$ rpki-client -vvf rpki.apnic.net/member_repository/A918D1BD/B178A624A76211F08FDE3413C4F9AE02/Ffpf6DWCaroMjGdlCAm9yTRBJ7A.mft File: Ffpf6DWCaroMjGdlCAm9yTRBJ7A.mft (raw, json) Hash identifier: EJKO4F2twGuUrSC0WGY3wVmHaSdO7spMxVcAvPYN7GQ= Subject key identifier: 5C:77:81:02:8B:ED:26:FF:64:A8:BC:AA:71:8E:75:93:82:82:76:C7 Authority key identifier: 15:FA:5F:E8:35:82:6A:BA:0C:8C:67:65:08:09:BD:C9:34:41:27:B0 Certificate issuer: /CN=A918D1BD/serialNumber=15FA5FE835826ABA0C8C67650809BDC9344127B0 Certificate serial: 0D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ffpf6DWCaroMjGdlCAm9yTRBJ7A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918D1BD/B178A624A76211F08FDE3413C4F9AE02/Ffpf6DWCaroMjGdlCAm9yTRBJ7A.mft Manifest number: 0D Signing time: Mon 03 Nov 2025 07:57:54 +0000 Manifest this update: Mon 03 Nov 2025 07:57:54 +0000 Manifest next update: Mon 10 Nov 2025 07:57:54 +0000 Files and hashes: 1: Ffpf6DWCaroMjGdlCAm9yTRBJ7A.crl (hash: EH4Lvs+INToebUE68BNNFb7OcnnZ0xp73+8C8g1w1KQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918D1BD/B178A624A76211F08FDE3413C4F9AE02/Ffpf6DWCaroMjGdlCAm9yTRBJ7A.crl rsync://rpki.apnic.net/member_repository/A918D1BD/B178A624A76211F08FDE3413C4F9AE02/Ffpf6DWCaroMjGdlCAm9yTRBJ7A.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ffpf6DWCaroMjGdlCAm9yTRBJ7A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 07:57:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13 (0xd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918D1BD, serialNumber=15FA5FE835826ABA0C8C67650809BDC9344127B0 Validity Not Before: Nov 3 07:57:54 2025 GMT Not After : Nov 10 07:57:54 2025 GMT Subject: CN=69086082-5a97 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:cb:9b:05:87:36:7c:fe:fe:38:ed:5e:6b:3d: cc:0d:a5:ce:e3:6f:24:d5:77:a6:08:3c:a2:5d:3e: 5f:32:02:af:5a:45:81:68:56:2c:2c:86:49:d8:b9: 9e:ac:fb:b8:21:bc:29:2d:e2:13:a2:81:e3:92:f6: 9b:e2:90:4e:dc:3b:a0:23:a4:d6:56:9d:82:17:51: a5:ff:f5:28:07:0f:e5:4d:f8:5a:e0:fc:90:7d:c4: 23:93:9c:f4:3b:86:82:45:78:e2:82:0c:7f:6c:80: f9:00:bb:60:fc:d4:8e:9d:db:7d:a3:94:48:90:c9: 4a:7b:a9:62:d3:46:77:80:ea:03:c6:28:a8:6b:4d: 02:57:9e:2f:b2:3e:08:51:e6:52:66:94:70:bc:9c: 1d:fa:37:ae:be:45:c5:c9:62:1f:1e:b6:66:70:74: 05:e0:d8:75:67:0b:3b:42:79:4c:cb:07:5f:22:b8: 10:af:bd:9a:12:e4:2e:7a:39:c6:f7:a2:20:57:30: 2d:7b:d0:f1:ef:1f:4d:82:69:11:88:13:42:1f:b5: 2e:c9:b2:3a:17:7c:01:28:3b:58:65:d8:af:49:6f: de:1c:dc:53:0e:bf:b6:af:7f:75:19:76:f5:9f:fe: fe:db:d3:3e:60:c2:62:c9:ab:3e:cb:e1:54:a3:e4: 1d:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:77:81:02:8B:ED:26:FF:64:A8:BC:AA:71:8E:75:93:82:82:76:C7 X509v3 Authority Key Identifier: keyid:15:FA:5F:E8:35:82:6A:BA:0C:8C:67:65:08:09:BD:C9:34:41:27:B0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918D1BD/B178A624A76211F08FDE3413C4F9AE02/Ffpf6DWCaroMjGdlCAm9yTRBJ7A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ffpf6DWCaroMjGdlCAm9yTRBJ7A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918D1BD/B178A624A76211F08FDE3413C4F9AE02/Ffpf6DWCaroMjGdlCAm9yTRBJ7A.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 91:bc:51:ff:e3:3a:2b:86:ea:2b:e2:04:76:43:95:50:7e:5b: 8b:25:8d:a1:d8:87:4a:48:88:fa:c0:f1:e6:37:4c:77:84:03: 33:72:a3:58:34:66:73:02:b8:1e:f6:13:15:ec:88:92:ab:f6: 1e:33:d6:fd:6a:7e:98:23:d8:42:d3:de:5e:0e:ae:ca:90:a0: 5e:1f:c9:68:62:61:5d:40:0b:65:e0:c9:b5:4a:e2:f3:f6:c4: 3d:8b:da:57:3a:99:ee:94:0a:4d:69:72:28:26:a4:df:c1:08: 98:68:42:f2:4a:b4:91:d3:0f:98:cb:26:48:e4:69:52:2b:5c: a1:5b:08:58:e3:37:64:65:c1:5b:70:77:04:56:d2:4a:b7:3b: 3a:42:fe:0a:1d:f5:09:0b:76:e9:0c:3e:08:93:8b:03:80:5a: a8:d5:bb:72:c7:39:96:d9:bd:07:90:ab:c5:8d:fe:55:c9:7f: 76:13:36:1e:68:60:bc:b5:b0:f3:bc:02:df:f7:4e:48:fb:0b: c0:42:dc:6d:01:c4:c0:95:c8:a5:00:54:04:4e:ae:e6:b6:fd: 3a:93:46:40:27:75:1f:05:59:b8:a9:59:38:df:b5:ab:fa:4a: f2:d2:bc:69:d7:4b:bd:a6:c5:94:ca:34:42:6c:5c:55:c5:ea: e4:1b:de:4c -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBDTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE4 RDFCRDExMC8GA1UEBRMoMTVGQTVGRTgzNTgyNkFCQTBDOEM2NzY1MDgwOUJEQzkz NDQxMjdCMDAeFw0yNTExMDMwNzU3NTRaFw0yNTExMTAwNzU3NTRaMBgxFjAUBgNV BAMTDTY5MDg2MDgyLTVhOTcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC0y5sFhzZ8/v447V5rPcwNpc7jbyTVd6YIPKJdPl8yAq9aRYFoViwshknYuZ6s +7ghvCkt4hOigeOS9pvikE7cO6AjpNZWnYIXUaX/9SgHD+VN+Frg/JB9xCOTnPQ7 hoJFeOKCDH9sgPkAu2D81I6d232jlEiQyUp7qWLTRneA6gPGKKhrTQJXni+yPghR 5lJmlHC8nB36N66+RcXJYh8etmZwdAXg2HVnCztCeUzLB18iuBCvvZoS5C56Ocb3 oiBXMC170PHvH02CaRGIE0IftS7JsjoXfAEoO1hl2K9Jb94c3FMOv7avf3UZdvWf /v7b0z5gwmLJqz7L4VSj5B2LAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUXHeBAovt Jv9kqLyqcY51k4KCdscwHwYDVR0jBBgwFoAUFfpf6DWCaroMjGdlCAm9yTRBJ7Aw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MThEMUJEL0IxNzhBNjI0QTc2 MjExRjA4RkRFMzQxM0M0RjlBRTAyL0ZmcGY2RFdDYXJvTWpHZGxDQW05eVRSQko3 QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvRmZwZjZEV0Nhcm9NakdkbENBbTl5VFJCSjdBLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MThE MUJEL0IxNzhBNjI0QTc2MjExRjA4RkRFMzQxM0M0RjlBRTAyL0ZmcGY2RFdDYXJv TWpHZGxDQW05eVRSQko3QS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAJG8Uf/jOiuG6iviBHZDlVB+W4sljaHYh0pIiPrA8eY3THeEAzNyo1g0 ZnMCuB72ExXsiJKr9h4z1v1qfpgj2ELT3l4OrsqQoF4fyWhiYV1AC2XgybVK4vP2 xD2L2lc6me6UCk1pcigmpN/BCJhoQvJKtJHTD5jLJkjkaVIrXKFbCFjjN2RlwVtw dwRW0kq3OzpC/god9QkLdukMPgiTiwOAWqjVu3LHOZbZvQeQq8WN/lXJf3YTNh5o YLy1sPO8At/3Tkj7C8BC3G0BxMCVyKUAVAROrua2/TqTRkAndR8FWbipWTjftav6 SvLSvGnXS72mxZTKNEJsXFXF6uQb3kw= -----END CERTIFICATE-----Generated at Mon Nov 3 18:09:46 2025 by rpki-client