$ rpki-client -vvf rpki.apnic.net/member_repository/A9121188/84BAA06C836311EEBC191B1EC4F9AE02/FGZAd1io17k1aUiW1QJ1KAZ5ryk.mft File: FGZAd1io17k1aUiW1QJ1KAZ5ryk.mft (raw, json) Hash identifier: pJnJnb2vAPSCxDQOQEBgIPcTXOZowRMPFnHb4ovZdx4= Subject key identifier: 3D:F4:EA:6F:EC:12:13:BA:D1:23:E6:EE:AD:26:6F:0A:3B:47:8B:54 Authority key identifier: 14:66:40:77:58:A8:D7:B9:35:69:48:96:D5:02:75:28:06:79:AF:29 Certificate issuer: /CN=A9121188/serialNumber=1466407758A8D7B935694896D50275280679AF29 Certificate serial: 0173 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FGZAd1io17k1aUiW1QJ1KAZ5ryk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9121188/84BAA06C836311EEBC191B1EC4F9AE02/FGZAd1io17k1aUiW1QJ1KAZ5ryk.mft Manifest number: 0170 Signing time: Mon 03 Nov 2025 03:50:35 +0000 Manifest this update: Mon 03 Nov 2025 03:50:34 +0000 Manifest next update: Mon 10 Nov 2025 03:50:34 +0000 Files and hashes: 1: FGZAd1io17k1aUiW1QJ1KAZ5ryk.crl (hash: UJECJM0665NR8BvdGL5noZTie97+NNMXaNt5mkAYVrc=) 2: 91FC411C836411EE80C08641C4F9AE02.roa (hash: wBNq6qKZKki1MEW6RuBHHAWRuhM23JZZju/jw5M2+o0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9121188/84BAA06C836311EEBC191B1EC4F9AE02/FGZAd1io17k1aUiW1QJ1KAZ5ryk.crl rsync://rpki.apnic.net/member_repository/A9121188/84BAA06C836311EEBC191B1EC4F9AE02/FGZAd1io17k1aUiW1QJ1KAZ5ryk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FGZAd1io17k1aUiW1QJ1KAZ5ryk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 03:50:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 371 (0x173) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9121188, serialNumber=1466407758A8D7B935694896D50275280679AF29 Validity Not Before: Nov 3 03:50:34 2025 GMT Not After : Nov 10 03:50:34 2025 GMT Subject: CN=6908268b-e80f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:73:e1:49:53:c5:cb:ac:fd:c0:c6:87:23:53: 32:e2:34:fc:d3:33:a3:72:51:0e:46:a8:01:1e:38: cf:68:cf:72:c7:bd:8b:d7:6d:37:a7:e9:18:73:4e: 61:9b:9c:b9:01:2d:e5:aa:15:fc:55:30:fc:2d:00: ac:23:56:02:ba:53:b1:80:81:3b:00:32:d3:01:79: 46:ef:be:8b:cd:11:e1:e4:ba:b9:85:5a:df:3d:2e: a9:28:8e:bf:61:8a:13:4f:6d:19:c7:23:a7:3e:11: 06:e2:63:83:2d:e1:1a:0e:03:d7:36:b4:cd:bb:33: ff:0c:7d:02:07:9b:a7:6b:b2:eb:ad:8c:91:fe:dc: 90:09:c9:ba:da:25:8e:d3:3a:4c:e8:d4:cf:70:a5: 6a:c5:d5:d4:3c:47:15:81:e1:28:84:5c:ab:c1:5b: 64:07:88:fd:be:30:ec:7a:a2:45:34:00:ab:ea:27: 9b:c2:7a:60:02:8d:d2:e8:c9:35:4c:2f:74:75:1e: ce:e1:98:ed:5d:f9:fa:51:66:e7:a6:92:c0:97:e9: 8a:73:6f:8e:b1:1c:4a:21:1e:d1:73:3f:71:aa:7e: 82:c3:56:90:ad:1b:38:1e:73:53:1d:df:ab:c6:ce: d0:d2:bf:79:32:c9:9b:98:54:9b:10:3e:3e:9a:24: bc:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:F4:EA:6F:EC:12:13:BA:D1:23:E6:EE:AD:26:6F:0A:3B:47:8B:54 X509v3 Authority Key Identifier: keyid:14:66:40:77:58:A8:D7:B9:35:69:48:96:D5:02:75:28:06:79:AF:29 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9121188/84BAA06C836311EEBC191B1EC4F9AE02/FGZAd1io17k1aUiW1QJ1KAZ5ryk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FGZAd1io17k1aUiW1QJ1KAZ5ryk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9121188/84BAA06C836311EEBC191B1EC4F9AE02/FGZAd1io17k1aUiW1QJ1KAZ5ryk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 17:c9:76:3a:08:34:f0:89:06:9f:1f:ee:7c:83:41:ce:96:ba: b7:7e:f2:3f:66:dd:1d:ef:d3:af:65:78:e7:40:30:5a:7f:37: 82:ff:e8:ac:d0:22:ac:ae:27:5d:b0:25:c0:92:e6:5e:fd:d3: ea:5e:31:f4:13:32:d0:30:04:10:e8:62:d7:e9:16:6e:69:dd: d5:a3:6e:ef:be:4b:2c:a1:25:f5:83:f3:3a:e5:d7:41:a3:72: 78:6b:51:f4:38:1e:d3:d4:36:e6:72:05:de:ab:7d:68:58:d3: 30:67:51:26:2f:60:94:86:42:fa:17:d9:07:07:13:dd:99:17: 30:17:65:83:06:95:1e:03:d3:76:ff:c0:ad:62:a4:ae:a1:03: 77:48:cb:0a:a6:2f:e8:82:b6:c3:2d:33:fa:b5:03:07:e6:f6: 78:bd:c1:dd:95:36:35:d0:ba:8e:34:51:e3:30:9f:48:ac:90: 15:d5:f7:ce:dc:36:ac:20:71:35:0c:d8:9e:1c:2a:d0:4e:87: f8:77:4b:84:29:37:4e:aa:84:a0:de:26:1d:bb:dd:b5:a8:8f: 2d:d1:eb:d4:68:4d:19:48:0a:9f:a5:af:77:89:af:70:ce:a5: 73:a8:5d:98:bc:da:80:b6:ea:50:e1:82:b8:10:df:81:56:ef: 49:72:d8:54 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAXMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjExODgxMTAvBgNVBAUTKDE0NjY0MDc3NThBOEQ3QjkzNTY5NDg5NkQ1MDI3NTI4 MDY3OUFGMjkwHhcNMjUxMTAzMDM1MDM0WhcNMjUxMTEwMDM1MDM0WjAYMRYwFAYD VQQDEw02OTA4MjY4Yi1lODBmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2nPhSVPFy6z9wMaHI1My4jT80zOjclEORqgBHjjPaM9yx72L1203p+kYc05h m5y5AS3lqhX8VTD8LQCsI1YCulOxgIE7ADLTAXlG776LzRHh5Lq5hVrfPS6pKI6/ YYoTT20ZxyOnPhEG4mODLeEaDgPXNrTNuzP/DH0CB5una7LrrYyR/tyQCcm62iWO 0zpM6NTPcKVqxdXUPEcVgeEohFyrwVtkB4j9vjDseqJFNACr6iebwnpgAo3S6Mk1 TC90dR7O4ZjtXfn6UWbnppLAl+mKc2+OsRxKIR7Rcz9xqn6Cw1aQrRs4HnNTHd+r xs7Q0r95MsmbmFSbED4+miS8ewIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFD306m/s EhO60SPm7q0mbwo7R4tUMB8GA1UdIwQYMBaAFBRmQHdYqNe5NWlIltUCdSgGea8p MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMTE4OC84NEJBQTA2Qzgz NjMxMUVFQkMxOTFCMUVDNEY5QUUwMi9GR1pBZDFpbzE3azFhVWlXMVFKMUtBWjVy eWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZHWkFkMWlvMTdrMWFVaVcxUUoxS0FaNXJ5ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MTE4OC84NEJBQTA2QzgzNjMxMUVFQkMxOTFCMUVDNEY5QUUwMi9GR1pBZDFpbzE3 azFhVWlXMVFKMUtBWjVyeWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAXyXY6CDTwiQafH+58g0HOlrq3fvI/Zt0d79OvZXjnQDBafzeC/+is 0CKsriddsCXAkuZe/dPqXjH0EzLQMAQQ6GLX6RZuad3Vo27vvkssoSX1g/M65ddB o3J4a1H0OB7T1DbmcgXeq31oWNMwZ1EmL2CUhkL6F9kHBxPdmRcwF2WDBpUeA9N2 /8CtYqSuoQN3SMsKpi/ogrbDLTP6tQMH5vZ4vcHdlTY10LqONFHjMJ9IrJAV1ffO 3DasIHE1DNieHCrQTof4d0uEKTdOqoSg3iYdu921qI8t0evUaE0ZSAqfpa93ia9w zqVzqF2YvNqAtupQ4YK4EN+BVu9JcthU -----END CERTIFICATE-----Generated at Tue Nov 4 20:21:57 2025 by rpki-client