$ rpki-client -vvf rpki.apnic.net/member_repository/A91DF93A/F7DFA72EE5F311EAB3A91561C4F9AE02/fiRDENekVusSe5JsQvJteems24g.mft File: fiRDENekVusSe5JsQvJteems24g.mft (raw, json) Hash identifier: 1QBil/11RQ2zhcGG6Ym9fl2bB5Q4Bf6dg1C5cL8IINk= Subject key identifier: 38:0E:32:AE:66:40:EA:EF:7B:7D:E6:83:EA:2E:4B:98:DC:EE:5C:B0 Authority key identifier: 7E:24:43:10:D7:A4:56:EB:12:7B:92:6C:42:F2:6D:79:E9:AC:DB:88 Certificate issuer: /CN=A91DF93A/serialNumber=7E244310D7A456EB127B926C42F26D79E9ACDB88 Certificate serial: 0904 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fiRDENekVusSe5JsQvJteems24g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DF93A/F7DFA72EE5F311EAB3A91561C4F9AE02/fiRDENekVusSe5JsQvJteems24g.mft Manifest number: 08A0 Signing time: Wed 22 Oct 2025 21:32:02 +0000 Manifest this update: Wed 22 Oct 2025 21:32:01 +0000 Manifest next update: Wed 29 Oct 2025 21:32:01 +0000 Files and hashes: 1: fiRDENekVusSe5JsQvJteems24g.crl (hash: KdbjgKsHAZ4dI2WDk9W42psUuL0g7jT2hGUrhxMMQFI=) 2: 536CEA945D5D11F0A20A8B47C4F9AE02.roa (hash: NudhcCG6U8c/iVjiv9Q5GA7zP2bSr5Lt2Lyl6qOq+zo=) 3: BE33817A69AE11EEBBC89D75C4F9AE02.roa (hash: gjnTsh5k1OZvGTpF1aNvAJoG372BB0dQ8oqKuH5rVM8=) 4: 885A3B4C198C11EEA06C1429C4F9AE02.roa (hash: UwbxqlIoeWN/uj0INOlxAStWat7EJVu9aWA6OuSDC9Q=) 5: 669892085D5D11F0AAE8C847C4F9AE02.roa (hash: YloUxGTrxFqJdGX0eY4LvrEEn+EXGL+0rN59a1XKXIY=) 6: B59B34B2A59511EFB1B8AF36C4F9AE02.roa (hash: vWyefttpePLkPBEoycC5X0lmEGRfAIuwi2Ngs4ojIYc=) 7: 48DDFB8E8FAF11F0B59F0948C4F9AE02.roa (hash: mA/WE2Bh4RmqFgp1Gp11Wu83VKDJFyoxbw2SeY/E7bk=) 8: A64C29AA3D9811EE88B2694CC4F9AE02.roa (hash: /yoDz91aVKDMVKQFN5vWqL0kcfwjMSXqa0ohs5b1IqQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DF93A/F7DFA72EE5F311EAB3A91561C4F9AE02/fiRDENekVusSe5JsQvJteems24g.crl rsync://rpki.apnic.net/member_repository/A91DF93A/F7DFA72EE5F311EAB3A91561C4F9AE02/fiRDENekVusSe5JsQvJteems24g.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fiRDENekVusSe5JsQvJteems24g.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Oct 2025 21:08:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2308 (0x904) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DF93A, serialNumber=7E244310D7A456EB127B926C42F26D79E9ACDB88 Validity Not Before: Oct 22 21:32:01 2025 GMT Not After : Oct 29 21:32:01 2025 GMT Subject: CN=68f94d52-9459 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:a9:ca:b4:fd:db:a8:ea:2f:24:cb:f7:4f:77: 7c:fd:da:0f:b4:01:f1:9c:ad:b8:4e:08:02:b9:c5: 10:c5:95:84:45:51:60:26:10:83:5b:38:dc:e1:be: b7:c8:e2:6d:83:9f:8f:cf:0b:13:2d:12:99:16:08: 62:bd:21:28:04:a5:a7:ed:37:23:2d:15:ed:d5:93: 7a:03:23:f2:38:8d:00:a5:73:96:ca:e9:83:d2:64: 09:12:3e:84:3f:07:a2:47:e4:66:26:6a:e7:4f:cc: 25:60:e6:47:67:4b:a3:54:da:2f:c6:ad:c0:d7:8e: 4b:31:c3:ac:a9:4d:bc:fb:ba:67:2f:44:cb:92:c2: b7:ec:4e:03:3c:3c:7f:f3:b4:ec:1c:b9:f8:fa:f3: c3:5b:a0:4c:ef:85:42:5c:dc:70:f7:a4:13:1c:ba: b6:46:9d:dc:ac:f3:b7:fe:65:80:14:cf:09:88:f7: 6e:4e:7a:fd:da:c7:c5:f7:79:bf:d7:85:53:ce:75: c7:58:f8:58:72:bc:2b:1f:23:06:76:42:f0:18:d8: df:58:62:4d:e5:88:d4:e0:88:e3:05:39:ba:66:20: 81:09:86:c4:f8:8a:f8:8e:51:05:88:85:d1:54:23: d2:b5:ea:11:34:10:60:cf:b0:60:a2:4e:2a:03:8c: 7b:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:0E:32:AE:66:40:EA:EF:7B:7D:E6:83:EA:2E:4B:98:DC:EE:5C:B0 X509v3 Authority Key Identifier: keyid:7E:24:43:10:D7:A4:56:EB:12:7B:92:6C:42:F2:6D:79:E9:AC:DB:88 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DF93A/F7DFA72EE5F311EAB3A91561C4F9AE02/fiRDENekVusSe5JsQvJteems24g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fiRDENekVusSe5JsQvJteems24g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DF93A/F7DFA72EE5F311EAB3A91561C4F9AE02/fiRDENekVusSe5JsQvJteems24g.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 79:1d:67:cd:9e:a0:87:8a:0f:16:23:81:c9:b9:79:20:1d:5e: 49:a4:2c:ee:15:59:99:f9:31:ca:1a:44:37:e4:10:11:14:0d: 4c:9d:3b:a8:2b:82:82:f9:7e:4c:5d:ce:3c:6b:68:d0:e8:a6: da:03:d7:bc:51:17:70:a3:d0:a0:33:44:49:ac:83:eb:15:43: 4f:61:44:b3:74:b4:94:22:f5:5d:14:8b:98:77:79:b8:61:ec: 1d:5a:46:54:fa:52:16:c5:cd:cf:fb:97:1d:10:10:ac:65:de: fa:a2:6c:cb:c2:9d:9d:d3:fe:ba:4b:5b:a5:fc:dc:55:4e:2c: b5:13:21:8d:c5:32:9b:4d:b6:a4:78:b1:f6:36:21:31:1e:d5: fe:7e:a6:dc:82:e1:eb:5d:fd:08:8d:e2:6c:b6:db:03:cc:3e: a0:fb:dd:f4:44:69:a8:5c:be:f9:af:6f:5f:0c:c0:18:28:8a: af:ce:85:5d:6e:a1:ca:12:66:64:7d:ba:59:99:92:f0:34:5e: 51:4c:8a:df:81:e4:de:c3:0f:af:24:4f:54:47:b5:1a:ab:f7: 03:e8:cc:cc:2c:a0:6f:df:93:da:05:7f:17:9a:9f:55:ef:fd: 3a:63:cc:40:75:62:f6:f4:39:18:c8:4e:fa:47:6a:e2:c9:15: f2:8c:bd:10 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCQQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REY5M0ExMTAvBgNVBAUTKDdFMjQ0MzEwRDdBNDU2RUIxMjdCOTI2QzQyRjI2RDc5 RTlBQ0RCODgwHhcNMjUxMDIyMjEzMjAxWhcNMjUxMDI5MjEzMjAxWjAYMRYwFAYD VQQDEw02OGY5NGQ1Mi05NDU5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw6nKtP3bqOovJMv3T3d8/doPtAHxnK24TggCucUQxZWERVFgJhCDWzjc4b63 yOJtg5+PzwsTLRKZFghivSEoBKWn7TcjLRXt1ZN6AyPyOI0ApXOWyumD0mQJEj6E PweiR+RmJmrnT8wlYOZHZ0ujVNovxq3A145LMcOsqU28+7pnL0TLksK37E4DPDx/ 87TsHLn4+vPDW6BM74VCXNxw96QTHLq2Rp3crPO3/mWAFM8JiPduTnr92sfF93m/ 14VTznXHWPhYcrwrHyMGdkLwGNjfWGJN5YjU4IjjBTm6ZiCBCYbE+Ir4jlEFiIXR VCPSteoRNBBgz7Bgok4qA4x73QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDgOMq5m QOrve33mg+ouS5jc7lywMB8GA1UdIwQYMBaAFH4kQxDXpFbrEnuSbELybXnprNuI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERjkzQS9GN0RGQTcyRUU1 RjMxMUVBQjNBOTE1NjFDNEY5QUUwMi9maVJERU5la1Z1c1NlNUpzUXZKdGVlbXMy NGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2ZpUkRFTmVrVnVzU2U1SnNRdkp0ZWVtczI0Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RjkzQS9GN0RGQTcyRUU1RjMxMUVBQjNBOTE1NjFDNEY5QUUwMi9maVJERU5la1Z1 c1NlNUpzUXZKdGVlbXMyNGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB5HWfNnqCHig8WI4HJuXkgHV5JpCzuFVmZ+THKGkQ35BARFA1MnTuo K4KC+X5MXc48a2jQ6KbaA9e8URdwo9CgM0RJrIPrFUNPYUSzdLSUIvVdFIuYd3m4 YewdWkZU+lIWxc3P+5cdEBCsZd76omzLwp2d0/66S1ul/NxVTiy1EyGNxTKbTbak eLH2NiExHtX+fqbcguHrXf0IjeJsttsDzD6g+930RGmoXL75r29fDMAYKIqvzoVd bqHKEmZkfbpZmZLwNF5RTIrfgeTeww+vJE9UR7Uaq/cD6MzMLKBv35PaBX8Xmp9V 7/06Y8xAdWL29DkYyE76R2riyRXyjL0Q -----END CERTIFICATE-----Generated at Wed Oct 22 23:54:48 2025 by rpki-client