$ rpki-client -vvf rpki.apnic.net/member_repository/A916892A/0C526DCE5DDF11EF8B583365C4F9AE02/fRcij0ReGEsUhJvkCPvZ2yl7uAE.mft File: fRcij0ReGEsUhJvkCPvZ2yl7uAE.mft (raw, json) Hash identifier: oteiroNuvaUFhNT8bVKcsQ5/vgHmtIQlskdM6S5ol+M= Subject key identifier: BE:9C:1E:CC:95:61:37:5C:B7:C3:E6:83:F0:A5:84:FB:F1:FB:FC:32 Authority key identifier: 7D:17:22:8F:44:5E:18:4B:14:84:9B:E4:08:FB:D9:DB:29:7B:B8:01 Certificate issuer: /CN=A916892A/serialNumber=7D17228F445E184B14849BE408FBD9DB297BB801 Certificate serial: E8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fRcij0ReGEsUhJvkCPvZ2yl7uAE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916892A/0C526DCE5DDF11EF8B583365C4F9AE02/fRcij0ReGEsUhJvkCPvZ2yl7uAE.mft Manifest number: E4 Signing time: Mon 27 Oct 2025 07:39:42 +0000 Manifest this update: Mon 27 Oct 2025 07:39:41 +0000 Manifest next update: Mon 03 Nov 2025 07:39:41 +0000 Files and hashes: 1: fRcij0ReGEsUhJvkCPvZ2yl7uAE.crl (hash: QFcWFN4e7NvqOMwU1K6L5tosWJVBCxtUdbhtS5ZQFvk=) 2: 99DDC906ABCF11F09186B30FC4F9AE02.roa (hash: ERTLamQHXAize+DQS050C0oNyt0XOaqRatFR9EGeJt8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916892A/0C526DCE5DDF11EF8B583365C4F9AE02/fRcij0ReGEsUhJvkCPvZ2yl7uAE.crl rsync://rpki.apnic.net/member_repository/A916892A/0C526DCE5DDF11EF8B583365C4F9AE02/fRcij0ReGEsUhJvkCPvZ2yl7uAE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fRcij0ReGEsUhJvkCPvZ2yl7uAE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Nov 2025 07:39:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 232 (0xe8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916892A, serialNumber=7D17228F445E184B14849BE408FBD9DB297BB801 Validity Not Before: Oct 27 07:39:41 2025 GMT Not After : Nov 3 07:39:41 2025 GMT Subject: CN=68ff21be-fbca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:71:fc:29:96:fd:e4:4e:3a:4b:67:ba:89:d9: 8b:ed:50:bd:7e:bd:5b:5b:6a:94:9c:84:d3:ea:64: 76:b5:11:93:e2:10:85:91:4d:cd:a6:ac:ff:83:03: d3:30:6f:a8:94:d2:44:c0:73:73:20:95:60:02:ee: 83:98:5f:fa:31:cd:95:a6:97:52:78:b4:80:5d:89: 65:64:20:09:30:e1:9b:44:ae:ea:e5:d9:d0:ef:21: 84:1d:f4:f0:d7:79:11:97:46:2c:38:a6:a1:71:dd: 37:f6:c0:31:13:b4:46:05:4d:24:f4:8c:aa:65:ba: e6:11:bd:c8:37:5f:83:ec:1a:f3:32:11:6a:31:b7: ef:89:de:2f:cc:55:a7:31:38:70:d0:2d:75:a3:21: e8:e0:03:6c:e5:62:99:38:74:81:7c:00:85:4e:69: 61:44:1f:68:1e:95:2f:aa:ef:aa:6c:1f:33:e8:70: 4b:16:00:4e:cd:d7:4d:50:bd:06:25:06:9d:77:d4: d8:a3:33:49:47:a6:18:65:0c:b7:f5:4c:8f:8b:ab: 40:5c:e7:15:c0:7b:42:bf:95:eb:3f:6b:b0:1f:f4: 8a:30:55:a4:b2:7d:30:12:59:3e:20:ce:eb:49:4b: d4:04:8f:15:26:7c:38:59:eb:9e:f4:cf:29:70:11: 8c:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:9C:1E:CC:95:61:37:5C:B7:C3:E6:83:F0:A5:84:FB:F1:FB:FC:32 X509v3 Authority Key Identifier: keyid:7D:17:22:8F:44:5E:18:4B:14:84:9B:E4:08:FB:D9:DB:29:7B:B8:01 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916892A/0C526DCE5DDF11EF8B583365C4F9AE02/fRcij0ReGEsUhJvkCPvZ2yl7uAE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fRcij0ReGEsUhJvkCPvZ2yl7uAE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916892A/0C526DCE5DDF11EF8B583365C4F9AE02/fRcij0ReGEsUhJvkCPvZ2yl7uAE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 93:fe:17:8f:5c:4d:ce:4a:91:14:e5:20:c2:a1:f2:10:0b:cd: f0:2a:47:f7:4b:a7:b6:6c:75:d3:ac:22:60:91:58:24:3d:94: 48:4a:7a:95:9f:92:48:85:45:19:16:cb:b4:70:60:88:e5:15: 74:f2:a3:c9:be:25:a5:3b:82:5f:83:72:21:e8:f2:51:68:58: 90:04:03:bc:ac:a8:85:66:a0:8a:a1:af:d1:cb:4e:ff:9b:c2: 73:b0:0f:d5:83:02:d6:cf:f0:08:cb:a3:02:e8:a3:c3:82:80: 35:c9:88:e8:cd:38:ce:e2:98:45:1c:6a:89:c6:9f:fd:f8:45: 92:80:4f:21:c1:74:f6:ae:90:c0:58:96:f4:fa:58:c5:bb:f9: 31:d0:6f:6c:76:c4:4a:39:28:ca:59:97:6c:f9:9d:a7:cc:ee: a6:8a:a0:81:f1:83:ab:7c:6c:b5:12:28:63:1d:09:ad:90:b6: 62:62:cf:64:f9:9a:61:3b:1f:05:28:72:71:e2:29:d9:f8:7b: 97:2a:08:b8:be:12:7b:54:05:07:18:a4:ef:49:2a:b7:84:7f: 5d:ec:60:87:8b:45:ce:7d:c9:fa:33:15:5a:c2:f0:7b:11:67: 1b:b3:46:c6:3e:c4:f2:b0:45:0c:24:04:30:42:fa:84:97:86: ad:14:9d:37 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAOgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Njg5MkExMTAvBgNVBAUTKDdEMTcyMjhGNDQ1RTE4NEIxNDg0OUJFNDA4RkJEOURC Mjk3QkI4MDEwHhcNMjUxMDI3MDczOTQxWhcNMjUxMTAzMDczOTQxWjAYMRYwFAYD VQQDEw02OGZmMjFiZS1mYmNhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxHH8KZb95E46S2e6idmL7VC9fr1bW2qUnITT6mR2tRGT4hCFkU3Npqz/gwPT MG+olNJEwHNzIJVgAu6DmF/6Mc2VppdSeLSAXYllZCAJMOGbRK7q5dnQ7yGEHfTw 13kRl0YsOKahcd039sAxE7RGBU0k9IyqZbrmEb3IN1+D7BrzMhFqMbfvid4vzFWn MThw0C11oyHo4ANs5WKZOHSBfACFTmlhRB9oHpUvqu+qbB8z6HBLFgBOzddNUL0G JQadd9TYozNJR6YYZQy39UyPi6tAXOcVwHtCv5XrP2uwH/SKMFWksn0wElk+IM7r SUvUBI8VJnw4Weue9M8pcBGMKQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFL6cHsyV YTdct8Pmg/ClhPvx+/wyMB8GA1UdIwQYMBaAFH0XIo9EXhhLFISb5Aj72dspe7gB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2ODkyQS8wQzUyNkRDRTVE REYxMUVGOEI1ODMzNjVDNEY5QUUwMi9mUmNpajBSZUdFc1VoSnZrQ1B2WjJ5bDd1 QUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ZSY2lqMFJlR0VzVWhKdmtDUHZaMnlsN3VBRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 ODkyQS8wQzUyNkRDRTVEREYxMUVGOEI1ODMzNjVDNEY5QUUwMi9mUmNpajBSZUdF c1VoSnZrQ1B2WjJ5bDd1QUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCT/hePXE3OSpEU5SDCofIQC83wKkf3S6e2bHXTrCJgkVgkPZRISnqV n5JIhUUZFsu0cGCI5RV08qPJviWlO4Jfg3Ih6PJRaFiQBAO8rKiFZqCKoa/Ry07/ m8JzsA/VgwLWz/AIy6MC6KPDgoA1yYjozTjO4phFHGqJxp/9+EWSgE8hwXT2rpDA WJb0+ljFu/kx0G9sdsRKOSjKWZds+Z2nzO6miqCB8YOrfGy1EihjHQmtkLZiYs9k +ZphOx8FKHJx4inZ+HuXKgi4vhJ7VAUHGKTvSSq3hH9d7GCHi0XOfcn6MxVawvB7 EWcbs0bGPsTysEUMJAQwQvqEl4atFJ03 -----END CERTIFICATE-----Generated at Tue Oct 28 16:05:13 2025 by rpki-client