$ rpki-client -vvf rpki.apnic.net/member_repository/A9119DCB/E4C0F56C187F11EBAE29692EC4F9AE02/FyPctBoEJopYeqzoz9na5fn1Hfc.mft File: FyPctBoEJopYeqzoz9na5fn1Hfc.mft (raw, json) Hash identifier: QtotqNdCPV4F8ntdyem8FaB75Wxim899A7WMpfugx4g= Subject key identifier: FD:51:34:D9:4A:DA:67:C8:33:6C:DE:08:05:EE:21:75:0F:DD:4F:A6 Authority key identifier: 17:23:DC:B4:1A:04:26:8A:58:7A:AC:E8:CF:D9:DA:E5:F9:F5:1D:F7 Certificate issuer: /CN=A9119DCB/serialNumber=1723DCB41A04268A587AACE8CFD9DAE5F9F51DF7 Certificate serial: 07FB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FyPctBoEJopYeqzoz9na5fn1Hfc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9119DCB/E4C0F56C187F11EBAE29692EC4F9AE02/FyPctBoEJopYeqzoz9na5fn1Hfc.mft Manifest number: 07D1 Signing time: Sun 02 Nov 2025 21:16:53 +0000 Manifest this update: Sun 02 Nov 2025 21:16:53 +0000 Manifest next update: Sun 09 Nov 2025 21:16:53 +0000 Files and hashes: 1: FyPctBoEJopYeqzoz9na5fn1Hfc.crl (hash: ofBapsqw24+pBYrujNGrcQPT9pl9a9x3B6uYmHkqLpU=) 2: 3CD29BF4D46911EE8B36431CC4F9AE02.roa (hash: eRh3STMZAaCuqDqQZCMcnNT2rNeo5Bk/5FuTVp0jQRg=) 3: 8037BC50EB2E11EDB835EF4AC4F9AE02.roa (hash: 9AUbM37b5CiLCdaFctD08Xg1S7rAzz8NUfqZj75vIUI=) 4: 7AA7B416E01011EEA1CA127CC4F9AE02.roa (hash: Ath/WU2ZkFdzqQ3oivM8Zg8QBrfw7L/kuNwCwRxLfag=) 5: 68DAAA1A749711EFB4EDA45FC4F9AE02.roa (hash: lqYCCMlU2p+r8Vr8oCvHriQYj28R9n24bUWS9AQiTY0=) 6: 2840D3A225FF11EBAF634966C4F9AE02.roa (hash: jMAptin7Nn/9ubjtB7+t/RBCpP9LLYksPnIclcQRTkk=) 7: 26D56F6425FF11EBAF634966C4F9AE02.roa (hash: Djj/jcA9qOYbqLWVcaOfucyuLejfqOjI1XLtoDbH2+E=) 8: 284E9E9E1D5611EB891ADC6CC4F9AE02.roa (hash: NCqMqwIpI4KCw7V6V+LHlzb+BzZa7gOeav4mNQAltOI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9119DCB/E4C0F56C187F11EBAE29692EC4F9AE02/FyPctBoEJopYeqzoz9na5fn1Hfc.crl rsync://rpki.apnic.net/member_repository/A9119DCB/E4C0F56C187F11EBAE29692EC4F9AE02/FyPctBoEJopYeqzoz9na5fn1Hfc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FyPctBoEJopYeqzoz9na5fn1Hfc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 21:16:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2043 (0x7fb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9119DCB, serialNumber=1723DCB41A04268A587AACE8CFD9DAE5F9F51DF7 Validity Not Before: Nov 2 21:16:53 2025 GMT Not After : Nov 9 21:16:53 2025 GMT Subject: CN=6907ca45-f6a1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:38:09:ba:c1:78:ba:23:da:ef:e5:ac:2d:d0: 23:d6:a7:e1:92:5a:f7:71:9b:17:19:78:e9:83:5a: db:c9:0a:5b:9e:67:37:34:46:9c:d1:e7:9d:42:6e: 8f:a1:6f:11:e7:af:9a:9c:38:86:69:65:a7:88:3d: e5:82:a6:c1:3c:2c:19:1b:d2:6a:67:4c:c8:34:cb: b9:68:b4:40:fa:52:cb:9c:07:88:93:22:30:68:4a: 03:bb:73:74:f5:23:c4:b2:66:5c:d1:aa:cc:61:47: c1:28:af:48:16:50:21:01:e3:30:9a:54:dd:3e:57: e9:34:07:49:38:c9:95:f0:b6:65:f6:fc:48:65:8a: ac:8e:8c:48:f6:2e:8d:4f:dc:89:37:47:8c:b0:8f: 36:d3:7d:05:dc:70:52:21:51:05:a4:a8:10:5e:69: 12:31:b0:8e:3a:c4:12:f2:6f:3d:3f:15:28:1d:f5: a8:e7:30:b3:88:79:5c:73:a4:64:0b:bc:e8:8a:26: b2:51:36:57:0b:50:c3:8f:69:c8:35:de:4b:0d:a0: a9:6e:f2:09:11:aa:b7:9a:58:ee:23:b3:f1:0d:34: 82:9e:8c:4c:da:fa:fc:d3:8e:3a:67:32:8b:f9:94: c5:c8:32:08:d1:0e:f6:9f:ed:27:8f:9c:c0:b0:4b: bf:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:51:34:D9:4A:DA:67:C8:33:6C:DE:08:05:EE:21:75:0F:DD:4F:A6 X509v3 Authority Key Identifier: keyid:17:23:DC:B4:1A:04:26:8A:58:7A:AC:E8:CF:D9:DA:E5:F9:F5:1D:F7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9119DCB/E4C0F56C187F11EBAE29692EC4F9AE02/FyPctBoEJopYeqzoz9na5fn1Hfc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FyPctBoEJopYeqzoz9na5fn1Hfc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9119DCB/E4C0F56C187F11EBAE29692EC4F9AE02/FyPctBoEJopYeqzoz9na5fn1Hfc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 59:15:7e:00:d5:a7:b1:e5:95:35:6d:a2:d4:37:37:9d:0c:f1: e8:1b:57:c8:e4:03:2a:c4:16:0f:cf:31:20:00:c5:22:94:0e: fc:67:f7:6d:00:90:5f:ce:43:dc:0d:11:06:3e:9e:a8:bd:d8: 51:f7:33:69:5b:9d:06:27:80:2b:12:8a:a3:33:e2:36:10:c7: f4:66:07:a5:9b:0d:fc:f6:41:dd:80:d1:fd:7b:e4:87:3c:46: 7f:9e:13:0d:b7:b5:57:8c:7e:e7:e9:7f:10:78:64:d8:65:af: 9e:6d:81:96:18:82:e9:85:43:bc:d7:de:4a:b9:1d:0a:cf:da: c5:8a:52:a8:7b:32:32:6a:d3:8f:6a:3e:5a:ee:b6:2d:8e:c0: 0f:59:4e:a0:8f:9e:29:78:46:65:b4:26:89:0e:5b:84:bb:bf: c7:0c:e9:20:9a:67:9b:71:31:7d:a6:95:ae:b1:99:9a:c1:9d: 97:6a:0c:df:c3:bd:76:1c:d1:0d:1e:b7:28:19:00:96:e6:12: 6f:3f:4d:60:21:9b:1d:0c:47:ed:2b:e8:be:36:be:fb:85:c6: cd:63:08:99:d0:93:ac:f5:de:53:0e:02:34:ca:7e:61:b2:41: b4:76:46:0f:cb:a3:08:5d:ea:57:b9:e6:3e:a6:38:24:ef:66: 17:fb:03:ab -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB/swDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTlEQ0IxMTAvBgNVBAUTKDE3MjNEQ0I0MUEwNDI2OEE1ODdBQUNFOENGRDlEQUU1 RjlGNTFERjcwHhcNMjUxMTAyMjExNjUzWhcNMjUxMTA5MjExNjUzWjAYMRYwFAYD VQQDEw02OTA3Y2E0NS1mNmExMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0jgJusF4uiPa7+WsLdAj1qfhklr3cZsXGXjpg1rbyQpbnmc3NEac0eedQm6P oW8R56+anDiGaWWniD3lgqbBPCwZG9JqZ0zINMu5aLRA+lLLnAeIkyIwaEoDu3N0 9SPEsmZc0arMYUfBKK9IFlAhAeMwmlTdPlfpNAdJOMmV8LZl9vxIZYqsjoxI9i6N T9yJN0eMsI82030F3HBSIVEFpKgQXmkSMbCOOsQS8m89PxUoHfWo5zCziHlcc6Rk C7zoiiayUTZXC1DDj2nINd5LDaCpbvIJEaq3mljuI7PxDTSCnoxM2vr80446ZzKL +ZTFyDII0Q72n+0nj5zAsEu/aQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFP1RNNlK 2mfIM2zeCAXuIXUP3U+mMB8GA1UdIwQYMBaAFBcj3LQaBCaKWHqs6M/Z2uX59R33 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExOURDQi9FNEMwRjU2QzE4 N0YxMUVCQUUyOTY5MkVDNEY5QUUwMi9GeVBjdEJvRUpvcFllcXpvejluYTVmbjFI ZmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0Z5UGN0Qm9FSm9wWWVxem96OW5hNWZuMUhmYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx OURDQi9FNEMwRjU2QzE4N0YxMUVCQUUyOTY5MkVDNEY5QUUwMi9GeVBjdEJvRUpv cFllcXpvejluYTVmbjFIZmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBZFX4A1aex5ZU1baLUNzedDPHoG1fI5AMqxBYPzzEgAMUilA78Z/dt AJBfzkPcDREGPp6ovdhR9zNpW50GJ4ArEoqjM+I2EMf0Zgelmw389kHdgNH9e+SH PEZ/nhMNt7VXjH7n6X8QeGTYZa+ebYGWGILphUO8195KuR0Kz9rFilKoezIyatOP aj5a7rYtjsAPWU6gj54peEZltCaJDluEu7/HDOkgmmebcTF9ppWusZmawZ2Xagzf w712HNENHrcoGQCW5hJvP01gIZsdDEftK+i+Nr77hcbNYwiZ0JOs9d5TDgI0yn5h skG0dkYPy6MIXepXueY+pjgk72YX+wOr -----END CERTIFICATE-----Generated at Tue Nov 4 19:08:34 2025 by rpki-client