$ rpki-client -vvf rpki.apnic.net/member_repository/A9119DCB/E4C0F56C187F11EBAE29692EC4F9AE02/FyPctBoEJopYeqzoz9na5fn1Hfc.mft File: FyPctBoEJopYeqzoz9na5fn1Hfc.mft (raw, json) Hash identifier: gq/Wwh0Ej3EkMITN8w+LNdTePGU6yTM8QWeQo/NqAgg= Subject key identifier: A7:E5:45:69:85:3E:E0:F2:7D:6B:1E:20:37:C3:CE:71:7D:91:3E:CB Authority key identifier: 17:23:DC:B4:1A:04:26:8A:58:7A:AC:E8:CF:D9:DA:E5:F9:F5:1D:F7 Certificate issuer: /CN=A9119DCB/serialNumber=1723DCB41A04268A587AACE8CFD9DAE5F9F51DF7 Certificate serial: 07F4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FyPctBoEJopYeqzoz9na5fn1Hfc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9119DCB/E4C0F56C187F11EBAE29692EC4F9AE02/FyPctBoEJopYeqzoz9na5fn1Hfc.mft Manifest number: 07CA Signing time: Sat 18 Oct 2025 22:37:16 +0000 Manifest this update: Sat 18 Oct 2025 22:37:15 +0000 Manifest next update: Sat 25 Oct 2025 22:37:15 +0000 Files and hashes: 1: FyPctBoEJopYeqzoz9na5fn1Hfc.crl (hash: PfMTS1Y6oS0nKqIm/ssXdz9JQDsbWAKN2TMgs3err3E=) 2: 3CD29BF4D46911EE8B36431CC4F9AE02.roa (hash: eRh3STMZAaCuqDqQZCMcnNT2rNeo5Bk/5FuTVp0jQRg=) 3: 8037BC50EB2E11EDB835EF4AC4F9AE02.roa (hash: 9AUbM37b5CiLCdaFctD08Xg1S7rAzz8NUfqZj75vIUI=) 4: 7AA7B416E01011EEA1CA127CC4F9AE02.roa (hash: Ath/WU2ZkFdzqQ3oivM8Zg8QBrfw7L/kuNwCwRxLfag=) 5: 68DAAA1A749711EFB4EDA45FC4F9AE02.roa (hash: lqYCCMlU2p+r8Vr8oCvHriQYj28R9n24bUWS9AQiTY0=) 6: 2840D3A225FF11EBAF634966C4F9AE02.roa (hash: jMAptin7Nn/9ubjtB7+t/RBCpP9LLYksPnIclcQRTkk=) 7: 26D56F6425FF11EBAF634966C4F9AE02.roa (hash: Djj/jcA9qOYbqLWVcaOfucyuLejfqOjI1XLtoDbH2+E=) 8: 284E9E9E1D5611EB891ADC6CC4F9AE02.roa (hash: NCqMqwIpI4KCw7V6V+LHlzb+BzZa7gOeav4mNQAltOI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9119DCB/E4C0F56C187F11EBAE29692EC4F9AE02/FyPctBoEJopYeqzoz9na5fn1Hfc.crl rsync://rpki.apnic.net/member_repository/A9119DCB/E4C0F56C187F11EBAE29692EC4F9AE02/FyPctBoEJopYeqzoz9na5fn1Hfc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FyPctBoEJopYeqzoz9na5fn1Hfc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 22:37:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2036 (0x7f4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9119DCB, serialNumber=1723DCB41A04268A587AACE8CFD9DAE5F9F51DF7 Validity Not Before: Oct 18 22:37:15 2025 GMT Not After : Oct 25 22:37:15 2025 GMT Subject: CN=68f4169b-e7c2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:57:d2:cc:8e:d1:a6:5e:ea:86:28:d4:2f:58: ff:33:bd:7f:67:c0:0d:fa:c8:78:7d:0f:09:fc:3b: 20:b2:9f:1b:7e:a2:3f:a6:0f:a4:fc:8e:22:4e:26: 49:63:67:0f:ca:3b:d4:2a:db:8e:3b:44:9e:68:21: 6b:c9:88:f9:e3:5d:11:36:85:84:7a:06:e5:25:7b: a8:57:80:56:52:9b:1f:0b:f1:96:9b:15:89:6f:b8: 36:04:35:0f:23:50:5e:6f:47:c1:a6:c1:84:37:42: ee:b8:26:e2:af:34:48:81:66:61:64:5f:d9:db:70: 3e:f5:49:2b:f7:ef:cf:00:a4:4b:6d:72:46:cd:59: 72:25:e3:52:12:f6:c0:13:72:12:ed:0c:70:21:59: f8:70:38:2f:4f:d5:3d:d0:52:d6:c8:64:44:96:08: a4:27:ae:33:d1:89:33:d4:d2:4e:7c:c1:84:09:11: 30:29:dc:53:01:3e:00:4a:97:ed:e5:76:98:b1:60: 9c:28:6c:2f:94:86:e0:03:50:3d:38:ce:df:00:53: 70:3a:7c:a6:65:fb:ee:76:7b:66:c0:5d:d8:e1:a9: c4:c1:69:90:b8:70:7d:0b:71:49:0a:73:ee:4d:8c: 2a:fe:ab:c8:58:2a:fd:b4:38:90:d3:66:cb:c3:7f: dc:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:E5:45:69:85:3E:E0:F2:7D:6B:1E:20:37:C3:CE:71:7D:91:3E:CB X509v3 Authority Key Identifier: keyid:17:23:DC:B4:1A:04:26:8A:58:7A:AC:E8:CF:D9:DA:E5:F9:F5:1D:F7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9119DCB/E4C0F56C187F11EBAE29692EC4F9AE02/FyPctBoEJopYeqzoz9na5fn1Hfc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FyPctBoEJopYeqzoz9na5fn1Hfc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9119DCB/E4C0F56C187F11EBAE29692EC4F9AE02/FyPctBoEJopYeqzoz9na5fn1Hfc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 36:52:86:e9:c1:29:71:0c:de:1f:2c:f4:bb:36:43:a2:d5:f0: f2:d9:16:3a:4d:d5:0b:33:e3:c1:fd:7f:4d:71:04:8b:7f:5b: eb:90:a4:7d:f9:f6:16:9e:bc:b7:6f:cb:7d:1b:ad:f9:a1:de: 4c:6e:f5:1e:f6:00:55:c0:14:6e:5b:3e:de:b7:a3:b0:1d:9c: bb:b9:0e:ca:17:79:b6:b4:ef:b4:5d:0f:2f:c3:0a:bc:eb:50: ef:0e:d5:c1:c5:90:e8:5c:eb:1a:3b:3b:b8:0e:38:61:d9:1d: f1:26:a7:13:a9:a4:e5:af:70:68:6b:8b:d1:96:a3:40:82:99: ba:bf:33:04:ab:51:ee:c6:ba:41:a1:74:33:11:20:3b:17:c8: 8b:c4:49:b4:3f:bc:de:e2:55:be:34:aa:78:5a:66:cd:a6:5a: cd:a1:53:89:a2:a2:f0:84:fc:cb:a5:92:48:54:84:07:33:5f: e9:b3:00:d7:fa:88:db:42:70:a4:ca:88:78:f3:1e:b0:33:9b: 0c:8b:0e:f3:7f:34:61:24:96:7d:9a:2e:ab:2d:88:24:78:9e: 81:6c:42:79:dd:3c:42:ee:57:34:ee:e7:7c:34:1d:ab:d7:6a: 0b:99:9c:03:cf:61:e7:7a:30:17:5a:87:3b:72:12:6b:5e:e4: 64:94:6f:99 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB/QwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTlEQ0IxMTAvBgNVBAUTKDE3MjNEQ0I0MUEwNDI2OEE1ODdBQUNFOENGRDlEQUU1 RjlGNTFERjcwHhcNMjUxMDE4MjIzNzE1WhcNMjUxMDI1MjIzNzE1WjAYMRYwFAYD VQQDEw02OGY0MTY5Yi1lN2MyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtlfSzI7Rpl7qhijUL1j/M71/Z8AN+sh4fQ8J/Dsgsp8bfqI/pg+k/I4iTiZJ Y2cPyjvUKtuOO0SeaCFryYj5410RNoWEegblJXuoV4BWUpsfC/GWmxWJb7g2BDUP I1Beb0fBpsGEN0LuuCbirzRIgWZhZF/Z23A+9Ukr9+/PAKRLbXJGzVlyJeNSEvbA E3IS7QxwIVn4cDgvT9U90FLWyGRElgikJ64z0Ykz1NJOfMGECREwKdxTAT4ASpft 5XaYsWCcKGwvlIbgA1A9OM7fAFNwOnymZfvudntmwF3Y4anEwWmQuHB9C3FJCnPu TYwq/qvIWCr9tDiQ02bLw3/cHQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKflRWmF PuDyfWseIDfDznF9kT7LMB8GA1UdIwQYMBaAFBcj3LQaBCaKWHqs6M/Z2uX59R33 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExOURDQi9FNEMwRjU2QzE4 N0YxMUVCQUUyOTY5MkVDNEY5QUUwMi9GeVBjdEJvRUpvcFllcXpvejluYTVmbjFI ZmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0Z5UGN0Qm9FSm9wWWVxem96OW5hNWZuMUhmYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx OURDQi9FNEMwRjU2QzE4N0YxMUVCQUUyOTY5MkVDNEY5QUUwMi9GeVBjdEJvRUpv cFllcXpvejluYTVmbjFIZmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA2UobpwSlxDN4fLPS7NkOi1fDy2RY6TdULM+PB/X9NcQSLf1vrkKR9 +fYWnry3b8t9G635od5MbvUe9gBVwBRuWz7et6OwHZy7uQ7KF3m2tO+0XQ8vwwq8 61DvDtXBxZDoXOsaOzu4Djhh2R3xJqcTqaTlr3Boa4vRlqNAgpm6vzMEq1HuxrpB oXQzESA7F8iLxEm0P7ze4lW+NKp4WmbNplrNoVOJoqLwhPzLpZJIVIQHM1/pswDX +ojbQnCkyoh48x6wM5sMiw7zfzRhJJZ9mi6rLYgkeJ6BbEJ53TxC7lc07ud8NB2r 12oLmZwDz2HnejAXWoc7chJrXuRklG+Z -----END CERTIFICATE-----Generated at Sun Oct 19 19:11:52 2025 by rpki-client