$ rpki-client -vvf rpki.apnic.net/member_repository/A91BDA06/2BFC8948713611E9869DBF10C4F9AE02/fPkomAMwIeA7O5PA7riCE8f7XsU.mft File: fPkomAMwIeA7O5PA7riCE8f7XsU.mft (raw, json) Hash identifier: o9FyXmkN66kGgIQP5/xOUf4GJ3Z8pxcdlLsGkglIMeo= Subject key identifier: 52:1F:3E:EC:CD:DA:CA:2B:31:AD:FF:A7:3D:60:0D:18:20:BF:2A:8A Authority key identifier: 7C:F9:28:98:03:30:21:E0:3B:3B:93:C0:EE:B8:82:13:C7:FB:5E:C5 Certificate issuer: /CN=A91BDA06/serialNumber=7CF92898033021E03B3B93C0EEB88213C7FB5EC5 Certificate serial: 0F72 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fPkomAMwIeA7O5PA7riCE8f7XsU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BDA06/2BFC8948713611E9869DBF10C4F9AE02/fPkomAMwIeA7O5PA7riCE8f7XsU.mft Manifest number: 0F6B Signing time: Thu 18 Sep 2025 17:44:27 +0000 Manifest this update: Thu 18 Sep 2025 17:44:26 +0000 Manifest next update: Thu 25 Sep 2025 17:44:26 +0000 Files and hashes: 1: fPkomAMwIeA7O5PA7riCE8f7XsU.crl (hash: 2gsRsOlJyHuNN8ixYv7YbFsVOyPuwwD1L1dKmkJ33Cg=) 2: DCE5E9CA713611E9A71D3311C4F9AE02.roa (hash: yUcmYZ18wT5AwWICmpq0ZcagYP+uu8UmtnyixruA6kM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BDA06/2BFC8948713611E9869DBF10C4F9AE02/fPkomAMwIeA7O5PA7riCE8f7XsU.crl rsync://rpki.apnic.net/member_repository/A91BDA06/2BFC8948713611E9869DBF10C4F9AE02/fPkomAMwIeA7O5PA7riCE8f7XsU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fPkomAMwIeA7O5PA7riCE8f7XsU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Sep 2025 17:44:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3954 (0xf72) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BDA06, serialNumber=7CF92898033021E03B3B93C0EEB88213C7FB5EC5 Validity Not Before: Sep 18 17:44:26 2025 GMT Not After : Sep 25 17:44:26 2025 GMT Subject: CN=68cc44fa-cf9f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:1f:14:41:3e:f4:99:7b:cb:ab:83:0a:6f:c3: 10:a8:53:0d:80:4c:b7:61:6e:01:80:3f:4f:c0:a5: ba:9d:84:b7:75:15:70:d1:73:07:1b:c3:d0:9e:82: e1:5f:06:d4:42:7a:cd:5a:96:7e:da:7d:83:81:99: 1d:5a:27:80:17:98:5f:3d:6a:26:c7:d0:9e:43:2a: be:7e:ef:6f:49:90:6a:8a:50:8c:cf:3c:61:ba:5b: a4:85:b6:71:7f:52:71:1a:ff:ea:cd:f2:fd:eb:1b: f1:c1:ec:74:49:1d:a3:22:d7:10:17:ee:6a:80:2b: 8f:48:6f:40:ef:5e:f3:a6:99:f1:08:62:7b:8b:8b: 26:07:59:79:03:9a:2a:05:12:4d:ba:2d:16:d1:2e: 13:85:aa:7c:63:5d:09:21:24:7f:92:c4:9b:9e:c1: d5:b4:dd:49:00:57:55:61:07:f6:fb:e4:f5:22:e3: a5:34:81:53:b8:98:67:24:5c:2c:00:c2:fe:99:17: ea:5d:4a:ed:20:be:6c:63:c4:10:86:3b:7a:16:03: 62:9f:f7:9a:cd:bb:a1:f4:2d:38:3b:fc:9a:fa:44: f1:4f:d8:a4:50:85:02:84:d6:9c:12:40:f6:1d:26: f4:d8:89:8b:fb:d3:e3:80:8d:b0:53:ad:64:ff:0e: e9:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:1F:3E:EC:CD:DA:CA:2B:31:AD:FF:A7:3D:60:0D:18:20:BF:2A:8A X509v3 Authority Key Identifier: keyid:7C:F9:28:98:03:30:21:E0:3B:3B:93:C0:EE:B8:82:13:C7:FB:5E:C5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BDA06/2BFC8948713611E9869DBF10C4F9AE02/fPkomAMwIeA7O5PA7riCE8f7XsU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fPkomAMwIeA7O5PA7riCE8f7XsU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BDA06/2BFC8948713611E9869DBF10C4F9AE02/fPkomAMwIeA7O5PA7riCE8f7XsU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 12:40:d4:03:4e:60:cc:30:34:3e:28:03:d7:a9:cd:da:93:c5: f0:4c:f2:b5:91:95:51:4a:c6:8b:7b:05:2f:94:63:df:5d:e5: ed:b6:9f:fb:d3:77:61:48:dd:cc:eb:85:32:5f:d4:8e:37:ed: bc:39:93:89:1d:a0:c0:a5:cf:8d:1b:df:d2:46:18:25:0b:1f: 2f:79:ee:7d:ff:4e:23:4d:a1:47:7a:a6:d3:8b:9d:d0:2e:7f: 13:c9:80:07:82:df:4d:4f:3f:06:53:90:b8:ed:54:5d:ff:e1: ca:8a:6e:b8:a6:2a:c4:6a:d1:6a:ad:20:cf:23:f4:65:ec:c5: 4e:47:b4:e1:0b:81:43:f9:61:cd:3c:b2:a0:1f:7b:ce:7d:a5: f0:ce:05:df:2b:e6:2b:58:ae:8d:ae:62:ce:2c:23:02:2b:d9: b0:a9:17:2f:e2:55:20:25:d1:98:8d:da:79:67:6e:38:f7:96: 15:b6:39:d8:71:79:b8:c1:63:f4:bb:71:44:4a:fa:d0:01:da: d9:d0:e0:6e:86:c8:28:e9:0b:ca:2f:2e:28:fd:3b:fc:59:3b: 74:4d:7a:4e:87:48:75:cc:be:44:68:99:84:54:4f:58:7e:47: 85:e0:c3:6c:fe:fc:5a:67:ea:9d:50:f8:84:f0:1c:4d:3b:48: 32:37:52:1d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICD3IwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkRBMDYxMTAvBgNVBAUTKDdDRjkyODk4MDMzMDIxRTAzQjNCOTNDMEVFQjg4MjEz QzdGQjVFQzUwHhcNMjUwOTE4MTc0NDI2WhcNMjUwOTI1MTc0NDI2WjAYMRYwFAYD VQQDEw02OGNjNDRmYS1jZjlmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtR8UQT70mXvLq4MKb8MQqFMNgEy3YW4BgD9PwKW6nYS3dRVw0XMHG8PQnoLh XwbUQnrNWpZ+2n2DgZkdWieAF5hfPWomx9CeQyq+fu9vSZBqilCMzzxhulukhbZx f1JxGv/qzfL96xvxwex0SR2jItcQF+5qgCuPSG9A717zppnxCGJ7i4smB1l5A5oq BRJNui0W0S4Thap8Y10JISR/ksSbnsHVtN1JAFdVYQf2++T1IuOlNIFTuJhnJFws AML+mRfqXUrtIL5sY8QQhjt6FgNin/eazbuh9C04O/ya+kTxT9ikUIUChNacEkD2 HSb02ImL+9PjgI2wU61k/w7pfwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFIfPuzN 2sorMa3/pz1gDRggvyqKMB8GA1UdIwQYMBaAFHz5KJgDMCHgOzuTwO64ghPH+17F MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCREEwNi8yQkZDODk0ODcx MzYxMUU5ODY5REJGMTBDNEY5QUUwMi9mUGtvbUFNd0llQTdPNVBBN3JpQ0U4ZjdY c1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ZQa29tQU13SWVBN081UEE3cmlDRThmN1hzVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC REEwNi8yQkZDODk0ODcxMzYxMUU5ODY5REJGMTBDNEY5QUUwMi9mUGtvbUFNd0ll QTdPNVBBN3JpQ0U4ZjdYc1UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQASQNQDTmDMMDQ+KAPXqc3ak8XwTPK1kZVRSsaLewUvlGPfXeXttp/7 03dhSN3M64UyX9SON+28OZOJHaDApc+NG9/SRhglCx8vee59/04jTaFHeqbTi53Q Ln8TyYAHgt9NTz8GU5C47VRd/+HKim64pirEatFqrSDPI/Rl7MVOR7ThC4FD+WHN PLKgH3vOfaXwzgXfK+YrWK6NrmLOLCMCK9mwqRcv4lUgJdGYjdp5Z24495YVtjnY cXm4wWP0u3FESvrQAdrZ0OBuhsgo6QvKLy4o/Tv8WTt0TXpOh0h1zL5EaJmEVE9Y fkeF4MNs/vxaZ+qdUPiE8BxNO0gyN1Id -----END CERTIFICATE-----Generated at Fri Sep 19 08:31:46 2025 by rpki-client