$ rpki-client -vvf rpki.apnic.net/member_repository/A91F6E7D/1E9A11C2838111EAACB9BC30C4F9AE02/FhPW6_zYSc_MCoiNuX5rv1IHrbM.mft File: FhPW6_zYSc_MCoiNuX5rv1IHrbM.mft (raw, json) Hash identifier: UqkpQ27PkybRCnnB69DJ533SWdeO9BBRdeoABkYq5Dw= Subject key identifier: 46:A1:1B:83:82:F4:08:D6:83:94:EA:9E:C4:3E:29:A5:29:70:D4:B0 Authority key identifier: 16:13:D6:EB:FC:D8:49:CF:CC:0A:88:8D:B9:7E:6B:BF:52:07:AD:B3 Certificate issuer: /CN=A91F6E7D/serialNumber=1613D6EBFCD849CFCC0A888DB97E6BBF5207ADB3 Certificate serial: 0A0B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FhPW6_zYSc_MCoiNuX5rv1IHrbM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F6E7D/1E9A11C2838111EAACB9BC30C4F9AE02/FhPW6_zYSc_MCoiNuX5rv1IHrbM.mft Manifest number: 0A03 Signing time: Sat 18 Oct 2025 20:51:11 +0000 Manifest this update: Sat 18 Oct 2025 20:51:10 +0000 Manifest next update: Sat 25 Oct 2025 20:51:10 +0000 Files and hashes: 1: FhPW6_zYSc_MCoiNuX5rv1IHrbM.crl (hash: EDwujwxvN8pGcj52QZ5vjrpldekxFuDnfhLcpuLIlFs=) 2: 4AEB32A2D2F911EA93B2C659C4F9AE02.roa (hash: TMxL1xAZ65D51is8H5Va3LgyajI14UzGu3dizhDhFWQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F6E7D/1E9A11C2838111EAACB9BC30C4F9AE02/FhPW6_zYSc_MCoiNuX5rv1IHrbM.crl rsync://rpki.apnic.net/member_repository/A91F6E7D/1E9A11C2838111EAACB9BC30C4F9AE02/FhPW6_zYSc_MCoiNuX5rv1IHrbM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FhPW6_zYSc_MCoiNuX5rv1IHrbM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 20:51:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2571 (0xa0b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F6E7D, serialNumber=1613D6EBFCD849CFCC0A888DB97E6BBF5207ADB3 Validity Not Before: Oct 18 20:51:10 2025 GMT Not After : Oct 25 20:51:10 2025 GMT Subject: CN=68f3fdbe-c626 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:12:cf:76:17:72:6a:ed:e6:0e:fa:17:41:06: 43:ab:f1:ae:ac:73:a1:9e:9f:ef:99:8b:18:b0:50: c9:72:06:9a:d1:b6:1c:64:39:fe:a0:99:e5:7f:6b: 59:96:50:05:27:51:83:71:44:49:24:5f:98:da:a5: b2:b3:5a:5f:c5:30:40:36:fc:e8:e5:0c:97:13:a2: fb:62:b7:97:da:f7:18:c0:a6:4d:2f:a0:87:28:67: 38:4f:83:ea:14:9f:85:45:be:f4:b7:7b:13:a5:bf: b4:57:b7:64:dd:60:72:54:f5:5a:d2:c1:e7:5d:da: 4d:ab:fb:4c:8d:96:07:27:d7:0f:ed:1e:80:0b:59: 17:c1:2c:e7:dd:61:ad:14:97:0d:28:5d:eb:5d:c5: ae:8d:4c:a3:9f:be:c7:30:0f:9b:f8:04:3e:f7:56: 76:16:4f:71:69:39:e9:1b:79:7f:4f:5d:fa:25:34: d7:bd:9d:28:a8:78:94:c9:78:fc:ad:48:ad:59:51: 61:c8:12:ea:e9:60:1a:c0:77:ed:30:93:4e:b7:58: 63:23:3a:27:97:c7:69:20:1e:c7:5e:81:7c:b9:80: 57:30:87:bc:5c:a7:84:d9:0b:92:61:3f:b1:bf:01: 51:6b:f8:5c:3f:cd:9f:65:43:f1:fc:42:f2:eb:eb: ff:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:A1:1B:83:82:F4:08:D6:83:94:EA:9E:C4:3E:29:A5:29:70:D4:B0 X509v3 Authority Key Identifier: keyid:16:13:D6:EB:FC:D8:49:CF:CC:0A:88:8D:B9:7E:6B:BF:52:07:AD:B3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F6E7D/1E9A11C2838111EAACB9BC30C4F9AE02/FhPW6_zYSc_MCoiNuX5rv1IHrbM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FhPW6_zYSc_MCoiNuX5rv1IHrbM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F6E7D/1E9A11C2838111EAACB9BC30C4F9AE02/FhPW6_zYSc_MCoiNuX5rv1IHrbM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b0:40:74:2f:d5:68:49:0b:f0:e4:7e:8c:0c:65:dc:a0:da:11: d9:06:5c:4b:b0:d0:e5:a6:01:f1:85:66:f2:b4:db:ad:1a:2f: 70:42:95:99:47:46:69:17:8d:e4:7b:44:f4:8f:60:58:db:c8: 48:e6:a7:1e:31:f7:bf:fe:0c:e7:9d:a8:61:ed:2c:cc:a8:87: 7e:38:b9:2c:71:5f:49:46:bc:1a:3a:74:45:be:18:d9:a9:81: 21:c3:e4:57:50:d0:0a:e4:a0:bd:10:0d:b0:48:6e:b0:c6:65: ef:3a:37:ff:e2:92:7a:a9:87:6f:16:63:81:c1:c9:cd:7e:a0: 5d:25:6c:af:f5:21:af:8b:32:ae:2e:0f:39:ba:a0:fe:0e:3f: 06:26:db:22:ee:c9:57:cd:68:fc:6e:4f:3d:b9:06:6a:e6:b1: f1:85:a2:a2:a2:3f:81:37:73:5a:23:1b:92:02:e6:7b:6f:09: 98:3f:79:bd:aa:6d:de:83:ea:0c:3b:78:b5:d5:9b:dc:56:69: 2c:31:20:95:a9:cc:2f:2e:bb:28:22:37:48:d0:82:b6:29:c2: a6:bd:fc:2e:9d:44:0d:da:f7:67:15:0d:40:a4:1b:21:83:d9: 26:9c:67:38:fe:f6:4d:b2:d3:53:80:a7:80:7c:84:e0:7d:e6: 2c:5e:74:af -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCgswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjZFN0QxMTAvBgNVBAUTKDE2MTNENkVCRkNEODQ5Q0ZDQzBBODg4REI5N0U2QkJG NTIwN0FEQjMwHhcNMjUxMDE4MjA1MTEwWhcNMjUxMDI1MjA1MTEwWjAYMRYwFAYD VQQDEw02OGYzZmRiZS1jNjI2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwRLPdhdyau3mDvoXQQZDq/GurHOhnp/vmYsYsFDJcgaa0bYcZDn+oJnlf2tZ llAFJ1GDcURJJF+Y2qWys1pfxTBANvzo5QyXE6L7YreX2vcYwKZNL6CHKGc4T4Pq FJ+FRb70t3sTpb+0V7dk3WByVPVa0sHnXdpNq/tMjZYHJ9cP7R6AC1kXwSzn3WGt FJcNKF3rXcWujUyjn77HMA+b+AQ+91Z2Fk9xaTnpG3l/T136JTTXvZ0oqHiUyXj8 rUitWVFhyBLq6WAawHftMJNOt1hjIzonl8dpIB7HXoF8uYBXMIe8XKeE2QuSYT+x vwFRa/hcP82fZUPx/ELy6+v/+QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEahG4OC 9AjWg5TqnsQ+KaUpcNSwMB8GA1UdIwQYMBaAFBYT1uv82EnPzAqIjbl+a79SB62z MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNkU3RC8xRTlBMTFDMjgz ODExMUVBQUNCOUJDMzBDNEY5QUUwMi9GaFBXNl96WVNjX01Db2lOdVg1cnYxSUhy Yk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZoUFc2X3pZU2NfTUNvaU51WDVydjFJSHJiTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NkU3RC8xRTlBMTFDMjgzODExMUVBQUNCOUJDMzBDNEY5QUUwMi9GaFBXNl96WVNj X01Db2lOdVg1cnYxSUhyYk0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCwQHQv1WhJC/DkfowMZdyg2hHZBlxLsNDlpgHxhWbytNutGi9wQpWZ R0ZpF43ke0T0j2BY28hI5qceMfe//gznnahh7SzMqId+OLkscV9JRrwaOnRFvhjZ qYEhw+RXUNAK5KC9EA2wSG6wxmXvOjf/4pJ6qYdvFmOBwcnNfqBdJWyv9SGvizKu Lg85uqD+Dj8GJtsi7slXzWj8bk89uQZq5rHxhaKioj+BN3NaIxuSAuZ7bwmYP3m9 qm3eg+oMO3i11ZvcVmksMSCVqcwvLrsoIjdI0IK2KcKmvfwunUQN2vdnFQ1ApBsh g9kmnGc4/vZNstNTgKeAfITgfeYsXnSv -----END CERTIFICATE-----Generated at Mon Oct 20 12:42:24 2025 by rpki-client