$ rpki-client -vvf rpki.apnic.net/member_repository/A91645D3/7620BC0C0C2011EB8AE6394DC4F9AE02/fcUQye6vE3-r4XHlViRtskYeJxU.mft File: fcUQye6vE3-r4XHlViRtskYeJxU.mft (raw, json) Hash identifier: 3Pwid0uDG37WVuf1e/ysaYIIRWSBNGXx5xBEADHjKHI= Subject key identifier: 2E:32:04:C6:0D:DE:EE:0A:58:8C:AB:E5:D2:3B:24:9D:62:97:60:D6 Authority key identifier: 7D:C5:10:C9:EE:AF:13:7F:AB:E1:71:E5:56:24:6D:B2:46:1E:27:15 Certificate issuer: /CN=A91645D3/serialNumber=7DC510C9EEAF137FABE171E556246DB2461E2715 Certificate serial: 07E8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fcUQye6vE3-r4XHlViRtskYeJxU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91645D3/7620BC0C0C2011EB8AE6394DC4F9AE02/fcUQye6vE3-r4XHlViRtskYeJxU.mft Manifest number: 07E1 Signing time: Tue 04 Nov 2025 21:13:36 +0000 Manifest this update: Tue 04 Nov 2025 21:13:35 +0000 Manifest next update: Tue 11 Nov 2025 21:13:35 +0000 Files and hashes: 1: fcUQye6vE3-r4XHlViRtskYeJxU.crl (hash: lq8U1xHFBLaeROyXuOaHUf/2i1tzH66X+zcnw4R9JIo=) 2: 58DAB5900FF311EBB0C3265EC4F9AE02.roa (hash: /rykGvLbUlrN0XXQSSOg6Z/Y2O6GIy4F1RxGecU5aLc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91645D3/7620BC0C0C2011EB8AE6394DC4F9AE02/fcUQye6vE3-r4XHlViRtskYeJxU.crl rsync://rpki.apnic.net/member_repository/A91645D3/7620BC0C0C2011EB8AE6394DC4F9AE02/fcUQye6vE3-r4XHlViRtskYeJxU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fcUQye6vE3-r4XHlViRtskYeJxU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 21:13:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2024 (0x7e8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91645D3, serialNumber=7DC510C9EEAF137FABE171E556246DB2461E2715 Validity Not Before: Nov 4 21:13:35 2025 GMT Not After : Nov 11 21:13:35 2025 GMT Subject: CN=690a6c7f-8908 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:88:d1:48:ae:20:30:1d:d0:0a:e0:68:63:9e: 4d:d1:2e:53:c0:29:7b:b1:cd:c7:ae:b2:fa:f6:31: 44:2d:f8:53:d5:d1:81:1d:90:c4:3f:5e:90:5f:24: 54:f6:08:80:5a:80:ae:b4:3e:4c:e6:11:7c:b3:7d: 95:b6:e3:f9:2c:1c:8f:c3:3b:bb:68:e9:b2:10:34: 33:e2:49:54:57:8f:4d:25:6f:94:bc:9b:a4:d6:6a: 80:48:19:c4:f0:94:19:39:8d:80:51:27:29:08:a7: 25:e8:fa:5d:0a:c2:dc:6c:8d:46:c6:b0:e5:6d:4b: a0:18:fa:cf:58:04:41:82:bf:26:f3:be:12:af:8b: 70:a5:5b:b5:ff:da:40:69:b8:7d:76:50:36:be:92: 64:22:b9:6e:e5:43:dc:27:9d:de:7b:c8:cf:07:47: 11:a0:78:00:7e:67:e7:db:40:41:33:2a:fc:78:29: b4:8b:eb:09:89:ee:db:e9:83:32:00:d4:73:43:69: 82:8d:ca:03:4e:c6:e4:7b:05:90:42:53:61:eb:15: 30:49:e6:75:57:cd:3e:15:f9:91:24:95:b9:30:c7: 0b:d4:8d:64:53:8b:ae:6d:f5:49:8d:ca:79:d5:ab: a2:57:68:54:8e:e1:3c:2b:2a:1d:0a:3d:82:e6:82: f1:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:32:04:C6:0D:DE:EE:0A:58:8C:AB:E5:D2:3B:24:9D:62:97:60:D6 X509v3 Authority Key Identifier: keyid:7D:C5:10:C9:EE:AF:13:7F:AB:E1:71:E5:56:24:6D:B2:46:1E:27:15 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91645D3/7620BC0C0C2011EB8AE6394DC4F9AE02/fcUQye6vE3-r4XHlViRtskYeJxU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fcUQye6vE3-r4XHlViRtskYeJxU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91645D3/7620BC0C0C2011EB8AE6394DC4F9AE02/fcUQye6vE3-r4XHlViRtskYeJxU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 64:1d:22:e4:ec:34:15:88:08:e7:ad:65:02:fa:38:ae:cf:1a: 44:29:af:cb:b7:17:5b:9f:98:02:77:5f:85:a9:f3:5a:c4:c7: 2e:1f:84:7a:74:e8:59:39:da:2a:49:f6:d4:13:a0:cf:24:3e: 4f:58:7b:1f:7a:4f:37:fe:95:f0:82:4a:03:91:8e:6a:c6:f0: ff:fb:4b:d8:37:ef:d8:6a:c5:e5:a5:52:ab:3b:7a:a3:0d:e4: 99:d3:e0:44:e1:8d:3b:39:55:d5:ab:d8:69:0c:1b:9e:d7:0a: 32:69:b0:6c:40:a1:12:97:b5:9b:94:2e:bc:9c:05:a8:20:8b: a9:14:88:cf:cf:63:2b:67:e2:14:c8:cb:d7:ca:f8:41:84:c3: b0:dc:58:7b:5f:a0:4c:a6:d1:f6:3c:22:db:a0:36:b1:a5:cc: b5:85:f0:1c:a8:98:16:eb:f1:26:d0:d7:ae:68:62:ff:54:72: c6:fb:d1:77:a4:0e:4d:50:5a:f8:3a:94:f0:90:f1:0a:3e:6e: eb:21:b6:92:57:9a:76:9c:84:ce:bd:6f:92:b0:c3:ab:6e:33: e3:a4:30:03:05:e1:b2:d6:8f:39:58:ba:68:ac:72:9e:26:e3: da:2f:e1:f3:7a:3a:52:c4:5a:05:fc:63:87:ae:2d:a9:6e:25: 43:f1:c4:4f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB+gwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjQ1RDMxMTAvBgNVBAUTKDdEQzUxMEM5RUVBRjEzN0ZBQkUxNzFFNTU2MjQ2REIy NDYxRTI3MTUwHhcNMjUxMTA0MjExMzM1WhcNMjUxMTExMjExMzM1WjAYMRYwFAYD VQQDEw02OTBhNmM3Zi04OTA4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3IjRSK4gMB3QCuBoY55N0S5TwCl7sc3HrrL69jFELfhT1dGBHZDEP16QXyRU 9giAWoCutD5M5hF8s32VtuP5LByPwzu7aOmyEDQz4klUV49NJW+UvJuk1mqASBnE 8JQZOY2AUScpCKcl6PpdCsLcbI1GxrDlbUugGPrPWARBgr8m874Sr4twpVu1/9pA abh9dlA2vpJkIrlu5UPcJ53ee8jPB0cRoHgAfmfn20BBMyr8eCm0i+sJie7b6YMy ANRzQ2mCjcoDTsbkewWQQlNh6xUwSeZ1V80+FfmRJJW5MMcL1I1kU4uubfVJjcp5 1auiV2hUjuE8KyodCj2C5oLxTwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFC4yBMYN 3u4KWIyr5dI7JJ1il2DWMB8GA1UdIwQYMBaAFH3FEMnurxN/q+Fx5VYkbbJGHicV MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NDVEMy83NjIwQkMwQzBD MjAxMUVCOEFFNjM5NERDNEY5QUUwMi9mY1VReWU2dkUzLXI0WEhsVmlSdHNrWWVK eFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ZjVVF5ZTZ2RTMtcjRYSGxWaVJ0c2tZZUp4VS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 NDVEMy83NjIwQkMwQzBDMjAxMUVCOEFFNjM5NERDNEY5QUUwMi9mY1VReWU2dkUz LXI0WEhsVmlSdHNrWWVKeFUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBkHSLk7DQViAjnrWUC+jiuzxpEKa/Ltxdbn5gCd1+FqfNaxMcuH4R6 dOhZOdoqSfbUE6DPJD5PWHsfek83/pXwgkoDkY5qxvD/+0vYN+/YasXlpVKrO3qj DeSZ0+BE4Y07OVXVq9hpDBue1woyabBsQKESl7WblC68nAWoIIupFIjPz2MrZ+IU yMvXyvhBhMOw3Fh7X6BMptH2PCLboDaxpcy1hfAcqJgW6/Em0NeuaGL/VHLG+9F3 pA5NUFr4OpTwkPEKPm7rIbaSV5p2nITOvW+SsMOrbjPjpDADBeGy1o85WLporHKe JuPaL+HzejpSxFoF/GOHri2pbiVD8cRP -----END CERTIFICATE-----Generated at Wed Nov 5 05:47:30 2025 by rpki-client