$ rpki-client -vvf rpki.apnic.net/member_repository/A91E275B/AB2022301DA911E2B095C4A408B02CD2/FBXygRwDfzZMxYcYC_JAeVsEOmk.mft File: FBXygRwDfzZMxYcYC_JAeVsEOmk.mft (raw, json) Hash identifier: zF2Rh3i/LqFNlMAwG8AAXQdmMLKOX9rehPlvIXnRlb0= Subject key identifier: 12:0E:43:CD:96:87:CA:51:31:BA:BC:09:68:EB:89:5E:05:39:64:27 Authority key identifier: 14:15:F2:81:1C:03:7F:36:4C:C5:87:18:0B:F2:40:79:5B:04:3A:69 Certificate issuer: /CN=A91E275B/serialNumber=1415F2811C037F364CC587180BF240795B043A69 Certificate serial: 32C2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FBXygRwDfzZMxYcYC_JAeVsEOmk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E275B/AB2022301DA911E2B095C4A408B02CD2/FBXygRwDfzZMxYcYC_JAeVsEOmk.mft Manifest number: 9ACD Signing time: Thu 18 Sep 2025 15:19:58 +0000 Manifest this update: Thu 18 Sep 2025 15:19:57 +0000 Manifest next update: Thu 25 Sep 2025 15:19:57 +0000 Files and hashes: 1: FBXygRwDfzZMxYcYC_JAeVsEOmk.crl (hash: 8CyPl50LBXQ6LRQhB2aiIaFwa3jyb9RvYNE8XvpbhcI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E275B/AB2022301DA911E2B095C4A408B02CD2/FBXygRwDfzZMxYcYC_JAeVsEOmk.crl rsync://rpki.apnic.net/member_repository/A91E275B/AB2022301DA911E2B095C4A408B02CD2/FBXygRwDfzZMxYcYC_JAeVsEOmk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FBXygRwDfzZMxYcYC_JAeVsEOmk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Sep 2025 15:19:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12994 (0x32c2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E275B, serialNumber=1415F2811C037F364CC587180BF240795B043A69 Validity Not Before: Sep 18 15:19:57 2025 GMT Not After : Sep 25 15:19:57 2025 GMT Subject: CN=68cc231e-d171 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:23:00:3a:ef:5d:4a:17:45:42:e4:ad:a4:40: e1:b1:c0:ab:d9:20:06:32:e2:fd:ff:95:e8:02:bd: 52:48:39:23:05:e6:4a:f8:07:39:06:7d:60:fb:af: 4f:aa:eb:48:d1:73:0e:65:24:57:d2:19:1d:0e:4d: 7e:3a:62:ee:cc:29:a6:77:9b:63:53:82:f7:81:c0: 85:42:75:2e:58:14:2c:88:53:46:e5:41:5b:99:4d: 54:7e:4f:d9:c6:33:08:d7:34:22:c4:06:5d:67:90: 24:8d:b0:7e:5e:42:82:46:9d:5d:15:fc:5d:d6:5b: 77:78:6e:87:19:61:fe:c5:0f:8c:24:dc:e0:f4:45: d1:c8:54:9c:bc:3b:47:08:f2:90:23:21:9a:97:24: 46:ba:b4:86:f7:54:7d:3b:48:fc:f9:83:92:eb:23: 0e:98:7c:26:91:53:29:08:45:41:0c:81:a1:27:3a: bc:af:55:4d:be:ae:f2:13:c2:d2:f5:6b:d2:7c:ef: ca:a2:0a:19:21:49:2e:60:4f:b5:b8:45:f6:e2:03: 8d:a2:9f:ec:d0:65:2e:e9:f5:03:fa:f7:b8:ba:22: b1:b3:cb:cb:cb:4d:3b:7e:69:ef:44:ea:15:91:5c: 62:1b:2d:00:3f:ab:eb:59:bc:d8:c4:7a:9c:e8:77: 1e:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:0E:43:CD:96:87:CA:51:31:BA:BC:09:68:EB:89:5E:05:39:64:27 X509v3 Authority Key Identifier: keyid:14:15:F2:81:1C:03:7F:36:4C:C5:87:18:0B:F2:40:79:5B:04:3A:69 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E275B/AB2022301DA911E2B095C4A408B02CD2/FBXygRwDfzZMxYcYC_JAeVsEOmk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FBXygRwDfzZMxYcYC_JAeVsEOmk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E275B/AB2022301DA911E2B095C4A408B02CD2/FBXygRwDfzZMxYcYC_JAeVsEOmk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 36:40:2c:55:a2:b1:a8:5e:10:b6:cb:79:89:ff:87:6c:c3:c4: ca:b3:64:4b:35:38:96:d2:0b:6c:f0:a0:4b:3b:8c:d6:0e:c8: 6c:a6:0a:a5:23:b4:37:60:84:07:3d:7f:99:81:5a:02:cc:67: 4a:16:f3:1c:7a:e9:8b:2c:e9:a9:0d:df:8d:09:25:4a:5f:a5: 74:f0:4f:51:7a:57:3d:a6:2a:c8:bf:65:0d:52:a6:d5:2a:ac: ed:35:cc:f5:02:1c:9c:1c:88:50:27:f8:80:ac:74:a9:bc:a9: 6c:bc:a2:7c:64:d1:c4:08:c1:8f:92:ab:e7:ed:b5:8a:d9:b8: 25:c5:cd:39:7d:91:5a:c4:9c:61:59:61:fc:58:c9:62:22:7c: c6:e6:b7:7b:01:e3:36:06:cb:12:d2:7b:2a:ce:7b:8c:2b:fc: a5:03:09:aa:02:2d:e3:6c:38:6e:fc:06:21:a4:4c:c4:a5:c3: a0:73:47:67:ad:d6:51:21:17:04:d3:ae:2d:0d:78:ec:fa:f5: 96:79:fc:44:05:d9:b6:7a:7e:77:bf:ed:05:7c:6d:c1:5c:ed: cc:74:3a:4d:09:13:8a:9d:f8:40:4b:3b:db:31:b4:04:5c:4e: b5:46:48:dc:5b:5a:39:bc:e1:ff:d6:a3:d1:e4:b2:59:e0:43: 4b:74:fa:71 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICMsIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTI3NUIxMTAvBgNVBAUTKDE0MTVGMjgxMUMwMzdGMzY0Q0M1ODcxODBCRjI0MDc5 NUIwNDNBNjkwHhcNMjUwOTE4MTUxOTU3WhcNMjUwOTI1MTUxOTU3WjAYMRYwFAYD VQQDEw02OGNjMjMxZS1kMTcxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvyMAOu9dShdFQuStpEDhscCr2SAGMuL9/5XoAr1SSDkjBeZK+Ac5Bn1g+69P qutI0XMOZSRX0hkdDk1+OmLuzCmmd5tjU4L3gcCFQnUuWBQsiFNG5UFbmU1Ufk/Z xjMI1zQixAZdZ5AkjbB+XkKCRp1dFfxd1lt3eG6HGWH+xQ+MJNzg9EXRyFScvDtH CPKQIyGalyRGurSG91R9O0j8+YOS6yMOmHwmkVMpCEVBDIGhJzq8r1VNvq7yE8LS 9WvSfO/KogoZIUkuYE+1uEX24gONop/s0GUu6fUD+ve4uiKxs8vLy007fmnvROoV kVxiGy0AP6vrWbzYxHqc6HceEwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBIOQ82W h8pRMbq8CWjriV4FOWQnMB8GA1UdIwQYMBaAFBQV8oEcA382TMWHGAvyQHlbBDpp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMjc1Qi9BQjIwMjIzMDFE QTkxMUUyQjA5NUM0QTQwOEIwMkNEMi9GQlh5Z1J3RGZ6Wk14WWNZQ19KQWVWc0VP bWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZCWHlnUndEZnpaTXhZY1lDX0pBZVZzRU9tay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF Mjc1Qi9BQjIwMjIzMDFEQTkxMUUyQjA5NUM0QTQwOEIwMkNEMi9GQlh5Z1J3RGZ6 Wk14WWNZQ19KQWVWc0VPbWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA2QCxVorGoXhC2y3mJ/4dsw8TKs2RLNTiW0gts8KBLO4zWDshspgql I7Q3YIQHPX+ZgVoCzGdKFvMceumLLOmpDd+NCSVKX6V08E9Relc9pirIv2UNUqbV KqztNcz1AhycHIhQJ/iArHSpvKlsvKJ8ZNHECMGPkqvn7bWK2bglxc05fZFaxJxh WWH8WMliInzG5rd7AeM2BssS0nsqznuMK/ylAwmqAi3jbDhu/AYhpEzEpcOgc0dn rdZRIRcE064tDXjs+vWWefxEBdm2en53v+0FfG3BXO3MdDpNCROKnfhASzvbMbQE XE61RkjcW1o5vOH/1qPR5LJZ4ENLdPpx -----END CERTIFICATE-----Generated at Thu Sep 18 23:27:21 2025 by rpki-client