$ rpki-client -vvf rpki.apnic.net/member_repository/A91DDCD9/410BBC144E6C11EA89049747C4F9AE02/FnnqBmaD8qFVDecPRYQy3RqDJw8.mft File: FnnqBmaD8qFVDecPRYQy3RqDJw8.mft (raw, json) Hash identifier: WRR1jYngOd7fNz9i+8czZiAYyxjAVH8FGTVXHfSGrAU= Subject key identifier: D3:21:72:5E:46:62:DF:83:4E:52:86:78:C4:D1:B3:A3:CC:F6:4B:9E Authority key identifier: 16:79:EA:06:66:83:F2:A1:55:0D:E7:0F:45:84:32:DD:1A:83:27:0F Certificate issuer: /CN=A91DDCD9/serialNumber=1679EA066683F2A1550DE70F458432DD1A83270F Certificate serial: 0B2E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FnnqBmaD8qFVDecPRYQy3RqDJw8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DDCD9/410BBC144E6C11EA89049747C4F9AE02/FnnqBmaD8qFVDecPRYQy3RqDJw8.mft Manifest number: 0B22 Signing time: Sat 18 Oct 2025 20:13:57 +0000 Manifest this update: Sat 18 Oct 2025 20:13:57 +0000 Manifest next update: Sat 25 Oct 2025 20:13:57 +0000 Files and hashes: 1: FnnqBmaD8qFVDecPRYQy3RqDJw8.crl (hash: j1NDoF9CbNW+c1Mm8X0bYlbPWGPA7EzY6h/jWq7TwoU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DDCD9/410BBC144E6C11EA89049747C4F9AE02/FnnqBmaD8qFVDecPRYQy3RqDJw8.crl rsync://rpki.apnic.net/member_repository/A91DDCD9/410BBC144E6C11EA89049747C4F9AE02/FnnqBmaD8qFVDecPRYQy3RqDJw8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FnnqBmaD8qFVDecPRYQy3RqDJw8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 20:13:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2862 (0xb2e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DDCD9, serialNumber=1679EA066683F2A1550DE70F458432DD1A83270F Validity Not Before: Oct 18 20:13:57 2025 GMT Not After : Oct 25 20:13:57 2025 GMT Subject: CN=68f3f505-411c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:4c:e1:21:7c:be:26:17:ee:49:62:46:a5:88: ff:fc:70:ae:78:54:ae:8c:a4:fe:cc:69:7c:10:62: bf:bc:74:34:a4:ca:83:14:e7:91:ff:6c:fa:0b:58: 91:7a:39:fa:e3:a8:42:c2:d8:2e:34:8b:38:08:cc: 95:b5:f0:81:a3:8f:9c:50:d9:b5:28:b7:dd:1d:56: ba:cf:10:c4:03:bf:59:b1:eb:8b:14:72:4c:cb:a1: 9b:30:ac:ca:b4:d7:0b:08:73:32:e8:16:69:fa:7f: 8d:ca:7b:90:1b:c4:c5:96:99:59:46:ce:0d:a4:34: ad:50:2b:16:75:7d:c7:b7:95:48:97:6d:f1:0f:fc: 03:f9:15:16:b0:3c:95:07:70:12:69:66:fd:fb:65: e2:05:56:d0:88:6a:5c:7e:d2:5d:e9:01:92:df:1e: 2e:d6:1d:64:5d:d9:67:ce:fd:37:d8:a3:f0:3a:c3: 4a:94:a6:d8:91:c6:07:cf:97:bf:b0:d2:71:e4:8b: a5:05:c8:f7:91:d4:bb:9b:b6:b2:57:43:5e:31:92: a7:f5:2b:27:f5:09:c9:19:97:84:99:04:7b:0a:41: 3e:b2:21:b3:26:04:e2:5d:22:f2:ed:97:16:fc:07: f3:d6:83:7f:6f:5b:15:01:6d:b7:d9:c9:e8:ff:6d: 7f:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:21:72:5E:46:62:DF:83:4E:52:86:78:C4:D1:B3:A3:CC:F6:4B:9E X509v3 Authority Key Identifier: keyid:16:79:EA:06:66:83:F2:A1:55:0D:E7:0F:45:84:32:DD:1A:83:27:0F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DDCD9/410BBC144E6C11EA89049747C4F9AE02/FnnqBmaD8qFVDecPRYQy3RqDJw8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FnnqBmaD8qFVDecPRYQy3RqDJw8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DDCD9/410BBC144E6C11EA89049747C4F9AE02/FnnqBmaD8qFVDecPRYQy3RqDJw8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a0:2d:b1:92:8d:eb:02:d8:94:f1:be:5d:47:32:9f:21:c8:da: c8:90:8f:f3:74:55:5d:09:bd:9a:6a:b5:92:0e:f7:7b:d7:0f: 48:31:29:22:c3:c6:94:4d:25:69:75:87:63:30:1e:20:22:cb: 0d:6c:b2:7a:9f:44:21:1b:77:80:c4:b9:59:c5:89:28:68:c5: 03:4e:bb:21:78:df:5f:8f:67:5f:6e:99:53:19:41:30:8a:a8: 7d:55:b1:73:68:80:23:2a:6a:34:70:85:e5:33:e8:d9:19:aa: c9:9d:08:dc:54:ca:c7:17:b4:72:2d:7b:5c:3d:70:83:d0:94: b3:b2:10:83:ff:cc:aa:1e:a6:0b:77:ec:3e:a1:54:34:9f:bc: df:ae:54:0c:f8:56:dd:49:a6:93:0b:68:2d:34:34:31:1d:fd: 69:1d:6d:b0:40:26:6b:34:90:ca:01:7a:eb:83:42:9a:c6:ea: 74:ee:19:6e:89:ae:3f:39:eb:13:e6:e9:6a:0c:29:0b:06:98: d9:90:87:4d:fb:67:f2:13:64:04:75:1f:c9:0d:c1:da:0c:38: e5:cd:93:d6:2a:f2:fc:ba:43:46:9f:15:71:01:d7:7c:c7:21: 04:5b:97:c6:67:74:10:8a:7c:a2:94:5b:76:b3:f6:3b:e7:51: ff:0d:05:b9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCy4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RERDRDkxMTAvBgNVBAUTKDE2NzlFQTA2NjY4M0YyQTE1NTBERTcwRjQ1ODQzMkRE MUE4MzI3MEYwHhcNMjUxMDE4MjAxMzU3WhcNMjUxMDI1MjAxMzU3WjAYMRYwFAYD VQQDEw02OGYzZjUwNS00MTFjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3kzhIXy+JhfuSWJGpYj//HCueFSujKT+zGl8EGK/vHQ0pMqDFOeR/2z6C1iR ejn646hCwtguNIs4CMyVtfCBo4+cUNm1KLfdHVa6zxDEA79ZseuLFHJMy6GbMKzK tNcLCHMy6BZp+n+NynuQG8TFlplZRs4NpDStUCsWdX3Ht5VIl23xD/wD+RUWsDyV B3ASaWb9+2XiBVbQiGpcftJd6QGS3x4u1h1kXdlnzv032KPwOsNKlKbYkcYHz5e/ sNJx5IulBcj3kdS7m7ayV0NeMZKn9Ssn9QnJGZeEmQR7CkE+siGzJgTiXSLy7ZcW /Afz1oN/b1sVAW232cno/21/nwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNMhcl5G Yt+DTlKGeMTRs6PM9kueMB8GA1UdIwQYMBaAFBZ56gZmg/KhVQ3nD0WEMt0agycP MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERENEOS80MTBCQkMxNDRF NkMxMUVBODkwNDk3NDdDNEY5QUUwMi9Gbm5xQm1hRDhxRlZEZWNQUllReTNScURK dzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZubnFCbWFEOHFGVkRlY1BSWVF5M1JxREp3OC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RENEOS80MTBCQkMxNDRFNkMxMUVBODkwNDk3NDdDNEY5QUUwMi9Gbm5xQm1hRDhx RlZEZWNQUllReTNScURKdzgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCgLbGSjesC2JTxvl1HMp8hyNrIkI/zdFVdCb2aarWSDvd71w9IMSki w8aUTSVpdYdjMB4gIssNbLJ6n0QhG3eAxLlZxYkoaMUDTrsheN9fj2dfbplTGUEw iqh9VbFzaIAjKmo0cIXlM+jZGarJnQjcVMrHF7RyLXtcPXCD0JSzshCD/8yqHqYL d+w+oVQ0n7zfrlQM+FbdSaaTC2gtNDQxHf1pHW2wQCZrNJDKAXrrg0Kaxup07hlu ia4/OesT5ulqDCkLBpjZkIdN+2fyE2QEdR/JDcHaDDjlzZPWKvL8ukNGnxVxAdd8 xyEEW5fGZ3QQinyilFt2s/Y751H/DQW5 -----END CERTIFICATE-----Generated at Mon Oct 20 04:24:55 2025 by rpki-client