$ rpki-client -vvf rpki.apnic.net/member_repository/A91DD299/5EB93A72A1DA11EFB2333A45C4F9AE02/FW7Vv4FDfBtx5xywLuwnqxiveaQ.mft File: FW7Vv4FDfBtx5xywLuwnqxiveaQ.mft (raw, json) Hash identifier: qFWHF2jfAyamkAhao+vk5YlxXGwxSGYPlVGO/derPic= Subject key identifier: 2C:ED:35:A1:9C:DB:E9:7B:F2:37:70:F8:BD:97:E3:A3:C1:27:37:2A Authority key identifier: 15:6E:D5:BF:81:43:7C:1B:71:E7:1C:B0:2E:EC:27:AB:18:AF:79:A4 Certificate issuer: /CN=A91DD299/serialNumber=156ED5BF81437C1B71E71CB02EEC27AB18AF79A4 Certificate serial: B3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FW7Vv4FDfBtx5xywLuwnqxiveaQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DD299/5EB93A72A1DA11EFB2333A45C4F9AE02/FW7Vv4FDfBtx5xywLuwnqxiveaQ.mft Manifest number: B1 Signing time: Sun 19 Oct 2025 09:16:51 +0000 Manifest this update: Sun 19 Oct 2025 09:16:50 +0000 Manifest next update: Sun 26 Oct 2025 09:16:50 +0000 Files and hashes: 1: FW7Vv4FDfBtx5xywLuwnqxiveaQ.crl (hash: S3sB/9IdaTsQ4E9RAcY7VySfPZZ/VAvS/nSfsHR/hK8=) 2: F7AA5B1CA1DA11EF86B88981C4F9AE02.roa (hash: DGxrKRXPi2bgrxreeXRQjRNOo70ByLeA01zODoILz2c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DD299/5EB93A72A1DA11EFB2333A45C4F9AE02/FW7Vv4FDfBtx5xywLuwnqxiveaQ.crl rsync://rpki.apnic.net/member_repository/A91DD299/5EB93A72A1DA11EFB2333A45C4F9AE02/FW7Vv4FDfBtx5xywLuwnqxiveaQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FW7Vv4FDfBtx5xywLuwnqxiveaQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 09:16:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 179 (0xb3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DD299, serialNumber=156ED5BF81437C1B71E71CB02EEC27AB18AF79A4 Validity Not Before: Oct 19 09:16:50 2025 GMT Not After : Oct 26 09:16:50 2025 GMT Subject: CN=68f4ac83-4caf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:55:72:6f:9f:e0:02:31:2a:81:7a:77:01:78: 7b:60:0f:12:94:60:2c:5a:da:1b:3f:dd:ec:bf:59: 20:8a:73:d2:64:72:f4:7a:70:a7:66:a8:6a:6d:47: 7e:4d:b3:92:ed:2a:4d:10:9b:b3:87:ec:d3:f9:0f: 4e:20:1b:67:03:c4:02:8a:26:db:0c:9c:e4:83:48: 68:05:90:36:81:ed:36:31:e5:73:fe:f9:81:90:05: 5b:07:e8:83:0f:e5:c6:32:c1:f6:96:c8:c8:da:b7: 1e:61:2f:d6:cd:04:8d:23:87:31:cc:c0:36:e3:5d: 97:2f:87:eb:85:f0:71:e5:e0:55:4d:07:60:54:20: 59:ce:c8:d8:1a:49:6c:bc:0c:de:91:ff:9b:99:e8: 19:8b:dc:ae:92:b4:d2:d6:4b:81:5e:7e:11:38:52: 4a:7c:d7:ce:b0:c1:26:6a:fd:4b:bd:0b:e1:56:dc: 06:70:c9:ed:e9:d3:87:88:4c:0c:82:f9:38:83:1e: 35:c2:9f:f7:0c:52:08:46:87:31:ef:af:59:ea:0d: 8f:b4:78:b1:da:08:e4:36:ef:62:71:87:05:74:19: 51:a1:52:a5:22:69:45:c0:46:3d:c1:18:c7:0e:9a: f1:48:00:a4:91:81:d5:34:fa:9c:e1:25:ed:fa:14: 61:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:ED:35:A1:9C:DB:E9:7B:F2:37:70:F8:BD:97:E3:A3:C1:27:37:2A X509v3 Authority Key Identifier: keyid:15:6E:D5:BF:81:43:7C:1B:71:E7:1C:B0:2E:EC:27:AB:18:AF:79:A4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DD299/5EB93A72A1DA11EFB2333A45C4F9AE02/FW7Vv4FDfBtx5xywLuwnqxiveaQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FW7Vv4FDfBtx5xywLuwnqxiveaQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DD299/5EB93A72A1DA11EFB2333A45C4F9AE02/FW7Vv4FDfBtx5xywLuwnqxiveaQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 04:0b:fe:bb:91:f0:3d:0c:6d:ec:c0:2b:45:83:89:f4:c2:33: e5:28:f1:c8:6f:fd:87:76:cd:4c:5f:ca:ef:88:04:f1:54:89: 92:cc:f0:92:02:30:db:c4:42:c5:a4:10:9f:ca:0d:c4:e9:fc: c2:a5:7a:78:a6:e5:b9:13:fd:1b:70:04:6c:6a:f6:58:3e:8f: c5:04:73:f1:e8:ed:24:e8:67:3c:5b:84:86:ad:f0:6e:ac:77: 53:da:00:7f:ed:f7:09:e3:f7:c9:15:06:c0:75:e3:97:4c:8d: a3:b0:f8:9a:95:09:5e:66:9a:1f:ce:a8:07:27:c7:5d:15:fa: 20:ba:dd:fa:57:40:5d:21:e1:46:2c:43:ad:46:11:d6:55:7b: 60:0a:92:62:6a:98:7b:5b:ea:93:60:ca:f3:51:25:68:bc:e2: aa:be:11:06:79:80:60:aa:b2:ea:a1:c5:95:c5:20:0f:e4:06: 6c:56:69:fa:92:12:47:2e:c6:79:a5:d3:80:68:52:f6:3b:3f: 7b:a9:a0:50:fe:7d:75:5d:f6:10:93:e8:8e:59:28:d2:c4:79: 44:f8:1d:fb:dd:70:00:cb:77:98:3e:66:8d:9b:36:b3:59:f4: 25:32:f7:57:79:17:fa:d6:e5:ae:97:9d:27:64:f5:e4:52:6a: 91:0d:2b:ab -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICALMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REQyOTkxMTAvBgNVBAUTKDE1NkVENUJGODE0MzdDMUI3MUU3MUNCMDJFRUMyN0FC MThBRjc5QTQwHhcNMjUxMDE5MDkxNjUwWhcNMjUxMDI2MDkxNjUwWjAYMRYwFAYD VQQDEw02OGY0YWM4My00Y2FmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0FVyb5/gAjEqgXp3AXh7YA8SlGAsWtobP93sv1kginPSZHL0enCnZqhqbUd+ TbOS7SpNEJuzh+zT+Q9OIBtnA8QCiibbDJzkg0hoBZA2ge02MeVz/vmBkAVbB+iD D+XGMsH2lsjI2rceYS/WzQSNI4cxzMA2412XL4frhfBx5eBVTQdgVCBZzsjYGkls vAzekf+bmegZi9yukrTS1kuBXn4ROFJKfNfOsMEmav1LvQvhVtwGcMnt6dOHiEwM gvk4gx41wp/3DFIIRocx769Z6g2PtHix2gjkNu9icYcFdBlRoVKlImlFwEY9wRjH DprxSACkkYHVNPqc4SXt+hRhfQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCztNaGc 2+l78jdw+L2X46PBJzcqMB8GA1UdIwQYMBaAFBVu1b+BQ3wbceccsC7sJ6sYr3mk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERDI5OS81RUI5M0E3MkEx REExMUVGQjIzMzNBNDVDNEY5QUUwMi9GVzdWdjRGRGZCdHg1eHl3THV3bnF4aXZl YVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZXN1Z2NEZEZkJ0eDV4eXdMdXducXhpdmVhUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RDI5OS81RUI5M0E3MkExREExMUVGQjIzMzNBNDVDNEY5QUUwMi9GVzdWdjRGRGZC dHg1eHl3THV3bnF4aXZlYVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAEC/67kfA9DG3swCtFg4n0wjPlKPHIb/2Hds1MX8rviATxVImSzPCS AjDbxELFpBCfyg3E6fzCpXp4puW5E/0bcARsavZYPo/FBHPx6O0k6Gc8W4SGrfBu rHdT2gB/7fcJ4/fJFQbAdeOXTI2jsPialQleZpofzqgHJ8ddFfogut36V0BdIeFG LEOtRhHWVXtgCpJiaph7W+qTYMrzUSVovOKqvhEGeYBgqrLqocWVxSAP5AZsVmn6 khJHLsZ5pdOAaFL2Oz97qaBQ/n11XfYQk+iOWSjSxHlE+B373XAAy3eYPmaNmzaz WfQlMvdXeRf61uWul50nZPXkUmqRDSur -----END CERTIFICATE-----Generated at Sun Oct 19 23:29:30 2025 by rpki-client