$ rpki-client -vvf rpki.apnic.net/member_repository/A915D8E2/C092B1061DEF11EB835E157AC4F9AE02/fQYsctxe8S8FxBZ5_G_iVStOoCA.mft File: fQYsctxe8S8FxBZ5_G_iVStOoCA.mft (raw, json) Hash identifier: drss6N8Qii+IjcECPc/G5uMvNO+/CIAE/gZhxuE4lY8= Subject key identifier: 38:E0:38:20:64:91:69:39:F1:CE:56:E6:E0:F5:F8:BA:C4:FE:7B:2F Authority key identifier: 7D:06:2C:72:DC:5E:F1:2F:05:C4:16:79:FC:6F:E2:55:2B:4E:A0:20 Certificate issuer: /CN=A915D8E2/serialNumber=7D062C72DC5EF12F05C41679FC6FE2552B4EA020 Certificate serial: 016D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fQYsctxe8S8FxBZ5_G_iVStOoCA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915D8E2/C092B1061DEF11EB835E157AC4F9AE02/fQYsctxe8S8FxBZ5_G_iVStOoCA.mft Manifest number: 091A Signing time: Sun 02 Nov 2025 21:21:31 +0000 Manifest this update: Sun 02 Nov 2025 21:21:30 +0000 Manifest next update: Sun 09 Nov 2025 21:21:30 +0000 Files and hashes: 1: fQYsctxe8S8FxBZ5_G_iVStOoCA.crl (hash: S41MVzR46a+JsaBaRzSwigADuUF4/QRtgX0gkyFkXto=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915D8E2/C092B1061DEF11EB835E157AC4F9AE02/fQYsctxe8S8FxBZ5_G_iVStOoCA.crl rsync://rpki.apnic.net/member_repository/A915D8E2/C092B1061DEF11EB835E157AC4F9AE02/fQYsctxe8S8FxBZ5_G_iVStOoCA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fQYsctxe8S8FxBZ5_G_iVStOoCA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 21:21:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 365 (0x16d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915D8E2, serialNumber=7D062C72DC5EF12F05C41679FC6FE2552B4EA020 Validity Not Before: Nov 2 21:21:30 2025 GMT Not After : Nov 9 21:21:30 2025 GMT Subject: CN=6907cb5b-874d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:5f:4f:fa:48:5d:e0:ea:90:65:55:7a:90:a9: 11:17:d6:72:fd:82:1b:85:09:1d:40:c7:62:fa:5c: 40:ce:6c:bc:7b:b3:8b:f4:9b:b4:3d:fa:c1:73:44: d5:71:c5:71:3e:1c:92:9a:b4:7a:b5:80:73:b2:df: 76:e0:de:f0:01:44:37:68:20:e5:a1:77:45:5e:45: 05:37:4c:7c:a1:2a:ee:05:80:ab:f1:c4:22:dc:6c: bc:d3:05:0b:91:d8:35:ef:17:d6:9f:12:ea:47:d5: 67:05:f4:ff:dd:13:47:e3:b7:c3:58:af:08:8a:68: eb:15:2e:86:b2:6f:07:1b:77:d0:a8:2a:f4:96:a6: ce:79:7c:ce:60:80:94:5d:10:17:d8:ff:16:de:21: c0:cc:f7:59:f3:b2:4c:c3:bf:36:66:6d:e5:fd:5d: b9:65:88:79:d3:3b:84:68:9b:65:43:a7:83:28:4d: b6:5e:73:c7:5e:f3:ef:40:32:44:57:2d:4d:47:63: 38:cc:ab:55:6a:89:42:cb:38:f5:72:d1:ff:5e:b3: 42:40:9e:1e:a3:81:2d:63:10:d3:d0:d9:12:0d:13: 84:5e:e9:4c:f1:4c:75:0d:31:18:f5:7b:e4:be:b8: a7:8f:ef:3c:2f:b9:a4:7c:eb:c9:b3:99:bc:46:b3: f6:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:E0:38:20:64:91:69:39:F1:CE:56:E6:E0:F5:F8:BA:C4:FE:7B:2F X509v3 Authority Key Identifier: keyid:7D:06:2C:72:DC:5E:F1:2F:05:C4:16:79:FC:6F:E2:55:2B:4E:A0:20 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915D8E2/C092B1061DEF11EB835E157AC4F9AE02/fQYsctxe8S8FxBZ5_G_iVStOoCA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fQYsctxe8S8FxBZ5_G_iVStOoCA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915D8E2/C092B1061DEF11EB835E157AC4F9AE02/fQYsctxe8S8FxBZ5_G_iVStOoCA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 62:70:a2:da:1b:8b:7a:e5:f1:c0:c0:02:19:6e:dc:a3:17:ef: 68:53:e5:03:d7:46:13:9e:3a:2b:87:1a:ad:86:38:28:99:38: 4a:ab:8e:49:26:0c:e9:05:8a:9c:80:30:a2:62:f0:6a:37:25: 76:eb:c4:43:6c:32:34:94:1c:67:1e:cb:ac:ee:0f:fe:e7:2f: 85:db:57:ab:f4:76:01:38:54:1d:52:47:61:36:75:6a:56:98: f4:7a:91:30:b6:30:6f:56:0e:1d:40:6b:b2:6d:45:8f:f5:da: ed:bf:6f:72:58:b0:03:4b:83:fb:d5:52:7d:f4:fd:70:e7:04: 2e:9a:56:af:39:63:0f:42:70:3b:a6:2a:79:7f:d1:59:1c:50: 51:af:13:34:31:aa:5a:bf:93:c8:d4:f0:5a:f0:b3:6b:d7:47: e2:ee:21:c5:57:4a:a2:66:2c:70:aa:0d:fb:f8:da:11:84:16: e0:3d:48:dc:d7:35:df:da:e5:d1:d6:09:96:17:72:3d:bf:c8: c5:39:03:f7:b4:aa:42:71:64:ce:e1:07:96:af:e5:7d:46:f4: 21:9c:30:0a:22:50:61:08:6b:7a:90:b2:8d:6c:bc:a6:92:80: d1:e1:e9:03:e2:f9:6a:47:3f:d3:f0:a7:8a:2b:07:3f:d2:3e: 99:01:dc:26 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAW0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUQ4RTIxMTAvBgNVBAUTKDdEMDYyQzcyREM1RUYxMkYwNUM0MTY3OUZDNkZFMjU1 MkI0RUEwMjAwHhcNMjUxMTAyMjEyMTMwWhcNMjUxMTA5MjEyMTMwWjAYMRYwFAYD VQQDEw02OTA3Y2I1Yi04NzRkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxl9P+khd4OqQZVV6kKkRF9Zy/YIbhQkdQMdi+lxAzmy8e7OL9Ju0PfrBc0TV ccVxPhySmrR6tYBzst924N7wAUQ3aCDloXdFXkUFN0x8oSruBYCr8cQi3Gy80wUL kdg17xfWnxLqR9VnBfT/3RNH47fDWK8IimjrFS6Gsm8HG3fQqCr0lqbOeXzOYICU XRAX2P8W3iHAzPdZ87JMw782Zm3l/V25ZYh50zuEaJtlQ6eDKE22XnPHXvPvQDJE Vy1NR2M4zKtVaolCyzj1ctH/XrNCQJ4eo4EtYxDT0NkSDROEXulM8Ux1DTEY9Xvk vrinj+88L7mkfOvJs5m8RrP2rwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDjgOCBk kWk58c5W5uD1+LrE/nsvMB8GA1UdIwQYMBaAFH0GLHLcXvEvBcQWefxv4lUrTqAg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1RDhFMi9DMDkyQjEwNjFE RUYxMUVCODM1RTE1N0FDNEY5QUUwMi9mUVlzY3R4ZThTOEZ4Qlo1X0dfaVZTdE9v Q0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ZRWXNjdHhlOFM4RnhCWjVfR19pVlN0T29DQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 RDhFMi9DMDkyQjEwNjFERUYxMUVCODM1RTE1N0FDNEY5QUUwMi9mUVlzY3R4ZThT OEZ4Qlo1X0dfaVZTdE9vQ0EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBicKLaG4t65fHAwAIZbtyjF+9oU+UD10YTnjorhxqthjgomThKq45J JgzpBYqcgDCiYvBqNyV268RDbDI0lBxnHsus7g/+5y+F21er9HYBOFQdUkdhNnVq Vpj0epEwtjBvVg4dQGuybUWP9drtv29yWLADS4P71VJ99P1w5wQumlavOWMPQnA7 pip5f9FZHFBRrxM0Mapav5PI1PBa8LNr10fi7iHFV0qiZixwqg37+NoRhBbgPUjc 1zXf2uXR1gmWF3I9v8jFOQP3tKpCcWTO4QeWr+V9RvQhnDAKIlBhCGt6kLKNbLym koDR4ekD4vlqRz/T8KeKKwc/0j6ZAdwm -----END CERTIFICATE-----Generated at Tue Nov 4 08:04:56 2025 by rpki-client