$ rpki-client -vvf rpki.apnic.net/member_repository/A91BF8F4/707765A838A111ED9F3C0C82C4F9AE02/FPn_SiOnILc7r-YDNT8R65c5Jxk.mft File: FPn_SiOnILc7r-YDNT8R65c5Jxk.mft (raw, json) Hash identifier: w9XBqq8dNbNCRhvPhRtmG4/TniivdQNHSajxV4PSR/M= Subject key identifier: 4C:B3:35:5A:B3:89:71:9E:6E:0C:06:C0:DB:4B:93:4B:5A:85:0A:94 Authority key identifier: 14:F9:FF:4A:23:A7:20:B7:3B:AF:E6:03:35:3F:11:EB:97:39:27:19 Certificate issuer: /CN=A91BF8F4/serialNumber=14F9FF4A23A720B73BAFE603353F11EB97392719 Certificate serial: 024A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FPn_SiOnILc7r-YDNT8R65c5Jxk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BF8F4/707765A838A111ED9F3C0C82C4F9AE02/FPn_SiOnILc7r-YDNT8R65c5Jxk.mft Manifest number: 0245 Signing time: Wed 17 Sep 2025 02:20:48 +0000 Manifest this update: Wed 17 Sep 2025 02:20:47 +0000 Manifest next update: Wed 24 Sep 2025 02:20:47 +0000 Files and hashes: 1: FPn_SiOnILc7r-YDNT8R65c5Jxk.crl (hash: GQ0eT8YvfNoLXeRFsh4RVZva1nJ6AgVy7TvcpfZWtQU=) 2: 9B3244E038A411EDB5C86A28C4F9AE02.roa (hash: z3vMrh+MfifC7nf/d8HWXEmLlkM4nBll9m3BXQVcSyk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BF8F4/707765A838A111ED9F3C0C82C4F9AE02/FPn_SiOnILc7r-YDNT8R65c5Jxk.crl rsync://rpki.apnic.net/member_repository/A91BF8F4/707765A838A111ED9F3C0C82C4F9AE02/FPn_SiOnILc7r-YDNT8R65c5Jxk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FPn_SiOnILc7r-YDNT8R65c5Jxk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 24 Sep 2025 02:20:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 586 (0x24a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BF8F4, serialNumber=14F9FF4A23A720B73BAFE603353F11EB97392719 Validity Not Before: Sep 17 02:20:47 2025 GMT Not After : Sep 24 02:20:47 2025 GMT Subject: CN=68ca1aff-3bde Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:3b:fd:77:7d:e7:02:3e:dd:b9:29:0d:87:12: c8:a0:1a:49:78:e6:eb:f3:6b:a6:a9:17:ac:fa:d4: 0a:dc:7a:84:b6:d9:8f:04:a7:4d:8d:de:fe:c0:9a: 05:54:b7:1d:4f:2a:13:e3:f6:28:d4:87:b9:3d:c3: e0:ac:39:ab:95:61:b6:9e:9b:69:7d:bf:26:08:c2: fd:05:50:f1:a7:ae:d4:ea:15:bd:de:78:b2:a8:e8: 0a:ca:15:e3:fe:e9:c0:8e:d9:9e:fd:bb:1e:ab:33: 1d:b5:be:c9:2b:18:7c:9b:41:07:fc:f4:41:73:d0: a1:be:06:0d:b5:aa:a5:3b:6a:f0:97:ec:1b:f4:68: d9:96:fd:1c:c0:74:c6:a7:3e:5b:3b:0b:fd:ca:c2: 64:71:06:fc:ff:ba:8a:88:66:20:a2:b1:60:62:2a: 67:f2:cb:d3:8c:fb:2f:ee:f7:c8:a4:11:0e:ca:ea: 4b:74:4b:12:9f:cf:79:2e:cc:7e:13:e9:13:9d:59: 2d:23:ca:8d:76:10:04:7e:72:ce:fa:51:f2:9b:19: 0f:61:53:7a:1b:bb:b7:43:c3:10:66:62:e3:95:70: f6:9f:48:a4:01:8b:34:58:4f:13:c9:bc:2c:05:22: 93:f6:c5:8e:e7:14:9e:d5:b8:8c:ce:82:1e:5b:e5: bf:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:B3:35:5A:B3:89:71:9E:6E:0C:06:C0:DB:4B:93:4B:5A:85:0A:94 X509v3 Authority Key Identifier: keyid:14:F9:FF:4A:23:A7:20:B7:3B:AF:E6:03:35:3F:11:EB:97:39:27:19 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BF8F4/707765A838A111ED9F3C0C82C4F9AE02/FPn_SiOnILc7r-YDNT8R65c5Jxk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FPn_SiOnILc7r-YDNT8R65c5Jxk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BF8F4/707765A838A111ED9F3C0C82C4F9AE02/FPn_SiOnILc7r-YDNT8R65c5Jxk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption aa:64:9a:1c:ca:b8:5c:c3:d0:b4:0d:74:c7:23:ba:d5:40:51: 2a:69:d4:5e:9b:b0:57:cd:ad:b8:86:fe:a9:9e:5f:8f:e2:9c: 5e:f5:68:05:cb:f2:6b:0e:06:89:f3:ab:bf:ca:bb:5b:7e:3b: 2d:78:91:fc:34:ed:98:bc:e5:c3:63:a9:3b:a3:ff:9b:22:36: 7c:e2:01:93:7e:99:5d:73:9c:17:8c:c2:04:8a:4b:3d:25:9a: 8f:f3:fc:59:31:51:74:da:52:fb:5d:af:b1:d5:9d:31:58:ff: 78:0a:92:d5:2f:36:5b:95:06:4c:60:fb:5d:7f:6c:a4:52:44: 40:0f:e1:5f:42:ed:71:39:46:50:a4:8c:e5:da:d4:4d:e0:12: e2:e7:cd:f5:79:be:12:54:cf:fa:7f:d4:21:ef:c7:c2:18:8b: 84:e0:37:41:db:55:f5:6c:1f:23:52:76:76:60:45:6c:e4:fd: d4:1b:18:ac:a5:8a:9e:c2:0d:f7:a5:f6:c7:74:4d:26:6f:8a: d6:41:a9:32:b1:0e:83:c5:48:b4:94:54:8e:14:dd:20:77:81: f9:4d:3a:8f:5d:53:66:76:82:3f:bc:13:59:d4:c1:81:d2:62: 31:df:b1:30:11:93:42:e6:3d:a0:7d:bc:68:d1:e4:29:d9:7c: 07:fc:c0:c0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAkowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkY4RjQxMTAvBgNVBAUTKDE0RjlGRjRBMjNBNzIwQjczQkFGRTYwMzM1M0YxMUVC OTczOTI3MTkwHhcNMjUwOTE3MDIyMDQ3WhcNMjUwOTI0MDIyMDQ3WjAYMRYwFAYD VQQDEw02OGNhMWFmZi0zYmRlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyjv9d33nAj7duSkNhxLIoBpJeObr82umqRes+tQK3HqEttmPBKdNjd7+wJoF VLcdTyoT4/Yo1Ie5PcPgrDmrlWG2nptpfb8mCML9BVDxp67U6hW93niyqOgKyhXj /unAjtme/bseqzMdtb7JKxh8m0EH/PRBc9ChvgYNtaqlO2rwl+wb9GjZlv0cwHTG pz5bOwv9ysJkcQb8/7qKiGYgorFgYipn8svTjPsv7vfIpBEOyupLdEsSn895Lsx+ E+kTnVktI8qNdhAEfnLO+lHymxkPYVN6G7u3Q8MQZmLjlXD2n0ikAYs0WE8Tybws BSKT9sWO5xSe1biMzoIeW+W/AQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEyzNVqz iXGebgwGwNtLk0tahQqUMB8GA1UdIwQYMBaAFBT5/0ojpyC3O6/mAzU/EeuXOScZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCRjhGNC83MDc3NjVBODM4 QTExMUVEOUYzQzBDODJDNEY5QUUwMi9GUG5fU2lPbklMYzdyLVlETlQ4UjY1YzVK eGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZQbl9TaU9uSUxjN3ItWUROVDhSNjVjNUp4ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC RjhGNC83MDc3NjVBODM4QTExMUVEOUYzQzBDODJDNEY5QUUwMi9GUG5fU2lPbklM YzdyLVlETlQ4UjY1YzVKeGsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCqZJocyrhcw9C0DXTHI7rVQFEqadRem7BXza24hv6pnl+P4pxe9WgF y/JrDgaJ86u/yrtbfjsteJH8NO2YvOXDY6k7o/+bIjZ84gGTfpldc5wXjMIEiks9 JZqP8/xZMVF02lL7Xa+x1Z0xWP94CpLVLzZblQZMYPtdf2ykUkRAD+FfQu1xOUZQ pIzl2tRN4BLi5831eb4SVM/6f9Qh78fCGIuE4DdB21X1bB8jUnZ2YEVs5P3UGxis pYqewg33pfbHdE0mb4rWQakysQ6DxUi0lFSOFN0gd4H5TTqPXVNmdoI/vBNZ1MGB 0mIx37EwEZNC5j2gfbxo0eQp2XwH/MDA -----END CERTIFICATE-----Generated at Fri Sep 19 00:52:04 2025 by rpki-client