$ rpki-client -vvf rpki.apnic.net/member_repository/A91798AD/70EFB4ACFE2A11E68F2C5A13C4F9AE02/fBoPSOpDIx-jND1ZKCHvKejSsxs.mft File: fBoPSOpDIx-jND1ZKCHvKejSsxs.mft (raw, json) Hash identifier: Q4BypwF1v3asUwlylTyzgpELTjxD3zGKegj4wGaqUEA= Subject key identifier: D7:AB:0F:19:B6:0D:C3:64:31:99:29:CE:C1:65:BF:33:F8:37:CF:94 Authority key identifier: 7C:1A:0F:48:EA:43:23:1F:A3:34:3D:59:28:21:EF:29:E8:D2:B3:1B Certificate issuer: /CN=A91798AD/serialNumber=7C1A0F48EA43231FA3343D592821EF29E8D2B31B Certificate serial: 1CB1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fBoPSOpDIx-jND1ZKCHvKejSsxs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91798AD/70EFB4ACFE2A11E68F2C5A13C4F9AE02/fBoPSOpDIx-jND1ZKCHvKejSsxs.mft Manifest number: 1C5C Signing time: Wed 22 Oct 2025 16:29:55 +0000 Manifest this update: Wed 22 Oct 2025 16:29:55 +0000 Manifest next update: Wed 29 Oct 2025 16:29:55 +0000 Files and hashes: 1: fBoPSOpDIx-jND1ZKCHvKejSsxs.crl (hash: ed2fFTa5CWAGNCj3S3F9d0cY71IzEfevrjdCZJeS8Nw=) 2: AD3B2582EF9A11EDA4E50366C4F9AE02.roa (hash: jFhmcGLcWRMJb2NQjPMrP9b0nQzmycMaQ535WZNL3p0=) 3: 98E30C12DCE411EDB446D65DC4F9AE02.roa (hash: uUULoxpQYQYmKQJvZhToS8NEpAyyIoYOFguK8s9wAW0=) 4: 398B3186FE5111E6BCEC6E72C4F9AE02.roa (hash: T9+Dc0WSoJhtGdsfkrH1jqSLtL2q8TNFDLOAk1Ci3QY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91798AD/70EFB4ACFE2A11E68F2C5A13C4F9AE02/fBoPSOpDIx-jND1ZKCHvKejSsxs.crl rsync://rpki.apnic.net/member_repository/A91798AD/70EFB4ACFE2A11E68F2C5A13C4F9AE02/fBoPSOpDIx-jND1ZKCHvKejSsxs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fBoPSOpDIx-jND1ZKCHvKejSsxs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Oct 2025 16:29:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7345 (0x1cb1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91798AD, serialNumber=7C1A0F48EA43231FA3343D592821EF29E8D2B31B Validity Not Before: Oct 22 16:29:55 2025 GMT Not After : Oct 29 16:29:55 2025 GMT Subject: CN=68f90683-927d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:fe:d2:f3:84:50:ca:cf:2b:28:8d:f3:60:73: 6f:a9:1d:c4:c8:53:20:d5:78:f9:17:f1:10:8d:42: ff:30:68:3b:8d:5f:a8:43:60:04:6b:3b:aa:66:34: cd:7f:32:3b:2c:04:0f:1e:f6:98:47:6f:79:41:f5: 74:d6:9f:79:b6:26:d5:3c:93:d1:5b:d3:78:dc:34: d4:45:ba:6a:07:12:cd:d0:87:60:c4:df:e8:d3:c4: f9:af:71:3b:9e:39:23:39:68:92:de:61:2f:6d:42: 4f:7a:03:a0:09:e3:31:b4:44:98:ea:c1:46:9c:7f: 9a:86:ed:b8:1f:4b:f7:07:11:8b:6d:9c:0a:51:36: 53:c7:51:63:ce:49:8a:f0:b6:8f:c1:4d:72:5d:82: d3:0f:48:f3:5c:8a:71:60:54:e3:b2:a0:d4:c6:7f: cd:7b:09:27:06:6d:39:58:dd:69:7c:0a:6e:ed:26: 2e:93:d4:21:d5:5a:98:19:d0:28:43:c0:61:f5:39: 54:ac:ec:cc:46:0d:b1:c7:68:6f:fd:77:c1:d4:76: 0f:be:17:45:ab:27:9e:b9:0c:db:2d:d2:5e:ad:ac: cb:b7:b8:64:36:04:7b:80:10:02:a1:ab:5c:90:a9: 19:a8:2f:a2:21:e8:06:c1:43:86:f6:64:60:8e:d8: db:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:AB:0F:19:B6:0D:C3:64:31:99:29:CE:C1:65:BF:33:F8:37:CF:94 X509v3 Authority Key Identifier: keyid:7C:1A:0F:48:EA:43:23:1F:A3:34:3D:59:28:21:EF:29:E8:D2:B3:1B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91798AD/70EFB4ACFE2A11E68F2C5A13C4F9AE02/fBoPSOpDIx-jND1ZKCHvKejSsxs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fBoPSOpDIx-jND1ZKCHvKejSsxs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91798AD/70EFB4ACFE2A11E68F2C5A13C4F9AE02/fBoPSOpDIx-jND1ZKCHvKejSsxs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 52:76:c8:46:e6:13:98:cd:be:af:9e:13:24:07:70:53:67:86: dd:27:5f:d4:70:9a:7c:3d:85:b0:15:56:77:0d:c4:b4:43:68: 98:d2:ed:86:7c:84:49:0a:79:60:f2:5c:e9:58:bc:bc:3a:8b: a8:e4:c4:48:29:eb:51:5b:38:4c:db:62:8f:9c:4d:32:03:59: 96:3e:ac:5a:bc:99:88:78:72:a2:f3:56:33:cc:71:40:79:b6: 57:d2:86:29:23:98:2c:85:6c:17:36:a9:92:55:f4:68:98:20: a2:27:91:91:37:4d:75:6d:e7:96:03:d6:8b:1f:44:1d:0d:85: e1:b3:60:a6:b5:14:06:d2:84:8b:ac:bf:35:0e:4e:ae:00:a6: a8:cf:54:6c:ef:d7:6f:3d:4f:06:2f:25:0a:d3:70:d9:f9:38: 23:9f:19:d7:23:19:21:9c:db:b6:36:e6:70:5b:f1:b8:3d:1f: 1d:c1:59:37:fd:a0:1a:93:91:4c:da:3e:e1:7d:7a:08:2d:fe: 89:2f:0d:6d:54:23:98:ae:b9:80:3b:11:c2:ac:f2:80:0d:6c: 40:aa:38:5d:9a:a1:19:7a:fa:3a:6d:68:7b:e4:d2:ef:4a:0d: f2:a3:91:ec:ea:4a:bd:68:b4:42:74:47:20:78:b7:0d:a6:09: 9c:0b:f4:3a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICHLEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Nzk4QUQxMTAvBgNVBAUTKDdDMUEwRjQ4RUE0MzIzMUZBMzM0M0Q1OTI4MjFFRjI5 RThEMkIzMUIwHhcNMjUxMDIyMTYyOTU1WhcNMjUxMDI5MTYyOTU1WjAYMRYwFAYD VQQDEw02OGY5MDY4My05MjdkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoP7S84RQys8rKI3zYHNvqR3EyFMg1Xj5F/EQjUL/MGg7jV+oQ2AEazuqZjTN fzI7LAQPHvaYR295QfV01p95tibVPJPRW9N43DTURbpqBxLN0IdgxN/o08T5r3E7 njkjOWiS3mEvbUJPegOgCeMxtESY6sFGnH+ahu24H0v3BxGLbZwKUTZTx1FjzkmK 8LaPwU1yXYLTD0jzXIpxYFTjsqDUxn/NewknBm05WN1pfApu7SYuk9Qh1VqYGdAo Q8Bh9TlUrOzMRg2xx2hv/XfB1HYPvhdFqyeeuQzbLdJerazLt7hkNgR7gBACoatc kKkZqC+iIegGwUOG9mRgjtjbvwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNerDxm2 DcNkMZkpzsFlvzP4N8+UMB8GA1UdIwQYMBaAFHwaD0jqQyMfozQ9WSgh7yno0rMb MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3OThBRC83MEVGQjRBQ0ZF MkExMUU2OEYyQzVBMTNDNEY5QUUwMi9mQm9QU09wREl4LWpORDFaS0NIdktlalNz eHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ZCb1BTT3BESXgtak5EMVpLQ0h2S2VqU3N4cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 OThBRC83MEVGQjRBQ0ZFMkExMUU2OEYyQzVBMTNDNEY5QUUwMi9mQm9QU09wREl4 LWpORDFaS0NIdktlalNzeHMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBSdshG5hOYzb6vnhMkB3BTZ4bdJ1/UcJp8PYWwFVZ3DcS0Q2iY0u2G fIRJCnlg8lzpWLy8Oouo5MRIKetRWzhM22KPnE0yA1mWPqxavJmIeHKi81YzzHFA ebZX0oYpI5gshWwXNqmSVfRomCCiJ5GRN011beeWA9aLH0QdDYXhs2CmtRQG0oSL rL81Dk6uAKaoz1Rs79dvPU8GLyUK03DZ+TgjnxnXIxkhnNu2NuZwW/G4PR8dwVk3 /aAak5FM2j7hfXoILf6JLw1tVCOYrrmAOxHCrPKADWxAqjhdmqEZevo6bWh75NLv Sg3yo5Hs6kq9aLRCdEcgeLcNpgmcC/Q6 -----END CERTIFICATE-----Generated at Thu Oct 23 02:09:46 2025 by rpki-client