$ rpki-client -vvf rpki.apnic.net/member_repository/A91409DC/A5BBFAA6093511EAAB10C91FC4F9AE02/FKbKvDAuwePc503pi_VYoEK-rFY.mft File: FKbKvDAuwePc503pi_VYoEK-rFY.mft (raw, json) Hash identifier: CvhkfEiCwTcWPkxlMAbXCAH/HNKTN0Xtl0qjE0nKV+0= Subject key identifier: 81:F2:87:7A:2F:9C:1D:D0:6D:1B:AC:05:40:B6:56:21:24:AB:49:64 Authority key identifier: 14:A6:CA:BC:30:2E:C1:E3:DC:E7:4D:E9:8B:F5:58:A0:42:BE:AC:56 Certificate issuer: /CN=A91409DC/serialNumber=14A6CABC302EC1E3DCE74DE98BF558A042BEAC56 Certificate serial: 08B5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FKbKvDAuwePc503pi_VYoEK-rFY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91409DC/A5BBFAA6093511EAAB10C91FC4F9AE02/FKbKvDAuwePc503pi_VYoEK-rFY.mft Manifest number: 151B Signing time: Tue 04 Nov 2025 18:32:00 +0000 Manifest this update: Tue 04 Nov 2025 18:32:00 +0000 Manifest next update: Tue 11 Nov 2025 18:32:00 +0000 Files and hashes: 1: FKbKvDAuwePc503pi_VYoEK-rFY.crl (hash: 5t2dGVrYhHBzSdGMk3iUISv6nwZaB+kTvaWKzfU10sM=) 2: DB78B2684BCD11EE8F976B7EC4F9AE02.roa (hash: LJOeHyhGq5PPmm1YdhMXahy2BlMK+uuqLBs6e3cOua4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91409DC/A5BBFAA6093511EAAB10C91FC4F9AE02/FKbKvDAuwePc503pi_VYoEK-rFY.crl rsync://rpki.apnic.net/member_repository/A91409DC/A5BBFAA6093511EAAB10C91FC4F9AE02/FKbKvDAuwePc503pi_VYoEK-rFY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FKbKvDAuwePc503pi_VYoEK-rFY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 18:31:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2229 (0x8b5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91409DC, serialNumber=14A6CABC302EC1E3DCE74DE98BF558A042BEAC56 Validity Not Before: Nov 4 18:32:00 2025 GMT Not After : Nov 11 18:32:00 2025 GMT Subject: CN=690a46a0-6586 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:7a:58:1f:a4:4e:d4:9d:da:ac:23:03:b4:84: fe:72:e2:82:95:92:e1:0c:4e:49:c8:ba:db:70:49: a3:2a:8e:ac:6d:a0:41:27:c6:9a:db:07:79:a2:e6: 18:57:2c:6b:a3:db:ab:29:bf:3e:8c:22:7d:a3:7e: 12:f4:45:50:2b:6f:af:7a:92:62:3b:46:54:b0:03: d6:cd:4b:71:80:64:36:e5:d2:92:e0:f0:0c:42:e0: 02:47:0d:50:04:43:a6:4f:08:16:97:e9:4f:64:f9: 8f:2d:f5:65:b0:0a:4d:dc:57:79:cb:3b:30:6a:a6: 5c:2b:11:b8:d9:9e:47:97:86:a0:70:50:26:d7:21: 9c:34:39:2b:0c:66:95:75:a7:02:f6:31:59:87:0d: 4b:cb:cb:b4:59:ce:56:ec:8e:aa:89:6a:36:c8:9d: 94:fd:66:9a:61:73:f2:40:b2:db:4c:0d:68:30:0d: c6:8a:46:54:90:95:76:34:6b:4b:55:ae:f5:c4:cf: ed:a2:b4:4e:02:a7:c4:10:5c:27:10:a0:77:7e:95: 0a:0b:7d:02:8d:1b:88:ee:f6:b8:27:b0:e0:71:c0: 59:93:76:47:1d:98:78:50:7b:fd:64:fa:8e:07:9c: 5b:d9:5b:80:13:4a:f0:c2:c1:3f:15:a2:8a:4f:a5: 1b:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:F2:87:7A:2F:9C:1D:D0:6D:1B:AC:05:40:B6:56:21:24:AB:49:64 X509v3 Authority Key Identifier: keyid:14:A6:CA:BC:30:2E:C1:E3:DC:E7:4D:E9:8B:F5:58:A0:42:BE:AC:56 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91409DC/A5BBFAA6093511EAAB10C91FC4F9AE02/FKbKvDAuwePc503pi_VYoEK-rFY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FKbKvDAuwePc503pi_VYoEK-rFY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91409DC/A5BBFAA6093511EAAB10C91FC4F9AE02/FKbKvDAuwePc503pi_VYoEK-rFY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9d:ca:14:24:71:f5:ce:c1:2a:d0:de:b3:ff:ac:01:9a:c8:64: 4b:e5:b7:18:e8:f4:08:94:ae:de:08:e8:2a:c9:f8:1a:3f:f8: 23:49:ed:9c:22:ac:35:26:83:32:88:3f:40:d8:05:53:ae:d4: dc:7a:84:cc:bc:3c:7a:99:23:aa:a5:b1:61:32:31:e5:c7:84: 61:a7:85:f5:aa:38:58:b4:02:2b:24:6c:51:ff:e8:0d:ea:29: d1:ff:50:f8:39:07:cc:73:55:25:f9:23:57:76:5d:51:24:3f: 5c:8e:94:29:91:6e:48:7d:41:f1:5f:de:5f:07:e0:1d:36:ce: 55:be:08:28:e6:74:66:2f:83:96:3e:5b:d6:73:39:2b:07:3e: 01:72:6c:5c:7b:0c:ca:83:2d:f5:25:69:cc:80:d0:68:e2:7b: d6:a8:b9:58:09:e9:a9:01:f9:1f:64:bc:1c:fa:35:9a:dc:99: 5a:66:31:07:ff:01:5d:71:cf:9c:14:2b:00:69:01:ad:b8:5b: 34:d4:fa:b2:25:0d:54:4e:71:34:77:50:96:d2:c2:7c:2e:ae: 46:aa:a6:68:39:50:56:4f:d6:72:eb:3f:50:8b:17:f5:ed:e1: a4:4c:7b:9d:c8:b2:29:3f:40:c0:e6:90:22:b7:92:a2:3d:58: 85:3a:20:fb -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCLUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDA5REMxMTAvBgNVBAUTKDE0QTZDQUJDMzAyRUMxRTNEQ0U3NERFOThCRjU1OEEw NDJCRUFDNTYwHhcNMjUxMTA0MTgzMjAwWhcNMjUxMTExMTgzMjAwWjAYMRYwFAYD VQQDEw02OTBhNDZhMC02NTg2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv3pYH6RO1J3arCMDtIT+cuKClZLhDE5JyLrbcEmjKo6sbaBBJ8aa2wd5ouYY Vyxro9urKb8+jCJ9o34S9EVQK2+vepJiO0ZUsAPWzUtxgGQ25dKS4PAMQuACRw1Q BEOmTwgWl+lPZPmPLfVlsApN3Fd5yzswaqZcKxG42Z5Hl4agcFAm1yGcNDkrDGaV dacC9jFZhw1Ly8u0Wc5W7I6qiWo2yJ2U/WaaYXPyQLLbTA1oMA3GikZUkJV2NGtL Va71xM/torROAqfEEFwnEKB3fpUKC30CjRuI7va4J7DgccBZk3ZHHZh4UHv9ZPqO B5xb2VuAE0rwwsE/FaKKT6UbtQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIHyh3ov nB3QbRusBUC2ViEkq0lkMB8GA1UdIwQYMBaAFBSmyrwwLsHj3OdN6Yv1WKBCvqxW MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MDlEQy9BNUJCRkFBNjA5 MzUxMUVBQUIxMEM5MUZDNEY5QUUwMi9GS2JLdkRBdXdlUGM1MDNwaV9WWW9FSy1y RlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZLYkt2REF1d2VQYzUwM3BpX1ZZb0VLLXJGWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MDlEQy9BNUJCRkFBNjA5MzUxMUVBQUIxMEM5MUZDNEY5QUUwMi9GS2JLdkRBdXdl UGM1MDNwaV9WWW9FSy1yRlkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCdyhQkcfXOwSrQ3rP/rAGayGRL5bcY6PQIlK7eCOgqyfgaP/gjSe2c Iqw1JoMyiD9A2AVTrtTceoTMvDx6mSOqpbFhMjHlx4Rhp4X1qjhYtAIrJGxR/+gN 6inR/1D4OQfMc1Ul+SNXdl1RJD9cjpQpkW5IfUHxX95fB+AdNs5Vvggo5nRmL4OW PlvWczkrBz4BcmxcewzKgy31JWnMgNBo4nvWqLlYCempAfkfZLwc+jWa3JlaZjEH /wFdcc+cFCsAaQGtuFs01PqyJQ1UTnE0d1CW0sJ8Lq5GqqZoOVBWT9Zy6z9Qixf1 7eGkTHudyLIpP0DA5pAit5KiPViFOiD7 -----END CERTIFICATE-----Generated at Wed Nov 5 12:27:46 2025 by rpki-client