$ rpki-client -vvf rpki.apnic.net/member_repository/A915D8E2/C092B1061DEF11EB835E157AC4F9AE02/fQYsctxe8S8FxBZ5_G_iVStOoCA.mft File: fQYsctxe8S8FxBZ5_G_iVStOoCA.mft (raw, json) Hash identifier: glZi3S0C9sDnRFSzY9Q8fVPl6nNJQIo023cJwMDRKSA= Subject key identifier: 66:41:F1:CB:1F:F2:27:A9:E3:8C:9E:21:4F:8F:23:8A:CE:B5:B0:B2 Authority key identifier: 7D:06:2C:72:DC:5E:F1:2F:05:C4:16:79:FC:6F:E2:55:2B:4E:A0:20 Certificate issuer: /CN=A915D8E2/serialNumber=7D062C72DC5EF12F05C41679FC6FE2552B4EA020 Certificate serial: 016E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fQYsctxe8S8FxBZ5_G_iVStOoCA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915D8E2/C092B1061DEF11EB835E157AC4F9AE02/fQYsctxe8S8FxBZ5_G_iVStOoCA.mft Manifest number: 091C Signing time: Tue 04 Nov 2025 21:28:00 +0000 Manifest this update: Tue 04 Nov 2025 21:27:59 +0000 Manifest next update: Tue 11 Nov 2025 21:27:59 +0000 Files and hashes: 1: fQYsctxe8S8FxBZ5_G_iVStOoCA.crl (hash: Vr3NMPvNb9bbRpHd8up7Hq7vnMZaKQJRn2QsokXQf3A=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915D8E2/C092B1061DEF11EB835E157AC4F9AE02/fQYsctxe8S8FxBZ5_G_iVStOoCA.crl rsync://rpki.apnic.net/member_repository/A915D8E2/C092B1061DEF11EB835E157AC4F9AE02/fQYsctxe8S8FxBZ5_G_iVStOoCA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fQYsctxe8S8FxBZ5_G_iVStOoCA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 21:27:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 366 (0x16e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915D8E2, serialNumber=7D062C72DC5EF12F05C41679FC6FE2552B4EA020 Validity Not Before: Nov 4 21:27:59 2025 GMT Not After : Nov 11 21:27:59 2025 GMT Subject: CN=690a6fdf-a4f0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:70:21:24:b5:39:da:3d:41:61:46:77:75:5d: 00:b9:0d:bd:69:51:4d:9f:7f:6d:78:c8:b7:bd:f7: 05:80:b3:be:de:38:81:6a:51:18:eb:8d:d4:07:a7: 58:34:e0:c0:bd:20:c4:c2:cc:f3:9c:c9:a7:47:4c: 06:ab:ce:4d:aa:92:98:40:96:26:61:a3:f7:fe:64: f7:14:f4:ed:00:25:7f:3a:82:ae:6e:5c:7e:0f:31: 3c:a2:03:f2:50:81:dd:e8:42:81:f3:b6:89:f0:7c: 56:b0:ba:50:10:d8:1e:60:39:d0:e5:3c:11:91:c8: 2a:07:9a:f0:96:48:8b:4d:d0:45:d0:88:59:44:ac: 49:11:4a:19:5f:72:4c:3e:c4:21:9c:d9:54:7f:d5: 8d:0e:8f:74:6a:24:b9:18:5b:42:d0:e2:d3:06:03: f4:6e:b1:b9:62:9a:2a:86:32:23:ea:c3:9b:66:96: 53:1f:2d:59:36:16:7c:27:17:c0:fa:41:e5:9d:e9: a7:e0:d3:db:70:5a:7f:52:dd:66:5d:45:68:fb:d3: 59:8f:e7:73:3a:05:7e:21:64:c9:0d:67:dd:6a:55: d4:28:76:32:20:d9:3e:e5:0c:8c:ef:5c:97:f8:6c: 83:7c:7f:1a:25:c6:a6:e4:07:b7:59:4f:fa:cc:d4: 51:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:41:F1:CB:1F:F2:27:A9:E3:8C:9E:21:4F:8F:23:8A:CE:B5:B0:B2 X509v3 Authority Key Identifier: keyid:7D:06:2C:72:DC:5E:F1:2F:05:C4:16:79:FC:6F:E2:55:2B:4E:A0:20 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915D8E2/C092B1061DEF11EB835E157AC4F9AE02/fQYsctxe8S8FxBZ5_G_iVStOoCA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fQYsctxe8S8FxBZ5_G_iVStOoCA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915D8E2/C092B1061DEF11EB835E157AC4F9AE02/fQYsctxe8S8FxBZ5_G_iVStOoCA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 73:b3:59:99:f0:9f:4d:ad:47:a7:d7:e9:3f:00:40:1b:1d:b5: 62:03:52:65:58:d1:80:f0:ab:73:e7:cd:e3:5d:c8:7e:e4:7a: 3f:82:6a:50:a3:8c:3f:fd:a5:1d:6a:bd:91:9e:b9:17:86:9b: 86:43:50:f9:9c:b1:f7:68:da:23:95:34:03:69:fc:ca:cc:d7: 44:f9:cc:5a:da:3e:a1:78:bb:2f:33:d7:7f:7e:17:fd:ec:77: 53:9f:5a:62:35:29:1d:63:96:07:36:6a:ea:9a:a1:83:82:60: 6d:0e:90:e4:a5:0d:c3:a7:fd:0b:9b:0a:63:7a:a8:df:34:31: 2c:54:5f:c2:86:49:c8:85:14:36:91:ee:7b:5f:d7:0a:2c:d8: 11:a7:71:e9:8a:e4:f9:a1:e8:3a:b6:50:78:bf:53:2c:40:c2: c6:13:88:5b:24:3e:c3:87:be:c7:52:46:99:ad:b2:cb:dd:a0: 1e:d4:b7:ed:70:e9:c7:0e:86:24:ca:04:51:ac:5f:f3:c3:c1: f1:88:f0:fd:eb:1c:44:b9:e2:e1:ba:9e:34:43:df:4a:b4:36: a0:5f:a2:bc:94:15:45:7f:dd:3c:a6:6c:62:cd:33:a5:34:67: d2:df:3d:30:4b:fe:b2:2f:16:41:c0:d8:98:d1:8f:bb:dc:c6: 9f:f5:05:e8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAW4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUQ4RTIxMTAvBgNVBAUTKDdEMDYyQzcyREM1RUYxMkYwNUM0MTY3OUZDNkZFMjU1 MkI0RUEwMjAwHhcNMjUxMTA0MjEyNzU5WhcNMjUxMTExMjEyNzU5WjAYMRYwFAYD VQQDEw02OTBhNmZkZi1hNGYwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvnAhJLU52j1BYUZ3dV0AuQ29aVFNn39teMi3vfcFgLO+3jiBalEY643UB6dY NODAvSDEwszznMmnR0wGq85NqpKYQJYmYaP3/mT3FPTtACV/OoKublx+DzE8ogPy UIHd6EKB87aJ8HxWsLpQENgeYDnQ5TwRkcgqB5rwlkiLTdBF0IhZRKxJEUoZX3JM PsQhnNlUf9WNDo90aiS5GFtC0OLTBgP0brG5YpoqhjIj6sObZpZTHy1ZNhZ8JxfA +kHlnemn4NPbcFp/Ut1mXUVo+9NZj+dzOgV+IWTJDWfdalXUKHYyINk+5QyM71yX +GyDfH8aJcam5Ae3WU/6zNRRoQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGZB8csf 8iep44yeIU+PI4rOtbCyMB8GA1UdIwQYMBaAFH0GLHLcXvEvBcQWefxv4lUrTqAg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1RDhFMi9DMDkyQjEwNjFE RUYxMUVCODM1RTE1N0FDNEY5QUUwMi9mUVlzY3R4ZThTOEZ4Qlo1X0dfaVZTdE9v Q0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ZRWXNjdHhlOFM4RnhCWjVfR19pVlN0T29DQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 RDhFMi9DMDkyQjEwNjFERUYxMUVCODM1RTE1N0FDNEY5QUUwMi9mUVlzY3R4ZThT OEZ4Qlo1X0dfaVZTdE9vQ0EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBzs1mZ8J9NrUen1+k/AEAbHbViA1JlWNGA8Ktz583jXch+5Ho/gmpQ o4w//aUdar2RnrkXhpuGQ1D5nLH3aNojlTQDafzKzNdE+cxa2j6heLsvM9d/fhf9 7HdTn1piNSkdY5YHNmrqmqGDgmBtDpDkpQ3Dp/0LmwpjeqjfNDEsVF/ChknIhRQ2 ke57X9cKLNgRp3HpiuT5oeg6tlB4v1MsQMLGE4hbJD7Dh77HUkaZrbLL3aAe1Lft cOnHDoYkygRRrF/zw8HxiPD96xxEueLhup40Q99KtDagX6K8lBVFf908pmxizTOl NGfS3z0wS/6yLxZBwNiY0Y+73Maf9QXo -----END CERTIFICATE-----Generated at Wed Nov 5 14:31:27 2025 by rpki-client