$ rpki-client -vvf rpki.apnic.net/member_repository/A912F40E/303B3D786B7811EAA713D778C4F9AE02/FOvueS5AUhzVGx8DIDp_jiq7EtI.mft File: FOvueS5AUhzVGx8DIDp_jiq7EtI.mft (raw, json) Hash identifier: cWrLLoaRc6Z+6HAC7MaCTgkzws6jLvoqjEEe6G1eBrY= Subject key identifier: 57:DB:24:E6:6D:60:0C:5A:7D:82:87:52:7E:43:4C:50:13:D7:65:63 Authority key identifier: 14:EB:EE:79:2E:40:52:1C:D5:1B:1F:03:20:3A:7F:8E:2A:BB:12:D2 Certificate issuer: /CN=A912F40E/serialNumber=14EBEE792E40521CD51B1F03203A7F8E2ABB12D2 Certificate serial: 0A8D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FOvueS5AUhzVGx8DIDp_jiq7EtI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912F40E/303B3D786B7811EAA713D778C4F9AE02/FOvueS5AUhzVGx8DIDp_jiq7EtI.mft Manifest number: 0A86 Signing time: Tue 04 Nov 2025 19:41:06 +0000 Manifest this update: Tue 04 Nov 2025 19:41:05 +0000 Manifest next update: Tue 11 Nov 2025 19:41:05 +0000 Files and hashes: 1: FOvueS5AUhzVGx8DIDp_jiq7EtI.crl (hash: zgGqKD2ODXem9vyAvvnKSOzd9M23cocweYZFPLHcqlA=) 2: 6677438E6B7B11EA908F7C82C4F9AE02.roa (hash: NUGRzsEaZYXcjIXcIhWTrYjjrRluMFcxpsApcnV+LZE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912F40E/303B3D786B7811EAA713D778C4F9AE02/FOvueS5AUhzVGx8DIDp_jiq7EtI.crl rsync://rpki.apnic.net/member_repository/A912F40E/303B3D786B7811EAA713D778C4F9AE02/FOvueS5AUhzVGx8DIDp_jiq7EtI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FOvueS5AUhzVGx8DIDp_jiq7EtI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 19:41:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2701 (0xa8d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912F40E, serialNumber=14EBEE792E40521CD51B1F03203A7F8E2ABB12D2 Validity Not Before: Nov 4 19:41:05 2025 GMT Not After : Nov 11 19:41:05 2025 GMT Subject: CN=690a56d1-167e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:8e:3b:52:ee:89:d0:ce:50:5a:86:15:76:64: 76:5d:68:2c:52:19:6e:91:05:ae:4e:f2:e2:e8:c7: 48:ea:71:3b:50:25:83:04:aa:db:81:0c:bd:44:80: 80:9a:a8:54:93:a8:b3:04:81:7b:12:93:87:20:6f: 16:df:0f:b3:b7:59:5b:01:ad:21:6f:99:ef:74:66: 0f:f7:ed:be:30:d6:24:bf:0b:16:27:6c:06:49:e1: 85:74:6e:92:83:7f:fe:91:fb:84:ca:61:2c:91:8b: 8f:31:6a:e8:09:df:a7:a1:b8:28:3d:31:93:94:c4: 02:7d:e0:3d:55:4f:d7:57:86:24:13:92:e3:be:69: 62:d8:67:5e:db:64:46:dc:1f:be:a8:10:c2:ca:e3: ed:91:51:75:fb:9a:3a:a1:f6:60:ce:b7:07:1f:fe: 8d:2d:62:4a:c1:a4:f3:8d:13:ee:aa:a1:1b:32:21: c9:de:74:35:d8:d1:9b:41:73:28:4e:40:ee:32:08: 93:c0:e0:f9:13:c7:03:a2:58:4d:68:5f:e8:01:fc: 98:34:08:bc:81:3b:eb:62:74:39:90:52:7b:a1:e5: 1a:33:5c:cb:65:a2:a3:f4:96:e6:c4:55:93:97:c1: 7d:b8:a6:aa:ee:59:19:ec:37:91:2e:5c:22:d2:82: bf:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:DB:24:E6:6D:60:0C:5A:7D:82:87:52:7E:43:4C:50:13:D7:65:63 X509v3 Authority Key Identifier: keyid:14:EB:EE:79:2E:40:52:1C:D5:1B:1F:03:20:3A:7F:8E:2A:BB:12:D2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912F40E/303B3D786B7811EAA713D778C4F9AE02/FOvueS5AUhzVGx8DIDp_jiq7EtI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FOvueS5AUhzVGx8DIDp_jiq7EtI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912F40E/303B3D786B7811EAA713D778C4F9AE02/FOvueS5AUhzVGx8DIDp_jiq7EtI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 79:0f:c0:33:d4:1e:80:3c:aa:65:23:87:4b:d5:78:5f:42:a8: 6d:33:73:00:c5:9b:62:1a:fe:0e:85:9d:eb:71:3e:7f:d2:70: 0a:fd:61:b1:59:59:b5:33:c2:37:28:18:6f:09:22:15:b5:9c: 79:bf:79:8a:a8:3b:35:1d:7a:ed:88:ff:c1:bd:09:58:ee:6e: 96:64:4e:03:de:25:f4:ab:f8:e6:4a:5d:0c:b1:71:62:11:16: f7:cf:7e:a3:3b:d5:b8:39:6d:77:9d:c9:bf:c0:08:24:f1:3f: 71:b9:70:17:87:6b:f4:d3:ba:78:60:f7:86:8d:d2:4b:29:08: a2:5e:ab:0e:57:95:9d:5e:66:50:6d:5a:fc:d9:7c:0b:8b:c3: b6:54:f4:be:f4:b9:48:58:18:b9:9a:6f:87:29:2c:f9:73:59: 25:53:2e:de:63:f3:9b:ab:e2:ba:32:2b:32:bb:88:af:bc:05: df:cf:83:20:08:d7:b2:36:d6:63:42:ae:1b:74:75:20:04:ae: a4:bf:be:cd:f1:30:d6:88:52:d0:2c:80:9c:d1:0e:6b:f1:b5: 8f:8c:f6:1c:05:13:19:ee:26:13:10:b3:82:a7:e3:24:d8:8a: d8:f5:16:e8:2c:74:28:a9:b9:89:f3:8c:b9:8c:f3:d3:6c:19: c4:0e:1d:5b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCo0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkY0MEUxMTAvBgNVBAUTKDE0RUJFRTc5MkU0MDUyMUNENTFCMUYwMzIwM0E3RjhF MkFCQjEyRDIwHhcNMjUxMTA0MTk0MTA1WhcNMjUxMTExMTk0MTA1WjAYMRYwFAYD VQQDEw02OTBhNTZkMS0xNjdlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuo47Uu6J0M5QWoYVdmR2XWgsUhlukQWuTvLi6MdI6nE7UCWDBKrbgQy9RICA mqhUk6izBIF7EpOHIG8W3w+zt1lbAa0hb5nvdGYP9+2+MNYkvwsWJ2wGSeGFdG6S g3/+kfuEymEskYuPMWroCd+nobgoPTGTlMQCfeA9VU/XV4YkE5Ljvmli2Gde22RG 3B++qBDCyuPtkVF1+5o6ofZgzrcHH/6NLWJKwaTzjRPuqqEbMiHJ3nQ12NGbQXMo TkDuMgiTwOD5E8cDolhNaF/oAfyYNAi8gTvrYnQ5kFJ7oeUaM1zLZaKj9JbmxFWT l8F9uKaq7lkZ7DeRLlwi0oK/bwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFfbJOZt YAxafYKHUn5DTFAT12VjMB8GA1UdIwQYMBaAFBTr7nkuQFIc1RsfAyA6f44quxLS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRjQwRS8zMDNCM0Q3ODZC NzgxMUVBQTcxM0Q3NzhDNEY5QUUwMi9GT3Z1ZVM1QVVoelZHeDhESURwX2ppcTdF dEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZPdnVlUzVBVWh6Vkd4OERJRHBfamlxN0V0SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy RjQwRS8zMDNCM0Q3ODZCNzgxMUVBQTcxM0Q3NzhDNEY5QUUwMi9GT3Z1ZVM1QVVo elZHeDhESURwX2ppcTdFdEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB5D8Az1B6APKplI4dL1XhfQqhtM3MAxZtiGv4OhZ3rcT5/0nAK/WGx WVm1M8I3KBhvCSIVtZx5v3mKqDs1HXrtiP/BvQlY7m6WZE4D3iX0q/jmSl0MsXFi ERb3z36jO9W4OW13ncm/wAgk8T9xuXAXh2v007p4YPeGjdJLKQiiXqsOV5WdXmZQ bVr82XwLi8O2VPS+9LlIWBi5mm+HKSz5c1klUy7eY/Obq+K6Misyu4ivvAXfz4Mg CNeyNtZjQq4bdHUgBK6kv77N8TDWiFLQLICc0Q5r8bWPjPYcBRMZ7iYTELOCp+Mk 2IrY9RboLHQoqbmJ84y5jPPTbBnEDh1b -----END CERTIFICATE-----Generated at Wed Nov 5 16:21:50 2025 by rpki-client