$ rpki-client -vvf rpki.apnic.net/member_repository/A91E9CE4/69CCB5BC089C11EDBFA2FB4BC4F9AE02/FFiKS-nrikuZgtGyXesMYHOK77s.mft File: FFiKS-nrikuZgtGyXesMYHOK77s.mft (raw, json) Hash identifier: qTQYHhKgQCQ6CDuUTW0Og9wetxCGU2g4wRDacFTnRSE= Subject key identifier: 5C:AA:CD:02:2F:15:EE:3F:4C:57:7E:C0:3C:11:F3:46:0D:A7:F2:52 Authority key identifier: 14:58:8A:4B:E9:EB:8A:4B:99:82:D1:B2:5D:EB:0C:60:73:8A:EF:BB Certificate issuer: /CN=A91E9CE4/serialNumber=14588A4BE9EB8A4B9982D1B25DEB0C60738AEFBB Certificate serial: 02D2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FFiKS-nrikuZgtGyXesMYHOK77s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E9CE4/69CCB5BC089C11EDBFA2FB4BC4F9AE02/FFiKS-nrikuZgtGyXesMYHOK77s.mft Manifest number: 02CE Signing time: Sun 19 Oct 2025 03:30:06 +0000 Manifest this update: Sun 19 Oct 2025 03:30:05 +0000 Manifest next update: Sun 26 Oct 2025 03:30:05 +0000 Files and hashes: 1: FFiKS-nrikuZgtGyXesMYHOK77s.crl (hash: BDeWPLf9guPjDOfTHkMNJZcz1LWEJiJQUuf9qpxvY+E=) 2: 4D942BCE08A011ED8AD21272C4F9AE02.roa (hash: Th4mKp6+0pNQJZ74KauM9+0p7vkvxGV4bsaH8ldZHTQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E9CE4/69CCB5BC089C11EDBFA2FB4BC4F9AE02/FFiKS-nrikuZgtGyXesMYHOK77s.crl rsync://rpki.apnic.net/member_repository/A91E9CE4/69CCB5BC089C11EDBFA2FB4BC4F9AE02/FFiKS-nrikuZgtGyXesMYHOK77s.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FFiKS-nrikuZgtGyXesMYHOK77s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 03:30:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 722 (0x2d2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E9CE4, serialNumber=14588A4BE9EB8A4B9982D1B25DEB0C60738AEFBB Validity Not Before: Oct 19 03:30:05 2025 GMT Not After : Oct 26 03:30:05 2025 GMT Subject: CN=68f45b3e-729d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:bf:fc:e1:3f:9b:b7:32:ee:b7:6a:d5:1f:41: 85:fa:f5:48:76:5f:d7:15:a8:c6:39:fa:84:11:72: 1d:2d:85:e8:2c:2f:dd:d1:98:6e:cf:6b:3c:59:e3: 7f:5c:64:fa:b1:ac:98:13:9f:4d:c4:da:71:7c:4a: 94:1e:89:a6:a5:bb:4f:e8:40:0f:c2:44:f6:fd:b1: e2:6a:99:89:c6:02:b5:67:a1:28:d3:cd:d7:31:bf: 98:d7:bd:3c:67:3c:50:c4:f8:d5:83:07:02:03:4a: 00:22:8b:d9:f7:40:f4:61:0a:92:5f:06:56:d7:c5: 1e:cc:28:46:11:40:06:b9:2f:23:a4:1d:ef:dd:60: 8a:43:6b:30:96:af:05:b3:15:59:ed:27:aa:f7:11: 91:db:ff:4c:bd:a6:74:a7:d1:5f:77:f9:e5:dc:25: bd:50:93:48:94:54:e6:bd:ba:e1:4f:74:61:4f:9a: 8e:91:c1:2d:a8:61:d2:7f:9d:66:2a:5d:c9:2f:a8: 31:11:9b:19:83:39:08:f3:9c:4f:85:60:7c:3a:fa: 84:73:29:b3:38:9c:f9:dc:2a:6a:ee:f7:76:45:09: b2:e5:6e:ab:3c:a3:64:bc:17:2d:5e:c6:ad:37:35: e7:73:12:8f:cb:58:15:2d:ef:23:1c:db:a7:ba:36: 8b:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:AA:CD:02:2F:15:EE:3F:4C:57:7E:C0:3C:11:F3:46:0D:A7:F2:52 X509v3 Authority Key Identifier: keyid:14:58:8A:4B:E9:EB:8A:4B:99:82:D1:B2:5D:EB:0C:60:73:8A:EF:BB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E9CE4/69CCB5BC089C11EDBFA2FB4BC4F9AE02/FFiKS-nrikuZgtGyXesMYHOK77s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FFiKS-nrikuZgtGyXesMYHOK77s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E9CE4/69CCB5BC089C11EDBFA2FB4BC4F9AE02/FFiKS-nrikuZgtGyXesMYHOK77s.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4a:d4:db:4d:71:85:75:dd:21:d5:6d:9d:25:5a:3d:76:a6:0e: f4:a6:9f:c2:11:58:53:9e:aa:42:dc:f7:62:b7:db:89:5f:75: 02:0b:b9:88:b6:28:f2:f1:13:b7:49:4d:86:b1:fe:ce:84:76: 7c:e0:c6:9f:cf:8c:75:10:b7:46:74:6a:a9:74:c2:e8:4a:06: 77:bb:87:a9:c6:c6:84:48:4d:9d:72:5c:c8:7e:00:29:80:06: 71:3c:3e:1a:8a:41:9c:f7:6c:fb:84:f7:15:9f:4e:4a:39:4c: 39:22:7a:c9:ff:96:08:18:cd:87:31:77:96:f3:f4:77:fe:86: 5a:d4:90:45:17:db:bd:b1:11:d7:c1:ee:96:f2:50:75:71:e8: 5a:1f:f4:96:45:70:88:1d:ae:43:c0:be:0f:a2:3b:94:7d:91: eb:54:9c:cd:f6:80:f7:ad:3f:39:4a:9b:c1:48:3c:11:7c:6c: b2:27:59:4b:ac:4c:30:2b:1f:55:92:44:1a:de:10:89:31:59: 72:51:cc:15:35:3d:20:8d:df:80:40:d3:10:f9:d1:b6:6c:9c: b3:64:bd:6d:cc:b2:65:d6:71:39:47:d2:05:06:e8:8a:ca:25: 8f:69:b3:11:1e:7c:22:e6:11:f2:ce:e2:de:f2:81:2e:c6:cf: 0c:51:a9:d8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAtIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTlDRTQxMTAvBgNVBAUTKDE0NTg4QTRCRTlFQjhBNEI5OTgyRDFCMjVERUIwQzYw NzM4QUVGQkIwHhcNMjUxMDE5MDMzMDA1WhcNMjUxMDI2MDMzMDA1WjAYMRYwFAYD VQQDEw02OGY0NWIzZS03MjlkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmr/84T+btzLut2rVH0GF+vVIdl/XFajGOfqEEXIdLYXoLC/d0Zhuz2s8WeN/ XGT6sayYE59NxNpxfEqUHommpbtP6EAPwkT2/bHiapmJxgK1Z6Eo083XMb+Y1708 ZzxQxPjVgwcCA0oAIovZ90D0YQqSXwZW18UezChGEUAGuS8jpB3v3WCKQ2swlq8F sxVZ7Seq9xGR2/9MvaZ0p9Ffd/nl3CW9UJNIlFTmvbrhT3RhT5qOkcEtqGHSf51m Kl3JL6gxEZsZgzkI85xPhWB8OvqEcymzOJz53Cpq7vd2RQmy5W6rPKNkvBctXsat NzXncxKPy1gVLe8jHNunujaLNQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFyqzQIv Fe4/TFd+wDwR80YNp/JSMB8GA1UdIwQYMBaAFBRYikvp64pLmYLRsl3rDGBziu+7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFOUNFNC82OUNDQjVCQzA4 OUMxMUVEQkZBMkZCNEJDNEY5QUUwMi9GRmlLUy1ucmlrdVpndEd5WGVzTVlIT0s3 N3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZGaUtTLW5yaWt1Wmd0R3lYZXNNWUhPSzc3cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF OUNFNC82OUNDQjVCQzA4OUMxMUVEQkZBMkZCNEJDNEY5QUUwMi9GRmlLUy1ucmlr dVpndEd5WGVzTVlIT0s3N3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBK1NtNcYV13SHVbZ0lWj12pg70pp/CEVhTnqpC3Pdit9uJX3UCC7mI tijy8RO3SU2Gsf7OhHZ84Mafz4x1ELdGdGqpdMLoSgZ3u4epxsaESE2dclzIfgAp gAZxPD4aikGc92z7hPcVn05KOUw5InrJ/5YIGM2HMXeW8/R3/oZa1JBFF9u9sRHX we6W8lB1cehaH/SWRXCIHa5DwL4PojuUfZHrVJzN9oD3rT85SpvBSDwRfGyyJ1lL rEwwKx9VkkQa3hCJMVlyUcwVNT0gjd+AQNMQ+dG2bJyzZL1tzLJl1nE5R9IFBuiK yiWPabMRHnwi5hHyzuLe8oEuxs8MUanY -----END CERTIFICATE-----Generated at Mon Oct 20 16:14:51 2025 by rpki-client