$ rpki-client -vvf rpki.apnic.net/member_repository/A91E4B86/9306A2C4F7E311EF8ADA8A41C4F9AE02/FNWtJyKsqGrTTw-aNEcmy2aYCDE.mft File: FNWtJyKsqGrTTw-aNEcmy2aYCDE.mft (raw, json) Hash identifier: xJ/md8capTPCvJymfby/kMIJ+HWm9DvwK2ndBBy161A= Subject key identifier: B6:3C:56:B2:C2:21:78:6E:0A:09:62:1C:38:FF:8F:70:A3:64:BB:07 Authority key identifier: 14:D5:AD:27:22:AC:A8:6A:D3:4F:0F:9A:34:47:26:CB:66:98:08:31 Certificate issuer: /CN=A91E4B86/serialNumber=14D5AD2722ACA86AD34F0F9A344726CB66980831 Certificate serial: 80 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FNWtJyKsqGrTTw-aNEcmy2aYCDE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E4B86/9306A2C4F7E311EF8ADA8A41C4F9AE02/FNWtJyKsqGrTTw-aNEcmy2aYCDE.mft Manifest number: 7F Signing time: Wed 05 Nov 2025 06:54:09 +0000 Manifest this update: Wed 05 Nov 2025 06:54:09 +0000 Manifest next update: Wed 12 Nov 2025 06:54:08 +0000 Files and hashes: 1: FNWtJyKsqGrTTw-aNEcmy2aYCDE.crl (hash: GBa03AAAiqD38qLk3VroSHkgPje2qmsgCwM2r8/NuJU=) 2: E2D9B7A6B32611F0BE8DF029C4F9AE02.roa (hash: blGbXq2yiWVicTOuyyoxLGQafJr97/lYQbfApO8b37w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E4B86/9306A2C4F7E311EF8ADA8A41C4F9AE02/FNWtJyKsqGrTTw-aNEcmy2aYCDE.crl rsync://rpki.apnic.net/member_repository/A91E4B86/9306A2C4F7E311EF8ADA8A41C4F9AE02/FNWtJyKsqGrTTw-aNEcmy2aYCDE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FNWtJyKsqGrTTw-aNEcmy2aYCDE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 06:54:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 128 (0x80) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E4B86, serialNumber=14D5AD2722ACA86AD34F0F9A344726CB66980831 Validity Not Before: Nov 5 06:54:09 2025 GMT Not After : Nov 12 06:54:08 2025 GMT Subject: CN=690af491-c46b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:60:ed:8d:25:9b:62:d8:83:b2:65:37:c6:87: 0f:e1:45:11:07:cf:ae:7c:b0:ae:d4:2a:9f:1c:40: a6:0e:97:72:20:9a:04:8d:e2:da:a8:0b:bf:af:fe: 19:14:5c:fa:4d:e2:a6:dd:12:53:28:6e:db:2f:49: b8:f1:ff:e2:2a:73:18:f0:ab:11:80:3c:73:67:b4: 4e:65:26:4b:82:c0:db:d7:d8:11:04:92:6c:7e:8c: 78:0e:7c:11:b6:b2:28:c9:22:2a:1c:e6:ff:74:f4: bd:46:33:49:e7:ae:d6:19:00:2a:6d:60:80:4a:04: bb:4d:ba:af:aa:ba:19:2b:3e:22:5b:35:37:76:4c: 92:e5:a1:22:83:1e:6e:ff:61:bc:18:09:ca:21:ea: 97:ad:80:70:b8:5c:3e:f6:bc:c3:4c:c8:c8:73:d0: 6d:0f:c4:16:48:d0:59:63:71:48:70:cd:40:62:28: 87:e3:46:a1:5e:2a:ce:6a:3d:05:05:21:95:22:3f: 73:96:8b:af:1d:70:b0:ac:23:7c:d7:0d:be:7c:4e: 1f:7e:4f:48:e9:f4:bb:e2:5d:c9:75:e5:a0:54:53: b8:f1:96:39:b4:07:6b:c4:85:41:0e:61:9c:63:fd: d7:bf:73:44:64:92:12:6d:8c:f5:85:2d:e7:62:44: 2c:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:3C:56:B2:C2:21:78:6E:0A:09:62:1C:38:FF:8F:70:A3:64:BB:07 X509v3 Authority Key Identifier: keyid:14:D5:AD:27:22:AC:A8:6A:D3:4F:0F:9A:34:47:26:CB:66:98:08:31 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E4B86/9306A2C4F7E311EF8ADA8A41C4F9AE02/FNWtJyKsqGrTTw-aNEcmy2aYCDE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FNWtJyKsqGrTTw-aNEcmy2aYCDE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E4B86/9306A2C4F7E311EF8ADA8A41C4F9AE02/FNWtJyKsqGrTTw-aNEcmy2aYCDE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ac:20:68:79:25:28:05:1d:ab:a4:28:29:e8:84:e2:cc:15:8d: 21:2d:2b:bf:d9:4e:43:db:0b:81:d4:e1:a2:63:6a:c4:58:65: b2:68:d2:8d:3c:02:7a:66:2f:0e:a5:56:3e:a2:fc:88:e8:9d: f1:35:da:4e:65:59:f4:fc:2d:84:20:21:50:21:b1:45:e8:3a: 79:74:fe:ec:87:ee:79:e0:44:dd:65:c6:12:59:05:18:5f:a6: 1d:dc:9b:6a:ef:4f:70:5e:f1:4b:4c:a3:d5:85:43:37:69:04: 9f:93:80:af:5c:13:0c:ac:78:4e:ab:a8:e5:c5:1c:ec:fc:46: c0:a9:77:42:1e:5c:23:67:f8:16:f3:47:09:dc:ac:f9:c8:c1: 9c:b7:0c:ce:e7:e7:84:85:81:e2:55:0e:b7:b7:5f:ff:54:c1: 6a:75:51:49:95:58:03:2f:52:e9:18:f0:c5:1e:84:4b:98:29: 39:26:f9:03:fc:d4:1e:2f:97:18:f6:00:b2:35:08:31:00:21: 2d:0b:55:83:48:dd:d1:03:61:9c:c8:68:6e:df:d4:98:c5:fb: e6:ed:cf:04:30:75:3a:bf:8f:07:bf:ab:53:42:62:37:c6:f5: f9:46:b1:7e:e5:32:fe:25:4f:42:e0:be:71:f1:96:09:78:7e: 2a:24:59:84 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAIAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTRCODYxMTAvBgNVBAUTKDE0RDVBRDI3MjJBQ0E4NkFEMzRGMEY5QTM0NDcyNkNC NjY5ODA4MzEwHhcNMjUxMTA1MDY1NDA5WhcNMjUxMTEyMDY1NDA4WjAYMRYwFAYD VQQDEw02OTBhZjQ5MS1jNDZiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAr2DtjSWbYtiDsmU3xocP4UURB8+ufLCu1CqfHECmDpdyIJoEjeLaqAu/r/4Z FFz6TeKm3RJTKG7bL0m48f/iKnMY8KsRgDxzZ7ROZSZLgsDb19gRBJJsfox4DnwR trIoySIqHOb/dPS9RjNJ567WGQAqbWCASgS7TbqvqroZKz4iWzU3dkyS5aEigx5u /2G8GAnKIeqXrYBwuFw+9rzDTMjIc9BtD8QWSNBZY3FIcM1AYiiH40ahXirOaj0F BSGVIj9zlouvHXCwrCN81w2+fE4ffk9I6fS74l3JdeWgVFO48ZY5tAdrxIVBDmGc Y/3Xv3NEZJISbYz1hS3nYkQs2QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLY8VrLC IXhuCgliHDj/j3CjZLsHMB8GA1UdIwQYMBaAFBTVrScirKhq008PmjRHJstmmAgx MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNEI4Ni85MzA2QTJDNEY3 RTMxMUVGOEFEQThBNDFDNEY5QUUwMi9GTld0SnlLc3FHclRUdy1hTkVjbXkyYVlD REUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZOV3RKeUtzcUdyVFR3LWFORWNteTJhWUNERS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NEI4Ni85MzA2QTJDNEY3RTMxMUVGOEFEQThBNDFDNEY5QUUwMi9GTld0SnlLc3FH clRUdy1hTkVjbXkyYVlDREUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCsIGh5JSgFHaukKCnohOLMFY0hLSu/2U5D2wuB1OGiY2rEWGWyaNKN PAJ6Zi8OpVY+ovyI6J3xNdpOZVn0/C2EICFQIbFF6Dp5dP7sh+554ETdZcYSWQUY X6Yd3Jtq709wXvFLTKPVhUM3aQSfk4CvXBMMrHhOq6jlxRzs/EbAqXdCHlwjZ/gW 80cJ3Kz5yMGctwzO5+eEhYHiVQ63t1//VMFqdVFJlVgDL1LpGPDFHoRLmCk5JvkD /NQeL5cY9gCyNQgxACEtC1WDSN3RA2GcyGhu39SYxfvm7c8EMHU6v48Hv6tTQmI3 xvX5RrF+5TL+JU9C4L5x8ZYJeH4qJFmE -----END CERTIFICATE-----Generated at Wed Nov 5 20:59:45 2025 by rpki-client