$ rpki-client -vvf rpki.apnic.net/member_repository/A91627F3/779F6E9283F811EC816B0367C4F9AE02/FSze4Zs7fRcbTKrQNbUymFTTbcI.mft File: FSze4Zs7fRcbTKrQNbUymFTTbcI.mft (raw, json) Hash identifier: 3IjDfRU5nPS1AYXR/YhGq/C+EQZQSJF1BG5xjcQ3zZ4= Subject key identifier: 6E:F5:7D:BE:A2:31:D4:62:EF:C2:50:AB:6A:78:DB:59:9D:E3:F8:35 Authority key identifier: 15:2C:DE:E1:9B:3B:7D:17:1B:4C:AA:D0:35:B5:32:98:54:D3:6D:C2 Certificate issuer: /CN=A91627F3/serialNumber=152CDEE19B3B7D171B4CAAD035B5329854D36DC2 Certificate serial: 0437 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FSze4Zs7fRcbTKrQNbUymFTTbcI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91627F3/779F6E9283F811EC816B0367C4F9AE02/FSze4Zs7fRcbTKrQNbUymFTTbcI.mft Manifest number: 042E Signing time: Wed 05 Nov 2025 00:25:39 +0000 Manifest this update: Wed 05 Nov 2025 00:25:39 +0000 Manifest next update: Wed 12 Nov 2025 00:25:39 +0000 Files and hashes: 1: FSze4Zs7fRcbTKrQNbUymFTTbcI.crl (hash: UWO4UM4ubYQz/dHTsDGnX1ZuQce7QAYfuPVB76noDh4=) 2: FF9D74D8735F11F093707251C4F9AE02.roa (hash: x+4V7MgRD99pCQ1H4NPILV8k6b/KjY/7SvzSzH6UBOU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91627F3/779F6E9283F811EC816B0367C4F9AE02/FSze4Zs7fRcbTKrQNbUymFTTbcI.crl rsync://rpki.apnic.net/member_repository/A91627F3/779F6E9283F811EC816B0367C4F9AE02/FSze4Zs7fRcbTKrQNbUymFTTbcI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FSze4Zs7fRcbTKrQNbUymFTTbcI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 00:25:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1079 (0x437) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91627F3, serialNumber=152CDEE19B3B7D171B4CAAD035B5329854D36DC2 Validity Not Before: Nov 5 00:25:39 2025 GMT Not After : Nov 12 00:25:39 2025 GMT Subject: CN=690a9983-3332 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:8d:89:7d:6b:0a:f5:93:53:bd:72:eb:ef:97: 75:9f:a1:75:86:d3:0f:4f:42:d0:56:32:80:fb:80: 56:b9:19:42:7b:1a:aa:69:4a:d8:7e:37:c5:1c:89: b5:96:f6:0a:de:51:4b:17:03:c2:99:c2:1f:81:e6: a7:31:34:d4:29:53:51:ee:ca:2f:eb:7e:f2:f5:0f: 7d:39:7c:49:9f:34:20:0d:97:67:46:7b:43:df:ed: 80:cd:de:fb:1e:f9:75:e4:36:d4:61:d6:ed:62:38: c2:f3:f0:12:c5:38:9a:82:c2:50:e3:ba:ee:36:27: 17:f6:e4:a8:9d:54:6a:13:41:bd:8e:87:98:01:29: f2:0e:8d:84:21:35:11:31:84:99:8d:01:2a:20:6a: bb:f3:c8:bb:1f:f4:c1:4c:9b:ed:83:9b:72:5b:05: 4e:38:c8:ca:27:ee:b0:20:14:3f:74:c5:c9:d8:b6: 94:29:14:ca:2f:e3:1e:1a:82:d4:db:4b:16:ac:a4: 95:d5:41:46:c1:8f:53:e6:68:2e:21:9f:79:2a:79: 2a:4d:43:ff:88:ed:8f:20:57:90:8b:10:19:f3:ed: 84:c3:99:e3:34:e6:32:9f:75:54:b9:3b:e6:29:ff: 26:64:c0:7d:00:13:d1:91:c5:c4:23:a9:13:75:ad: 42:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:F5:7D:BE:A2:31:D4:62:EF:C2:50:AB:6A:78:DB:59:9D:E3:F8:35 X509v3 Authority Key Identifier: keyid:15:2C:DE:E1:9B:3B:7D:17:1B:4C:AA:D0:35:B5:32:98:54:D3:6D:C2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91627F3/779F6E9283F811EC816B0367C4F9AE02/FSze4Zs7fRcbTKrQNbUymFTTbcI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FSze4Zs7fRcbTKrQNbUymFTTbcI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91627F3/779F6E9283F811EC816B0367C4F9AE02/FSze4Zs7fRcbTKrQNbUymFTTbcI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 36:e2:e8:1e:30:8d:a3:68:e3:63:77:87:29:85:0e:40:e8:c2: af:90:ce:e9:bd:71:66:f8:1e:18:16:db:85:05:c5:3c:81:a3: 6b:94:d2:28:fa:73:0c:3d:0c:27:84:c4:15:6c:6d:03:7d:f7: a9:0c:bd:7c:6a:e6:8f:ac:33:d7:91:46:ab:6e:98:13:b7:7c: f3:39:0a:ba:81:23:92:08:80:f7:f5:f0:26:e1:26:ca:93:90: 62:c4:01:cd:ac:42:09:3d:c6:f5:7f:91:3f:d9:f4:d1:86:f9: 4b:6f:2f:fe:85:11:aa:df:2d:4b:52:06:7d:c7:31:68:65:59: 7c:d7:12:ed:6c:a8:15:6a:9a:93:6b:ba:46:36:6a:bc:d1:8e: 5b:8e:bb:7c:50:60:15:8e:cc:46:82:04:6f:94:05:7d:3e:20: 85:b1:8e:18:4d:42:3e:14:63:ed:e9:36:f0:a5:7a:86:f8:04: e3:13:93:8a:51:a6:72:3a:f0:b0:84:63:23:f7:1a:76:64:20: a9:d9:78:24:31:85:e7:47:65:7f:91:0d:79:5d:ab:ae:23:04: 09:6a:d4:68:76:e7:64:66:97:ca:09:f6:d2:e6:b5:39:4c:20: 7d:9f:52:e5:0f:0a:9e:53:03:b1:88:76:bc:75:ee:87:a7:26: 9f:24:65:4b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBDcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjI3RjMxMTAvBgNVBAUTKDE1MkNERUUxOUIzQjdEMTcxQjRDQUFEMDM1QjUzMjk4 NTREMzZEQzIwHhcNMjUxMTA1MDAyNTM5WhcNMjUxMTEyMDAyNTM5WjAYMRYwFAYD VQQDEw02OTBhOTk4My0zMzMyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvI2JfWsK9ZNTvXLr75d1n6F1htMPT0LQVjKA+4BWuRlCexqqaUrYfjfFHIm1 lvYK3lFLFwPCmcIfgeanMTTUKVNR7sov637y9Q99OXxJnzQgDZdnRntD3+2Azd77 Hvl15DbUYdbtYjjC8/ASxTiagsJQ47ruNicX9uSonVRqE0G9joeYASnyDo2EITUR MYSZjQEqIGq788i7H/TBTJvtg5tyWwVOOMjKJ+6wIBQ/dMXJ2LaUKRTKL+MeGoLU 20sWrKSV1UFGwY9T5mguIZ95KnkqTUP/iO2PIFeQixAZ8+2Ew5njNOYyn3VUuTvm Kf8mZMB9ABPRkcXEI6kTda1CfQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFG71fb6i MdRi78JQq2p421md4/g1MB8GA1UdIwQYMBaAFBUs3uGbO30XG0yq0DW1MphU023C MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MjdGMy83NzlGNkU5Mjgz RjgxMUVDODE2QjAzNjdDNEY5QUUwMi9GU3plNFpzN2ZSY2JUS3JRTmJVeW1GVFRi Y0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZTemU0WnM3ZlJjYlRLclFOYlV5bUZUVGJjSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 MjdGMy83NzlGNkU5MjgzRjgxMUVDODE2QjAzNjdDNEY5QUUwMi9GU3plNFpzN2ZS Y2JUS3JRTmJVeW1GVFRiY0kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA24ugeMI2jaONjd4cphQ5A6MKvkM7pvXFm+B4YFtuFBcU8gaNrlNIo +nMMPQwnhMQVbG0DffepDL18auaPrDPXkUarbpgTt3zzOQq6gSOSCID39fAm4SbK k5BixAHNrEIJPcb1f5E/2fTRhvlLby/+hRGq3y1LUgZ9xzFoZVl81xLtbKgVapqT a7pGNmq80Y5bjrt8UGAVjsxGggRvlAV9PiCFsY4YTUI+FGPt6TbwpXqG+ATjE5OK UaZyOvCwhGMj9xp2ZCCp2XgkMYXnR2V/kQ15XauuIwQJatRodudkZpfKCfbS5rU5 TCB9n1LlDwqeUwOxiHa8de6HpyafJGVL -----END CERTIFICATE-----Generated at Wed Nov 5 19:32:31 2025 by rpki-client