$ rpki-client -vvf rpki.apnic.net/member_repository/A91513FA/329397661DEE11ED9472C136C4F9AE02/FgS-6E66CP3JRuSLTBTo3CVCGTo.mft File: FgS-6E66CP3JRuSLTBTo3CVCGTo.mft (raw, json) Hash identifier: l3E/4qQtn2WlH2FuYRPtsxc/pKuRxgkSZQEH99wOQ+w= Subject key identifier: CD:33:FB:0D:96:F8:BB:FB:FE:CE:A2:44:34:00:55:9E:DC:0C:5E:5B Authority key identifier: 16:04:BE:E8:4E:BA:08:FD:C9:46:E4:8B:4C:14:E8:DC:25:42:19:3A Certificate issuer: /CN=A91513FA/serialNumber=1604BEE84EBA08FDC946E48B4C14E8DC2542193A Certificate serial: 02A3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FgS-6E66CP3JRuSLTBTo3CVCGTo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91513FA/329397661DEE11ED9472C136C4F9AE02/FgS-6E66CP3JRuSLTBTo3CVCGTo.mft Manifest number: 029F Signing time: Wed 05 Nov 2025 01:38:07 +0000 Manifest this update: Wed 05 Nov 2025 01:38:06 +0000 Manifest next update: Wed 12 Nov 2025 01:38:06 +0000 Files and hashes: 1: FgS-6E66CP3JRuSLTBTo3CVCGTo.crl (hash: XJjpAipiqYz7snYh7uz4GX+lHoW22Rb6hsZiR3UDdtA=) 2: 6901B0861DF211ED95A51A3EC4F9AE02.roa (hash: 0XIDOV8UwVvmlax4boMgDyUwaF1U/8jmEUNtClSqDZc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91513FA/329397661DEE11ED9472C136C4F9AE02/FgS-6E66CP3JRuSLTBTo3CVCGTo.crl rsync://rpki.apnic.net/member_repository/A91513FA/329397661DEE11ED9472C136C4F9AE02/FgS-6E66CP3JRuSLTBTo3CVCGTo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FgS-6E66CP3JRuSLTBTo3CVCGTo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 01:38:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 675 (0x2a3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91513FA, serialNumber=1604BEE84EBA08FDC946E48B4C14E8DC2542193A Validity Not Before: Nov 5 01:38:06 2025 GMT Not After : Nov 12 01:38:06 2025 GMT Subject: CN=690aaa7f-3bc7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:17:08:7b:11:1c:39:da:e9:f3:12:3e:70:59: 22:6b:59:23:eb:16:cb:44:dd:27:a4:dc:35:56:ef: d2:4c:7f:ef:0a:1e:14:5d:bc:91:53:14:0f:9e:a7: 6e:39:7b:a3:55:b2:86:6e:1d:72:01:0d:7a:42:18: 01:43:f8:95:25:4b:7e:89:cc:d0:ef:a7:8d:fc:ba: 6c:ea:6f:0d:bf:cd:ba:a9:16:20:06:13:ef:9b:e9: 99:35:ba:37:92:54:71:37:c0:9b:50:58:1d:a5:7d: 34:f6:b6:f8:c3:9b:0a:90:b8:59:f9:48:31:5d:89: 4f:7a:aa:c7:f4:95:15:6e:ae:bd:a7:24:9b:19:43: b5:74:d2:1f:8a:23:bc:7a:e4:a0:65:f7:da:67:39: 74:c4:5b:b3:7d:a0:bb:d3:83:75:7a:a5:56:bb:76: f8:bf:53:ae:2e:42:ed:60:4d:58:f7:25:91:16:b5: e8:4c:54:35:af:a8:be:7d:ab:af:f1:6c:d6:17:8f: 54:e8:d3:39:a1:8b:80:7f:7e:a8:d3:6b:81:04:ba: 86:b2:7c:83:cc:7d:71:50:df:a1:54:82:43:f7:41: 3c:aa:81:0a:6f:70:4a:de:42:98:ef:38:97:1f:4a: fa:7d:1c:d4:c3:51:c0:b7:7d:62:01:28:a8:c0:52: ee:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:33:FB:0D:96:F8:BB:FB:FE:CE:A2:44:34:00:55:9E:DC:0C:5E:5B X509v3 Authority Key Identifier: keyid:16:04:BE:E8:4E:BA:08:FD:C9:46:E4:8B:4C:14:E8:DC:25:42:19:3A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91513FA/329397661DEE11ED9472C136C4F9AE02/FgS-6E66CP3JRuSLTBTo3CVCGTo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FgS-6E66CP3JRuSLTBTo3CVCGTo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91513FA/329397661DEE11ED9472C136C4F9AE02/FgS-6E66CP3JRuSLTBTo3CVCGTo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c3:61:64:54:e0:6a:ec:55:ab:ee:df:57:7a:65:ae:8b:0d:71: 92:27:ab:69:2a:73:e6:eb:c0:8c:4f:e1:56:79:e6:3a:66:62: e3:4a:3b:b3:dd:99:96:7f:6a:c0:2c:ab:a0:cb:0e:02:3e:6c: 01:db:8a:07:c3:d5:7a:5b:02:fb:94:13:4c:4c:f0:c6:bf:65: 1c:8f:2b:72:44:2a:65:2e:07:73:6a:fb:3b:b8:d3:d6:5e:2b: 13:e4:a8:db:33:04:3e:89:f9:34:90:f8:14:f7:1c:99:a6:56: d9:b0:cf:5f:aa:92:cd:fd:e8:d9:ce:61:4b:aa:ac:bb:8f:5e: 2e:c6:a1:1a:eb:b7:b8:01:49:9c:fb:a9:72:e8:f7:bb:11:3a: 25:14:fe:93:11:4e:04:59:d4:b4:bb:d1:79:c1:bb:c3:45:d7: bd:51:4e:71:31:4d:eb:c6:e3:17:06:57:c1:70:28:ca:2c:80: bf:58:d2:a7:8a:5f:7a:dd:32:22:28:07:c6:79:9e:d0:36:b2: 9a:cf:d0:a0:1f:3c:1d:6d:e4:a7:19:30:d0:b5:23:8f:e1:28: 25:fb:0d:28:cd:ee:18:d6:80:c8:90:2b:4d:72:9a:a8:ec:23: 15:27:25:76:f2:23:3a:89:3a:7e:6c:70:55:e3:de:a2:90:59: 93:4e:b3:d2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAqMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTEzRkExMTAvBgNVBAUTKDE2MDRCRUU4NEVCQTA4RkRDOTQ2RTQ4QjRDMTRFOERD MjU0MjE5M0EwHhcNMjUxMTA1MDEzODA2WhcNMjUxMTEyMDEzODA2WjAYMRYwFAYD VQQDEw02OTBhYWE3Zi0zYmM3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoBcIexEcOdrp8xI+cFkia1kj6xbLRN0npNw1Vu/STH/vCh4UXbyRUxQPnqdu OXujVbKGbh1yAQ16QhgBQ/iVJUt+iczQ76eN/Lps6m8Nv826qRYgBhPvm+mZNbo3 klRxN8CbUFgdpX009rb4w5sKkLhZ+UgxXYlPeqrH9JUVbq69pySbGUO1dNIfiiO8 euSgZffaZzl0xFuzfaC704N1eqVWu3b4v1OuLkLtYE1Y9yWRFrXoTFQ1r6i+fauv 8WzWF49U6NM5oYuAf36o02uBBLqGsnyDzH1xUN+hVIJD90E8qoEKb3BK3kKY7ziX H0r6fRzUw1HAt31iASiowFLucwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFM0z+w2W +Lv7/s6iRDQAVZ7cDF5bMB8GA1UdIwQYMBaAFBYEvuhOugj9yUbki0wU6NwlQhk6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MTNGQS8zMjkzOTc2NjFE RUUxMUVEOTQ3MkMxMzZDNEY5QUUwMi9GZ1MtNkU2NkNQM0pSdVNMVEJUbzNDVkNH VG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZnUy02RTY2Q1AzSlJ1U0xUQlRvM0NWQ0dUby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MTNGQS8zMjkzOTc2NjFERUUxMUVEOTQ3MkMxMzZDNEY5QUUwMi9GZ1MtNkU2NkNQ M0pSdVNMVEJUbzNDVkNHVG8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDDYWRU4GrsVavu31d6Za6LDXGSJ6tpKnPm68CMT+FWeeY6ZmLjSjuz 3ZmWf2rALKugyw4CPmwB24oHw9V6WwL7lBNMTPDGv2UcjytyRCplLgdzavs7uNPW XisT5KjbMwQ+ifk0kPgU9xyZplbZsM9fqpLN/ejZzmFLqqy7j14uxqEa67e4AUmc +6ly6Pe7ETolFP6TEU4EWdS0u9F5wbvDRde9UU5xMU3rxuMXBlfBcCjKLIC/WNKn il963TIiKAfGeZ7QNrKaz9CgHzwdbeSnGTDQtSOP4Sgl+w0oze4Y1oDIkCtNcpqo 7CMVJyV28iM6iTp+bHBV496ikFmTTrPS -----END CERTIFICATE-----Generated at Wed Nov 5 05:43:55 2025 by rpki-client