$ rpki-client -vvf rpki.apnic.net/member_repository/A9188F77/CD28738225C111EF90097F5AC4F9AE02/FjFaaKdFCAvdtsjwFW0EMGiTG1c.mft File: FjFaaKdFCAvdtsjwFW0EMGiTG1c.mft (raw, json) Hash identifier: uE3gDcp8Qm9BVdZdNvIXCZKEhiOX9EEiaJKF4kaB8mQ= Subject key identifier: 90:53:7F:EB:08:E4:FF:49:8E:17:45:0B:DE:47:EF:23:98:50:9E:C2 Authority key identifier: 16:31:5A:68:A7:45:08:0B:DD:B6:C8:F0:15:6D:04:30:68:93:1B:57 Certificate issuer: /CN=A9188F77/serialNumber=16315A68A745080BDDB6C8F0156D043068931B57 Certificate serial: 0114 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FjFaaKdFCAvdtsjwFW0EMGiTG1c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9188F77/CD28738225C111EF90097F5AC4F9AE02/FjFaaKdFCAvdtsjwFW0EMGiTG1c.mft Manifest number: 0110 Signing time: Mon 03 Nov 2025 05:00:12 +0000 Manifest this update: Mon 03 Nov 2025 05:00:12 +0000 Manifest next update: Mon 10 Nov 2025 05:00:12 +0000 Files and hashes: 1: FjFaaKdFCAvdtsjwFW0EMGiTG1c.crl (hash: RHuw9BWp1fLhflNnL7R3yRHHZOuHRgh9U/Y6Hxcg75w=) 2: 1501E24625F511EF8F342F3EC4F9AE02.roa (hash: nyb0dAzbvJzklMfthLLqpt+z0+HXJ9fgrE8gdxbb/So=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9188F77/CD28738225C111EF90097F5AC4F9AE02/FjFaaKdFCAvdtsjwFW0EMGiTG1c.crl rsync://rpki.apnic.net/member_repository/A9188F77/CD28738225C111EF90097F5AC4F9AE02/FjFaaKdFCAvdtsjwFW0EMGiTG1c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FjFaaKdFCAvdtsjwFW0EMGiTG1c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 05:00:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 276 (0x114) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9188F77, serialNumber=16315A68A745080BDDB6C8F0156D043068931B57 Validity Not Before: Nov 3 05:00:12 2025 GMT Not After : Nov 10 05:00:12 2025 GMT Subject: CN=690836dc-7820 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:e2:98:9c:3a:69:d2:9b:99:68:b1:04:85:a5: d2:59:d2:fe:28:c0:91:1b:6c:b8:a7:a4:7a:57:fc: eb:e1:f4:c0:53:48:86:a1:50:4e:9c:56:22:1b:82: 1a:7c:4d:ed:fc:aa:8d:f6:f6:43:e1:e0:df:af:a7: a0:4a:10:c7:b3:c8:22:b3:d4:9c:c1:34:eb:c5:a0: a8:72:bc:55:0d:88:c1:d3:8a:32:0d:01:00:b9:44: db:12:77:43:ed:e6:a5:dc:ad:0a:0c:b3:32:42:24: ec:12:fa:4f:28:d4:40:6c:20:11:fd:bf:9d:80:86: 5f:ab:00:ee:92:99:59:98:0c:25:30:01:51:f3:e9: 32:43:bf:4e:cb:87:11:00:d2:fc:ef:0c:24:07:bc: 80:c8:6a:ef:92:34:6f:b8:1b:fd:95:52:4c:82:b4: 18:9a:59:8e:6b:ae:09:39:40:b7:76:eb:e1:4a:ff: bd:63:19:8a:d5:c7:11:cc:86:c5:51:e1:28:e3:59: aa:51:2a:6f:8a:fe:11:30:94:d6:b2:07:df:61:dc: d8:4d:5b:29:4a:45:c0:4f:8d:cf:77:ea:62:03:c2: b4:30:a5:d3:c1:cf:78:cb:32:16:bf:d2:76:ed:e3: 11:c9:00:cb:73:61:03:7f:ba:2c:40:dc:42:80:44: b2:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:53:7F:EB:08:E4:FF:49:8E:17:45:0B:DE:47:EF:23:98:50:9E:C2 X509v3 Authority Key Identifier: keyid:16:31:5A:68:A7:45:08:0B:DD:B6:C8:F0:15:6D:04:30:68:93:1B:57 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9188F77/CD28738225C111EF90097F5AC4F9AE02/FjFaaKdFCAvdtsjwFW0EMGiTG1c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FjFaaKdFCAvdtsjwFW0EMGiTG1c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9188F77/CD28738225C111EF90097F5AC4F9AE02/FjFaaKdFCAvdtsjwFW0EMGiTG1c.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 98:a1:d6:fa:4a:8d:c1:f8:5e:7a:51:81:6d:35:68:52:51:88: 0e:ae:55:fc:e5:2a:56:b3:1e:08:c0:8c:21:a2:d9:57:18:7d: 15:4c:6a:de:59:36:7f:18:26:69:51:75:6e:32:7f:cf:56:90: 9c:84:fc:da:86:de:1f:ca:b4:11:10:d3:9f:d1:f0:ec:be:29: d9:51:b3:8e:dc:94:e1:cf:8a:df:0e:94:4c:da:83:e0:01:c3: 35:9d:e1:a4:f7:02:26:24:71:2d:a4:59:ec:37:9c:94:73:ce: 96:21:a3:fe:41:da:04:77:0a:dd:e4:f8:59:8f:d9:d9:fd:70: d4:50:a9:99:b5:ee:87:2c:06:d7:a2:5a:d1:53:b1:e4:66:81: 22:22:93:43:6c:01:e6:67:3e:c5:71:23:41:f0:e3:40:60:40: 69:68:25:4b:ac:cb:01:fc:91:33:62:84:a0:2a:71:02:91:3e: 22:87:9a:ee:5c:73:89:49:80:3e:72:c1:9e:25:dd:87:fe:72: a9:04:48:66:c9:e3:8a:87:4e:24:f4:af:89:35:8a:2b:cd:9f: 59:9d:e7:97:7f:36:f1:19:58:f7:b0:bf:02:18:a6:40:03:7e: 01:ed:2d:d9:86:53:ac:15:a3:36:80:29:f6:8d:68:fa:e0:3a: 3c:d6:0e:c5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICARQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODhGNzcxMTAvBgNVBAUTKDE2MzE1QTY4QTc0NTA4MEJEREI2QzhGMDE1NkQwNDMw Njg5MzFCNTcwHhcNMjUxMTAzMDUwMDEyWhcNMjUxMTEwMDUwMDEyWjAYMRYwFAYD VQQDEw02OTA4MzZkYy03ODIwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAs+KYnDpp0puZaLEEhaXSWdL+KMCRG2y4p6R6V/zr4fTAU0iGoVBOnFYiG4Ia fE3t/KqN9vZD4eDfr6egShDHs8gis9ScwTTrxaCocrxVDYjB04oyDQEAuUTbEndD 7eal3K0KDLMyQiTsEvpPKNRAbCAR/b+dgIZfqwDukplZmAwlMAFR8+kyQ79Oy4cR ANL87wwkB7yAyGrvkjRvuBv9lVJMgrQYmlmOa64JOUC3duvhSv+9YxmK1ccRzIbF UeEo41mqUSpviv4RMJTWsgffYdzYTVspSkXAT43Pd+piA8K0MKXTwc94yzIWv9J2 7eMRyQDLc2EDf7osQNxCgESyMwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJBTf+sI 5P9JjhdFC95H7yOYUJ7CMB8GA1UdIwQYMBaAFBYxWminRQgL3bbI8BVtBDBokxtX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4OEY3Ny9DRDI4NzM4MjI1 QzExMUVGOTAwOTdGNUFDNEY5QUUwMi9GakZhYUtkRkNBdmR0c2p3RlcwRU1HaVRH MWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZqRmFhS2RGQ0F2ZHRzandGVzBFTUdpVEcxYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 OEY3Ny9DRDI4NzM4MjI1QzExMUVGOTAwOTdGNUFDNEY5QUUwMi9GakZhYUtkRkNB dmR0c2p3RlcwRU1HaVRHMWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCYodb6So3B+F56UYFtNWhSUYgOrlX85SpWsx4IwIwhotlXGH0VTGre WTZ/GCZpUXVuMn/PVpCchPzaht4fyrQRENOf0fDsvinZUbOO3JThz4rfDpRM2oPg AcM1neGk9wImJHEtpFnsN5yUc86WIaP+QdoEdwrd5PhZj9nZ/XDUUKmZte6HLAbX olrRU7HkZoEiIpNDbAHmZz7FcSNB8ONAYEBpaCVLrMsB/JEzYoSgKnECkT4ih5ru XHOJSYA+csGeJd2H/nKpBEhmyeOKh04k9K+JNYorzZ9ZneeXfzbxGVj3sL8CGKZA A34B7S3ZhlOsFaM2gCn2jWj64Do81g7F -----END CERTIFICATE-----Generated at Mon Nov 3 18:07:03 2025 by rpki-client