$ rpki-client -vvf rpki.apnic.net/member_repository/A913D02A/77A1D95E33BC11EA8349850BC4F9AE02/fL-BxZ4yXvAGlzELOUX-ocEGs3g.mft File: fL-BxZ4yXvAGlzELOUX-ocEGs3g.mft (raw, json) Hash identifier: CN/8mtVAw7epkEFIP0k8lZcz6oadyIFTuSSsDSHhbfo= Subject key identifier: F5:23:B7:52:91:0E:4D:AB:8D:4A:ED:F9:F8:C7:59:D6:C9:B6:2A:71 Authority key identifier: 7C:BF:81:C5:9E:32:5E:F0:06:97:31:0B:39:45:FE:A1:C1:06:B3:78 Certificate issuer: /CN=A913D02A/serialNumber=7CBF81C59E325EF00697310B3945FEA1C106B378 Certificate serial: 0BA4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fL-BxZ4yXvAGlzELOUX-ocEGs3g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913D02A/77A1D95E33BC11EA8349850BC4F9AE02/fL-BxZ4yXvAGlzELOUX-ocEGs3g.mft Manifest number: 0BA1 Signing time: Tue 04 Nov 2025 19:04:38 +0000 Manifest this update: Tue 04 Nov 2025 19:04:38 +0000 Manifest next update: Tue 11 Nov 2025 19:04:38 +0000 Files and hashes: 1: fL-BxZ4yXvAGlzELOUX-ocEGs3g.crl (hash: 5dGghLAoDnlQEyXavRz1EzgF9MWW8f6Rob2dckfSckU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913D02A/77A1D95E33BC11EA8349850BC4F9AE02/fL-BxZ4yXvAGlzELOUX-ocEGs3g.crl rsync://rpki.apnic.net/member_repository/A913D02A/77A1D95E33BC11EA8349850BC4F9AE02/fL-BxZ4yXvAGlzELOUX-ocEGs3g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fL-BxZ4yXvAGlzELOUX-ocEGs3g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 19:04:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2980 (0xba4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913D02A, serialNumber=7CBF81C59E325EF00697310B3945FEA1C106B378 Validity Not Before: Nov 4 19:04:38 2025 GMT Not After : Nov 11 19:04:38 2025 GMT Subject: CN=690a4e46-ddde Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:e2:fa:fe:94:00:2f:e9:24:81:30:2a:e5:27: 8e:f9:76:59:cf:3b:67:7d:b4:79:89:af:ad:9f:6d: 0d:96:64:82:ee:41:ab:30:e1:f5:b8:19:b7:94:f9: 2b:23:15:b5:56:26:37:4c:5e:0d:46:94:39:80:d4: 99:9c:f1:ef:0e:45:10:f2:3b:db:11:7e:ed:5d:91: 09:9f:3a:65:38:f6:e5:02:d2:7d:2d:8e:02:f8:51: dc:c6:3b:4a:2a:11:c6:4a:d5:1b:81:ff:6d:e7:0c: 05:4d:f9:a2:85:f8:33:b1:c5:9f:48:8f:ab:33:0e: d3:85:aa:f5:06:88:34:69:01:c3:7b:f9:51:5f:36: 48:3c:82:29:d9:89:64:72:53:9c:d9:58:ac:0b:bf: f9:8a:c2:a7:4b:b7:0d:ff:76:f2:72:ab:28:9b:17: f4:74:c7:61:e1:fb:ac:f9:76:78:26:14:70:c9:86: 4e:4f:72:be:aa:8a:a7:49:42:61:68:5c:2f:a8:b7: 26:b7:90:8f:65:e9:d6:ea:84:13:9f:21:c7:4a:97: 0b:49:da:a5:d0:b9:4e:84:cf:99:57:17:3b:ff:1e: e7:8e:fe:4b:46:d6:04:d9:3b:4e:57:af:60:00:a8: 93:34:1b:17:ac:57:f2:b1:48:12:bc:e7:2d:bf:f1: 55:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:23:B7:52:91:0E:4D:AB:8D:4A:ED:F9:F8:C7:59:D6:C9:B6:2A:71 X509v3 Authority Key Identifier: keyid:7C:BF:81:C5:9E:32:5E:F0:06:97:31:0B:39:45:FE:A1:C1:06:B3:78 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913D02A/77A1D95E33BC11EA8349850BC4F9AE02/fL-BxZ4yXvAGlzELOUX-ocEGs3g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fL-BxZ4yXvAGlzELOUX-ocEGs3g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913D02A/77A1D95E33BC11EA8349850BC4F9AE02/fL-BxZ4yXvAGlzELOUX-ocEGs3g.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a6:3c:4c:2a:46:a8:69:eb:34:92:89:7f:c1:cd:a2:cd:52:7f: 7d:4c:1c:d0:0e:27:10:40:b4:32:e1:d7:ab:97:6c:ce:99:4d: a0:89:1b:96:5e:cd:8e:d4:17:92:a0:ac:0c:2f:70:ac:85:d7: 5b:84:eb:9c:57:5c:95:e8:5e:a0:94:c6:a3:13:34:5e:18:86: e1:fe:37:12:41:d6:da:89:e0:e1:34:81:ba:4b:b0:87:67:e4: e5:30:8f:79:58:f8:61:ae:d0:ae:65:ba:88:df:e9:84:d9:cb: f6:44:24:ec:a4:d1:80:4f:63:d7:ba:21:4e:b1:7b:4b:fd:30: 05:c5:2b:79:60:f2:fb:b2:9f:af:d8:f2:27:fa:50:b5:ee:92: 65:e3:fe:f2:ce:01:93:4e:26:c8:dc:a7:16:4f:c7:dc:bb:f3: a0:15:4c:c0:2a:12:b8:5b:03:28:63:e9:7d:51:f7:60:b4:f5: 4b:c9:24:2d:3e:97:f4:53:08:13:dd:e3:52:51:82:69:5b:cd: bc:51:b5:56:cf:30:42:e3:d0:31:be:9b:d7:90:f9:02:e4:82: 30:70:21:a4:0e:86:6f:8b:69:8d:18:67:45:5f:b5:61:96:62: a7:be:15:13:a8:f4:b1:e2:46:2e:f4:61:4a:50:65:80:6a:55: 0d:94:d0:ee -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC6QwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0QwMkExMTAvBgNVBAUTKDdDQkY4MUM1OUUzMjVFRjAwNjk3MzEwQjM5NDVGRUEx QzEwNkIzNzgwHhcNMjUxMTA0MTkwNDM4WhcNMjUxMTExMTkwNDM4WjAYMRYwFAYD VQQDEw02OTBhNGU0Ni1kZGRlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAo+L6/pQAL+kkgTAq5SeO+XZZzztnfbR5ia+tn20NlmSC7kGrMOH1uBm3lPkr IxW1ViY3TF4NRpQ5gNSZnPHvDkUQ8jvbEX7tXZEJnzplOPblAtJ9LY4C+FHcxjtK KhHGStUbgf9t5wwFTfmihfgzscWfSI+rMw7Thar1Bog0aQHDe/lRXzZIPIIp2Ylk clOc2VisC7/5isKnS7cN/3bycqsomxf0dMdh4fus+XZ4JhRwyYZOT3K+qoqnSUJh aFwvqLcmt5CPZenW6oQTnyHHSpcLSdql0LlOhM+ZVxc7/x7njv5LRtYE2TtOV69g AKiTNBsXrFfysUgSvOctv/FV8QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPUjt1KR Dk2rjUrt+fjHWdbJtipxMB8GA1UdIwQYMBaAFHy/gcWeMl7wBpcxCzlF/qHBBrN4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzRDAyQS83N0ExRDk1RTMz QkMxMUVBODM0OTg1MEJDNEY5QUUwMi9mTC1CeFo0eVh2QUdsekVMT1VYLW9jRUdz M2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ZMLUJ4WjR5WHZBR2x6RUxPVVgtb2NFR3MzZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz RDAyQS83N0ExRDk1RTMzQkMxMUVBODM0OTg1MEJDNEY5QUUwMi9mTC1CeFo0eVh2 QUdsekVMT1VYLW9jRUdzM2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCmPEwqRqhp6zSSiX/BzaLNUn99TBzQDicQQLQy4derl2zOmU2giRuW Xs2O1BeSoKwML3CshddbhOucV1yV6F6glMajEzReGIbh/jcSQdbaieDhNIG6S7CH Z+TlMI95WPhhrtCuZbqI3+mE2cv2RCTspNGAT2PXuiFOsXtL/TAFxSt5YPL7sp+v 2PIn+lC17pJl4/7yzgGTTibI3KcWT8fcu/OgFUzAKhK4WwMoY+l9UfdgtPVLySQt Ppf0UwgT3eNSUYJpW828UbVWzzBC49AxvpvXkPkC5IIwcCGkDoZvi2mNGGdFX7Vh lmKnvhUTqPSx4kYu9GFKUGWAalUNlNDu -----END CERTIFICATE-----Generated at Wed Nov 5 08:10:18 2025 by rpki-client