$ rpki-client -vvf rpki.apnic.net/member_repository/A91F6E7D/1E9A11C2838111EAACB9BC30C4F9AE02/FhPW6_zYSc_MCoiNuX5rv1IHrbM.mft File: FhPW6_zYSc_MCoiNuX5rv1IHrbM.mft (raw, json) Hash identifier: 4X7c3NW5ebBuo8iFTsfr/NzWaUXskQoQHJwECegVl/A= Subject key identifier: BF:96:EC:C6:1D:FE:EF:98:41:C8:E2:1E:00:14:33:FD:13:D6:8B:D9 Authority key identifier: 16:13:D6:EB:FC:D8:49:CF:CC:0A:88:8D:B9:7E:6B:BF:52:07:AD:B3 Certificate issuer: /CN=A91F6E7D/serialNumber=1613D6EBFCD849CFCC0A888DB97E6BBF5207ADB3 Certificate serial: 0A13 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FhPW6_zYSc_MCoiNuX5rv1IHrbM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F6E7D/1E9A11C2838111EAACB9BC30C4F9AE02/FhPW6_zYSc_MCoiNuX5rv1IHrbM.mft Manifest number: 0A0B Signing time: Sun 02 Nov 2025 19:47:04 +0000 Manifest this update: Sun 02 Nov 2025 19:47:03 +0000 Manifest next update: Sun 09 Nov 2025 19:47:03 +0000 Files and hashes: 1: FhPW6_zYSc_MCoiNuX5rv1IHrbM.crl (hash: vwp13V2zDyvjCjwdXQoXItP3td41faCTMHiTddYbxoM=) 2: 4AEB32A2D2F911EA93B2C659C4F9AE02.roa (hash: TMxL1xAZ65D51is8H5Va3LgyajI14UzGu3dizhDhFWQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F6E7D/1E9A11C2838111EAACB9BC30C4F9AE02/FhPW6_zYSc_MCoiNuX5rv1IHrbM.crl rsync://rpki.apnic.net/member_repository/A91F6E7D/1E9A11C2838111EAACB9BC30C4F9AE02/FhPW6_zYSc_MCoiNuX5rv1IHrbM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FhPW6_zYSc_MCoiNuX5rv1IHrbM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 19:47:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2579 (0xa13) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F6E7D, serialNumber=1613D6EBFCD849CFCC0A888DB97E6BBF5207ADB3 Validity Not Before: Nov 2 19:47:03 2025 GMT Not After : Nov 9 19:47:03 2025 GMT Subject: CN=6907b538-308b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:ce:01:c8:cf:49:28:a7:44:16:25:27:69:0f: d3:d4:5c:5c:1d:e1:65:75:d8:52:6c:59:96:bb:ff: 19:54:c0:84:39:98:c9:63:46:04:6c:4d:51:62:8e: 63:78:c7:1a:ad:7b:57:28:c5:72:e5:73:10:b0:e4: 60:bf:ae:74:2d:1a:5d:84:ac:5f:ac:99:48:74:73: aa:d7:85:2a:28:a3:14:78:57:49:fc:0c:49:f1:48: 54:95:59:bf:0b:56:c4:3d:98:6e:1b:df:05:85:20: 9e:4d:52:a0:c0:a3:47:85:9e:1e:ab:2f:63:76:74: ab:82:26:a8:13:54:82:bc:70:68:a8:89:7a:73:4b: 2d:9e:91:83:9d:03:7c:6b:62:a6:7f:c6:81:ad:6e: cb:4e:06:54:13:f0:51:30:bd:63:e3:bd:f4:56:6a: 7b:e5:94:84:6c:d9:4b:f6:bc:97:13:c4:8b:42:59: 06:76:01:49:12:07:cb:c3:91:88:96:7e:e0:fe:18: 4a:43:57:d4:83:40:18:b1:02:8a:0f:81:68:47:7b: 61:91:06:19:42:c5:2f:5c:d3:57:20:59:e7:81:3a: 8d:b2:9a:bf:fe:48:e8:8d:4a:b5:13:0f:53:e9:36: c0:e9:72:9e:15:80:67:90:7e:db:db:a3:fd:46:60: fd:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:96:EC:C6:1D:FE:EF:98:41:C8:E2:1E:00:14:33:FD:13:D6:8B:D9 X509v3 Authority Key Identifier: keyid:16:13:D6:EB:FC:D8:49:CF:CC:0A:88:8D:B9:7E:6B:BF:52:07:AD:B3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F6E7D/1E9A11C2838111EAACB9BC30C4F9AE02/FhPW6_zYSc_MCoiNuX5rv1IHrbM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FhPW6_zYSc_MCoiNuX5rv1IHrbM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F6E7D/1E9A11C2838111EAACB9BC30C4F9AE02/FhPW6_zYSc_MCoiNuX5rv1IHrbM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 17:4b:ce:34:37:3f:29:07:2b:5b:b2:4f:50:36:d2:f0:35:52: 8a:a1:9b:8f:65:e5:66:5f:ea:9e:fd:a2:02:cf:c5:d5:d4:8e: dc:17:85:a4:61:6f:dd:0d:2b:0e:b3:56:d1:f0:59:8e:cc:c5: a1:39:17:00:b3:7b:c8:83:48:ca:00:f1:e1:9f:a2:ee:67:19: b1:92:40:91:2d:d2:6d:8f:e1:65:7b:d9:38:39:01:e9:b2:a9: b7:ba:e0:95:96:c3:99:b5:c9:8e:bc:0b:90:e3:9f:35:0d:19: a5:ed:dc:87:fe:ed:9a:82:2e:6d:37:36:f8:f0:c7:63:c0:20: e2:bd:c1:11:a2:06:85:90:dc:fc:ea:83:de:71:4f:2f:3b:9b: 4e:e0:45:7a:45:c9:dd:1b:d4:75:15:a0:a2:8b:31:fa:6e:0b: b9:4d:8b:9c:98:0b:9b:dd:7f:66:c2:d3:4d:73:9e:b4:2a:58: 78:69:82:47:fa:6c:4e:a3:ee:b8:d1:4b:82:57:c6:f5:f9:7c: f8:70:1c:e5:86:7e:20:c2:45:bb:ce:f2:5e:06:2b:1f:34:58: ee:1d:6f:9d:b7:22:0a:32:c2:87:e9:65:ee:f8:7e:35:9a:7d: 41:e7:1f:50:49:f3:b6:7f:a1:74:0c:71:59:c1:64:b7:c9:55: b6:7c:7b:ee -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICChMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjZFN0QxMTAvBgNVBAUTKDE2MTNENkVCRkNEODQ5Q0ZDQzBBODg4REI5N0U2QkJG NTIwN0FEQjMwHhcNMjUxMTAyMTk0NzAzWhcNMjUxMTA5MTk0NzAzWjAYMRYwFAYD VQQDEw02OTA3YjUzOC0zMDhiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAo84ByM9JKKdEFiUnaQ/T1FxcHeFlddhSbFmWu/8ZVMCEOZjJY0YEbE1RYo5j eMcarXtXKMVy5XMQsORgv650LRpdhKxfrJlIdHOq14UqKKMUeFdJ/AxJ8UhUlVm/ C1bEPZhuG98FhSCeTVKgwKNHhZ4eqy9jdnSrgiaoE1SCvHBoqIl6c0stnpGDnQN8 a2Kmf8aBrW7LTgZUE/BRML1j4730Vmp75ZSEbNlL9ryXE8SLQlkGdgFJEgfLw5GI ln7g/hhKQ1fUg0AYsQKKD4FoR3thkQYZQsUvXNNXIFnngTqNspq//kjojUq1Ew9T 6TbA6XKeFYBnkH7b26P9RmD9twIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFL+W7MYd /u+YQcjiHgAUM/0T1ovZMB8GA1UdIwQYMBaAFBYT1uv82EnPzAqIjbl+a79SB62z MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNkU3RC8xRTlBMTFDMjgz ODExMUVBQUNCOUJDMzBDNEY5QUUwMi9GaFBXNl96WVNjX01Db2lOdVg1cnYxSUhy Yk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZoUFc2X3pZU2NfTUNvaU51WDVydjFJSHJiTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NkU3RC8xRTlBMTFDMjgzODExMUVBQUNCOUJDMzBDNEY5QUUwMi9GaFBXNl96WVNj X01Db2lOdVg1cnYxSUhyYk0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAXS840Nz8pBytbsk9QNtLwNVKKoZuPZeVmX+qe/aICz8XV1I7cF4Wk YW/dDSsOs1bR8FmOzMWhORcAs3vIg0jKAPHhn6LuZxmxkkCRLdJtj+Fle9k4OQHp sqm3uuCVlsOZtcmOvAuQ4581DRml7dyH/u2agi5tNzb48MdjwCDivcERogaFkNz8 6oPecU8vO5tO4EV6RcndG9R1FaCiizH6bgu5TYucmAub3X9mwtNNc560Klh4aYJH +mxOo+640UuCV8b1+Xz4cBzlhn4gwkW7zvJeBisfNFjuHW+dtyIKMsKH6WXu+H41 mn1B5x9QSfO2f6F0DHFZwWS3yVW2fHvu -----END CERTIFICATE-----Generated at Mon Nov 3 18:20:00 2025 by rpki-client