$ rpki-client -vvf rpki.apnic.net/member_repository/A91FE769/C5D6A57E604C11F090816A15C4F9AE02/FOFy6-ntnDEE1U8RqpdiI-s3aQc.mft File: FOFy6-ntnDEE1U8RqpdiI-s3aQc.mft (raw, json) Hash identifier: ZBXFWhVQgZrBBRNW1hGn/A7jUozBrxPUU1e4A44+4co= Subject key identifier: 68:BA:36:F2:6A:EF:28:18:5F:15:06:63:0D:87:AB:BC:3F:3C:DA:F7 Authority key identifier: 14:E1:72:EB:E9:ED:9C:31:04:D5:4F:11:AA:97:62:23:EB:37:69:07 Certificate issuer: /CN=A91FE769/serialNumber=14E172EBE9ED9C3104D54F11AA976223EB376907 Certificate serial: 38 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FOFy6-ntnDEE1U8RqpdiI-s3aQc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FE769/C5D6A57E604C11F090816A15C4F9AE02/FOFy6-ntnDEE1U8RqpdiI-s3aQc.mft Manifest number: 36 Signing time: Sun 19 Oct 2025 11:05:40 +0000 Manifest this update: Sun 19 Oct 2025 11:05:39 +0000 Manifest next update: Sun 26 Oct 2025 11:05:39 +0000 Files and hashes: 1: FOFy6-ntnDEE1U8RqpdiI-s3aQc.crl (hash: LukkA1lxF8ijE/g0SgzAaihpS2Lli1nluvljuOCWODE=) 2: D63D48DE604F11F0B5D8E73CC4F9AE02.roa (hash: emv514v8DwKzvHJH8ilfs/YN+XFNOa2awfMLCjPK/mI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FE769/C5D6A57E604C11F090816A15C4F9AE02/FOFy6-ntnDEE1U8RqpdiI-s3aQc.crl rsync://rpki.apnic.net/member_repository/A91FE769/C5D6A57E604C11F090816A15C4F9AE02/FOFy6-ntnDEE1U8RqpdiI-s3aQc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FOFy6-ntnDEE1U8RqpdiI-s3aQc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 11:05:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 56 (0x38) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FE769, serialNumber=14E172EBE9ED9C3104D54F11AA976223EB376907 Validity Not Before: Oct 19 11:05:39 2025 GMT Not After : Oct 26 11:05:39 2025 GMT Subject: CN=68f4c604-329c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:44:d0:e0:d5:5f:f9:4e:5a:86:a2:f2:58:18: 6b:d1:5a:86:0d:38:99:cf:c6:42:46:74:fb:4f:70: 3e:93:d9:4f:a0:9b:c8:a2:78:11:04:f2:49:2c:55: 75:6f:20:e4:ad:6a:46:98:13:24:5b:4a:15:f4:f6: 8d:e4:b0:95:e8:88:fd:1c:0d:03:46:3d:19:62:1d: 81:fe:11:38:10:ca:68:75:b4:0c:b0:a4:13:f4:d0: 6c:4d:26:dc:78:8f:1e:ee:66:3e:3a:aa:df:f6:cc: 8f:5a:7b:f6:a6:46:61:47:b8:4c:57:45:d0:08:68: 6f:86:82:97:ab:1b:69:43:ab:d0:36:9c:eb:ff:c5: 40:ec:55:ce:ff:f9:bb:56:ff:34:f4:e9:44:65:d8: 4d:b9:25:7f:0c:09:a2:27:ce:02:cf:b4:ac:91:ac: 0e:a9:ce:fb:09:34:ca:f7:c9:bc:cb:b0:55:0b:17: 7d:4b:e6:48:47:de:c2:04:f4:89:de:1d:d3:a3:cf: 59:21:8a:83:02:a7:6e:c1:0e:62:e6:f2:ad:b7:2c: f5:9d:8b:0c:44:4a:2f:72:f8:d1:dc:83:07:7a:6a: 50:27:19:fd:2f:19:fc:20:26:95:da:0d:8b:58:3a: aa:30:95:69:31:b4:66:c5:2d:ec:01:26:f8:0f:ae: 3e:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:BA:36:F2:6A:EF:28:18:5F:15:06:63:0D:87:AB:BC:3F:3C:DA:F7 X509v3 Authority Key Identifier: keyid:14:E1:72:EB:E9:ED:9C:31:04:D5:4F:11:AA:97:62:23:EB:37:69:07 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FE769/C5D6A57E604C11F090816A15C4F9AE02/FOFy6-ntnDEE1U8RqpdiI-s3aQc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FOFy6-ntnDEE1U8RqpdiI-s3aQc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FE769/C5D6A57E604C11F090816A15C4F9AE02/FOFy6-ntnDEE1U8RqpdiI-s3aQc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 02:12:ad:60:bd:08:79:68:dd:0f:8c:b7:b8:0e:46:3a:69:2d: 74:31:ce:45:7f:5c:e3:08:2a:29:0f:39:e2:51:83:5d:9e:be: be:55:05:7d:de:cb:1a:bb:8d:8e:d6:04:be:30:89:df:cc:73: 42:dc:4c:4b:d3:33:f8:77:b2:6c:93:72:1e:f7:52:ec:ec:5e: 31:ac:c0:68:c2:9f:6a:93:37:35:d8:0a:3c:88:ed:bb:1d:62: 64:9a:45:1d:97:6d:ef:fc:dd:ab:1a:be:d9:20:a2:fa:3e:85: a6:d5:5d:ff:f8:30:60:89:53:75:02:ae:db:f4:eb:17:c3:62: 51:64:6b:e2:df:7d:74:a3:84:02:2d:39:08:96:65:dc:ee:41: 92:e5:57:30:55:14:dc:f3:b7:f3:e2:e9:a4:49:fb:5b:19:c7: 83:e1:8d:83:a9:21:47:d6:dc:22:23:87:1f:ab:70:1a:71:e3: 9a:bd:96:70:7d:87:dc:1f:8b:57:15:b9:0d:13:a3:3b:b5:d9: 64:fb:b4:24:98:37:dc:98:dc:ed:98:e5:49:92:84:c1:3e:e3: 9a:99:81:e6:cd:f5:8c:6a:84:ab:2e:05:65:ab:97:84:88:09: 89:c1:d6:07:49:7a:ca:8c:6e:70:ae:fc:c5:66:79:2e:57:3e: b4:dd:4a:a9 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBODANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG RTc2OTExMC8GA1UEBRMoMTRFMTcyRUJFOUVEOUMzMTA0RDU0RjExQUE5NzYyMjNF QjM3NjkwNzAeFw0yNTEwMTkxMTA1MzlaFw0yNTEwMjYxMTA1MzlaMBgxFjAUBgNV BAMTDTY4ZjRjNjA0LTMyOWMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCaRNDg1V/5TlqGovJYGGvRWoYNOJnPxkJGdPtPcD6T2U+gm8iieBEE8kksVXVv IOStakaYEyRbShX09o3ksJXoiP0cDQNGPRliHYH+ETgQymh1tAywpBP00GxNJtx4 jx7uZj46qt/2zI9ae/amRmFHuExXRdAIaG+GgperG2lDq9A2nOv/xUDsVc7/+btW /zT06URl2E25JX8MCaInzgLPtKyRrA6pzvsJNMr3ybzLsFULF31L5khH3sIE9Ine HdOjz1khioMCp27BDmLm8q23LPWdiwxESi9y+NHcgwd6alAnGf0vGfwgJpXaDYtY OqowlWkxtGbFLewBJvgPrj7TAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUaLo28mrv KBhfFQZjDYervD882vcwHwYDVR0jBBgwFoAUFOFy6+ntnDEE1U8RqpdiI+s3aQcw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUZFNzY5L0M1RDZBNTdFNjA0 QzExRjA5MDgxNkExNUM0RjlBRTAyL0ZPRnk2LW50bkRFRTFVOFJxcGRpSS1zM2FR Yy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvRk9GeTYtbnRuREVFMVU4UnFwZGlJLXMzYVFjLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUZF NzY5L0M1RDZBNTdFNjA0QzExRjA5MDgxNkExNUM0RjlBRTAyL0ZPRnk2LW50bkRF RTFVOFJxcGRpSS1zM2FRYy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAAISrWC9CHlo3Q+Mt7gORjppLXQxzkV/XOMIKikPOeJRg12evr5VBX3e yxq7jY7WBL4wid/Mc0LcTEvTM/h3smyTch73UuzsXjGswGjCn2qTNzXYCjyI7bsd YmSaRR2Xbe/83asavtkgovo+habVXf/4MGCJU3UCrtv06xfDYlFka+LffXSjhAIt OQiWZdzuQZLlVzBVFNzzt/Pi6aRJ+1sZx4PhjYOpIUfW3CIjhx+rcBpx45q9lnB9 h9wfi1cVuQ0Tozu12WT7tCSYN9yY3O2Y5UmShME+45qZgebN9YxqhKsuBWWrl4SI CYnB1gdJesqMbnCu/MVmeS5XPrTdSqk= -----END CERTIFICATE-----Generated at Mon Oct 20 01:45:22 2025 by rpki-client