$ rpki-client -vvf rpki.apnic.net/member_repository/A91FE769/C5D6A57E604C11F090816A15C4F9AE02/FOFy6-ntnDEE1U8RqpdiI-s3aQc.mft File: FOFy6-ntnDEE1U8RqpdiI-s3aQc.mft (raw, json) Hash identifier: 5PutHfUrQj3YfIKi0ODmT4QW1dTt5Aeq2JPzaGX0+9k= Subject key identifier: EE:A7:9C:E4:8D:B4:84:DF:55:A0:97:6E:DF:A5:09:B8:D2:B3:64:34 Authority key identifier: 14:E1:72:EB:E9:ED:9C:31:04:D5:4F:11:AA:97:62:23:EB:37:69:07 Certificate issuer: /CN=A91FE769/serialNumber=14E172EBE9ED9C3104D54F11AA976223EB376907 Certificate serial: 40 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FOFy6-ntnDEE1U8RqpdiI-s3aQc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FE769/C5D6A57E604C11F090816A15C4F9AE02/FOFy6-ntnDEE1U8RqpdiI-s3aQc.mft Manifest number: 3E Signing time: Wed 05 Nov 2025 07:41:50 +0000 Manifest this update: Wed 05 Nov 2025 07:41:50 +0000 Manifest next update: Wed 12 Nov 2025 07:41:50 +0000 Files and hashes: 1: FOFy6-ntnDEE1U8RqpdiI-s3aQc.crl (hash: qIdCvYljS96x5hCEOMqpoQo3mtpEaGe63mlLZgrihzY=) 2: D63D48DE604F11F0B5D8E73CC4F9AE02.roa (hash: emv514v8DwKzvHJH8ilfs/YN+XFNOa2awfMLCjPK/mI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FE769/C5D6A57E604C11F090816A15C4F9AE02/FOFy6-ntnDEE1U8RqpdiI-s3aQc.crl rsync://rpki.apnic.net/member_repository/A91FE769/C5D6A57E604C11F090816A15C4F9AE02/FOFy6-ntnDEE1U8RqpdiI-s3aQc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FOFy6-ntnDEE1U8RqpdiI-s3aQc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 07:41:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 64 (0x40) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FE769, serialNumber=14E172EBE9ED9C3104D54F11AA976223EB376907 Validity Not Before: Nov 5 07:41:50 2025 GMT Not After : Nov 12 07:41:50 2025 GMT Subject: CN=690affbe-132e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:d3:00:63:d3:be:24:af:fc:9f:11:b2:8b:db: 6b:4d:44:20:5e:00:c6:69:d6:96:66:9d:80:e4:72: e4:17:f6:59:fe:13:0b:9f:66:05:a6:29:e8:e7:84: d7:81:b7:e4:09:b5:1c:6e:6c:af:0c:16:ae:5b:17: c2:56:8d:9d:50:75:3b:3c:fb:e1:bf:69:6f:44:fb: 87:81:df:6a:da:04:bb:1f:3c:ad:e5:b6:dc:10:2a: 3a:8a:e6:e0:e3:71:a3:7d:db:e8:02:91:35:1c:eb: 46:b1:41:34:c9:9f:90:50:93:c4:3c:e2:88:00:ca: 8b:1f:d6:53:11:cf:93:29:17:8d:aa:38:94:8d:7a: a2:f7:89:a0:dd:c9:79:40:99:04:ce:d2:b4:29:c0: 03:15:99:a9:17:6a:13:53:06:db:4d:29:dd:f6:55: f6:26:2a:70:86:71:44:c8:c1:28:50:95:23:f6:94: 8d:38:08:f6:b0:7a:ef:89:4a:b7:f2:6b:e1:05:cb: 76:52:62:73:0e:41:37:3d:71:d4:d8:ba:a4:17:86: 1b:9b:9b:1e:d7:92:64:78:f0:4c:e3:2d:c7:e7:33: 04:6f:96:50:45:71:43:11:6c:95:97:8e:64:bc:74: 31:e4:93:a2:22:14:d3:86:b0:0d:a0:18:70:e8:0e: 65:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:A7:9C:E4:8D:B4:84:DF:55:A0:97:6E:DF:A5:09:B8:D2:B3:64:34 X509v3 Authority Key Identifier: keyid:14:E1:72:EB:E9:ED:9C:31:04:D5:4F:11:AA:97:62:23:EB:37:69:07 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FE769/C5D6A57E604C11F090816A15C4F9AE02/FOFy6-ntnDEE1U8RqpdiI-s3aQc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FOFy6-ntnDEE1U8RqpdiI-s3aQc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FE769/C5D6A57E604C11F090816A15C4F9AE02/FOFy6-ntnDEE1U8RqpdiI-s3aQc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 93:44:13:ac:82:98:84:02:6b:a6:61:1c:a9:65:2e:8f:67:e2: ac:d9:20:18:66:9c:b1:00:a1:d8:92:06:08:30:77:df:de:30: 59:ea:b5:5d:73:bd:95:50:ae:91:dc:5b:11:57:5e:fc:83:84: 5c:81:c4:e2:ee:f4:d3:e0:51:6d:6f:14:fa:a8:f6:58:f7:cb: d6:9c:3f:74:cb:af:66:f5:bb:86:50:eb:6b:ce:64:c0:fd:ab: b2:a5:38:f3:0e:b9:a1:50:79:56:7b:3c:f5:ef:5f:16:b1:74: 37:0f:6d:25:05:2f:f1:98:81:0d:16:e2:b4:da:a8:ca:bf:06: 22:70:04:6c:57:40:26:dd:88:b7:13:ca:51:e9:48:e2:2b:c6: 6c:43:16:2d:fe:2b:2a:a0:57:ac:5f:e2:83:8e:3c:cb:25:3b: c6:71:ad:3d:4c:ad:8c:ca:9c:26:63:e7:29:80:ef:cf:4c:5a: b1:7a:43:da:21:3c:1b:a0:74:a8:9d:82:f2:7f:0a:1e:31:dd: a8:88:41:69:2a:b8:06:d4:1e:f2:c6:11:cb:66:9f:63:01:22: b6:ea:da:2d:d5:94:c0:21:cd:85:1d:3c:9a:4e:f6:a2:7d:eb: 43:a2:ac:6f:53:04:57:e7:f9:6a:68:2a:52:ea:78:f6:d0:5c: 9d:3b:6d:5a -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBQDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG RTc2OTExMC8GA1UEBRMoMTRFMTcyRUJFOUVEOUMzMTA0RDU0RjExQUE5NzYyMjNF QjM3NjkwNzAeFw0yNTExMDUwNzQxNTBaFw0yNTExMTIwNzQxNTBaMBgxFjAUBgNV BAMTDTY5MGFmZmJlLTEzMmUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCz0wBj074kr/yfEbKL22tNRCBeAMZp1pZmnYDkcuQX9ln+EwufZgWmKejnhNeB t+QJtRxubK8MFq5bF8JWjZ1QdTs8++G/aW9E+4eB32raBLsfPK3lttwQKjqK5uDj caN92+gCkTUc60axQTTJn5BQk8Q84ogAyosf1lMRz5MpF42qOJSNeqL3iaDdyXlA mQTO0rQpwAMVmakXahNTBttNKd32VfYmKnCGcUTIwShQlSP2lI04CPaweu+JSrfy a+EFy3ZSYnMOQTc9cdTYuqQXhhubmx7XkmR48EzjLcfnMwRvllBFcUMRbJWXjmS8 dDHkk6IiFNOGsA2gGHDoDmVLAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU7qec5I20 hN9VoJdu36UJuNKzZDQwHwYDVR0jBBgwFoAUFOFy6+ntnDEE1U8RqpdiI+s3aQcw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUZFNzY5L0M1RDZBNTdFNjA0 QzExRjA5MDgxNkExNUM0RjlBRTAyL0ZPRnk2LW50bkRFRTFVOFJxcGRpSS1zM2FR Yy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvRk9GeTYtbnRuREVFMVU4UnFwZGlJLXMzYVFjLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUZF NzY5L0M1RDZBNTdFNjA0QzExRjA5MDgxNkExNUM0RjlBRTAyL0ZPRnk2LW50bkRF RTFVOFJxcGRpSS1zM2FRYy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAJNEE6yCmIQCa6ZhHKllLo9n4qzZIBhmnLEAodiSBggwd9/eMFnqtV1z vZVQrpHcWxFXXvyDhFyBxOLu9NPgUW1vFPqo9lj3y9acP3TLr2b1u4ZQ62vOZMD9 q7KlOPMOuaFQeVZ7PPXvXxaxdDcPbSUFL/GYgQ0W4rTaqMq/BiJwBGxXQCbdiLcT ylHpSOIrxmxDFi3+KyqgV6xf4oOOPMslO8ZxrT1MrYzKnCZj5ymA789MWrF6Q9oh PBugdKidgvJ/Ch4x3aiIQWkquAbUHvLGEctmn2MBIrbq2i3VlMAhzYUdPJpO9qJ9 60OirG9TBFfn+WpoKlLqePbQXJ07bVo= -----END CERTIFICATE-----Generated at Wed Nov 5 19:28:16 2025 by rpki-client