$ rpki-client -vvf rpki.apnic.net/member_repository/A91DFC92/CB4ABE6A421611EE9A3EB768C4F9AE02/FqgerO8cn8MyDElats0MZ2Oqg2M.mft File: FqgerO8cn8MyDElats0MZ2Oqg2M.mft (raw, json) Hash identifier: x0Z+XiBnQ6LGl+lZKc3a1M8Cap7bcn/ARyUYYfQ1LKM= Subject key identifier: D3:96:08:21:DB:A9:D7:FB:27:22:06:C7:A2:00:D4:C6:14:43:39:CA Authority key identifier: 16:A8:1E:AC:EF:1C:9F:C3:32:0C:49:5A:B6:CD:0C:67:63:AA:83:63 Certificate issuer: /CN=A91DFC92/serialNumber=16A81EACEF1C9FC3320C495AB6CD0C6763AA8363 Certificate serial: 01A0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FqgerO8cn8MyDElats0MZ2Oqg2M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DFC92/CB4ABE6A421611EE9A3EB768C4F9AE02/FqgerO8cn8MyDElats0MZ2Oqg2M.mft Manifest number: 019D Signing time: Wed 05 Nov 2025 03:28:30 +0000 Manifest this update: Wed 05 Nov 2025 03:28:29 +0000 Manifest next update: Wed 12 Nov 2025 03:28:29 +0000 Files and hashes: 1: FqgerO8cn8MyDElats0MZ2Oqg2M.crl (hash: 6DOYc9lm/tXxa44wQmhanEG2xogGf91TvhFJUSGrCbs=) 2: 0AE7E0B6421711EE97070469C4F9AE02.roa (hash: 33dDDxYoddtq/jzJQjTw8XcFhN7Z/rBiMlfoEOF+M10=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DFC92/CB4ABE6A421611EE9A3EB768C4F9AE02/FqgerO8cn8MyDElats0MZ2Oqg2M.crl rsync://rpki.apnic.net/member_repository/A91DFC92/CB4ABE6A421611EE9A3EB768C4F9AE02/FqgerO8cn8MyDElats0MZ2Oqg2M.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FqgerO8cn8MyDElats0MZ2Oqg2M.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 03:28:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 416 (0x1a0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DFC92, serialNumber=16A81EACEF1C9FC3320C495AB6CD0C6763AA8363 Validity Not Before: Nov 5 03:28:29 2025 GMT Not After : Nov 12 03:28:29 2025 GMT Subject: CN=690ac45e-e210 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:38:56:12:b4:71:72:fe:f4:ea:2f:05:09:88: 84:a8:3b:bf:24:60:d2:c5:c5:bb:35:72:99:9a:75: db:a4:42:e2:73:54:c0:46:cb:36:c6:62:20:9b:94: 1a:88:e3:81:9c:21:df:c3:e5:4c:21:57:4c:18:d7: c8:b5:99:40:7e:6f:92:18:fb:f0:11:ca:6b:ae:51: d6:53:bb:16:42:e9:9e:8f:57:90:63:66:d3:f7:27: 41:db:ef:00:28:85:0a:59:27:3a:49:a9:20:3d:5b: e9:36:74:c4:f7:ec:1f:bf:db:8d:b9:43:b3:4d:a1: 7c:f0:b3:ed:d7:71:25:d2:21:5e:61:88:5b:de:93: e6:8f:3c:45:b0:cc:bb:ce:84:10:73:18:9f:83:34: de:ff:99:6f:dc:e8:f0:ba:79:66:7d:89:2f:82:90: 4b:b2:82:ba:83:13:1f:28:d4:70:88:5a:04:82:a4: 7b:2d:06:94:21:07:99:9b:e5:e7:98:0d:c5:01:1a: 09:79:23:d4:0a:5f:17:40:7f:9b:33:a4:28:54:ad: 81:87:d0:f1:f8:27:1f:e6:3f:eb:e4:5a:92:33:1e: a7:4b:f7:68:fe:b0:cc:52:f7:9e:af:6d:91:8b:d1: 5b:82:51:bd:49:a4:b4:e6:43:34:4d:23:90:49:e7: a8:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:96:08:21:DB:A9:D7:FB:27:22:06:C7:A2:00:D4:C6:14:43:39:CA X509v3 Authority Key Identifier: keyid:16:A8:1E:AC:EF:1C:9F:C3:32:0C:49:5A:B6:CD:0C:67:63:AA:83:63 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DFC92/CB4ABE6A421611EE9A3EB768C4F9AE02/FqgerO8cn8MyDElats0MZ2Oqg2M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FqgerO8cn8MyDElats0MZ2Oqg2M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DFC92/CB4ABE6A421611EE9A3EB768C4F9AE02/FqgerO8cn8MyDElats0MZ2Oqg2M.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7a:ab:20:a4:4e:2d:8f:09:71:0a:9f:66:0a:69:43:3f:6e:34: a1:00:da:a0:f9:f6:e6:2f:dd:25:f7:f1:38:b4:2c:43:e4:a4: c5:86:ae:27:bd:ce:18:8a:a9:30:24:66:b9:bd:fa:79:b5:13: 7b:fe:87:9d:75:dc:4c:3a:bd:9c:5c:f7:67:95:35:aa:41:af: 95:c4:03:50:9c:55:35:75:68:a4:71:a9:ad:d9:76:fd:0d:eb: c0:61:dc:82:a4:92:c1:3a:e1:b1:6f:dc:68:92:15:22:86:68: 3f:43:92:e9:be:aa:89:25:9e:73:58:04:c9:41:5f:a4:76:2d: 8d:6c:06:e2:02:18:78:7c:7e:c7:62:fe:cd:07:bc:bf:25:4c: 14:d0:97:a1:b1:9e:92:46:b2:7d:c9:b4:0d:48:fd:68:e7:9a: 94:9b:25:e0:32:15:c2:ea:20:39:eb:2f:f3:8b:fe:22:8a:83: 2f:9a:13:d9:6e:76:0d:1e:b4:98:1c:30:f5:6d:73:74:75:45: f3:c5:47:9f:e2:43:b0:3e:d8:b2:1d:3b:af:e8:79:11:9e:8e: b9:e2:38:62:21:2b:90:02:64:a9:1e:79:1d:c7:14:c5:9d:08: 81:87:41:75:87:62:9f:36:4c:63:5e:ff:9b:9f:da:1a:2c:da: b5:bf:e8:0e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAaAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REZDOTIxMTAvBgNVBAUTKDE2QTgxRUFDRUYxQzlGQzMzMjBDNDk1QUI2Q0QwQzY3 NjNBQTgzNjMwHhcNMjUxMTA1MDMyODI5WhcNMjUxMTEyMDMyODI5WjAYMRYwFAYD VQQDEw02OTBhYzQ1ZS1lMjEwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsThWErRxcv706i8FCYiEqDu/JGDSxcW7NXKZmnXbpELic1TARss2xmIgm5Qa iOOBnCHfw+VMIVdMGNfItZlAfm+SGPvwEcprrlHWU7sWQumej1eQY2bT9ydB2+8A KIUKWSc6SakgPVvpNnTE9+wfv9uNuUOzTaF88LPt13El0iFeYYhb3pPmjzxFsMy7 zoQQcxifgzTe/5lv3OjwunlmfYkvgpBLsoK6gxMfKNRwiFoEgqR7LQaUIQeZm+Xn mA3FARoJeSPUCl8XQH+bM6QoVK2Bh9Dx+Ccf5j/r5FqSMx6nS/do/rDMUveer22R i9FbglG9SaS05kM0TSOQSeeo6QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNOWCCHb qdf7JyIGx6IA1MYUQznKMB8GA1UdIwQYMBaAFBaoHqzvHJ/DMgxJWrbNDGdjqoNj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERkM5Mi9DQjRBQkU2QTQy MTYxMUVFOUEzRUI3NjhDNEY5QUUwMi9GcWdlck84Y244TXlERWxhdHMwTVoyT3Fn Mk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZxZ2VyTzhjbjhNeURFbGF0czBNWjJPcWcyTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RkM5Mi9DQjRBQkU2QTQyMTYxMUVFOUEzRUI3NjhDNEY5QUUwMi9GcWdlck84Y244 TXlERWxhdHMwTVoyT3FnMk0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB6qyCkTi2PCXEKn2YKaUM/bjShANqg+fbmL90l9/E4tCxD5KTFhq4n vc4YiqkwJGa5vfp5tRN7/oedddxMOr2cXPdnlTWqQa+VxANQnFU1dWikcamt2Xb9 DevAYdyCpJLBOuGxb9xokhUihmg/Q5LpvqqJJZ5zWATJQV+kdi2NbAbiAhh4fH7H Yv7NB7y/JUwU0JehsZ6SRrJ9ybQNSP1o55qUmyXgMhXC6iA56y/zi/4iioMvmhPZ bnYNHrSYHDD1bXN0dUXzxUef4kOwPtiyHTuv6HkRno654jhiISuQAmSpHnkdxxTF nQiBh0F1h2KfNkxjXv+bn9oaLNq1v+gO -----END CERTIFICATE-----Generated at Wed Nov 5 08:10:29 2025 by rpki-client