$ rpki-client -vvf rpki.apnic.net/member_repository/A915DB9F/B88F4252545011E6A3A6D466C4F9AE02/fgqozSvoYXAaXKfPudRQ09kYJ-g.mft File: fgqozSvoYXAaXKfPudRQ09kYJ-g.mft (raw, json) Hash identifier: UtIIxPPfCHbX5YWNdq75XwncC6Tc182aAJtDnRfNT/c= Subject key identifier: 5C:E6:B4:DC:94:54:5B:B5:55:36:AF:27:C1:17:5C:34:3A:AE:41:8B Authority key identifier: 7E:0A:A8:CD:2B:E8:61:70:1A:5C:A7:CF:B9:D4:50:D3:D9:18:27:E8 Certificate issuer: /CN=A915DB9F/serialNumber=7E0AA8CD2BE861701A5CA7CFB9D450D3D91827E8 Certificate serial: 1F7A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fgqozSvoYXAaXKfPudRQ09kYJ-g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915DB9F/B88F4252545011E6A3A6D466C4F9AE02/fgqozSvoYXAaXKfPudRQ09kYJ-g.mft Manifest number: 1F6D Signing time: Sun 02 Nov 2025 16:00:42 +0000 Manifest this update: Sun 02 Nov 2025 16:00:42 +0000 Manifest next update: Sun 09 Nov 2025 16:00:42 +0000 Files and hashes: 1: fgqozSvoYXAaXKfPudRQ09kYJ-g.crl (hash: TWWTdgBl2hHxVY3opUtdo8cVWwwDwi+Ri7M4X32jWjk=) 2: 4D94E0D6545211E6A367BC68C4F9AE02.roa (hash: DcM+Lc5+n2tyIRWKbRIwYXhW1cJ+6S2apUWAewERFcg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915DB9F/B88F4252545011E6A3A6D466C4F9AE02/fgqozSvoYXAaXKfPudRQ09kYJ-g.crl rsync://rpki.apnic.net/member_repository/A915DB9F/B88F4252545011E6A3A6D466C4F9AE02/fgqozSvoYXAaXKfPudRQ09kYJ-g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fgqozSvoYXAaXKfPudRQ09kYJ-g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 16:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8058 (0x1f7a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915DB9F, serialNumber=7E0AA8CD2BE861701A5CA7CFB9D450D3D91827E8 Validity Not Before: Nov 2 16:00:42 2025 GMT Not After : Nov 9 16:00:42 2025 GMT Subject: CN=6907802a-ad70 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:d5:e1:0d:e8:c3:83:60:38:cf:0a:ae:b1:64: d6:0c:f8:16:93:ee:ec:e2:76:33:96:29:6b:e5:af: 93:e4:1d:91:c5:6f:1e:92:c9:f8:b6:ad:b0:56:c4: dc:38:2f:28:fd:ce:6c:62:0e:75:73:c0:16:0b:35: 1a:b4:e6:89:c6:3e:7e:50:01:a6:b0:d1:73:cc:97: 90:3a:8e:7c:4f:e2:3d:8b:d0:7e:6f:3f:be:a1:21: 2c:c6:1f:a9:a7:ce:b1:41:a5:8b:15:fb:0e:db:d9: 72:cd:68:d5:dd:f5:18:a7:38:a5:25:79:db:0b:59: ca:cb:3e:69:b0:c8:93:c7:85:5b:39:ef:c4:f9:e1: ae:46:d5:da:2b:c5:78:26:15:3e:a3:3b:da:f2:e4: 2d:11:cd:60:ca:db:bf:b2:87:b7:db:02:07:8e:fb: 3c:37:54:2a:c0:69:95:93:2b:07:69:5b:0a:09:7c: 84:7c:2f:c5:ff:0a:b0:5a:b9:4b:c1:91:49:4e:17: d9:a7:11:0a:90:64:e6:57:b7:1b:4e:31:ba:52:57: e2:d8:aa:33:6c:b1:33:db:a5:1c:ee:2b:f5:95:04: fe:50:42:fa:51:c7:c4:b3:8c:4d:17:7d:ca:f5:0f: 38:b4:a4:9c:a8:ae:b0:b9:10:cd:c9:79:0a:00:c0: 73:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:E6:B4:DC:94:54:5B:B5:55:36:AF:27:C1:17:5C:34:3A:AE:41:8B X509v3 Authority Key Identifier: keyid:7E:0A:A8:CD:2B:E8:61:70:1A:5C:A7:CF:B9:D4:50:D3:D9:18:27:E8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915DB9F/B88F4252545011E6A3A6D466C4F9AE02/fgqozSvoYXAaXKfPudRQ09kYJ-g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fgqozSvoYXAaXKfPudRQ09kYJ-g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915DB9F/B88F4252545011E6A3A6D466C4F9AE02/fgqozSvoYXAaXKfPudRQ09kYJ-g.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c4:6b:13:45:fa:03:03:cf:f8:21:e9:a6:65:f4:2c:b8:88:9d: 85:7d:f2:41:ab:14:40:c8:10:a6:1d:4a:0b:d4:d0:57:d1:84: a0:3c:45:ae:a3:06:95:5c:33:62:64:c1:d2:9d:a3:3b:ee:f5: 48:6d:6b:45:1d:ba:f0:3c:1c:b1:0d:7c:a2:44:09:bb:bb:bb: fd:1c:d4:70:6d:e7:d2:fc:c0:17:66:28:a4:8a:89:6b:ad:9f: 2c:a9:c9:d6:f5:c7:0a:bc:58:13:79:85:5a:c3:30:c0:9e:ee: bb:0f:bb:72:51:7c:cc:4c:79:54:40:85:bc:e8:0e:6e:7e:da: 38:ae:6b:9e:99:0f:21:eb:a8:13:6a:0f:1a:ae:3e:58:55:6b: 38:33:61:1a:0c:c6:ab:db:76:5c:7f:c4:0d:3b:14:36:af:c7: dc:47:2f:27:04:93:b3:96:17:f4:54:30:aa:b5:92:3e:31:ce: 6d:c1:c5:82:d9:8d:de:e0:eb:17:7f:06:b1:6a:84:ae:cc:48: 24:45:96:dc:7f:3b:e7:9f:33:ee:84:d7:e2:12:7f:12:9a:fa: 5a:75:08:c5:2d:3b:72:09:46:6b:4e:7f:5d:f0:fa:53:38:33: 77:4b:6b:9d:8a:47:d7:0a:59:1c:67:02:64:dd:39:65:5a:a7: 34:9f:53:b6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICH3owDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NURCOUYxMTAvBgNVBAUTKDdFMEFBOENEMkJFODYxNzAxQTVDQTdDRkI5RDQ1MEQz RDkxODI3RTgwHhcNMjUxMTAyMTYwMDQyWhcNMjUxMTA5MTYwMDQyWjAYMRYwFAYD VQQDEw02OTA3ODAyYS1hZDcwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvdXhDejDg2A4zwqusWTWDPgWk+7s4nYzlilr5a+T5B2RxW8eksn4tq2wVsTc OC8o/c5sYg51c8AWCzUatOaJxj5+UAGmsNFzzJeQOo58T+I9i9B+bz++oSEsxh+p p86xQaWLFfsO29lyzWjV3fUYpzilJXnbC1nKyz5psMiTx4VbOe/E+eGuRtXaK8V4 JhU+ozva8uQtEc1gytu/soe32wIHjvs8N1QqwGmVkysHaVsKCXyEfC/F/wqwWrlL wZFJThfZpxEKkGTmV7cbTjG6Ulfi2KozbLEz26Uc7iv1lQT+UEL6UcfEs4xNF33K 9Q84tKScqK6wuRDNyXkKAMBzpwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFzmtNyU VFu1VTavJ8EXXDQ6rkGLMB8GA1UdIwQYMBaAFH4KqM0r6GFwGlynz7nUUNPZGCfo MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1REI5Ri9CODhGNDI1MjU0 NTAxMUU2QTNBNkQ0NjZDNEY5QUUwMi9mZ3FvelN2b1lYQWFYS2ZQdWRSUTA5a1lK LWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ZncW96U3ZvWVhBYVhLZlB1ZFJRMDlrWUotZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 REI5Ri9CODhGNDI1MjU0NTAxMUU2QTNBNkQ0NjZDNEY5QUUwMi9mZ3FvelN2b1lY QWFYS2ZQdWRSUTA5a1lKLWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDEaxNF+gMDz/gh6aZl9Cy4iJ2FffJBqxRAyBCmHUoL1NBX0YSgPEWu owaVXDNiZMHSnaM77vVIbWtFHbrwPByxDXyiRAm7u7v9HNRwbefS/MAXZiikiolr rZ8sqcnW9ccKvFgTeYVawzDAnu67D7tyUXzMTHlUQIW86A5ufto4rmuemQ8h66gT ag8arj5YVWs4M2EaDMar23Zcf8QNOxQ2r8fcRy8nBJOzlhf0VDCqtZI+Mc5twcWC 2Y3e4OsXfwaxaoSuzEgkRZbcfzvnnzPuhNfiEn8SmvpadQjFLTtyCUZrTn9d8PpT ODN3S2udikfXClkcZwJk3TllWqc0n1O2 -----END CERTIFICATE-----Generated at Mon Nov 3 18:13:41 2025 by rpki-client