$ rpki-client -vvf rpki.apnic.net/member_repository/A9189D9B/B2A577C2274511F0AED2B469C4F9AE02/fwOXxqlOUll2g0u_1YAvFbeV-44.mft File: fwOXxqlOUll2g0u_1YAvFbeV-44.mft (raw, json) Hash identifier: y27QliouACWgpGhSVRKVAD8yMefzwyauS3U1RZ+qDlo= Subject key identifier: 06:4A:B8:1E:8F:97:82:E2:9B:E5:4E:D4:97:48:0B:60:23:46:C6:9E Authority key identifier: 7F:03:97:C6:A9:4E:52:59:76:83:4B:BF:D5:80:2F:15:B7:95:FB:8E Certificate issuer: /CN=A9189D9B/serialNumber=7F0397C6A94E525976834BBFD5802F15B795FB8E Certificate serial: 6D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fwOXxqlOUll2g0u_1YAvFbeV-44.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9189D9B/B2A577C2274511F0AED2B469C4F9AE02/fwOXxqlOUll2g0u_1YAvFbeV-44.mft Manifest number: 67 Signing time: Mon 03 Nov 2025 07:05:14 +0000 Manifest this update: Mon 03 Nov 2025 07:05:14 +0000 Manifest next update: Mon 10 Nov 2025 07:05:14 +0000 Files and hashes: 1: fwOXxqlOUll2g0u_1YAvFbeV-44.crl (hash: MDskKSYxua2OdZ9928sCAZL8uC14S9eRanZij/2oCoc=) 2: 552F0C342E2011F0AF4AB70CC4F9AE02.roa (hash: zQFffL0yf3R/prXBnJUsP3rRavBwBN7cKDAWt7IRmxU=) 3: C865C1BC8D2E11F0A977AE41C4F9AE02.roa (hash: 4+U1k9OAedZH316Ll+MqnC5sjLliIqDqE+4KiwveiWg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9189D9B/B2A577C2274511F0AED2B469C4F9AE02/fwOXxqlOUll2g0u_1YAvFbeV-44.crl rsync://rpki.apnic.net/member_repository/A9189D9B/B2A577C2274511F0AED2B469C4F9AE02/fwOXxqlOUll2g0u_1YAvFbeV-44.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fwOXxqlOUll2g0u_1YAvFbeV-44.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 07:05:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 109 (0x6d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9189D9B, serialNumber=7F0397C6A94E525976834BBFD5802F15B795FB8E Validity Not Before: Nov 3 07:05:14 2025 GMT Not After : Nov 10 07:05:14 2025 GMT Subject: CN=6908542a-9dc7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:47:a7:2d:ef:14:26:aa:73:99:a4:a6:97:6c: dd:8a:78:1c:b8:b6:29:fc:b7:99:a6:bc:4e:7c:8b: 8f:91:bf:e2:ef:d9:9d:f4:4b:f2:a4:3a:47:38:87: 91:b0:47:0f:53:31:b0:a0:55:e6:34:b1:4b:29:33: 2e:75:de:81:cd:71:c5:e4:49:73:81:b8:ac:20:d2: b3:77:7c:71:7a:e8:b2:b0:1b:a6:3f:e4:2d:66:bc: 1f:ae:83:97:bf:ac:36:66:d9:cb:2a:43:1f:9e:4a: 28:dd:97:96:61:0b:51:a9:c7:94:79:d4:70:a3:c3: fc:50:4b:27:6c:0d:2e:23:95:33:1e:2c:f7:1d:bc: 0c:12:3b:6d:94:82:2d:20:04:d6:49:a2:92:09:f6: 1b:fb:3f:ad:5f:0f:1e:ee:2f:b3:eb:75:bb:eb:5b: 5d:c3:e1:f5:e8:a4:b2:9d:14:07:d8:0e:f3:69:ca: 1a:7e:eb:35:c8:60:1b:12:fc:f8:17:b1:49:ff:81: 58:af:97:1f:21:60:d3:ca:e8:8b:25:e6:88:21:64: d1:7d:bd:90:91:ca:9a:99:6e:c1:67:94:0f:3a:c0: d0:d5:88:cd:35:43:5f:52:cd:3c:79:0a:d4:46:fe: 5d:6d:3f:1d:b1:8e:d1:e2:8e:97:e7:ac:b3:39:cd: c9:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:4A:B8:1E:8F:97:82:E2:9B:E5:4E:D4:97:48:0B:60:23:46:C6:9E X509v3 Authority Key Identifier: keyid:7F:03:97:C6:A9:4E:52:59:76:83:4B:BF:D5:80:2F:15:B7:95:FB:8E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9189D9B/B2A577C2274511F0AED2B469C4F9AE02/fwOXxqlOUll2g0u_1YAvFbeV-44.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fwOXxqlOUll2g0u_1YAvFbeV-44.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9189D9B/B2A577C2274511F0AED2B469C4F9AE02/fwOXxqlOUll2g0u_1YAvFbeV-44.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 10:5b:a5:78:a8:3f:d1:b6:ed:4d:69:a5:8b:4e:9d:aa:c1:c4: 47:6e:b0:56:86:9e:ee:59:6f:54:5f:d6:86:3d:4f:c9:77:8f: 39:71:68:e7:1f:46:e3:eb:1f:b7:fe:14:50:23:85:7a:ad:d0: 7c:76:08:a0:c7:85:37:1b:e9:fe:f6:d3:e5:f9:94:02:4f:40: ed:92:91:64:4b:45:ad:cc:66:49:01:96:76:27:d6:03:b1:b8: 8b:85:1f:c3:62:2f:7a:28:90:e9:13:e2:1b:dd:6a:6c:05:c4: 53:c5:13:b8:6d:9f:75:3f:3c:5e:7a:1d:9e:3f:3d:c9:30:6c: 00:14:5f:9f:d6:86:1f:8a:61:d3:15:2b:85:d8:85:67:e1:e0: 37:c4:6e:57:37:f7:7e:69:a1:f7:25:bd:5b:fb:00:b9:a3:6c: 95:be:de:38:96:9c:8d:2f:36:9c:67:e0:18:05:23:44:ca:88: 83:6a:ef:61:21:cf:a3:39:d9:6f:1b:9a:6c:0b:1c:d5:53:c1: 3c:37:0a:dd:d1:6f:16:47:5c:f4:95:2d:66:3b:da:2f:79:3a: dc:95:52:39:d3:7a:03:aa:92:ee:7c:18:a0:be:b2:42:f4:6e: 38:13:53:2b:3e:a2:97:ec:66:ac:ea:96:24:4c:3b:0b:84:dd: e4:d2:42:ae -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBbTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE4 OUQ5QjExMC8GA1UEBRMoN0YwMzk3QzZBOTRFNTI1OTc2ODM0QkJGRDU4MDJGMTVC Nzk1RkI4RTAeFw0yNTExMDMwNzA1MTRaFw0yNTExMTAwNzA1MTRaMBgxFjAUBgNV BAMTDTY5MDg1NDJhLTlkYzcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCdR6ct7xQmqnOZpKaXbN2KeBy4tin8t5mmvE58i4+Rv+Lv2Z30S/KkOkc4h5Gw Rw9TMbCgVeY0sUspMy513oHNccXkSXOBuKwg0rN3fHF66LKwG6Y/5C1mvB+ug5e/ rDZm2csqQx+eSijdl5ZhC1Gpx5R51HCjw/xQSydsDS4jlTMeLPcdvAwSO22Ugi0g BNZJopIJ9hv7P61fDx7uL7PrdbvrW13D4fXopLKdFAfYDvNpyhp+6zXIYBsS/PgX sUn/gVivlx8hYNPK6Isl5oghZNF9vZCRypqZbsFnlA86wNDViM01Q19SzTx5CtRG /l1tPx2xjtHijpfnrLM5zckVAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUBkq4Ho+X guKb5U7Ul0gLYCNGxp4wHwYDVR0jBBgwFoAUfwOXxqlOUll2g0u/1YAvFbeV+44w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTg5RDlCL0IyQTU3N0MyMjc0 NTExRjBBRUQyQjQ2OUM0RjlBRTAyL2Z3T1h4cWxPVWxsMmcwdV8xWUF2RmJlVi00 NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvZndPWHhxbE9VbGwyZzB1XzFZQXZGYmVWLTQ0LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTg5 RDlCL0IyQTU3N0MyMjc0NTExRjBBRUQyQjQ2OUM0RjlBRTAyL2Z3T1h4cWxPVWxs MmcwdV8xWUF2RmJlVi00NC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBABBbpXioP9G27U1ppYtOnarBxEdusFaGnu5Zb1Rf1oY9T8l3jzlxaOcf RuPrH7f+FFAjhXqt0Hx2CKDHhTcb6f720+X5lAJPQO2SkWRLRa3MZkkBlnYn1gOx uIuFH8NiL3ookOkT4hvdamwFxFPFE7htn3U/PF56HZ4/PckwbAAUX5/Whh+KYdMV K4XYhWfh4DfEblc3935pofclvVv7ALmjbJW+3jiWnI0vNpxn4BgFI0TKiINq72Eh z6M52W8bmmwLHNVTwTw3Ct3RbxZHXPSVLWY72i95OtyVUjnTegOqku58GKC+skL0 bjgTUys+opfsZqzqliRMOwuE3eTSQq4= -----END CERTIFICATE-----Generated at Mon Nov 3 18:07:03 2025 by rpki-client