$ rpki-client -vvf rpki.apnic.net/member_repository/A91E9721/8AEC2AC43FC411E992A3E62DC4F9AE02/faWJztV_HlzEhgPROEIjk24WAn4.mft File: faWJztV_HlzEhgPROEIjk24WAn4.mft (raw, json) Hash identifier: Ss0zgi3sQ7vjs/Hhxtw61HgR+luWFZRTOEpYtmFYB2E= Subject key identifier: 3D:1C:67:A1:2A:F3:73:CD:66:C3:CB:1C:0A:DD:0C:2D:C2:EA:86:0B Authority key identifier: 7D:A5:89:CE:D5:7F:1E:5C:C4:86:03:D1:38:42:23:93:6E:16:02:7E Certificate issuer: /CN=A91E9721/serialNumber=7DA589CED57F1E5CC48603D1384223936E16027E Certificate serial: 1090 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/faWJztV_HlzEhgPROEIjk24WAn4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E9721/8AEC2AC43FC411E992A3E62DC4F9AE02/faWJztV_HlzEhgPROEIjk24WAn4.mft Manifest number: 1085 Signing time: Sun 02 Nov 2025 17:23:35 +0000 Manifest this update: Sun 02 Nov 2025 17:23:35 +0000 Manifest next update: Sun 09 Nov 2025 17:23:35 +0000 Files and hashes: 1: faWJztV_HlzEhgPROEIjk24WAn4.crl (hash: UIBOFaWazYT1q70mXYabdE4lVCnDHjg8zV56AlhLOMs=) 2: 16EA264C3FC611E9A0E68A30C4F9AE02.roa (hash: dldKM97yEUd08i981SQo623EWErkeJZ6nMm6B405eVg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E9721/8AEC2AC43FC411E992A3E62DC4F9AE02/faWJztV_HlzEhgPROEIjk24WAn4.crl rsync://rpki.apnic.net/member_repository/A91E9721/8AEC2AC43FC411E992A3E62DC4F9AE02/faWJztV_HlzEhgPROEIjk24WAn4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/faWJztV_HlzEhgPROEIjk24WAn4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 17:23:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4240 (0x1090) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E9721, serialNumber=7DA589CED57F1E5CC48603D1384223936E16027E Validity Not Before: Nov 2 17:23:35 2025 GMT Not After : Nov 9 17:23:35 2025 GMT Subject: CN=69079397-b37b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:66:11:85:8c:bd:e1:7a:6c:fe:fa:25:b2:b4: 02:2f:3b:c2:9b:07:d8:b0:2e:4d:21:f4:e8:a0:8a: ea:9e:9e:ba:d9:5c:93:6c:ca:51:9e:cf:ea:6b:b0: 43:9f:6e:4d:aa:7b:68:e6:d4:e0:b1:a9:0f:7c:75: b4:23:e7:98:5a:b5:1d:15:91:19:00:04:c7:3d:1b: f6:89:4f:20:50:c9:d1:6c:62:80:f6:d2:a9:11:08: db:08:00:48:f7:1a:54:37:45:54:48:f9:3e:22:79: ce:91:b5:f6:85:5f:99:3c:65:a5:94:74:2d:70:35: 9c:cd:4e:5c:61:ab:fd:10:1c:69:af:e2:ef:8d:57: 52:3a:61:d7:4c:4d:0f:07:6a:1f:7b:da:2c:65:86: f6:32:fc:26:05:36:c9:4c:4e:77:20:3a:fb:75:75: 63:ef:99:1d:a9:7e:af:a6:be:82:3b:ba:a4:46:90: d1:2c:86:fb:4a:a7:12:ee:03:82:43:dc:10:88:9d: 3e:1b:03:9f:bf:34:79:43:b8:3c:21:1b:39:60:5e: 19:43:c4:d2:bd:5e:2f:37:a0:e8:06:70:9d:23:6d: 26:2b:b2:dd:d3:4c:78:3e:6b:4b:43:43:72:a2:78: 01:6c:3c:fb:31:7f:77:de:66:8c:2b:80:d2:9f:b1: 59:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:1C:67:A1:2A:F3:73:CD:66:C3:CB:1C:0A:DD:0C:2D:C2:EA:86:0B X509v3 Authority Key Identifier: keyid:7D:A5:89:CE:D5:7F:1E:5C:C4:86:03:D1:38:42:23:93:6E:16:02:7E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E9721/8AEC2AC43FC411E992A3E62DC4F9AE02/faWJztV_HlzEhgPROEIjk24WAn4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/faWJztV_HlzEhgPROEIjk24WAn4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E9721/8AEC2AC43FC411E992A3E62DC4F9AE02/faWJztV_HlzEhgPROEIjk24WAn4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 25:f2:ba:cf:75:ae:ef:b4:77:7d:05:44:a3:50:cd:c7:7b:12: 2b:09:f1:85:36:6a:dd:c7:64:45:d9:ae:7a:95:99:39:a2:c1: 53:40:20:cd:d4:3c:ba:06:c4:43:90:55:d2:5a:b3:49:ec:d2: db:52:60:c7:2c:38:cd:f1:ef:34:74:7e:3a:d0:51:f0:60:8c: 2c:2d:b9:63:d4:f5:1a:e7:63:b0:67:0a:a2:3a:cf:de:a1:06: f9:8d:ab:7f:6f:99:58:21:64:fe:04:7c:8d:6a:74:52:8e:c1: 03:92:ee:b3:47:54:a5:45:d4:98:60:0d:41:6a:77:a9:41:1c: df:28:1a:29:aa:b2:c3:85:52:5b:8a:92:8b:e0:ec:5b:83:63: 7b:7e:b7:f6:37:a8:1f:c2:da:1b:3e:05:4a:53:06:ca:67:35: 44:5b:c1:4d:c7:8c:a3:72:23:17:4b:5e:45:9e:02:f9:61:5d: a7:22:52:51:f9:a7:6a:49:52:78:de:36:54:00:fa:f7:3d:a5: b4:78:ee:ed:58:da:fe:2f:ce:4c:a2:f5:0f:d3:2b:d0:ae:70: 40:76:69:bb:60:46:98:91:51:aa:ca:a2:8c:03:8a:39:40:a1: 3f:e8:97:70:70:27:91:57:ec:98:cd:9b:0e:3b:fc:28:95:0f: f3:b7:7b:aa -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEJAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTk3MjExMTAvBgNVBAUTKDdEQTU4OUNFRDU3RjFFNUNDNDg2MDNEMTM4NDIyMzkz NkUxNjAyN0UwHhcNMjUxMTAyMTcyMzM1WhcNMjUxMTA5MTcyMzM1WjAYMRYwFAYD VQQDEw02OTA3OTM5Ny1iMzdiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1mYRhYy94Xps/volsrQCLzvCmwfYsC5NIfTooIrqnp662VyTbMpRns/qa7BD n25Nqnto5tTgsakPfHW0I+eYWrUdFZEZAATHPRv2iU8gUMnRbGKA9tKpEQjbCABI 9xpUN0VUSPk+InnOkbX2hV+ZPGWllHQtcDWczU5cYav9EBxpr+LvjVdSOmHXTE0P B2ofe9osZYb2MvwmBTbJTE53IDr7dXVj75kdqX6vpr6CO7qkRpDRLIb7SqcS7gOC Q9wQiJ0+GwOfvzR5Q7g8IRs5YF4ZQ8TSvV4vN6DoBnCdI20mK7Ld00x4PmtLQ0Ny ongBbDz7MX933maMK4DSn7FZlwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFD0cZ6Eq 83PNZsPLHArdDC3C6oYLMB8GA1UdIwQYMBaAFH2lic7Vfx5cxIYD0ThCI5NuFgJ+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFOTcyMS84QUVDMkFDNDNG QzQxMUU5OTJBM0U2MkRDNEY5QUUwMi9mYVdKenRWX0hsekVoZ1BST0VJamsyNFdB bjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ZhV0p6dFZfSGx6RWhnUFJPRUlqazI0V0FuNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF OTcyMS84QUVDMkFDNDNGQzQxMUU5OTJBM0U2MkRDNEY5QUUwMi9mYVdKenRWX0hs ekVoZ1BST0VJamsyNFdBbjQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAl8rrPda7vtHd9BUSjUM3HexIrCfGFNmrdx2RF2a56lZk5osFTQCDN 1Dy6BsRDkFXSWrNJ7NLbUmDHLDjN8e80dH460FHwYIwsLblj1PUa52OwZwqiOs/e oQb5jat/b5lYIWT+BHyNanRSjsEDku6zR1SlRdSYYA1BanepQRzfKBopqrLDhVJb ipKL4Oxbg2N7frf2N6gfwtobPgVKUwbKZzVEW8FNx4yjciMXS15FngL5YV2nIlJR +adqSVJ43jZUAPr3PaW0eO7tWNr+L85MovUP0yvQrnBAdmm7YEaYkVGqyqKMA4o5 QKE/6JdwcCeRV+yYzZsOO/wolQ/zt3uq -----END CERTIFICATE-----Generated at Mon Nov 3 18:13:22 2025 by rpki-client