$ rpki-client -vvf rpki.apnic.net/member_repository/A91A29DA/3E624BAEDA5411EE827CA57DC4F9AE02/FtFKpRNNQRJGTXmS2_HEUvf6KaA.mft File: FtFKpRNNQRJGTXmS2_HEUvf6KaA.mft (raw, json) Hash identifier: 1JuaBg3GoHFcFJz4iZakX0rTJG4J8pOjq+7HrE6Zfmc= Subject key identifier: 1F:61:FB:33:2C:5A:B6:77:83:C4:4A:BD:FD:38:D5:87:CA:EF:18:81 Authority key identifier: 16:D1:4A:A5:13:4D:41:12:46:4D:79:92:DB:F1:C4:52:F7:FA:29:A0 Certificate issuer: /CN=A91A29DA/serialNumber=16D14AA5134D4112464D7992DBF1C452F7FA29A0 Certificate serial: 0131 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FtFKpRNNQRJGTXmS2_HEUvf6KaA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A29DA/3E624BAEDA5411EE827CA57DC4F9AE02/FtFKpRNNQRJGTXmS2_HEUvf6KaA.mft Manifest number: 0130 Signing time: Thu 23 Oct 2025 06:24:01 +0000 Manifest this update: Thu 23 Oct 2025 06:24:00 +0000 Manifest next update: Thu 30 Oct 2025 06:24:00 +0000 Files and hashes: 1: FtFKpRNNQRJGTXmS2_HEUvf6KaA.crl (hash: cx+sCBxiNojRDMB283yyPO+itUo7g6V33bqcfM7/M7I=) 2: C1F74E665C1611F0B0B40A35C4F9AE02.roa (hash: cyzmbSkuoaF4EDWEAACeoUMvRNItS2PdfJUezyi8Vms=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A29DA/3E624BAEDA5411EE827CA57DC4F9AE02/FtFKpRNNQRJGTXmS2_HEUvf6KaA.crl rsync://rpki.apnic.net/member_repository/A91A29DA/3E624BAEDA5411EE827CA57DC4F9AE02/FtFKpRNNQRJGTXmS2_HEUvf6KaA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FtFKpRNNQRJGTXmS2_HEUvf6KaA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Oct 2025 06:23:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 305 (0x131) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A29DA, serialNumber=16D14AA5134D4112464D7992DBF1C452F7FA29A0 Validity Not Before: Oct 23 06:24:00 2025 GMT Not After : Oct 30 06:24:00 2025 GMT Subject: CN=68f9ca00-dbf6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:1d:aa:78:ec:35:95:5e:7b:c3:be:83:21:4e: 7c:13:f8:bb:37:64:f5:e7:9e:a9:f2:6a:f5:b1:12: 4e:76:be:05:40:a1:be:be:d0:d4:c3:66:07:ab:df: 51:da:7b:95:b2:7d:50:63:5a:b0:80:85:40:5e:dd: fb:b2:88:85:da:1b:ee:90:4c:03:ad:d9:2a:25:a8: c7:e0:e6:e1:c9:8f:23:cf:4a:d0:29:b1:2b:8c:64: 14:0e:f5:04:0a:cc:c4:d6:e1:a7:df:00:f1:78:ab: 9f:51:27:d7:28:5d:b4:93:79:94:2e:b4:20:0f:af: 0f:13:4b:07:7f:05:e5:63:65:8c:c3:f6:ec:bd:0a: 81:07:4d:64:1b:ad:da:95:1c:10:c5:13:39:ba:23: cf:3e:e0:ef:36:11:b5:49:e3:0f:f3:77:26:45:52: e4:c5:4f:f2:ae:39:d0:7c:12:87:ea:93:e5:8a:2e: 4d:27:8a:d4:b3:f5:78:15:86:fd:96:6e:71:d3:8a: 62:b4:06:18:81:18:a8:88:99:e7:4c:33:5d:9c:9e: bf:d9:44:a3:b5:62:b0:4c:a7:4e:8f:ac:0f:15:42: e1:d7:bb:08:b3:e9:1f:98:d9:09:ac:fc:ea:40:a4: 3a:d4:9c:75:f7:5a:5f:0f:ab:ea:f6:0d:5a:3c:75: 30:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:61:FB:33:2C:5A:B6:77:83:C4:4A:BD:FD:38:D5:87:CA:EF:18:81 X509v3 Authority Key Identifier: keyid:16:D1:4A:A5:13:4D:41:12:46:4D:79:92:DB:F1:C4:52:F7:FA:29:A0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A29DA/3E624BAEDA5411EE827CA57DC4F9AE02/FtFKpRNNQRJGTXmS2_HEUvf6KaA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FtFKpRNNQRJGTXmS2_HEUvf6KaA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A29DA/3E624BAEDA5411EE827CA57DC4F9AE02/FtFKpRNNQRJGTXmS2_HEUvf6KaA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 26:94:40:c6:e9:39:03:39:75:8b:c0:c0:10:ea:7c:ea:28:08: 27:7a:88:5f:16:18:2c:f2:7e:5d:1b:57:5d:87:1a:c9:00:64: 7c:b3:38:98:e0:58:9a:2b:ec:60:4a:7a:6b:12:85:bc:36:f1: 00:89:e3:ed:72:bf:69:fa:ed:9f:31:f1:a2:04:86:b4:7c:e9: a0:95:ad:9c:28:e5:6a:d3:1c:78:fd:8d:9f:10:d1:f4:03:c8: 96:b5:42:44:89:92:45:c6:1d:c4:91:ee:86:93:0d:cf:18:6e: 2d:e9:ce:33:b8:e5:9c:0e:32:91:43:ea:71:59:99:e5:0a:9a: 26:3a:f9:34:f2:0e:3c:eb:61:66:87:5b:84:5f:68:77:5f:e6: cc:d7:e9:cf:7b:9f:e7:71:93:fc:0f:36:a0:60:30:e8:d5:ad: 37:b7:7d:1f:e0:ce:3e:16:df:3a:13:0e:76:d3:56:58:32:65: a7:5b:d3:53:7f:14:0e:85:35:51:12:7c:cd:0f:a6:19:a2:cf: 2e:44:94:00:70:4c:4f:e3:22:88:59:66:18:6b:8b:2d:ff:3d: 02:dc:86:a8:18:e3:5c:a6:06:08:47:a5:96:a8:8d:a5:6b:5e: c2:29:40:6b:46:e2:88:57:44:52:82:dd:c0:5e:3b:43:21:49: 20:24:85:25 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICATEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTI5REExMTAvBgNVBAUTKDE2RDE0QUE1MTM0RDQxMTI0NjRENzk5MkRCRjFDNDUy RjdGQTI5QTAwHhcNMjUxMDIzMDYyNDAwWhcNMjUxMDMwMDYyNDAwWjAYMRYwFAYD VQQDEw02OGY5Y2EwMC1kYmY2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApB2qeOw1lV57w76DIU58E/i7N2T1556p8mr1sRJOdr4FQKG+vtDUw2YHq99R 2nuVsn1QY1qwgIVAXt37soiF2hvukEwDrdkqJajH4ObhyY8jz0rQKbErjGQUDvUE CszE1uGn3wDxeKufUSfXKF20k3mULrQgD68PE0sHfwXlY2WMw/bsvQqBB01kG63a lRwQxRM5uiPPPuDvNhG1SeMP83cmRVLkxU/yrjnQfBKH6pPlii5NJ4rUs/V4FYb9 lm5x04pitAYYgRioiJnnTDNdnJ6/2USjtWKwTKdOj6wPFULh17sIs+kfmNkJrPzq QKQ61Jx191pfD6vq9g1aPHUwIQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFB9h+zMs WrZ3g8RKvf041YfK7xiBMB8GA1UdIwQYMBaAFBbRSqUTTUESRk15ktvxxFL3+img MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMjlEQS8zRTYyNEJBRURB NTQxMUVFODI3Q0E1N0RDNEY5QUUwMi9GdEZLcFJOTlFSSkdUWG1TMl9IRVV2ZjZL YUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0Z0RktwUk5OUVJKR1RYbVMyX0hFVXZmNkthQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB MjlEQS8zRTYyNEJBRURBNTQxMUVFODI3Q0E1N0RDNEY5QUUwMi9GdEZLcFJOTlFS SkdUWG1TMl9IRVV2ZjZLYUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAmlEDG6TkDOXWLwMAQ6nzqKAgneohfFhgs8n5dG1ddhxrJAGR8sziY 4FiaK+xgSnprEoW8NvEAiePtcr9p+u2fMfGiBIa0fOmgla2cKOVq0xx4/Y2fENH0 A8iWtUJEiZJFxh3Eke6Gkw3PGG4t6c4zuOWcDjKRQ+pxWZnlCpomOvk08g4862Fm h1uEX2h3X+bM1+nPe5/ncZP8DzagYDDo1a03t30f4M4+Ft86Ew5201ZYMmWnW9NT fxQOhTVREnzND6YZos8uRJQAcExP4yKIWWYYa4st/z0C3IaoGONcpgYIR6WWqI2l a17CKUBrRuKIV0RSgt3AXjtDIUkgJIUl -----END CERTIFICATE-----Generated at Sat Oct 25 06:45:38 2025 by rpki-client