$ rpki-client -vvf rpki.apnic.net/member_repository/A912DFFA/CE81A514032C11EDA8CB406EC4F9AE02/-ffptMwx85XFzbj6yfUvyldSTeE.mft File: -ffptMwx85XFzbj6yfUvyldSTeE.mft (raw, json) Hash identifier: e//o+UiAz2mc1l/G8No5oTlrC+msFa83bRZMPk15N2Y= Subject key identifier: 43:F7:A0:00:FB:04:CF:65:7C:93:10:16:D9:0C:D6:E6:78:1A:B7:AF Authority key identifier: F9:F7:E9:B4:CC:31:F3:95:C5:CD:B8:FA:C9:F5:2F:CA:57:52:4D:E1 Certificate issuer: /CN=A912DFFA/serialNumber=F9F7E9B4CC31F395C5CDB8FAC9F52FCA57524DE1 Certificate serial: 02FE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-ffptMwx85XFzbj6yfUvyldSTeE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912DFFA/CE81A514032C11EDA8CB406EC4F9AE02/-ffptMwx85XFzbj6yfUvyldSTeE.mft Manifest number: 02EA Signing time: Mon 27 Oct 2025 02:46:17 +0000 Manifest this update: Mon 27 Oct 2025 02:46:17 +0000 Manifest next update: Mon 03 Nov 2025 02:46:17 +0000 Files and hashes: 1: -ffptMwx85XFzbj6yfUvyldSTeE.crl (hash: lG5BYt7wQRNJ0NGZ657pWxXTcEtcuT/O2LbmfcLxGfo=) 2: 0EDE44B2797511EF9F3FEC4CC4F9AE02.roa (hash: NDIUMNLgNwlA3XdorfdGi7go+NI9mRVzxQ8Xlow0T8g=) 3: 14A16ED4F0C011EFB89A0131C4F9AE02.roa (hash: 7v3zrNq+442jAdZuC2gsCpXpLV0fHPfa8xoCxBp0rBk=) 4: DC7E1FA0474711F0A918DB1FC4F9AE02.roa (hash: 4bDhz9z6ALt8Xj1QOxpjNw3dHLuvC3V7JTihZYe86q8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912DFFA/CE81A514032C11EDA8CB406EC4F9AE02/-ffptMwx85XFzbj6yfUvyldSTeE.crl rsync://rpki.apnic.net/member_repository/A912DFFA/CE81A514032C11EDA8CB406EC4F9AE02/-ffptMwx85XFzbj6yfUvyldSTeE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-ffptMwx85XFzbj6yfUvyldSTeE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Nov 2025 02:46:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 766 (0x2fe) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912DFFA, serialNumber=F9F7E9B4CC31F395C5CDB8FAC9F52FCA57524DE1 Validity Not Before: Oct 27 02:46:17 2025 GMT Not After : Nov 3 02:46:17 2025 GMT Subject: CN=68fedcf9-eb19 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f5:7f:45:31:24:98:06:ac:ff:e4:06:c0:0e:cc: 2b:30:8e:54:39:d8:4f:b8:5e:d4:4c:46:14:22:23: 1c:68:b0:02:42:11:67:25:10:d6:cd:06:c7:47:05: 09:57:f4:53:57:e7:c1:05:77:67:c3:72:0b:8c:3e: ba:c9:9a:c8:96:3c:33:9a:12:ab:a8:8c:ab:d1:59: 83:35:cc:0d:3c:8d:11:d5:5a:89:11:2d:bd:5b:92: fc:e0:f2:c8:92:d2:f1:b4:42:1e:91:fe:2f:9b:73: d2:26:bb:05:28:91:bb:63:b9:c3:93:21:de:89:69: 59:e8:89:f8:83:31:08:5d:b0:50:3b:df:1c:64:94: 4d:be:6e:65:3b:09:8f:47:69:12:7c:7b:79:64:4c: 11:d4:db:e2:b2:e9:1d:08:55:02:a2:5c:86:f6:de: 33:23:be:31:a3:e1:b6:e0:70:6c:7c:ae:30:3d:17: 69:4c:65:5b:f7:0a:c5:b6:d3:53:c5:0a:f6:d2:82: 52:48:d8:2f:82:8c:aa:4b:bf:3e:f4:fe:8d:32:76: 3c:b1:13:d3:04:d2:c8:5b:69:a2:73:4c:f5:81:ce: c5:07:8c:77:ff:29:77:1f:08:3c:9d:4b:be:4e:1f: b6:33:12:34:8a:e9:a9:62:40:8a:4c:63:b6:9d:ba: fe:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:F7:A0:00:FB:04:CF:65:7C:93:10:16:D9:0C:D6:E6:78:1A:B7:AF X509v3 Authority Key Identifier: keyid:F9:F7:E9:B4:CC:31:F3:95:C5:CD:B8:FA:C9:F5:2F:CA:57:52:4D:E1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912DFFA/CE81A514032C11EDA8CB406EC4F9AE02/-ffptMwx85XFzbj6yfUvyldSTeE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-ffptMwx85XFzbj6yfUvyldSTeE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912DFFA/CE81A514032C11EDA8CB406EC4F9AE02/-ffptMwx85XFzbj6yfUvyldSTeE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ac:86:ff:cc:55:cf:70:df:e6:28:89:3e:12:4f:01:86:a2:ab: a6:0e:07:a5:15:55:3b:2b:35:34:51:14:4b:32:b3:d5:92:f5: 54:3e:b7:f4:10:53:73:be:7d:ed:8e:90:83:dc:6b:f8:ae:df: da:00:48:cb:a4:5d:c2:e0:2f:25:1b:ff:02:30:61:96:ec:00: 8a:7a:04:6c:02:a7:7d:67:bd:91:43:24:5d:c0:b1:3d:39:cb: 54:1e:3a:7f:68:61:c8:b9:40:58:11:f4:35:c7:03:c1:71:a1: 83:a7:69:fc:95:04:2e:ac:27:34:1e:db:0f:6c:aa:57:bd:b7: 70:88:cf:63:89:e3:9e:23:fc:11:a6:a3:c3:73:26:e5:06:73: bb:77:e7:ac:a3:e4:bd:df:30:b7:bf:fb:95:46:ac:f7:32:a1: 50:65:60:ad:79:99:4c:a9:3c:2d:44:70:e1:e7:6a:b6:80:ac: 5f:90:23:b3:f4:04:1c:2e:ca:c5:9b:0a:61:32:13:0e:00:b7: 30:39:cc:ff:f7:e3:b2:ae:b0:7b:80:b5:b7:37:72:f2:df:d0: 1f:4f:f3:2b:c3:a6:a4:20:9b:1e:c0:2f:8c:73:d6:5b:57:aa: 47:ee:f7:1c:66:96:b6:91:e4:91:3e:b7:3c:f7:c2:2c:3d:b7: bf:49:98:88 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAv4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkRGRkExMTAvBgNVBAUTKEY5RjdFOUI0Q0MzMUYzOTVDNUNEQjhGQUM5RjUyRkNB NTc1MjRERTEwHhcNMjUxMDI3MDI0NjE3WhcNMjUxMTAzMDI0NjE3WjAYMRYwFAYD VQQDEw02OGZlZGNmOS1lYjE5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA9X9FMSSYBqz/5AbADswrMI5UOdhPuF7UTEYUIiMcaLACQhFnJRDWzQbHRwUJ V/RTV+fBBXdnw3ILjD66yZrIljwzmhKrqIyr0VmDNcwNPI0R1VqJES29W5L84PLI ktLxtEIekf4vm3PSJrsFKJG7Y7nDkyHeiWlZ6In4gzEIXbBQO98cZJRNvm5lOwmP R2kSfHt5ZEwR1NvisukdCFUColyG9t4zI74xo+G24HBsfK4wPRdpTGVb9wrFttNT xQr20oJSSNgvgoyqS78+9P6NMnY8sRPTBNLIW2mic0z1gc7FB4x3/yl3Hwg8nUu+ Th+2MxI0iumpYkCKTGO2nbr+nQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEP3oAD7 BM9lfJMQFtkM1uZ4GrevMB8GA1UdIwQYMBaAFPn36bTMMfOVxc24+sn1L8pXUk3h MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyREZGQS9DRTgxQTUxNDAz MkMxMUVEQThDQjQwNkVDNEY5QUUwMi8tZmZwdE13eDg1WEZ6Ymo2eWZVdnlsZFNU ZUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy1mZnB0TXd4ODVYRnpiajZ5ZlV2eWxkU1RlRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy REZGQS9DRTgxQTUxNDAzMkMxMUVEQThDQjQwNkVDNEY5QUUwMi8tZmZwdE13eDg1 WEZ6Ymo2eWZVdnlsZFNUZUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCshv/MVc9w3+YoiT4STwGGoqumDgelFVU7KzU0URRLMrPVkvVUPrf0 EFNzvn3tjpCD3Gv4rt/aAEjLpF3C4C8lG/8CMGGW7ACKegRsAqd9Z72RQyRdwLE9 OctUHjp/aGHIuUBYEfQ1xwPBcaGDp2n8lQQurCc0HtsPbKpXvbdwiM9jieOeI/wR pqPDcyblBnO7d+eso+S93zC3v/uVRqz3MqFQZWCteZlMqTwtRHDh52q2gKxfkCOz 9AQcLsrFmwphMhMOALcwOcz/9+OyrrB7gLW3N3Ly39AfT/Mrw6akIJsewC+Mc9Zb V6pH7vccZpa2keSRPrc898IsPbe/SZiI -----END CERTIFICATE-----Generated at Tue Oct 28 13:08:04 2025 by rpki-client