$ rpki-client -vvf rpki.apnic.net/member_repository/A91314BC/7FD0166C5A2F11EDA19E5E61C4F9AE02/FoQVwME0AcDXcVcd-G-M1fhQOxQ.mft File: FoQVwME0AcDXcVcd-G-M1fhQOxQ.mft (raw, json) Hash identifier: tcDMzucKMOlqQFSy577BKCYExKR0JY31S7Nd2/5pEjo= Subject key identifier: A2:02:AC:6E:DD:87:85:C8:73:BA:FC:32:43:42:A5:43:1E:E9:D2:2E Authority key identifier: 16:84:15:C0:C1:34:01:C0:D7:71:57:1D:F8:6F:8C:D5:F8:50:3B:14 Certificate issuer: /CN=A91314BC/serialNumber=168415C0C13401C0D771571DF86F8CD5F8503B14 Certificate serial: 0244 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FoQVwME0AcDXcVcd-G-M1fhQOxQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91314BC/7FD0166C5A2F11EDA19E5E61C4F9AE02/FoQVwME0AcDXcVcd-G-M1fhQOxQ.mft Manifest number: 0237 Signing time: Mon 03 Nov 2025 01:51:24 +0000 Manifest this update: Mon 03 Nov 2025 01:51:23 +0000 Manifest next update: Mon 10 Nov 2025 01:51:23 +0000 Files and hashes: 1: FoQVwME0AcDXcVcd-G-M1fhQOxQ.crl (hash: TkTr6pyiZgygQunmcZ2DCrZFjEZtDULx6LRbhx0Yh8E=) 2: 1083BE64499711EE86AE452DC4F9AE02.roa (hash: slu67F8KWLFn/RxCNvxBYhj1V1Mx5+noN3O9kww2W8Y=) 3: 7DD0E8845A3211EDB637E665C4F9AE02.roa (hash: wtWT4PZFgcn64rOhtqw01Kyp1pjejdqieeode8aJT6o=) 4: 7D0DFE0A5A3211EDB637E665C4F9AE02.roa (hash: K4zq7amWLtDyT+UqSOR4oOsSasN49MRy2b9Pfvweln4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91314BC/7FD0166C5A2F11EDA19E5E61C4F9AE02/FoQVwME0AcDXcVcd-G-M1fhQOxQ.crl rsync://rpki.apnic.net/member_repository/A91314BC/7FD0166C5A2F11EDA19E5E61C4F9AE02/FoQVwME0AcDXcVcd-G-M1fhQOxQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FoQVwME0AcDXcVcd-G-M1fhQOxQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 01:51:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 580 (0x244) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91314BC, serialNumber=168415C0C13401C0D771571DF86F8CD5F8503B14 Validity Not Before: Nov 3 01:51:23 2025 GMT Not After : Nov 10 01:51:23 2025 GMT Subject: CN=69080a9c-6d98 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:29:c9:f2:03:17:c1:37:b4:b3:74:17:91:36: f0:36:6e:0f:04:6f:4b:d5:4f:21:c5:6e:b3:88:6a: 9f:59:1f:b6:57:48:2b:52:21:f6:d2:4b:35:f9:23: 98:ba:88:5b:32:94:7d:46:cc:3a:67:87:b4:7e:6c: 59:05:a6:ba:c5:56:6f:67:64:21:19:e3:a6:dd:1a: a2:05:91:22:81:84:bd:e5:73:5f:89:5b:4b:46:45: 3e:f6:03:2c:46:c0:6f:7e:07:64:49:da:c0:ea:59: 18:64:2c:a3:5c:91:98:e8:f3:c1:ef:a8:4f:bb:2a: ee:dc:70:68:35:fb:04:bf:e2:17:95:0d:7b:b2:3f: cb:6a:f9:28:3e:84:ad:31:1a:8c:ac:58:d0:9d:01: db:02:35:ff:c8:71:ef:5f:a3:d9:c0:70:01:1f:9d: 5e:63:99:e9:62:11:e3:f4:02:ee:6b:aa:41:7f:1f: 40:01:b0:23:38:c0:e6:3b:83:e7:54:84:cc:ec:3e: fd:ea:b4:97:91:f1:4d:e5:64:4a:21:e7:f1:c5:23: 74:3a:4e:a7:57:64:e1:9a:47:8b:3f:26:9d:d5:87: a7:6a:fc:54:22:75:a9:66:39:2b:6e:0f:aa:30:76: 0a:3f:30:d4:f3:20:38:0e:33:2a:8d:db:de:fe:79: 9c:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:02:AC:6E:DD:87:85:C8:73:BA:FC:32:43:42:A5:43:1E:E9:D2:2E X509v3 Authority Key Identifier: keyid:16:84:15:C0:C1:34:01:C0:D7:71:57:1D:F8:6F:8C:D5:F8:50:3B:14 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91314BC/7FD0166C5A2F11EDA19E5E61C4F9AE02/FoQVwME0AcDXcVcd-G-M1fhQOxQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FoQVwME0AcDXcVcd-G-M1fhQOxQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91314BC/7FD0166C5A2F11EDA19E5E61C4F9AE02/FoQVwME0AcDXcVcd-G-M1fhQOxQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 08:74:9c:fd:02:f1:0a:87:c0:73:ac:cc:dc:4c:50:63:01:91: 21:e3:88:f3:33:a9:ef:49:a2:ca:10:4d:bc:da:5f:02:4e:85: 06:ca:02:c7:21:f8:67:be:a9:9a:41:4d:11:35:03:58:0d:d8: ee:4d:0d:f7:a1:a7:75:49:1a:b2:4a:12:10:a1:40:9c:ea:a9: b7:e6:a5:a8:cf:04:fc:35:57:b6:a4:ff:71:4d:f7:3c:ac:c4: d2:11:98:dd:b2:4c:3d:aa:66:71:e2:2e:c8:de:52:13:13:0f: ea:a3:2a:2f:c2:2f:bd:b0:32:df:b0:f6:4e:36:e9:ad:2d:fb: 83:df:82:c3:46:fc:d7:a0:62:5a:27:11:bd:59:5a:2b:f6:a9: f6:6d:3a:a6:c0:95:70:e2:4b:29:04:39:95:85:15:ce:10:f4: 93:22:49:ab:25:98:75:0a:f9:b1:d1:a4:a8:f2:7d:0b:8a:c2: 65:5f:2c:f3:38:c6:28:c6:84:fd:d8:18:de:d3:16:8f:c8:29: fd:82:ae:c6:4b:ba:9e:c9:4b:c6:3e:30:68:fc:db:41:27:10: f2:4d:f0:6b:17:ee:ce:5a:9c:4d:cc:2b:ca:a0:c9:43:8d:e6: f6:37:df:04:89:db:23:3c:0d:2f:f4:08:d9:b8:88:47:28:1d: f5:0c:ca:f6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAkQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzE0QkMxMTAvBgNVBAUTKDE2ODQxNUMwQzEzNDAxQzBENzcxNTcxREY4NkY4Q0Q1 Rjg1MDNCMTQwHhcNMjUxMTAzMDE1MTIzWhcNMjUxMTEwMDE1MTIzWjAYMRYwFAYD VQQDEw02OTA4MGE5Yy02ZDk4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtynJ8gMXwTe0s3QXkTbwNm4PBG9L1U8hxW6ziGqfWR+2V0grUiH20ks1+SOY uohbMpR9Rsw6Z4e0fmxZBaa6xVZvZ2QhGeOm3RqiBZEigYS95XNfiVtLRkU+9gMs RsBvfgdkSdrA6lkYZCyjXJGY6PPB76hPuyru3HBoNfsEv+IXlQ17sj/LavkoPoSt MRqMrFjQnQHbAjX/yHHvX6PZwHABH51eY5npYhHj9ALua6pBfx9AAbAjOMDmO4Pn VITM7D796rSXkfFN5WRKIefxxSN0Ok6nV2ThmkeLPyad1YenavxUInWpZjkrbg+q MHYKPzDU8yA4DjMqjdve/nmczwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKICrG7d h4XIc7r8MkNCpUMe6dIuMB8GA1UdIwQYMBaAFBaEFcDBNAHA13FXHfhvjNX4UDsU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMTRCQy83RkQwMTY2QzVB MkYxMUVEQTE5RTVFNjFDNEY5QUUwMi9Gb1FWd01FMEFjRFhjVmNkLUctTTFmaFFP eFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZvUVZ3TUUwQWNEWGNWY2QtRy1NMWZoUU94US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MTRCQy83RkQwMTY2QzVBMkYxMUVEQTE5RTVFNjFDNEY5QUUwMi9Gb1FWd01FMEFj RFhjVmNkLUctTTFmaFFPeFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAIdJz9AvEKh8BzrMzcTFBjAZEh44jzM6nvSaLKEE282l8CToUGygLH IfhnvqmaQU0RNQNYDdjuTQ33oad1SRqyShIQoUCc6qm35qWozwT8NVe2pP9xTfc8 rMTSEZjdskw9qmZx4i7I3lITEw/qoyovwi+9sDLfsPZONumtLfuD34LDRvzXoGJa JxG9WVor9qn2bTqmwJVw4kspBDmVhRXOEPSTIkmrJZh1Cvmx0aSo8n0LisJlXyzz OMYoxoT92Bje0xaPyCn9gq7GS7qeyUvGPjBo/NtBJxDyTfBrF+7OWpxNzCvKoMlD jeb2N98EidsjPA0v9AjZuIhHKB31DMr2 -----END CERTIFICATE-----Generated at Mon Nov 3 18:07:27 2025 by rpki-client