$ rpki-client -vvf rpki.apnic.net/member_repository/A918753F/BDA57FFEBC1611EA9F2B7412C4F9AE02/fnLYAbOKcqtLA3bhLJVBJKrkPG0.mft File: fnLYAbOKcqtLA3bhLJVBJKrkPG0.mft (raw, json) Hash identifier: mh3FlGrNg2NfC5Wjuf+ghRF/fJ/3+r5e7xkou1eNgUU= Subject key identifier: 2A:51:14:1B:0B:10:25:23:7F:71:B4:27:35:CA:12:74:EA:5A:E4:3A Authority key identifier: 7E:72:D8:01:B3:8A:72:AB:4B:03:76:E1:2C:95:41:24:AA:E4:3C:6D Certificate issuer: /CN=A918753F/serialNumber=7E72D801B38A72AB4B0376E12C954124AAE43C6D Certificate serial: 08F7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fnLYAbOKcqtLA3bhLJVBJKrkPG0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918753F/BDA57FFEBC1611EA9F2B7412C4F9AE02/fnLYAbOKcqtLA3bhLJVBJKrkPG0.mft Manifest number: 08EC Signing time: Sun 02 Nov 2025 20:19:04 +0000 Manifest this update: Sun 02 Nov 2025 20:19:03 +0000 Manifest next update: Sun 09 Nov 2025 20:19:03 +0000 Files and hashes: 1: fnLYAbOKcqtLA3bhLJVBJKrkPG0.crl (hash: NOHqkUW0gRnPnsBDk1L/plPhC0M7HjootSSEEgM+dio=) 2: 10A6E062B70A11EDB851464EC4F9AE02.roa (hash: FH1SU9GKJvbucv0gXmHk6Vc7dPieI2aucBrxBlxHAdE=) 3: 38B92F54E17D11EDBCAFC081C4F9AE02.roa (hash: KcabN84FuC1RCZKB2biZEnUyMb0N5RBlFWlu2grfP8Y=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918753F/BDA57FFEBC1611EA9F2B7412C4F9AE02/fnLYAbOKcqtLA3bhLJVBJKrkPG0.crl rsync://rpki.apnic.net/member_repository/A918753F/BDA57FFEBC1611EA9F2B7412C4F9AE02/fnLYAbOKcqtLA3bhLJVBJKrkPG0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fnLYAbOKcqtLA3bhLJVBJKrkPG0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 20:19:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2295 (0x8f7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918753F, serialNumber=7E72D801B38A72AB4B0376E12C954124AAE43C6D Validity Not Before: Nov 2 20:19:03 2025 GMT Not After : Nov 9 20:19:03 2025 GMT Subject: CN=6907bcb7-4b3f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:c0:84:c3:0a:4c:49:49:7e:af:59:f9:3e:41: 23:92:5a:a4:f8:7b:a0:e9:5e:51:ed:0b:12:1b:04: dc:18:a2:c0:a2:09:cb:66:f0:b3:6a:c8:e4:a4:e2: a4:f6:02:22:b0:d4:d9:ca:76:b0:0b:69:70:97:bc: 54:34:5d:de:07:9c:9d:c1:6c:d8:28:e5:f4:31:b8: bb:c6:2d:5b:b7:94:65:62:7c:8e:24:d2:9b:7b:bf: e2:d5:f0:4d:ef:71:5f:18:a4:04:f6:c9:50:49:17: cb:b4:41:d7:a6:d3:e3:91:33:98:50:43:94:53:a2: c3:a3:19:bc:02:96:2c:67:45:34:1d:c4:c5:ae:1c: 61:b3:4d:df:0b:cc:bb:6e:9d:5e:1e:9e:1c:97:0d: 11:4f:fc:86:dd:41:8c:d4:05:bb:0b:cb:ac:07:78: 54:06:c8:3b:68:25:ba:7d:a6:fe:38:40:61:39:f6: df:77:65:c4:d5:ee:31:11:86:89:9c:6b:db:3f:30: 14:62:45:fd:62:4d:fd:19:1c:f9:86:83:2e:4c:53: 54:cf:48:7b:d2:7e:93:6b:f4:46:74:1e:2d:82:3f: 78:f7:b8:56:c8:08:74:6f:e6:19:60:2b:b3:91:bc: 4e:41:5a:94:87:62:58:76:84:ab:f0:50:7c:f6:c4: 4a:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:51:14:1B:0B:10:25:23:7F:71:B4:27:35:CA:12:74:EA:5A:E4:3A X509v3 Authority Key Identifier: keyid:7E:72:D8:01:B3:8A:72:AB:4B:03:76:E1:2C:95:41:24:AA:E4:3C:6D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918753F/BDA57FFEBC1611EA9F2B7412C4F9AE02/fnLYAbOKcqtLA3bhLJVBJKrkPG0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fnLYAbOKcqtLA3bhLJVBJKrkPG0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918753F/BDA57FFEBC1611EA9F2B7412C4F9AE02/fnLYAbOKcqtLA3bhLJVBJKrkPG0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2c:ee:87:7f:50:38:96:88:2b:24:f7:a9:61:cf:06:b9:a4:0d: f6:e0:e6:a7:cf:34:73:8d:d2:aa:90:93:1d:59:68:00:b2:91: d4:e7:9b:75:29:a9:b6:a4:5a:5b:25:57:85:23:73:a2:cf:77: e0:ee:70:d5:5d:6e:64:ee:a1:62:96:af:2f:a1:91:e9:45:51: 47:9a:06:62:f0:ff:67:b3:69:f2:9c:01:47:53:6b:66:59:c3: 9d:25:59:4e:a8:90:38:dd:db:bd:d6:02:92:a6:76:5a:98:88: 0e:ba:54:a6:46:b2:9a:a4:9f:07:56:6b:29:65:08:de:0c:f0: d1:fe:dd:15:75:ad:09:d7:e0:ce:53:72:ac:f6:5b:3a:50:ce: 46:7a:67:c8:4f:22:de:d3:2a:fc:3b:ab:55:cf:b1:91:87:2a: 93:0d:ec:a9:4b:fc:96:39:04:2c:c1:92:27:af:c1:84:42:a6: 13:bb:ae:ea:55:8b:74:a7:29:d4:96:f1:12:78:84:1f:21:36: 4f:82:7e:17:92:7a:40:bd:97:34:e6:26:6e:8a:4e:ea:03:fd: cb:ba:71:57:d9:6c:a5:37:13:b4:cf:48:13:3e:21:3b:76:06: 01:b5:f6:4a:09:d2:d1:d6:ef:f0:e6:4e:c5:d9:f3:8f:8a:14: b6:2b:d2:ea -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCPcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODc1M0YxMTAvBgNVBAUTKDdFNzJEODAxQjM4QTcyQUI0QjAzNzZFMTJDOTU0MTI0 QUFFNDNDNkQwHhcNMjUxMTAyMjAxOTAzWhcNMjUxMTA5MjAxOTAzWjAYMRYwFAYD VQQDEw02OTA3YmNiNy00YjNmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmMCEwwpMSUl+r1n5PkEjklqk+Hug6V5R7QsSGwTcGKLAognLZvCzasjkpOKk 9gIisNTZynawC2lwl7xUNF3eB5ydwWzYKOX0Mbi7xi1bt5RlYnyOJNKbe7/i1fBN 73FfGKQE9slQSRfLtEHXptPjkTOYUEOUU6LDoxm8ApYsZ0U0HcTFrhxhs03fC8y7 bp1eHp4clw0RT/yG3UGM1AW7C8usB3hUBsg7aCW6fab+OEBhOfbfd2XE1e4xEYaJ nGvbPzAUYkX9Yk39GRz5hoMuTFNUz0h70n6Ta/RGdB4tgj9497hWyAh0b+YZYCuz kbxOQVqUh2JYdoSr8FB89sRKlwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCpRFBsL ECUjf3G0JzXKEnTqWuQ6MB8GA1UdIwQYMBaAFH5y2AGzinKrSwN24SyVQSSq5Dxt MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NzUzRi9CREE1N0ZGRUJD MTYxMUVBOUYyQjc0MTJDNEY5QUUwMi9mbkxZQWJPS2NxdExBM2JoTEpWQkpLcmtQ RzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ZuTFlBYk9LY3F0TEEzYmhMSlZCSktya1BHMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NzUzRi9CREE1N0ZGRUJDMTYxMUVBOUYyQjc0MTJDNEY5QUUwMi9mbkxZQWJPS2Nx dExBM2JoTEpWQkpLcmtQRzAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAs7od/UDiWiCsk96lhzwa5pA324OanzzRzjdKqkJMdWWgAspHU55t1 Kam2pFpbJVeFI3Oiz3fg7nDVXW5k7qFilq8voZHpRVFHmgZi8P9ns2nynAFHU2tm WcOdJVlOqJA43du91gKSpnZamIgOulSmRrKapJ8HVmspZQjeDPDR/t0Vda0J1+DO U3Ks9ls6UM5GemfITyLe0yr8O6tVz7GRhyqTDeypS/yWOQQswZInr8GEQqYTu67q VYt0pynUlvESeIQfITZPgn4XknpAvZc05iZuik7qA/3LunFX2WylNxO0z0gTPiE7 dgYBtfZKCdLR1u/w5k7F2fOPihS2K9Lq -----END CERTIFICATE-----Generated at Mon Nov 3 16:11:51 2025 by rpki-client