$ rpki-client -vvf rpki.apnic.net/member_repository/A9158E3F/C24322BA544611EA8C05651DC4F9AE02/fjE6t_8m54PgPAeFFhJ1GIGuSRg.mft File: fjE6t_8m54PgPAeFFhJ1GIGuSRg.mft (raw, json) Hash identifier: vqorOAx9OEn4bIc+dFnh+uEUqyUZqAg/389IcqivpII= Subject key identifier: 91:42:A6:D8:7E:1F:15:EC:30:94:B9:10:26:11:9F:BC:5A:EF:7A:FA Authority key identifier: 7E:31:3A:B7:FF:26:E7:83:E0:3C:07:85:16:12:75:18:81:AE:49:18 Certificate issuer: /CN=A9158E3F/serialNumber=7E313AB7FF26E783E03C07851612751881AE4918 Certificate serial: 0C68 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fjE6t_8m54PgPAeFFhJ1GIGuSRg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9158E3F/C24322BA544611EA8C05651DC4F9AE02/fjE6t_8m54PgPAeFFhJ1GIGuSRg.mft Manifest number: 0BB2 Signing time: Mon 20 Oct 2025 20:07:12 +0000 Manifest this update: Mon 20 Oct 2025 20:07:12 +0000 Manifest next update: Mon 27 Oct 2025 20:07:12 +0000 Files and hashes: 1: fjE6t_8m54PgPAeFFhJ1GIGuSRg.crl (hash: 5S5g0RSNRVMqs/mWd/fDPLvtlZC5iCCdGWFUtYV8Bq8=) 2: E8819018178811EC876F5F50C4F9AE02.roa (hash: TUeSGThA71gPmHqcyXZanu8mExqUQgocKEFv3yzea/g=) 3: 52863B4C9DBA11EB83364624C4F9AE02.roa (hash: xgcAPmybhdKKX1LB8rArE+ilDIHuIkSGwEMHOrxxz6w=) 4: 958CC8DA1C2611ECB416AA68C4F9AE02.roa (hash: SlT7b5WGF4xDvO5UnYsRWIEsNMsfCj2P0RDQ0c4uxVg=) 5: 8008F5CA620C11ECAFF5941AC4F9AE02.roa (hash: zf45ltuWfmdAtT9A7Ih3Fv5EL5oWc6vkxJu3n9BqugE=) 6: CB67A9DC8D1311EF9895E61CC4F9AE02.roa (hash: fKITGlH8Ym4FGCNTLdBz3N/9fT41O0ewrHeW85uprek=) 7: 1605F9B6169E11EC9D259855C4F9AE02.roa (hash: pWNi2zqUl2KymH0GwVdvbCWQHY1sj05kmoe0wb+HqN0=) 8: 065A717E9B6E11EFBCAB692BC4F9AE02.roa (hash: fpApiu1FjrarZlPUsOOK6GGIbKmnMiZ6mCyLBRP/A/k=) 9: 206969823B9411EB9F059D7EC4F9AE02.roa (hash: RxzJdhNL3XRe6UM0O5+yODZOZOT+QSs+nHTsvvP7oUM=) 10: C3290D00636F11F0A1C6DA70C4F9AE02.roa (hash: kxUXf7mA4CW5b99j/+9BBjl+HFe5y/+Il84nYKPjkAg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9158E3F/C24322BA544611EA8C05651DC4F9AE02/fjE6t_8m54PgPAeFFhJ1GIGuSRg.crl rsync://rpki.apnic.net/member_repository/A9158E3F/C24322BA544611EA8C05651DC4F9AE02/fjE6t_8m54PgPAeFFhJ1GIGuSRg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fjE6t_8m54PgPAeFFhJ1GIGuSRg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 27 Oct 2025 20:07:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3176 (0xc68) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9158E3F, serialNumber=7E313AB7FF26E783E03C07851612751881AE4918 Validity Not Before: Oct 20 20:07:12 2025 GMT Not After : Oct 27 20:07:12 2025 GMT Subject: CN=68f69670-b933 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:73:04:ec:6f:df:f1:5b:4b:26:c3:36:1b:0e: 82:0a:38:02:ba:f3:91:48:59:8a:f7:ce:a6:40:75: e9:96:98:89:81:3e:d3:a5:e1:5f:f6:37:99:18:da: 97:f4:d9:3d:1a:b0:f9:82:ae:e0:ae:ff:e5:f3:cd: e4:fb:c0:52:4e:65:07:46:5e:d7:8d:e9:04:13:bf: 95:16:30:a6:40:de:3f:4d:c8:b3:70:9c:b2:c3:bf: 1e:d9:bc:d8:32:3d:ad:05:a0:73:27:2e:47:5e:ec: 3f:7a:6f:d0:3e:27:11:e0:e8:98:fe:49:c1:89:50: b8:e2:1a:22:4e:00:6c:79:28:11:94:78:9e:9c:fb: a3:43:57:47:e1:b7:25:ce:cc:9c:47:ab:0e:43:28: d5:9f:68:34:9d:ef:9f:de:cf:cb:1b:87:7d:a7:86: 2e:79:ae:45:36:df:55:d8:1c:4a:7f:fd:53:24:67: 7a:7e:fa:fa:8a:d9:1e:46:53:83:2e:1b:98:f5:d1: 32:33:42:d5:09:cc:ec:f0:6e:2a:83:6d:72:a4:1a: a6:c0:3a:49:5b:23:36:29:33:87:de:20:3e:db:a2: 5a:1b:d3:bd:56:d3:ec:c0:ad:39:91:7d:37:e9:f2: 20:93:7d:b0:96:76:73:69:4f:22:f1:36:17:f9:4c: 44:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:42:A6:D8:7E:1F:15:EC:30:94:B9:10:26:11:9F:BC:5A:EF:7A:FA X509v3 Authority Key Identifier: keyid:7E:31:3A:B7:FF:26:E7:83:E0:3C:07:85:16:12:75:18:81:AE:49:18 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9158E3F/C24322BA544611EA8C05651DC4F9AE02/fjE6t_8m54PgPAeFFhJ1GIGuSRg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fjE6t_8m54PgPAeFFhJ1GIGuSRg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9158E3F/C24322BA544611EA8C05651DC4F9AE02/fjE6t_8m54PgPAeFFhJ1GIGuSRg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a8:bf:e9:b8:71:66:83:9f:98:2f:b4:9c:b2:99:e3:86:c6:09: 68:a7:b0:6e:f1:0e:3b:44:7c:66:c2:d0:2c:49:0e:cd:09:a0: f0:21:e0:a1:7a:b9:f2:b5:5c:28:fd:6c:e9:82:82:c3:80:2b: fc:86:1f:2a:11:42:4b:88:72:4a:16:fb:14:63:64:ac:b7:9c: 43:d1:ce:28:18:18:c4:68:46:b9:71:4f:0a:6e:fd:f1:e0:84: 62:80:16:90:e9:6a:74:24:d8:4c:f2:f2:89:75:ad:fd:19:dd: f0:57:6b:ec:1d:ff:5b:31:c8:c5:38:20:9f:32:49:03:81:2d: 00:bb:94:21:e4:87:54:60:28:76:68:57:87:a4:c5:a1:c9:87: ef:05:bf:a5:72:08:a3:c4:03:8e:a7:21:3e:af:78:ad:60:1c: bf:91:61:f9:af:6f:f8:dd:84:a7:e2:de:42:6e:8d:0f:a0:95: f6:c9:9b:6a:16:96:4e:b5:e0:ca:28:99:88:ca:64:e5:32:72: df:21:dc:99:74:01:97:b3:4e:e4:5f:fc:2e:f4:f9:2e:09:2b: 7c:b0:97:d9:5c:e7:46:ac:8c:31:99:b0:ae:b0:0d:f7:03:df: a1:f0:18:67:65:25:6a:c1:2a:00:d2:37:f0:6c:52:d5:cf:bf: 1d:57:c5:40 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDGgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NThFM0YxMTAvBgNVBAUTKDdFMzEzQUI3RkYyNkU3ODNFMDNDMDc4NTE2MTI3NTE4 ODFBRTQ5MTgwHhcNMjUxMDIwMjAwNzEyWhcNMjUxMDI3MjAwNzEyWjAYMRYwFAYD VQQDEw02OGY2OTY3MC1iOTMzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6nME7G/f8VtLJsM2Gw6CCjgCuvORSFmK986mQHXplpiJgT7TpeFf9jeZGNqX 9Nk9GrD5gq7grv/l883k+8BSTmUHRl7XjekEE7+VFjCmQN4/TcizcJyyw78e2bzY Mj2tBaBzJy5HXuw/em/QPicR4OiY/knBiVC44hoiTgBseSgRlHienPujQ1dH4bcl zsycR6sOQyjVn2g0ne+f3s/LG4d9p4Yuea5FNt9V2BxKf/1TJGd6fvr6itkeRlOD LhuY9dEyM0LVCczs8G4qg21ypBqmwDpJWyM2KTOH3iA+26JaG9O9VtPswK05kX03 6fIgk32wlnZzaU8i8TYX+UxEjwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJFCpth+ HxXsMJS5ECYRn7xa73r6MB8GA1UdIwQYMBaAFH4xOrf/JueD4DwHhRYSdRiBrkkY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1OEUzRi9DMjQzMjJCQTU0 NDYxMUVBOEMwNTY1MURDNEY5QUUwMi9makU2dF84bTU0UGdQQWVGRmhKMUdJR3VT UmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ZqRTZ0XzhtNTRQZ1BBZUZGaEoxR0lHdVNSZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 OEUzRi9DMjQzMjJCQTU0NDYxMUVBOEMwNTY1MURDNEY5QUUwMi9makU2dF84bTU0 UGdQQWVGRmhKMUdJR3VTUmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCov+m4cWaDn5gvtJyymeOGxglop7Bu8Q47RHxmwtAsSQ7NCaDwIeCh ernytVwo/WzpgoLDgCv8hh8qEUJLiHJKFvsUY2Sst5xD0c4oGBjEaEa5cU8Kbv3x 4IRigBaQ6Wp0JNhM8vKJda39Gd3wV2vsHf9bMcjFOCCfMkkDgS0Au5Qh5IdUYCh2 aFeHpMWhyYfvBb+lcgijxAOOpyE+r3itYBy/kWH5r2/43YSn4t5Cbo0PoJX2yZtq FpZOteDKKJmIymTlMnLfIdyZdAGXs07kX/wu9PkuCSt8sJfZXOdGrIwxmbCusA33 A9+h8BhnZSVqwSoA0jfwbFLVz78dV8VA -----END CERTIFICATE-----Generated at Wed Oct 22 15:10:47 2025 by rpki-client