$ rpki-client -vvf rpki.apnic.net/member_repository/A91C96A7/26E74996577F11E98E90CA18C4F9AE02/fcVok9o1SD_ZCU3wNQTeIXtuOzs.mft File: fcVok9o1SD_ZCU3wNQTeIXtuOzs.mft (raw, json) Hash identifier: LhKKUdxfI0eW4eSWJO3VGzLLUo8yaJb5c0/4uzTtI1Q= Subject key identifier: F5:40:0C:59:17:3B:D5:DA:98:D6:19:40:A0:18:C8:F9:72:57:4F:09 Authority key identifier: 7D:C5:68:93:DA:35:48:3F:D9:09:4D:F0:35:04:DE:21:7B:6E:3B:3B Certificate issuer: /CN=A91C96A7/serialNumber=7DC56893DA35483FD9094DF03504DE217B6E3B3B Certificate serial: 1019 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fcVok9o1SD_ZCU3wNQTeIXtuOzs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C96A7/26E74996577F11E98E90CA18C4F9AE02/fcVok9o1SD_ZCU3wNQTeIXtuOzs.mft Manifest number: 100C Signing time: Sun 02 Nov 2025 17:28:36 +0000 Manifest this update: Sun 02 Nov 2025 17:28:35 +0000 Manifest next update: Sun 09 Nov 2025 17:28:35 +0000 Files and hashes: 1: fcVok9o1SD_ZCU3wNQTeIXtuOzs.crl (hash: Y3FuQn7b9qky491CcUWGnSOouQIvuKB6w5g5L6Kp55k=) 2: 1BB9CAB6578011E99E80631AC4F9AE02.roa (hash: frN4lZuv4ZlRLTeZDqpWstvGTNjkjq8jINytoj03BxI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C96A7/26E74996577F11E98E90CA18C4F9AE02/fcVok9o1SD_ZCU3wNQTeIXtuOzs.crl rsync://rpki.apnic.net/member_repository/A91C96A7/26E74996577F11E98E90CA18C4F9AE02/fcVok9o1SD_ZCU3wNQTeIXtuOzs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fcVok9o1SD_ZCU3wNQTeIXtuOzs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 17:28:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4121 (0x1019) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C96A7, serialNumber=7DC56893DA35483FD9094DF03504DE217B6E3B3B Validity Not Before: Nov 2 17:28:35 2025 GMT Not After : Nov 9 17:28:35 2025 GMT Subject: CN=690794c3-d0d4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:e2:d1:8b:d5:45:5b:5c:ba:89:da:27:dd:d3: 92:79:4d:45:05:28:54:99:4a:df:f1:95:50:61:04: e9:36:20:12:f8:c1:76:38:fd:5c:eb:59:ac:b5:d0: 3f:db:c8:9e:98:19:3e:a2:e9:2d:8d:40:42:21:89: d3:e4:3d:14:2d:13:73:a1:26:de:0c:41:5e:72:c5: b9:7f:d5:0a:56:36:17:5f:7e:fa:08:cd:65:71:fc: 54:ba:75:0e:4f:8b:90:8a:18:1d:6e:a3:69:80:1f: 9d:c7:61:a0:24:9f:09:84:cb:93:93:59:fa:e4:13: 70:aa:bd:f3:d3:ab:5b:6a:6d:fc:3c:06:8b:48:3b: 6f:aa:4f:b8:ee:de:1c:ef:03:cc:59:1b:22:f7:0b: 5d:63:97:96:50:42:ba:ef:a5:33:d0:9d:09:cb:e3: 13:09:c8:d4:12:2a:17:34:ee:c9:7c:69:5b:17:32: fa:84:a4:38:8c:5b:33:57:49:36:91:b3:62:a7:62: 8a:12:da:b3:c8:a0:93:7d:8d:ac:41:e5:cb:1c:29: f1:8b:a3:c8:bb:06:16:c1:0f:9c:5f:9a:6a:e0:d9: c3:0a:eb:16:d6:0c:d5:b0:05:63:2e:e2:84:f1:4b: 78:c3:e3:71:b5:68:55:d4:6b:27:dd:20:33:a2:62: 74:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:40:0C:59:17:3B:D5:DA:98:D6:19:40:A0:18:C8:F9:72:57:4F:09 X509v3 Authority Key Identifier: keyid:7D:C5:68:93:DA:35:48:3F:D9:09:4D:F0:35:04:DE:21:7B:6E:3B:3B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C96A7/26E74996577F11E98E90CA18C4F9AE02/fcVok9o1SD_ZCU3wNQTeIXtuOzs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fcVok9o1SD_ZCU3wNQTeIXtuOzs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C96A7/26E74996577F11E98E90CA18C4F9AE02/fcVok9o1SD_ZCU3wNQTeIXtuOzs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 36:bc:75:38:6c:ac:92:4d:c9:aa:c2:be:80:21:fd:e6:39:e1: 56:09:63:35:19:72:10:67:58:a1:f5:7e:78:82:70:86:18:8c: ba:63:0f:84:1e:fe:f8:16:ed:07:7e:bd:f2:19:21:fe:dc:db: 28:9c:08:d0:3e:62:72:ff:3d:df:ca:0a:78:4d:ef:6c:49:fa: 6a:7d:fd:59:90:f7:1e:33:64:1a:6e:06:46:63:08:32:cc:4c: dc:4e:72:95:ca:96:d6:07:a5:f4:6e:76:ff:09:22:6a:f9:64: b1:6f:e2:0d:80:02:58:b5:66:4b:42:03:ff:1f:48:e0:7d:8f: b6:b0:f5:f4:ec:77:b5:2b:8f:48:60:8e:8e:8b:b2:9d:c9:60: 92:bb:68:00:c4:6c:b9:b3:6b:7b:3a:06:82:58:96:2f:bc:a8: 3e:2e:98:07:17:1e:87:e1:f6:2c:a7:70:11:a8:12:6e:21:70: e6:6f:3a:be:7c:cd:a2:63:88:00:ba:80:09:c8:18:b3:00:76: ff:a4:da:49:43:e6:cc:95:03:75:bf:9b:cc:94:be:82:84:ee: c3:bf:c1:f0:e2:30:0d:12:84:a9:25:bc:7c:37:65:75:20:a7: 38:9f:46:30:7f:f5:43:cc:38:0e:d2:9d:32:28:f6:b4:a4:eb: c6:50:0d:6e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEBkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Qzk2QTcxMTAvBgNVBAUTKDdEQzU2ODkzREEzNTQ4M0ZEOTA5NERGMDM1MDRERTIx N0I2RTNCM0IwHhcNMjUxMTAyMTcyODM1WhcNMjUxMTA5MTcyODM1WjAYMRYwFAYD VQQDEw02OTA3OTRjMy1kMGQ0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAz+LRi9VFW1y6idon3dOSeU1FBShUmUrf8ZVQYQTpNiAS+MF2OP1c61mstdA/ 28iemBk+ouktjUBCIYnT5D0ULRNzoSbeDEFecsW5f9UKVjYXX376CM1lcfxUunUO T4uQihgdbqNpgB+dx2GgJJ8JhMuTk1n65BNwqr3z06tbam38PAaLSDtvqk+47t4c 7wPMWRsi9wtdY5eWUEK676Uz0J0Jy+MTCcjUEioXNO7JfGlbFzL6hKQ4jFszV0k2 kbNip2KKEtqzyKCTfY2sQeXLHCnxi6PIuwYWwQ+cX5pq4NnDCusW1gzVsAVjLuKE 8Ut4w+NxtWhV1Gsn3SAzomJ0cwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPVADFkX O9XamNYZQKAYyPlyV08JMB8GA1UdIwQYMBaAFH3FaJPaNUg/2QlN8DUE3iF7bjs7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDOTZBNy8yNkU3NDk5NjU3 N0YxMUU5OEU5MENBMThDNEY5QUUwMi9mY1ZvazlvMVNEX1pDVTN3TlFUZUlYdHVP enMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ZjVm9rOW8xU0RfWkNVM3dOUVRlSVh0dU96cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD OTZBNy8yNkU3NDk5NjU3N0YxMUU5OEU5MENBMThDNEY5QUUwMi9mY1ZvazlvMVNE X1pDVTN3TlFUZUlYdHVPenMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA2vHU4bKySTcmqwr6AIf3mOeFWCWM1GXIQZ1ih9X54gnCGGIy6Yw+E Hv74Fu0Hfr3yGSH+3NsonAjQPmJy/z3fygp4Te9sSfpqff1ZkPceM2QabgZGYwgy zEzcTnKVypbWB6X0bnb/CSJq+WSxb+INgAJYtWZLQgP/H0jgfY+2sPX07He1K49I YI6Oi7KdyWCSu2gAxGy5s2t7OgaCWJYvvKg+LpgHFx6H4fYsp3ARqBJuIXDmbzq+ fM2iY4gAuoAJyBizAHb/pNpJQ+bMlQN1v5vMlL6ChO7Dv8Hw4jANEoSpJbx8N2V1 IKc4n0Ywf/VDzDgO0p0yKPa0pOvGUA1u -----END CERTIFICATE-----Generated at Mon Nov 3 18:08:09 2025 by rpki-client