$ rpki-client -vvf rpki.apnic.net/member_repository/A9142420/C42B33D4AC8D11EF8860BE34C4F9AE02/fjqkjWfrmWmcArgfcWlt9GWopuU.mft File: fjqkjWfrmWmcArgfcWlt9GWopuU.mft (raw, json) Hash identifier: Mh1HoifCTsnqnW0z9M8bHKg5Th5FOOxa0GABriSte9w= Subject key identifier: C7:3D:1E:7D:68:DC:0E:82:AF:E7:11:95:B8:98:8F:5A:4E:85:EB:A0 Authority key identifier: 7E:3A:A4:8D:67:EB:99:69:9C:02:B8:1F:71:69:6D:F4:65:A8:A6:E5 Certificate issuer: /CN=A9142420/serialNumber=7E3AA48D67EB99699C02B81F71696DF465A8A6E5 Certificate serial: AB Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fjqkjWfrmWmcArgfcWlt9GWopuU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9142420/C42B33D4AC8D11EF8860BE34C4F9AE02/fjqkjWfrmWmcArgfcWlt9GWopuU.mft Manifest number: AA Signing time: Mon 27 Oct 2025 08:28:38 +0000 Manifest this update: Mon 27 Oct 2025 08:28:37 +0000 Manifest next update: Mon 03 Nov 2025 08:28:37 +0000 Files and hashes: 1: fjqkjWfrmWmcArgfcWlt9GWopuU.crl (hash: rkvtXfrEVVc+DHICgpwltGlWBbVUOLiDHMND8efcyaI=) 2: E010D234AC8D11EF93B1CB46C4F9AE02.roa (hash: YpSnYb0YINnTM8lhx7+T2YYXN8o6CWyYil8vXxTtBGA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9142420/C42B33D4AC8D11EF8860BE34C4F9AE02/fjqkjWfrmWmcArgfcWlt9GWopuU.crl rsync://rpki.apnic.net/member_repository/A9142420/C42B33D4AC8D11EF8860BE34C4F9AE02/fjqkjWfrmWmcArgfcWlt9GWopuU.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fjqkjWfrmWmcArgfcWlt9GWopuU.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Nov 2025 08:28:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 171 (0xab) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9142420, serialNumber=7E3AA48D67EB99699C02B81F71696DF465A8A6E5 Validity Not Before: Oct 27 08:28:37 2025 GMT Not After : Nov 3 08:28:37 2025 GMT Subject: CN=68ff2d35-603d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:bd:d1:6d:31:b0:00:e1:5d:06:cb:cb:a2:75: 1c:9d:1c:d7:2e:44:7c:f9:bb:7d:06:d6:a3:fe:9c: a2:a6:ad:b9:0d:b4:6c:ca:31:be:38:b3:1e:eb:c2: c1:a4:21:0b:42:cd:7d:8e:de:ba:ab:dc:e9:dc:73: 2d:c1:40:94:65:49:59:0e:5e:74:a3:aa:ba:de:65: 59:b9:e6:09:27:97:d4:8c:43:84:7b:79:69:cb:bf: 7e:bc:02:e1:29:8a:5a:e4:ea:b0:29:17:4d:76:25: 1b:1c:f5:8c:7a:02:4d:0e:f0:a0:37:c4:94:7d:ea: 59:95:f0:2e:4a:22:ae:8f:dd:fd:74:26:68:55:34: 1b:89:95:7d:0b:12:11:5c:96:fb:66:67:70:2e:37: 82:da:6f:32:5c:41:78:95:de:14:50:a3:a9:ca:ca: 7b:e2:65:69:51:06:9b:4c:44:ac:5a:ff:5d:f1:28: a4:e6:2c:90:08:77:80:00:e4:75:11:01:1c:87:e3: 97:79:5e:0a:6b:09:cc:b7:a6:85:89:7d:81:e5:84: 49:a2:df:bb:f8:8a:f0:d8:24:41:18:b9:92:ed:74: 62:72:fe:c0:36:a9:04:6b:51:a7:43:b6:2f:df:e3: e9:8d:48:6a:af:48:ab:4b:76:fb:50:de:64:07:ef: bb:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:3D:1E:7D:68:DC:0E:82:AF:E7:11:95:B8:98:8F:5A:4E:85:EB:A0 X509v3 Authority Key Identifier: keyid:7E:3A:A4:8D:67:EB:99:69:9C:02:B8:1F:71:69:6D:F4:65:A8:A6:E5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9142420/C42B33D4AC8D11EF8860BE34C4F9AE02/fjqkjWfrmWmcArgfcWlt9GWopuU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fjqkjWfrmWmcArgfcWlt9GWopuU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9142420/C42B33D4AC8D11EF8860BE34C4F9AE02/fjqkjWfrmWmcArgfcWlt9GWopuU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7c:f7:8d:aa:1b:b8:b3:06:13:b7:8e:f7:79:be:b7:50:dd:af: b4:77:89:3f:9b:d2:34:6e:50:b0:e7:aa:14:e1:dd:29:bf:32: b7:73:1e:91:64:bf:ee:52:42:ba:11:df:95:af:27:ab:25:68: df:76:40:69:69:c6:5c:5d:87:1b:fb:65:c5:01:b6:e2:7a:00: 3e:41:aa:54:39:87:2f:c5:26:68:be:4f:75:47:06:7a:dd:fa: d7:53:24:ab:db:77:27:c9:63:5d:99:e6:af:da:64:a3:bd:20: 24:7c:e8:41:60:0e:91:20:2a:2b:9e:d8:2a:eb:21:10:0d:a2: ee:26:75:64:c5:6a:97:5b:42:75:cb:dd:50:e0:eb:08:f8:fc: 2f:1c:b6:c8:c0:5b:31:6d:ff:3c:bf:6a:1b:34:9f:f0:66:e2: 77:75:26:ff:58:5a:63:d3:83:4f:63:69:48:94:15:0e:77:7f: 03:9e:86:4b:9c:29:4c:31:c3:93:e6:74:07:59:b9:32:32:9b: 90:f7:86:16:64:dc:9c:96:7f:d0:0a:4d:f5:2a:bb:71:19:68: 76:74:4a:56:9f:ad:6c:07:ba:93:e4:91:29:cb:6f:ee:53:59: 62:7d:b7:ef:e4:83:ff:ae:6a:93:15:fb:58:f7:b1:4a:d0:a5: 86:d8:82:c6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAKswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDI0MjAxMTAvBgNVBAUTKDdFM0FBNDhENjdFQjk5Njk5QzAyQjgxRjcxNjk2REY0 NjVBOEE2RTUwHhcNMjUxMDI3MDgyODM3WhcNMjUxMTAzMDgyODM3WjAYMRYwFAYD VQQDEw02OGZmMmQzNS02MDNkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtb3RbTGwAOFdBsvLonUcnRzXLkR8+bt9Btaj/pyipq25DbRsyjG+OLMe68LB pCELQs19jt66q9zp3HMtwUCUZUlZDl50o6q63mVZueYJJ5fUjEOEe3lpy79+vALh KYpa5OqwKRdNdiUbHPWMegJNDvCgN8SUfepZlfAuSiKuj939dCZoVTQbiZV9CxIR XJb7ZmdwLjeC2m8yXEF4ld4UUKOpysp74mVpUQabTESsWv9d8Sik5iyQCHeAAOR1 EQEch+OXeV4KawnMt6aFiX2B5YRJot+7+Irw2CRBGLmS7XRicv7ANqkEa1GnQ7Yv 3+PpjUhqr0irS3b7UN5kB++7XwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMc9Hn1o 3A6Cr+cRlbiYj1pOheugMB8GA1UdIwQYMBaAFH46pI1n65lpnAK4H3FpbfRlqKbl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MjQyMC9DNDJCMzNENEFD OEQxMUVGODg2MEJFMzRDNEY5QUUwMi9manFraldmcm1XbWNBcmdmY1dsdDlHV29w dVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2ZqcWtqV2ZybVdtY0FyZ2ZjV2x0OUdXb3B1VS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MjQyMC9DNDJCMzNENEFDOEQxMUVGODg2MEJFMzRDNEY5QUUwMi9manFraldmcm1X bWNBcmdmY1dsdDlHV29wdVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB8942qG7izBhO3jvd5vrdQ3a+0d4k/m9I0blCw56oU4d0pvzK3cx6R ZL/uUkK6Ed+VryerJWjfdkBpacZcXYcb+2XFAbbiegA+QapUOYcvxSZovk91RwZ6 3frXUySr23cnyWNdmeav2mSjvSAkfOhBYA6RICorntgq6yEQDaLuJnVkxWqXW0J1 y91Q4OsI+PwvHLbIwFsxbf88v2obNJ/wZuJ3dSb/WFpj04NPY2lIlBUOd38DnoZL nClMMcOT5nQHWbkyMpuQ94YWZNycln/QCk31KrtxGWh2dEpWn61sB7qT5JEpy2/u U1lifbfv5IP/rmqTFftY97FK0KWG2ILG -----END CERTIFICATE-----Generated at Tue Oct 28 03:15:47 2025 by rpki-client