$ rpki-client -vvf rpki.apnic.net/member_repository/A912F40E/303B3D786B7811EAA713D778C4F9AE02/FOvueS5AUhzVGx8DIDp_jiq7EtI.mft File: FOvueS5AUhzVGx8DIDp_jiq7EtI.mft (raw, json) Hash identifier: gyk9asV7L23+PJShut5mqEDcgFfw/1t74KFk6K6waEA= Subject key identifier: 7E:82:3A:5D:6D:FC:E8:19:61:92:1B:89:4A:90:82:1A:BC:36:A4:31 Authority key identifier: 14:EB:EE:79:2E:40:52:1C:D5:1B:1F:03:20:3A:7F:8E:2A:BB:12:D2 Certificate issuer: /CN=A912F40E/serialNumber=14EBEE792E40521CD51B1F03203A7F8E2ABB12D2 Certificate serial: 0A8C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FOvueS5AUhzVGx8DIDp_jiq7EtI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912F40E/303B3D786B7811EAA713D778C4F9AE02/FOvueS5AUhzVGx8DIDp_jiq7EtI.mft Manifest number: 0A85 Signing time: Sun 02 Nov 2025 19:33:21 +0000 Manifest this update: Sun 02 Nov 2025 19:33:21 +0000 Manifest next update: Sun 09 Nov 2025 19:33:21 +0000 Files and hashes: 1: FOvueS5AUhzVGx8DIDp_jiq7EtI.crl (hash: GvTIR3OzgpCWIHNu6FvGr74X2LX8nPCcLK3yypbdGRQ=) 2: 6677438E6B7B11EA908F7C82C4F9AE02.roa (hash: NUGRzsEaZYXcjIXcIhWTrYjjrRluMFcxpsApcnV+LZE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912F40E/303B3D786B7811EAA713D778C4F9AE02/FOvueS5AUhzVGx8DIDp_jiq7EtI.crl rsync://rpki.apnic.net/member_repository/A912F40E/303B3D786B7811EAA713D778C4F9AE02/FOvueS5AUhzVGx8DIDp_jiq7EtI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FOvueS5AUhzVGx8DIDp_jiq7EtI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 19:33:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2700 (0xa8c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912F40E, serialNumber=14EBEE792E40521CD51B1F03203A7F8E2ABB12D2 Validity Not Before: Nov 2 19:33:21 2025 GMT Not After : Nov 9 19:33:21 2025 GMT Subject: CN=6907b201-c0e9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:96:b0:5c:a8:a7:c0:d4:df:f0:b8:dd:5a:ff: fb:9f:74:6a:a5:f8:ec:0b:59:ec:6c:65:e3:54:b8: de:93:41:20:fb:d1:8b:f4:34:eb:25:b3:ca:19:58: 8d:cc:24:87:c5:e7:51:2f:72:a3:c7:f1:19:b4:0f: 61:74:72:5c:90:2f:dd:5a:ae:a1:4b:48:2d:d1:e9: 0a:a0:01:2e:d7:9d:89:19:14:f9:f2:0e:27:1e:64: 4f:c3:db:b6:c1:41:f0:08:4b:07:be:a0:8a:a4:73: a8:39:d2:54:5c:f7:79:74:cb:31:7e:06:49:dc:98: 20:f4:96:39:b4:ef:b9:95:37:2b:47:3f:39:ec:51: 29:01:5d:9e:f8:af:e9:08:c7:30:e0:e7:62:9c:c4: 43:51:72:93:69:19:e1:51:4f:64:16:ed:f2:26:db: 72:4f:b6:08:8e:00:3f:97:d9:ad:e1:9c:ff:9b:5e: 11:51:df:75:96:00:b4:71:24:1a:e8:96:6e:f3:fd: 03:f2:c4:c6:69:9e:72:ba:a9:98:a8:e5:ab:5c:83: 07:3d:8d:9b:de:ff:71:74:33:04:1f:7c:cd:95:0b: 38:93:8d:c7:22:2a:2d:ca:8d:d9:23:86:1f:d1:32: a4:72:6c:aa:cf:78:e9:42:99:c3:ee:9f:07:7b:01: fd:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:82:3A:5D:6D:FC:E8:19:61:92:1B:89:4A:90:82:1A:BC:36:A4:31 X509v3 Authority Key Identifier: keyid:14:EB:EE:79:2E:40:52:1C:D5:1B:1F:03:20:3A:7F:8E:2A:BB:12:D2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912F40E/303B3D786B7811EAA713D778C4F9AE02/FOvueS5AUhzVGx8DIDp_jiq7EtI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FOvueS5AUhzVGx8DIDp_jiq7EtI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912F40E/303B3D786B7811EAA713D778C4F9AE02/FOvueS5AUhzVGx8DIDp_jiq7EtI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 78:c4:59:d0:cd:e9:85:62:0c:03:bd:17:08:0a:7f:87:df:90: e7:13:82:13:67:d3:c8:ea:bd:e4:29:3c:85:fc:58:33:95:72: 94:91:ee:8f:db:08:de:10:ea:d7:9b:4e:ee:61:d9:04:10:96: 2e:b9:a9:17:57:bc:c7:78:7c:90:55:a8:b3:c4:53:5f:a0:cf: e4:58:a1:60:ce:8b:ec:8b:46:64:bc:2e:bf:38:30:27:6f:02: 81:6f:08:4c:38:b3:af:e8:36:ce:18:31:49:32:c5:12:50:05: 3b:ca:e1:76:0c:d2:00:00:9f:ae:0c:af:8e:52:51:79:f8:56: 3a:ca:f3:e5:c5:16:86:73:1d:a1:38:8a:24:d8:e1:4b:8c:1b: 14:fc:85:a9:10:f7:1e:ab:a8:68:8c:f2:d7:cb:f8:78:e9:5d: fb:28:1d:38:b9:f8:f1:43:11:ea:c0:ec:85:6a:65:ec:a9:23: af:9f:d1:25:ab:e4:de:0b:03:16:53:d0:74:f5:ad:5a:69:83: 9b:b2:2b:af:94:70:21:01:49:3a:82:56:e6:fe:b2:0e:3a:bf: 7c:80:b8:9d:12:6b:d5:d8:33:58:98:0b:93:f7:ee:1a:59:5e: 7e:99:84:23:74:27:40:ae:87:57:45:3e:fb:3a:92:2a:60:bd: 86:ee:a3:43 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCowwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkY0MEUxMTAvBgNVBAUTKDE0RUJFRTc5MkU0MDUyMUNENTFCMUYwMzIwM0E3RjhF MkFCQjEyRDIwHhcNMjUxMTAyMTkzMzIxWhcNMjUxMTA5MTkzMzIxWjAYMRYwFAYD VQQDEw02OTA3YjIwMS1jMGU5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAy5awXKinwNTf8LjdWv/7n3RqpfjsC1nsbGXjVLjek0Eg+9GL9DTrJbPKGViN zCSHxedRL3Kjx/EZtA9hdHJckC/dWq6hS0gt0ekKoAEu152JGRT58g4nHmRPw9u2 wUHwCEsHvqCKpHOoOdJUXPd5dMsxfgZJ3Jgg9JY5tO+5lTcrRz857FEpAV2e+K/p CMcw4OdinMRDUXKTaRnhUU9kFu3yJttyT7YIjgA/l9mt4Zz/m14RUd91lgC0cSQa 6JZu8/0D8sTGaZ5yuqmYqOWrXIMHPY2b3v9xdDMEH3zNlQs4k43HIiotyo3ZI4Yf 0TKkcmyqz3jpQpnD7p8HewH90QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFH6COl1t /OgZYZIbiUqQghq8NqQxMB8GA1UdIwQYMBaAFBTr7nkuQFIc1RsfAyA6f44quxLS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRjQwRS8zMDNCM0Q3ODZC NzgxMUVBQTcxM0Q3NzhDNEY5QUUwMi9GT3Z1ZVM1QVVoelZHeDhESURwX2ppcTdF dEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZPdnVlUzVBVWh6Vkd4OERJRHBfamlxN0V0SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy RjQwRS8zMDNCM0Q3ODZCNzgxMUVBQTcxM0Q3NzhDNEY5QUUwMi9GT3Z1ZVM1QVVo elZHeDhESURwX2ppcTdFdEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB4xFnQzemFYgwDvRcICn+H35DnE4ITZ9PI6r3kKTyF/FgzlXKUke6P 2wjeEOrXm07uYdkEEJYuuakXV7zHeHyQVaizxFNfoM/kWKFgzovsi0ZkvC6/ODAn bwKBbwhMOLOv6DbOGDFJMsUSUAU7yuF2DNIAAJ+uDK+OUlF5+FY6yvPlxRaGcx2h OIok2OFLjBsU/IWpEPceq6hojPLXy/h46V37KB04ufjxQxHqwOyFamXsqSOvn9El q+TeCwMWU9B09a1aaYObsiuvlHAhAUk6glbm/rIOOr98gLidEmvV2DNYmAuT9+4a WV5+mYQjdCdArodXRT77OpIqYL2G7qND -----END CERTIFICATE-----Generated at Mon Nov 3 18:07:00 2025 by rpki-client