$ rpki-client -vvf rpki.apnic.net/member_repository/A91E9721/8AEC2AC43FC411E992A3E62DC4F9AE02/faWJztV_HlzEhgPROEIjk24WAn4.mft File: faWJztV_HlzEhgPROEIjk24WAn4.mft (raw, json) Hash identifier: LG7uldCYtpvWQrqgfEHZZY0mj7NYqa0LKaYcAW48duY= Subject key identifier: EA:88:41:49:C4:9E:69:8A:CC:D2:55:AC:20:07:E1:8B:B0:99:D1:0E Authority key identifier: 7D:A5:89:CE:D5:7F:1E:5C:C4:86:03:D1:38:42:23:93:6E:16:02:7E Certificate issuer: /CN=A91E9721/serialNumber=7DA589CED57F1E5CC48603D1384223936E16027E Certificate serial: 1088 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/faWJztV_HlzEhgPROEIjk24WAn4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E9721/8AEC2AC43FC411E992A3E62DC4F9AE02/faWJztV_HlzEhgPROEIjk24WAn4.mft Manifest number: 107D Signing time: Sat 18 Oct 2025 17:56:45 +0000 Manifest this update: Sat 18 Oct 2025 17:56:44 +0000 Manifest next update: Sat 25 Oct 2025 17:56:44 +0000 Files and hashes: 1: faWJztV_HlzEhgPROEIjk24WAn4.crl (hash: Z93WvxV9ABBqQFlbb7fUzxXbSY9hAIqQFrkiGNHwLVo=) 2: 16EA264C3FC611E9A0E68A30C4F9AE02.roa (hash: dldKM97yEUd08i981SQo623EWErkeJZ6nMm6B405eVg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E9721/8AEC2AC43FC411E992A3E62DC4F9AE02/faWJztV_HlzEhgPROEIjk24WAn4.crl rsync://rpki.apnic.net/member_repository/A91E9721/8AEC2AC43FC411E992A3E62DC4F9AE02/faWJztV_HlzEhgPROEIjk24WAn4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/faWJztV_HlzEhgPROEIjk24WAn4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 17:56:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4232 (0x1088) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E9721, serialNumber=7DA589CED57F1E5CC48603D1384223936E16027E Validity Not Before: Oct 18 17:56:44 2025 GMT Not After : Oct 25 17:56:44 2025 GMT Subject: CN=68f3d4dd-379f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:c8:44:fe:c9:fe:90:b4:ef:d5:94:a1:e0:8f: 9c:c5:46:18:08:3b:0b:d2:12:0b:fe:37:bb:bf:e2: 96:7a:fd:e7:9f:db:6f:20:7f:3d:08:fa:70:5a:c4: 46:86:96:ad:4c:66:d3:9b:a1:26:53:b7:c5:05:20: 4b:c3:76:9b:74:8e:e7:9c:20:ca:09:41:bf:06:4a: ab:b8:9e:f9:01:47:fd:0d:94:9f:0d:71:a6:03:47: 11:14:79:47:c4:20:30:6f:e5:4b:3c:bb:88:c5:5b: 15:c4:5e:34:98:cb:13:e2:7f:6a:64:62:ee:d9:4d: 33:97:09:bc:de:22:59:2d:93:8e:9a:e3:94:0e:a3: 1b:cf:f0:8a:74:4f:bd:f7:dc:52:b1:14:7b:ed:b9: 25:0e:31:3b:7b:33:65:87:0e:2a:a5:31:52:5e:2f: 5c:ed:aa:a6:46:34:35:e0:1a:c7:b6:ff:3e:ac:40: f0:a3:80:94:6b:bb:d2:1c:3a:c6:b7:12:e6:49:23: 97:00:32:cd:38:84:d5:64:bf:84:9d:67:b4:9d:38: 79:5e:43:ec:20:18:2f:3f:e4:87:87:88:14:9f:5f: 36:1d:cd:27:0e:3a:70:74:46:ef:b5:60:f7:41:0a: 3d:91:78:b7:07:46:8f:07:a9:1c:29:78:c1:f5:50: 02:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:88:41:49:C4:9E:69:8A:CC:D2:55:AC:20:07:E1:8B:B0:99:D1:0E X509v3 Authority Key Identifier: keyid:7D:A5:89:CE:D5:7F:1E:5C:C4:86:03:D1:38:42:23:93:6E:16:02:7E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E9721/8AEC2AC43FC411E992A3E62DC4F9AE02/faWJztV_HlzEhgPROEIjk24WAn4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/faWJztV_HlzEhgPROEIjk24WAn4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E9721/8AEC2AC43FC411E992A3E62DC4F9AE02/faWJztV_HlzEhgPROEIjk24WAn4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 21:9a:8a:f9:3d:86:97:d9:8b:9a:33:2b:48:a6:39:e6:55:ca: 12:6e:ed:e7:fa:dc:83:03:92:df:86:71:8d:38:45:cb:9a:ea: c1:99:35:98:14:d5:15:72:63:4b:6a:7b:56:77:e6:9a:a8:95: d8:54:7a:e0:b6:28:17:0e:c6:c7:a4:09:30:8e:42:d9:c9:74: 61:bc:58:27:d2:27:d5:c2:49:52:46:dd:f2:db:a8:4b:fa:4a: ca:69:f6:85:af:d9:e7:da:44:3a:f5:79:26:01:b5:99:92:16: 28:df:e2:94:d4:38:dd:2b:0c:ed:d6:17:d3:29:fb:af:b9:54: 5c:72:60:10:27:70:06:2e:53:dd:dc:d3:ef:83:35:a9:9f:51: 4a:c5:59:94:49:ec:95:83:25:32:da:eb:84:35:aa:ab:4a:73: 1c:7b:2b:c1:5a:d3:2b:4b:45:c3:75:2c:65:03:b8:eb:96:63: 73:c4:75:57:ac:ca:71:62:22:45:a8:1b:35:43:a8:c4:0e:99: ef:5e:f9:d0:b4:4e:aa:de:4c:bd:17:22:a0:d5:a3:88:f9:ea: d9:d8:08:76:19:dc:f3:44:a4:ba:6b:80:dd:87:be:09:ec:f0: a6:3f:8e:82:a2:2a:bf:e6:bf:8c:81:d1:80:34:c2:f2:7e:76: f7:e9:10:48 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEIgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTk3MjExMTAvBgNVBAUTKDdEQTU4OUNFRDU3RjFFNUNDNDg2MDNEMTM4NDIyMzkz NkUxNjAyN0UwHhcNMjUxMDE4MTc1NjQ0WhcNMjUxMDI1MTc1NjQ0WjAYMRYwFAYD VQQDEw02OGYzZDRkZC0zNzlmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxMhE/sn+kLTv1ZSh4I+cxUYYCDsL0hIL/je7v+KWev3nn9tvIH89CPpwWsRG hpatTGbTm6EmU7fFBSBLw3abdI7nnCDKCUG/BkqruJ75AUf9DZSfDXGmA0cRFHlH xCAwb+VLPLuIxVsVxF40mMsT4n9qZGLu2U0zlwm83iJZLZOOmuOUDqMbz/CKdE+9 99xSsRR77bklDjE7ezNlhw4qpTFSXi9c7aqmRjQ14BrHtv8+rEDwo4CUa7vSHDrG txLmSSOXADLNOITVZL+EnWe0nTh5XkPsIBgvP+SHh4gUn182Hc0nDjpwdEbvtWD3 QQo9kXi3B0aPB6kcKXjB9VACswIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOqIQUnE nmmKzNJVrCAH4YuwmdEOMB8GA1UdIwQYMBaAFH2lic7Vfx5cxIYD0ThCI5NuFgJ+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFOTcyMS84QUVDMkFDNDNG QzQxMUU5OTJBM0U2MkRDNEY5QUUwMi9mYVdKenRWX0hsekVoZ1BST0VJamsyNFdB bjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ZhV0p6dFZfSGx6RWhnUFJPRUlqazI0V0FuNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF OTcyMS84QUVDMkFDNDNGQzQxMUU5OTJBM0U2MkRDNEY5QUUwMi9mYVdKenRWX0hs ekVoZ1BST0VJamsyNFdBbjQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAhmor5PYaX2YuaMytIpjnmVcoSbu3n+tyDA5LfhnGNOEXLmurBmTWY FNUVcmNLantWd+aaqJXYVHrgtigXDsbHpAkwjkLZyXRhvFgn0ifVwklSRt3y26hL +krKafaFr9nn2kQ69XkmAbWZkhYo3+KU1DjdKwzt1hfTKfuvuVRccmAQJ3AGLlPd 3NPvgzWpn1FKxVmUSeyVgyUy2uuENaqrSnMceyvBWtMrS0XDdSxlA7jrlmNzxHVX rMpxYiJFqBs1Q6jEDpnvXvnQtE6q3ky9FyKg1aOI+erZ2Ah2GdzzRKS6a4Ddh74J 7PCmP46Coiq/5r+MgdGANMLyfnb36RBI -----END CERTIFICATE-----Generated at Mon Oct 20 11:39:44 2025 by rpki-client