$ rpki-client -vvf rpki.apnic.net/member_repository/A91DE7DE/C332AFB604E111E98EA7D872C4F9AE02/fn-3i_rxIdy3dJPgd5raTNDVmBo.mft File: fn-3i_rxIdy3dJPgd5raTNDVmBo.mft (raw, json) Hash identifier: kECOcqEnUtQHO7Fp6uM2/m/WDc5x5GPDGnCHTJtqIuE= Subject key identifier: 8C:43:8F:D4:6A:6F:15:FD:E3:E7:09:33:42:57:7F:1F:E2:FF:53:54 Authority key identifier: 7E:7F:B7:8B:FA:F1:21:DC:B7:74:93:E0:77:9A:DA:4C:D0:D5:98:1A Certificate issuer: /CN=A91DE7DE/serialNumber=7E7FB78BFAF121DCB77493E0779ADA4CD0D5981A Certificate serial: 11AA Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fn-3i_rxIdy3dJPgd5raTNDVmBo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DE7DE/C332AFB604E111E98EA7D872C4F9AE02/fn-3i_rxIdy3dJPgd5raTNDVmBo.mft Manifest number: 11A3 Signing time: Mon 20 Oct 2025 17:38:55 +0000 Manifest this update: Mon 20 Oct 2025 17:38:54 +0000 Manifest next update: Mon 27 Oct 2025 17:38:54 +0000 Files and hashes: 1: fn-3i_rxIdy3dJPgd5raTNDVmBo.crl (hash: xX5ufwMZ6728+KUn0Msp1i4NLsQ3yqn2U5ZWezjEs5Y=) 2: D728B250060011F0A0448C64C4F9AE02.roa (hash: 63yl1Teyi3N0la02MDXzZvU9fOguPMEqkEgxVdH5wiQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DE7DE/C332AFB604E111E98EA7D872C4F9AE02/fn-3i_rxIdy3dJPgd5raTNDVmBo.crl rsync://rpki.apnic.net/member_repository/A91DE7DE/C332AFB604E111E98EA7D872C4F9AE02/fn-3i_rxIdy3dJPgd5raTNDVmBo.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fn-3i_rxIdy3dJPgd5raTNDVmBo.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 27 Oct 2025 17:38:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4522 (0x11aa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DE7DE, serialNumber=7E7FB78BFAF121DCB77493E0779ADA4CD0D5981A Validity Not Before: Oct 20 17:38:54 2025 GMT Not After : Oct 27 17:38:54 2025 GMT Subject: CN=68f673ae-bbe0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:88:88:21:f3:07:16:50:fb:6d:78:ab:c6:ee: 0c:04:d0:72:bc:b7:e8:17:ae:c0:fa:d6:35:0c:b2: 3b:b2:e0:f7:eb:6e:05:a9:8f:77:39:93:49:11:48: f9:22:ea:cd:43:ee:a8:de:a2:b7:27:33:1d:10:66: e3:9d:a3:45:b2:8b:85:a7:b0:38:7f:9f:b8:ea:4b: 19:5c:65:6a:b5:cb:ff:b1:93:e0:4b:d6:ee:f3:fb: 72:9e:f5:3e:d4:dd:ae:6d:1a:d5:09:ee:23:3b:4c: 4d:1c:ef:89:b2:08:0c:cd:a0:a6:5a:1e:35:0b:53: 88:45:0d:59:71:5d:ea:bc:af:a2:7b:b0:41:8e:33: df:40:b5:b6:68:7a:69:80:d3:2c:07:59:73:17:83: 88:52:df:06:30:6e:17:17:46:49:ee:9e:78:30:d3: bc:36:e9:3e:2b:6c:b5:c3:cc:15:58:53:dd:af:e5: 58:4e:5e:61:0c:01:7a:c6:dd:50:4e:91:bf:87:da: 7d:13:fe:15:4e:ff:c6:a4:bb:f2:48:dd:c1:17:33: d9:12:ce:4f:b4:6e:46:46:f3:81:35:db:31:8c:71: 94:a3:d0:62:a4:f0:56:5f:e5:fc:12:6e:f6:a7:a6: 04:90:5c:54:b4:14:83:70:43:6e:6b:dd:69:86:9a: fc:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:43:8F:D4:6A:6F:15:FD:E3:E7:09:33:42:57:7F:1F:E2:FF:53:54 X509v3 Authority Key Identifier: keyid:7E:7F:B7:8B:FA:F1:21:DC:B7:74:93:E0:77:9A:DA:4C:D0:D5:98:1A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DE7DE/C332AFB604E111E98EA7D872C4F9AE02/fn-3i_rxIdy3dJPgd5raTNDVmBo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fn-3i_rxIdy3dJPgd5raTNDVmBo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DE7DE/C332AFB604E111E98EA7D872C4F9AE02/fn-3i_rxIdy3dJPgd5raTNDVmBo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3c:88:57:b2:76:09:84:a8:89:60:38:de:49:05:fe:33:9a:39: 89:36:a3:2b:3f:a6:f3:c0:fc:f8:6a:a8:c6:42:01:97:64:41: 46:05:05:05:bd:73:91:65:57:c0:a5:1e:da:e8:e7:0c:94:ec: 4e:c7:f0:60:b7:59:df:34:f2:b5:5f:5b:c5:bd:2b:ed:3a:f5: 57:13:ef:bf:c6:75:02:c4:82:99:aa:9a:b9:06:32:c0:a4:29: 23:ed:df:4b:12:51:30:14:5d:b5:ff:bd:9c:f6:1f:5c:c2:08: be:99:63:8b:db:ca:30:23:2b:88:64:8e:61:f2:e2:70:90:fd: a4:1d:9c:e7:52:b8:93:bb:55:ee:2c:d1:73:7d:b9:e0:45:2d: 94:3c:34:b3:05:ba:d5:6a:49:56:e1:ed:1b:fd:59:ad:f0:4b: 1f:14:2f:bb:a5:4b:ea:aa:17:40:8f:fc:ed:12:cc:1f:2d:01: 9a:65:d0:db:5c:c0:ac:cf:99:75:7a:c2:93:7f:49:93:55:31: f7:16:7d:f2:11:b6:62:43:a1:88:f7:26:c1:3c:9b:50:0c:5d: 44:c5:17:52:c4:12:ae:fe:6c:1d:df:18:01:b2:34:4b:e3:78: ee:af:ca:e8:32:8e:7c:6e:ec:cc:d7:c0:f7:52:b1:d4:0a:eb: ee:b1:f4:a9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEaowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REU3REUxMTAvBgNVBAUTKDdFN0ZCNzhCRkFGMTIxRENCNzc0OTNFMDc3OUFEQTRD RDBENTk4MUEwHhcNMjUxMDIwMTczODU0WhcNMjUxMDI3MTczODU0WjAYMRYwFAYD VQQDEw02OGY2NzNhZS1iYmUwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmIiIIfMHFlD7bXirxu4MBNByvLfoF67A+tY1DLI7suD3624FqY93OZNJEUj5 IurNQ+6o3qK3JzMdEGbjnaNFsouFp7A4f5+46ksZXGVqtcv/sZPgS9bu8/tynvU+ 1N2ubRrVCe4jO0xNHO+JsggMzaCmWh41C1OIRQ1ZcV3qvK+ie7BBjjPfQLW2aHpp gNMsB1lzF4OIUt8GMG4XF0ZJ7p54MNO8Nuk+K2y1w8wVWFPdr+VYTl5hDAF6xt1Q TpG/h9p9E/4VTv/GpLvySN3BFzPZEs5PtG5GRvOBNdsxjHGUo9BipPBWX+X8Em72 p6YEkFxUtBSDcENua91phpr8qQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIxDj9Rq bxX94+cJM0JXfx/i/1NUMB8GA1UdIwQYMBaAFH5/t4v68SHct3ST4Hea2kzQ1Zga MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERTdERS9DMzMyQUZCNjA0 RTExMUU5OEVBN0Q4NzJDNEY5QUUwMi9mbi0zaV9yeElkeTNkSlBnZDVyYVRORFZt Qm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2ZuLTNpX3J4SWR5M2RKUGdkNXJhVE5EVm1Cby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RTdERS9DMzMyQUZCNjA0RTExMUU5OEVBN0Q4NzJDNEY5QUUwMi9mbi0zaV9yeElk eTNkSlBnZDVyYVRORFZtQm8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA8iFeydgmEqIlgON5JBf4zmjmJNqMrP6bzwPz4aqjGQgGXZEFGBQUF vXORZVfApR7a6OcMlOxOx/Bgt1nfNPK1X1vFvSvtOvVXE++/xnUCxIKZqpq5BjLA pCkj7d9LElEwFF21/72c9h9cwgi+mWOL28owIyuIZI5h8uJwkP2kHZznUriTu1Xu LNFzfbngRS2UPDSzBbrVaklW4e0b/Vmt8EsfFC+7pUvqqhdAj/ztEswfLQGaZdDb XMCsz5l1esKTf0mTVTH3Fn3yEbZiQ6GI9ybBPJtQDF1ExRdSxBKu/mwd3xgBsjRL 43jur8roMo58buzM18D3UrHUCuvusfSp -----END CERTIFICATE-----Generated at Tue Oct 21 06:58:27 2025 by rpki-client