$ rpki-client -vvf rpki.apnic.net/member_repository/A9145B5E/7DD7BBBC45B511EFBA4A621EC4F9AE02/FyftFR9AiSEOw-Nopaae45SE4-Y.mft File: FyftFR9AiSEOw-Nopaae45SE4-Y.mft (raw, json) Hash identifier: UHcmN0oES9kfovKsI9d9Y3pIaVS0/UHdHWbFE9lLYeo= Subject key identifier: 20:06:7D:81:79:F9:AF:D0:A5:AB:CE:18:FD:01:20:0A:7A:17:06:4F Authority key identifier: 17:27:ED:15:1F:40:89:21:0E:C3:E3:68:A5:A6:9E:E3:94:84:E3:E6 Certificate issuer: /CN=A9145B5E/serialNumber=1727ED151F4089210EC3E368A5A69EE39484E3E6 Certificate serial: F4 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FyftFR9AiSEOw-Nopaae45SE4-Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9145B5E/7DD7BBBC45B511EFBA4A621EC4F9AE02/FyftFR9AiSEOw-Nopaae45SE4-Y.mft Manifest number: F2 Signing time: Mon 03 Nov 2025 05:15:33 +0000 Manifest this update: Mon 03 Nov 2025 05:15:32 +0000 Manifest next update: Mon 10 Nov 2025 05:15:32 +0000 Files and hashes: 1: FyftFR9AiSEOw-Nopaae45SE4-Y.crl (hash: MzmizC5dnNLurFZzRg3tA9IxM2i8h8ew1gwwlf4Qrk8=) 2: F149E6BE45B611EFA10B0632C4F9AE02.roa (hash: oxyCeNFM/JV3FlgREEjrGNxGIzoK5Vk5MzO+fwua+7Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9145B5E/7DD7BBBC45B511EFBA4A621EC4F9AE02/FyftFR9AiSEOw-Nopaae45SE4-Y.crl rsync://rpki.apnic.net/member_repository/A9145B5E/7DD7BBBC45B511EFBA4A621EC4F9AE02/FyftFR9AiSEOw-Nopaae45SE4-Y.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FyftFR9AiSEOw-Nopaae45SE4-Y.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 05:15:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 244 (0xf4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9145B5E, serialNumber=1727ED151F4089210EC3E368A5A69EE39484E3E6 Validity Not Before: Nov 3 05:15:32 2025 GMT Not After : Nov 10 05:15:32 2025 GMT Subject: CN=69083a74-28af Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:b4:83:92:07:82:e1:4c:c6:52:8b:01:db:7a: c0:fa:f8:c5:a5:b3:d7:56:6b:ca:22:93:c1:ca:19: 3c:03:5f:84:9d:9a:6d:3d:f0:36:85:e0:9f:cc:d6: 6e:63:cd:e1:1f:6f:62:19:40:34:d8:90:cb:46:bf: 33:52:bb:6d:e4:79:54:0d:4a:32:f9:85:9c:c3:d8: cc:f9:75:f7:46:65:74:ba:3d:ec:b9:4e:08:7b:aa: a0:da:b3:93:58:ce:ab:88:90:29:cb:da:c7:ee:1c: a2:df:f1:71:ff:1e:ac:d5:23:11:70:71:91:be:39: c6:0b:13:b2:00:4e:6b:e1:71:f0:04:12:56:af:a9: 1a:bb:f4:03:4a:e9:5c:dc:c2:96:1e:33:10:a1:00: 83:2a:b4:78:05:7f:aa:a7:f3:34:1e:c7:bc:46:e1: 78:f1:18:16:5f:66:a6:e9:f5:59:fd:46:81:af:96: 66:95:b8:6f:48:7b:62:5f:2e:dc:4b:5f:1b:3c:90: 89:a0:fd:d1:4a:b6:c5:32:53:b9:6a:ba:ed:50:fc: 0f:41:e4:61:e7:3f:8e:cb:11:32:f0:27:b0:07:55: c1:a6:96:8a:10:dd:e1:1d:ad:2a:5c:46:56:f0:b0: 80:13:f2:b6:ad:8c:25:92:af:3f:8c:11:6d:f0:8a: 96:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:06:7D:81:79:F9:AF:D0:A5:AB:CE:18:FD:01:20:0A:7A:17:06:4F X509v3 Authority Key Identifier: keyid:17:27:ED:15:1F:40:89:21:0E:C3:E3:68:A5:A6:9E:E3:94:84:E3:E6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9145B5E/7DD7BBBC45B511EFBA4A621EC4F9AE02/FyftFR9AiSEOw-Nopaae45SE4-Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FyftFR9AiSEOw-Nopaae45SE4-Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9145B5E/7DD7BBBC45B511EFBA4A621EC4F9AE02/FyftFR9AiSEOw-Nopaae45SE4-Y.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 57:c0:46:df:c9:24:98:4c:cc:50:41:4a:af:ff:c9:fa:a0:ac: 80:82:27:fd:4f:c5:e0:aa:2a:13:0a:42:21:e8:5c:d8:89:47: 0d:95:7a:7f:bb:01:06:e2:a9:0f:d0:0c:45:d3:d5:68:b1:a9: d2:c4:a9:ba:bf:23:36:3b:37:bc:76:6a:c8:14:a9:51:f7:9a: 2d:c5:95:0d:da:c3:db:44:e9:d7:62:2b:32:bd:e1:ad:9f:5d: 95:89:fe:ff:16:7d:2e:ff:b6:21:72:46:bb:e7:58:3b:9b:ff: 4e:fc:c6:70:ce:9b:39:66:98:a9:72:4e:c5:85:b1:7e:1c:4b: 12:ef:c5:c9:01:16:b4:16:df:e9:fc:b6:8b:d9:cb:81:bd:4c: 1e:f1:a8:82:6f:15:4d:69:9b:94:08:af:cd:f0:99:80:0e:64: 52:88:8b:41:0a:17:7d:52:84:04:1c:77:d0:45:78:a4:64:d3: 89:26:f3:d3:1e:1f:0d:22:fe:24:5d:6e:fb:1d:e0:ea:e5:d1: 7b:ff:9d:ce:46:70:20:22:dd:d5:14:c3:1a:5a:de:04:58:a3: 57:16:e8:90:c6:66:fb:43:60:21:e2:d0:25:b5:25:5e:a6:46: 82:1a:2d:ea:32:1c:1f:54:48:a4:63:7e:ab:a2:e8:3c:a5:42: 76:e6:0d:1e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAPQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDVCNUUxMTAvBgNVBAUTKDE3MjdFRDE1MUY0MDg5MjEwRUMzRTM2OEE1QTY5RUUz OTQ4NEUzRTYwHhcNMjUxMTAzMDUxNTMyWhcNMjUxMTEwMDUxNTMyWjAYMRYwFAYD VQQDEw02OTA4M2E3NC0yOGFmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5rSDkgeC4UzGUosB23rA+vjFpbPXVmvKIpPByhk8A1+EnZptPfA2heCfzNZu Y83hH29iGUA02JDLRr8zUrtt5HlUDUoy+YWcw9jM+XX3RmV0uj3suU4Ie6qg2rOT WM6riJApy9rH7hyi3/Fx/x6s1SMRcHGRvjnGCxOyAE5r4XHwBBJWr6kau/QDSulc 3MKWHjMQoQCDKrR4BX+qp/M0Hse8RuF48RgWX2am6fVZ/UaBr5ZmlbhvSHtiXy7c S18bPJCJoP3RSrbFMlO5arrtUPwPQeRh5z+OyxEy8CewB1XBppaKEN3hHa0qXEZW 8LCAE/K2rYwlkq8/jBFt8IqWxwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCAGfYF5 +a/QpavOGP0BIAp6FwZPMB8GA1UdIwQYMBaAFBcn7RUfQIkhDsPjaKWmnuOUhOPm MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NUI1RS83REQ3QkJCQzQ1 QjUxMUVGQkE0QTYyMUVDNEY5QUUwMi9GeWZ0RlI5QWlTRU93LU5vcGFhZTQ1U0U0 LVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0Z5ZnRGUjlBaVNFT3ctTm9wYWFlNDVTRTQtWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NUI1RS83REQ3QkJCQzQ1QjUxMUVGQkE0QTYyMUVDNEY5QUUwMi9GeWZ0RlI5QWlT RU93LU5vcGFhZTQ1U0U0LVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBXwEbfySSYTMxQQUqv/8n6oKyAgif9T8XgqioTCkIh6FzYiUcNlXp/ uwEG4qkP0AxF09VosanSxKm6vyM2Oze8dmrIFKlR95otxZUN2sPbROnXYisyveGt n12Vif7/Fn0u/7Yhcka751g7m/9O/MZwzps5Zpipck7FhbF+HEsS78XJARa0Ft/p /LaL2cuBvUwe8aiCbxVNaZuUCK/N8JmADmRSiItBChd9UoQEHHfQRXikZNOJJvPT Hh8NIv4kXW77HeDq5dF7/53ORnAgIt3VFMMaWt4EWKNXFuiQxmb7Q2Ah4tAltSVe pkaCGi3qMhwfVEikY36roug8pUJ25g0e -----END CERTIFICATE-----Generated at Tue Nov 4 21:16:32 2025 by rpki-client