$ rpki-client -vvf rpki.apnic.net/member_repository/A9151631/F05158249DA211EBB439AA69C4F9AE02/fSxGJ1bUkw5gMpuitqcGbzsImu0.mft File: fSxGJ1bUkw5gMpuitqcGbzsImu0.mft (raw, json) Hash identifier: yeVpFwAj1Y45wkFvRskMo1tnPI9ZzolBldSqsWrk/jA= Subject key identifier: 6F:DB:8D:2F:63:EF:D0:88:1F:83:0D:07:7E:51:D9:90:C8:D9:72:31 Authority key identifier: 7D:2C:46:27:56:D4:93:0E:60:32:9B:A2:B6:A7:06:6F:3B:08:9A:ED Certificate issuer: /CN=A9151631/serialNumber=7D2C462756D4930E60329BA2B6A7066F3B089AED Certificate serial: 0677 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fSxGJ1bUkw5gMpuitqcGbzsImu0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9151631/F05158249DA211EBB439AA69C4F9AE02/fSxGJ1bUkw5gMpuitqcGbzsImu0.mft Manifest number: 0670 Signing time: Tue 04 Nov 2025 22:37:46 +0000 Manifest this update: Tue 04 Nov 2025 22:37:45 +0000 Manifest next update: Tue 11 Nov 2025 22:37:45 +0000 Files and hashes: 1: fSxGJ1bUkw5gMpuitqcGbzsImu0.crl (hash: MQ7ENOJCFj/1ZQ6+0ivL55AkHHth/J8rNE8XfCp16Dw=) 2: 44F388569DA411EBA820C56AC4F9AE02.roa (hash: PnsQbPIDSKRSyuK7eLM7Vk6MM+x0Uzj1WuRP+vxtrpM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9151631/F05158249DA211EBB439AA69C4F9AE02/fSxGJ1bUkw5gMpuitqcGbzsImu0.crl rsync://rpki.apnic.net/member_repository/A9151631/F05158249DA211EBB439AA69C4F9AE02/fSxGJ1bUkw5gMpuitqcGbzsImu0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fSxGJ1bUkw5gMpuitqcGbzsImu0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 22:37:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1655 (0x677) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9151631, serialNumber=7D2C462756D4930E60329BA2B6A7066F3B089AED Validity Not Before: Nov 4 22:37:45 2025 GMT Not After : Nov 11 22:37:45 2025 GMT Subject: CN=690a803a-2665 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:2c:c3:b6:9e:94:82:1d:f9:8e:0d:52:a6:8b: 60:f8:ac:31:12:d3:c7:56:34:32:df:2b:e4:e9:77: 90:c8:e9:fb:69:d1:45:ce:0b:b0:bf:eb:cb:b2:60: 3f:9d:76:06:c4:05:6b:21:4b:ec:04:7c:9b:23:d0: 48:ed:db:10:f0:22:d6:b6:bf:24:54:fe:f1:c3:ed: ad:90:d5:f2:4a:8d:e3:a7:89:c8:db:93:be:b0:38: 92:7e:8e:ac:a0:dd:8d:0b:68:39:d3:9b:c9:0d:19: a7:81:91:cb:5b:93:e9:b2:19:54:63:54:03:55:49: 2d:19:c5:c5:37:6f:bd:1b:59:f3:f9:94:70:cb:72: 6c:23:ac:b5:c9:07:0c:a1:09:28:e5:6f:0a:dd:9f: 6b:f7:77:52:94:26:66:ae:19:5b:7f:5f:44:2e:b9: 31:80:e9:32:dd:74:de:9c:df:a6:b5:2a:04:f4:5a: 69:b2:6b:a4:5e:77:2e:a8:4b:3a:a7:ff:27:ec:83: 48:96:73:d8:c7:3d:e9:7a:b1:14:ef:2c:af:6d:9d: 62:29:bf:a7:c0:76:38:9e:c2:bc:96:eb:13:f5:f4: e2:0f:79:5f:f3:ea:b5:2e:b2:6e:40:51:b7:70:58: 53:d6:a0:11:44:ac:46:82:73:b6:b4:7b:63:43:63: 1f:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:DB:8D:2F:63:EF:D0:88:1F:83:0D:07:7E:51:D9:90:C8:D9:72:31 X509v3 Authority Key Identifier: keyid:7D:2C:46:27:56:D4:93:0E:60:32:9B:A2:B6:A7:06:6F:3B:08:9A:ED X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9151631/F05158249DA211EBB439AA69C4F9AE02/fSxGJ1bUkw5gMpuitqcGbzsImu0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fSxGJ1bUkw5gMpuitqcGbzsImu0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9151631/F05158249DA211EBB439AA69C4F9AE02/fSxGJ1bUkw5gMpuitqcGbzsImu0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 07:27:1b:67:7f:6d:15:5b:64:b9:8c:d5:9d:1c:ee:7d:55:92: b6:27:4a:58:50:50:6e:a1:47:ff:0f:11:74:b3:08:0b:fd:f9: d5:b8:29:1d:c6:31:59:68:80:69:7c:f1:ab:3e:75:92:6f:89: a0:54:5e:60:4a:30:72:95:51:c8:d5:65:2c:31:00:dc:8e:e9: 88:5f:1a:9b:69:13:ce:6d:33:84:7e:72:19:0e:1d:b9:4c:fd: 39:e5:b6:85:cf:a9:eb:95:0a:d3:c9:1f:48:15:7a:63:3f:9e: fa:ca:68:02:4d:3d:c2:05:7a:eb:51:f3:f2:c9:25:83:e3:f8: 90:fa:82:eb:bd:03:34:75:e5:8d:dc:d4:4d:69:29:7f:17:e3: 96:4c:9d:62:75:61:97:ff:09:05:39:4f:b2:ab:26:b0:3a:33: 95:af:ac:f5:83:1a:5d:35:6d:24:f9:9c:92:4b:e4:c2:32:5c: 7e:ed:aa:05:9e:da:08:05:78:ce:b6:f6:3d:ad:11:e5:84:e7: 0c:38:77:3c:6d:83:74:73:b6:78:33:ec:18:97:eb:ca:62:3b: 3e:89:d8:8d:24:74:24:d9:66:63:13:61:cf:21:ce:f6:69:e3: 1d:39:c2:d2:b0:e2:dc:9d:8c:a1:db:7d:77:ec:5a:f5:4a:17: 09:fe:da:92 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBncwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTE2MzExMTAvBgNVBAUTKDdEMkM0NjI3NTZENDkzMEU2MDMyOUJBMkI2QTcwNjZG M0IwODlBRUQwHhcNMjUxMTA0MjIzNzQ1WhcNMjUxMTExMjIzNzQ1WjAYMRYwFAYD VQQDEw02OTBhODAzYS0yNjY1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAkyzDtp6Ugh35jg1Spotg+KwxEtPHVjQy3yvk6XeQyOn7adFFzguwv+vLsmA/ nXYGxAVrIUvsBHybI9BI7dsQ8CLWtr8kVP7xw+2tkNXySo3jp4nI25O+sDiSfo6s oN2NC2g505vJDRmngZHLW5PpshlUY1QDVUktGcXFN2+9G1nz+ZRwy3JsI6y1yQcM oQko5W8K3Z9r93dSlCZmrhlbf19ELrkxgOky3XTenN+mtSoE9FppsmukXncuqEs6 p/8n7INIlnPYxz3perEU7yyvbZ1iKb+nwHY4nsK8lusT9fTiD3lf8+q1LrJuQFG3 cFhT1qARRKxGgnO2tHtjQ2MfswIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFG/bjS9j 79CIH4MNB35R2ZDI2XIxMB8GA1UdIwQYMBaAFH0sRidW1JMOYDKboranBm87CJrt MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MTYzMS9GMDUxNTgyNDlE QTIxMUVCQjQzOUFBNjlDNEY5QUUwMi9mU3hHSjFiVWt3NWdNcHVpdHFjR2J6c0lt dTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ZTeEdKMWJVa3c1Z01wdWl0cWNHYnpzSW11MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MTYzMS9GMDUxNTgyNDlEQTIxMUVCQjQzOUFBNjlDNEY5QUUwMi9mU3hHSjFiVWt3 NWdNcHVpdHFjR2J6c0ltdTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAHJxtnf20VW2S5jNWdHO59VZK2J0pYUFBuoUf/DxF0swgL/fnVuCkd xjFZaIBpfPGrPnWSb4mgVF5gSjBylVHI1WUsMQDcjumIXxqbaRPObTOEfnIZDh25 TP055baFz6nrlQrTyR9IFXpjP576ymgCTT3CBXrrUfPyySWD4/iQ+oLrvQM0deWN 3NRNaSl/F+OWTJ1idWGX/wkFOU+yqyawOjOVr6z1gxpdNW0k+ZySS+TCMlx+7aoF ntoIBXjOtvY9rRHlhOcMOHc8bYN0c7Z4M+wYl+vKYjs+idiNJHQk2WZjE2HPIc72 aeMdOcLSsOLcnYyh23137Fr1ShcJ/tqS -----END CERTIFICATE-----Generated at Wed Nov 5 15:39:59 2025 by rpki-client