$ rpki-client -vvf rpki.apnic.net/member_repository/A91757CB/4ED212DCF2F811EEA3506738C4F9AE02/FzXLqe4W_oXz0oP6W7lHnZryzIY.mft File: FzXLqe4W_oXz0oP6W7lHnZryzIY.mft (raw, json) Hash identifier: fIoR94GjPW7tCbPehXAD1BxUZmU/TngfVi9Y3AUY9EY= Subject key identifier: 0F:DB:07:7B:F0:FC:B7:A0:19:D6:61:30:D5:AE:8A:12:D6:22:00:F8 Authority key identifier: 17:35:CB:A9:EE:16:FE:85:F3:D2:83:FA:5B:B9:47:9D:9A:F2:CC:86 Certificate issuer: /CN=A91757CB/serialNumber=1735CBA9EE16FE85F3D283FA5BB9479D9AF2CC86 Certificate serial: 0125 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FzXLqe4W_oXz0oP6W7lHnZryzIY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91757CB/4ED212DCF2F811EEA3506738C4F9AE02/FzXLqe4W_oXz0oP6W7lHnZryzIY.mft Manifest number: 0125 Signing time: Mon 03 Nov 2025 04:39:14 +0000 Manifest this update: Mon 03 Nov 2025 04:39:13 +0000 Manifest next update: Mon 10 Nov 2025 04:39:13 +0000 Files and hashes: 1: FzXLqe4W_oXz0oP6W7lHnZryzIY.crl (hash: Si3mWbcEg4aDW3JEpfvD2O+/4ZKjcqnX0J64hrFGI6E=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91757CB/4ED212DCF2F811EEA3506738C4F9AE02/FzXLqe4W_oXz0oP6W7lHnZryzIY.crl rsync://rpki.apnic.net/member_repository/A91757CB/4ED212DCF2F811EEA3506738C4F9AE02/FzXLqe4W_oXz0oP6W7lHnZryzIY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FzXLqe4W_oXz0oP6W7lHnZryzIY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 04:39:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 293 (0x125) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91757CB, serialNumber=1735CBA9EE16FE85F3D283FA5BB9479D9AF2CC86 Validity Not Before: Nov 3 04:39:13 2025 GMT Not After : Nov 10 04:39:13 2025 GMT Subject: CN=690831f2-757c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:6a:9d:df:f3:d2:86:c4:50:7c:12:00:46:11: da:cc:59:2a:43:72:39:46:27:7b:26:cd:95:79:55: 91:93:9b:52:55:e9:8e:b6:cf:6b:6c:9c:b5:de:da: e5:82:2c:0d:0a:6e:38:76:e9:96:a6:41:3a:74:bb: fe:03:08:65:0c:ac:81:a5:1f:30:24:ad:71:c0:0f: 07:f5:15:33:4e:dd:a7:b7:49:e6:9b:3b:59:13:d5: e6:b3:09:3d:90:e2:7e:87:d9:47:a3:64:59:5c:27: 3d:4f:55:4a:5d:84:6f:e2:56:f6:af:79:53:59:9c: 27:fc:f1:6d:06:14:a6:cb:35:fa:85:44:8e:92:9e: a3:cc:6a:6b:fc:bf:dc:99:3e:36:f7:89:20:ef:d4: 76:fe:89:3e:fc:80:37:6e:c5:a6:26:93:0f:27:9d: e4:e0:60:e6:63:31:0b:d4:bc:95:db:a5:a2:c0:47: 13:b1:e1:3a:1a:5a:d5:85:de:cb:18:f0:4d:f4:e3: de:5e:e2:50:9b:99:3e:12:c7:9f:49:34:64:1e:75: 40:5e:56:0c:c0:c0:ab:fc:14:35:4e:83:03:d5:ed: ab:af:fd:f0:0e:31:51:08:c1:40:e1:c2:22:48:35: 85:9e:f8:f3:97:82:c1:2a:82:78:bb:03:b7:37:da: 86:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:DB:07:7B:F0:FC:B7:A0:19:D6:61:30:D5:AE:8A:12:D6:22:00:F8 X509v3 Authority Key Identifier: keyid:17:35:CB:A9:EE:16:FE:85:F3:D2:83:FA:5B:B9:47:9D:9A:F2:CC:86 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91757CB/4ED212DCF2F811EEA3506738C4F9AE02/FzXLqe4W_oXz0oP6W7lHnZryzIY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FzXLqe4W_oXz0oP6W7lHnZryzIY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91757CB/4ED212DCF2F811EEA3506738C4F9AE02/FzXLqe4W_oXz0oP6W7lHnZryzIY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption d3:43:9e:7a:a3:05:ac:c2:5d:93:da:c3:2b:5a:57:67:f8:94: b1:db:20:68:b0:77:7b:69:eb:d8:4e:93:e4:5a:f5:8b:ee:b0: 57:31:f9:90:b4:78:88:0b:55:6d:f6:2a:da:2a:1c:b4:29:9c: 82:60:ff:3e:bc:73:a6:cf:29:36:b8:be:af:44:bc:ac:58:af: 4c:dd:d7:bd:30:5e:c5:ef:03:03:77:38:cb:01:17:11:7c:cf: c7:cc:13:e6:60:18:b9:5f:21:90:3b:6f:c4:a7:b1:b8:03:82: 2a:a6:42:f8:42:f1:d8:6c:36:78:43:1b:56:fa:b8:3e:57:54: 0e:0c:c8:da:e8:f4:65:e3:c1:30:34:f8:d9:70:3a:ee:02:17: a8:63:0d:8b:a7:b8:bd:de:19:15:70:0f:34:57:13:62:4c:0c: 27:02:06:9f:d0:11:34:96:2a:fc:df:84:9d:cd:db:b9:40:aa: 16:ee:e9:06:ec:ba:01:e3:c5:41:d3:34:db:61:2a:19:45:88: 81:1d:f5:a6:cf:8d:15:76:a7:8c:af:16:3d:02:9d:b3:97:69: 4a:07:0a:49:ec:70:c5:ac:d0:4a:d8:fe:86:d3:e8:64:aa:bb: 96:c8:3e:8a:e6:cf:7e:f3:6e:7e:a7:1f:c7:72:f4:63:1d:1f: 98:26:a8:10 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICASUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzU3Q0IxMTAvBgNVBAUTKDE3MzVDQkE5RUUxNkZFODVGM0QyODNGQTVCQjk0NzlE OUFGMkNDODYwHhcNMjUxMTAzMDQzOTEzWhcNMjUxMTEwMDQzOTEzWjAYMRYwFAYD VQQDEw02OTA4MzFmMi03NTdjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzGqd3/PShsRQfBIARhHazFkqQ3I5Rid7Js2VeVWRk5tSVemOts9rbJy13trl giwNCm44dumWpkE6dLv+AwhlDKyBpR8wJK1xwA8H9RUzTt2nt0nmmztZE9Xmswk9 kOJ+h9lHo2RZXCc9T1VKXYRv4lb2r3lTWZwn/PFtBhSmyzX6hUSOkp6jzGpr/L/c mT4294kg79R2/ok+/IA3bsWmJpMPJ53k4GDmYzEL1LyV26WiwEcTseE6GlrVhd7L GPBN9OPeXuJQm5k+EsefSTRkHnVAXlYMwMCr/BQ1ToMD1e2rr/3wDjFRCMFA4cIi SDWFnvjzl4LBKoJ4uwO3N9qGvQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFA/bB3vw /LegGdZhMNWuihLWIgD4MB8GA1UdIwQYMBaAFBc1y6nuFv6F89KD+lu5R52a8syG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NTdDQi80RUQyMTJEQ0Yy RjgxMUVFQTM1MDY3MzhDNEY5QUUwMi9GelhMcWU0V19vWHowb1A2VzdsSG5acnl6 SVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0Z6WExxZTRXX29YejBvUDZXN2xIblpyeXpJWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NTdDQi80RUQyMTJEQ0YyRjgxMUVFQTM1MDY3MzhDNEY5QUUwMi9GelhMcWU0V19v WHowb1A2VzdsSG5acnl6SVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDTQ556owWswl2T2sMrWldn+JSx2yBosHd7aevYTpPkWvWL7rBXMfmQ tHiIC1Vt9iraKhy0KZyCYP8+vHOmzyk2uL6vRLysWK9M3de9MF7F7wMDdzjLARcR fM/HzBPmYBi5XyGQO2/Ep7G4A4IqpkL4QvHYbDZ4QxtW+rg+V1QODMja6PRl48Ew NPjZcDruAheoYw2Lp7i93hkVcA80VxNiTAwnAgaf0BE0lir834Sdzdu5QKoW7ukG 7LoB48VB0zTbYSoZRYiBHfWmz40VdqeMrxY9Ap2zl2lKBwpJ7HDFrNBK2P6G0+hk qruWyD6K5s9+825+px/HcvRjHR+YJqgQ -----END CERTIFICATE-----Generated at Mon Nov 3 18:14:39 2025 by rpki-client