$ rpki-client -vvf rpki.apnic.net/member_repository/A91706E4/32E993C0A68411EF8F5ED37FC4F9AE02/F2vOFchi1HunYKH2ZTj4HVxJO4E.mft File: F2vOFchi1HunYKH2ZTj4HVxJO4E.mft (raw, json) Hash identifier: rLrEW7P7DPWBcXMuHKw5/FJ2+f9rSKYBqD6DCqpC3wY= Subject key identifier: C6:41:7C:17:55:89:55:EE:86:CC:4B:E4:F8:A5:49:15:EA:42:96:EA Authority key identifier: 17:6B:CE:15:C8:62:D4:7B:A7:60:A1:F6:65:38:F8:1D:5C:49:3B:81 Certificate issuer: /CN=A91706E4/serialNumber=176BCE15C862D47BA760A1F66538F81D5C493B81 Certificate serial: AE Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/F2vOFchi1HunYKH2ZTj4HVxJO4E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91706E4/32E993C0A68411EF8F5ED37FC4F9AE02/F2vOFchi1HunYKH2ZTj4HVxJO4E.mft Manifest number: AD Signing time: Sat 25 Oct 2025 09:56:00 +0000 Manifest this update: Sat 25 Oct 2025 09:55:59 +0000 Manifest next update: Sat 01 Nov 2025 09:55:59 +0000 Files and hashes: 1: F2vOFchi1HunYKH2ZTj4HVxJO4E.crl (hash: /gsbc886sa8/K3eeKwIHxk52zT+KhWDtz/ZhuRW3kNA=) 2: 2CE10886A68511EFB0CF9981C4F9AE02.roa (hash: veK+ihHT7rgGehPtR5m7GK/hbNWI81sjRNiKcGQwWGg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91706E4/32E993C0A68411EF8F5ED37FC4F9AE02/F2vOFchi1HunYKH2ZTj4HVxJO4E.crl rsync://rpki.apnic.net/member_repository/A91706E4/32E993C0A68411EF8F5ED37FC4F9AE02/F2vOFchi1HunYKH2ZTj4HVxJO4E.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/F2vOFchi1HunYKH2ZTj4HVxJO4E.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 01 Nov 2025 09:55:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 174 (0xae) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91706E4, serialNumber=176BCE15C862D47BA760A1F66538F81D5C493B81 Validity Not Before: Oct 25 09:55:59 2025 GMT Not After : Nov 1 09:55:59 2025 GMT Subject: CN=68fc9eb0-9170 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:92:cf:98:3b:f1:c0:a4:2b:1f:ee:45:1d:29: 74:5e:6d:aa:dd:7d:3c:e1:fc:96:73:ed:32:a7:e6: 4d:99:3c:16:22:be:25:da:b2:11:60:6d:88:24:6b: 5f:22:61:44:63:97:42:e3:0c:27:f7:64:08:81:9b: d1:a5:05:07:7d:19:96:e9:9b:87:1f:d0:04:8e:47: a6:0e:96:40:3b:7d:e5:43:b5:1c:ef:12:06:af:67: 35:c4:b1:f7:9d:24:28:b0:c2:21:6a:bc:64:57:f5: 99:60:1d:83:19:6b:1a:87:ae:29:41:94:52:61:6c: 3e:dc:34:3d:a3:df:6c:bc:75:29:3f:fa:8e:dc:48: cc:e9:72:b3:96:b4:6e:c9:86:3b:7f:df:56:da:90: b2:45:b0:17:e3:ed:6d:f8:76:2d:f3:20:37:96:d3: 2e:4c:bd:d5:c3:70:ac:c7:5a:ae:a4:05:c7:44:60: 12:94:8c:5a:98:da:97:9d:e7:10:6a:42:37:b9:81: 02:fb:8f:89:c3:d2:62:01:ff:62:5a:3f:da:92:db: 17:59:94:7d:3a:91:6f:8f:03:35:53:2f:68:90:1c: 65:17:ff:40:5d:5a:bb:69:9b:07:1f:2c:26:6d:bc: f3:99:8f:44:d6:f1:7b:66:85:05:59:73:4b:10:66: 82:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:41:7C:17:55:89:55:EE:86:CC:4B:E4:F8:A5:49:15:EA:42:96:EA X509v3 Authority Key Identifier: keyid:17:6B:CE:15:C8:62:D4:7B:A7:60:A1:F6:65:38:F8:1D:5C:49:3B:81 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91706E4/32E993C0A68411EF8F5ED37FC4F9AE02/F2vOFchi1HunYKH2ZTj4HVxJO4E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/F2vOFchi1HunYKH2ZTj4HVxJO4E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91706E4/32E993C0A68411EF8F5ED37FC4F9AE02/F2vOFchi1HunYKH2ZTj4HVxJO4E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b4:d9:db:fb:e1:f2:ea:4f:74:62:5e:13:d6:70:d9:7a:8f:b1: bf:c7:ad:23:a8:89:87:89:6c:4f:99:be:2c:26:d1:3a:3c:a4: 2f:7c:40:af:04:70:6b:d6:1d:3f:e0:c8:83:95:88:8f:ff:c5: 55:da:86:dc:3b:1c:61:a8:09:87:b9:2d:42:77:b9:2d:0e:7b: b6:dc:42:70:68:66:72:45:6a:e5:60:79:4b:12:cf:74:49:77: 26:33:99:cc:27:b3:e0:fa:e8:dc:8a:fc:2c:84:e8:ad:cf:75: 3e:dc:bc:16:bf:af:22:4a:fb:0a:71:31:68:75:dd:07:c5:7c: c4:73:d9:00:75:85:6c:d8:6a:99:a9:ff:89:06:7d:59:db:51: c1:15:d6:54:36:2d:6f:16:24:be:78:d8:0c:7b:c4:50:57:3a: 31:57:50:62:b0:6c:5a:65:67:cd:28:16:27:91:e4:c3:6d:7a: 2f:aa:e3:27:57:88:28:96:75:bd:47:26:8a:4f:a9:5c:b7:cf: f0:29:71:e3:83:fa:19:9f:29:8a:82:73:e5:44:87:89:82:eb: 1f:4c:da:1f:db:c6:9a:2b:6e:d3:d2:d4:1d:d3:f4:71:54:56: 46:48:49:ec:f2:af:6b:1d:f8:e9:f0:f1:1a:7a:2a:5a:d0:57: e8:48:be:a7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAK4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzA2RTQxMTAvBgNVBAUTKDE3NkJDRTE1Qzg2MkQ0N0JBNzYwQTFGNjY1MzhGODFE NUM0OTNCODEwHhcNMjUxMDI1MDk1NTU5WhcNMjUxMTAxMDk1NTU5WjAYMRYwFAYD VQQDEw02OGZjOWViMC05MTcwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvJLPmDvxwKQrH+5FHSl0Xm2q3X084fyWc+0yp+ZNmTwWIr4l2rIRYG2IJGtf ImFEY5dC4wwn92QIgZvRpQUHfRmW6ZuHH9AEjkemDpZAO33lQ7Uc7xIGr2c1xLH3 nSQosMIharxkV/WZYB2DGWsah64pQZRSYWw+3DQ9o99svHUpP/qO3EjM6XKzlrRu yYY7f99W2pCyRbAX4+1t+HYt8yA3ltMuTL3Vw3Csx1qupAXHRGASlIxamNqXnecQ akI3uYEC+4+Jw9JiAf9iWj/aktsXWZR9OpFvjwM1Uy9okBxlF/9AXVq7aZsHHywm bbzzmY9E1vF7ZoUFWXNLEGaCPQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMZBfBdV iVXuhsxL5PilSRXqQpbqMB8GA1UdIwQYMBaAFBdrzhXIYtR7p2Ch9mU4+B1cSTuB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MDZFNC8zMkU5OTNDMEE2 ODQxMUVGOEY1RUQzN0ZDNEY5QUUwMi9GMnZPRmNoaTFIdW5ZS0gyWlRqNEhWeEpP NEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0Yydk9GY2hpMUh1bllLSDJaVGo0SFZ4Sk80RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MDZFNC8zMkU5OTNDMEE2ODQxMUVGOEY1RUQzN0ZDNEY5QUUwMi9GMnZPRmNoaTFI dW5ZS0gyWlRqNEhWeEpPNEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC02dv74fLqT3RiXhPWcNl6j7G/x60jqImHiWxPmb4sJtE6PKQvfECv BHBr1h0/4MiDlYiP/8VV2obcOxxhqAmHuS1Cd7ktDnu23EJwaGZyRWrlYHlLEs90 SXcmM5nMJ7Pg+ujcivwshOitz3U+3LwWv68iSvsKcTFodd0HxXzEc9kAdYVs2GqZ qf+JBn1Z21HBFdZUNi1vFiS+eNgMe8RQVzoxV1BisGxaZWfNKBYnkeTDbXovquMn V4golnW9RyaKT6lct8/wKXHjg/oZnymKgnPlRIeJgusfTNof28aaK27T0tQd0/Rx VFZGSEns8q9rHfjp8PEaeipa0FfoSL6n -----END CERTIFICATE-----Generated at Sun Oct 26 02:59:06 2025 by rpki-client