$ rpki-client -vvf rpki.apnic.net/member_repository/A915B598/812CE9D4047111EAB6AD8775C4F9AE02/fcRirz5ieKghiQWhs-fbN_LveoI.mft File: fcRirz5ieKghiQWhs-fbN_LveoI.mft (raw, json) Hash identifier: SALAETkJZAtlwJqlXG/rJgTjCxLax7ywbMj7mmYmlZg= Subject key identifier: 2D:CA:77:9B:28:61:62:2D:3D:9C:7F:AA:70:3C:98:49:0B:71:D7:87 Authority key identifier: 7D:C4:62:AF:3E:62:78:A8:21:89:05:A1:B3:E7:DB:37:F2:EF:7A:82 Certificate issuer: /CN=A915B598/serialNumber=7DC462AF3E6278A8218905A1B3E7DB37F2EF7A82 Certificate serial: 0CA1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fcRirz5ieKghiQWhs-fbN_LveoI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915B598/812CE9D4047111EAB6AD8775C4F9AE02/fcRirz5ieKghiQWhs-fbN_LveoI.mft Manifest number: 0C99 Signing time: Tue 04 Nov 2025 18:23:01 +0000 Manifest this update: Tue 04 Nov 2025 18:23:01 +0000 Manifest next update: Tue 11 Nov 2025 18:23:01 +0000 Files and hashes: 1: fcRirz5ieKghiQWhs-fbN_LveoI.crl (hash: TCa7OCN91bYYlm6TuITdQpeo8phrztTlkn4ZPHOXVCs=) 2: ED6D9A0C047211EAA9BAFB77C4F9AE02.roa (hash: QKvT/NXLjM1zgrExrepY0NIOpuLuOZvI/cmhC3FJr94=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915B598/812CE9D4047111EAB6AD8775C4F9AE02/fcRirz5ieKghiQWhs-fbN_LveoI.crl rsync://rpki.apnic.net/member_repository/A915B598/812CE9D4047111EAB6AD8775C4F9AE02/fcRirz5ieKghiQWhs-fbN_LveoI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fcRirz5ieKghiQWhs-fbN_LveoI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 18:23:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3233 (0xca1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915B598, serialNumber=7DC462AF3E6278A8218905A1B3E7DB37F2EF7A82 Validity Not Before: Nov 4 18:23:01 2025 GMT Not After : Nov 11 18:23:01 2025 GMT Subject: CN=690a4485-0609 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:0f:8a:b7:1b:35:eb:33:ce:00:1e:6c:e6:da: 6d:04:11:e1:47:9e:e2:e4:3f:66:3e:51:2f:23:35: e4:3e:63:29:0c:fc:ad:8d:1a:16:bc:87:d7:72:6b: dd:d8:9f:21:1c:db:0e:37:23:f2:6d:f1:6e:d0:e7: 1b:a3:8d:0d:ba:49:27:75:6a:5d:fa:f2:e4:a5:e8: a4:62:22:5d:51:59:93:bd:4a:4e:ce:60:88:35:d7: 43:3c:8a:9b:14:01:04:26:bf:0e:13:13:c8:9b:7c: 33:32:45:be:0a:f3:0e:24:91:fd:ac:c1:b5:7f:17: 8c:73:18:d7:b4:59:d0:35:22:24:97:5a:d6:82:bb: 96:e6:80:2e:8e:19:c5:bd:cb:e7:3d:23:c9:61:11: 23:c1:32:6d:22:03:d6:40:ca:40:3a:e8:07:0b:73: 0c:08:70:82:d7:6b:8a:40:81:4a:9e:56:92:a5:79: c5:68:1c:4c:0b:3b:54:7a:57:e3:b7:20:25:1e:06: 9f:25:bd:fa:c9:84:d0:c2:88:3b:91:0d:a4:4e:03: 19:7e:7a:cc:a9:00:fe:6e:49:1f:ae:b0:9b:f7:28: 1f:2a:41:18:89:d6:d7:85:0e:08:50:f2:4b:72:a3: 44:e7:cd:c0:f1:05:7c:e4:31:3f:81:29:16:b2:2f: 07:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:CA:77:9B:28:61:62:2D:3D:9C:7F:AA:70:3C:98:49:0B:71:D7:87 X509v3 Authority Key Identifier: keyid:7D:C4:62:AF:3E:62:78:A8:21:89:05:A1:B3:E7:DB:37:F2:EF:7A:82 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915B598/812CE9D4047111EAB6AD8775C4F9AE02/fcRirz5ieKghiQWhs-fbN_LveoI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fcRirz5ieKghiQWhs-fbN_LveoI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915B598/812CE9D4047111EAB6AD8775C4F9AE02/fcRirz5ieKghiQWhs-fbN_LveoI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9e:8e:4a:47:ec:58:40:6b:23:20:cf:b3:2a:7f:3d:4d:d3:bb: a8:ce:c9:b9:2c:c2:15:b8:eb:33:f4:07:8c:16:da:88:fa:fc: 7b:0e:cc:97:f7:ef:b4:5e:27:95:b2:89:aa:d5:71:12:f2:83: 53:8d:8f:be:3f:70:a5:7f:9c:d8:26:f4:17:05:45:d9:3b:55: f8:0f:48:7e:c0:a6:89:45:e4:fd:08:2b:eb:77:44:7e:b0:d1: 85:df:05:01:3f:e3:5b:83:72:d6:06:6b:b1:16:73:5c:6e:dd: f0:0f:bf:61:f6:4a:32:56:da:07:68:ba:e8:18:69:75:6a:7e: c6:d9:6f:42:73:db:95:2d:a6:5b:25:42:d0:ed:8b:97:46:bd: 56:4e:c0:e7:0b:b0:22:1b:cb:c0:82:93:83:56:40:f9:45:87: 0c:b4:5b:0b:1c:d8:3a:a8:7a:ea:84:28:90:11:1c:aa:45:69: 7b:c2:09:10:db:e8:74:5e:ea:19:4e:96:de:e1:39:ef:8e:8d: c8:01:1a:cc:ec:8c:15:99:76:5d:ed:cf:ea:72:a9:f7:bf:9c: 92:89:11:d3:a6:55:11:5a:29:8a:26:95:e9:df:c4:26:cd:a8: 02:eb:58:82:4b:61:0c:44:9f:d0:0f:04:b9:6b:14:6d:f0:9a: 00:f4:23:43 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDKEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUI1OTgxMTAvBgNVBAUTKDdEQzQ2MkFGM0U2Mjc4QTgyMTg5MDVBMUIzRTdEQjM3 RjJFRjdBODIwHhcNMjUxMTA0MTgyMzAxWhcNMjUxMTExMTgyMzAxWjAYMRYwFAYD VQQDEw02OTBhNDQ4NS0wNjA5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAug+Ktxs16zPOAB5s5tptBBHhR57i5D9mPlEvIzXkPmMpDPytjRoWvIfXcmvd 2J8hHNsONyPybfFu0Ocbo40NukkndWpd+vLkpeikYiJdUVmTvUpOzmCINddDPIqb FAEEJr8OExPIm3wzMkW+CvMOJJH9rMG1fxeMcxjXtFnQNSIkl1rWgruW5oAujhnF vcvnPSPJYREjwTJtIgPWQMpAOugHC3MMCHCC12uKQIFKnlaSpXnFaBxMCztUelfj tyAlHgafJb36yYTQwog7kQ2kTgMZfnrMqQD+bkkfrrCb9ygfKkEYidbXhQ4IUPJL cqNE583A8QV85DE/gSkWsi8HsQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFC3Kd5so YWItPZx/qnA8mEkLcdeHMB8GA1UdIwQYMBaAFH3EYq8+YnioIYkFobPn2zfy73qC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QjU5OC84MTJDRTlENDA0 NzExMUVBQjZBRDg3NzVDNEY5QUUwMi9mY1Jpcno1aWVLZ2hpUVdocy1mYk5fTHZl b0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ZjUmlyejVpZUtnaGlRV2hzLWZiTl9MdmVvSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 QjU5OC84MTJDRTlENDA0NzExMUVBQjZBRDg3NzVDNEY5QUUwMi9mY1Jpcno1aWVL Z2hpUVdocy1mYk5fTHZlb0kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCejkpH7FhAayMgz7Mqfz1N07uozsm5LMIVuOsz9AeMFtqI+vx7DsyX 9++0XieVsomq1XES8oNTjY++P3Clf5zYJvQXBUXZO1X4D0h+wKaJReT9CCvrd0R+ sNGF3wUBP+Nbg3LWBmuxFnNcbt3wD79h9koyVtoHaLroGGl1an7G2W9Cc9uVLaZb JULQ7YuXRr1WTsDnC7AiG8vAgpODVkD5RYcMtFsLHNg6qHrqhCiQERyqRWl7wgkQ 2+h0XuoZTpbe4Tnvjo3IARrM7IwVmXZd7c/qcqn3v5ySiRHTplURWimKJpXp38Qm zagC61iCS2EMRJ/QDwS5axRt8JoA9CND -----END CERTIFICATE-----Generated at Wed Nov 5 20:01:51 2025 by rpki-client