$ rpki-client -vvf rpki.apnic.net/member_repository/A91DFC92/CB4ABE6A421611EE9A3EB768C4F9AE02/FqgerO8cn8MyDElats0MZ2Oqg2M.mft File: FqgerO8cn8MyDElats0MZ2Oqg2M.mft (raw, json) Hash identifier: cBgsa7hxhgnlACDp++DtRwUPFRCeGKCB8gYuclg6yFc= Subject key identifier: A7:31:3D:18:DB:D9:CD:7F:36:AE:E7:80:DA:71:E6:9E:42:95:0E:A4 Authority key identifier: 16:A8:1E:AC:EF:1C:9F:C3:32:0C:49:5A:B6:CD:0C:67:63:AA:83:63 Certificate issuer: /CN=A91DFC92/serialNumber=16A81EACEF1C9FC3320C495AB6CD0C6763AA8363 Certificate serial: 0198 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FqgerO8cn8MyDElats0MZ2Oqg2M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DFC92/CB4ABE6A421611EE9A3EB768C4F9AE02/FqgerO8cn8MyDElats0MZ2Oqg2M.mft Manifest number: 0195 Signing time: Sun 19 Oct 2025 05:59:45 +0000 Manifest this update: Sun 19 Oct 2025 05:59:44 +0000 Manifest next update: Sun 26 Oct 2025 05:59:44 +0000 Files and hashes: 1: FqgerO8cn8MyDElats0MZ2Oqg2M.crl (hash: pybqZx8VBRMC+2SRF0QMO6QNMBK0HKkDAB8PhxOgHaE=) 2: 0AE7E0B6421711EE97070469C4F9AE02.roa (hash: 33dDDxYoddtq/jzJQjTw8XcFhN7Z/rBiMlfoEOF+M10=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DFC92/CB4ABE6A421611EE9A3EB768C4F9AE02/FqgerO8cn8MyDElats0MZ2Oqg2M.crl rsync://rpki.apnic.net/member_repository/A91DFC92/CB4ABE6A421611EE9A3EB768C4F9AE02/FqgerO8cn8MyDElats0MZ2Oqg2M.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FqgerO8cn8MyDElats0MZ2Oqg2M.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 05:59:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 408 (0x198) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DFC92, serialNumber=16A81EACEF1C9FC3320C495AB6CD0C6763AA8363 Validity Not Before: Oct 19 05:59:44 2025 GMT Not After : Oct 26 05:59:44 2025 GMT Subject: CN=68f47e51-5e9c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:09:8c:f3:03:4a:ba:80:90:40:e4:7c:d9:6f: ef:cf:92:f0:b6:2d:c5:a8:d7:1e:b8:3d:01:bc:bc: 79:da:8a:bc:94:39:c5:a1:2f:1a:92:45:00:55:c2: bf:b8:e7:d6:52:b8:f7:5e:e8:28:80:4a:56:7b:da: 7c:0a:7f:5c:f9:ea:d9:bd:78:b4:a2:2d:5b:61:f4: 78:2a:c0:5a:75:e3:0e:62:30:6f:8d:84:83:21:65: c7:d4:a0:1d:36:61:7d:dc:26:73:21:f1:85:ac:20: ee:7c:a3:6a:9d:67:60:88:29:78:ae:b5:df:45:33: 17:6f:fa:13:0e:e8:d5:05:c3:cd:77:05:7d:a9:f6: 84:df:d5:5a:8e:df:c9:9c:1b:62:2a:cb:7a:5f:c6: 73:1b:7d:9e:4e:da:c1:ac:80:7d:c6:7d:d2:fa:ce: cc:68:d7:32:ed:a1:bf:83:43:fd:27:36:e2:06:10: 1d:fe:2a:2c:a8:7d:20:be:28:dc:ae:b3:4d:1e:8f: b3:49:da:ce:b6:24:dd:3e:c9:a4:03:e4:0f:f7:57: 70:2e:72:f4:e6:f6:ba:d1:85:f0:10:ce:34:ee:09: 4f:dd:a0:6d:d3:da:f9:ed:fa:1a:63:f5:5f:1e:76: 78:6b:a1:2c:1e:71:5d:be:d9:c1:e0:3c:96:ca:f4: 13:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:31:3D:18:DB:D9:CD:7F:36:AE:E7:80:DA:71:E6:9E:42:95:0E:A4 X509v3 Authority Key Identifier: keyid:16:A8:1E:AC:EF:1C:9F:C3:32:0C:49:5A:B6:CD:0C:67:63:AA:83:63 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DFC92/CB4ABE6A421611EE9A3EB768C4F9AE02/FqgerO8cn8MyDElats0MZ2Oqg2M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FqgerO8cn8MyDElats0MZ2Oqg2M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DFC92/CB4ABE6A421611EE9A3EB768C4F9AE02/FqgerO8cn8MyDElats0MZ2Oqg2M.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a5:d7:36:24:34:53:12:97:d8:66:1b:d3:47:14:f2:57:29:30: bb:75:cc:d3:f1:48:77:70:59:4d:12:ce:8d:4c:40:ea:a7:3c: 76:d4:e1:1e:55:22:f5:4c:7d:24:1f:02:69:e1:96:ce:1b:a1: 16:42:f6:fa:a2:60:22:17:fa:94:b0:5a:61:02:ba:6c:8d:27: da:05:8c:c6:67:3a:43:72:f5:af:6f:cd:f5:53:f0:4c:ff:c3: 72:e6:51:0a:89:83:11:ef:15:c6:7c:46:7c:7c:18:6e:2b:26: e6:4b:b4:75:09:5e:80:84:e8:2a:1e:22:c7:61:01:0f:59:80: c4:e5:cc:d0:5d:a2:58:42:70:d9:41:ab:23:b8:d7:58:62:52: 97:28:38:db:9d:a7:4e:08:94:9a:ea:b0:02:36:9e:94:a5:8b: 28:10:14:89:f0:d5:6f:b9:68:3e:5b:ae:44:b6:cf:de:3c:e7: 31:27:98:26:91:f7:1e:37:67:b9:78:95:cd:a9:bf:95:c3:ca: 5d:65:a9:a6:e1:b6:ad:7c:91:39:d4:d8:98:1c:7a:71:58:9f: a7:d7:96:97:e9:09:d8:fe:28:92:83:ab:46:a7:13:57:28:5c: e7:da:c7:67:8a:53:15:a9:3c:00:10:34:e0:0f:30:32:72:42: 82:ae:ab:7f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAZgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REZDOTIxMTAvBgNVBAUTKDE2QTgxRUFDRUYxQzlGQzMzMjBDNDk1QUI2Q0QwQzY3 NjNBQTgzNjMwHhcNMjUxMDE5MDU1OTQ0WhcNMjUxMDI2MDU1OTQ0WjAYMRYwFAYD VQQDEw02OGY0N2U1MS01ZTljMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAogmM8wNKuoCQQOR82W/vz5Lwti3FqNceuD0BvLx52oq8lDnFoS8akkUAVcK/ uOfWUrj3XugogEpWe9p8Cn9c+erZvXi0oi1bYfR4KsBadeMOYjBvjYSDIWXH1KAd NmF93CZzIfGFrCDufKNqnWdgiCl4rrXfRTMXb/oTDujVBcPNdwV9qfaE39Vajt/J nBtiKst6X8ZzG32eTtrBrIB9xn3S+s7MaNcy7aG/g0P9JzbiBhAd/iosqH0gvijc rrNNHo+zSdrOtiTdPsmkA+QP91dwLnL05va60YXwEM407glP3aBt09r57foaY/Vf HnZ4a6EsHnFdvtnB4DyWyvQT/wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKcxPRjb 2c1/Nq7ngNpx5p5ClQ6kMB8GA1UdIwQYMBaAFBaoHqzvHJ/DMgxJWrbNDGdjqoNj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERkM5Mi9DQjRBQkU2QTQy MTYxMUVFOUEzRUI3NjhDNEY5QUUwMi9GcWdlck84Y244TXlERWxhdHMwTVoyT3Fn Mk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZxZ2VyTzhjbjhNeURFbGF0czBNWjJPcWcyTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RkM5Mi9DQjRBQkU2QTQyMTYxMUVFOUEzRUI3NjhDNEY5QUUwMi9GcWdlck84Y244 TXlERWxhdHMwTVoyT3FnMk0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCl1zYkNFMSl9hmG9NHFPJXKTC7dczT8Uh3cFlNEs6NTEDqpzx21OEe VSL1TH0kHwJp4ZbOG6EWQvb6omAiF/qUsFphArpsjSfaBYzGZzpDcvWvb831U/BM /8Ny5lEKiYMR7xXGfEZ8fBhuKybmS7R1CV6AhOgqHiLHYQEPWYDE5czQXaJYQnDZ QasjuNdYYlKXKDjbnadOCJSa6rACNp6UpYsoEBSJ8NVvuWg+W65Ets/ePOcxJ5gm kfceN2e5eJXNqb+Vw8pdZamm4batfJE51NiYHHpxWJ+n15aX6QnY/iiSg6tGpxNX KFzn2sdnilMVqTwAEDTgDzAyckKCrqt/ -----END CERTIFICATE-----Generated at Tue Oct 21 00:43:47 2025 by rpki-client