$ rpki-client -vvf rpki.apnic.net/member_repository/A91D9785/47DF9CEC56EC11E7BAD48D3BC4F9AE02/ft761lb9iDJvbfriSHAQWAQCo18.mft File: ft761lb9iDJvbfriSHAQWAQCo18.mft (raw, json) Hash identifier: U0kAGICDn/xbf4JqJBnR9sINyB+5BWby2Op+fYXxfoI= Subject key identifier: 92:A2:4D:F3:B0:DC:57:39:46:67:D5:1C:39:BE:67:90:5A:3A:A3:8C Authority key identifier: 7E:DE:FA:D6:56:FD:88:32:6F:6D:FA:E2:48:70:10:58:04:02:A3:5F Certificate issuer: /CN=A91D9785/serialNumber=7EDEFAD656FD88326F6DFAE2487010580402A35F Certificate serial: 1A61 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ft761lb9iDJvbfriSHAQWAQCo18.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D9785/47DF9CEC56EC11E7BAD48D3BC4F9AE02/ft761lb9iDJvbfriSHAQWAQCo18.mft Manifest number: 1A4C Signing time: Tue 04 Nov 2025 16:27:18 +0000 Manifest this update: Tue 04 Nov 2025 16:27:18 +0000 Manifest next update: Tue 11 Nov 2025 16:27:18 +0000 Files and hashes: 1: ft761lb9iDJvbfriSHAQWAQCo18.crl (hash: pKxcxdQnbzaRo0nw93XgiyQXNELfirpjLaOcyoHSKmw=) 2: CBCD905AA6E811EFB43BBB4EC4F9AE02.roa (hash: /HeNZUmasiA1sFyQ07qK6IR+x8tI1Ek4b4MMz3sVfn8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D9785/47DF9CEC56EC11E7BAD48D3BC4F9AE02/ft761lb9iDJvbfriSHAQWAQCo18.crl rsync://rpki.apnic.net/member_repository/A91D9785/47DF9CEC56EC11E7BAD48D3BC4F9AE02/ft761lb9iDJvbfriSHAQWAQCo18.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ft761lb9iDJvbfriSHAQWAQCo18.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 16:27:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6753 (0x1a61) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D9785, serialNumber=7EDEFAD656FD88326F6DFAE2487010580402A35F Validity Not Before: Nov 4 16:27:18 2025 GMT Not After : Nov 11 16:27:18 2025 GMT Subject: CN=690a2966-82ed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:4b:c8:5c:73:c5:2e:94:5c:6e:ba:54:fe:81: 5a:e5:fa:13:f3:0c:17:98:21:ab:e7:ec:7b:ee:1d: 82:92:16:73:14:79:98:78:45:4a:60:4e:f2:87:44: 7a:91:79:83:fb:f5:4c:24:7a:47:e4:39:bb:6d:9f: e5:10:f5:50:a1:1e:82:22:e1:dd:fd:92:58:95:20: 9b:18:a3:d2:cf:e6:8e:8d:f7:06:5f:96:35:21:3b: 5a:f0:9c:7c:05:d5:38:a3:7d:8c:ea:32:78:aa:28: 61:b6:3f:93:0f:3d:4b:da:0f:ea:7e:56:ba:c9:9d: c6:e6:66:8c:7c:56:dd:75:a7:b4:46:af:84:77:00: b5:3e:6f:ee:2a:bc:3e:5c:f2:32:82:54:e8:be:11: 7f:77:be:29:75:73:67:c4:34:e8:ec:c6:1a:10:50: 5a:78:85:7c:be:8c:61:2d:1e:e9:f7:44:38:b7:a8: 07:4d:f7:46:f5:35:6c:d4:a9:35:8e:50:5c:f9:cb: 73:f2:2b:1d:63:d8:fb:2b:b6:99:0b:03:55:23:6b: 0d:4f:cf:c9:9d:33:3b:d3:bb:3e:76:9a:c4:bc:d1: 75:0a:68:2f:c8:cb:22:97:46:31:13:26:f5:91:77: 29:44:c2:6b:fc:06:71:3c:9c:48:f0:4b:d4:6c:f8: f4:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:A2:4D:F3:B0:DC:57:39:46:67:D5:1C:39:BE:67:90:5A:3A:A3:8C X509v3 Authority Key Identifier: keyid:7E:DE:FA:D6:56:FD:88:32:6F:6D:FA:E2:48:70:10:58:04:02:A3:5F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D9785/47DF9CEC56EC11E7BAD48D3BC4F9AE02/ft761lb9iDJvbfriSHAQWAQCo18.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ft761lb9iDJvbfriSHAQWAQCo18.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D9785/47DF9CEC56EC11E7BAD48D3BC4F9AE02/ft761lb9iDJvbfriSHAQWAQCo18.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5b:d2:a2:cf:08:0b:63:48:00:c2:69:76:d1:09:cf:ee:8a:25: 4f:d8:81:93:02:07:4d:8b:71:50:af:38:22:1b:0a:a9:6c:a4: fa:05:97:5c:8d:9c:b3:88:1e:7e:3d:84:bd:61:f3:c7:6f:e2: 17:93:c0:6a:ed:4c:aa:b4:10:f3:25:f3:a0:4f:dc:cd:fc:b2: 55:f6:8a:ac:d5:8e:48:70:37:6f:28:41:c0:f8:6e:03:79:d6: f7:ed:a6:36:05:80:33:cc:3b:a0:6f:65:8c:7f:ab:5f:16:22: 74:ee:cb:f4:ee:0b:ae:cc:ec:a7:66:86:9a:29:98:50:c9:f6: 04:f9:6d:e1:02:e8:41:04:4b:bf:41:13:e2:78:f9:bd:21:f8: 28:9b:6a:52:a3:8f:aa:85:2b:63:83:e8:3f:92:ff:6e:73:a3: 44:64:d1:0b:20:a4:74:df:e4:d5:65:99:9a:95:ca:48:8a:ac: 9d:8c:fb:80:68:45:0b:cc:e8:74:5e:4a:8b:f2:ce:39:2b:1a: 24:29:84:97:94:91:56:4d:f3:da:92:a5:80:fa:d3:72:db:1e: 84:88:ae:e8:f0:9f:df:45:dc:c1:af:4c:ca:3c:f1:5a:72:fa: 79:d9:43:8c:55:88:9d:14:e7:93:95:3a:af:21:9c:ae:92:44: bc:21:6e:99 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICGmEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDk3ODUxMTAvBgNVBAUTKDdFREVGQUQ2NTZGRDg4MzI2RjZERkFFMjQ4NzAxMDU4 MDQwMkEzNUYwHhcNMjUxMTA0MTYyNzE4WhcNMjUxMTExMTYyNzE4WjAYMRYwFAYD VQQDEw02OTBhMjk2Ni04MmVkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3UvIXHPFLpRcbrpU/oFa5foT8wwXmCGr5+x77h2CkhZzFHmYeEVKYE7yh0R6 kXmD+/VMJHpH5Dm7bZ/lEPVQoR6CIuHd/ZJYlSCbGKPSz+aOjfcGX5Y1ITta8Jx8 BdU4o32M6jJ4qihhtj+TDz1L2g/qfla6yZ3G5maMfFbddae0Rq+EdwC1Pm/uKrw+ XPIyglTovhF/d74pdXNnxDTo7MYaEFBaeIV8voxhLR7p90Q4t6gHTfdG9TVs1Kk1 jlBc+ctz8isdY9j7K7aZCwNVI2sNT8/JnTM707s+dprEvNF1CmgvyMsil0YxEyb1 kXcpRMJr/AZxPJxI8EvUbPj0UwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJKiTfOw 3Fc5RmfVHDm+Z5BaOqOMMB8GA1UdIwQYMBaAFH7e+tZW/Ygyb2364khwEFgEAqNf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEOTc4NS80N0RGOUNFQzU2 RUMxMUU3QkFENDhEM0JDNEY5QUUwMi9mdDc2MWxiOWlESnZiZnJpU0hBUVdBUUNv MTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2Z0NzYxbGI5aURKdmJmcmlTSEFRV0FRQ28xOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE OTc4NS80N0RGOUNFQzU2RUMxMUU3QkFENDhEM0JDNEY5QUUwMi9mdDc2MWxiOWlE SnZiZnJpU0hBUVdBUUNvMTgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBb0qLPCAtjSADCaXbRCc/uiiVP2IGTAgdNi3FQrzgiGwqpbKT6BZdc jZyziB5+PYS9YfPHb+IXk8Bq7UyqtBDzJfOgT9zN/LJV9oqs1Y5IcDdvKEHA+G4D edb37aY2BYAzzDugb2WMf6tfFiJ07sv07guuzOynZoaaKZhQyfYE+W3hAuhBBEu/ QRPiePm9Ifgom2pSo4+qhStjg+g/kv9uc6NEZNELIKR03+TVZZmalcpIiqydjPuA aEULzOh0XkqL8s45KxokKYSXlJFWTfPakqWA+tNy2x6EiK7o8J/fRdzBr0zKPPFa cvp52UOMVYidFOeTlTqvIZyukkS8IW6Z -----END CERTIFICATE-----Generated at Wed Nov 5 19:28:45 2025 by rpki-client