$ rpki-client -vvf rpki.apnic.net/member_repository/A918D6AD/6C58390CB45E11F0BD68A93EC4F9AE02/fA03qVD2-mazVJllAshMr6_nOXE.mft File: fA03qVD2-mazVJllAshMr6_nOXE.mft (raw, json) Hash identifier: YMKWZUGed6NpPhcQqyE0PdQbOKowHTyaFQhOqyvSN80= Subject key identifier: 3B:3B:AC:AA:96:C2:E1:AF:D2:18:C1:D4:3C:72:F5:7E:9D:11:3B:2D Authority key identifier: 7C:0D:37:A9:50:F6:FA:66:B3:54:99:65:02:C8:4C:AF:AF:E7:39:71 Certificate issuer: /CN=A918D6AD/serialNumber=7C0D37A950F6FA66B354996502C84CAFAFE73971 Certificate serial: 05 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fA03qVD2-mazVJllAshMr6_nOXE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918D6AD/6C58390CB45E11F0BD68A93EC4F9AE02/fA03qVD2-mazVJllAshMr6_nOXE.mft Manifest number: 05 Signing time: Mon 03 Nov 2025 08:04:21 +0000 Manifest this update: Mon 03 Nov 2025 08:04:21 +0000 Manifest next update: Mon 10 Nov 2025 08:04:21 +0000 Files and hashes: 1: fA03qVD2-mazVJllAshMr6_nOXE.crl (hash: ekMOiVgtmLO4QbDSKxrvtGxYwtrRu3u+LESblorwEBA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918D6AD/6C58390CB45E11F0BD68A93EC4F9AE02/fA03qVD2-mazVJllAshMr6_nOXE.crl rsync://rpki.apnic.net/member_repository/A918D6AD/6C58390CB45E11F0BD68A93EC4F9AE02/fA03qVD2-mazVJllAshMr6_nOXE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fA03qVD2-mazVJllAshMr6_nOXE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 08:04:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5 (0x5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918D6AD, serialNumber=7C0D37A950F6FA66B354996502C84CAFAFE73971 Validity Not Before: Nov 3 08:04:21 2025 GMT Not After : Nov 10 08:04:21 2025 GMT Subject: CN=69086205-bb71 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:64:55:1a:78:a4:91:dc:cf:66:04:c0:b8:b9: cc:f9:a3:23:02:98:0a:49:4a:53:9f:a1:64:20:e8: 36:b2:14:06:2d:7e:69:29:6c:94:34:f6:dc:1b:e0: b2:53:03:55:45:81:dd:1c:b3:3f:52:e3:c4:0e:74: 26:44:e4:9e:99:1d:ed:3a:1d:81:f9:52:ab:dc:2c: e4:b2:00:72:2e:a2:7e:9e:56:62:3b:da:21:2d:c6: 94:46:3b:d9:02:3b:de:b6:10:66:73:b2:d7:7c:9b: 6a:0e:f8:67:21:da:ff:2d:0f:74:ac:23:a8:4c:21: bc:ab:49:33:e0:88:57:df:59:36:cc:1d:88:5b:2a: 64:dd:6f:3a:6a:ee:80:af:04:33:35:0d:b3:36:6c: c0:d5:db:72:ef:e4:b2:c5:f4:f3:22:52:e7:b3:ec: b8:26:0c:d3:30:39:ac:7c:36:56:1e:ab:d6:5a:49: fa:8b:ea:1a:86:b3:fa:95:34:58:80:47:83:83:f3: 43:2e:7c:c7:1b:1e:42:9c:c6:b5:3a:03:dd:60:d5: ea:3c:7c:f8:a6:ca:da:b2:fc:6f:6a:98:39:2b:90: 7e:f0:b4:2b:ec:d0:0c:e5:9b:23:37:80:47:a1:c0: 59:4c:b5:b8:f1:75:00:e1:a5:26:7f:77:2d:c2:93: 75:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:3B:AC:AA:96:C2:E1:AF:D2:18:C1:D4:3C:72:F5:7E:9D:11:3B:2D X509v3 Authority Key Identifier: keyid:7C:0D:37:A9:50:F6:FA:66:B3:54:99:65:02:C8:4C:AF:AF:E7:39:71 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918D6AD/6C58390CB45E11F0BD68A93EC4F9AE02/fA03qVD2-mazVJllAshMr6_nOXE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fA03qVD2-mazVJllAshMr6_nOXE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918D6AD/6C58390CB45E11F0BD68A93EC4F9AE02/fA03qVD2-mazVJllAshMr6_nOXE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5a:58:43:55:41:49:ad:54:77:8d:b7:be:3a:aa:00:d7:c9:0e: b8:53:c5:88:71:4b:e4:fd:1c:df:68:0c:c3:05:e5:88:23:ec: 71:fc:b6:10:8a:e8:81:31:0f:67:46:03:fb:90:e6:5f:be:c6: 9a:b9:13:6e:6a:77:fc:e1:a9:12:91:5b:1d:1a:67:d6:80:ef: a2:3b:fb:08:9a:bb:bb:f0:75:0b:84:01:de:a0:ba:9d:d8:f7: d0:d9:6e:49:52:4e:d3:6c:ec:bb:e4:88:40:db:a1:c6:84:3b: 18:07:51:2d:ee:90:64:2b:0c:67:5d:7a:1f:75:e5:39:17:0a: a1:9c:38:1a:2c:14:ed:23:28:0e:66:6e:98:f9:a6:17:b7:25: 6e:6f:5a:22:b5:ac:97:59:8a:1f:a1:23:b1:6c:18:96:13:f5: 32:4c:2d:57:f5:e1:5e:43:9a:96:47:bb:90:a7:df:ae:36:03: ef:e5:53:de:62:a1:b0:a5:45:3b:4a:86:b6:dd:60:3e:7a:80: 78:d6:fa:d6:ea:60:84:c1:9e:49:7f:9f:67:e2:21:81:78:0a: 34:3a:0e:88:96:13:2c:18:3d:88:ae:f7:21:00:b2:c2:89:bd: 74:36:d7:07:fc:35:bd:aa:3a:b6:eb:97:7b:f3:28:f2:cd:68: 2a:81:5f:42 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBBTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE4 RDZBRDExMC8GA1UEBRMoN0MwRDM3QTk1MEY2RkE2NkIzNTQ5OTY1MDJDODRDQUZB RkU3Mzk3MTAeFw0yNTExMDMwODA0MjFaFw0yNTExMTAwODA0MjFaMBgxFjAUBgNV BAMTDTY5MDg2MjA1LWJiNzEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDAZFUaeKSR3M9mBMC4ucz5oyMCmApJSlOfoWQg6DayFAYtfmkpbJQ09twb4LJT A1VFgd0csz9S48QOdCZE5J6ZHe06HYH5UqvcLOSyAHIuon6eVmI72iEtxpRGO9kC O962EGZzstd8m2oO+Gch2v8tD3SsI6hMIbyrSTPgiFffWTbMHYhbKmTdbzpq7oCv BDM1DbM2bMDV23Lv5LLF9PMiUuez7LgmDNMwOax8NlYeq9ZaSfqL6hqGs/qVNFiA R4OD80MufMcbHkKcxrU6A91g1eo8fPimytqy/G9qmDkrkH7wtCvs0AzlmyM3gEeh wFlMtbjxdQDhpSZ/dy3Ck3WrAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUOzusqpbC 4a/SGMHUPHL1fp0ROy0wHwYDVR0jBBgwFoAUfA03qVD2+mazVJllAshMr6/nOXEw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MThENkFELzZDNTgzOTBDQjQ1 RTExRjBCRDY4QTkzRUM0RjlBRTAyL2ZBMDNxVkQyLW1helZKbGxBc2hNcjZfbk9Y RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvZkEwM3FWRDItbWF6VkpsbEFzaE1yNl9uT1hFLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MThE NkFELzZDNTgzOTBDQjQ1RTExRjBCRDY4QTkzRUM0RjlBRTAyL2ZBMDNxVkQyLW1h elZKbGxBc2hNcjZfbk9YRS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAFpYQ1VBSa1Ud423vjqqANfJDrhTxYhxS+T9HN9oDMMF5Ygj7HH8thCK 6IExD2dGA/uQ5l++xpq5E25qd/zhqRKRWx0aZ9aA76I7+wiau7vwdQuEAd6gup3Y 99DZbklSTtNs7LvkiEDbocaEOxgHUS3ukGQrDGddeh915TkXCqGcOBosFO0jKA5m bpj5phe3JW5vWiK1rJdZih+hI7FsGJYT9TJMLVf14V5DmpZHu5Cn3642A+/lU95i obClRTtKhrbdYD56gHjW+tbqYITBnkl/n2fiIYF4CjQ6DoiWEywYPYiu9yEAssKJ vXQ21wf8Nb2qOrbrl3vzKPLNaCqBX0I= -----END CERTIFICATE-----Generated at Mon Nov 3 18:09:46 2025 by rpki-client