$ rpki-client -vvf rpki.apnic.net/member_repository/A913D3CE/142A2B08495E11EFBE8F2079C4F9AE02/FSUB4tXSvcrhiMNKZT5A9Amittc.mft File: FSUB4tXSvcrhiMNKZT5A9Amittc.mft (raw, json) Hash identifier: Q7l8EYYatQS90cre4/MnY6WOLQKHevJG5cHl7eRtERU= Subject key identifier: 89:DE:89:0B:37:F4:11:6F:4D:6B:3C:E3:E8:F2:DE:E7:E1:ED:90:B7 Authority key identifier: 15:25:01:E2:D5:D2:BD:CA:E1:88:C3:4A:65:3E:40:F4:09:A2:B6:D7 Certificate issuer: /CN=A913D3CE/serialNumber=152501E2D5D2BDCAE188C34A653E40F409A2B6D7 Certificate serial: F2 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FSUB4tXSvcrhiMNKZT5A9Amittc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913D3CE/142A2B08495E11EFBE8F2079C4F9AE02/FSUB4tXSvcrhiMNKZT5A9Amittc.mft Manifest number: F0 Signing time: Mon 03 Nov 2025 05:17:18 +0000 Manifest this update: Mon 03 Nov 2025 05:17:17 +0000 Manifest next update: Mon 10 Nov 2025 05:17:17 +0000 Files and hashes: 1: FSUB4tXSvcrhiMNKZT5A9Amittc.crl (hash: CfqbAqcvRNTfaDI67QtgUyFNPJXaq0394WkfInyUzCk=) 2: E0E7D5E6495E11EF8EE0647AC4F9AE02.roa (hash: UDZYmG58wyjbsalkwL0khlvNfAUCeUpCV/XCm2ms8Lo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913D3CE/142A2B08495E11EFBE8F2079C4F9AE02/FSUB4tXSvcrhiMNKZT5A9Amittc.crl rsync://rpki.apnic.net/member_repository/A913D3CE/142A2B08495E11EFBE8F2079C4F9AE02/FSUB4tXSvcrhiMNKZT5A9Amittc.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FSUB4tXSvcrhiMNKZT5A9Amittc.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 05:17:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 242 (0xf2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913D3CE, serialNumber=152501E2D5D2BDCAE188C34A653E40F409A2B6D7 Validity Not Before: Nov 3 05:17:17 2025 GMT Not After : Nov 10 05:17:17 2025 GMT Subject: CN=69083ade-07f6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:51:0b:a5:1e:a5:d1:b0:0f:e8:fc:c8:bb:33: a4:f0:af:8a:fe:1a:9a:8b:ab:2b:d7:31:92:28:6a: c0:14:0e:c1:48:65:df:02:41:12:be:11:24:1f:d5: c3:fc:05:2c:6c:52:7f:74:b6:44:82:5a:f0:a7:8f: 7c:a5:74:0a:bf:75:66:1e:19:27:18:cd:67:10:fc: 50:b9:f7:f3:a6:00:8d:67:3c:e4:0e:be:9b:0f:30: 3f:87:ac:eb:62:9a:c7:67:f7:84:19:39:7a:43:d4: ea:64:fb:3f:32:9a:79:17:79:45:0f:67:b3:f8:14: 6e:ec:1b:6c:9d:fc:37:79:dc:f6:5f:52:49:cb:1f: 73:db:79:90:09:ea:55:a0:8f:23:af:dd:eb:e7:b1: 89:34:ae:07:94:cf:fd:70:9d:c5:55:ae:e9:d6:c8: 7b:f4:69:76:b6:c0:e5:d2:7d:a0:fb:ec:87:f7:26: 9e:fb:a2:0b:09:a0:d5:c6:39:f2:2e:15:0d:7d:ef: 2b:df:4b:6e:88:83:8c:28:8a:07:30:2b:47:9a:9f: 96:79:fc:1d:e0:4f:67:01:96:50:00:39:02:ca:f6: 4d:42:f6:54:d3:cd:78:c2:78:53:cf:c2:de:91:40: 6b:4b:fc:0a:6d:72:e5:75:60:c1:40:ac:29:00:69: 58:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:DE:89:0B:37:F4:11:6F:4D:6B:3C:E3:E8:F2:DE:E7:E1:ED:90:B7 X509v3 Authority Key Identifier: keyid:15:25:01:E2:D5:D2:BD:CA:E1:88:C3:4A:65:3E:40:F4:09:A2:B6:D7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913D3CE/142A2B08495E11EFBE8F2079C4F9AE02/FSUB4tXSvcrhiMNKZT5A9Amittc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FSUB4tXSvcrhiMNKZT5A9Amittc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913D3CE/142A2B08495E11EFBE8F2079C4F9AE02/FSUB4tXSvcrhiMNKZT5A9Amittc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 06:65:e2:af:15:b4:3a:db:7d:7e:ca:67:e7:ae:86:3e:49:d9: a5:76:da:0f:ea:7c:68:dd:5f:8c:dd:7b:9d:c1:82:8e:20:63: ef:2d:2e:ec:0d:a1:0a:ec:fd:67:a5:a8:ef:d8:82:01:a9:1f: e8:fe:ad:5f:d6:b4:02:c5:00:5c:75:cb:c8:c0:78:0d:4c:b4: 9d:94:5c:e7:c0:d2:78:23:80:66:0b:84:e6:5a:86:2f:45:7f: be:26:5e:73:e4:a0:27:4b:1b:54:64:dd:c2:12:1e:5f:fe:7d: f1:2c:15:49:bf:36:92:0d:cc:ba:3a:e9:8a:70:91:19:0e:94: 74:77:64:26:ab:9e:59:00:94:4d:c6:94:1f:40:81:b5:d4:94: 56:9a:5a:17:9f:72:fb:7a:c2:aa:f8:8c:72:04:8f:38:a6:3e: 9d:48:cb:c6:fe:cd:83:83:d4:e4:11:ba:30:d1:f4:22:54:9e: 57:a9:8e:22:ce:4b:b3:a3:8c:22:bf:bd:23:e8:8c:5e:17:2f: e2:f7:89:1f:fd:b5:29:53:21:44:78:17:88:28:1c:ae:51:79: f1:f0:7c:fd:ea:ac:89:a0:28:44:53:db:ae:11:04:e4:48:f1: 69:30:1f:ea:60:ee:91:52:8b:78:a2:c9:b0:38:e6:7b:cc:e7: 68:ea:8d:76 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAPIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0QzQ0UxMTAvBgNVBAUTKDE1MjUwMUUyRDVEMkJEQ0FFMTg4QzM0QTY1M0U0MEY0 MDlBMkI2RDcwHhcNMjUxMTAzMDUxNzE3WhcNMjUxMTEwMDUxNzE3WjAYMRYwFAYD VQQDEw02OTA4M2FkZS0wN2Y2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAllELpR6l0bAP6PzIuzOk8K+K/hqai6sr1zGSKGrAFA7BSGXfAkESvhEkH9XD /AUsbFJ/dLZEglrwp498pXQKv3VmHhknGM1nEPxQuffzpgCNZzzkDr6bDzA/h6zr YprHZ/eEGTl6Q9TqZPs/Mpp5F3lFD2ez+BRu7Btsnfw3edz2X1JJyx9z23mQCepV oI8jr93r57GJNK4HlM/9cJ3FVa7p1sh79Gl2tsDl0n2g++yH9yae+6ILCaDVxjny LhUNfe8r30tuiIOMKIoHMCtHmp+Wefwd4E9nAZZQADkCyvZNQvZU0814wnhTz8Le kUBrS/wKbXLldWDBQKwpAGlYtQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIneiQs3 9BFvTWs84+jy3ufh7ZC3MB8GA1UdIwQYMBaAFBUlAeLV0r3K4YjDSmU+QPQJorbX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzRDNDRS8xNDJBMkIwODQ5 NUUxMUVGQkU4RjIwNzlDNEY5QUUwMi9GU1VCNHRYU3ZjcmhpTU5LWlQ1QTlBbWl0 dGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0ZTVUI0dFhTdmNyaGlNTktaVDVBOUFtaXR0Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz RDNDRS8xNDJBMkIwODQ5NUUxMUVGQkU4RjIwNzlDNEY5QUUwMi9GU1VCNHRYU3Zj cmhpTU5LWlQ1QTlBbWl0dGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAGZeKvFbQ6231+ymfnroY+SdmldtoP6nxo3V+M3XudwYKOIGPvLS7s DaEK7P1npajv2IIBqR/o/q1f1rQCxQBcdcvIwHgNTLSdlFznwNJ4I4BmC4TmWoYv RX++Jl5z5KAnSxtUZN3CEh5f/n3xLBVJvzaSDcy6OumKcJEZDpR0d2Qmq55ZAJRN xpQfQIG11JRWmloXn3L7esKq+IxyBI84pj6dSMvG/s2Dg9TkEbow0fQiVJ5XqY4i zkuzo4wiv70j6IxeFy/i94kf/bUpUyFEeBeIKByuUXnx8Hz96qyJoChEU9uuEQTk SPFpMB/qYO6RUot4osmwOOZ7zOdo6o12 -----END CERTIFICATE-----Generated at Wed Nov 5 02:18:37 2025 by rpki-client