$ rpki-client -vvf rpki.apnic.net/member_repository/A91D9785/47DF9CEC56EC11E7BAD48D3BC4F9AE02/ft761lb9iDJvbfriSHAQWAQCo18.mft File: ft761lb9iDJvbfriSHAQWAQCo18.mft (raw, json) Hash identifier: wm/MhuO/kh27LeGIygkbUYChzADIO+eCHqoQ8qs1Uxw= Subject key identifier: F0:64:32:5E:EC:FD:4F:BC:36:98:66:DC:C3:6D:E0:F2:B8:11:FA:3F Authority key identifier: 7E:DE:FA:D6:56:FD:88:32:6F:6D:FA:E2:48:70:10:58:04:02:A3:5F Certificate issuer: /CN=A91D9785/serialNumber=7EDEFAD656FD88326F6DFAE2487010580402A35F Certificate serial: 1A58 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ft761lb9iDJvbfriSHAQWAQCo18.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D9785/47DF9CEC56EC11E7BAD48D3BC4F9AE02/ft761lb9iDJvbfriSHAQWAQCo18.mft Manifest number: 1A43 Signing time: Sat 18 Oct 2025 16:43:24 +0000 Manifest this update: Sat 18 Oct 2025 16:43:24 +0000 Manifest next update: Sat 25 Oct 2025 16:43:24 +0000 Files and hashes: 1: ft761lb9iDJvbfriSHAQWAQCo18.crl (hash: 2R0MnqhyvlvJ9h+23klzl2NKvbWdLJPFJMp/Y+vzfMY=) 2: CBCD905AA6E811EFB43BBB4EC4F9AE02.roa (hash: /HeNZUmasiA1sFyQ07qK6IR+x8tI1Ek4b4MMz3sVfn8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D9785/47DF9CEC56EC11E7BAD48D3BC4F9AE02/ft761lb9iDJvbfriSHAQWAQCo18.crl rsync://rpki.apnic.net/member_repository/A91D9785/47DF9CEC56EC11E7BAD48D3BC4F9AE02/ft761lb9iDJvbfriSHAQWAQCo18.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ft761lb9iDJvbfriSHAQWAQCo18.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 16:43:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6744 (0x1a58) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D9785, serialNumber=7EDEFAD656FD88326F6DFAE2487010580402A35F Validity Not Before: Oct 18 16:43:24 2025 GMT Not After : Oct 25 16:43:24 2025 GMT Subject: CN=68f3c3ac-a6eb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:88:7d:9d:7f:48:95:a0:28:79:c6:73:93:fa: e5:95:91:7a:e3:62:dd:4e:d8:1c:78:0b:e3:c3:41: 89:21:c7:00:1b:bf:af:3d:40:76:52:6c:af:5d:e2: 80:8b:b0:31:f9:66:88:fc:5c:69:b6:27:d1:e3:16: 6c:85:24:42:f3:53:58:ef:d3:50:0f:29:99:c7:0d: 53:a4:4f:bb:59:bf:60:8c:f6:bf:c2:85:ab:89:8f: 63:4c:5a:5f:ba:dc:b1:d3:8b:af:eb:3f:2d:7a:7a: 83:ab:02:8c:1e:db:70:8b:24:54:9e:23:67:07:b0: 1a:9d:e6:4d:4d:3e:1e:a5:21:67:6b:da:53:16:6a: 5a:cb:37:96:93:67:fd:b9:68:92:35:87:e8:2c:48: 67:9b:37:9b:bf:0a:9c:ee:ea:b8:c7:8b:2b:c6:df: cd:0c:c5:6b:5d:40:4f:47:42:f8:6a:6b:aa:5e:4a: 52:d1:5c:73:3f:ad:63:47:b8:14:5c:0b:3c:99:f4: 7c:df:9b:b9:28:b4:0c:4c:9f:83:aa:31:65:3c:65: 42:e8:4b:a5:b7:d9:f6:7a:c0:14:5b:6f:2c:f2:69: d4:5d:ca:a5:76:ae:2c:b9:f7:63:5a:ba:16:8b:15: 66:0c:b2:f1:93:83:60:c1:2e:01:05:7a:64:d5:f6: d0:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:64:32:5E:EC:FD:4F:BC:36:98:66:DC:C3:6D:E0:F2:B8:11:FA:3F X509v3 Authority Key Identifier: keyid:7E:DE:FA:D6:56:FD:88:32:6F:6D:FA:E2:48:70:10:58:04:02:A3:5F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D9785/47DF9CEC56EC11E7BAD48D3BC4F9AE02/ft761lb9iDJvbfriSHAQWAQCo18.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ft761lb9iDJvbfriSHAQWAQCo18.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D9785/47DF9CEC56EC11E7BAD48D3BC4F9AE02/ft761lb9iDJvbfriSHAQWAQCo18.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8b:b3:a8:31:1c:c1:3a:a7:66:c1:31:0d:0f:c6:30:9b:1f:38: be:18:26:aa:bb:69:ea:2a:19:e1:94:bd:c2:b6:9e:aa:73:2e: a5:fa:18:75:bd:40:e4:62:51:41:bb:c7:fe:fa:ef:55:1e:1d: 61:c4:cb:ae:d1:0f:08:2f:28:94:21:26:6a:31:bb:96:40:2a: 7b:2e:6f:b7:5a:1f:9b:5c:86:0a:91:d7:36:2e:84:71:cc:c6: 3e:77:3a:00:9d:b3:86:b6:96:e2:82:ba:93:42:d9:a1:24:e2: 7d:0c:da:38:16:c6:98:76:d9:fe:0c:be:df:61:4b:18:e5:46: 19:e9:d5:ed:47:30:70:0f:d6:10:f5:bd:cd:01:fd:0c:ef:00: 1a:f3:72:17:ac:82:70:6e:d4:a5:52:73:d6:5d:bb:0b:9d:83: 16:95:7b:c7:1c:fb:c2:3a:cc:82:59:b8:11:39:0c:87:c8:8d: 68:a5:c5:bc:ef:84:56:90:f6:1b:74:a7:a5:b2:8f:b8:ca:77: 55:ef:54:61:e8:7e:35:b5:7c:bd:8c:b7:1c:66:d0:c6:9a:32: d5:69:b7:5c:22:09:e8:69:ee:51:80:fe:4d:c3:b9:2b:4b:1b: 30:29:50:7c:5f:1a:8e:69:1a:ba:93:d7:a9:59:d1:dd:a6:f6: a6:ea:9c:c6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICGlgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDk3ODUxMTAvBgNVBAUTKDdFREVGQUQ2NTZGRDg4MzI2RjZERkFFMjQ4NzAxMDU4 MDQwMkEzNUYwHhcNMjUxMDE4MTY0MzI0WhcNMjUxMDI1MTY0MzI0WjAYMRYwFAYD VQQDEw02OGYzYzNhYy1hNmViMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAlIh9nX9IlaAoecZzk/rllZF642LdTtgceAvjw0GJIccAG7+vPUB2UmyvXeKA i7Ax+WaI/FxptifR4xZshSRC81NY79NQDymZxw1TpE+7Wb9gjPa/woWriY9jTFpf utyx04uv6z8tenqDqwKMHttwiyRUniNnB7AaneZNTT4epSFna9pTFmpayzeWk2f9 uWiSNYfoLEhnmzebvwqc7uq4x4srxt/NDMVrXUBPR0L4amuqXkpS0VxzP61jR7gU XAs8mfR835u5KLQMTJ+DqjFlPGVC6Eult9n2esAUW28s8mnUXcqldq4sufdjWroW ixVmDLLxk4NgwS4BBXpk1fbQaQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPBkMl7s /U+8Nphm3MNt4PK4Efo/MB8GA1UdIwQYMBaAFH7e+tZW/Ygyb2364khwEFgEAqNf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEOTc4NS80N0RGOUNFQzU2 RUMxMUU3QkFENDhEM0JDNEY5QUUwMi9mdDc2MWxiOWlESnZiZnJpU0hBUVdBUUNv MTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2Z0NzYxbGI5aURKdmJmcmlTSEFRV0FRQ28xOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE OTc4NS80N0RGOUNFQzU2RUMxMUU3QkFENDhEM0JDNEY5QUUwMi9mdDc2MWxiOWlE SnZiZnJpU0hBUVdBUUNvMTgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCLs6gxHME6p2bBMQ0PxjCbHzi+GCaqu2nqKhnhlL3Ctp6qcy6l+hh1 vUDkYlFBu8f++u9VHh1hxMuu0Q8ILyiUISZqMbuWQCp7Lm+3Wh+bXIYKkdc2LoRx zMY+dzoAnbOGtpbigrqTQtmhJOJ9DNo4FsaYdtn+DL7fYUsY5UYZ6dXtRzBwD9YQ 9b3NAf0M7wAa83IXrIJwbtSlUnPWXbsLnYMWlXvHHPvCOsyCWbgROQyHyI1opcW8 74RWkPYbdKelso+4yndV71Rh6H41tXy9jLccZtDGmjLVabdcIgnoae5RgP5Nw7kr SxswKVB8XxqOaRq6k9epWdHdpvam6pzG -----END CERTIFICATE-----Generated at Mon Oct 20 04:06:03 2025 by rpki-client