$ rpki-client -vvf rpki.apnic.net/member_repository/A91F2230/ADFA554C708211E9B7BC390AC4F9AE02/F2pOA7VAryUUqLxxnCug-fdv-y8.mft File: F2pOA7VAryUUqLxxnCug-fdv-y8.mft (raw, json) Hash identifier: PxreMQOZEW3fsA6XMy33X0Z4SjqjkJdzu+chGdR54lU= Subject key identifier: 3C:7D:F9:D4:AA:69:79:0D:C5:70:28:9B:7B:0F:D1:10:87:96:7E:D3 Authority key identifier: 17:6A:4E:03:B5:40:AF:25:14:A8:BC:71:9C:2B:A0:F9:F7:6F:FB:2F Certificate issuer: /CN=A91F2230/serialNumber=176A4E03B540AF2514A8BC719C2BA0F9F76FFB2F Certificate serial: 0F90 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F2pOA7VAryUUqLxxnCug-fdv-y8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F2230/ADFA554C708211E9B7BC390AC4F9AE02/F2pOA7VAryUUqLxxnCug-fdv-y8.mft Manifest number: 0F87 Signing time: Tue 04 Nov 2025 17:38:06 +0000 Manifest this update: Tue 04 Nov 2025 17:38:05 +0000 Manifest next update: Tue 11 Nov 2025 17:38:05 +0000 Files and hashes: 1: F2pOA7VAryUUqLxxnCug-fdv-y8.crl (hash: 3g1MTIdeVhZ5zkwD1Tspz9gTaTSRsQTfmoGd5wSU4I4=) 2: 09CEF4D0708411E9AC9EA90EC4F9AE02.roa (hash: qze9TLSC/LlQUaDdTzlKDoE3Bw7Tcrh+S+c1zck+d7A=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F2230/ADFA554C708211E9B7BC390AC4F9AE02/F2pOA7VAryUUqLxxnCug-fdv-y8.crl rsync://rpki.apnic.net/member_repository/A91F2230/ADFA554C708211E9B7BC390AC4F9AE02/F2pOA7VAryUUqLxxnCug-fdv-y8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F2pOA7VAryUUqLxxnCug-fdv-y8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 17:38:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3984 (0xf90) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F2230, serialNumber=176A4E03B540AF2514A8BC719C2BA0F9F76FFB2F Validity Not Before: Nov 4 17:38:05 2025 GMT Not After : Nov 11 17:38:05 2025 GMT Subject: CN=690a39fe-173b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:a5:2b:3a:fe:00:e5:90:57:c1:60:9a:3c:e8: e7:4f:2b:72:5d:f0:bd:d9:cf:0d:4e:fd:a7:6b:a5: d0:ee:22:aa:c4:e7:86:3a:e1:9a:1f:1c:9d:52:92: fe:ae:30:19:87:41:b9:90:1b:5e:83:3c:67:10:54: 7e:a3:7c:63:ce:fa:06:96:ee:7c:58:43:cc:4a:6f: c1:2a:78:50:97:7a:53:61:c8:a1:57:91:db:91:fc: 56:8e:d4:54:df:8b:ec:9f:71:71:af:ba:96:91:51: 10:a7:d6:32:36:03:8f:30:9b:ef:49:a9:48:a9:f9: 99:10:bb:75:c5:a3:a4:36:05:c5:23:a4:59:9f:66: 1f:d0:47:78:a7:15:bf:91:09:66:6a:f6:f9:08:cd: f3:94:fc:1b:55:d7:8e:ad:d1:2c:cb:46:5d:df:59: 86:8e:af:2c:fb:52:08:c7:60:2c:a5:a6:9e:ae:da: a1:dd:48:f6:f8:fd:19:48:4d:e5:89:38:fd:21:6f: f2:da:7b:53:53:b4:c8:a1:73:3b:ed:ac:fc:24:c8: 12:0c:e5:10:78:bf:29:96:a1:30:b9:43:5d:d3:c0: 81:79:29:7b:d6:cc:34:fa:7b:99:af:dd:77:2c:d6: 89:7e:a7:1e:2c:09:40:81:a1:eb:65:06:19:8b:c9: 8d:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:7D:F9:D4:AA:69:79:0D:C5:70:28:9B:7B:0F:D1:10:87:96:7E:D3 X509v3 Authority Key Identifier: keyid:17:6A:4E:03:B5:40:AF:25:14:A8:BC:71:9C:2B:A0:F9:F7:6F:FB:2F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F2230/ADFA554C708211E9B7BC390AC4F9AE02/F2pOA7VAryUUqLxxnCug-fdv-y8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F2pOA7VAryUUqLxxnCug-fdv-y8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F2230/ADFA554C708211E9B7BC390AC4F9AE02/F2pOA7VAryUUqLxxnCug-fdv-y8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 90:42:b2:cc:15:d3:80:6f:04:9b:56:72:29:3c:db:d3:b3:16: e5:51:7d:91:78:57:17:d6:a8:c9:ce:51:47:e8:cd:a8:c1:b3: 5a:69:6c:cd:a3:1f:cf:e7:19:c8:ae:68:f2:70:c2:4a:bf:f6: 9c:6c:0d:f3:b7:93:63:00:3c:9e:ba:56:01:43:a6:60:2d:13: 60:77:69:42:c2:56:41:6d:d3:3d:f8:b0:e6:a9:e1:3b:9a:ec: 42:56:61:65:f7:0f:6f:7a:5b:e9:07:ff:6d:04:79:43:80:82: f5:34:9e:43:04:5b:91:22:35:eb:48:f9:e9:15:18:1a:ac:f5: 2e:1c:10:f6:3b:4d:ee:4f:68:f5:77:55:47:03:2e:7e:31:4f: a7:50:1c:2a:2e:70:d6:4b:90:6e:fc:1e:ac:e8:3e:bf:77:b2: 25:58:67:ba:d8:5f:8c:b5:21:3b:dc:b4:7a:00:fc:41:b0:b6: 85:94:13:28:da:ca:6c:9f:ca:37:4a:a1:89:70:c5:c8:7f:57: 5a:91:24:23:ac:8c:e9:6e:f4:ee:f6:50:7f:a4:85:10:8b:57: 4d:c3:d9:a7:ad:0b:e7:ca:12:59:74:3e:79:d7:37:19:51:91: 59:cc:fc:09:4d:a9:f8:21:08:e7:05:3c:9b:78:ae:5c:70:22: c3:45:25:c0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICD5AwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjIyMzAxMTAvBgNVBAUTKDE3NkE0RTAzQjU0MEFGMjUxNEE4QkM3MTlDMkJBMEY5 Rjc2RkZCMkYwHhcNMjUxMTA0MTczODA1WhcNMjUxMTExMTczODA1WjAYMRYwFAYD VQQDEw02OTBhMzlmZS0xNzNiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAm6UrOv4A5ZBXwWCaPOjnTytyXfC92c8NTv2na6XQ7iKqxOeGOuGaHxydUpL+ rjAZh0G5kBtegzxnEFR+o3xjzvoGlu58WEPMSm/BKnhQl3pTYcihV5HbkfxWjtRU 34vsn3Fxr7qWkVEQp9YyNgOPMJvvSalIqfmZELt1xaOkNgXFI6RZn2Yf0Ed4pxW/ kQlmavb5CM3zlPwbVdeOrdEsy0Zd31mGjq8s+1IIx2Aspaaertqh3Uj2+P0ZSE3l iTj9IW/y2ntTU7TIoXM77az8JMgSDOUQeL8plqEwuUNd08CBeSl71sw0+nuZr913 LNaJfqceLAlAgaHrZQYZi8mNtQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDx9+dSq aXkNxXAom3sP0RCHln7TMB8GA1UdIwQYMBaAFBdqTgO1QK8lFKi8cZwroPn3b/sv MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMjIzMC9BREZBNTU0Qzcw ODIxMUU5QjdCQzM5MEFDNEY5QUUwMi9GMnBPQTdWQXJ5VVVxTHh4bkN1Zy1mZHYt eTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0YycE9BN1ZBcnlVVXFMeHhuQ3VnLWZkdi15OC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG MjIzMC9BREZBNTU0QzcwODIxMUU5QjdCQzM5MEFDNEY5QUUwMi9GMnBPQTdWQXJ5 VVVxTHh4bkN1Zy1mZHYteTgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCQQrLMFdOAbwSbVnIpPNvTsxblUX2ReFcX1qjJzlFH6M2owbNaaWzN ox/P5xnIrmjycMJKv/acbA3zt5NjADyeulYBQ6ZgLRNgd2lCwlZBbdM9+LDmqeE7 muxCVmFl9w9velvpB/9tBHlDgIL1NJ5DBFuRIjXrSPnpFRgarPUuHBD2O03uT2j1 d1VHAy5+MU+nUBwqLnDWS5Bu/B6s6D6/d7IlWGe62F+MtSE73LR6APxBsLaFlBMo 2spsn8o3SqGJcMXIf1dakSQjrIzpbvTu9lB/pIUQi1dNw9mnrQvnyhJZdD551zcZ UZFZzPwJTan4IQjnBTybeK5ccCLDRSXA -----END CERTIFICATE-----Generated at Wed Nov 5 05:27:11 2025 by rpki-client