$ rpki-client -vvf rpki.apnic.net/member_repository/A91DF93A/F7DFA72EE5F311EAB3A91561C4F9AE02/fiRDENekVusSe5JsQvJteems24g.mft File: fiRDENekVusSe5JsQvJteems24g.mft (raw, json) Hash identifier: aNroOGJUeYibXe/vCQxj8i8JmDjtJ+9G353+irHHeus= Subject key identifier: 76:88:DB:F2:54:C6:D2:69:AA:C5:F1:26:14:C8:CF:F3:EF:C3:DD:C3 Authority key identifier: 7E:24:43:10:D7:A4:56:EB:12:7B:92:6C:42:F2:6D:79:E9:AC:DB:88 Certificate issuer: /CN=A91DF93A/serialNumber=7E244310D7A456EB127B926C42F26D79E9ACDB88 Certificate serial: 0903 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fiRDENekVusSe5JsQvJteems24g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DF93A/F7DFA72EE5F311EAB3A91561C4F9AE02/fiRDENekVusSe5JsQvJteems24g.mft Manifest number: 089F Signing time: Sat 18 Oct 2025 21:56:44 +0000 Manifest this update: Sat 18 Oct 2025 21:56:43 +0000 Manifest next update: Sat 25 Oct 2025 21:56:43 +0000 Files and hashes: 1: fiRDENekVusSe5JsQvJteems24g.crl (hash: gfUWTpxEc+R1DvsHjk3rbRrkWxaSo0sx5ZK274JgpMg=) 2: 536CEA945D5D11F0A20A8B47C4F9AE02.roa (hash: NudhcCG6U8c/iVjiv9Q5GA7zP2bSr5Lt2Lyl6qOq+zo=) 3: BE33817A69AE11EEBBC89D75C4F9AE02.roa (hash: gjnTsh5k1OZvGTpF1aNvAJoG372BB0dQ8oqKuH5rVM8=) 4: 885A3B4C198C11EEA06C1429C4F9AE02.roa (hash: UwbxqlIoeWN/uj0INOlxAStWat7EJVu9aWA6OuSDC9Q=) 5: 669892085D5D11F0AAE8C847C4F9AE02.roa (hash: YloUxGTrxFqJdGX0eY4LvrEEn+EXGL+0rN59a1XKXIY=) 6: B59B34B2A59511EFB1B8AF36C4F9AE02.roa (hash: vWyefttpePLkPBEoycC5X0lmEGRfAIuwi2Ngs4ojIYc=) 7: 48DDFB8E8FAF11F0B59F0948C4F9AE02.roa (hash: mA/WE2Bh4RmqFgp1Gp11Wu83VKDJFyoxbw2SeY/E7bk=) 8: A64C29AA3D9811EE88B2694CC4F9AE02.roa (hash: /yoDz91aVKDMVKQFN5vWqL0kcfwjMSXqa0ohs5b1IqQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DF93A/F7DFA72EE5F311EAB3A91561C4F9AE02/fiRDENekVusSe5JsQvJteems24g.crl rsync://rpki.apnic.net/member_repository/A91DF93A/F7DFA72EE5F311EAB3A91561C4F9AE02/fiRDENekVusSe5JsQvJteems24g.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fiRDENekVusSe5JsQvJteems24g.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 21:56:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2307 (0x903) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DF93A, serialNumber=7E244310D7A456EB127B926C42F26D79E9ACDB88 Validity Not Before: Oct 18 21:56:43 2025 GMT Not After : Oct 25 21:56:43 2025 GMT Subject: CN=68f40d1b-4702 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:17:1a:e0:cf:43:d3:07:d4:fe:32:54:ca:ae: 23:21:ea:f0:51:6b:46:b9:ec:d1:5c:e0:f4:20:eb: d2:28:9e:63:c1:57:31:3e:80:d4:67:1a:c7:50:6e: 36:af:74:bf:a7:09:cb:45:74:10:25:e2:b5:54:5f: cb:fc:16:01:8a:32:12:a8:5a:e8:88:c7:50:a6:8e: 61:ff:fb:8a:35:c0:1e:3c:59:2d:07:1e:a3:c3:ad: 4d:79:f5:5a:91:30:92:de:20:17:aa:8c:e4:be:09: 14:cc:37:cf:c0:e4:f5:1f:dd:f9:5e:af:ad:6f:3d: 69:26:5d:39:41:c7:16:07:08:30:6a:71:90:9b:8e: f8:2a:15:8b:31:62:87:1f:5d:24:a3:40:66:31:a1: 5f:b1:8e:3a:c4:eb:eb:9d:69:da:f1:a0:77:61:87: 64:15:41:4f:06:50:dd:38:1b:eb:a5:5b:a4:e4:b9: 8b:49:b4:a7:98:44:25:08:52:60:81:ae:3d:8f:cf: a5:26:b5:4d:32:ac:7b:80:c7:fd:4e:63:8c:02:2c: 7b:ef:3b:68:43:d0:20:75:27:e9:d5:58:45:2e:94: e6:f2:01:35:67:0f:d0:45:a7:e8:96:97:51:08:80: c8:89:68:04:2e:52:ba:c6:cf:ab:e9:8a:61:0a:58: 56:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:88:DB:F2:54:C6:D2:69:AA:C5:F1:26:14:C8:CF:F3:EF:C3:DD:C3 X509v3 Authority Key Identifier: keyid:7E:24:43:10:D7:A4:56:EB:12:7B:92:6C:42:F2:6D:79:E9:AC:DB:88 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DF93A/F7DFA72EE5F311EAB3A91561C4F9AE02/fiRDENekVusSe5JsQvJteems24g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fiRDENekVusSe5JsQvJteems24g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DF93A/F7DFA72EE5F311EAB3A91561C4F9AE02/fiRDENekVusSe5JsQvJteems24g.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8a:ea:6d:63:b9:82:27:2f:96:02:a1:90:c8:90:9a:a1:52:2d: 61:bf:3c:46:96:d8:df:91:1f:61:79:0e:ae:5b:80:9d:90:c2: 4e:3a:9f:42:c5:a6:d2:a3:67:a2:fb:13:e5:c1:19:04:ac:87: 72:d8:fe:50:c9:32:de:b5:7a:6e:be:2f:01:db:fb:24:06:5d: 01:c4:fb:9e:02:0b:e8:af:af:44:a1:0d:29:bf:33:f8:1b:69: 20:3e:46:32:4c:c9:b6:3a:74:18:71:6b:19:b9:87:2f:ad:a3: 0a:00:f3:16:a5:94:97:0e:f5:3c:6b:68:e8:42:fb:44:e0:cf: a9:55:77:86:bf:96:f2:a6:f6:50:48:40:66:d5:d2:e3:45:2a: a8:12:87:a7:12:41:f4:2b:e0:05:7e:f7:c7:2f:10:71:62:71: 48:8f:c7:05:03:de:79:74:5c:bf:cd:65:92:c6:19:54:6e:69: 64:0e:db:4a:df:7e:f9:e0:a9:4a:d9:4c:c1:66:5c:9a:c5:fd: a4:62:23:3f:76:fe:87:85:02:05:ed:61:69:d8:ac:27:ba:d3: fe:88:29:0a:5c:27:5a:8d:f8:d1:de:79:fc:d7:3f:19:e1:e4: cb:67:4d:82:8a:4f:2d:4b:fe:d8:4e:68:39:de:67:06:14:f8: c4:28:80:ac -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCQMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REY5M0ExMTAvBgNVBAUTKDdFMjQ0MzEwRDdBNDU2RUIxMjdCOTI2QzQyRjI2RDc5 RTlBQ0RCODgwHhcNMjUxMDE4MjE1NjQzWhcNMjUxMDI1MjE1NjQzWjAYMRYwFAYD VQQDEw02OGY0MGQxYi00NzAyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuxca4M9D0wfU/jJUyq4jIerwUWtGuezRXOD0IOvSKJ5jwVcxPoDUZxrHUG42 r3S/pwnLRXQQJeK1VF/L/BYBijISqFroiMdQpo5h//uKNcAePFktBx6jw61NefVa kTCS3iAXqozkvgkUzDfPwOT1H935Xq+tbz1pJl05QccWBwgwanGQm474KhWLMWKH H10ko0BmMaFfsY46xOvrnWna8aB3YYdkFUFPBlDdOBvrpVuk5LmLSbSnmEQlCFJg ga49j8+lJrVNMqx7gMf9TmOMAix77ztoQ9AgdSfp1VhFLpTm8gE1Zw/QRafolpdR CIDIiWgELlK6xs+r6YphClhWjQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHaI2/JU xtJpqsXxJhTIz/Pvw93DMB8GA1UdIwQYMBaAFH4kQxDXpFbrEnuSbELybXnprNuI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERjkzQS9GN0RGQTcyRUU1 RjMxMUVBQjNBOTE1NjFDNEY5QUUwMi9maVJERU5la1Z1c1NlNUpzUXZKdGVlbXMy NGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2ZpUkRFTmVrVnVzU2U1SnNRdkp0ZWVtczI0Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RjkzQS9GN0RGQTcyRUU1RjMxMUVBQjNBOTE1NjFDNEY5QUUwMi9maVJERU5la1Z1 c1NlNUpzUXZKdGVlbXMyNGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCK6m1juYInL5YCoZDIkJqhUi1hvzxGltjfkR9heQ6uW4CdkMJOOp9C xabSo2ei+xPlwRkErIdy2P5QyTLetXpuvi8B2/skBl0BxPueAgvor69EoQ0pvzP4 G2kgPkYyTMm2OnQYcWsZuYcvraMKAPMWpZSXDvU8a2joQvtE4M+pVXeGv5bypvZQ SEBm1dLjRSqoEoenEkH0K+AFfvfHLxBxYnFIj8cFA955dFy/zWWSxhlUbmlkDttK 33754KlK2UzBZlyaxf2kYiM/dv6HhQIF7WFp2KwnutP+iCkKXCdajfjR3nn81z8Z 4eTLZ02Cik8tS/7YTmg53mcGFPjEKICs -----END CERTIFICATE-----Generated at Mon Oct 20 08:57:18 2025 by rpki-client