$ rpki-client -vvf rpki.apnic.net/member_repository/A91D34D0/F5403EF245B711EFA3D9A049C4F9AE02/Fq85Z82e72n-cs9m28bg-wDKONQ.mft File: Fq85Z82e72n-cs9m28bg-wDKONQ.mft (raw, json) Hash identifier: dupVx0wwtbq2dMJz5iuc1FRXpjfkcTiMAmZwR325sP0= Subject key identifier: 2E:E9:46:D8:8D:2F:8D:AC:3F:3A:69:AF:94:40:BC:D2:6B:2C:FF:59 Authority key identifier: 16:AF:39:67:CD:9E:EF:69:FE:72:CF:66:DB:C6:E0:FB:00:CA:38:D4 Certificate issuer: /CN=A91D34D0/serialNumber=16AF3967CD9EEF69FE72CF66DBC6E0FB00CA38D4 Certificate serial: F1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fq85Z82e72n-cs9m28bg-wDKONQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D34D0/F5403EF245B711EFA3D9A049C4F9AE02/Fq85Z82e72n-cs9m28bg-wDKONQ.mft Manifest number: F1 Signing time: Mon 03 Nov 2025 05:16:18 +0000 Manifest this update: Mon 03 Nov 2025 05:16:17 +0000 Manifest next update: Mon 10 Nov 2025 05:16:17 +0000 Files and hashes: 1: Fq85Z82e72n-cs9m28bg-wDKONQ.crl (hash: DaITIpYFYdiK9/LAiNkKcwtShCc/ZxD1u8eDVImUIw4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D34D0/F5403EF245B711EFA3D9A049C4F9AE02/Fq85Z82e72n-cs9m28bg-wDKONQ.crl rsync://rpki.apnic.net/member_repository/A91D34D0/F5403EF245B711EFA3D9A049C4F9AE02/Fq85Z82e72n-cs9m28bg-wDKONQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fq85Z82e72n-cs9m28bg-wDKONQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 05:16:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 241 (0xf1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D34D0, serialNumber=16AF3967CD9EEF69FE72CF66DBC6E0FB00CA38D4 Validity Not Before: Nov 3 05:16:17 2025 GMT Not After : Nov 10 05:16:17 2025 GMT Subject: CN=69083aa1-95af Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:f6:2b:7e:11:63:ef:66:1a:a1:e8:1a:ba:62: ff:aa:bf:82:27:36:76:0e:f4:07:59:42:d5:99:96: 34:1b:d7:b5:86:61:dc:8a:3f:3c:4f:e2:15:b1:ac: 3f:6d:07:b0:fb:c6:8e:d5:ee:ab:a3:3d:82:f6:4d: dd:ec:47:fd:c5:ab:91:1b:f9:5a:d1:99:b1:21:0f: 7c:cd:c5:d7:85:fc:35:f2:00:a3:d1:3e:99:d6:65: 63:0b:6a:a6:93:ae:fb:0f:fc:20:cd:bd:0e:11:fe: a5:1a:ec:cf:14:ad:ad:56:b7:20:d0:8f:17:d4:59: 95:e9:d5:6a:a8:89:51:9c:9f:17:9b:6f:e8:21:74: ff:03:b8:40:1d:17:4b:7a:c6:8f:68:e0:2b:1b:f8: 68:46:cf:93:3e:cf:49:d9:81:c1:a3:d2:cb:4b:95: ce:ab:a3:5a:f8:b7:b2:05:3a:03:8a:f2:e3:03:2e: 7d:38:14:07:6e:18:f2:ed:c6:4b:b1:e2:ce:88:64: ec:61:ea:e2:6c:ba:32:8a:df:09:36:ae:a8:ed:3a: 1f:2d:f0:45:16:7a:dd:ee:86:e8:43:1c:f9:a6:c8: 8f:a5:ba:32:4b:70:e5:02:53:cd:81:69:55:5d:7b: cd:8b:b4:8b:73:c9:d9:8c:c0:85:25:5e:08:69:88: 9f:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:E9:46:D8:8D:2F:8D:AC:3F:3A:69:AF:94:40:BC:D2:6B:2C:FF:59 X509v3 Authority Key Identifier: keyid:16:AF:39:67:CD:9E:EF:69:FE:72:CF:66:DB:C6:E0:FB:00:CA:38:D4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D34D0/F5403EF245B711EFA3D9A049C4F9AE02/Fq85Z82e72n-cs9m28bg-wDKONQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fq85Z82e72n-cs9m28bg-wDKONQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D34D0/F5403EF245B711EFA3D9A049C4F9AE02/Fq85Z82e72n-cs9m28bg-wDKONQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a3:56:ad:3c:2d:d4:b1:bc:ff:42:3a:b6:c0:0c:45:80:e2:ab: db:86:8a:44:d3:34:3c:2e:ec:5a:5e:98:9b:f7:25:39:4d:7d: 35:bb:22:df:88:80:ff:91:6c:86:32:ed:c8:50:95:7d:04:c2: 20:9d:4e:05:0e:8e:62:b5:ab:15:b4:2b:83:f9:67:0f:f5:d6: e2:18:47:b3:92:59:8a:92:3e:f6:ef:d0:fc:9d:e1:d6:b8:53: 71:7a:01:c1:8e:42:a4:0f:c3:cf:07:45:df:cd:a6:de:ec:5a: c9:84:95:46:8d:77:8c:5e:2c:99:55:cf:f2:2e:82:dd:5d:8e: 5b:71:28:67:39:6d:06:7e:ee:4a:5f:23:04:71:c4:d0:8e:1a: 48:b6:78:86:30:42:25:f8:47:41:c4:07:12:da:1f:52:ef:da: 4e:c9:8f:39:ac:f6:fe:ac:46:47:3a:15:04:b2:12:ac:7d:a1: 5e:43:6e:30:94:4a:1f:b0:a8:08:a8:dc:c9:62:28:e3:86:58: 53:98:bc:42:22:6d:37:bc:e4:8c:60:f0:bd:c9:61:53:ed:be: 9c:d4:9a:e0:a1:f0:18:9c:4f:51:e5:ff:9d:0d:3c:ca:bb:5d: 52:b9:ed:48:c2:88:4a:83:a4:9e:b7:0c:99:7b:82:29:78:9f: 5f:04:9c:ed -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAPEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDM0RDAxMTAvBgNVBAUTKDE2QUYzOTY3Q0Q5RUVGNjlGRTcyQ0Y2NkRCQzZFMEZC MDBDQTM4RDQwHhcNMjUxMTAzMDUxNjE3WhcNMjUxMTEwMDUxNjE3WjAYMRYwFAYD VQQDEw02OTA4M2FhMS05NWFmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzfYrfhFj72YaoegaumL/qr+CJzZ2DvQHWULVmZY0G9e1hmHcij88T+IVsaw/ bQew+8aO1e6roz2C9k3d7Ef9xauRG/la0ZmxIQ98zcXXhfw18gCj0T6Z1mVjC2qm k677D/wgzb0OEf6lGuzPFK2tVrcg0I8X1FmV6dVqqIlRnJ8Xm2/oIXT/A7hAHRdL esaPaOArG/hoRs+TPs9J2YHBo9LLS5XOq6Na+LeyBToDivLjAy59OBQHbhjy7cZL seLOiGTsYeribLoyit8JNq6o7TofLfBFFnrd7oboQxz5psiPpboyS3DlAlPNgWlV XXvNi7SLc8nZjMCFJV4IaYif4wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFC7pRtiN L42sPzppr5RAvNJrLP9ZMB8GA1UdIwQYMBaAFBavOWfNnu9p/nLPZtvG4PsAyjjU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMzREMC9GNTQwM0VGMjQ1 QjcxMUVGQTNEOUEwNDlDNEY5QUUwMi9GcTg1WjgyZTcybi1jczltMjhiZy13REtP TlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZxODVaODJlNzJuLWNzOW0yOGJnLXdES09OUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MzREMC9GNTQwM0VGMjQ1QjcxMUVGQTNEOUEwNDlDNEY5QUUwMi9GcTg1WjgyZTcy bi1jczltMjhiZy13REtPTlEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCjVq08LdSxvP9COrbADEWA4qvbhopE0zQ8LuxaXpib9yU5TX01uyLf iID/kWyGMu3IUJV9BMIgnU4FDo5itasVtCuD+WcP9dbiGEezklmKkj7279D8neHW uFNxegHBjkKkD8PPB0Xfzabe7FrJhJVGjXeMXiyZVc/yLoLdXY5bcShnOW0Gfu5K XyMEccTQjhpItniGMEIl+EdBxAcS2h9S79pOyY85rPb+rEZHOhUEshKsfaFeQ24w lEofsKgIqNzJYijjhlhTmLxCIm03vOSMYPC9yWFT7b6c1JrgofAYnE9R5f+dDTzK u11Sue1IwohKg6SetwyZe4IpeJ9fBJzt -----END CERTIFICATE-----Generated at Mon Nov 3 18:17:14 2025 by rpki-client