$ rpki-client -vvf rpki.apnic.net/member_repository/A91F61DD/7C78E2BC309311ECAB68433FC4F9AE02/FdYNYNak9QCRCZpy4NBe7z6vduk.mft File: FdYNYNak9QCRCZpy4NBe7z6vduk.mft (raw, json) Hash identifier: sz+X0oLy13zgMVMgji3SOk2qLGLpoDHWR2i2gm0wP7c= Subject key identifier: 84:50:94:A5:3B:D9:EF:5E:02:A4:FC:E6:E9:DF:10:7C:DC:96:32:67 Authority key identifier: 15:D6:0D:60:D6:A4:F5:00:91:09:9A:72:E0:D0:5E:EF:3E:AF:76:E9 Certificate issuer: /CN=A91F61DD/serialNumber=15D60D60D6A4F50091099A72E0D05EEF3EAF76E9 Certificate serial: 0504 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FdYNYNak9QCRCZpy4NBe7z6vduk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F61DD/7C78E2BC309311ECAB68433FC4F9AE02/FdYNYNak9QCRCZpy4NBe7z6vduk.mft Manifest number: 04FB Signing time: Sun 19 Oct 2025 01:27:58 +0000 Manifest this update: Sun 19 Oct 2025 01:27:58 +0000 Manifest next update: Sun 26 Oct 2025 01:27:58 +0000 Files and hashes: 1: FdYNYNak9QCRCZpy4NBe7z6vduk.crl (hash: yHdARQHNZsM9ZeoHjAvUMP5IsFaGrLjL/PHB2UaFXtI=) 2: BFEEB5E4309D11ECABBBBF25C4F9AE02.roa (hash: prBekR9LUayidaAK9GSYWyVHKMLahKIDTDQ64hhVlAo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F61DD/7C78E2BC309311ECAB68433FC4F9AE02/FdYNYNak9QCRCZpy4NBe7z6vduk.crl rsync://rpki.apnic.net/member_repository/A91F61DD/7C78E2BC309311ECAB68433FC4F9AE02/FdYNYNak9QCRCZpy4NBe7z6vduk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FdYNYNak9QCRCZpy4NBe7z6vduk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 01:27:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1284 (0x504) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F61DD, serialNumber=15D60D60D6A4F50091099A72E0D05EEF3EAF76E9 Validity Not Before: Oct 19 01:27:58 2025 GMT Not After : Oct 26 01:27:58 2025 GMT Subject: CN=68f43e9e-883f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:5e:8c:84:f8:87:83:bd:a4:aa:04:e1:83:5f: 88:64:01:85:cb:c8:da:20:d4:32:fb:a2:bc:90:be: 44:76:71:e0:28:72:12:c1:0c:20:09:db:43:42:b7: c4:46:22:16:d0:3a:86:65:ba:7e:2a:fc:40:31:81: 3c:80:af:b6:7f:d6:fa:f3:3c:aa:5a:04:a6:4d:ea: ff:13:9e:c9:98:53:ed:71:9e:68:cc:cc:16:eb:ef: 3f:bb:56:42:eb:05:21:9a:6f:95:b8:f9:4f:50:73: aa:95:0d:80:6c:de:d4:fd:09:18:f5:2a:d9:a3:55: ca:1a:ff:34:90:06:c7:9e:cc:39:58:05:a0:7d:b0: 45:67:6b:df:e5:fe:09:80:f5:38:a1:eb:d6:f6:d8: cb:1d:0a:13:2f:9d:1c:23:a4:35:41:84:c6:a1:f3: c6:a2:25:17:1d:bc:2e:d4:6b:68:2d:23:ed:68:f5: 8a:d3:9a:a4:62:c6:76:c2:4d:a6:2e:b2:12:91:e5: 12:7c:e2:ee:f9:df:9e:51:65:56:fd:c2:e9:e6:55: 05:82:cb:5c:c9:98:24:8a:20:d7:04:ad:9b:22:cc: ea:cc:7c:ea:0c:4b:3c:0f:50:94:11:17:e1:83:42: 9a:00:af:53:78:43:64:7b:ce:62:b0:7b:03:b0:b9: a8:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:50:94:A5:3B:D9:EF:5E:02:A4:FC:E6:E9:DF:10:7C:DC:96:32:67 X509v3 Authority Key Identifier: keyid:15:D6:0D:60:D6:A4:F5:00:91:09:9A:72:E0:D0:5E:EF:3E:AF:76:E9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F61DD/7C78E2BC309311ECAB68433FC4F9AE02/FdYNYNak9QCRCZpy4NBe7z6vduk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FdYNYNak9QCRCZpy4NBe7z6vduk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F61DD/7C78E2BC309311ECAB68433FC4F9AE02/FdYNYNak9QCRCZpy4NBe7z6vduk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 23:09:49:5f:9e:6b:6e:0e:be:72:14:f1:20:37:1b:77:e5:43: df:1e:ca:a5:1b:e9:d6:c1:fe:82:44:77:29:8d:1e:e1:48:b9: 97:e6:40:6f:b3:63:02:e9:8a:0a:33:d6:be:00:89:a1:11:01: 08:1d:eb:0f:02:2e:6c:2c:f5:8e:f2:8f:ca:df:c9:d5:47:68: 10:bc:9c:38:c6:06:21:3c:a6:1f:5f:46:ab:cd:db:6a:37:1e: 00:de:b2:96:94:e0:c5:f1:f6:c0:d8:ed:45:5a:cb:9b:12:09: cc:b3:99:e6:25:c8:75:b3:a0:25:7c:b6:c4:92:50:22:8a:16: f2:75:87:fa:e3:fa:0a:81:d9:1a:c5:b3:9b:9b:18:cd:40:c4: 5c:9d:bc:c9:d4:da:b5:04:53:4a:c0:36:a6:4e:01:15:88:81: cb:0e:e6:1c:dc:a8:57:22:05:7b:22:1e:8b:6f:e9:29:49:95: a3:e5:f8:eb:71:b0:47:a3:3f:08:d9:cf:40:da:fc:6d:d8:8f: e6:16:3f:90:4a:70:4a:73:1e:28:8b:d1:74:d7:5a:98:72:87: 22:4a:97:2d:01:d2:aa:4f:b6:d2:c8:8a:6d:02:ad:21:90:47: 5b:5f:19:97:dc:19:06:e5:fb:f5:2b:b5:40:b5:5a:53:11:2f: cd:92:36:57 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBQQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjYxREQxMTAvBgNVBAUTKDE1RDYwRDYwRDZBNEY1MDA5MTA5OUE3MkUwRDA1RUVG M0VBRjc2RTkwHhcNMjUxMDE5MDEyNzU4WhcNMjUxMDI2MDEyNzU4WjAYMRYwFAYD VQQDEw02OGY0M2U5ZS04ODNmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA116MhPiHg72kqgThg1+IZAGFy8jaINQy+6K8kL5EdnHgKHISwQwgCdtDQrfE RiIW0DqGZbp+KvxAMYE8gK+2f9b68zyqWgSmTer/E57JmFPtcZ5ozMwW6+8/u1ZC 6wUhmm+VuPlPUHOqlQ2AbN7U/QkY9SrZo1XKGv80kAbHnsw5WAWgfbBFZ2vf5f4J gPU4oevW9tjLHQoTL50cI6Q1QYTGofPGoiUXHbwu1GtoLSPtaPWK05qkYsZ2wk2m LrISkeUSfOLu+d+eUWVW/cLp5lUFgstcyZgkiiDXBK2bIszqzHzqDEs8D1CUERfh g0KaAK9TeENke85isHsDsLmoJwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIRQlKU7 2e9eAqT85unfEHzcljJnMB8GA1UdIwQYMBaAFBXWDWDWpPUAkQmacuDQXu8+r3bp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNjFERC83Qzc4RTJCQzMw OTMxMUVDQUI2ODQzM0ZDNEY5QUUwMi9GZFlOWU5hazlRQ1JDWnB5NE5CZTd6NnZk dWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZkWU5ZTmFrOVFDUkNacHk0TkJlN3o2dmR1ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NjFERC83Qzc4RTJCQzMwOTMxMUVDQUI2ODQzM0ZDNEY5QUUwMi9GZFlOWU5hazlR Q1JDWnB5NE5CZTd6NnZkdWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAjCUlfnmtuDr5yFPEgNxt35UPfHsqlG+nWwf6CRHcpjR7hSLmX5kBv s2MC6YoKM9a+AImhEQEIHesPAi5sLPWO8o/K38nVR2gQvJw4xgYhPKYfX0arzdtq Nx4A3rKWlODF8fbA2O1FWsubEgnMs5nmJch1s6AlfLbEklAiihbydYf64/oKgdka xbObmxjNQMRcnbzJ1Nq1BFNKwDamTgEViIHLDuYc3KhXIgV7Ih6Lb+kpSZWj5fjr cbBHoz8I2c9A2vxt2I/mFj+QSnBKcx4oi9F011qYcociSpctAdKqT7bSyIptAq0h kEdbXxmX3BkG5fv1K7VAtVpTES/NkjZX -----END CERTIFICATE-----Generated at Mon Oct 20 14:01:04 2025 by rpki-client