$ rpki-client -vvf rpki.apnic.net/member_repository/A91CE4A1/85FA0CE880B711EC9FEB2C67C4F9AE02/FUc--zxa6KDEdke34P3liGtrH6M.mft File: FUc--zxa6KDEdke34P3liGtrH6M.mft (raw, json) Hash identifier: D0asxXgDzE3PZqh7IDkpjPVTXgbV2nVY0jxtBA6Cdxc= Subject key identifier: DD:C6:99:CF:43:7D:83:65:16:23:80:38:FE:63:10:3F:15:B4:22:F1 Authority key identifier: 15:47:3E:FB:3C:5A:E8:A0:C4:76:47:B7:E0:FD:E5:88:6B:6B:1F:A3 Certificate issuer: /CN=A91CE4A1/serialNumber=15473EFB3C5AE8A0C47647B7E0FDE5886B6B1FA3 Certificate serial: 0450 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FUc--zxa6KDEdke34P3liGtrH6M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CE4A1/85FA0CE880B711EC9FEB2C67C4F9AE02/FUc--zxa6KDEdke34P3liGtrH6M.mft Manifest number: 0442 Signing time: Mon 03 Nov 2025 00:16:04 +0000 Manifest this update: Mon 03 Nov 2025 00:16:03 +0000 Manifest next update: Mon 10 Nov 2025 00:16:03 +0000 Files and hashes: 1: FUc--zxa6KDEdke34P3liGtrH6M.crl (hash: cIymjhjjw3xY6+O56+Nx8+nsJc0NQOuQd7MfnH6f2KY=) 2: 2D81FF3680BB11EC8FD7663DC4F9AE02.roa (hash: 93hMZoZD1IeR9WgZB4O3EInu2uvTAMcqxAyD5/FgSlQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CE4A1/85FA0CE880B711EC9FEB2C67C4F9AE02/FUc--zxa6KDEdke34P3liGtrH6M.crl rsync://rpki.apnic.net/member_repository/A91CE4A1/85FA0CE880B711EC9FEB2C67C4F9AE02/FUc--zxa6KDEdke34P3liGtrH6M.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FUc--zxa6KDEdke34P3liGtrH6M.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 00:16:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1104 (0x450) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CE4A1, serialNumber=15473EFB3C5AE8A0C47647B7E0FDE5886B6B1FA3 Validity Not Before: Nov 3 00:16:03 2025 GMT Not After : Nov 10 00:16:03 2025 GMT Subject: CN=6907f443-70ed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:8d:6b:fa:cf:5b:96:30:8b:fb:40:61:25:e7: c8:bb:58:b7:8a:24:40:f4:76:2a:e7:99:85:e2:7d: 35:bf:2e:8b:60:d1:97:d9:29:02:e8:f5:8e:13:0a: 86:61:73:c2:e9:3c:85:3d:70:31:5a:48:a1:36:92: 17:9f:21:8a:48:01:6c:d2:6b:a0:93:7d:56:70:c8: 20:51:8a:c5:c4:51:fa:4c:32:f9:9c:5b:bb:19:15: 11:35:4e:1f:df:74:68:fc:a7:09:f0:39:95:82:09: 23:be:67:14:f9:8e:42:af:e7:3a:05:da:c8:55:03: 8b:aa:9e:d5:df:b5:f1:4a:ff:c5:45:64:f7:9e:51: f8:53:e8:5d:65:18:0e:18:4d:dc:5d:4b:25:49:76: 50:32:f8:9d:2a:72:62:cc:43:cf:11:e5:95:7b:12: 3f:96:2f:fd:1b:4f:f2:b2:85:40:61:f3:b6:f7:7e: aa:7e:c3:8f:bd:19:69:a7:7c:e0:7a:c3:d9:91:c6: 49:0f:e7:28:8c:78:10:9c:c7:4d:5a:d3:b5:eb:a2: c9:f2:c3:9d:22:7b:6f:b6:9f:22:9e:b6:f7:16:0a: d4:96:4a:8c:56:9b:a9:f0:fb:29:e5:b8:f5:c4:49: 45:c5:ab:73:05:06:c2:ee:16:eb:60:92:1e:73:bf: 0f:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:C6:99:CF:43:7D:83:65:16:23:80:38:FE:63:10:3F:15:B4:22:F1 X509v3 Authority Key Identifier: keyid:15:47:3E:FB:3C:5A:E8:A0:C4:76:47:B7:E0:FD:E5:88:6B:6B:1F:A3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CE4A1/85FA0CE880B711EC9FEB2C67C4F9AE02/FUc--zxa6KDEdke34P3liGtrH6M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FUc--zxa6KDEdke34P3liGtrH6M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CE4A1/85FA0CE880B711EC9FEB2C67C4F9AE02/FUc--zxa6KDEdke34P3liGtrH6M.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 91:c9:c9:79:fa:d0:d9:22:c6:12:83:82:6c:bf:0e:7a:58:65: b3:45:7a:a5:8a:50:00:c2:54:0a:93:e9:90:ae:f8:9d:c0:b2: 5f:1b:39:56:2e:e9:a3:b9:b7:bb:7e:42:d3:2f:d3:4c:f7:e8: 59:9f:95:eb:e8:e1:d2:2a:35:c5:76:e6:04:e5:29:4f:8e:9f: 23:e9:82:b0:63:d2:04:9c:e0:bc:51:d7:6b:e3:36:49:80:c9: 8d:98:c8:3c:ba:7d:06:99:af:93:8f:9f:ae:bf:d0:7e:c0:ce: bc:e2:6d:01:51:d1:17:40:9c:0a:04:1b:ef:9f:43:96:df:3c: 9d:e6:df:08:86:c2:42:fd:6f:25:8a:43:c4:17:f0:cb:7f:7b: ef:ab:f4:72:60:ce:6a:2d:af:f1:37:cd:b7:30:f3:fe:0f:8a: 72:43:b5:95:89:3c:45:6a:1a:52:0e:b9:36:ac:cf:43:4e:06: e7:ec:18:8e:d4:05:4a:a5:c7:ef:45:7e:4e:ce:c7:a9:c5:56: 70:80:f6:79:15:ca:ee:b7:f1:a4:b0:4e:09:83:5d:8e:d1:3f: f2:ca:38:c3:57:36:39:a2:b7:b8:f9:0f:16:f8:6f:6f:8a:1a: 56:62:60:36:25:97:56:7f:f0:a6:46:75:d3:21:98:83:72:8a: f6:9c:a7:57 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBFAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0U0QTExMTAvBgNVBAUTKDE1NDczRUZCM0M1QUU4QTBDNDc2NDdCN0UwRkRFNTg4 NkI2QjFGQTMwHhcNMjUxMTAzMDAxNjAzWhcNMjUxMTEwMDAxNjAzWjAYMRYwFAYD VQQDEw02OTA3ZjQ0My03MGVkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1I1r+s9bljCL+0BhJefIu1i3iiRA9HYq55mF4n01vy6LYNGX2SkC6PWOEwqG YXPC6TyFPXAxWkihNpIXnyGKSAFs0mugk31WcMggUYrFxFH6TDL5nFu7GRURNU4f 33Ro/KcJ8DmVggkjvmcU+Y5Cr+c6BdrIVQOLqp7V37XxSv/FRWT3nlH4U+hdZRgO GE3cXUslSXZQMvidKnJizEPPEeWVexI/li/9G0/ysoVAYfO2936qfsOPvRlpp3zg esPZkcZJD+cojHgQnMdNWtO166LJ8sOdIntvtp8inrb3FgrUlkqMVpup8Psp5bj1 xElFxatzBQbC7hbrYJIec78PNwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFN3Gmc9D fYNlFiOAOP5jED8VtCLxMB8GA1UdIwQYMBaAFBVHPvs8WuigxHZHt+D95Yhrax+j MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRTRBMS84NUZBMENFODgw QjcxMUVDOUZFQjJDNjdDNEY5QUUwMi9GVWMtLXp4YTZLREVka2UzNFAzbGlHdHJI Nk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZVYy0tenhhNktERWRrZTM0UDNsaUd0ckg2TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RTRBMS84NUZBMENFODgwQjcxMUVDOUZFQjJDNjdDNEY5QUUwMi9GVWMtLXp4YTZL REVka2UzNFAzbGlHdHJINk0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCRycl5+tDZIsYSg4Jsvw56WGWzRXqlilAAwlQKk+mQrvidwLJfGzlW Lumjube7fkLTL9NM9+hZn5Xr6OHSKjXFduYE5SlPjp8j6YKwY9IEnOC8Uddr4zZJ gMmNmMg8un0Gma+Tj5+uv9B+wM684m0BUdEXQJwKBBvvn0OW3zyd5t8IhsJC/W8l ikPEF/DLf3vvq/RyYM5qLa/xN823MPP+D4pyQ7WViTxFahpSDrk2rM9DTgbn7BiO 1AVKpcfvRX5OzsepxVZwgPZ5Fcrut/GksE4Jg12O0T/yyjjDVzY5ore4+Q8W+G9v ihpWYmA2JZdWf/CmRnXTIZiDcor2nKdX -----END CERTIFICATE-----Generated at Mon Nov 3 18:17:21 2025 by rpki-client