$ rpki-client -vvf rpki.apnic.net/member_repository/A91B2BC9/66D37AA6915611ED8D4B773DC4F9AE02/fsx3osytqtpjQvwPRGkYdeo_koc.mft File: fsx3osytqtpjQvwPRGkYdeo_koc.mft (raw, json) Hash identifier: TYpaF0MPEbtvtI5gjn6joU+jg6VjGMkcuxdT4IcuUb8= Subject key identifier: 16:38:6F:48:BF:D8:30:BB:10:DC:2F:40:20:AB:E8:C3:DC:FD:42:21 Authority key identifier: 7E:CC:77:A2:CC:AD:AA:DA:63:42:FC:0F:44:69:18:75:EA:3F:92:87 Certificate issuer: /CN=A91B2BC9/serialNumber=7ECC77A2CCADAADA6342FC0F44691875EA3F9287 Certificate serial: 0212 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fsx3osytqtpjQvwPRGkYdeo_koc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B2BC9/66D37AA6915611ED8D4B773DC4F9AE02/fsx3osytqtpjQvwPRGkYdeo_koc.mft Manifest number: 020E Signing time: Wed 05 Nov 2025 02:23:24 +0000 Manifest this update: Wed 05 Nov 2025 02:23:24 +0000 Manifest next update: Wed 12 Nov 2025 02:23:24 +0000 Files and hashes: 1: fsx3osytqtpjQvwPRGkYdeo_koc.crl (hash: LPSMXJXLd4wi+6WhizSftyKhzSV3uXVC7lMRXSvd/9M=) 2: 044E6658915A11ED8D2FBE43C4F9AE02.roa (hash: 5eORjOKdJA5R5JqKv9kUobgVioj38QF3cQAhkx2yC1U=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B2BC9/66D37AA6915611ED8D4B773DC4F9AE02/fsx3osytqtpjQvwPRGkYdeo_koc.crl rsync://rpki.apnic.net/member_repository/A91B2BC9/66D37AA6915611ED8D4B773DC4F9AE02/fsx3osytqtpjQvwPRGkYdeo_koc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fsx3osytqtpjQvwPRGkYdeo_koc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 02:23:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 530 (0x212) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B2BC9, serialNumber=7ECC77A2CCADAADA6342FC0F44691875EA3F9287 Validity Not Before: Nov 5 02:23:24 2025 GMT Not After : Nov 12 02:23:24 2025 GMT Subject: CN=690ab51c-da7f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:21:9d:87:c7:e9:ce:8e:a2:2b:7d:da:4b:7f: 52:c5:06:b0:83:c1:54:9e:7c:5c:4d:8f:28:c1:d4: e6:23:95:8a:72:a0:8c:74:b5:a4:6f:b5:0e:d0:b8: ed:86:a4:d5:1f:5a:86:1b:d5:be:10:3f:cd:11:27: 4e:52:43:52:79:88:ed:e5:4d:70:3f:59:99:b2:79: c2:bf:c0:d5:c2:7d:0c:e3:53:20:cf:31:94:47:ba: 40:c3:58:c7:47:a3:43:a6:e8:5a:a6:7e:b8:52:77: 3a:03:3e:0b:72:34:36:04:ba:e3:a8:73:5b:bb:51: e1:a2:ff:ee:52:b2:49:ad:14:24:32:b4:45:65:50: d3:bf:9c:e0:17:be:05:73:49:eb:57:80:88:a2:f8: bb:b0:b8:ee:ee:3c:5d:00:f1:e9:3e:2d:29:d4:2a: ac:ea:e6:5b:1b:5d:67:f3:69:06:6e:44:39:b1:eb: 6b:b8:8e:bc:ed:f1:67:af:66:e3:a0:2d:5c:50:1d: 28:bb:87:da:74:be:07:24:90:88:3e:f9:48:47:19: 2d:2f:a2:7f:f1:92:5a:b0:4f:06:1a:40:6c:01:f7: 26:42:10:b3:30:dc:a0:8d:95:d2:52:1a:41:d8:0b: a7:5b:f3:50:76:a1:5b:3c:aa:13:a9:8f:41:7c:38: 17:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:38:6F:48:BF:D8:30:BB:10:DC:2F:40:20:AB:E8:C3:DC:FD:42:21 X509v3 Authority Key Identifier: keyid:7E:CC:77:A2:CC:AD:AA:DA:63:42:FC:0F:44:69:18:75:EA:3F:92:87 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B2BC9/66D37AA6915611ED8D4B773DC4F9AE02/fsx3osytqtpjQvwPRGkYdeo_koc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fsx3osytqtpjQvwPRGkYdeo_koc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B2BC9/66D37AA6915611ED8D4B773DC4F9AE02/fsx3osytqtpjQvwPRGkYdeo_koc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 41:b8:6c:2a:57:a6:76:c0:83:09:a2:ab:83:09:3d:9a:07:a9: 5b:3f:e0:76:41:83:6f:bc:c0:bf:5c:a4:93:4f:a0:6c:19:d5: b9:19:b7:e9:6d:eb:40:cb:dd:15:db:a2:db:89:55:b6:a3:fc: e8:9a:bb:da:3f:0d:9a:bf:5f:b4:fb:f1:92:7a:d4:b9:b0:85: c6:3a:5c:f7:ce:a4:e8:65:c9:a0:e3:98:d6:fb:67:5a:41:2c: cb:bc:07:53:61:7f:3a:01:60:d2:2b:bd:1d:9b:c6:88:53:04: b7:c8:5c:0b:37:2a:b3:81:c6:ec:5c:9b:64:d9:1a:48:bf:f5: fb:2d:db:a4:d2:cc:7a:ae:89:b0:ed:aa:50:ea:0e:54:28:d4: a3:fc:66:ed:f2:77:f3:a6:59:1c:5c:47:77:7a:a4:96:5e:68: 05:64:56:29:ea:a6:7d:4c:cd:80:13:a6:78:b1:e9:38:3a:55: 96:9b:2b:a8:c8:7b:b6:c3:53:51:d8:e5:89:63:a1:2f:23:f2: 41:fb:09:ff:c7:41:7c:98:64:bd:af:c8:0f:f0:45:d7:2f:cb: 93:49:47:73:61:5b:55:9b:88:e7:ad:36:55:20:51:11:c3:e6: d1:c1:a3:a4:82:77:b6:95:ba:a2:0b:b9:69:54:8d:0f:2b:df: 8f:33:06:48 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAhIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjJCQzkxMTAvBgNVBAUTKDdFQ0M3N0EyQ0NBREFBREE2MzQyRkMwRjQ0NjkxODc1 RUEzRjkyODcwHhcNMjUxMTA1MDIyMzI0WhcNMjUxMTEyMDIyMzI0WjAYMRYwFAYD VQQDEw02OTBhYjUxYy1kYTdmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0SGdh8fpzo6iK33aS39SxQawg8FUnnxcTY8owdTmI5WKcqCMdLWkb7UO0Ljt hqTVH1qGG9W+ED/NESdOUkNSeYjt5U1wP1mZsnnCv8DVwn0M41MgzzGUR7pAw1jH R6NDpuhapn64Unc6Az4LcjQ2BLrjqHNbu1Hhov/uUrJJrRQkMrRFZVDTv5zgF74F c0nrV4CIovi7sLju7jxdAPHpPi0p1Cqs6uZbG11n82kGbkQ5setruI687fFnr2bj oC1cUB0ou4fadL4HJJCIPvlIRxktL6J/8ZJasE8GGkBsAfcmQhCzMNygjZXSUhpB 2AunW/NQdqFbPKoTqY9BfDgXqwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBY4b0i/ 2DC7ENwvQCCr6MPc/UIhMB8GA1UdIwQYMBaAFH7Md6LMraraY0L8D0RpGHXqP5KH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMkJDOS82NkQzN0FBNjkx NTYxMUVEOEQ0Qjc3M0RDNEY5QUUwMi9mc3gzb3N5dHF0cGpRdndQUkdrWWRlb19r b2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ZzeDNvc3l0cXRwalF2d1BSR2tZZGVvX2tvYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MkJDOS82NkQzN0FBNjkxNTYxMUVEOEQ0Qjc3M0RDNEY5QUUwMi9mc3gzb3N5dHF0 cGpRdndQUkdrWWRlb19rb2MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBBuGwqV6Z2wIMJoquDCT2aB6lbP+B2QYNvvMC/XKSTT6BsGdW5Gbfp betAy90V26LbiVW2o/zomrvaPw2av1+0+/GSetS5sIXGOlz3zqToZcmg45jW+2da QSzLvAdTYX86AWDSK70dm8aIUwS3yFwLNyqzgcbsXJtk2RpIv/X7Lduk0sx6romw 7apQ6g5UKNSj/Gbt8nfzplkcXEd3eqSWXmgFZFYp6qZ9TM2AE6Z4sek4OlWWmyuo yHu2w1NR2OWJY6EvI/JB+wn/x0F8mGS9r8gP8EXXL8uTSUdzYVtVm4jnrTZVIFER w+bRwaOkgne2lbqiC7lpVI0PK9+PMwZI -----END CERTIFICATE-----Generated at Wed Nov 5 14:31:28 2025 by rpki-client