$ rpki-client -vvf rpki.apnic.net/member_repository/A9143FE9/F9E65E20443811EBAD443F74C4F9AE02/FSDys0q93K6U-pIu9HV802FA8lQ.mft File: FSDys0q93K6U-pIu9HV802FA8lQ.mft (raw, json) Hash identifier: 9T85OLEsrK3v1mURGWgLV9qNu4rLIujdAgat+fhPpe0= Subject key identifier: 9B:48:CE:7A:F0:0C:22:0F:B8:95:6E:4E:82:52:9F:14:18:36:9C:F9 Authority key identifier: 15:20:F2:B3:4A:BD:DC:AE:94:FA:92:2E:F4:75:7C:D3:61:40:F2:54 Certificate issuer: /CN=A9143FE9/serialNumber=1520F2B34ABDDCAE94FA922EF4757CD36140F254 Certificate serial: 075B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FSDys0q93K6U-pIu9HV802FA8lQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9143FE9/F9E65E20443811EBAD443F74C4F9AE02/FSDys0q93K6U-pIu9HV802FA8lQ.mft Manifest number: 074E Signing time: Wed 22 Oct 2025 22:37:01 +0000 Manifest this update: Wed 22 Oct 2025 22:37:00 +0000 Manifest next update: Wed 29 Oct 2025 22:37:00 +0000 Files and hashes: 1: FSDys0q93K6U-pIu9HV802FA8lQ.crl (hash: Xi1cRZZpFD+tMo8TyACZ8uEOyCO7ky7+Co1HbRFUqYg=) 2: A6864ACE7BA911EDB41A851EC4F9AE02.roa (hash: in5sPndy+m94d5TFTDzmLk0rnuoauLzhEu9bOOaeDaw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9143FE9/F9E65E20443811EBAD443F74C4F9AE02/FSDys0q93K6U-pIu9HV802FA8lQ.crl rsync://rpki.apnic.net/member_repository/A9143FE9/F9E65E20443811EBAD443F74C4F9AE02/FSDys0q93K6U-pIu9HV802FA8lQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FSDys0q93K6U-pIu9HV802FA8lQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Oct 2025 22:36:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1883 (0x75b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9143FE9, serialNumber=1520F2B34ABDDCAE94FA922EF4757CD36140F254 Validity Not Before: Oct 22 22:37:00 2025 GMT Not After : Oct 29 22:37:00 2025 GMT Subject: CN=68f95c8c-b324 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:ed:89:e0:c1:3c:79:49:0e:31:4a:25:78:d8: ee:9b:4e:0b:6b:de:24:76:31:a4:67:04:73:9f:01: d3:54:0e:61:f2:b9:9c:a9:6e:28:d3:31:79:da:94: fc:79:d7:14:7b:16:57:d2:07:05:fc:b4:42:3d:f5: 90:0a:f5:8d:4e:d0:02:c0:d9:ae:d5:d3:78:ce:53: 9f:d9:19:41:d0:3c:2d:0f:15:92:72:1e:86:1b:b6: 33:fb:a3:ae:ce:87:64:07:85:53:a1:19:42:43:ee: 9a:c4:40:15:b6:34:04:c7:66:5f:cf:db:5d:47:67: 1f:94:17:df:97:c0:4a:c0:d7:3b:99:8f:01:5d:b1: cd:bf:f5:14:7a:21:b4:aa:0a:39:4a:a8:54:d3:c8: 67:f1:fa:80:3e:c8:54:6c:6d:b9:e1:6a:27:d1:0b: a7:88:34:0c:0b:eb:61:ce:bd:f0:56:86:5f:bd:c8: 50:5a:3b:3a:7b:e6:cb:79:e9:cb:09:2f:e7:de:14: cb:1c:c7:c2:7c:1c:d2:89:10:bf:de:d8:dd:fb:e3: ea:bd:69:0b:39:a2:fe:d9:61:95:55:4d:bd:8c:88: 11:39:43:66:3f:af:1d:d9:89:b3:67:aa:78:02:84: 2d:1e:3f:0f:77:eb:1f:e3:d0:bd:63:a8:ab:30:d8: 2a:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:48:CE:7A:F0:0C:22:0F:B8:95:6E:4E:82:52:9F:14:18:36:9C:F9 X509v3 Authority Key Identifier: keyid:15:20:F2:B3:4A:BD:DC:AE:94:FA:92:2E:F4:75:7C:D3:61:40:F2:54 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9143FE9/F9E65E20443811EBAD443F74C4F9AE02/FSDys0q93K6U-pIu9HV802FA8lQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FSDys0q93K6U-pIu9HV802FA8lQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9143FE9/F9E65E20443811EBAD443F74C4F9AE02/FSDys0q93K6U-pIu9HV802FA8lQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7d:7f:92:65:a1:71:9d:57:43:40:d7:50:21:c9:e2:95:80:67: 26:03:4f:16:43:ff:70:87:30:88:4c:ec:bd:ee:d9:ae:69:d2: 68:18:df:b7:dc:af:34:38:57:9d:4c:31:d3:6b:37:a1:8a:6d: 86:14:e0:1a:7b:15:73:32:7d:4d:85:e2:40:5c:46:4a:a5:8e: 54:64:a7:a1:7b:b7:57:0a:ff:6e:58:72:c5:1b:10:62:a2:b4: 14:db:4c:93:5e:65:50:8a:de:5b:0d:a7:f6:18:40:0e:81:1f: b4:24:ec:2e:33:99:f3:cd:8e:7a:25:3b:f9:18:0e:69:03:26: 45:aa:96:eb:20:fe:4e:cf:76:82:b4:a6:dc:73:0e:27:6a:68: 50:50:13:2e:53:0e:f0:82:63:8e:bb:60:a2:d4:f1:b2:4e:d0: 91:c8:e4:1c:58:8e:be:2c:33:9d:99:b6:a9:4d:74:13:96:f5: e4:35:b4:bf:ca:96:11:b3:a8:e6:58:43:1c:ae:b5:5c:fa:c6: b5:78:0c:69:20:47:b6:5d:fb:bb:0c:64:3c:5d:c1:33:d9:e3: b1:63:86:55:76:61:3f:23:fc:99:ef:ce:1a:b9:90:6a:8f:d4: e6:6e:e9:18:83:8a:34:45:41:04:a5:24:3d:19:b4:0d:16:de: d9:84:c9:7d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB1swDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDNGRTkxMTAvBgNVBAUTKDE1MjBGMkIzNEFCRERDQUU5NEZBOTIyRUY0NzU3Q0Qz NjE0MEYyNTQwHhcNMjUxMDIyMjIzNzAwWhcNMjUxMDI5MjIzNzAwWjAYMRYwFAYD VQQDEw02OGY5NWM4Yy1iMzI0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxu2J4ME8eUkOMUoleNjum04La94kdjGkZwRznwHTVA5h8rmcqW4o0zF52pT8 edcUexZX0gcF/LRCPfWQCvWNTtACwNmu1dN4zlOf2RlB0DwtDxWSch6GG7Yz+6Ou zodkB4VToRlCQ+6axEAVtjQEx2Zfz9tdR2cflBffl8BKwNc7mY8BXbHNv/UUeiG0 qgo5SqhU08hn8fqAPshUbG254Won0QuniDQMC+thzr3wVoZfvchQWjs6e+bLeenL CS/n3hTLHMfCfBzSiRC/3tjd++PqvWkLOaL+2WGVVU29jIgROUNmP68d2YmzZ6p4 AoQtHj8Pd+sf49C9Y6irMNgqAwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJtIznrw DCIPuJVuToJSnxQYNpz5MB8GA1UdIwQYMBaAFBUg8rNKvdyulPqSLvR1fNNhQPJU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0M0ZFOS9GOUU2NUUyMDQ0 MzgxMUVCQUQ0NDNGNzRDNEY5QUUwMi9GU0R5czBxOTNLNlUtcEl1OUhWODAyRkE4 bFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZTRHlzMHE5M0s2VS1wSXU5SFY4MDJGQThsUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 M0ZFOS9GOUU2NUUyMDQ0MzgxMUVCQUQ0NDNGNzRDNEY5QUUwMi9GU0R5czBxOTNL NlUtcEl1OUhWODAyRkE4bFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB9f5JloXGdV0NA11AhyeKVgGcmA08WQ/9whzCITOy97tmuadJoGN+3 3K80OFedTDHTazehim2GFOAaexVzMn1NheJAXEZKpY5UZKehe7dXCv9uWHLFGxBi orQU20yTXmVQit5bDaf2GEAOgR+0JOwuM5nzzY56JTv5GA5pAyZFqpbrIP5Oz3aC tKbccw4namhQUBMuUw7wgmOOu2Ci1PGyTtCRyOQcWI6+LDOdmbapTXQTlvXkNbS/ ypYRs6jmWEMcrrVc+sa1eAxpIEe2Xfu7DGQ8XcEz2eOxY4ZVdmE/I/yZ784auZBq j9TmbukYg4o0RUEEpSQ9GbQNFt7ZhMl9 -----END CERTIFICATE-----Generated at Fri Oct 24 08:30:26 2025 by rpki-client