$ rpki-client -vvf rpki.apnic.net/member_repository/A9137992/18A81EF08D2E11EB9840E05FC4F9AE02/pFVIOEAp8fN2pyJjKU0GWujJRCI.mft File: pFVIOEAp8fN2pyJjKU0GWujJRCI.mft (raw, json) Hash identifier: W5ap8+jR2975KjP7Rya+kTUpDwRNIL7sS7dEU2/kAG8= Subject key identifier: 20:A7:1B:A0:FF:78:73:A5:8F:70:A1:0D:D0:E9:AD:53:D9:B6:3A:09 Authority key identifier: A4:55:48:38:40:29:F1:F3:76:A7:22:63:29:4D:06:5A:E8:C9:44:22 Certificate issuer: /CN=A9137992/serialNumber=A45548384029F1F376A72263294D065AE8C94422 Certificate serial: 06A1 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/pFVIOEAp8fN2pyJjKU0GWujJRCI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9137992/18A81EF08D2E11EB9840E05FC4F9AE02/pFVIOEAp8fN2pyJjKU0GWujJRCI.mft Manifest number: 069E Signing time: Tue 04 Nov 2025 16:57:09 +0000 Manifest this update: Tue 04 Nov 2025 16:57:08 +0000 Manifest next update: Tue 11 Nov 2025 16:57:08 +0000 Files and hashes: 1: pFVIOEAp8fN2pyJjKU0GWujJRCI.crl (hash: FRZTwdfPogV6qPPalAE2N8USjHjXbYHh7GSkdXcWo7I=) 2: 819B5C3274CB11EF941F0A71C4F9AE02.roa (hash: VjvaaM8L2XxhBSFFAzo+odtR38jKp4RPZEbo1pt7Hh0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9137992/18A81EF08D2E11EB9840E05FC4F9AE02/pFVIOEAp8fN2pyJjKU0GWujJRCI.crl rsync://rpki.apnic.net/member_repository/A9137992/18A81EF08D2E11EB9840E05FC4F9AE02/pFVIOEAp8fN2pyJjKU0GWujJRCI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/pFVIOEAp8fN2pyJjKU0GWujJRCI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 16:39:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1697 (0x6a1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9137992, serialNumber=A45548384029F1F376A72263294D065AE8C94422 Validity Not Before: Nov 4 16:57:08 2025 GMT Not After : Nov 11 16:57:08 2025 GMT Subject: CN=690a3064-e420 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:b4:79:09:5a:1d:0f:3c:a9:b0:ca:37:db:b5: c3:99:d6:91:74:e6:9f:29:47:1e:98:0e:a0:89:82: 87:5b:ed:f6:29:20:d1:64:51:2c:af:00:46:60:ab: 9c:1b:ab:51:b8:53:16:d7:b5:94:7a:b0:35:ba:dc: 61:c1:41:c9:99:24:9c:cd:07:96:91:87:bc:21:5e: 17:56:2a:0c:65:13:fc:ec:8e:5e:0a:cf:37:8d:7b: 4d:f5:04:bd:68:75:31:d8:c1:4e:01:de:b3:83:1e: ac:be:6f:db:11:07:33:52:e5:14:cf:5c:50:39:a8: dd:ee:6f:bf:ce:5a:22:d9:a1:fe:45:c2:5b:80:a1: 31:2b:70:c2:12:a0:7a:94:6e:32:37:91:b7:b3:07: 7c:25:87:ec:c5:cb:6e:51:13:cd:cc:3f:3b:f9:e6: 42:30:02:f0:32:86:f0:c6:15:ff:e7:d0:ac:aa:0e: cc:68:b8:47:d2:b3:ed:ea:4d:73:63:9e:59:90:9b: a7:5a:3e:87:87:23:b4:37:15:8a:01:7a:f0:b0:9f: 78:cd:5d:c2:0d:c3:42:40:d1:59:c8:34:04:ff:ed: d4:9f:16:59:d2:82:31:a1:86:cc:85:3f:b6:d9:0b: 5e:bd:bd:da:ac:06:23:da:2c:9f:6c:24:3b:7b:c3: ba:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:A7:1B:A0:FF:78:73:A5:8F:70:A1:0D:D0:E9:AD:53:D9:B6:3A:09 X509v3 Authority Key Identifier: keyid:A4:55:48:38:40:29:F1:F3:76:A7:22:63:29:4D:06:5A:E8:C9:44:22 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9137992/18A81EF08D2E11EB9840E05FC4F9AE02/pFVIOEAp8fN2pyJjKU0GWujJRCI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/pFVIOEAp8fN2pyJjKU0GWujJRCI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9137992/18A81EF08D2E11EB9840E05FC4F9AE02/pFVIOEAp8fN2pyJjKU0GWujJRCI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3b:d8:94:37:33:7e:58:81:d7:f0:3f:5a:f0:75:52:28:21:9a: a0:3f:55:76:2a:90:a3:6c:e4:3f:a8:05:34:32:99:13:0b:a3: 0d:c3:99:c6:e0:eb:4a:53:0a:84:2c:c3:18:ed:af:f4:e0:08: 85:9f:4c:73:93:3f:62:a0:fc:0e:94:65:37:60:04:cb:c4:bf: f4:e0:5b:8b:a6:0a:09:2c:33:42:d6:ca:f9:53:80:47:24:e7: b0:6f:f3:b9:35:c8:52:74:ef:f3:f6:81:44:c2:ef:26:92:e4: 2b:4f:e8:8f:d8:a2:ed:af:1c:b8:c3:8a:c8:a4:9f:9e:ca:ff: ba:f0:70:2d:f6:b6:b0:ba:b1:66:cb:26:6f:c1:23:5a:4b:7c: f5:a0:ac:e4:98:b8:7d:37:ca:1c:c9:2e:4e:12:c0:87:6f:89: 46:22:10:50:30:9a:3c:95:14:e1:e5:49:ab:f1:2e:01:a2:a8: 4d:82:0a:56:db:25:d2:ef:6e:a9:b3:83:08:2a:20:58:05:2a: 38:86:87:fe:1c:39:4d:32:df:08:93:57:bc:f1:5f:7f:8a:99: 8a:c6:75:4f:34:b5:db:de:8b:1b:b8:de:ac:f9:26:9a:04:f1: 5b:32:40:4e:dd:bc:a5:98:0e:b5:44:3f:b3:4f:1c:2e:5d:7b: aa:9e:a8:b6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBqEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Mzc5OTIxMTAvBgNVBAUTKEE0NTU0ODM4NDAyOUYxRjM3NkE3MjI2MzI5NEQwNjVB RThDOTQ0MjIwHhcNMjUxMTA0MTY1NzA4WhcNMjUxMTExMTY1NzA4WjAYMRYwFAYD VQQDEw02OTBhMzA2NC1lNDIwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw7R5CVodDzypsMo327XDmdaRdOafKUcemA6giYKHW+32KSDRZFEsrwBGYKuc G6tRuFMW17WUerA1utxhwUHJmSSczQeWkYe8IV4XVioMZRP87I5eCs83jXtN9QS9 aHUx2MFOAd6zgx6svm/bEQczUuUUz1xQOajd7m+/zloi2aH+RcJbgKExK3DCEqB6 lG4yN5G3swd8JYfsxctuURPNzD87+eZCMALwMobwxhX/59Csqg7MaLhH0rPt6k1z Y55ZkJunWj6HhyO0NxWKAXrwsJ94zV3CDcNCQNFZyDQE/+3UnxZZ0oIxoYbMhT+2 2Qtevb3arAYj2iyfbCQ7e8O6MQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCCnG6D/ eHOlj3ChDdDprVPZtjoJMB8GA1UdIwQYMBaAFKRVSDhAKfHzdqciYylNBlroyUQi MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNzk5Mi8xOEE4MUVGMDhE MkUxMUVCOTg0MEUwNUZDNEY5QUUwMi9wRlZJT0VBcDhmTjJweUpqS1UwR1d1akpS Q0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3BGVklPRUFwOGZOMnB5SmpLVTBHV3VqSlJDSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz Nzk5Mi8xOEE4MUVGMDhEMkUxMUVCOTg0MEUwNUZDNEY5QUUwMi9wRlZJT0VBcDhm TjJweUpqS1UwR1d1akpSQ0kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA72JQ3M35YgdfwP1rwdVIoIZqgP1V2KpCjbOQ/qAU0MpkTC6MNw5nG 4OtKUwqELMMY7a/04AiFn0xzkz9ioPwOlGU3YATLxL/04FuLpgoJLDNC1sr5U4BH JOewb/O5NchSdO/z9oFEwu8mkuQrT+iP2KLtrxy4w4rIpJ+eyv+68HAt9rawurFm yyZvwSNaS3z1oKzkmLh9N8ocyS5OEsCHb4lGIhBQMJo8lRTh5Umr8S4BoqhNggpW 2yXS726ps4MIKiBYBSo4hof+HDlNMt8Ik1e88V9/ipmKxnVPNLXb3osbuN6s+Saa BPFbMkBO3bylmA61RD+zTxwuXXuqnqi2 -----END CERTIFICATE-----Generated at Tue Nov 4 21:32:15 2025 by rpki-client