$ rpki-client -vvf rpki.apnic.net/member_repository/A917270F/DC5E74CA08E811EDB9E1B633C4F9AE02/fkTc6XLxPIDlNLLmhf4dKg12FRI.mft File: fkTc6XLxPIDlNLLmhf4dKg12FRI.mft (raw, json) Hash identifier: hEQVs/dkXc4eeQT1T6j4TtOFKF6IfPis8Q47Sixp+bo= Subject key identifier: 5D:F0:D8:21:E5:9E:A0:55:23:9D:50:4C:59:DF:A2:D8:A6:45:7B:32 Authority key identifier: 7E:44:DC:E9:72:F1:3C:80:E5:34:B2:E6:85:FE:1D:2A:0D:76:15:12 Certificate issuer: /CN=A917270F/serialNumber=7E44DCE972F13C80E534B2E685FE1D2A0D761512 Certificate serial: 031D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fkTc6XLxPIDlNLLmhf4dKg12FRI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917270F/DC5E74CA08E811EDB9E1B633C4F9AE02/fkTc6XLxPIDlNLLmhf4dKg12FRI.mft Manifest number: 02FA Signing time: Mon 03 Nov 2025 01:18:31 +0000 Manifest this update: Mon 03 Nov 2025 01:18:30 +0000 Manifest next update: Mon 10 Nov 2025 01:18:30 +0000 Files and hashes: 1: fkTc6XLxPIDlNLLmhf4dKg12FRI.crl (hash: 0aMZhtGJjGuuVC+EBglnQrj63Q18yWyhllBE5X4n1eo=) 2: D08FF4F0BB7111EFACA16B1DC4F9AE02.roa (hash: i91dJKVTb6GLG1R30/IzaT1OTBlo0JQsHaeOVz47T3o=) 3: 03D6E39A824C11F0B2CA540FC4F9AE02.roa (hash: sh0P7r2XibS/gx2Xt0Uiy2ulD+jkzyj/uW0sx5+8aeU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917270F/DC5E74CA08E811EDB9E1B633C4F9AE02/fkTc6XLxPIDlNLLmhf4dKg12FRI.crl rsync://rpki.apnic.net/member_repository/A917270F/DC5E74CA08E811EDB9E1B633C4F9AE02/fkTc6XLxPIDlNLLmhf4dKg12FRI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fkTc6XLxPIDlNLLmhf4dKg12FRI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 01:18:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 797 (0x31d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917270F, serialNumber=7E44DCE972F13C80E534B2E685FE1D2A0D761512 Validity Not Before: Nov 3 01:18:30 2025 GMT Not After : Nov 10 01:18:30 2025 GMT Subject: CN=690802e6-94ba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:24:e8:31:dc:1b:72:c3:55:02:fa:2e:96:a2: 3f:f2:b9:33:53:63:93:91:d9:f2:96:db:bb:20:7f: e9:46:37:c9:98:af:ce:d7:5e:41:74:36:6a:87:a8: 96:4e:8b:e7:b7:fb:c7:5c:9b:07:0e:e6:32:3c:af: 44:4a:a2:ac:a8:11:e1:86:42:d1:1d:77:eb:87:2e: 54:7c:e4:d4:2d:75:d1:d4:bc:aa:e4:2d:49:62:0e: cf:22:b3:54:8c:46:81:7c:a7:a9:ac:01:c7:54:78: 6d:bd:47:0e:df:ef:1c:a5:93:5b:51:65:4e:d1:cc: 1e:d5:93:c4:8a:fd:47:14:aa:c9:42:25:1d:03:c2: 4a:5c:b2:df:36:cb:27:a0:d6:5e:63:06:75:cc:3c: 66:87:71:3c:d6:84:c7:9d:3f:f9:56:78:ad:17:8d: 8c:42:c9:ad:57:ae:81:84:3c:40:a5:c4:bc:53:2c: bc:de:c2:12:e0:fd:a2:1a:22:5f:18:9b:26:50:12: 1b:f4:aa:da:c9:82:0d:30:30:cb:fa:c5:b1:4d:aa: 98:90:ea:79:55:71:a2:17:3c:c9:d2:26:8b:a8:d2: ae:32:3f:6f:4b:10:84:6a:26:19:6d:84:1f:c1:1d: 10:9d:32:12:1e:0b:d6:b2:38:a8:af:4f:d2:f9:4e: ca:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:F0:D8:21:E5:9E:A0:55:23:9D:50:4C:59:DF:A2:D8:A6:45:7B:32 X509v3 Authority Key Identifier: keyid:7E:44:DC:E9:72:F1:3C:80:E5:34:B2:E6:85:FE:1D:2A:0D:76:15:12 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917270F/DC5E74CA08E811EDB9E1B633C4F9AE02/fkTc6XLxPIDlNLLmhf4dKg12FRI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fkTc6XLxPIDlNLLmhf4dKg12FRI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917270F/DC5E74CA08E811EDB9E1B633C4F9AE02/fkTc6XLxPIDlNLLmhf4dKg12FRI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption db:b0:56:db:f5:ee:4a:ff:c5:06:fd:27:ff:97:df:c5:38:01: 35:52:b0:4a:35:3d:b5:57:da:96:90:31:f7:42:f5:42:12:95: df:28:91:df:4c:df:38:11:44:97:65:51:2c:75:61:ec:c9:41: 4a:0b:8f:bf:10:de:4b:8b:b0:c3:c0:c0:af:b8:d3:9e:55:7b: 37:b2:85:52:79:8c:58:9f:e2:88:94:4c:8a:1d:8c:17:af:db: e5:8f:e1:a9:22:93:89:18:21:27:db:fd:5b:c8:b4:71:5f:a6: cc:46:80:a9:7e:6f:80:e8:ae:b3:ee:46:6f:1e:93:cb:21:54: f9:38:96:4f:9b:21:25:f9:f1:1d:98:1e:a3:35:12:48:eb:c1: 95:08:42:ef:3d:40:d5:c8:ba:83:b5:d3:c8:db:8c:a5:a2:a2: 99:90:c3:2f:dd:8a:bc:27:1b:a9:82:d2:84:18:8b:bf:0c:7d: ac:99:43:56:a6:22:28:cc:cc:f0:3a:01:ce:67:1d:b7:34:d1: 16:a1:2f:3a:66:80:e9:68:55:3d:a2:67:95:d5:5d:81:03:6f: 7e:45:c2:9f:92:22:53:cc:02:a9:27:cf:e2:74:c1:64:1c:48: 63:1f:b7:93:c4:6b:75:1d:d6:91:49:6d:3a:5c:3a:7d:8e:03: 1b:88:ee:44 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAx0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzI3MEYxMTAvBgNVBAUTKDdFNDREQ0U5NzJGMTNDODBFNTM0QjJFNjg1RkUxRDJB MEQ3NjE1MTIwHhcNMjUxMTAzMDExODMwWhcNMjUxMTEwMDExODMwWjAYMRYwFAYD VQQDEw02OTA4MDJlNi05NGJhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2iToMdwbcsNVAvoulqI/8rkzU2OTkdnyltu7IH/pRjfJmK/O115BdDZqh6iW Tovnt/vHXJsHDuYyPK9ESqKsqBHhhkLRHXfrhy5UfOTULXXR1Lyq5C1JYg7PIrNU jEaBfKeprAHHVHhtvUcO3+8cpZNbUWVO0cwe1ZPEiv1HFKrJQiUdA8JKXLLfNssn oNZeYwZ1zDxmh3E81oTHnT/5VnitF42MQsmtV66BhDxApcS8Uyy83sIS4P2iGiJf GJsmUBIb9KrayYINMDDL+sWxTaqYkOp5VXGiFzzJ0iaLqNKuMj9vSxCEaiYZbYQf wR0QnTISHgvWsjior0/S+U7KYQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFF3w2CHl nqBVI51QTFnfotimRXsyMB8GA1UdIwQYMBaAFH5E3Oly8TyA5TSy5oX+HSoNdhUS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MjcwRi9EQzVFNzRDQTA4 RTgxMUVEQjlFMUI2MzNDNEY5QUUwMi9ma1RjNlhMeFBJRGxOTExtaGY0ZEtnMTJG UkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ZrVGM2WEx4UElEbE5MTG1oZjRkS2cxMkZSSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MjcwRi9EQzVFNzRDQTA4RTgxMUVEQjlFMUI2MzNDNEY5QUUwMi9ma1RjNlhMeFBJ RGxOTExtaGY0ZEtnMTJGUkkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDbsFbb9e5K/8UG/Sf/l9/FOAE1UrBKNT21V9qWkDH3QvVCEpXfKJHf TN84EUSXZVEsdWHsyUFKC4+/EN5Li7DDwMCvuNOeVXs3soVSeYxYn+KIlEyKHYwX r9vlj+GpIpOJGCEn2/1byLRxX6bMRoCpfm+A6K6z7kZvHpPLIVT5OJZPmyEl+fEd mB6jNRJI68GVCELvPUDVyLqDtdPI24yloqKZkMMv3Yq8JxupgtKEGIu/DH2smUNW piIozMzwOgHOZx23NNEWoS86ZoDpaFU9omeV1V2BA29+RcKfkiJTzAKpJ8/idMFk HEhjH7eTxGt1HdaRSW06XDp9jgMbiO5E -----END CERTIFICATE-----Generated at Mon Nov 3 18:07:11 2025 by rpki-client