$ rpki-client -vvf rpki.apnic.net/member_repository/A918B0C4/F3A872DA7A0211EDBB36DB2EC4F9AE02/FfCkBoXmmmQdtw6Cv3gKmr_j8Vk.mft File: FfCkBoXmmmQdtw6Cv3gKmr_j8Vk.mft (raw, json) Hash identifier: jm1ti6CkBJCocyjBNCsGvcstTlGQSYF2xzIZlZFFkUU= Subject key identifier: 25:33:81:00:A3:A7:B7:6E:9B:15:01:6B:05:97:52:76:4D:C6:D8:B6 Authority key identifier: 15:F0:A4:06:85:E6:9A:64:1D:B7:0E:82:BF:78:0A:9A:BF:E3:F1:59 Certificate issuer: /CN=A918B0C4/serialNumber=15F0A40685E69A641DB70E82BF780A9ABFE3F159 Certificate serial: 0228 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FfCkBoXmmmQdtw6Cv3gKmr_j8Vk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918B0C4/F3A872DA7A0211EDBB36DB2EC4F9AE02/FfCkBoXmmmQdtw6Cv3gKmr_j8Vk.mft Manifest number: 0222 Signing time: Wed 05 Nov 2025 02:13:54 +0000 Manifest this update: Wed 05 Nov 2025 02:13:54 +0000 Manifest next update: Wed 12 Nov 2025 02:13:54 +0000 Files and hashes: 1: FfCkBoXmmmQdtw6Cv3gKmr_j8Vk.crl (hash: dJqixH/Mx3IPUDmxUYV1P6WtvBfU2WraNe1VKQS3+aM=) 2: F59959807A0511EDA112EF32C4F9AE02.roa (hash: hlcOiwDISzas5tiOnv5T5pSK2UpZ6cfJveUb3LnTEYo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918B0C4/F3A872DA7A0211EDBB36DB2EC4F9AE02/FfCkBoXmmmQdtw6Cv3gKmr_j8Vk.crl rsync://rpki.apnic.net/member_repository/A918B0C4/F3A872DA7A0211EDBB36DB2EC4F9AE02/FfCkBoXmmmQdtw6Cv3gKmr_j8Vk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FfCkBoXmmmQdtw6Cv3gKmr_j8Vk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 02:13:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 552 (0x228) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918B0C4, serialNumber=15F0A40685E69A641DB70E82BF780A9ABFE3F159 Validity Not Before: Nov 5 02:13:54 2025 GMT Not After : Nov 12 02:13:54 2025 GMT Subject: CN=690ab2e2-3114 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:f0:fa:f3:cc:56:4b:ea:30:e4:e0:59:80:bb: 35:bc:62:b2:f7:fb:3c:6c:f4:8a:0e:1f:ab:62:07: 12:46:ee:d6:1c:e5:3f:00:37:7f:f9:14:ea:63:67: 8e:ac:b1:7a:89:d1:dc:f6:c1:c0:af:f0:75:ae:fd: 2a:7e:3a:40:21:2f:17:be:ff:26:50:ab:3a:23:11: d9:7c:29:35:32:c5:fa:17:08:01:43:0e:a8:70:bd: 93:84:c5:61:93:fa:8f:1d:26:a3:88:c0:ef:8e:ac: 73:58:ce:54:d8:a1:ce:c4:26:1f:66:be:da:88:8a: 5d:40:63:60:9f:70:a8:db:18:4e:7a:e2:0e:5f:6f: fd:43:d3:6f:26:7d:50:6b:c3:35:26:0a:f3:ba:c0: 46:ea:f2:20:9f:a9:29:4f:a3:5e:41:70:e9:94:5e: cb:9c:15:61:08:8e:39:f2:8e:94:62:60:56:bb:7e: 84:50:e9:ab:9b:69:8c:65:ff:30:12:86:d4:27:f7: e2:93:91:1e:6e:36:95:99:62:ef:f7:f4:df:9f:d0: 44:30:a5:ca:d7:99:a8:e6:43:1e:a7:84:73:fc:44: 72:97:da:cf:f9:8d:8b:ea:94:5d:af:71:14:74:33: 70:ac:07:76:d6:cd:c6:0e:f4:21:a0:8a:d3:48:13: 93:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:33:81:00:A3:A7:B7:6E:9B:15:01:6B:05:97:52:76:4D:C6:D8:B6 X509v3 Authority Key Identifier: keyid:15:F0:A4:06:85:E6:9A:64:1D:B7:0E:82:BF:78:0A:9A:BF:E3:F1:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918B0C4/F3A872DA7A0211EDBB36DB2EC4F9AE02/FfCkBoXmmmQdtw6Cv3gKmr_j8Vk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FfCkBoXmmmQdtw6Cv3gKmr_j8Vk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918B0C4/F3A872DA7A0211EDBB36DB2EC4F9AE02/FfCkBoXmmmQdtw6Cv3gKmr_j8Vk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2b:0e:b8:2b:f4:4a:ed:1c:43:e9:30:d7:65:51:0f:71:53:74: 41:b8:37:a8:68:4f:35:5f:84:ee:3f:03:df:6d:02:ae:2e:b9: ee:2e:ec:03:2f:ff:0f:72:f2:58:fa:36:9f:66:a6:a0:1d:d4: 0d:89:a0:81:26:2e:be:19:f5:7d:99:6b:c5:36:c6:e1:d8:69: db:92:3e:8e:6e:ab:c4:3c:6f:14:9d:65:da:2a:18:34:2f:f8: 9b:1b:6a:49:ff:47:0a:36:02:d2:3d:42:8d:41:10:e0:78:13: 5c:73:4e:53:81:58:d0:d9:48:18:ce:41:58:7d:8a:3b:12:0a: 55:0e:bd:e7:41:f1:78:8b:2a:e1:7c:96:dd:49:b7:56:4c:29: cc:a5:e5:89:20:23:02:8c:dc:f3:b1:94:b1:51:32:8b:58:be: 5e:20:fd:83:f6:3c:ed:98:ef:22:c8:2c:41:93:b5:d9:71:ac: d4:43:97:7a:48:c5:4d:82:3a:17:b5:87:61:18:14:2d:3f:27: f8:8b:bf:ac:a2:ac:6d:8b:45:0b:cb:a8:ac:9e:91:b4:6b:81: 7a:40:fb:45:cb:45:0b:fe:ee:2b:f0:bb:13:a2:5c:2c:bb:f8: ae:0c:f4:04:96:75:99:87:ff:8d:1d:2a:91:fe:06:26:e8:a5: fe:a3:1c:9d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAigwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEIwQzQxMTAvBgNVBAUTKDE1RjBBNDA2ODVFNjlBNjQxREI3MEU4MkJGNzgwQTlB QkZFM0YxNTkwHhcNMjUxMTA1MDIxMzU0WhcNMjUxMTEyMDIxMzU0WjAYMRYwFAYD VQQDEw02OTBhYjJlMi0zMTE0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsvD688xWS+ow5OBZgLs1vGKy9/s8bPSKDh+rYgcSRu7WHOU/ADd/+RTqY2eO rLF6idHc9sHAr/B1rv0qfjpAIS8Xvv8mUKs6IxHZfCk1MsX6FwgBQw6ocL2ThMVh k/qPHSajiMDvjqxzWM5U2KHOxCYfZr7aiIpdQGNgn3Co2xhOeuIOX2/9Q9NvJn1Q a8M1JgrzusBG6vIgn6kpT6NeQXDplF7LnBVhCI458o6UYmBWu36EUOmrm2mMZf8w EobUJ/fik5EebjaVmWLv9/Tfn9BEMKXK15mo5kMep4Rz/ERyl9rP+Y2L6pRdr3EU dDNwrAd21s3GDvQhoIrTSBOTIwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCUzgQCj p7dumxUBawWXUnZNxti2MB8GA1UdIwQYMBaAFBXwpAaF5ppkHbcOgr94Cpq/4/FZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4QjBDNC9GM0E4NzJEQTdB MDIxMUVEQkIzNkRCMkVDNEY5QUUwMi9GZkNrQm9YbW1tUWR0dzZDdjNnS21yX2o4 VmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZmQ2tCb1htbW1RZHR3NkN2M2dLbXJfajhWay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 QjBDNC9GM0E4NzJEQTdBMDIxMUVEQkIzNkRCMkVDNEY5QUUwMi9GZkNrQm9YbW1t UWR0dzZDdjNnS21yX2o4VmsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQArDrgr9ErtHEPpMNdlUQ9xU3RBuDeoaE81X4TuPwPfbQKuLrnuLuwD L/8PcvJY+jafZqagHdQNiaCBJi6+GfV9mWvFNsbh2Gnbkj6ObqvEPG8UnWXaKhg0 L/ibG2pJ/0cKNgLSPUKNQRDgeBNcc05TgVjQ2UgYzkFYfYo7EgpVDr3nQfF4iyrh fJbdSbdWTCnMpeWJICMCjNzzsZSxUTKLWL5eIP2D9jztmO8iyCxBk7XZcazUQ5d6 SMVNgjoXtYdhGBQtPyf4i7+soqxti0ULy6isnpG0a4F6QPtFy0UL/u4r8LsTolws u/iuDPQElnWZh/+NHSqR/gYm6KX+oxyd -----END CERTIFICATE-----Generated at Wed Nov 5 11:33:44 2025 by rpki-client