$ rpki-client -vvf rpki.apnic.net/member_repository/A91513FA/329397661DEE11ED9472C136C4F9AE02/FgS-6E66CP3JRuSLTBTo3CVCGTo.mft File: FgS-6E66CP3JRuSLTBTo3CVCGTo.mft (raw, json) Hash identifier: iYzZWODPIxne+qVrMCOU3Tq4PQ4C+CtfA4ygp8VQ1vQ= Subject key identifier: 31:4F:A5:47:41:60:6E:3D:41:77:77:6B:A3:B8:A5:FD:D2:0F:50:B8 Authority key identifier: 16:04:BE:E8:4E:BA:08:FD:C9:46:E4:8B:4C:14:E8:DC:25:42:19:3A Certificate issuer: /CN=A91513FA/serialNumber=1604BEE84EBA08FDC946E48B4C14E8DC2542193A Certificate serial: 02A2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FgS-6E66CP3JRuSLTBTo3CVCGTo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91513FA/329397661DEE11ED9472C136C4F9AE02/FgS-6E66CP3JRuSLTBTo3CVCGTo.mft Manifest number: 029E Signing time: Mon 03 Nov 2025 01:30:13 +0000 Manifest this update: Mon 03 Nov 2025 01:30:12 +0000 Manifest next update: Mon 10 Nov 2025 01:30:12 +0000 Files and hashes: 1: FgS-6E66CP3JRuSLTBTo3CVCGTo.crl (hash: OhhOmtzqy12/SUYbbX2dtanEu9DciTiUriUSalNHbjA=) 2: 6901B0861DF211ED95A51A3EC4F9AE02.roa (hash: 0XIDOV8UwVvmlax4boMgDyUwaF1U/8jmEUNtClSqDZc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91513FA/329397661DEE11ED9472C136C4F9AE02/FgS-6E66CP3JRuSLTBTo3CVCGTo.crl rsync://rpki.apnic.net/member_repository/A91513FA/329397661DEE11ED9472C136C4F9AE02/FgS-6E66CP3JRuSLTBTo3CVCGTo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FgS-6E66CP3JRuSLTBTo3CVCGTo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 01:30:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 674 (0x2a2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91513FA, serialNumber=1604BEE84EBA08FDC946E48B4C14E8DC2542193A Validity Not Before: Nov 3 01:30:12 2025 GMT Not After : Nov 10 01:30:12 2025 GMT Subject: CN=690805a4-7fa8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:c6:82:94:3b:e7:42:22:54:36:2d:cf:8b:6d: 5a:0c:d1:6b:13:d4:0a:3b:b6:64:40:53:56:7f:fd: 51:ef:c2:c5:41:ab:77:19:c6:25:16:8b:c4:dd:77: 79:0d:a6:05:d7:c0:c6:d6:66:88:a0:62:e4:66:0f: 4e:3a:8e:1b:4f:15:bd:a3:82:a3:8d:32:f7:2e:e9: db:16:bf:c3:d6:17:c6:d3:5c:22:ab:11:6a:68:39: 48:04:c5:3f:f6:99:6e:ac:71:04:1a:27:3a:ca:39: 87:a0:02:f3:24:ae:67:0c:5f:13:af:45:85:34:3d: 25:1e:4c:7d:66:8d:84:af:f0:63:54:9a:f6:3c:d6: 92:6f:4f:6c:06:d3:78:16:54:10:b4:89:ab:ee:92: b4:5b:05:cb:51:01:5d:f4:80:e5:ff:6f:83:d9:d7: 30:15:b9:38:4d:f9:4d:bf:b9:0c:93:c3:e1:a4:45: 6b:ea:db:e9:c5:0e:a6:41:1a:9a:f7:eb:c2:0b:f1: f1:bb:9b:10:30:b8:5d:a5:25:42:13:4c:17:57:01: d5:76:79:61:47:54:ee:a1:7f:92:36:e9:04:21:d2: a7:3a:5b:b8:91:f1:0c:c5:33:c9:d6:5d:6a:ba:dd: 0c:bf:2b:26:3d:d7:f0:66:32:d9:9e:c0:8e:dd:8f: ca:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:4F:A5:47:41:60:6E:3D:41:77:77:6B:A3:B8:A5:FD:D2:0F:50:B8 X509v3 Authority Key Identifier: keyid:16:04:BE:E8:4E:BA:08:FD:C9:46:E4:8B:4C:14:E8:DC:25:42:19:3A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91513FA/329397661DEE11ED9472C136C4F9AE02/FgS-6E66CP3JRuSLTBTo3CVCGTo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FgS-6E66CP3JRuSLTBTo3CVCGTo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91513FA/329397661DEE11ED9472C136C4F9AE02/FgS-6E66CP3JRuSLTBTo3CVCGTo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9f:e8:ce:9d:5b:75:68:72:04:14:9c:08:91:ae:02:7c:f5:2b: 12:33:d1:43:09:6a:3f:bb:01:52:d3:4e:2e:b4:44:e0:11:09: b7:83:be:11:20:ef:93:e6:60:97:b9:35:09:f1:dc:67:2c:43: d7:75:1d:f2:9b:71:d3:88:b6:5f:98:a8:cc:a3:00:7d:f0:8f: 69:f8:ab:27:16:ba:5d:1e:43:ad:36:47:1f:e5:f2:6f:f7:17: 12:f2:0a:a7:a1:c1:47:44:41:35:e8:29:34:1d:fb:08:9a:fe: 2b:48:37:20:25:14:8b:48:1c:6e:1b:65:11:57:50:75:f0:db: 3e:11:a7:f7:4c:23:c0:51:3e:9f:58:0b:6b:02:a3:24:79:e7: ec:2d:59:9e:a3:5e:5c:93:80:d5:89:32:39:d6:17:be:e4:14: 81:e3:59:2e:bb:84:6a:76:71:4f:bd:ef:95:be:1f:b7:0d:9f: 06:b7:4b:df:21:f1:d2:dd:2d:13:9f:f2:ea:a6:d9:da:3e:04: ff:05:07:aa:b7:37:a8:a7:ff:3b:e4:db:6d:0b:0d:6c:b9:3d: 06:1b:03:97:0d:2e:8e:9f:0d:78:bb:87:01:03:5a:3f:d2:c5: 3b:ee:ad:fb:a6:2e:a9:b2:e7:c7:8a:ce:7b:98:cb:e0:49:b2: 39:74:91:66 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAqIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTEzRkExMTAvBgNVBAUTKDE2MDRCRUU4NEVCQTA4RkRDOTQ2RTQ4QjRDMTRFOERD MjU0MjE5M0EwHhcNMjUxMTAzMDEzMDEyWhcNMjUxMTEwMDEzMDEyWjAYMRYwFAYD VQQDEw02OTA4MDVhNC03ZmE4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv8aClDvnQiJUNi3Pi21aDNFrE9QKO7ZkQFNWf/1R78LFQat3GcYlFovE3Xd5 DaYF18DG1maIoGLkZg9OOo4bTxW9o4KjjTL3LunbFr/D1hfG01wiqxFqaDlIBMU/ 9plurHEEGic6yjmHoALzJK5nDF8Tr0WFND0lHkx9Zo2Er/BjVJr2PNaSb09sBtN4 FlQQtImr7pK0WwXLUQFd9IDl/2+D2dcwFbk4TflNv7kMk8PhpEVr6tvpxQ6mQRqa 9+vCC/Hxu5sQMLhdpSVCE0wXVwHVdnlhR1TuoX+SNukEIdKnOlu4kfEMxTPJ1l1q ut0MvysmPdfwZjLZnsCO3Y/KAQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDFPpUdB YG49QXd3a6O4pf3SD1C4MB8GA1UdIwQYMBaAFBYEvuhOugj9yUbki0wU6NwlQhk6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MTNGQS8zMjkzOTc2NjFE RUUxMUVEOTQ3MkMxMzZDNEY5QUUwMi9GZ1MtNkU2NkNQM0pSdVNMVEJUbzNDVkNH VG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZnUy02RTY2Q1AzSlJ1U0xUQlRvM0NWQ0dUby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MTNGQS8zMjkzOTc2NjFERUUxMUVEOTQ3MkMxMzZDNEY5QUUwMi9GZ1MtNkU2NkNQ M0pSdVNMVEJUbzNDVkNHVG8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCf6M6dW3VocgQUnAiRrgJ89SsSM9FDCWo/uwFS004utETgEQm3g74R IO+T5mCXuTUJ8dxnLEPXdR3ym3HTiLZfmKjMowB98I9p+KsnFrpdHkOtNkcf5fJv 9xcS8gqnocFHREE16Ck0HfsImv4rSDcgJRSLSBxuG2URV1B18Ns+Eaf3TCPAUT6f WAtrAqMkeefsLVmeo15ck4DViTI51he+5BSB41kuu4RqdnFPve+Vvh+3DZ8Gt0vf IfHS3S0Tn/LqptnaPgT/BQeqtzeop/875NttCw1suT0GGwOXDS6Onw14u4cBA1o/ 0sU77q37pi6psufHis57mMvgSbI5dJFm -----END CERTIFICATE-----Generated at Mon Nov 3 18:07:25 2025 by rpki-client