$ rpki-client -vvf rpki.apnic.net/member_repository/A91F2230/ADFA554C708211E9B7BC390AC4F9AE02/F2pOA7VAryUUqLxxnCug-fdv-y8.mft File: F2pOA7VAryUUqLxxnCug-fdv-y8.mft (raw, json) Hash identifier: BhWfJ6I7pm8qrsXj+mqIzXdnUclVRDCeQdc46THiPbw= Subject key identifier: BA:D2:C9:7D:46:8F:49:90:D8:3E:C2:98:7A:64:B4:1F:44:3A:76:95 Authority key identifier: 17:6A:4E:03:B5:40:AF:25:14:A8:BC:71:9C:2B:A0:F9:F7:6F:FB:2F Certificate issuer: /CN=A91F2230/serialNumber=176A4E03B540AF2514A8BC719C2BA0F9F76FFB2F Certificate serial: 0F87 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F2pOA7VAryUUqLxxnCug-fdv-y8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F2230/ADFA554C708211E9B7BC390AC4F9AE02/F2pOA7VAryUUqLxxnCug-fdv-y8.mft Manifest number: 0F7E Signing time: Sat 18 Oct 2025 18:09:02 +0000 Manifest this update: Sat 18 Oct 2025 18:09:01 +0000 Manifest next update: Sat 25 Oct 2025 18:09:01 +0000 Files and hashes: 1: F2pOA7VAryUUqLxxnCug-fdv-y8.crl (hash: LOs4R3J9pS827390XLWaiMPXgf0VyiswgCxm7KdTbWc=) 2: 09CEF4D0708411E9AC9EA90EC4F9AE02.roa (hash: qze9TLSC/LlQUaDdTzlKDoE3Bw7Tcrh+S+c1zck+d7A=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F2230/ADFA554C708211E9B7BC390AC4F9AE02/F2pOA7VAryUUqLxxnCug-fdv-y8.crl rsync://rpki.apnic.net/member_repository/A91F2230/ADFA554C708211E9B7BC390AC4F9AE02/F2pOA7VAryUUqLxxnCug-fdv-y8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F2pOA7VAryUUqLxxnCug-fdv-y8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 18:09:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3975 (0xf87) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F2230, serialNumber=176A4E03B540AF2514A8BC719C2BA0F9F76FFB2F Validity Not Before: Oct 18 18:09:01 2025 GMT Not After : Oct 25 18:09:01 2025 GMT Subject: CN=68f3d7bd-3c40 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:7b:ec:35:ad:1d:ed:42:e1:bc:0d:8e:98:6b: f7:09:c5:88:ea:75:0f:c0:0a:71:43:5a:58:ea:ab: cf:5b:49:5e:9f:b3:32:f6:df:b7:76:a2:04:92:dc: 17:c7:f2:7c:4d:21:d8:7a:e4:2f:bb:42:6e:bf:84: 7b:db:b4:e5:f5:86:f1:91:69:b7:04:01:70:9e:ba: 52:a6:d0:03:2e:83:06:ed:49:44:cc:b6:b4:7c:7f: 62:87:76:e7:09:2e:98:09:a9:9b:4b:ed:f2:af:8b: 0a:a8:2c:50:a0:14:19:52:e6:36:28:0f:ad:40:bb: 7e:86:8d:36:1e:0e:8b:35:0d:1d:94:9e:f2:fa:a8: f9:ed:93:58:ec:1c:bd:c8:3c:93:56:ac:32:d0:4d: 14:f2:d6:be:41:dd:ed:7e:a5:54:be:d1:95:67:73: eb:89:23:c7:9f:f0:f4:3b:4f:bb:7d:57:d1:02:90: c5:39:fc:c8:d2:63:f1:31:be:77:a2:b0:5a:bf:fb: d1:1c:5f:28:f7:88:6f:97:5c:92:08:55:db:76:bd: f0:64:bf:b4:e3:05:94:b2:f6:ec:78:3a:f0:f2:b1: a3:98:34:1d:2c:ce:26:6b:d2:19:b3:80:0c:e7:09: be:0a:15:d2:ca:15:fc:04:54:a2:a5:c4:8b:b1:d4: 6f:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:D2:C9:7D:46:8F:49:90:D8:3E:C2:98:7A:64:B4:1F:44:3A:76:95 X509v3 Authority Key Identifier: keyid:17:6A:4E:03:B5:40:AF:25:14:A8:BC:71:9C:2B:A0:F9:F7:6F:FB:2F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F2230/ADFA554C708211E9B7BC390AC4F9AE02/F2pOA7VAryUUqLxxnCug-fdv-y8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F2pOA7VAryUUqLxxnCug-fdv-y8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F2230/ADFA554C708211E9B7BC390AC4F9AE02/F2pOA7VAryUUqLxxnCug-fdv-y8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8c:64:a8:78:05:5b:4a:8b:19:43:85:34:f5:25:c2:eb:65:99: 5f:30:dd:49:01:b8:e5:04:2b:50:d6:73:53:0c:8f:49:dc:44: 5a:d4:51:58:b2:53:17:dd:33:e5:f1:65:87:2c:a1:4a:4f:53: f6:08:07:0a:da:03:a0:6b:dd:f0:22:a9:60:fa:08:76:23:c0: 78:b6:2c:9d:44:95:57:83:d5:f1:86:9e:42:10:35:4a:41:f9: 24:e7:d0:09:e8:7b:b3:9a:ce:b8:05:22:f5:7f:60:45:bb:89: 36:f4:d7:b9:33:02:ed:19:94:10:c6:bc:42:ea:63:a0:b8:df: ee:c6:41:5f:4d:bc:19:03:1a:fe:bd:b3:24:92:d9:26:50:d3: de:08:c6:4a:ef:d2:64:df:5f:ee:06:3a:fa:c0:ac:5a:ec:5f: df:de:7e:d9:ac:9f:64:cb:02:50:75:3f:85:0f:dd:c4:a9:34: 96:ab:bc:e0:d6:4e:cc:b8:25:20:54:91:5d:1d:df:45:0c:ce: 99:a5:c4:54:d1:f6:ca:9d:eb:8e:2d:85:29:21:b9:d5:ae:d4: 02:1a:c2:ad:d2:15:54:49:c2:26:04:e7:3f:98:4c:82:97:47: 95:22:ae:5b:10:62:4e:41:c0:13:30:1d:44:d4:72:c3:69:d1: 47:c3:1c:22 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICD4cwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjIyMzAxMTAvBgNVBAUTKDE3NkE0RTAzQjU0MEFGMjUxNEE4QkM3MTlDMkJBMEY5 Rjc2RkZCMkYwHhcNMjUxMDE4MTgwOTAxWhcNMjUxMDI1MTgwOTAxWjAYMRYwFAYD VQQDEw02OGYzZDdiZC0zYzQwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAunvsNa0d7ULhvA2OmGv3CcWI6nUPwApxQ1pY6qvPW0len7My9t+3dqIEktwX x/J8TSHYeuQvu0Juv4R727Tl9YbxkWm3BAFwnrpSptADLoMG7UlEzLa0fH9ih3bn CS6YCambS+3yr4sKqCxQoBQZUuY2KA+tQLt+ho02Hg6LNQ0dlJ7y+qj57ZNY7By9 yDyTVqwy0E0U8ta+Qd3tfqVUvtGVZ3PriSPHn/D0O0+7fVfRApDFOfzI0mPxMb53 orBav/vRHF8o94hvl1ySCFXbdr3wZL+04wWUsvbseDrw8rGjmDQdLM4ma9IZs4AM 5wm+ChXSyhX8BFSipcSLsdRvqwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLrSyX1G j0mQ2D7CmHpktB9EOnaVMB8GA1UdIwQYMBaAFBdqTgO1QK8lFKi8cZwroPn3b/sv MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMjIzMC9BREZBNTU0Qzcw ODIxMUU5QjdCQzM5MEFDNEY5QUUwMi9GMnBPQTdWQXJ5VVVxTHh4bkN1Zy1mZHYt eTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0YycE9BN1ZBcnlVVXFMeHhuQ3VnLWZkdi15OC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG MjIzMC9BREZBNTU0QzcwODIxMUU5QjdCQzM5MEFDNEY5QUUwMi9GMnBPQTdWQXJ5 VVVxTHh4bkN1Zy1mZHYteTgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCMZKh4BVtKixlDhTT1JcLrZZlfMN1JAbjlBCtQ1nNTDI9J3ERa1FFY slMX3TPl8WWHLKFKT1P2CAcK2gOga93wIqlg+gh2I8B4tiydRJVXg9Xxhp5CEDVK Qfkk59AJ6Huzms64BSL1f2BFu4k29Ne5MwLtGZQQxrxC6mOguN/uxkFfTbwZAxr+ vbMkktkmUNPeCMZK79Jk31/uBjr6wKxa7F/f3n7ZrJ9kywJQdT+FD93EqTSWq7zg 1k7MuCUgVJFdHd9FDM6ZpcRU0fbKneuOLYUpIbnVrtQCGsKt0hVUScImBOc/mEyC l0eVIq5bEGJOQcATMB1E1HLDadFHwxwi -----END CERTIFICATE-----Generated at Mon Oct 20 13:51:54 2025 by rpki-client