$ rpki-client -vvf rpki.apnic.net/member_repository/A91DD4A6/6A5969A87E9511EC82EE520AC4F9AE02/FwBKozEFsKDm0-tOR8UTBj2SzsI.mft File: FwBKozEFsKDm0-tOR8UTBj2SzsI.mft (raw, json) Hash identifier: ZLjnJFwb4uadqx239W2lZryKOA2avA/tl9rsWUOtYnM= Subject key identifier: 1D:7D:9F:B2:5B:A7:4B:2D:DB:3C:39:A8:CD:B2:AA:E9:2B:7C:83:C8 Authority key identifier: 17:00:4A:A3:31:05:B0:A0:E6:D3:EB:4E:47:C5:13:06:3D:92:CE:C2 Certificate issuer: /CN=A91DD4A6/serialNumber=17004AA33105B0A0E6D3EB4E47C513063D92CEC2 Certificate serial: 049C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FwBKozEFsKDm0-tOR8UTBj2SzsI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DD4A6/6A5969A87E9511EC82EE520AC4F9AE02/FwBKozEFsKDm0-tOR8UTBj2SzsI.mft Manifest number: 046F Signing time: Sun 19 Oct 2025 02:12:13 +0000 Manifest this update: Sun 19 Oct 2025 02:12:13 +0000 Manifest next update: Sun 26 Oct 2025 02:12:13 +0000 Files and hashes: 1: FwBKozEFsKDm0-tOR8UTBj2SzsI.crl (hash: 630a6znV6gmXLboLW4AuzbJHQd2FmyP7c8jVpFZgf40=) 2: F29967B22B0011F0B0319E61C4F9AE02.roa (hash: AWipWCwfBJg9FTHPHDUNW5DfQTImAx6KbbjHRDTBNc8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DD4A6/6A5969A87E9511EC82EE520AC4F9AE02/FwBKozEFsKDm0-tOR8UTBj2SzsI.crl rsync://rpki.apnic.net/member_repository/A91DD4A6/6A5969A87E9511EC82EE520AC4F9AE02/FwBKozEFsKDm0-tOR8UTBj2SzsI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FwBKozEFsKDm0-tOR8UTBj2SzsI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 02:12:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1180 (0x49c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DD4A6, serialNumber=17004AA33105B0A0E6D3EB4E47C513063D92CEC2 Validity Not Before: Oct 19 02:12:13 2025 GMT Not After : Oct 26 02:12:13 2025 GMT Subject: CN=68f448fd-8873 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:41:02:92:25:e2:9c:97:44:97:2e:27:33:6d: b5:2a:96:d0:94:de:2d:25:17:cb:da:69:ae:d1:a7: 97:2f:ee:7c:35:26:68:55:ec:f6:f4:83:cf:14:c4: 35:bc:e0:d1:7d:c0:4b:a2:3e:ac:8a:74:72:9f:9d: df:c4:d0:a1:e3:dc:73:b8:fb:85:4b:97:19:18:1c: d8:30:1b:4b:79:06:ff:36:1b:d3:5e:40:f6:8d:a7: 18:3b:09:fe:4f:8b:c7:e4:58:86:fc:56:7f:0b:df: d5:f5:fe:e8:51:7d:77:96:25:3d:cd:f4:7f:e2:1c: 7c:dc:c2:8f:6b:3d:48:d9:d0:4a:a2:c6:f5:e2:11: 27:4b:74:9a:c4:aa:04:93:b5:49:37:85:c8:4d:0b: b0:c9:b7:e5:ee:d5:b9:28:8c:0e:83:2d:0b:75:59: 47:2c:2e:08:d2:8a:90:c9:d2:71:6e:dc:0d:f6:31: 10:f7:f3:be:a8:64:9b:63:b0:c6:86:16:37:5c:c1: e2:34:86:e2:a6:a3:04:da:91:f7:d2:09:21:09:69: 21:7c:de:59:8f:6a:6f:75:d3:04:86:e2:84:9b:af: 40:8b:6a:d7:a8:dc:cb:0d:07:04:3b:ac:ae:b0:ba: a8:03:e4:15:02:9b:59:89:e6:c3:96:99:1a:9d:71: 2e:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:7D:9F:B2:5B:A7:4B:2D:DB:3C:39:A8:CD:B2:AA:E9:2B:7C:83:C8 X509v3 Authority Key Identifier: keyid:17:00:4A:A3:31:05:B0:A0:E6:D3:EB:4E:47:C5:13:06:3D:92:CE:C2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DD4A6/6A5969A87E9511EC82EE520AC4F9AE02/FwBKozEFsKDm0-tOR8UTBj2SzsI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FwBKozEFsKDm0-tOR8UTBj2SzsI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DD4A6/6A5969A87E9511EC82EE520AC4F9AE02/FwBKozEFsKDm0-tOR8UTBj2SzsI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption af:67:ff:33:54:7a:1d:f9:71:81:88:18:02:e5:53:cb:35:75: 24:ee:7d:d2:a1:6e:12:94:59:3e:35:4a:8e:6d:ed:65:a8:22: 2a:dd:47:68:92:12:aa:79:cd:ca:f9:71:b7:9d:ca:eb:79:56: e7:8f:02:9e:db:1e:7a:8d:1e:00:82:3b:9f:f9:8f:c2:86:dc: 30:a1:3a:99:0d:25:08:df:f5:a4:8c:6c:98:39:52:0d:68:6a: 0a:b9:22:f1:bc:32:f4:01:1c:55:fc:d5:ad:52:68:5f:81:5e: cc:e9:46:94:cf:72:64:f0:12:5e:3f:5c:16:ff:a5:89:93:c0: d4:3f:6d:30:61:2b:3f:fd:45:7c:86:9f:cc:4c:51:b2:b1:4d: b8:09:c1:ca:66:b6:5c:fe:c3:fc:cb:e3:b5:4e:68:c0:bb:06: 48:3b:d9:31:a9:80:b8:2c:d9:2a:02:45:57:44:37:3c:3a:d6: b5:7b:f9:3e:bc:ce:eb:07:13:87:06:67:90:be:05:fa:92:22: e1:4e:b5:14:53:d5:ad:ad:c3:22:76:fc:31:97:78:c8:76:61: 64:53:45:a1:e0:e5:40:43:57:8f:dd:ce:8e:83:9f:3c:e0:97: 1f:c1:0c:e6:42:a5:da:a3:5a:d3:7c:af:ad:12:2c:9d:be:69: bb:81:3e:4f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBJwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REQ0QTYxMTAvBgNVBAUTKDE3MDA0QUEzMzEwNUIwQTBFNkQzRUI0RTQ3QzUxMzA2 M0Q5MkNFQzIwHhcNMjUxMDE5MDIxMjEzWhcNMjUxMDI2MDIxMjEzWjAYMRYwFAYD VQQDEw02OGY0NDhmZC04ODczMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtUECkiXinJdEly4nM221KpbQlN4tJRfL2mmu0aeXL+58NSZoVez29IPPFMQ1 vODRfcBLoj6sinRyn53fxNCh49xzuPuFS5cZGBzYMBtLeQb/NhvTXkD2jacYOwn+ T4vH5FiG/FZ/C9/V9f7oUX13liU9zfR/4hx83MKPaz1I2dBKosb14hEnS3SaxKoE k7VJN4XITQuwybfl7tW5KIwOgy0LdVlHLC4I0oqQydJxbtwN9jEQ9/O+qGSbY7DG hhY3XMHiNIbipqME2pH30gkhCWkhfN5Zj2pvddMEhuKEm69Ai2rXqNzLDQcEO6yu sLqoA+QVAptZiebDlpkanXEu6wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFB19n7Jb p0st2zw5qM2yqukrfIPIMB8GA1UdIwQYMBaAFBcASqMxBbCg5tPrTkfFEwY9ks7C MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERDRBNi82QTU5NjlBODdF OTUxMUVDODJFRTUyMEFDNEY5QUUwMi9Gd0JLb3pFRnNLRG0wLXRPUjhVVEJqMlN6 c0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0Z3QktvekVGc0tEbTAtdE9SOFVUQmoyU3pzSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RDRBNi82QTU5NjlBODdFOTUxMUVDODJFRTUyMEFDNEY5QUUwMi9Gd0JLb3pFRnNL RG0wLXRPUjhVVEJqMlN6c0kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCvZ/8zVHod+XGBiBgC5VPLNXUk7n3SoW4SlFk+NUqObe1lqCIq3Udo khKqec3K+XG3ncrreVbnjwKe2x56jR4Agjuf+Y/ChtwwoTqZDSUI3/WkjGyYOVIN aGoKuSLxvDL0ARxV/NWtUmhfgV7M6UaUz3Jk8BJeP1wW/6WJk8DUP20wYSs//UV8 hp/MTFGysU24CcHKZrZc/sP8y+O1TmjAuwZIO9kxqYC4LNkqAkVXRDc8Ota1e/k+ vM7rBxOHBmeQvgX6kiLhTrUUU9WtrcMidvwxl3jIdmFkU0Wh4OVAQ1eP3c6Og588 4JcfwQzmQqXao1rTfK+tEiydvmm7gT5P -----END CERTIFICATE-----Generated at Sun Oct 19 23:33:52 2025 by rpki-client