$ rpki-client -vvf rpki.apnic.net/member_repository/A91DDCD9/410BBC144E6C11EA89049747C4F9AE02/FnnqBmaD8qFVDecPRYQy3RqDJw8.mft File: FnnqBmaD8qFVDecPRYQy3RqDJw8.mft (raw, json) Hash identifier: P6FsL7cMJJ9HLzLSr3gcO/0gr0RbGtD4tAIn08xW+tw= Subject key identifier: 96:29:F6:DB:E3:E1:F8:8D:33:AE:61:05:1F:F8:57:E3:5E:1E:19:85 Authority key identifier: 16:79:EA:06:66:83:F2:A1:55:0D:E7:0F:45:84:32:DD:1A:83:27:0F Certificate issuer: /CN=A91DDCD9/serialNumber=1679EA066683F2A1550DE70F458432DD1A83270F Certificate serial: 0B38 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FnnqBmaD8qFVDecPRYQy3RqDJw8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DDCD9/410BBC144E6C11EA89049747C4F9AE02/FnnqBmaD8qFVDecPRYQy3RqDJw8.mft Manifest number: 0B36 Signing time: Tue 04 Nov 2025 19:24:05 +0000 Manifest this update: Tue 04 Nov 2025 19:24:05 +0000 Manifest next update: Tue 11 Nov 2025 19:24:05 +0000 Files and hashes: 1: FnnqBmaD8qFVDecPRYQy3RqDJw8.crl (hash: TECDVJKiEIv9RxUEahe+vd9ZhlVNN6R3XqoDrB+gKh4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DDCD9/410BBC144E6C11EA89049747C4F9AE02/FnnqBmaD8qFVDecPRYQy3RqDJw8.crl rsync://rpki.apnic.net/member_repository/A91DDCD9/410BBC144E6C11EA89049747C4F9AE02/FnnqBmaD8qFVDecPRYQy3RqDJw8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FnnqBmaD8qFVDecPRYQy3RqDJw8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 19:24:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2872 (0xb38) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DDCD9, serialNumber=1679EA066683F2A1550DE70F458432DD1A83270F Validity Not Before: Nov 4 19:24:05 2025 GMT Not After : Nov 11 19:24:05 2025 GMT Subject: CN=690a52d5-7429 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:4c:cc:eb:ae:24:68:39:cf:ee:6d:a7:c1:45: 73:95:13:de:de:bb:a9:c7:c1:e5:c3:ba:f0:fb:ec: cf:d7:6f:3d:26:2b:d4:f4:5b:c3:98:fa:71:d0:cc: 31:29:b5:25:5c:81:a7:4e:11:fd:8b:61:d6:e5:ca: 09:d3:cd:2e:4b:a7:2c:98:7d:5d:79:5f:b5:19:22: b5:d0:74:83:54:16:d4:e0:8d:71:95:88:87:9a:07: 2c:44:59:ef:5d:d0:50:f5:26:8d:ce:05:e7:86:b1: 2c:33:41:e6:4b:a7:d2:75:85:cf:e1:ba:5e:27:83: c1:50:fe:71:c1:75:ce:20:09:e4:96:29:3c:87:01: 5e:f0:1f:87:6e:96:3d:08:4f:5f:8c:7a:99:63:02: 5a:5b:02:97:60:81:a2:b1:85:6a:f3:90:72:28:49: 0d:37:e8:ae:c1:24:4f:47:2b:04:75:b6:d4:6b:c6: 9b:a0:20:be:e9:13:c8:c7:af:a1:af:24:12:66:e0: 76:d2:c8:97:26:f8:a6:e9:da:c3:82:6b:7b:cd:88: b4:9d:a2:77:e4:a5:ca:e5:8a:17:eb:1a:34:f6:88: 2c:f6:cc:56:8e:d2:13:54:83:03:ce:a8:87:d7:99: 2d:04:43:2a:57:39:17:c5:58:8b:79:54:c2:e5:ca: b3:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:29:F6:DB:E3:E1:F8:8D:33:AE:61:05:1F:F8:57:E3:5E:1E:19:85 X509v3 Authority Key Identifier: keyid:16:79:EA:06:66:83:F2:A1:55:0D:E7:0F:45:84:32:DD:1A:83:27:0F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DDCD9/410BBC144E6C11EA89049747C4F9AE02/FnnqBmaD8qFVDecPRYQy3RqDJw8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FnnqBmaD8qFVDecPRYQy3RqDJw8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DDCD9/410BBC144E6C11EA89049747C4F9AE02/FnnqBmaD8qFVDecPRYQy3RqDJw8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3b:21:6e:00:da:d7:3b:37:26:d3:d7:c3:5b:5b:fb:cc:da:91: 71:0b:b7:08:9a:9f:43:d1:e6:16:bb:28:c5:4e:f9:07:b6:9e: e6:91:9c:e3:b1:88:d8:ac:5f:db:9b:e7:8b:4e:00:e9:72:2c: 0c:84:76:2e:58:7f:21:31:6a:0e:da:bc:82:f5:82:a3:9a:30: 29:84:79:46:7f:cd:b9:27:40:b7:36:87:7d:0f:30:61:6f:06: 42:05:ee:00:52:76:cb:19:57:2a:40:b8:07:97:95:16:62:f5: fc:44:31:c4:7f:77:58:b5:b6:db:5f:d3:f5:e4:2a:74:10:ce: 0f:fb:2a:d7:e1:16:b7:e3:26:a8:1d:cf:79:38:ea:a4:68:dd: 8e:b9:fb:1e:d3:c5:3a:a0:5e:c8:ac:90:aa:8a:e3:81:c1:e8: 20:90:2f:e7:12:47:1a:48:34:b5:29:20:af:0b:f3:13:2d:a0: b0:f8:a4:71:e1:68:2d:cc:d4:0b:26:a1:cb:9a:7b:02:8b:90: fc:cb:c7:00:e4:70:66:d9:c9:16:69:a0:99:2a:a3:65:11:7c: 1f:33:df:a0:ae:07:4c:c2:4b:52:3f:9d:04:ea:d6:d1:27:bd: 0d:77:ee:9f:13:c4:0a:3d:b7:96:d1:71:67:5a:98:f7:41:51: bd:48:cb:65 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCzgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RERDRDkxMTAvBgNVBAUTKDE2NzlFQTA2NjY4M0YyQTE1NTBERTcwRjQ1ODQzMkRE MUE4MzI3MEYwHhcNMjUxMTA0MTkyNDA1WhcNMjUxMTExMTkyNDA1WjAYMRYwFAYD VQQDEw02OTBhNTJkNS03NDI5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2UzM664kaDnP7m2nwUVzlRPe3rupx8Hlw7rw++zP1289JivU9FvDmPpx0Mwx KbUlXIGnThH9i2HW5coJ080uS6csmH1deV+1GSK10HSDVBbU4I1xlYiHmgcsRFnv XdBQ9SaNzgXnhrEsM0HmS6fSdYXP4bpeJ4PBUP5xwXXOIAnklik8hwFe8B+HbpY9 CE9fjHqZYwJaWwKXYIGisYVq85ByKEkNN+iuwSRPRysEdbbUa8aboCC+6RPIx6+h ryQSZuB20siXJvim6drDgmt7zYi0naJ35KXK5YoX6xo09ogs9sxWjtITVIMDzqiH 15ktBEMqVzkXxViLeVTC5cqznwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJYp9tvj 4fiNM65hBR/4V+NeHhmFMB8GA1UdIwQYMBaAFBZ56gZmg/KhVQ3nD0WEMt0agycP MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERENEOS80MTBCQkMxNDRF NkMxMUVBODkwNDk3NDdDNEY5QUUwMi9Gbm5xQm1hRDhxRlZEZWNQUllReTNScURK dzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZubnFCbWFEOHFGVkRlY1BSWVF5M1JxREp3OC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RENEOS80MTBCQkMxNDRFNkMxMUVBODkwNDk3NDdDNEY5QUUwMi9Gbm5xQm1hRDhx RlZEZWNQUllReTNScURKdzgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA7IW4A2tc7NybT18NbW/vM2pFxC7cImp9D0eYWuyjFTvkHtp7mkZzj sYjYrF/bm+eLTgDpciwMhHYuWH8hMWoO2ryC9YKjmjAphHlGf825J0C3Nod9DzBh bwZCBe4AUnbLGVcqQLgHl5UWYvX8RDHEf3dYtbbbX9P15Cp0EM4P+yrX4Ra34yao Hc95OOqkaN2Oufse08U6oF7IrJCqiuOBweggkC/nEkcaSDS1KSCvC/MTLaCw+KRx 4WgtzNQLJqHLmnsCi5D8y8cA5HBm2ckWaaCZKqNlEXwfM9+grgdMwktSP50E6tbR J70Nd+6fE8QKPbeW0XFnWpj3QVG9SMtl -----END CERTIFICATE-----Generated at Wed Nov 5 16:32:21 2025 by rpki-client