$ rpki-client -vvf rpki.apnic.net/member_repository/A91FDD88/C8236AC2049011EC8CC1A386C4F9AE02/FBD9h4cUD_mXb-nB-lhE7V3R48U.mft File: FBD9h4cUD_mXb-nB-lhE7V3R48U.mft (raw, json) Hash identifier: Uthbn0hol5ZmZbldID8dPduose2J2/I4PTA0fKWMrtw= Subject key identifier: 1D:F7:C3:09:2E:E0:8D:98:1F:42:D0:6C:99:0C:E4:E0:F4:2B:BD:EF Authority key identifier: 14:10:FD:87:87:14:0F:F9:97:6F:E9:C1:FA:58:44:ED:5D:D1:E3:C5 Certificate issuer: /CN=A91FDD88/serialNumber=1410FD8787140FF9976FE9C1FA5844ED5DD1E3C5 Certificate serial: 056A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FBD9h4cUD_mXb-nB-lhE7V3R48U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FDD88/C8236AC2049011EC8CC1A386C4F9AE02/FBD9h4cUD_mXb-nB-lhE7V3R48U.mft Manifest number: 0565 Signing time: Fri 31 Oct 2025 23:30:18 +0000 Manifest this update: Fri 31 Oct 2025 23:30:17 +0000 Manifest next update: Fri 07 Nov 2025 23:30:17 +0000 Files and hashes: 1: FBD9h4cUD_mXb-nB-lhE7V3R48U.crl (hash: E/GzbrmNESzSFm190vwzeZ3RUWOiVUqYFjub9Dw+8/8=) 2: A2835264049511ECB774BA31C4F9AE02.roa (hash: PcE88PvoHtH4Ij2/lKWEyW6+bdwrSYmzkRCPzAMwYvU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FDD88/C8236AC2049011EC8CC1A386C4F9AE02/FBD9h4cUD_mXb-nB-lhE7V3R48U.crl rsync://rpki.apnic.net/member_repository/A91FDD88/C8236AC2049011EC8CC1A386C4F9AE02/FBD9h4cUD_mXb-nB-lhE7V3R48U.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FBD9h4cUD_mXb-nB-lhE7V3R48U.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Nov 2025 23:30:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1386 (0x56a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FDD88, serialNumber=1410FD8787140FF9976FE9C1FA5844ED5DD1E3C5 Validity Not Before: Oct 31 23:30:17 2025 GMT Not After : Nov 7 23:30:17 2025 GMT Subject: CN=69054689-9df8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:3d:38:1a:e8:54:b3:7a:29:f9:d2:f8:7c:bf: e6:14:bc:76:00:2f:8a:2c:55:23:a0:06:68:9c:87: c4:a9:75:ad:26:2d:5c:aa:3d:2e:31:66:94:11:5d: a6:b7:37:39:4e:08:b2:ef:dd:c5:48:2d:db:62:8a: f7:b2:30:6a:a8:0f:21:10:16:33:d1:20:9b:cb:2e: 50:43:45:c4:23:5f:cb:a4:46:d4:33:3d:61:2f:49: 4f:43:a2:4c:e8:03:22:bc:de:06:7b:79:61:38:59: e7:92:b2:d5:82:8b:3e:0f:4f:24:96:5f:eb:18:47: 2b:41:87:e0:73:91:cd:9c:1a:17:5c:0c:60:9d:06: 54:20:fd:78:a6:b4:29:ef:6b:7a:95:5a:33:cc:f7: 52:d5:43:7a:8b:f3:dc:7d:1f:77:b3:a4:0d:58:95: 3e:91:7b:d3:cb:d2:f2:42:8a:f4:de:cc:72:ec:87: cd:70:c0:97:f2:d8:81:1c:2a:ec:85:41:55:0d:27: 71:43:12:cd:62:0b:56:c1:f3:27:63:89:8f:32:09: 66:a1:dc:7c:9e:23:a2:f4:34:da:75:52:9a:8a:d4: d0:ca:d9:31:b0:9d:b8:10:71:bd:d0:26:9e:d1:7b: 93:f3:fb:bc:9e:d6:f2:e8:16:52:09:7a:7b:cc:c1: 71:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:F7:C3:09:2E:E0:8D:98:1F:42:D0:6C:99:0C:E4:E0:F4:2B:BD:EF X509v3 Authority Key Identifier: keyid:14:10:FD:87:87:14:0F:F9:97:6F:E9:C1:FA:58:44:ED:5D:D1:E3:C5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FDD88/C8236AC2049011EC8CC1A386C4F9AE02/FBD9h4cUD_mXb-nB-lhE7V3R48U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FBD9h4cUD_mXb-nB-lhE7V3R48U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FDD88/C8236AC2049011EC8CC1A386C4F9AE02/FBD9h4cUD_mXb-nB-lhE7V3R48U.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b7:85:85:08:3c:fd:1c:3f:7c:19:60:a6:25:be:e0:fd:57:b8: b4:a0:81:67:2a:d2:44:5a:b7:47:63:ee:40:54:35:f4:5b:6f: 10:b7:84:53:d8:4d:34:6b:15:b3:cf:1a:d7:b5:14:f6:c1:a9: f4:fe:bf:79:c5:c6:eb:19:4c:c5:b8:b5:06:7d:f5:7f:b9:3e: 9c:51:2d:95:0a:ca:54:3c:ec:f3:17:24:c6:0d:a2:f6:27:79: 85:92:10:ff:e2:50:13:44:e5:64:7a:0a:93:32:0e:da:69:12: 38:51:31:ee:75:a0:9e:b5:95:9d:b5:ee:20:ee:c1:79:02:88: 67:0d:5a:02:67:ac:7e:a3:bb:03:a1:f3:b6:3e:9e:7f:3a:e5: ad:28:e1:05:d3:2d:52:9f:06:63:3d:e2:c0:33:f5:fa:5d:4d: f9:56:26:35:ba:2b:b6:8c:b1:13:c0:41:57:7f:0f:39:f0:8a: db:b4:e3:7b:82:38:bf:fa:8e:7b:8f:b4:23:a6:9a:3a:e5:0c: f9:69:57:da:54:56:cd:9e:85:b0:8e:26:b5:9a:25:2d:83:cc: ab:8c:96:27:9c:74:f7:08:b2:a5:e3:ac:5b:fb:e6:12:c9:12: 97:1b:a9:79:d4:86:1e:24:75:22:c6:94:76:97:fc:45:18:b2: d8:2d:00:cb -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBWowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkREODgxMTAvBgNVBAUTKDE0MTBGRDg3ODcxNDBGRjk5NzZGRTlDMUZBNTg0NEVE NUREMUUzQzUwHhcNMjUxMDMxMjMzMDE3WhcNMjUxMTA3MjMzMDE3WjAYMRYwFAYD VQQDEw02OTA1NDY4OS05ZGY4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5j04GuhUs3op+dL4fL/mFLx2AC+KLFUjoAZonIfEqXWtJi1cqj0uMWaUEV2m tzc5Tgiy793FSC3bYor3sjBqqA8hEBYz0SCbyy5QQ0XEI1/LpEbUMz1hL0lPQ6JM 6AMivN4Ge3lhOFnnkrLVgos+D08kll/rGEcrQYfgc5HNnBoXXAxgnQZUIP14prQp 72t6lVozzPdS1UN6i/PcfR93s6QNWJU+kXvTy9LyQor03sxy7IfNcMCX8tiBHCrs hUFVDSdxQxLNYgtWwfMnY4mPMglmodx8niOi9DTadVKaitTQytkxsJ24EHG90Cae 0XuT8/u8ntby6BZSCXp7zMFxIwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFB33wwku 4I2YH0LQbJkM5OD0K73vMB8GA1UdIwQYMBaAFBQQ/YeHFA/5l2/pwfpYRO1d0ePF MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGREQ4OC9DODIzNkFDMjA0 OTAxMUVDOENDMUEzODZDNEY5QUUwMi9GQkQ5aDRjVURfbVhiLW5CLWxoRTdWM1I0 OFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZCRDloNGNVRF9tWGItbkItbGhFN1YzUjQ4VS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG REQ4OC9DODIzNkFDMjA0OTAxMUVDOENDMUEzODZDNEY5QUUwMi9GQkQ5aDRjVURf bVhiLW5CLWxoRTdWM1I0OFUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC3hYUIPP0cP3wZYKYlvuD9V7i0oIFnKtJEWrdHY+5AVDX0W28Qt4RT 2E00axWzzxrXtRT2wan0/r95xcbrGUzFuLUGffV/uT6cUS2VCspUPOzzFyTGDaL2 J3mFkhD/4lATROVkegqTMg7aaRI4UTHudaCetZWdte4g7sF5AohnDVoCZ6x+o7sD ofO2Pp5/OuWtKOEF0y1SnwZjPeLAM/X6XU35ViY1uiu2jLETwEFXfw858IrbtON7 gji/+o57j7Qjppo65Qz5aVfaVFbNnoWwjia1miUtg8yrjJYnnHT3CLKl46xb++YS yRKXG6l51IYeJHUixpR2l/xFGLLYLQDL -----END CERTIFICATE-----Generated at Sat Nov 1 10:31:05 2025 by rpki-client