$ rpki-client -vvf rpki.apnic.net/member_repository/A91BF8F4/707765A838A111ED9F3C0C82C4F9AE02/FPn_SiOnILc7r-YDNT8R65c5Jxk.mft File: FPn_SiOnILc7r-YDNT8R65c5Jxk.mft (raw, json) Hash identifier: LmOJB2jaY+a2bKpsTD1FI9RAHPVDC8bRxX1n4HNddKY= Subject key identifier: 7D:D0:EF:FF:D2:46:19:74:B6:11:3C:80:D4:23:CB:BF:53:7E:C3:DE Authority key identifier: 14:F9:FF:4A:23:A7:20:B7:3B:AF:E6:03:35:3F:11:EB:97:39:27:19 Certificate issuer: /CN=A91BF8F4/serialNumber=14F9FF4A23A720B73BAFE603353F11EB97392719 Certificate serial: 0261 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FPn_SiOnILc7r-YDNT8R65c5Jxk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BF8F4/707765A838A111ED9F3C0C82C4F9AE02/FPn_SiOnILc7r-YDNT8R65c5Jxk.mft Manifest number: 025C Signing time: Mon 03 Nov 2025 01:39:46 +0000 Manifest this update: Mon 03 Nov 2025 01:39:46 +0000 Manifest next update: Mon 10 Nov 2025 01:39:46 +0000 Files and hashes: 1: FPn_SiOnILc7r-YDNT8R65c5Jxk.crl (hash: nA9gdBJV2NYwoYsAnPKtOqs9qrsm1rlGRI8CD/sy/6E=) 2: 9B3244E038A411EDB5C86A28C4F9AE02.roa (hash: z3vMrh+MfifC7nf/d8HWXEmLlkM4nBll9m3BXQVcSyk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BF8F4/707765A838A111ED9F3C0C82C4F9AE02/FPn_SiOnILc7r-YDNT8R65c5Jxk.crl rsync://rpki.apnic.net/member_repository/A91BF8F4/707765A838A111ED9F3C0C82C4F9AE02/FPn_SiOnILc7r-YDNT8R65c5Jxk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FPn_SiOnILc7r-YDNT8R65c5Jxk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 01:39:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 609 (0x261) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BF8F4, serialNumber=14F9FF4A23A720B73BAFE603353F11EB97392719 Validity Not Before: Nov 3 01:39:46 2025 GMT Not After : Nov 10 01:39:46 2025 GMT Subject: CN=690807e2-d4be Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:3d:ba:fc:fc:9a:62:ed:43:4a:a1:90:b0:7e: c9:dc:c7:bc:84:c8:40:b8:73:cb:f8:3d:93:1c:61: 87:7f:ef:37:2b:1c:5f:b9:a2:c7:ed:8c:e9:30:c7: ad:bf:7b:2d:f3:a3:85:ff:ba:20:ca:dc:6d:5e:af: 34:38:7f:be:7b:2f:91:86:5b:2c:72:90:29:b0:85: 6e:04:25:cf:a6:82:61:b7:29:59:f4:aa:d4:df:e2: 4b:cb:f1:a5:08:98:95:8f:ab:de:09:ec:d6:c1:98: 84:3d:ed:78:ee:16:72:d7:8a:e0:c7:51:16:aa:69: 38:e1:7b:d9:cb:40:7f:d5:e9:f4:f1:d6:81:74:80: bc:2b:9b:95:fc:62:47:71:df:41:8a:8a:32:77:f3: 6c:6c:96:fa:d4:bb:54:dd:51:ad:eb:3e:d7:83:c0: 25:5d:17:92:ee:1f:d8:4d:72:ca:eb:60:3c:29:33: 99:f5:97:25:84:0d:4a:eb:24:ec:11:93:ff:04:e0: 77:8d:9b:3d:71:de:d2:da:c9:bf:08:7f:40:42:3f: e2:52:9e:84:e8:f3:20:cb:f5:0a:49:42:23:c5:86: 18:29:6f:94:b5:93:f1:41:67:66:92:2c:58:55:0b: 77:62:d3:c2:a0:80:5c:1e:06:23:26:0c:cf:59:10: 58:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:D0:EF:FF:D2:46:19:74:B6:11:3C:80:D4:23:CB:BF:53:7E:C3:DE X509v3 Authority Key Identifier: keyid:14:F9:FF:4A:23:A7:20:B7:3B:AF:E6:03:35:3F:11:EB:97:39:27:19 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BF8F4/707765A838A111ED9F3C0C82C4F9AE02/FPn_SiOnILc7r-YDNT8R65c5Jxk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FPn_SiOnILc7r-YDNT8R65c5Jxk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BF8F4/707765A838A111ED9F3C0C82C4F9AE02/FPn_SiOnILc7r-YDNT8R65c5Jxk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2b:a9:2d:d0:f7:56:52:4f:bc:a7:22:f8:77:a9:cc:0a:94:f7: 4e:64:7e:eb:9e:b9:54:74:b3:94:aa:c9:82:93:d0:19:72:bf: bd:d8:5a:db:46:29:3c:b2:b3:b6:7a:2e:52:a1:22:02:02:71: 6e:d7:e1:4c:f4:5f:50:bd:25:37:14:f2:1f:ac:40:bd:24:b9: 25:7e:ec:83:a8:00:73:71:8f:d4:1c:b0:d5:bd:c6:e0:07:3c: 9c:23:bf:ff:92:09:6f:e0:15:1f:3f:97:0d:4d:70:fd:65:68: 79:ab:53:89:ac:e5:bf:67:2d:e5:2d:b6:fe:60:15:67:04:d2: 35:50:50:e5:a3:9a:56:88:ab:7e:9b:c9:f9:37:90:78:91:71: a3:41:be:6a:e9:61:32:4c:68:6a:a5:d4:35:a5:ba:fe:d1:8a: 6b:4a:44:34:a4:31:ce:51:76:d6:56:1c:9f:27:8a:ff:89:34: 6b:1d:ab:2f:5a:41:7f:d6:ea:ca:25:6b:19:fa:fe:22:90:6c: 97:ca:00:47:18:52:8f:65:ae:5c:d6:d0:d5:cb:ba:09:6e:71: 92:e1:b4:d4:aa:b8:99:44:e0:98:79:8b:fc:d9:85:f5:bf:a1: f3:d2:8d:18:2c:ca:7a:d8:ee:5e:77:03:fa:8c:85:a4:77:35: 3d:1d:9b:e9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAmEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkY4RjQxMTAvBgNVBAUTKDE0RjlGRjRBMjNBNzIwQjczQkFGRTYwMzM1M0YxMUVC OTczOTI3MTkwHhcNMjUxMTAzMDEzOTQ2WhcNMjUxMTEwMDEzOTQ2WjAYMRYwFAYD VQQDEw02OTA4MDdlMi1kNGJlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAkD26/PyaYu1DSqGQsH7J3Me8hMhAuHPL+D2THGGHf+83KxxfuaLH7YzpMMet v3st86OF/7ogytxtXq80OH++ey+RhlsscpApsIVuBCXPpoJhtylZ9KrU3+JLy/Gl CJiVj6veCezWwZiEPe147hZy14rgx1EWqmk44XvZy0B/1en08daBdIC8K5uV/GJH cd9Biooyd/NsbJb61LtU3VGt6z7Xg8AlXReS7h/YTXLK62A8KTOZ9ZclhA1K6yTs EZP/BOB3jZs9cd7S2sm/CH9AQj/iUp6E6PMgy/UKSUIjxYYYKW+UtZPxQWdmkixY VQt3YtPCoIBcHgYjJgzPWRBY7wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFH3Q7//S Rhl0thE8gNQjy79TfsPeMB8GA1UdIwQYMBaAFBT5/0ojpyC3O6/mAzU/EeuXOScZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCRjhGNC83MDc3NjVBODM4 QTExMUVEOUYzQzBDODJDNEY5QUUwMi9GUG5fU2lPbklMYzdyLVlETlQ4UjY1YzVK eGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZQbl9TaU9uSUxjN3ItWUROVDhSNjVjNUp4ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC RjhGNC83MDc3NjVBODM4QTExMUVEOUYzQzBDODJDNEY5QUUwMi9GUG5fU2lPbklM YzdyLVlETlQ4UjY1YzVKeGsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQArqS3Q91ZST7ynIvh3qcwKlPdOZH7rnrlUdLOUqsmCk9AZcr+92Frb Rik8srO2ei5SoSICAnFu1+FM9F9QvSU3FPIfrEC9JLklfuyDqABzcY/UHLDVvcbg BzycI7//kglv4BUfP5cNTXD9ZWh5q1OJrOW/Zy3lLbb+YBVnBNI1UFDlo5pWiKt+ m8n5N5B4kXGjQb5q6WEyTGhqpdQ1pbr+0YprSkQ0pDHOUXbWVhyfJ4r/iTRrHasv WkF/1urKJWsZ+v4ikGyXygBHGFKPZa5c1tDVy7oJbnGS4bTUqriZROCYeYv82YX1 v6Hz0o0YLMp62O5edwP6jIWkdzU9HZvp -----END CERTIFICATE-----Generated at Mon Nov 3 18:10:15 2025 by rpki-client