$ rpki-client -vvf rpki.apnic.net/member_repository/A91D61DF/0D0C5F741C6611EE9A132B84C4F9AE02/Fb8hC3N4HVzAvpm9OdcLL-tOuGw.mft File: Fb8hC3N4HVzAvpm9OdcLL-tOuGw.mft (raw, json) Hash identifier: VGcUu/LlLYWRgmTM+evQickPrMVwvXFCOxNOjfl7eHw= Subject key identifier: 64:98:7B:38:5C:8D:FD:2C:E4:1D:4D:C4:0A:5E:23:A4:C8:F1:82:68 Authority key identifier: 15:BF:21:0B:73:78:1D:5C:C0:BE:99:BD:39:D7:0B:2F:EB:4E:B8:6C Certificate issuer: /CN=A91D61DF/serialNumber=15BF210B73781D5CC0BE99BD39D70B2FEB4EB86C Certificate serial: 01BE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fb8hC3N4HVzAvpm9OdcLL-tOuGw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D61DF/0D0C5F741C6611EE9A132B84C4F9AE02/Fb8hC3N4HVzAvpm9OdcLL-tOuGw.mft Manifest number: 01B8 Signing time: Mon 03 Nov 2025 03:05:49 +0000 Manifest this update: Mon 03 Nov 2025 03:05:48 +0000 Manifest next update: Mon 10 Nov 2025 03:05:48 +0000 Files and hashes: 1: Fb8hC3N4HVzAvpm9OdcLL-tOuGw.crl (hash: Hjd3mVKxMjzVpRKO2Umz3B6gjHbQwFv/xR/1jliEyzg=) 2: 1D52E8E860D711EEA524AE64C4F9AE02.roa (hash: GbdpkuqmY37s9wPgW3tN3BtEev3tZBJWQSfg/vR2zzo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D61DF/0D0C5F741C6611EE9A132B84C4F9AE02/Fb8hC3N4HVzAvpm9OdcLL-tOuGw.crl rsync://rpki.apnic.net/member_repository/A91D61DF/0D0C5F741C6611EE9A132B84C4F9AE02/Fb8hC3N4HVzAvpm9OdcLL-tOuGw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fb8hC3N4HVzAvpm9OdcLL-tOuGw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 03:05:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 446 (0x1be) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D61DF, serialNumber=15BF210B73781D5CC0BE99BD39D70B2FEB4EB86C Validity Not Before: Nov 3 03:05:48 2025 GMT Not After : Nov 10 03:05:48 2025 GMT Subject: CN=69081c0c-30a9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:01:ac:0d:e4:ad:c0:e9:13:12:aa:d2:42:28: 54:e2:37:3a:f5:ee:21:4b:31:f8:35:25:db:20:af: a2:db:fc:9d:1f:e8:ab:15:27:1a:c0:25:ea:18:4b: 5b:51:6e:54:bb:a8:24:cf:ab:b7:40:3f:0f:6b:08: ff:82:45:2e:ba:51:73:18:39:5a:dd:f7:71:5b:07: 63:2a:44:6e:d9:7b:d9:f8:67:c0:a3:c3:7f:ac:d2: dc:a1:ad:26:9b:03:c2:06:82:11:81:68:47:2d:94: 7d:43:b3:5a:50:2e:e1:c2:0c:0a:2b:76:bb:70:3f: a9:9b:a4:97:d9:e3:2f:ed:d0:98:b1:a3:eb:cc:5c: 78:0f:ef:bc:b2:3e:9d:2d:f6:46:e2:41:d4:d8:93: ab:42:a6:29:5a:3f:09:54:0d:4e:53:0a:fd:e8:45: 62:6a:dd:8e:d3:0a:6c:f0:f6:32:f7:9a:a3:76:6c: f8:b9:a0:9c:96:74:85:7f:39:13:f6:8a:0b:55:ed: 2a:02:b4:a9:42:6f:6a:46:f8:9e:6a:2d:d1:fd:4b: 96:77:19:96:a2:83:64:31:81:c2:db:b3:e8:6c:5e: 1f:e7:e7:af:9f:5d:8b:c0:52:15:60:10:3c:d3:88: ff:53:22:64:fe:d7:25:64:0e:ac:f2:eb:4f:88:9f: 11:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:98:7B:38:5C:8D:FD:2C:E4:1D:4D:C4:0A:5E:23:A4:C8:F1:82:68 X509v3 Authority Key Identifier: keyid:15:BF:21:0B:73:78:1D:5C:C0:BE:99:BD:39:D7:0B:2F:EB:4E:B8:6C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D61DF/0D0C5F741C6611EE9A132B84C4F9AE02/Fb8hC3N4HVzAvpm9OdcLL-tOuGw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fb8hC3N4HVzAvpm9OdcLL-tOuGw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D61DF/0D0C5F741C6611EE9A132B84C4F9AE02/Fb8hC3N4HVzAvpm9OdcLL-tOuGw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4a:c7:2b:68:ba:b5:b5:8f:db:d1:e1:6d:50:00:83:d4:7a:00: 47:b4:aa:75:0b:d9:e8:21:59:92:09:71:79:6c:19:0c:c8:2c: 35:91:dc:08:0d:59:3d:43:14:86:77:14:95:39:6d:1c:ab:bc: 5a:f8:a4:ee:43:3d:03:69:a1:83:34:ea:63:37:9b:88:d7:f4: 91:30:f8:ab:c2:c0:b7:f3:7c:0f:42:05:36:98:7a:da:50:8d: 8f:6d:c5:5b:9a:ce:56:74:da:8e:a3:7e:39:48:21:fe:3f:93: 0b:22:07:33:c1:35:f2:7d:9b:87:00:55:6d:c7:8d:42:a8:bb: 69:18:7c:39:9c:31:f6:80:b8:8c:69:30:9e:21:3f:d3:28:1f: d4:d7:bb:92:96:8f:59:91:3b:16:07:73:8d:2e:1c:36:2d:34: fc:9b:6d:ad:1d:89:37:2f:8e:77:29:af:dd:96:0d:40:a5:d6: e4:34:43:54:1c:b1:bb:f0:99:8e:c4:14:98:00:70:e8:2e:e0: 05:ff:d0:56:79:fa:28:f3:6d:76:41:2a:2f:db:e7:28:d3:82: 67:ff:ca:a9:c3:ce:0e:86:50:b4:9e:70:36:5d:fc:80:0d:94: 8f:ff:21:6a:a6:d5:bf:0e:ba:6f:14:71:12:c7:6e:c6:b8:e5: 78:d5:61:84 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAb4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDYxREYxMTAvBgNVBAUTKDE1QkYyMTBCNzM3ODFENUNDMEJFOTlCRDM5RDcwQjJG RUI0RUI4NkMwHhcNMjUxMTAzMDMwNTQ4WhcNMjUxMTEwMDMwNTQ4WjAYMRYwFAYD VQQDEw02OTA4MWMwYy0zMGE5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwQGsDeStwOkTEqrSQihU4jc69e4hSzH4NSXbIK+i2/ydH+irFScawCXqGEtb UW5Uu6gkz6u3QD8Pawj/gkUuulFzGDla3fdxWwdjKkRu2XvZ+GfAo8N/rNLcoa0m mwPCBoIRgWhHLZR9Q7NaUC7hwgwKK3a7cD+pm6SX2eMv7dCYsaPrzFx4D++8sj6d LfZG4kHU2JOrQqYpWj8JVA1OUwr96EViat2O0wps8PYy95qjdmz4uaCclnSFfzkT 9ooLVe0qArSpQm9qRvieai3R/UuWdxmWooNkMYHC27PobF4f5+evn12LwFIVYBA8 04j/UyJk/tclZA6s8utPiJ8RTwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGSYezhc jf0s5B1NxApeI6TI8YJoMB8GA1UdIwQYMBaAFBW/IQtzeB1cwL6ZvTnXCy/rTrhs MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENjFERi8wRDBDNUY3NDFD NjYxMUVFOUExMzJCODRDNEY5QUUwMi9GYjhoQzNONEhWekF2cG05T2RjTEwtdE91 R3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZiOGhDM040SFZ6QXZwbTlPZGNMTC10T3VHdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NjFERi8wRDBDNUY3NDFDNjYxMUVFOUExMzJCODRDNEY5QUUwMi9GYjhoQzNONEhW ekF2cG05T2RjTEwtdE91R3cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBKxytourW1j9vR4W1QAIPUegBHtKp1C9noIVmSCXF5bBkMyCw1kdwI DVk9QxSGdxSVOW0cq7xa+KTuQz0DaaGDNOpjN5uI1/SRMPirwsC383wPQgU2mHra UI2PbcVbms5WdNqOo345SCH+P5MLIgczwTXyfZuHAFVtx41CqLtpGHw5nDH2gLiM aTCeIT/TKB/U17uSlo9ZkTsWB3ONLhw2LTT8m22tHYk3L453Ka/dlg1ApdbkNENU HLG78JmOxBSYAHDoLuAF/9BWefoo8212QSov2+co04Jn/8qpw84OhlC0nnA2XfyA DZSP/yFqptW/DrpvFHESx27GuOV41WGE -----END CERTIFICATE-----Generated at Mon Nov 3 18:07:01 2025 by rpki-client