$ rpki-client -vvf rpki.apnic.net/member_repository/A917EFB8/D980A1721D9511E292150E7E08B02CD2/Fw6cdnZDw8H2BXlAhkij8NqEBFo.mft File: Fw6cdnZDw8H2BXlAhkij8NqEBFo.mft (raw, json) Hash identifier: AMjAhim8coqVu782GRTjgVMNAojcwJkiIeB+HQkkLm0= Subject key identifier: 23:FA:98:54:D8:CB:A5:B5:13:4A:D6:5A:46:5C:6E:09:33:29:43:28 Authority key identifier: 17:0E:9C:76:76:43:C3:C1:F6:05:79:40:86:48:A3:F0:DA:84:04:5A Certificate issuer: /CN=A917EFB8/serialNumber=170E9C767643C3C1F60579408648A3F0DA84045A Certificate serial: 34E0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fw6cdnZDw8H2BXlAhkij8NqEBFo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917EFB8/D980A1721D9511E292150E7E08B02CD2/Fw6cdnZDw8H2BXlAhkij8NqEBFo.mft Manifest number: 34DA Signing time: Sun 02 Nov 2025 14:49:51 +0000 Manifest this update: Sun 02 Nov 2025 14:49:51 +0000 Manifest next update: Sun 09 Nov 2025 14:49:51 +0000 Files and hashes: 1: Fw6cdnZDw8H2BXlAhkij8NqEBFo.crl (hash: yZZoYDuyH0Bmv2dYgUbPi8unrpRw0X3WbuHRs6FdC0U=) 2: E68E0FD4077B11EB98CA5D1CC4F9AE02.roa (hash: uVTYtUHXjzvA/dK6fjacM7pKV07g+NehzxqIMydfuDY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917EFB8/D980A1721D9511E292150E7E08B02CD2/Fw6cdnZDw8H2BXlAhkij8NqEBFo.crl rsync://rpki.apnic.net/member_repository/A917EFB8/D980A1721D9511E292150E7E08B02CD2/Fw6cdnZDw8H2BXlAhkij8NqEBFo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fw6cdnZDw8H2BXlAhkij8NqEBFo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 14:49:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13536 (0x34e0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917EFB8, serialNumber=170E9C767643C3C1F60579408648A3F0DA84045A Validity Not Before: Nov 2 14:49:51 2025 GMT Not After : Nov 9 14:49:51 2025 GMT Subject: CN=69076f8f-bfae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:f1:a7:d1:7c:02:7a:ef:ac:05:84:40:e4:e1: 00:be:cf:93:fa:29:34:dd:26:d6:eb:63:b6:d6:e0: 34:db:71:1e:87:c4:97:a8:82:ba:e5:33:fd:56:8b: c8:af:80:9a:c9:a0:73:d9:d8:a9:f9:55:8e:98:78: ab:dc:87:53:05:00:94:03:30:45:2f:33:df:67:04: 42:aa:ba:1c:0c:0b:47:11:1c:d9:dc:18:02:54:36: 0a:5e:db:03:a1:76:ab:78:f1:f9:93:90:69:fd:76: ba:3b:9c:95:36:fd:80:89:d0:8a:f9:ff:a1:5c:bb: 5c:b9:70:2e:26:d6:a0:0e:57:d8:2b:2c:a5:32:93: 66:20:ab:95:64:29:7f:50:6c:ef:4c:18:98:fe:35: 3a:f3:61:79:d8:b1:0a:c8:05:33:8f:bb:5d:3e:df: bb:8f:eb:d7:6a:6a:99:54:1d:c0:0b:e0:41:bc:e7: 31:f1:5d:86:0d:a1:49:58:15:d9:01:a1:a9:56:ff: e3:9a:b4:26:6e:8d:96:84:64:08:85:de:31:8c:32: 59:ae:c3:da:14:d0:62:fa:d4:b9:d5:b0:18:04:96: 13:2c:cd:ab:fe:f3:a4:d7:86:d5:87:e8:1f:d5:d8: 1a:cd:0a:cd:a6:27:1f:34:07:bf:93:45:6b:ad:46: ca:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:FA:98:54:D8:CB:A5:B5:13:4A:D6:5A:46:5C:6E:09:33:29:43:28 X509v3 Authority Key Identifier: keyid:17:0E:9C:76:76:43:C3:C1:F6:05:79:40:86:48:A3:F0:DA:84:04:5A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917EFB8/D980A1721D9511E292150E7E08B02CD2/Fw6cdnZDw8H2BXlAhkij8NqEBFo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fw6cdnZDw8H2BXlAhkij8NqEBFo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917EFB8/D980A1721D9511E292150E7E08B02CD2/Fw6cdnZDw8H2BXlAhkij8NqEBFo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9f:44:b8:67:d8:65:e5:b3:a7:cb:de:74:81:0e:b5:55:fe:1a: 58:e0:72:80:11:ac:f6:6f:44:aa:10:11:67:b0:ed:6c:4b:b2: 0f:a3:eb:5c:66:03:90:9b:51:d9:bc:fe:17:21:53:f4:f7:83: a7:9d:a5:98:4f:31:32:8f:7f:7b:07:bc:af:e2:cc:c6:f1:0c: 8b:65:a3:82:69:63:bd:57:62:f6:38:e1:68:4e:eb:f9:4e:cd: 30:55:c8:c4:b7:73:d9:fb:c9:82:ca:35:bd:7f:fe:47:03:e9: b6:35:05:ee:c8:98:de:43:0e:cd:a5:c3:19:56:9c:f3:07:c5: 7d:14:58:65:70:18:f1:85:96:8d:c2:45:8c:f8:7e:c3:f4:1b: ee:a8:8e:21:58:d4:a4:6b:3b:10:8c:8c:56:96:d4:59:9d:65: 52:ee:7b:99:ed:a1:d4:eb:5a:00:01:1b:69:77:3e:2a:ee:d1: e8:fe:61:32:37:3f:ba:bd:28:a6:07:9a:0e:70:19:bc:17:f6: dc:1f:e8:6e:09:76:d8:68:67:40:51:9b:8c:3b:5d:88:c7:37: 04:bf:35:e2:65:79:25:0c:10:c5:93:fa:aa:27:fc:d3:18:4b: 9a:b6:53:0d:14:1e:84:2b:6d:ed:92:4c:4a:05:79:bc:fb:69: a3:f8:8b:04 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNOAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0VGQjgxMTAvBgNVBAUTKDE3MEU5Qzc2NzY0M0MzQzFGNjA1Nzk0MDg2NDhBM0Yw REE4NDA0NUEwHhcNMjUxMTAyMTQ0OTUxWhcNMjUxMTA5MTQ0OTUxWjAYMRYwFAYD VQQDEw02OTA3NmY4Zi1iZmFlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtfGn0XwCeu+sBYRA5OEAvs+T+ik03SbW62O21uA023Eeh8SXqIK65TP9VovI r4CayaBz2dip+VWOmHir3IdTBQCUAzBFLzPfZwRCqrocDAtHERzZ3BgCVDYKXtsD oXarePH5k5Bp/Xa6O5yVNv2AidCK+f+hXLtcuXAuJtagDlfYKyylMpNmIKuVZCl/ UGzvTBiY/jU682F52LEKyAUzj7tdPt+7j+vXamqZVB3AC+BBvOcx8V2GDaFJWBXZ AaGpVv/jmrQmbo2WhGQIhd4xjDJZrsPaFNBi+tS51bAYBJYTLM2r/vOk14bVh+gf 1dgazQrNpicfNAe/k0VrrUbKZQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCP6mFTY y6W1E0rWWkZcbgkzKUMoMB8GA1UdIwQYMBaAFBcOnHZ2Q8PB9gV5QIZIo/DahARa MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RUZCOC9EOTgwQTE3MjFE OTUxMUUyOTIxNTBFN0UwOEIwMkNEMi9GdzZjZG5aRHc4SDJCWGxBaGtpajhOcUVC Rm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0Z3NmNkblpEdzhIMkJYbEFoa2lqOE5xRUJGby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 RUZCOC9EOTgwQTE3MjFEOTUxMUUyOTIxNTBFN0UwOEIwMkNEMi9GdzZjZG5aRHc4 SDJCWGxBaGtpajhOcUVCRm8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCfRLhn2GXls6fL3nSBDrVV/hpY4HKAEaz2b0SqEBFnsO1sS7IPo+tc ZgOQm1HZvP4XIVP094OnnaWYTzEyj397B7yv4szG8QyLZaOCaWO9V2L2OOFoTuv5 Ts0wVcjEt3PZ+8mCyjW9f/5HA+m2NQXuyJjeQw7NpcMZVpzzB8V9FFhlcBjxhZaN wkWM+H7D9BvuqI4hWNSkazsQjIxWltRZnWVS7nuZ7aHU61oAARtpdz4q7tHo/mEy Nz+6vSimB5oOcBm8F/bcH+huCXbYaGdAUZuMO12IxzcEvzXiZXklDBDFk/qqJ/zT GEuatlMNFB6EK23tkkxKBXm8+2mj+IsE -----END CERTIFICATE-----Generated at Mon Nov 3 18:18:38 2025 by rpki-client