$ rpki-client -vvf rpki.apnic.net/member_repository/A916223F/4EBF27B6F95C11E9B6272285C4F9AE02/Fu3IlWvEE8nFAhkosDvIUPx-ckc.mft File: Fu3IlWvEE8nFAhkosDvIUPx-ckc.mft (raw, json) Hash identifier: KmTXVeoVyVZYp0Il9TlYz7DMgkWX7AhXZKkajdSvAZE= Subject key identifier: 63:88:7F:9B:E3:79:17:0F:85:27:9A:61:20:26:67:14:31:F5:B0:23 Authority key identifier: 16:ED:C8:95:6B:C4:13:C9:C5:02:19:28:B0:3B:C8:50:FC:7E:72:47 Certificate issuer: /CN=A916223F/serialNumber=16EDC8956BC413C9C5021928B03BC850FC7E7247 Certificate serial: 0CD5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fu3IlWvEE8nFAhkosDvIUPx-ckc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916223F/4EBF27B6F95C11E9B6272285C4F9AE02/Fu3IlWvEE8nFAhkosDvIUPx-ckc.mft Manifest number: 0CCE Signing time: Tue 04 Nov 2025 18:15:09 +0000 Manifest this update: Tue 04 Nov 2025 18:15:08 +0000 Manifest next update: Tue 11 Nov 2025 18:15:08 +0000 Files and hashes: 1: Fu3IlWvEE8nFAhkosDvIUPx-ckc.crl (hash: I9j7WEarSgd1ekXQkul4Z7rQKIAqe0EhoKXtztT044M=) 2: 80392340F95D11E9ABF14387C4F9AE02.roa (hash: HyFNgnjZWsveyr1t+EGS0rR5D+l88ZMNMytH+WMJ+18=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916223F/4EBF27B6F95C11E9B6272285C4F9AE02/Fu3IlWvEE8nFAhkosDvIUPx-ckc.crl rsync://rpki.apnic.net/member_repository/A916223F/4EBF27B6F95C11E9B6272285C4F9AE02/Fu3IlWvEE8nFAhkosDvIUPx-ckc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fu3IlWvEE8nFAhkosDvIUPx-ckc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 18:15:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3285 (0xcd5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916223F, serialNumber=16EDC8956BC413C9C5021928B03BC850FC7E7247 Validity Not Before: Nov 4 18:15:08 2025 GMT Not After : Nov 11 18:15:08 2025 GMT Subject: CN=690a42ad-e049 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:e8:eb:f4:b6:d0:53:22:34:d3:4c:bb:37:f6: c1:7b:17:ce:57:c8:28:a0:a3:44:a3:35:f1:80:6f: 11:81:02:c0:0d:cf:51:0b:f2:23:40:2a:d9:c6:73: 30:2b:b6:b1:ff:83:05:d2:3b:8f:18:b5:54:a2:94: 5a:5b:a9:d9:51:72:75:8e:7a:d7:4b:1d:fa:21:02: 94:35:52:bf:23:48:ca:42:25:17:67:ee:87:9f:ab: c9:df:0a:e4:b1:e8:0f:92:4c:29:1e:fe:55:e4:d9: 23:e1:e1:d3:92:6a:18:31:66:0c:69:ee:35:33:0c: a1:9f:ae:a3:0c:90:77:dd:25:e1:e4:6a:f0:b5:86: 34:b1:03:0a:24:5a:87:fd:02:bd:39:6b:6c:cd:fe: f2:09:85:a0:58:54:f4:63:36:fd:df:07:5a:9d:8f: e5:51:8e:4f:74:37:6d:33:9a:18:81:43:05:0f:ba: 2c:5b:68:56:ce:9b:fb:fb:52:cb:1b:77:30:c6:57: b3:13:3a:4b:a8:b1:1e:5d:c7:90:52:a6:a8:08:7e: 7c:58:14:c9:43:8b:99:e8:00:99:cb:11:37:e0:48: a3:fb:46:85:6e:4f:c0:fd:49:52:33:6a:5a:e7:4c: 18:d9:d9:ef:05:11:86:5b:6d:8e:0a:8a:21:d8:9e: e7:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:88:7F:9B:E3:79:17:0F:85:27:9A:61:20:26:67:14:31:F5:B0:23 X509v3 Authority Key Identifier: keyid:16:ED:C8:95:6B:C4:13:C9:C5:02:19:28:B0:3B:C8:50:FC:7E:72:47 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916223F/4EBF27B6F95C11E9B6272285C4F9AE02/Fu3IlWvEE8nFAhkosDvIUPx-ckc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fu3IlWvEE8nFAhkosDvIUPx-ckc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916223F/4EBF27B6F95C11E9B6272285C4F9AE02/Fu3IlWvEE8nFAhkosDvIUPx-ckc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1d:4a:e8:e1:33:96:5e:1a:13:4f:3e:4f:0e:a6:9a:76:00:de: e0:b5:ee:b9:04:76:61:d5:ed:b5:67:49:10:f6:31:c9:e8:c3: 46:81:4c:f5:8a:3d:4d:b7:40:31:83:4d:dc:d7:57:7e:c6:34: 0f:9c:3e:61:61:9a:fc:01:f0:40:de:51:51:27:30:9f:82:a6: ee:1f:85:3e:9c:0f:d6:88:21:4b:95:c5:45:01:7e:2a:f6:00: f7:62:3a:96:d1:31:d5:ec:58:1e:9b:2a:22:34:07:ac:2e:d2: cf:fd:cc:d6:38:bb:22:46:20:68:39:e5:db:d6:e6:f4:33:6c: 7b:83:39:c5:98:33:98:47:b4:7b:48:13:06:10:d9:e7:c5:f3: 2e:05:17:35:03:c0:4e:56:f4:3f:01:13:e2:28:08:9e:ab:fb: b3:db:b0:ec:68:6e:d6:5a:59:c6:2a:c2:11:98:c1:a1:6f:a0: 30:65:9e:9c:c9:77:57:8b:f8:63:0c:f2:bb:b7:b3:41:8f:b3: 99:7a:28:86:f9:84:28:9c:30:4f:e8:bd:b9:37:cd:24:a6:46: 5d:b8:42:1d:5d:b1:a1:91:ed:60:94:c1:14:58:40:4d:6d:d9: 27:01:a8:76:71:b9:66:f6:97:4a:d3:68:64:08:c6:2b:33:2d: 1f:28:f8:17 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDNUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjIyM0YxMTAvBgNVBAUTKDE2RURDODk1NkJDNDEzQzlDNTAyMTkyOEIwM0JDODUw RkM3RTcyNDcwHhcNMjUxMTA0MTgxNTA4WhcNMjUxMTExMTgxNTA4WjAYMRYwFAYD VQQDEw02OTBhNDJhZC1lMDQ5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwujr9LbQUyI000y7N/bBexfOV8gooKNEozXxgG8RgQLADc9RC/IjQCrZxnMw K7ax/4MF0juPGLVUopRaW6nZUXJ1jnrXSx36IQKUNVK/I0jKQiUXZ+6Hn6vJ3wrk segPkkwpHv5V5Nkj4eHTkmoYMWYMae41Mwyhn66jDJB33SXh5GrwtYY0sQMKJFqH /QK9OWtszf7yCYWgWFT0Yzb93wdanY/lUY5PdDdtM5oYgUMFD7osW2hWzpv7+1LL G3cwxlezEzpLqLEeXceQUqaoCH58WBTJQ4uZ6ACZyxE34Eij+0aFbk/A/UlSM2pa 50wY2dnvBRGGW22OCooh2J7niQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGOIf5vj eRcPhSeaYSAmZxQx9bAjMB8GA1UdIwQYMBaAFBbtyJVrxBPJxQIZKLA7yFD8fnJH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MjIzRi80RUJGMjdCNkY5 NUMxMUU5QjYyNzIyODVDNEY5QUUwMi9GdTNJbFd2RUU4bkZBaGtvc0R2SVVQeC1j a2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0Z1M0lsV3ZFRThuRkFoa29zRHZJVVB4LWNrYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 MjIzRi80RUJGMjdCNkY5NUMxMUU5QjYyNzIyODVDNEY5QUUwMi9GdTNJbFd2RUU4 bkZBaGtvc0R2SVVQeC1ja2MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAdSujhM5ZeGhNPPk8Oppp2AN7gte65BHZh1e21Z0kQ9jHJ6MNGgUz1 ij1Nt0Axg03c11d+xjQPnD5hYZr8AfBA3lFRJzCfgqbuH4U+nA/WiCFLlcVFAX4q 9gD3YjqW0THV7FgemyoiNAesLtLP/czWOLsiRiBoOeXb1ub0M2x7gznFmDOYR7R7 SBMGENnnxfMuBRc1A8BOVvQ/ARPiKAieq/uz27DsaG7WWlnGKsIRmMGhb6AwZZ6c yXdXi/hjDPK7t7NBj7OZeiiG+YQonDBP6L25N80kpkZduEIdXbGhke1glMEUWEBN bdknAah2cblm9pdK02hkCMYrMy0fKPgX -----END CERTIFICATE-----Generated at Wed Nov 5 07:52:53 2025 by rpki-client