$ rpki-client -vvf rpki.apnic.net/member_repository/A918CC02/680C6246B86B11EF9A6A5058C4F9AE02/fwZ6IqSp4Jb9hqa6NVpZJJBn2Aw.mft File: fwZ6IqSp4Jb9hqa6NVpZJJBn2Aw.mft (raw, json) Hash identifier: vOSd6OWA9fSME+rgR/On3mgFH4EUCN1rhSy8De9SJvM= Subject key identifier: 8D:EE:F9:A8:32:D7:1B:C9:2C:CF:14:83:AD:11:5B:A5:D5:E5:EF:C8 Authority key identifier: 7F:06:7A:22:A4:A9:E0:96:FD:86:A6:BA:35:5A:59:24:90:67:D8:0C Certificate issuer: /CN=A918CC02/serialNumber=7F067A22A4A9E096FD86A6BA355A59249067D80C Certificate serial: AB Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fwZ6IqSp4Jb9hqa6NVpZJJBn2Aw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918CC02/680C6246B86B11EF9A6A5058C4F9AE02/fwZ6IqSp4Jb9hqa6NVpZJJBn2Aw.mft Manifest number: A9 Signing time: Wed 05 Nov 2025 06:26:37 +0000 Manifest this update: Wed 05 Nov 2025 06:26:36 +0000 Manifest next update: Wed 12 Nov 2025 06:26:36 +0000 Files and hashes: 1: fwZ6IqSp4Jb9hqa6NVpZJJBn2Aw.crl (hash: VWpZJ8e5Y7pjsC0XAkpygz1TZika9KwISYVh2UggySM=) 2: AF9A0636B86B11EFA561215AC4F9AE02.roa (hash: IQuVhRxEVEVGhjHjWm/5ZT8FALp9LUYdzNWsXFb85sc=) 3: 34B9DBFAC5C011EF88F56A0AC4F9AE02.roa (hash: Q0xEzY7OClm7DHfEFVGlhio77iseRkYBQy+gJxQGWpg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918CC02/680C6246B86B11EF9A6A5058C4F9AE02/fwZ6IqSp4Jb9hqa6NVpZJJBn2Aw.crl rsync://rpki.apnic.net/member_repository/A918CC02/680C6246B86B11EF9A6A5058C4F9AE02/fwZ6IqSp4Jb9hqa6NVpZJJBn2Aw.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fwZ6IqSp4Jb9hqa6NVpZJJBn2Aw.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 06:26:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 171 (0xab) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918CC02, serialNumber=7F067A22A4A9E096FD86A6BA355A59249067D80C Validity Not Before: Nov 5 06:26:36 2025 GMT Not After : Nov 12 06:26:36 2025 GMT Subject: CN=690aee1d-5127 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:c4:44:09:b3:3b:41:bf:25:a3:82:2e:2a:4d: 7c:af:1b:27:14:d4:e2:69:0b:3f:6e:a6:5c:91:2d: b9:34:09:4c:ad:27:ad:04:60:11:c1:68:62:f1:ba: 85:3c:e2:69:e1:50:cd:15:af:e7:50:8b:02:27:59: a8:db:c9:3b:e3:f0:e8:93:a9:72:32:f8:b9:77:cf: bf:2a:69:ca:e0:02:24:bd:26:45:e5:bd:26:d9:ef: e1:59:33:3e:fd:75:48:76:fd:0e:02:0a:e8:8d:84: 65:e8:b9:d6:38:95:9f:18:57:ea:96:a7:5a:cf:b6: 7d:44:83:b9:7a:ec:3b:51:57:c0:6c:f8:dc:0e:e1: a2:d3:03:b6:0f:72:f2:48:b8:0f:af:c1:dc:b8:e4: 5b:a1:ce:5c:2c:89:af:12:7f:ab:2d:a8:fb:dd:b2: e4:d1:d2:37:58:d9:1d:f3:10:f2:a5:14:d9:7b:19: f4:2f:d3:a6:4e:44:41:6e:dd:97:02:39:e8:27:c3: 1e:69:e3:40:98:81:e4:22:f4:12:1c:64:90:ba:23: c0:eb:ed:ec:dd:b3:06:d5:7d:06:01:3a:2d:53:4a: a5:1e:ee:2d:63:ba:cd:4d:a6:65:4c:e5:87:92:a6: 00:81:a7:53:60:ec:07:1b:0c:54:1a:29:2d:2e:60: e1:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:EE:F9:A8:32:D7:1B:C9:2C:CF:14:83:AD:11:5B:A5:D5:E5:EF:C8 X509v3 Authority Key Identifier: keyid:7F:06:7A:22:A4:A9:E0:96:FD:86:A6:BA:35:5A:59:24:90:67:D8:0C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918CC02/680C6246B86B11EF9A6A5058C4F9AE02/fwZ6IqSp4Jb9hqa6NVpZJJBn2Aw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fwZ6IqSp4Jb9hqa6NVpZJJBn2Aw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918CC02/680C6246B86B11EF9A6A5058C4F9AE02/fwZ6IqSp4Jb9hqa6NVpZJJBn2Aw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 49:ee:39:e2:26:c8:9b:0a:cf:9d:a3:cc:fb:0d:8f:78:b6:48: 2e:05:88:e7:0c:c4:c9:22:29:38:d4:f3:02:bd:54:9e:18:8d: 09:b2:9f:f5:d3:f3:72:02:7b:dc:c2:d1:0b:37:ab:82:a7:37: 02:5e:df:bc:6d:60:47:35:d4:56:81:31:57:b4:46:9c:50:db: 7a:5b:49:7d:3c:2c:3d:28:49:2d:c0:fd:6d:9b:0a:36:1a:b3: f8:3c:29:a5:fe:6b:55:3b:32:3f:8f:a1:39:4f:31:56:26:d2: f2:72:5d:71:8d:38:67:78:02:d0:1c:74:93:65:de:ac:33:82: 12:fc:14:1d:35:9f:ac:df:24:1c:b4:8a:dd:75:20:f9:f1:25: bd:99:5f:ac:9a:f3:a8:78:44:e3:ce:40:c6:be:81:71:59:95: 0b:f6:bc:83:82:e4:38:4f:58:10:61:20:97:93:c2:8a:fd:66: 71:f4:70:3d:32:ab:5b:3b:ec:5d:4d:b2:d7:01:38:01:c3:35: 98:be:51:f1:7a:4f:6f:84:10:44:ca:5d:d5:84:70:5e:df:60: 4a:86:36:31:7f:03:83:aa:63:83:1e:d5:f3:ed:8f:8a:4b:2f: 6a:df:c5:9e:54:bb:2b:1b:f3:64:41:33:cd:d3:8b:87:37:a7: bb:c0:dc:a2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAKswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OENDMDIxMTAvBgNVBAUTKDdGMDY3QTIyQTRBOUUwOTZGRDg2QTZCQTM1NUE1OTI0 OTA2N0Q4MEMwHhcNMjUxMTA1MDYyNjM2WhcNMjUxMTEyMDYyNjM2WjAYMRYwFAYD VQQDEw02OTBhZWUxZC01MTI3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0cRECbM7Qb8lo4IuKk18rxsnFNTiaQs/bqZckS25NAlMrSetBGARwWhi8bqF POJp4VDNFa/nUIsCJ1mo28k74/Dok6lyMvi5d8+/KmnK4AIkvSZF5b0m2e/hWTM+ /XVIdv0OAgrojYRl6LnWOJWfGFfqlqdaz7Z9RIO5euw7UVfAbPjcDuGi0wO2D3Ly SLgPr8HcuORboc5cLImvEn+rLaj73bLk0dI3WNkd8xDypRTZexn0L9OmTkRBbt2X AjnoJ8MeaeNAmIHkIvQSHGSQuiPA6+3s3bMG1X0GATotU0qlHu4tY7rNTaZlTOWH kqYAgadTYOwHGwxUGiktLmDh1wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFI3u+agy 1xvJLM8Ug60RW6XV5e/IMB8GA1UdIwQYMBaAFH8GeiKkqeCW/YamujVaWSSQZ9gM MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4Q0MwMi82ODBDNjI0NkI4 NkIxMUVGOUE2QTUwNThDNEY5QUUwMi9md1o2SXFTcDRKYjlocWE2TlZwWkpKQm4y QXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2Z3WjZJcVNwNEpiOWhxYTZOVnBaSkpCbjJBdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 Q0MwMi82ODBDNjI0NkI4NkIxMUVGOUE2QTUwNThDNEY5QUUwMi9md1o2SXFTcDRK YjlocWE2TlZwWkpKQm4yQXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBJ7jniJsibCs+do8z7DY94tkguBYjnDMTJIik41PMCvVSeGI0Jsp/1 0/NyAnvcwtELN6uCpzcCXt+8bWBHNdRWgTFXtEacUNt6W0l9PCw9KEktwP1tmwo2 GrP4PCml/mtVOzI/j6E5TzFWJtLycl1xjThneALQHHSTZd6sM4IS/BQdNZ+s3yQc tIrddSD58SW9mV+smvOoeETjzkDGvoFxWZUL9ryDguQ4T1gQYSCXk8KK/WZx9HA9 MqtbO+xdTbLXATgBwzWYvlHxek9vhBBEyl3VhHBe32BKhjYxfwODqmODHtXz7Y+K Sy9q38WeVLsrG/NkQTPN04uHN6e7wNyi -----END CERTIFICATE-----Generated at Wed Nov 5 15:05:00 2025 by rpki-client