$ rpki-client -vvf rpki.apnic.net/member_repository/A91645D3/7620BC0C0C2011EB8AE6394DC4F9AE02/fcUQye6vE3-r4XHlViRtskYeJxU.mft File: fcUQye6vE3-r4XHlViRtskYeJxU.mft (raw, json) Hash identifier: Mp7TovomGbjsbgr43IMR0ZP0fShv3HH4LeY3apJ4SMI= Subject key identifier: 73:1C:AF:DB:ED:D6:6B:AD:38:84:75:8F:BE:89:BF:CA:34:81:2D:0F Authority key identifier: 7D:C5:10:C9:EE:AF:13:7F:AB:E1:71:E5:56:24:6D:B2:46:1E:27:15 Certificate issuer: /CN=A91645D3/serialNumber=7DC510C9EEAF137FABE171E556246DB2461E2715 Certificate serial: 07E1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fcUQye6vE3-r4XHlViRtskYeJxU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91645D3/7620BC0C0C2011EB8AE6394DC4F9AE02/fcUQye6vE3-r4XHlViRtskYeJxU.mft Manifest number: 07DA Signing time: Wed 22 Oct 2025 21:58:29 +0000 Manifest this update: Wed 22 Oct 2025 21:58:28 +0000 Manifest next update: Wed 29 Oct 2025 21:58:28 +0000 Files and hashes: 1: fcUQye6vE3-r4XHlViRtskYeJxU.crl (hash: 1thV0MCjGLl/T3232+/bzmvp6r9aw+XjCrlToyhZam0=) 2: 58DAB5900FF311EBB0C3265EC4F9AE02.roa (hash: /rykGvLbUlrN0XXQSSOg6Z/Y2O6GIy4F1RxGecU5aLc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91645D3/7620BC0C0C2011EB8AE6394DC4F9AE02/fcUQye6vE3-r4XHlViRtskYeJxU.crl rsync://rpki.apnic.net/member_repository/A91645D3/7620BC0C0C2011EB8AE6394DC4F9AE02/fcUQye6vE3-r4XHlViRtskYeJxU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fcUQye6vE3-r4XHlViRtskYeJxU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Oct 2025 21:58:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2017 (0x7e1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91645D3, serialNumber=7DC510C9EEAF137FABE171E556246DB2461E2715 Validity Not Before: Oct 22 21:58:28 2025 GMT Not After : Oct 29 21:58:28 2025 GMT Subject: CN=68f95384-c96a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:80:cc:24:94:fc:d3:7e:e7:25:2f:9a:d7:c8: 59:f3:c8:6f:9c:5d:9d:95:06:c3:86:ad:56:0b:d9: 6a:8c:2c:ba:b2:b2:d1:f1:93:e6:2d:ef:24:0d:32: 3d:25:e4:00:6c:7b:27:94:d8:f8:22:8f:d2:07:39: fc:ad:06:c6:cb:00:07:b0:4e:c4:4f:16:a6:0b:40: 9f:5a:d2:62:0e:67:ff:d2:74:66:19:72:41:6e:7a: b0:50:c7:91:2e:72:d8:42:c5:4c:82:a0:4b:79:35: 89:7c:68:09:1b:11:13:4c:45:25:a6:64:e8:3a:1c: 11:ab:81:98:d3:b4:c3:4a:9e:f2:a8:0c:9e:00:bf: cf:06:08:8e:f0:00:f5:12:9f:2c:0b:01:99:9e:2d: b3:31:51:0e:bc:ce:f3:67:b2:ca:90:40:d5:94:3c: 13:dd:9c:b0:a4:12:9d:d3:4d:10:0f:9f:62:3c:6b: 92:5a:1e:11:6b:f2:a9:36:31:e8:e7:25:6b:bf:a2: 00:2b:64:b7:2b:24:dc:7b:d5:4f:a3:ce:0e:86:c5: fa:80:42:d8:bc:b8:65:96:f0:0d:5f:3e:d6:16:a2: 3f:cc:04:3b:3d:cf:ad:41:f8:04:5a:76:68:8c:24: 63:98:e9:78:1f:05:64:b6:cc:d7:c1:dd:11:ac:9b: dd:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:1C:AF:DB:ED:D6:6B:AD:38:84:75:8F:BE:89:BF:CA:34:81:2D:0F X509v3 Authority Key Identifier: keyid:7D:C5:10:C9:EE:AF:13:7F:AB:E1:71:E5:56:24:6D:B2:46:1E:27:15 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91645D3/7620BC0C0C2011EB8AE6394DC4F9AE02/fcUQye6vE3-r4XHlViRtskYeJxU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fcUQye6vE3-r4XHlViRtskYeJxU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91645D3/7620BC0C0C2011EB8AE6394DC4F9AE02/fcUQye6vE3-r4XHlViRtskYeJxU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 79:fb:71:a7:b4:77:bc:96:36:1d:62:40:c2:c3:c2:ff:4e:7e: 3a:39:41:ba:81:22:b2:59:fb:96:16:c2:08:7d:59:ca:dc:d6: e2:fb:28:79:b3:54:b2:28:e7:99:cc:2f:d2:71:a0:c1:0b:60: 4c:0b:02:53:6b:a9:8e:83:80:bf:b0:62:31:b8:98:b4:10:54: 51:60:a1:37:2a:27:d9:99:4e:1a:57:32:61:94:df:7f:a6:40: 0b:85:90:7d:16:f3:16:ff:ed:42:f7:2e:04:c4:dc:32:39:29: 27:f0:01:91:26:7b:45:8a:9f:2d:1f:59:e7:73:c5:c6:e2:eb: a6:8f:fb:31:9d:a5:6c:90:52:72:cd:87:8c:d8:6b:dc:fe:10: a7:39:39:3d:a8:bd:2e:ec:f3:91:36:23:09:fc:70:e0:bf:b7: cb:4d:e7:64:61:1e:0b:fe:57:69:be:4f:50:78:52:90:da:f5: ff:c6:d2:91:e0:9d:84:30:3f:8c:0b:f4:03:5c:0b:96:4a:1e: 72:bd:a8:ee:38:9a:c1:be:bd:b5:a7:d3:de:9a:ea:52:bc:76: c3:6e:ba:77:07:ed:6a:da:27:5f:43:c2:e0:2a:73:8f:56:21: e9:c9:2e:64:a0:9d:5a:d1:0c:93:99:b4:3e:fe:cc:5d:92:68: c5:0a:80:13 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB+EwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjQ1RDMxMTAvBgNVBAUTKDdEQzUxMEM5RUVBRjEzN0ZBQkUxNzFFNTU2MjQ2REIy NDYxRTI3MTUwHhcNMjUxMDIyMjE1ODI4WhcNMjUxMDI5MjE1ODI4WjAYMRYwFAYD VQQDEw02OGY5NTM4NC1jOTZhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAx4DMJJT8037nJS+a18hZ88hvnF2dlQbDhq1WC9lqjCy6srLR8ZPmLe8kDTI9 JeQAbHsnlNj4Io/SBzn8rQbGywAHsE7ETxamC0CfWtJiDmf/0nRmGXJBbnqwUMeR LnLYQsVMgqBLeTWJfGgJGxETTEUlpmToOhwRq4GY07TDSp7yqAyeAL/PBgiO8AD1 Ep8sCwGZni2zMVEOvM7zZ7LKkEDVlDwT3ZywpBKd000QD59iPGuSWh4Ra/KpNjHo 5yVrv6IAK2S3KyTce9VPo84OhsX6gELYvLhllvANXz7WFqI/zAQ7Pc+tQfgEWnZo jCRjmOl4HwVktszXwd0RrJvdMwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHMcr9vt 1mutOIR1j76Jv8o0gS0PMB8GA1UdIwQYMBaAFH3FEMnurxN/q+Fx5VYkbbJGHicV MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NDVEMy83NjIwQkMwQzBD MjAxMUVCOEFFNjM5NERDNEY5QUUwMi9mY1VReWU2dkUzLXI0WEhsVmlSdHNrWWVK eFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ZjVVF5ZTZ2RTMtcjRYSGxWaVJ0c2tZZUp4VS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 NDVEMy83NjIwQkMwQzBDMjAxMUVCOEFFNjM5NERDNEY5QUUwMi9mY1VReWU2dkUz LXI0WEhsVmlSdHNrWWVKeFUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB5+3GntHe8ljYdYkDCw8L/Tn46OUG6gSKyWfuWFsIIfVnK3Nbi+yh5 s1SyKOeZzC/ScaDBC2BMCwJTa6mOg4C/sGIxuJi0EFRRYKE3KifZmU4aVzJhlN9/ pkALhZB9FvMW/+1C9y4ExNwyOSkn8AGRJntFip8tH1nnc8XG4uumj/sxnaVskFJy zYeM2Gvc/hCnOTk9qL0u7PORNiMJ/HDgv7fLTedkYR4L/ldpvk9QeFKQ2vX/xtKR 4J2EMD+MC/QDXAuWSh5yvajuOJrBvr21p9PemupSvHbDbrp3B+1q2idfQ8LgKnOP ViHpyS5koJ1a0QyTmbQ+/sxdkmjFCoAT -----END CERTIFICATE-----Generated at Thu Oct 23 21:50:54 2025 by rpki-client