$ rpki-client -vvf rpki.apnic.net/member_repository/A9158F08/5B17F6D207D011EAA4848644C4F9AE02/FhPRFe2DoG6Xpz2uVRa6G2hO7Ak.mft File: FhPRFe2DoG6Xpz2uVRa6G2hO7Ak.mft (raw, json) Hash identifier: 8/UfumH8YA4E+F4Do3aOi4AXMFksCmsGHqAJ4NbiW2A= Subject key identifier: A4:8B:11:1C:1F:B6:85:F9:5E:9D:5A:1B:81:C6:08:3E:BB:15:B4:B9 Authority key identifier: 16:13:D1:15:ED:83:A0:6E:97:A7:3D:AE:55:16:BA:1B:68:4E:EC:09 Certificate issuer: /CN=A9158F08/serialNumber=1613D115ED83A06E97A73DAE5516BA1B684EEC09 Certificate serial: 0C89 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FhPRFe2DoG6Xpz2uVRa6G2hO7Ak.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9158F08/5B17F6D207D011EAA4848644C4F9AE02/FhPRFe2DoG6Xpz2uVRa6G2hO7Ak.mft Manifest number: 15F6 Signing time: Sun 02 Nov 2025 18:24:15 +0000 Manifest this update: Sun 02 Nov 2025 18:24:14 +0000 Manifest next update: Sun 09 Nov 2025 18:24:14 +0000 Files and hashes: 1: FhPRFe2DoG6Xpz2uVRa6G2hO7Ak.crl (hash: TUAzswzLh82iJ9fAKkCQH4WKrTTPJ21lPoWyKD5ZQG0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9158F08/5B17F6D207D011EAA4848644C4F9AE02/FhPRFe2DoG6Xpz2uVRa6G2hO7Ak.crl rsync://rpki.apnic.net/member_repository/A9158F08/5B17F6D207D011EAA4848644C4F9AE02/FhPRFe2DoG6Xpz2uVRa6G2hO7Ak.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FhPRFe2DoG6Xpz2uVRa6G2hO7Ak.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 18:24:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3209 (0xc89) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9158F08, serialNumber=1613D115ED83A06E97A73DAE5516BA1B684EEC09 Validity Not Before: Nov 2 18:24:14 2025 GMT Not After : Nov 9 18:24:14 2025 GMT Subject: CN=6907a1cf-23b2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:c4:46:1a:32:5a:2e:1b:43:8d:40:45:6a:6e: 1f:ee:ad:b4:c4:5a:51:fd:c7:85:a5:41:1c:9c:b1: 26:bb:55:70:ae:1c:da:36:3a:09:41:c7:ba:c8:53: a9:99:4a:cf:b8:c3:e2:52:52:41:93:72:ed:f8:ab: cd:be:60:a8:40:09:39:ea:6e:ad:68:0d:fa:c3:75: fa:58:fb:5c:72:51:23:62:ad:70:22:fd:45:29:05: c4:25:31:38:e5:e6:b4:80:11:f2:49:4b:48:73:dc: 47:fb:51:8e:6c:3d:6b:f7:95:b3:4f:22:78:f6:33: 57:c2:07:60:41:0f:0a:97:d9:76:15:e4:61:e1:7f: cf:cb:a6:35:4f:84:9f:2e:fd:39:14:16:98:b3:d4: d4:82:dd:89:a4:58:5e:68:b4:c4:80:40:22:5e:6d: d6:18:a0:03:3a:ab:6a:0e:50:68:ac:79:c6:c8:3a: 3a:6f:b7:7e:e4:f3:36:b8:16:b4:ab:0a:71:84:01: 14:bb:4e:d9:bd:e1:4f:4e:8f:4b:a5:7e:ce:86:d0: b9:7c:e7:7b:cb:fb:06:98:bc:d7:c0:aa:fd:8d:31: f5:55:7c:26:3c:08:12:b8:70:ec:04:71:b3:f0:7a: 10:8e:2c:f9:21:7f:38:76:bf:25:fc:cb:40:30:de: 7b:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:8B:11:1C:1F:B6:85:F9:5E:9D:5A:1B:81:C6:08:3E:BB:15:B4:B9 X509v3 Authority Key Identifier: keyid:16:13:D1:15:ED:83:A0:6E:97:A7:3D:AE:55:16:BA:1B:68:4E:EC:09 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9158F08/5B17F6D207D011EAA4848644C4F9AE02/FhPRFe2DoG6Xpz2uVRa6G2hO7Ak.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FhPRFe2DoG6Xpz2uVRa6G2hO7Ak.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9158F08/5B17F6D207D011EAA4848644C4F9AE02/FhPRFe2DoG6Xpz2uVRa6G2hO7Ak.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 09:bb:3e:77:18:4a:0c:3f:8f:b6:43:8d:d2:14:2d:d4:bb:6c: 33:d7:00:1b:52:4e:3b:0e:99:ce:eb:27:33:35:6f:d1:76:89: 40:6d:dc:e5:83:dd:55:38:cd:d6:9b:48:e6:6d:b2:fe:68:a4: b0:64:89:c6:f5:52:e5:52:bf:73:ac:3e:8d:4e:be:81:33:b9: f1:6b:f0:14:be:d8:e7:cd:71:2d:a0:11:72:51:1d:16:5a:bb: 92:77:2b:86:05:39:6a:68:00:d9:ee:77:27:e1:40:64:79:66: 78:e5:11:da:bf:70:a9:ca:04:51:19:6a:1a:69:de:c1:d8:23: 16:12:be:2a:04:d2:85:d1:bd:50:8d:62:c2:91:07:dc:4a:bb: 88:72:aa:9e:3e:5f:85:40:a0:4f:d8:45:03:c8:dd:d0:07:ab: 9f:51:7d:7c:8e:34:28:78:bb:d0:99:b4:86:d3:6e:8e:45:7b: 7e:8d:5c:b5:c6:24:dd:4f:36:20:70:18:5c:32:fb:24:e6:6f: eb:f2:b9:47:9b:23:28:62:86:f3:46:f0:4e:7e:e5:4d:1b:d1: bf:24:99:a7:70:bb:b5:bc:d7:b3:31:e6:77:bd:19:3e:6f:b3: df:12:5a:be:92:39:e4:8b:89:0b:97:c5:81:e2:e1:16:36:33: 55:42:e5:a4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDIkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NThGMDgxMTAvBgNVBAUTKDE2MTNEMTE1RUQ4M0EwNkU5N0E3M0RBRTU1MTZCQTFC Njg0RUVDMDkwHhcNMjUxMTAyMTgyNDE0WhcNMjUxMTA5MTgyNDE0WjAYMRYwFAYD VQQDEw02OTA3YTFjZi0yM2IyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAysRGGjJaLhtDjUBFam4f7q20xFpR/ceFpUEcnLEmu1VwrhzaNjoJQce6yFOp mUrPuMPiUlJBk3Lt+KvNvmCoQAk56m6taA36w3X6WPtcclEjYq1wIv1FKQXEJTE4 5ea0gBHySUtIc9xH+1GObD1r95WzTyJ49jNXwgdgQQ8Kl9l2FeRh4X/Py6Y1T4Sf Lv05FBaYs9TUgt2JpFheaLTEgEAiXm3WGKADOqtqDlBorHnGyDo6b7d+5PM2uBa0 qwpxhAEUu07ZveFPTo9LpX7OhtC5fOd7y/sGmLzXwKr9jTH1VXwmPAgSuHDsBHGz 8HoQjiz5IX84dr8l/MtAMN57XwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKSLERwf toX5Xp1aG4HGCD67FbS5MB8GA1UdIwQYMBaAFBYT0RXtg6Bul6c9rlUWuhtoTuwJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1OEYwOC81QjE3RjZEMjA3 RDAxMUVBQTQ4NDg2NDRDNEY5QUUwMi9GaFBSRmUyRG9HNlhwejJ1VlJhNkcyaE83 QWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZoUFJGZTJEb0c2WHB6MnVWUmE2RzJoTzdBay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 OEYwOC81QjE3RjZEMjA3RDAxMUVBQTQ4NDg2NDRDNEY5QUUwMi9GaFBSRmUyRG9H NlhwejJ1VlJhNkcyaE83QWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAJuz53GEoMP4+2Q43SFC3Uu2wz1wAbUk47DpnO6yczNW/RdolAbdzl g91VOM3Wm0jmbbL+aKSwZInG9VLlUr9zrD6NTr6BM7nxa/AUvtjnzXEtoBFyUR0W WruSdyuGBTlqaADZ7ncn4UBkeWZ45RHav3CpygRRGWoaad7B2CMWEr4qBNKF0b1Q jWLCkQfcSruIcqqePl+FQKBP2EUDyN3QB6ufUX18jjQoeLvQmbSG026ORXt+jVy1 xiTdTzYgcBhcMvsk5m/r8rlHmyMoYobzRvBOfuVNG9G/JJmncLu1vNezMeZ3vRk+ b7PfElq+kjnki4kLl8WB4uEWNjNVQuWk -----END CERTIFICATE-----Generated at Tue Nov 4 01:05:58 2025 by rpki-client