$ rpki-client -vvf rpki.apnic.net/member_repository/A916601E/FF4875BEF56011EF9C82B71AC4F9AE02/fb-DrlKCyE6w7_VdXBxngBy2RcQ.mft File: fb-DrlKCyE6w7_VdXBxngBy2RcQ.mft (raw, json) Hash identifier: ORLl2rapCAfM5AC0hhkBNi2+FSSoEfmG3jWG5RiaM6k= Subject key identifier: 1B:95:C4:B6:D9:D4:2E:F2:96:76:2C:98:81:84:17:8E:A4:BC:FB:57 Authority key identifier: 7D:BF:83:AE:52:82:C8:4E:B0:EF:F5:5D:5C:1C:67:80:1C:B6:45:C4 Certificate issuer: /CN=A916601E/serialNumber=7DBF83AE5282C84EB0EFF55D5C1C67801CB645C4 Certificate serial: 83 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fb-DrlKCyE6w7_VdXBxngBy2RcQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916601E/FF4875BEF56011EF9C82B71AC4F9AE02/fb-DrlKCyE6w7_VdXBxngBy2RcQ.mft Manifest number: 81 Signing time: Mon 03 Nov 2025 06:41:51 +0000 Manifest this update: Mon 03 Nov 2025 06:41:51 +0000 Manifest next update: Mon 10 Nov 2025 06:41:51 +0000 Files and hashes: 1: fb-DrlKCyE6w7_VdXBxngBy2RcQ.crl (hash: kn2lSfSRJGR4lli2L+NO8kEb7ekLq7SCbBt5+pSr+JY=) 2: 46497846F56111EFA41A451BC4F9AE02.roa (hash: pt8m72qrunjWvL5P2n1H2INSnSMhY3pqoGlkmhbwXKc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916601E/FF4875BEF56011EF9C82B71AC4F9AE02/fb-DrlKCyE6w7_VdXBxngBy2RcQ.crl rsync://rpki.apnic.net/member_repository/A916601E/FF4875BEF56011EF9C82B71AC4F9AE02/fb-DrlKCyE6w7_VdXBxngBy2RcQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fb-DrlKCyE6w7_VdXBxngBy2RcQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 06:41:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 131 (0x83) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916601E, serialNumber=7DBF83AE5282C84EB0EFF55D5C1C67801CB645C4 Validity Not Before: Nov 3 06:41:51 2025 GMT Not After : Nov 10 06:41:51 2025 GMT Subject: CN=69084eaf-bd6d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:72:ce:58:90:81:e5:97:19:9c:ea:09:52:f0: f6:26:68:72:8c:56:7d:c1:ce:e5:d4:72:c8:b2:64: 95:12:61:89:d9:e7:7e:17:e7:ca:b1:be:4c:7b:a2: 0d:39:f1:da:8e:ac:35:f1:6e:9e:34:95:a3:89:26: 64:af:51:a9:c0:93:f2:ff:d4:0f:f4:d1:0a:ec:b9: a7:a3:99:0c:93:9f:04:da:42:9b:b0:0c:21:f1:a4: 38:be:38:18:ba:88:e4:19:e4:05:85:42:83:da:91: e5:54:f0:db:a4:7f:fc:1c:d1:89:ab:1e:82:71:76: 1d:fb:3d:ce:f4:79:89:4a:62:68:ea:72:c4:e0:fb: 3e:5a:7e:66:c9:6b:29:d0:eb:89:e4:b1:e6:6a:aa: a5:67:2a:5c:47:c6:e7:96:13:ae:c7:b9:24:d7:8f: 05:57:b9:1d:46:5e:9f:49:e4:fa:88:51:00:04:4d: 85:f7:fd:45:63:6a:7a:48:f9:b3:cd:8a:35:33:3b: 78:01:db:a9:07:e1:f8:e5:13:aa:37:45:86:5d:66: 52:20:fa:d0:2b:90:30:b2:d9:0e:c1:e2:0f:a4:2a: b7:76:ff:bb:db:b8:25:a5:2d:20:ec:6b:24:50:68: ad:98:b8:12:c6:ab:03:15:20:cd:f5:3a:3a:0f:f2: a7:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:95:C4:B6:D9:D4:2E:F2:96:76:2C:98:81:84:17:8E:A4:BC:FB:57 X509v3 Authority Key Identifier: keyid:7D:BF:83:AE:52:82:C8:4E:B0:EF:F5:5D:5C:1C:67:80:1C:B6:45:C4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916601E/FF4875BEF56011EF9C82B71AC4F9AE02/fb-DrlKCyE6w7_VdXBxngBy2RcQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fb-DrlKCyE6w7_VdXBxngBy2RcQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916601E/FF4875BEF56011EF9C82B71AC4F9AE02/fb-DrlKCyE6w7_VdXBxngBy2RcQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 81:85:2d:c5:d9:72:be:bd:2b:b9:61:c1:49:2b:27:14:e0:e3: c5:1c:79:4e:5c:bd:08:19:26:e8:cc:4c:22:75:46:66:6e:84: 19:77:b7:b9:a9:d3:c0:f4:3a:e9:c0:ad:e3:8e:c5:16:8c:07: cd:e4:bf:a7:05:a9:03:d6:81:ed:a6:68:9e:37:d3:2d:ab:fc: e6:5b:9f:e9:d0:84:e5:9f:60:5a:21:63:13:92:71:33:42:43: e2:05:8e:84:5e:c9:5f:86:54:aa:26:fa:1f:d0:06:37:01:3f: 20:ce:c3:b0:41:cf:2e:f8:20:50:02:ae:56:87:49:93:2f:4f: 48:0c:d9:7f:55:a9:ef:22:77:e1:e6:b6:d2:52:e0:5f:1c:88: 40:22:2d:b7:84:cf:dd:ed:be:4f:92:48:0c:81:63:78:52:a8: 55:34:4c:02:4b:fe:5b:66:d5:7d:5d:04:83:bb:13:b7:0a:92: d7:0a:8d:25:f2:ba:bc:e8:73:74:d0:f6:6d:2c:f9:95:37:80: 72:5a:56:0a:83:f4:6d:13:19:ef:4d:49:35:ba:ef:69:9b:b7: d3:47:7e:81:52:87:8b:c9:b6:f8:ee:e3:78:ff:b2:e3:dd:25: 63:32:3b:0f:7a:a8:04:be:73:e2:b2:ef:82:98:d5:53:9e:7e: 90:70:a6:ee -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAIMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjYwMUUxMTAvBgNVBAUTKDdEQkY4M0FFNTI4MkM4NEVCMEVGRjU1RDVDMUM2Nzgw MUNCNjQ1QzQwHhcNMjUxMTAzMDY0MTUxWhcNMjUxMTEwMDY0MTUxWjAYMRYwFAYD VQQDEw02OTA4NGVhZi1iZDZkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArXLOWJCB5ZcZnOoJUvD2JmhyjFZ9wc7l1HLIsmSVEmGJ2ed+F+fKsb5Me6IN OfHajqw18W6eNJWjiSZkr1GpwJPy/9QP9NEK7Lmno5kMk58E2kKbsAwh8aQ4vjgY uojkGeQFhUKD2pHlVPDbpH/8HNGJqx6CcXYd+z3O9HmJSmJo6nLE4Ps+Wn5myWsp 0OuJ5LHmaqqlZypcR8bnlhOux7kk148FV7kdRl6fSeT6iFEABE2F9/1FY2p6SPmz zYo1Mzt4AdupB+H45ROqN0WGXWZSIPrQK5AwstkOweIPpCq3dv+727glpS0g7Gsk UGitmLgSxqsDFSDN9To6D/KnpQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBuVxLbZ 1C7ylnYsmIGEF46kvPtXMB8GA1UdIwQYMBaAFH2/g65SgshOsO/1XVwcZ4ActkXE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NjAxRS9GRjQ4NzVCRUY1 NjAxMUVGOUM4MkI3MUFDNEY5QUUwMi9mYi1EcmxLQ3lFNnc3X1ZkWEJ4bmdCeTJS Y1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ZiLURybEtDeUU2dzdfVmRYQnhuZ0J5MlJjUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 NjAxRS9GRjQ4NzVCRUY1NjAxMUVGOUM4MkI3MUFDNEY5QUUwMi9mYi1EcmxLQ3lF Nnc3X1ZkWEJ4bmdCeTJSY1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCBhS3F2XK+vSu5YcFJKycU4OPFHHlOXL0IGSbozEwidUZmboQZd7e5 qdPA9DrpwK3jjsUWjAfN5L+nBakD1oHtpmieN9Mtq/zmW5/p0ITln2BaIWMTknEz QkPiBY6EXslfhlSqJvof0AY3AT8gzsOwQc8u+CBQAq5Wh0mTL09IDNl/VanvInfh 5rbSUuBfHIhAIi23hM/d7b5PkkgMgWN4UqhVNEwCS/5bZtV9XQSDuxO3CpLXCo0l 8rq86HN00PZtLPmVN4ByWlYKg/RtExnvTUk1uu9pm7fTR36BUoeLybb47uN4/7Lj 3SVjMjsPeqgEvnPisu+CmNVTnn6QcKbu -----END CERTIFICATE-----Generated at Tue Nov 4 16:03:32 2025 by rpki-client