/B2FE35DE378011EAB2141374C4F9AE02/FmUgpBWnVONYZSxXkM6GtLJjLdE.crl rsync://rpki.apnic.net/member_repository/A91D12C2/B2FE35DE378011EAB2141374C4F9AE02/FmUgpBWnVONYZSxXkM6GtLJjLdE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FmUgpBWnVONYZSxXkM6GtLJjLdE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 19:52:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2955 (0xb8b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D12C2, serialNumber=166520A415A754E358652C5790CE86B4B2632DD1 Validity Not Before: Oct 18 19:52:50 2025 GMT Not After : Oct 25 19:52:50 2025 GMT Subject: CN=68f3f012-b31d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:c9:f3:02:58:92:6c:8a:e1:87:80:68:10:2a: 9a:d2:d6:ba:09:5c:ff:0e:80:49:e7:b2:13:dc:57: e9:be:82:1f:54:32:fb:67:c4:a8:8d:f0:48:e6:1d: c7:63:6f:8e:ed:22:04:ae:35:e9:a6:1a:a8:48:8b: 16:b5:32:3c:c5:06:9e:76:dc:04:4a:89:3e:1e:69: f9:9f:d0:79:0c:86:79:f2:ca:13:8b:0d:2f:c5:52: 90:60:c4:c9:74:34:86:68:97:c3:9a:a6:6e:4c:b0: b7:b4:12:da:cc:a7:c0:b6:8b:20:a0:14:3d:c8:52: 4e:c4:f7:84:6c:6c:04:60:28:90:f5:a2:79:55:cf: 46:52:f8:e7:ec:b0:03:6a:4f:e9:69:f8:ae:20:6c: 6a:95:88:87:e7:ce:40:6f:5b:4c:bb:1c:fb:f8:5d: 9b:5c:81:88:fb:11:06:ba:c6:54:9b:4e:5e:b7:a7: 83:67:17:a3:7d:92:17:e6:40:2f:a6:16:67:7a:be: 58:4f:be:42:53:bc:74:cc:61:c4:65:40:82:1d:97: 2b:50:c7:43:f4:29:20:d8:a2:6c:99:0b:38:f6:4f: 19:3f:40:8c:f2:42:b0:91:2c:02:4f:99:ce:05:50: 09:3f:03:56:e4:ff:83:b2:72:d8:92:1d:9a:70:63: c3:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:6E:D1:29:09:B6:71:02:39:D8:6E:10:F8:0F:91:E7:D4:71:16:24 X509v3 Authority Key Identifier: keyid:16:65:20:A4:15:A7:54:E3:58:65:2C:57:90:CE:86:B4:B2:63:2D:D1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D12C2/B2FE35DE378011EAB2141374C4F9AE02/FmUgpBWnVONYZSxXkM6GtLJjLdE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FmUgpBWnVONYZSxXkM6GtLJjLdE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D12C2/B2FE35DE378011EAB2141374C4F9AE02/FmUgpBWnVONYZSxXkM6GtLJjLdE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 94:8e:b2:81:5f:82:b2:79:3f:ad:1f:23:31:b4:81:83:a8:ce: 46:f5:94:a8:cf:b2:50:45:73:09:c6:c7:01:85:72:be:58:99: 6e:a5:9e:65:83:bb:c4:3c:b3:fa:37:8c:85:5a:bb:37:db:dc: 72:c2:a1:8a:75:2e:f2:f5:b5:71:d3:3a:bb:af:02:f6:af:90: 2d:73:d4:72:65:16:0e:b0:a8:26:6b:ae:06:3c:1a:27:1d:88: 8a:a0:a5:9f:c0:bb:d0:e1:e0:9a:44:cd:ad:c1:47:ed:c9:f8: ce:73:74:96:ed:4e:db:c2:4b:d8:8f:4f:48:31:c8:35:81:0f: 00:c8:54:e4:4e:8f:14:82:23:88:53:0e:ff:00:4d:33:c4:02: dc:6a:33:71:2d:f1:17:fb:67:08:50:9d:cb:03:8a:33:2d:a8: 1b:a2:22:58:2f:f9:ba:46:73:3d:d0:b1:84:5b:de:ec:1e:44: 1c:d0:cd:30:34:87:1a:ee:49:1a:39:94:b9:6f:e5:f3:b2:9a: 12:66:6b:32:c8:94:9f:86:41:bb:c0:ef:cf:fd:86:91:9c:20: 2f:bf:22:0d:60:fa:7d:4f:06:9c:3e:30:83:2f:2d:67:95:60: 17:d5:35:f7:a5:75:79:14:66:aa:15:2b:89:21:15:ff:97:ca: ea:2f:ae:06 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC4swDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDEyQzIxMTAvBgNVBAUTKDE2NjUyMEE0MTVBNzU0RTM1ODY1MkM1NzkwQ0U4NkI0 QjI2MzJERDEwHhcNMjUxMDE4MTk1MjUwWhcNMjUxMDI1MTk1MjUwWjAYMRYwFAYD VQQDEw02OGYzZjAxMi1iMzFkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArMnzAliSbIrhh4BoECqa0ta6CVz/DoBJ57IT3FfpvoIfVDL7Z8SojfBI5h3H Y2+O7SIErjXpphqoSIsWtTI8xQaedtwESok+Hmn5n9B5DIZ58soTiw0vxVKQYMTJ dDSGaJfDmqZuTLC3tBLazKfAtosgoBQ9yFJOxPeEbGwEYCiQ9aJ5Vc9GUvjn7LAD ak/pafiuIGxqlYiH585Ab1tMuxz7+F2bXIGI+xEGusZUm05et6eDZxejfZIX5kAv phZner5YT75CU7x0zGHEZUCCHZcrUMdD9Ckg2KJsmQs49k8ZP0CM8kKwkSwCT5nO BVAJPwNW5P+DsnLYkh2acGPDeQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEVu0SkJ tnECOdhuEPgPkefUcRYkMB8GA1UdIwQYMBaAFBZlIKQVp1TjWGUsV5DOhrSyYy3R MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMTJDMi9CMkZFMzVERTM3 ODAxMUVBQjIxNDEzNzRDNEY5QUUwMi9GbVVncEJXblZPTllaU3hYa002R3RMSmpM ZEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZtVWdwQlduVk9OWVpTeFhrTTZHdExKakxkRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MTJDMi9CMkZFMzVERTM3ODAxMUVBQjIxNDEzNzRDNEY5QUUwMi9GbVVncEJXblZP TllaU3hYa002R3RMSmpMZEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCUjrKBX4KyeT+tHyMxtIGDqM5G9ZSoz7JQRXMJxscBhXK+WJlupZ5l g7vEPLP6N4yFWrs329xywqGKdS7y9bVx0zq7rwL2r5Atc9RyZRYOsKgma64GPBon HYiKoKWfwLvQ4eCaRM2twUftyfjOc3SW7U7bwkvYj09IMcg1gQ8AyFTkTo8UgiOI Uw7/AE0zxALcajNxLfEX+2cIUJ3LA4ozLagboiJYL/m6RnM90LGEW97sHkQc0M0w NIca7kkaOZS5b+XzspoSZmsyyJSfhkG7wO/P/YaRnCAvvyINYPp9TwacPjCDLy1n lWAX1TX3pXV5FGaqFSuJIRX/l8rqL64G -----END CERTIFICATE-----Generated at Mon Oct 20 10:34:17 2025 by rpki-client