$ rpki-client -vvf rpki.apnic.net/member_repository/A9148BFA/04A24C34114311EC97369F73C4F9AE02/FXsL3g48rbKUg5vJgVZVZE2ybpE.mft File: FXsL3g48rbKUg5vJgVZVZE2ybpE.mft (raw, json) Hash identifier: eg9qa3zRTw/QaeJsNFshnv8DNxQWX99BnelOdr67ZXk= Subject key identifier: 1B:BE:E8:D4:6E:3C:BE:8E:3E:91:DA:01:6F:F2:96:27:82:5B:45:3F Authority key identifier: 15:7B:0B:DE:0E:3C:AD:B2:94:83:9B:C9:81:56:55:64:4D:B2:6E:91 Certificate issuer: /CN=A9148BFA/serialNumber=157B0BDE0E3CADB294839BC9815655644DB26E91 Certificate serial: 05AE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FXsL3g48rbKUg5vJgVZVZE2ybpE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9148BFA/04A24C34114311EC97369F73C4F9AE02/FXsL3g48rbKUg5vJgVZVZE2ybpE.mft Manifest number: 057D Signing time: Tue 04 Nov 2025 23:30:58 +0000 Manifest this update: Tue 04 Nov 2025 23:30:58 +0000 Manifest next update: Tue 11 Nov 2025 23:30:58 +0000 Files and hashes: 1: FXsL3g48rbKUg5vJgVZVZE2ybpE.crl (hash: M+9TMAEIomg98JfQtnwr2v/xXP5p2N07A9AniHfKeiE=) 2: B589332C498611EF90B46962C4F9AE02.roa (hash: uDyhMVme3VTf+JhXqHqMKucF4UMzPNmrq3U6pJO1VaY=) 3: 06E8BCB4B3F411F0874AC55BC4F9AE02.roa (hash: Vp5etmm0b4cMTiOCVd/ik0duA4OhlC73XZbv5txdzNY=) 4: F6DBFB92B3F311F0929DA35BC4F9AE02.roa (hash: jJDQVt5YG4qUbIQgC7Oi7FePcAVc60C7b8hfBT+zvz4=) 5: 93DAAB4612BA11EF901ACD28C4F9AE02.roa (hash: l7Qd9q+JWXL9sQ4Jr7CNDbb+BXG9V5k2ZQl4V+DIHCQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9148BFA/04A24C34114311EC97369F73C4F9AE02/FXsL3g48rbKUg5vJgVZVZE2ybpE.crl rsync://rpki.apnic.net/member_repository/A9148BFA/04A24C34114311EC97369F73C4F9AE02/FXsL3g48rbKUg5vJgVZVZE2ybpE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FXsL3g48rbKUg5vJgVZVZE2ybpE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 23:30:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1454 (0x5ae) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9148BFA, serialNumber=157B0BDE0E3CADB294839BC9815655644DB26E91 Validity Not Before: Nov 4 23:30:58 2025 GMT Not After : Nov 11 23:30:58 2025 GMT Subject: CN=690a8cb2-558b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:c9:af:bd:a2:9c:53:67:c1:87:61:8b:30:c3: 11:6e:fa:48:46:6f:2f:64:37:4a:9d:0c:46:f9:2a: 13:e2:45:42:fb:dd:c3:b3:06:02:31:62:64:15:34: 8f:ed:e9:23:65:fd:93:05:a5:ef:8c:51:07:09:d2: 73:ea:b0:ef:32:78:23:ac:7f:4f:a4:ed:c2:3d:a5: d3:d9:8b:3b:4c:91:e7:36:93:88:8a:9b:4c:ca:ee: c5:98:01:a4:ff:ae:c9:f3:c9:92:da:0e:57:4e:f6: 62:a2:8c:6d:b7:21:21:66:50:80:7f:6a:f4:8b:a7: 89:9e:29:2f:af:3f:ae:52:82:7e:a8:21:8c:da:f8: 77:93:4d:34:cd:3b:62:0e:17:ff:20:95:ed:2a:3b: cb:90:94:ab:eb:3c:3f:b5:89:cf:52:49:6c:27:f1: df:4c:31:c3:dc:55:90:cb:89:41:52:69:fe:d5:e9: 90:9a:be:e5:37:cf:c3:f1:4e:15:37:7d:3a:8f:62: 72:59:16:c8:90:f4:84:e8:a9:5b:9b:cf:cd:96:65: 8b:55:3c:8e:51:fb:f1:6b:d0:0a:8c:0e:96:df:e4: 2c:c5:f1:c8:89:18:eb:c6:cb:dc:2c:a7:ca:06:9b: 79:ca:a1:43:e7:31:aa:03:c9:c4:6c:fb:c3:a4:47: 53:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:BE:E8:D4:6E:3C:BE:8E:3E:91:DA:01:6F:F2:96:27:82:5B:45:3F X509v3 Authority Key Identifier: keyid:15:7B:0B:DE:0E:3C:AD:B2:94:83:9B:C9:81:56:55:64:4D:B2:6E:91 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9148BFA/04A24C34114311EC97369F73C4F9AE02/FXsL3g48rbKUg5vJgVZVZE2ybpE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FXsL3g48rbKUg5vJgVZVZE2ybpE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9148BFA/04A24C34114311EC97369F73C4F9AE02/FXsL3g48rbKUg5vJgVZVZE2ybpE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 71:2f:89:15:02:7a:99:9c:92:d2:d6:fe:e5:6b:18:ce:c1:4b: 59:24:bd:18:db:fe:75:8c:00:fa:22:78:ac:a3:f7:82:13:0c: 46:86:d1:ce:01:86:92:36:f8:bf:ce:99:5f:77:7d:4d:57:f7: 6e:8d:cc:62:df:92:02:c6:f5:6d:93:46:9a:95:a9:a0:b6:35: 9a:7c:26:ab:c1:7c:cd:6a:58:c5:31:a2:9c:c5:24:a3:02:00: c9:4a:f4:39:88:c1:a2:42:68:ae:ea:1d:48:2a:1a:85:19:59: 56:10:a6:5a:b0:8b:9d:46:90:7b:9a:24:fd:0c:91:95:50:00: 7e:43:0e:57:05:8c:d4:77:90:1d:4b:9f:5f:82:c5:87:b5:9d: bf:d9:c3:58:7a:c7:9e:16:2e:a3:59:09:d1:b4:71:8e:52:a3: b3:70:ca:ad:68:cf:b5:c7:de:1a:53:87:00:b3:cf:f3:f3:bd: 37:ed:fa:1b:3b:87:51:24:df:64:e2:6b:8e:21:96:08:37:8f: a7:9c:45:9c:54:2c:fe:43:38:90:0a:a4:e4:ea:31:25:e0:dd: 1b:bd:3e:3f:73:43:fb:aa:06:d0:15:8f:32:a0:8d:fd:27:0a: 78:79:9a:72:1a:fb:ce:f0:48:6c:bf:5f:63:fd:b4:75:f7:19: af:b4:01:d6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBa4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDhCRkExMTAvBgNVBAUTKDE1N0IwQkRFMEUzQ0FEQjI5NDgzOUJDOTgxNTY1NTY0 NERCMjZFOTEwHhcNMjUxMTA0MjMzMDU4WhcNMjUxMTExMjMzMDU4WjAYMRYwFAYD VQQDEw02OTBhOGNiMi01NThiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAo8mvvaKcU2fBh2GLMMMRbvpIRm8vZDdKnQxG+SoT4kVC+93DswYCMWJkFTSP 7ekjZf2TBaXvjFEHCdJz6rDvMngjrH9PpO3CPaXT2Ys7TJHnNpOIiptMyu7FmAGk /67J88mS2g5XTvZiooxttyEhZlCAf2r0i6eJnikvrz+uUoJ+qCGM2vh3k000zTti Dhf/IJXtKjvLkJSr6zw/tYnPUklsJ/HfTDHD3FWQy4lBUmn+1emQmr7lN8/D8U4V N306j2JyWRbIkPSE6Klbm8/NlmWLVTyOUfvxa9AKjA6W3+QsxfHIiRjrxsvcLKfK Bpt5yqFD5zGqA8nEbPvDpEdTLQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBu+6NRu PL6OPpHaAW/ylieCW0U/MB8GA1UdIwQYMBaAFBV7C94OPK2ylIObyYFWVWRNsm6R MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0OEJGQS8wNEEyNEMzNDEx NDMxMUVDOTczNjlGNzNDNEY5QUUwMi9GWHNMM2c0OHJiS1VnNXZKZ1ZaVlpFMnli cEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZYc0wzZzQ4cmJLVWc1dkpnVlpWWkUyeWJwRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 OEJGQS8wNEEyNEMzNDExNDMxMUVDOTczNjlGNzNDNEY5QUUwMi9GWHNMM2c0OHJi S1VnNXZKZ1ZaVlpFMnlicEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBxL4kVAnqZnJLS1v7laxjOwUtZJL0Y2/51jAD6Iniso/eCEwxGhtHO AYaSNvi/zplfd31NV/dujcxi35ICxvVtk0aalamgtjWafCarwXzNaljFMaKcxSSj AgDJSvQ5iMGiQmiu6h1IKhqFGVlWEKZasIudRpB7miT9DJGVUAB+Qw5XBYzUd5Ad S59fgsWHtZ2/2cNYeseeFi6jWQnRtHGOUqOzcMqtaM+1x94aU4cAs8/z87037fob O4dRJN9k4muOIZYIN4+nnEWcVCz+QziQCqTk6jEl4N0bvT4/c0P7qgbQFY8yoI39 Jwp4eZpyGvvO8Ehsv19j/bR19xmvtAHW -----END CERTIFICATE-----Generated at Wed Nov 5 13:37:09 2025 by rpki-client