$ rpki-client -vvf rpki.apnic.net/member_repository/A91C93EE/6858F6880E0211EAA9B1DB65C4F9AE02/_Fbn4Hb3_QqEvsycPiKRQqCQH-w.mft File: _Fbn4Hb3_QqEvsycPiKRQqCQH-w.mft (raw, json) Hash identifier: nq+syXqcq0CLF1aE6wHdaOM9Rie/GXVSOY62klOAB9A= Subject key identifier: 23:FF:C4:F3:42:92:EE:D4:00:BF:FE:2B:F2:5E:A9:45:CB:AE:87:A9 Authority key identifier: FC:56:E7:E0:76:F7:FD:0A:84:BE:CC:9C:3E:22:91:42:A0:90:1F:EC Certificate issuer: /CN=A91C93EE/serialNumber=FC56E7E076F7FD0A84BECC9C3E229142A0901FEC Certificate serial: 0CE1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_Fbn4Hb3_QqEvsycPiKRQqCQH-w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C93EE/6858F6880E0211EAA9B1DB65C4F9AE02/_Fbn4Hb3_QqEvsycPiKRQqCQH-w.mft Manifest number: 0CA8 Signing time: Tue 04 Nov 2025 18:39:19 +0000 Manifest this update: Tue 04 Nov 2025 18:39:19 +0000 Manifest next update: Tue 11 Nov 2025 18:39:19 +0000 Files and hashes: 1: _Fbn4Hb3_QqEvsycPiKRQqCQH-w.crl (hash: ur30qiX1xS4pJSuxViqOtCIyiMnljBZnIGo8qNRdmdw=) 2: 34E6B680511A11F0B256FA65C4F9AE02.roa (hash: DotKGlewQf4vCmtjp0W5XPKIyQK3DWXLsRQy4LfbCHQ=) 3: B256D8FC479711F09A25BE59C4F9AE02.roa (hash: g0SoJEOW6hbapp+G2W5wkFaJTTHS/dc2FgUbvjsjuIM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C93EE/6858F6880E0211EAA9B1DB65C4F9AE02/_Fbn4Hb3_QqEvsycPiKRQqCQH-w.crl rsync://rpki.apnic.net/member_repository/A91C93EE/6858F6880E0211EAA9B1DB65C4F9AE02/_Fbn4Hb3_QqEvsycPiKRQqCQH-w.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_Fbn4Hb3_QqEvsycPiKRQqCQH-w.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 18:39:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3297 (0xce1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C93EE, serialNumber=FC56E7E076F7FD0A84BECC9C3E229142A0901FEC Validity Not Before: Nov 4 18:39:19 2025 GMT Not After : Nov 11 18:39:19 2025 GMT Subject: CN=690a4857-c3d1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:85:28:81:77:85:77:3e:64:c8:f9:0e:5e:db: f2:29:33:a4:c8:d5:96:9a:e4:c3:93:7a:fe:5b:27: 92:6d:5f:56:ad:b3:99:b5:1d:e0:ad:2d:fd:66:92: 2a:55:b5:77:b3:1f:e0:71:fb:44:60:bf:5d:f6:05: f2:8c:67:52:2f:cc:d9:25:ed:e7:2a:6a:7a:23:d1: b3:7a:d6:db:d3:49:43:12:84:42:5f:17:32:49:a3: d3:48:74:05:36:11:32:2b:90:5f:46:d7:5a:ce:c5: b4:63:97:96:be:74:a7:43:3c:7f:0b:5c:30:95:a0: 88:51:1e:1e:0b:70:e9:05:7c:50:19:7c:26:22:7d: df:9a:a3:04:52:6d:21:de:1f:a4:06:52:74:54:83: b1:41:5f:69:78:e9:d6:f9:4a:7d:f6:20:92:63:b0: ff:3a:d7:09:50:cb:02:e4:b1:d9:49:c2:91:0c:1b: 4a:00:d1:4b:c1:cd:f1:f5:70:8f:ad:e5:dc:39:bd: b3:ef:5c:18:cc:15:82:7d:66:d6:bf:eb:5d:db:ea: 67:f8:8a:7d:20:f0:02:4d:31:69:45:13:7d:2d:a8: dd:88:6d:7c:7d:c5:0f:10:1b:58:8b:46:53:d4:0d: 86:e0:2a:ed:16:aa:aa:d6:f6:69:8c:77:b4:1b:5c: e0:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:FF:C4:F3:42:92:EE:D4:00:BF:FE:2B:F2:5E:A9:45:CB:AE:87:A9 X509v3 Authority Key Identifier: keyid:FC:56:E7:E0:76:F7:FD:0A:84:BE:CC:9C:3E:22:91:42:A0:90:1F:EC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C93EE/6858F6880E0211EAA9B1DB65C4F9AE02/_Fbn4Hb3_QqEvsycPiKRQqCQH-w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_Fbn4Hb3_QqEvsycPiKRQqCQH-w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C93EE/6858F6880E0211EAA9B1DB65C4F9AE02/_Fbn4Hb3_QqEvsycPiKRQqCQH-w.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1e:94:ca:e7:8f:1c:ed:0f:50:f6:e1:b6:c8:ce:60:68:00:ab: 25:aa:44:7b:64:a3:2c:ac:8d:28:30:a5:0f:95:a2:78:bd:09: 21:63:c8:51:29:46:1b:05:4d:49:87:fe:8b:73:10:72:4a:68: 7e:00:a6:ae:f4:02:84:c9:7c:a1:4b:f0:5a:14:19:e7:8e:00: 31:12:fd:b2:66:9c:e8:a7:a0:6a:69:f7:dc:79:8f:64:b0:fe: dc:68:e7:af:9b:bc:6a:24:bc:e7:3f:57:ba:b7:1c:d7:58:d0: 7c:a7:51:98:5e:93:cb:05:bd:55:91:6c:68:49:e5:c7:63:1e: 49:7e:a0:60:69:b1:a8:64:4f:7c:63:d4:c3:13:b5:a2:21:cc: 47:0e:11:3b:ac:a7:ac:3f:b0:11:d3:fb:af:7e:90:ed:5c:e1: 5e:5d:5e:b7:89:ed:c9:6e:28:02:90:11:a7:73:b7:97:87:11: b7:e9:0e:a6:54:c0:b2:2e:f3:06:4f:e3:1c:a4:ee:b3:c0:4c: df:45:ed:cf:a2:53:03:c5:8c:32:b5:b4:f9:5a:51:5b:49:bc: df:65:27:1f:37:67:4b:00:0d:8b:7e:e5:4e:53:2a:4c:bd:b1: 13:7c:18:20:04:de:27:4f:11:09:66:3f:45:fe:61:f3:d5:00: 14:9b:08:c9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDOEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzkzRUUxMTAvBgNVBAUTKEZDNTZFN0UwNzZGN0ZEMEE4NEJFQ0M5QzNFMjI5MTQy QTA5MDFGRUMwHhcNMjUxMTA0MTgzOTE5WhcNMjUxMTExMTgzOTE5WjAYMRYwFAYD VQQDEw02OTBhNDg1Ny1jM2QxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAx4UogXeFdz5kyPkOXtvyKTOkyNWWmuTDk3r+WyeSbV9WrbOZtR3grS39ZpIq VbV3sx/gcftEYL9d9gXyjGdSL8zZJe3nKmp6I9Gzetbb00lDEoRCXxcySaPTSHQF NhEyK5BfRtdazsW0Y5eWvnSnQzx/C1wwlaCIUR4eC3DpBXxQGXwmIn3fmqMEUm0h 3h+kBlJ0VIOxQV9peOnW+Up99iCSY7D/OtcJUMsC5LHZScKRDBtKANFLwc3x9XCP reXcOb2z71wYzBWCfWbWv+td2+pn+Ip9IPACTTFpRRN9LajdiG18fcUPEBtYi0ZT 1A2G4CrtFqqq1vZpjHe0G1zg4QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCP/xPNC ku7UAL/+K/JeqUXLroepMB8GA1UdIwQYMBaAFPxW5+B29/0KhL7MnD4ikUKgkB/s MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDOTNFRS82ODU4RjY4ODBF MDIxMUVBQTlCMURCNjVDNEY5QUUwMi9fRmJuNEhiM19RcUV2c3ljUGlLUlFxQ1FI LXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL19GYm40SGIzX1FxRXZzeWNQaUtSUXFDUUgtdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD OTNFRS82ODU4RjY4ODBFMDIxMUVBQTlCMURCNjVDNEY5QUUwMi9fRmJuNEhiM19R cUV2c3ljUGlLUlFxQ1FILXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAelMrnjxztD1D24bbIzmBoAKslqkR7ZKMsrI0oMKUPlaJ4vQkhY8hR KUYbBU1Jh/6LcxBySmh+AKau9AKEyXyhS/BaFBnnjgAxEv2yZpzop6BqaffceY9k sP7caOevm7xqJLznP1e6txzXWNB8p1GYXpPLBb1VkWxoSeXHYx5JfqBgabGoZE98 Y9TDE7WiIcxHDhE7rKesP7AR0/uvfpDtXOFeXV63ie3JbigCkBGnc7eXhxG36Q6m VMCyLvMGT+McpO6zwEzfRe3PolMDxYwytbT5WlFbSbzfZScfN2dLAA2LfuVOUypM vbETfBggBN4nTxEJZj9F/mHz1QAUmwjJ -----END CERTIFICATE-----Generated at Wed Nov 5 21:12:46 2025 by rpki-client