$ rpki-client -vvf rpki.apnic.net/member_repository/A9149E0D/904E747E390911EAB0DE3F49C4F9AE02/FrgD2zk43LFdxZooyXcZ2h_yClM.mft File: FrgD2zk43LFdxZooyXcZ2h_yClM.mft (raw, json) Hash identifier: CVhklK2loAdbdnQvQvRiZj0tBlXmRfzKJmVQq1A86VI= Subject key identifier: 00:3D:E4:8D:B9:A7:6F:70:FD:C8:46:38:D0:C3:FC:87:B4:74:DF:76 Authority key identifier: 16:B8:03:DB:39:38:DC:B1:5D:C5:9A:28:C9:77:19:DA:1F:F2:0A:53 Certificate issuer: /CN=A9149E0D/serialNumber=16B803DB3938DCB15DC59A28C97719DA1FF20A53 Certificate serial: 0B98 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FrgD2zk43LFdxZooyXcZ2h_yClM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9149E0D/904E747E390911EAB0DE3F49C4F9AE02/FrgD2zk43LFdxZooyXcZ2h_yClM.mft Manifest number: 0B8D Signing time: Sun 02 Nov 2025 19:00:16 +0000 Manifest this update: Sun 02 Nov 2025 19:00:16 +0000 Manifest next update: Sun 09 Nov 2025 19:00:16 +0000 Files and hashes: 1: FrgD2zk43LFdxZooyXcZ2h_yClM.crl (hash: cnrtnrWBGG8zFmH6nv3P4t/0j+FFNwgscd40Ym9fMwk=) 2: C8FB48F808AF11EBAB78DF6BC4F9AE02.roa (hash: QwMnRtpt+1eT07NMpTybXiiH3v3R91ylnqw2cVEHLL0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9149E0D/904E747E390911EAB0DE3F49C4F9AE02/FrgD2zk43LFdxZooyXcZ2h_yClM.crl rsync://rpki.apnic.net/member_repository/A9149E0D/904E747E390911EAB0DE3F49C4F9AE02/FrgD2zk43LFdxZooyXcZ2h_yClM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FrgD2zk43LFdxZooyXcZ2h_yClM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 19:00:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2968 (0xb98) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9149E0D, serialNumber=16B803DB3938DCB15DC59A28C97719DA1FF20A53 Validity Not Before: Nov 2 19:00:16 2025 GMT Not After : Nov 9 19:00:16 2025 GMT Subject: CN=6907aa40-834d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:04:30:21:13:f2:a4:d1:e4:ae:71:d2:be:4d: c1:e4:68:3e:ce:d4:4e:a0:f1:f2:28:19:4d:fa:14: ef:9a:b8:d3:09:cc:88:72:0b:86:35:ae:61:e9:40: 12:bd:b3:dc:a1:34:e2:b5:e2:48:f6:71:11:39:6c: 46:c8:44:20:00:87:ce:dc:09:2d:e7:c9:37:64:83: f5:44:7c:95:72:24:13:d7:52:e9:dd:21:77:6d:0e: a9:f1:a9:42:e4:67:f6:7a:7f:b2:2d:55:6d:a0:cc: 44:36:29:1e:38:43:78:89:7b:52:67:b4:74:e3:1a: 7d:3e:5e:eb:16:b3:e0:ee:86:04:e5:a0:78:c0:66: 9f:54:17:f7:05:e3:41:9b:de:10:85:de:4a:3e:69: 0f:4e:e2:4a:59:7d:91:e3:b1:9a:01:2d:f4:1b:ce: 20:cd:ac:6e:98:d4:32:e8:84:09:76:8c:fd:e8:64: 1a:7a:14:9b:af:92:1f:52:03:23:47:a6:04:36:7a: 9b:2d:aa:14:7d:b5:35:99:ae:03:29:dd:13:88:48: 67:9f:4c:57:19:08:95:f2:0b:e2:a6:50:98:b5:a2: 59:95:59:35:a0:e3:c8:9f:ca:7d:48:1a:cc:c6:0d: 02:18:6c:6e:26:ad:2f:65:7f:34:b7:ee:d1:a5:7c: c0:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:3D:E4:8D:B9:A7:6F:70:FD:C8:46:38:D0:C3:FC:87:B4:74:DF:76 X509v3 Authority Key Identifier: keyid:16:B8:03:DB:39:38:DC:B1:5D:C5:9A:28:C9:77:19:DA:1F:F2:0A:53 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9149E0D/904E747E390911EAB0DE3F49C4F9AE02/FrgD2zk43LFdxZooyXcZ2h_yClM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FrgD2zk43LFdxZooyXcZ2h_yClM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9149E0D/904E747E390911EAB0DE3F49C4F9AE02/FrgD2zk43LFdxZooyXcZ2h_yClM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a4:fb:66:6f:9b:8d:b8:f1:60:4a:5f:17:ad:e8:87:12:01:ca: 01:66:83:23:4f:9d:dc:2a:03:60:58:8a:e6:6e:3d:94:33:1d: d6:59:29:e6:54:46:6d:49:24:fc:c2:3d:98:60:75:37:a8:47: 7d:a4:a4:fa:9b:7c:1d:09:d3:96:bd:33:ff:7c:54:a3:61:08: 62:cc:61:7d:ef:4e:0c:f2:02:36:54:9f:fc:d5:e4:d4:bd:41: ef:bc:e1:ca:b1:05:0e:73:aa:1e:dd:74:4c:1f:c5:aa:f3:b2: ee:dd:83:0e:0b:26:1a:bb:f8:46:44:49:b4:ca:5e:73:9c:36: d3:28:fb:b1:ee:fa:23:0c:c1:dd:85:55:25:0c:22:12:d9:34: b4:df:e1:76:a6:86:e8:b4:ca:17:f7:9e:11:b8:f2:16:f4:7b: 66:38:e4:25:fa:47:6d:5b:1e:ea:2a:71:ba:3e:f3:d1:a2:41: 14:75:f1:46:82:2e:16:21:19:48:4a:3d:e5:63:69:84:9d:a9: e5:0a:79:db:18:93:a8:e0:75:ab:13:f8:e8:2c:f0:16:f6:70: 39:13:a9:58:96:c6:0e:31:1e:50:0e:99:87:9c:a9:4b:36:20: c7:2a:5a:98:ad:6d:f2:76:79:9d:c1:88:60:cc:95:54:cb:23: ce:54:27:89 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC5gwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDlFMEQxMTAvBgNVBAUTKDE2QjgwM0RCMzkzOERDQjE1REM1OUEyOEM5NzcxOURB MUZGMjBBNTMwHhcNMjUxMTAyMTkwMDE2WhcNMjUxMTA5MTkwMDE2WjAYMRYwFAYD VQQDEw02OTA3YWE0MC04MzRkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAlgQwIRPypNHkrnHSvk3B5Gg+ztROoPHyKBlN+hTvmrjTCcyIcguGNa5h6UAS vbPcoTTiteJI9nEROWxGyEQgAIfO3Akt58k3ZIP1RHyVciQT11Lp3SF3bQ6p8alC 5Gf2en+yLVVtoMxENikeOEN4iXtSZ7R04xp9Pl7rFrPg7oYE5aB4wGafVBf3BeNB m94Qhd5KPmkPTuJKWX2R47GaAS30G84gzaxumNQy6IQJdoz96GQaehSbr5IfUgMj R6YENnqbLaoUfbU1ma4DKd0TiEhnn0xXGQiV8gviplCYtaJZlVk1oOPIn8p9SBrM xg0CGGxuJq0vZX80t+7RpXzAnQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAA95I25 p29w/chGONDD/Ie0dN92MB8GA1UdIwQYMBaAFBa4A9s5ONyxXcWaKMl3Gdof8gpT MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0OUUwRC85MDRFNzQ3RTM5 MDkxMUVBQjBERTNGNDlDNEY5QUUwMi9GcmdEMnprNDNMRmR4Wm9veVhjWjJoX3lD bE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZyZ0Qyems0M0xGZHhab295WGNaMmhfeUNsTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 OUUwRC85MDRFNzQ3RTM5MDkxMUVBQjBERTNGNDlDNEY5QUUwMi9GcmdEMnprNDNM RmR4Wm9veVhjWjJoX3lDbE0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCk+2Zvm4248WBKXxet6IcSAcoBZoMjT53cKgNgWIrmbj2UMx3WWSnm VEZtSST8wj2YYHU3qEd9pKT6m3wdCdOWvTP/fFSjYQhizGF9704M8gI2VJ/81eTU vUHvvOHKsQUOc6oe3XRMH8Wq87Lu3YMOCyYau/hGREm0yl5znDbTKPux7vojDMHd hVUlDCIS2TS03+F2pobotMoX954RuPIW9HtmOOQl+kdtWx7qKnG6PvPRokEUdfFG gi4WIRlISj3lY2mEnanlCnnbGJOo4HWrE/joLPAW9nA5E6lYlsYOMR5QDpmHnKlL NiDHKlqYrW3ydnmdwYhgzJVUyyPOVCeJ -----END CERTIFICATE-----Generated at Tue Nov 4 12:36:48 2025 by rpki-client