$ rpki-client -vvf rpki.apnic.net/member_repository/A9158E3F/C24322BA544611EA8C05651DC4F9AE02/fjE6t_8m54PgPAeFFhJ1GIGuSRg.mft File: fjE6t_8m54PgPAeFFhJ1GIGuSRg.mft (raw, json) Hash identifier: /Ul8uBHa6nzfbI8FhUf7OkCJ/+HghzHLvzBdqI7FwKE= Subject key identifier: F0:D8:1B:61:F2:90:B8:19:CE:54:44:3A:D1:53:D6:F4:6A:84:1B:24 Authority key identifier: 7E:31:3A:B7:FF:26:E7:83:E0:3C:07:85:16:12:75:18:81:AE:49:18 Certificate issuer: /CN=A9158E3F/serialNumber=7E313AB7FF26E783E03C07851612751881AE4918 Certificate serial: 0C6F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fjE6t_8m54PgPAeFFhJ1GIGuSRg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9158E3F/C24322BA544611EA8C05651DC4F9AE02/fjE6t_8m54PgPAeFFhJ1GIGuSRg.mft Manifest number: 0BB9 Signing time: Sun 02 Nov 2025 19:20:35 +0000 Manifest this update: Sun 02 Nov 2025 19:20:35 +0000 Manifest next update: Sun 09 Nov 2025 19:20:35 +0000 Files and hashes: 1: fjE6t_8m54PgPAeFFhJ1GIGuSRg.crl (hash: lS/r8IWbz7MtLLxK6FpRUPPEmuQLQPNLs4Enr/buW6w=) 2: E8819018178811EC876F5F50C4F9AE02.roa (hash: TUeSGThA71gPmHqcyXZanu8mExqUQgocKEFv3yzea/g=) 3: CB67A9DC8D1311EF9895E61CC4F9AE02.roa (hash: fKITGlH8Ym4FGCNTLdBz3N/9fT41O0ewrHeW85uprek=) 4: 52863B4C9DBA11EB83364624C4F9AE02.roa (hash: xgcAPmybhdKKX1LB8rArE+ilDIHuIkSGwEMHOrxxz6w=) 5: 1605F9B6169E11EC9D259855C4F9AE02.roa (hash: pWNi2zqUl2KymH0GwVdvbCWQHY1sj05kmoe0wb+HqN0=) 6: 065A717E9B6E11EFBCAB692BC4F9AE02.roa (hash: fpApiu1FjrarZlPUsOOK6GGIbKmnMiZ6mCyLBRP/A/k=) 7: 958CC8DA1C2611ECB416AA68C4F9AE02.roa (hash: SlT7b5WGF4xDvO5UnYsRWIEsNMsfCj2P0RDQ0c4uxVg=) 8: 8008F5CA620C11ECAFF5941AC4F9AE02.roa (hash: zf45ltuWfmdAtT9A7Ih3Fv5EL5oWc6vkxJu3n9BqugE=) 9: C3290D00636F11F0A1C6DA70C4F9AE02.roa (hash: kxUXf7mA4CW5b99j/+9BBjl+HFe5y/+Il84nYKPjkAg=) 10: 206969823B9411EB9F059D7EC4F9AE02.roa (hash: RxzJdhNL3XRe6UM0O5+yODZOZOT+QSs+nHTsvvP7oUM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9158E3F/C24322BA544611EA8C05651DC4F9AE02/fjE6t_8m54PgPAeFFhJ1GIGuSRg.crl rsync://rpki.apnic.net/member_repository/A9158E3F/C24322BA544611EA8C05651DC4F9AE02/fjE6t_8m54PgPAeFFhJ1GIGuSRg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fjE6t_8m54PgPAeFFhJ1GIGuSRg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 19:20:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3183 (0xc6f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9158E3F, serialNumber=7E313AB7FF26E783E03C07851612751881AE4918 Validity Not Before: Nov 2 19:20:35 2025 GMT Not After : Nov 9 19:20:35 2025 GMT Subject: CN=6907af03-4e3e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:6d:80:9d:02:e7:4b:a8:8e:41:6c:d8:62:b9: a1:c5:e8:3f:3d:eb:44:e6:5e:e1:85:3b:a7:7f:57: b3:75:ae:c9:a5:a2:9f:6b:f8:f0:44:98:67:19:d6: e6:f2:b0:60:69:e0:c4:21:d6:f7:cb:8a:28:57:cb: 56:5f:02:ba:f4:15:77:7c:f2:35:38:bf:78:39:f2: 0f:90:53:89:0f:f1:13:7d:3b:7f:eb:24:f8:22:2d: 36:52:35:2d:42:f0:64:95:6c:e3:3f:e7:3e:19:ed: b0:ff:25:4c:a8:6d:ad:3e:b3:f7:40:35:ae:21:27: 1a:6d:14:72:1a:22:de:30:4d:0f:11:39:0f:89:7a: 91:6a:52:b8:07:ff:81:d6:a8:6c:df:d3:f1:18:88: 60:90:3d:50:24:f0:3a:0c:3e:f6:af:14:19:17:64: c5:0c:9d:cf:41:c1:5f:33:a6:e7:e3:d3:5f:82:52: 93:48:3f:b8:fe:68:5e:92:2d:bc:a0:ec:33:a8:0e: 20:0a:43:94:7d:79:53:3a:f3:50:6b:47:15:1d:6f: 62:c0:34:f2:31:ad:3e:06:96:d6:ba:fc:c6:a7:56: aa:aa:72:0c:20:af:b4:e7:f2:a7:12:0e:fd:b4:27: 4b:44:7a:24:c8:62:e2:b3:98:33:a7:7d:77:e8:38: 76:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:D8:1B:61:F2:90:B8:19:CE:54:44:3A:D1:53:D6:F4:6A:84:1B:24 X509v3 Authority Key Identifier: keyid:7E:31:3A:B7:FF:26:E7:83:E0:3C:07:85:16:12:75:18:81:AE:49:18 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9158E3F/C24322BA544611EA8C05651DC4F9AE02/fjE6t_8m54PgPAeFFhJ1GIGuSRg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fjE6t_8m54PgPAeFFhJ1GIGuSRg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9158E3F/C24322BA544611EA8C05651DC4F9AE02/fjE6t_8m54PgPAeFFhJ1GIGuSRg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 45:fb:f0:a3:d2:15:95:5d:b9:78:c3:3d:a2:07:8a:e7:94:f2: f6:34:45:9c:6a:49:8e:4b:d9:52:cd:6e:ce:1e:af:6a:b1:1c: e4:e2:6d:8d:6b:7b:5f:4c:91:b9:40:b7:99:ac:85:6e:60:f5: 77:09:27:3c:4e:06:f7:7b:7e:d5:9e:81:24:87:4f:ac:f5:8c: 09:44:eb:b0:9a:c4:92:0b:fb:dc:1b:b3:3d:2f:d6:e8:48:36: 57:6a:34:6b:f3:ac:f7:83:07:9e:52:d4:76:28:28:fc:af:08: 2a:7e:87:0c:e9:03:49:fb:61:ae:6a:75:37:3b:35:4d:45:a3: 16:fc:4b:03:f5:27:d5:33:63:db:b4:37:c0:f5:63:80:cc:3e: 7d:04:2d:03:0b:a3:3e:3f:e7:9d:73:83:d8:aa:2f:e2:ae:b1: a0:9a:6d:a4:9e:e3:1c:a8:d1:16:17:0b:5f:02:95:31:de:dc: f2:f5:95:6c:c2:6d:3a:e1:4f:41:18:52:51:29:3e:be:a1:15: b8:3d:fe:5c:54:34:99:af:92:6a:09:a7:76:28:b5:76:aa:41: 69:e0:f7:f6:fe:81:0c:11:97:32:87:b5:a9:76:e8:d6:87:3b: b9:f8:93:f3:50:a4:83:d2:d2:b3:ea:f0:49:97:f4:7d:db:23: de:68:ca:0f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDG8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NThFM0YxMTAvBgNVBAUTKDdFMzEzQUI3RkYyNkU3ODNFMDNDMDc4NTE2MTI3NTE4 ODFBRTQ5MTgwHhcNMjUxMTAyMTkyMDM1WhcNMjUxMTA5MTkyMDM1WjAYMRYwFAYD VQQDEw02OTA3YWYwMy00ZTNlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmG2AnQLnS6iOQWzYYrmhxeg/PetE5l7hhTunf1ezda7JpaKfa/jwRJhnGdbm 8rBgaeDEIdb3y4ooV8tWXwK69BV3fPI1OL94OfIPkFOJD/ETfTt/6yT4Ii02UjUt QvBklWzjP+c+Ge2w/yVMqG2tPrP3QDWuIScabRRyGiLeME0PETkPiXqRalK4B/+B 1qhs39PxGIhgkD1QJPA6DD72rxQZF2TFDJ3PQcFfM6bn49NfglKTSD+4/mheki28 oOwzqA4gCkOUfXlTOvNQa0cVHW9iwDTyMa0+BpbWuvzGp1aqqnIMIK+05/KnEg79 tCdLRHokyGLis5gzp3136Dh2tQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPDYG2Hy kLgZzlREOtFT1vRqhBskMB8GA1UdIwQYMBaAFH4xOrf/JueD4DwHhRYSdRiBrkkY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1OEUzRi9DMjQzMjJCQTU0 NDYxMUVBOEMwNTY1MURDNEY5QUUwMi9makU2dF84bTU0UGdQQWVGRmhKMUdJR3VT UmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ZqRTZ0XzhtNTRQZ1BBZUZGaEoxR0lHdVNSZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 OEUzRi9DMjQzMjJCQTU0NDYxMUVBOEMwNTY1MURDNEY5QUUwMi9makU2dF84bTU0 UGdQQWVGRmhKMUdJR3VTUmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBF+/Cj0hWVXbl4wz2iB4rnlPL2NEWcakmOS9lSzW7OHq9qsRzk4m2N a3tfTJG5QLeZrIVuYPV3CSc8Tgb3e37VnoEkh0+s9YwJROuwmsSSC/vcG7M9L9bo SDZXajRr86z3gweeUtR2KCj8rwgqfocM6QNJ+2GuanU3OzVNRaMW/EsD9SfVM2Pb tDfA9WOAzD59BC0DC6M+P+edc4PYqi/irrGgmm2knuMcqNEWFwtfApUx3tzy9ZVs wm064U9BGFJRKT6+oRW4Pf5cVDSZr5JqCad2KLV2qkFp4Pf2/oEMEZcyh7WpdujW hzu5+JPzUKSD0tKz6vBJl/R92yPeaMoP -----END CERTIFICATE-----Generated at Tue Nov 4 19:12:42 2025 by rpki-client