$ rpki-client -vvf rpki.apnic.net/member_repository/A91A7EA5/C784CF4E045011EA9B328819C4F9AE02/ftCxNhmz84MH3uG0Dn8neTItvm4.mft File: ftCxNhmz84MH3uG0Dn8neTItvm4.mft (raw, json) Hash identifier: A01LZDWTQbSfOg8JjTmVlQiF89JjPYChh3hBqIbnozQ= Subject key identifier: 26:2C:79:DE:DA:64:0C:38:90:79:BB:42:A6:4B:80:E5:EB:9A:6D:21 Authority key identifier: 7E:D0:B1:36:19:B3:F3:83:07:DE:E1:B4:0E:7F:27:79:32:2D:BE:6E Certificate issuer: /CN=A91A7EA5/serialNumber=7ED0B13619B3F38307DEE1B40E7F2779322DBE6E Certificate serial: 0CC5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ftCxNhmz84MH3uG0Dn8neTItvm4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A7EA5/C784CF4E045011EA9B328819C4F9AE02/ftCxNhmz84MH3uG0Dn8neTItvm4.mft Manifest number: 0CAE Signing time: Wed 22 Oct 2025 18:47:28 +0000 Manifest this update: Wed 22 Oct 2025 18:47:28 +0000 Manifest next update: Wed 29 Oct 2025 18:47:28 +0000 Files and hashes: 1: ftCxNhmz84MH3uG0Dn8neTItvm4.crl (hash: 3FfFE5sjyXOiV3CyLUjhDQvNTOlCFHXBRV2HhB2Pjoc=) 2: 93E73ABE833811ECA0A7120DC4F9AE02.roa (hash: s3cffiMnnn0qpE2XEuN7dLCpvHQisPqdoRFFwv4E0go=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A7EA5/C784CF4E045011EA9B328819C4F9AE02/ftCxNhmz84MH3uG0Dn8neTItvm4.crl rsync://rpki.apnic.net/member_repository/A91A7EA5/C784CF4E045011EA9B328819C4F9AE02/ftCxNhmz84MH3uG0Dn8neTItvm4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ftCxNhmz84MH3uG0Dn8neTItvm4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Oct 2025 18:47:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3269 (0xcc5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A7EA5, serialNumber=7ED0B13619B3F38307DEE1B40E7F2779322DBE6E Validity Not Before: Oct 22 18:47:28 2025 GMT Not After : Oct 29 18:47:28 2025 GMT Subject: CN=68f926c0-a4ef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:23:81:3d:c3:9b:64:8a:81:99:ec:1e:4e:4b: b3:80:bf:cf:ac:6e:a2:9c:7d:15:1d:0a:2b:8a:66: 75:df:87:5c:2e:96:f4:59:83:11:d7:c4:9b:12:13: 3f:79:6b:db:54:6f:b7:b1:2c:d5:f1:78:75:8e:a2: 7f:cb:be:e4:63:59:d7:63:6b:97:3c:5c:a1:18:51: 9e:fc:69:9d:f6:34:d0:de:cc:fa:89:5c:49:2e:96: f1:2d:98:36:bb:26:83:35:72:f2:17:1a:35:e1:27: 6a:aa:2e:aa:9e:9c:c4:38:e1:c8:bf:a9:04:43:a9: 9f:ce:2b:2e:70:29:e4:9f:1e:bb:46:28:50:67:ed: c0:41:7b:b3:25:50:d7:84:d7:c6:53:43:cd:73:3a: e8:0a:42:e5:f7:68:bd:79:61:a1:27:99:f5:a9:ca: 96:c7:7e:12:d0:11:a3:07:42:f3:23:c6:2e:5d:41: 8d:9b:fa:02:39:ab:c4:77:0f:c9:07:24:e5:18:da: ae:b4:76:25:0e:e0:8b:71:40:20:00:13:9d:0a:ea: b4:8f:73:80:e3:da:01:b0:0e:98:bd:47:48:04:74: f3:62:d4:44:52:15:db:06:66:78:21:d8:be:af:9b: 08:af:57:34:ea:ed:d7:61:bb:f9:b9:aa:d9:ee:61: 71:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:2C:79:DE:DA:64:0C:38:90:79:BB:42:A6:4B:80:E5:EB:9A:6D:21 X509v3 Authority Key Identifier: keyid:7E:D0:B1:36:19:B3:F3:83:07:DE:E1:B4:0E:7F:27:79:32:2D:BE:6E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A7EA5/C784CF4E045011EA9B328819C4F9AE02/ftCxNhmz84MH3uG0Dn8neTItvm4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ftCxNhmz84MH3uG0Dn8neTItvm4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A7EA5/C784CF4E045011EA9B328819C4F9AE02/ftCxNhmz84MH3uG0Dn8neTItvm4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 12:a1:dc:cc:42:2d:26:35:30:ef:2b:02:9c:49:51:c6:98:8e: e7:8a:2d:6f:5e:d4:21:fc:aa:7c:17:37:ec:80:91:22:43:c2: 49:c3:dc:17:3c:1f:55:fd:e2:aa:41:23:9d:f1:37:de:d7:d1: ef:72:a7:b1:d6:15:63:54:63:27:17:86:97:eb:d5:51:ef:b9: 1b:59:f0:e6:14:ca:55:00:ed:90:fb:cb:7a:43:64:17:c7:39: 50:55:5c:ae:a0:e5:62:a2:9c:3e:a4:9e:2e:89:bd:1a:b5:89: 84:d4:45:83:6e:61:b8:c9:89:ca:0c:33:a3:f1:b1:87:09:8a: f1:ba:2f:cc:1e:50:bd:15:ea:87:62:aa:a5:39:f7:27:8e:96: c3:26:6b:a6:96:80:7c:17:4e:6f:1f:61:44:d6:87:82:13:b1: 39:0a:36:c4:bc:fc:aa:ef:1b:cc:cc:1a:1e:4b:ae:54:4c:cd: 87:06:b4:6a:17:57:d4:18:76:b4:18:76:fb:91:de:50:04:c4: 36:af:f9:84:af:41:9c:6a:3e:30:bd:db:67:9a:28:f5:21:62: 40:6a:02:ab:2b:59:c3:98:ec:09:aa:f6:4f:88:6c:06:b5:f1: 64:00:da:b4:9e:63:17:d1:ea:15:09:6b:cf:c3:69:2d:aa:57: ba:cf:33:de -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDMUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTdFQTUxMTAvBgNVBAUTKDdFRDBCMTM2MTlCM0YzODMwN0RFRTFCNDBFN0YyNzc5 MzIyREJFNkUwHhcNMjUxMDIyMTg0NzI4WhcNMjUxMDI5MTg0NzI4WjAYMRYwFAYD VQQDEw02OGY5MjZjMC1hNGVmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2SOBPcObZIqBmeweTkuzgL/PrG6inH0VHQorimZ134dcLpb0WYMR18SbEhM/ eWvbVG+3sSzV8Xh1jqJ/y77kY1nXY2uXPFyhGFGe/Gmd9jTQ3sz6iVxJLpbxLZg2 uyaDNXLyFxo14Sdqqi6qnpzEOOHIv6kEQ6mfzisucCnknx67RihQZ+3AQXuzJVDX hNfGU0PNczroCkLl92i9eWGhJ5n1qcqWx34S0BGjB0LzI8YuXUGNm/oCOavEdw/J ByTlGNqutHYlDuCLcUAgABOdCuq0j3OA49oBsA6YvUdIBHTzYtREUhXbBmZ4Idi+ r5sIr1c06u3XYbv5uarZ7mFxEwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCYsed7a ZAw4kHm7QqZLgOXrmm0hMB8GA1UdIwQYMBaAFH7QsTYZs/ODB97htA5/J3kyLb5u MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBN0VBNS9DNzg0Q0Y0RTA0 NTAxMUVBOUIzMjg4MTlDNEY5QUUwMi9mdEN4Tmhtejg0TUgzdUcwRG44bmVUSXR2 bTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2Z0Q3hOaG16ODRNSDN1RzBEbjhuZVRJdHZtNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB N0VBNS9DNzg0Q0Y0RTA0NTAxMUVBOUIzMjg4MTlDNEY5QUUwMi9mdEN4Tmhtejg0 TUgzdUcwRG44bmVUSXR2bTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQASodzMQi0mNTDvKwKcSVHGmI7nii1vXtQh/Kp8FzfsgJEiQ8JJw9wX PB9V/eKqQSOd8Tfe19Hvcqex1hVjVGMnF4aX69VR77kbWfDmFMpVAO2Q+8t6Q2QX xzlQVVyuoOViopw+pJ4uib0atYmE1EWDbmG4yYnKDDOj8bGHCYrxui/MHlC9FeqH YqqlOfcnjpbDJmumloB8F05vH2FE1oeCE7E5CjbEvPyq7xvMzBoeS65UTM2HBrRq F1fUGHa0GHb7kd5QBMQ2r/mEr0Gcaj4wvdtnmij1IWJAagKrK1nDmOwJqvZPiGwG tfFkANq0nmMX0eoVCWvPw2ktqle6zzPe -----END CERTIFICATE-----Generated at Wed Oct 22 23:00:12 2025 by rpki-client