$ rpki-client -vvf rpki.apnic.net/member_repository/A916892A/0C526DCE5DDF11EF8B583365C4F9AE02/fRcij0ReGEsUhJvkCPvZ2yl7uAE.mft File: fRcij0ReGEsUhJvkCPvZ2yl7uAE.mft (raw, json) Hash identifier: F1yKONYFOGNphLvVxuWobBjLBhgy316sGpirbhCPKtU= Subject key identifier: 19:C4:57:38:BA:6E:33:97:CB:5E:14:E3:D8:27:AF:A7:4F:33:72:9A Authority key identifier: 7D:17:22:8F:44:5E:18:4B:14:84:9B:E4:08:FB:D9:DB:29:7B:B8:01 Certificate issuer: /CN=A916892A/serialNumber=7D17228F445E184B14849BE408FBD9DB297BB801 Certificate serial: ED Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fRcij0ReGEsUhJvkCPvZ2yl7uAE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916892A/0C526DCE5DDF11EF8B583365C4F9AE02/fRcij0ReGEsUhJvkCPvZ2yl7uAE.mft Manifest number: E9 Signing time: Wed 05 Nov 2025 05:36:25 +0000 Manifest this update: Wed 05 Nov 2025 05:36:25 +0000 Manifest next update: Wed 12 Nov 2025 05:36:25 +0000 Files and hashes: 1: fRcij0ReGEsUhJvkCPvZ2yl7uAE.crl (hash: yAftwmERtfMGXBnXtG3wWoANOyQwmCmt38JlbjmYVCA=) 2: 99DDC906ABCF11F09186B30FC4F9AE02.roa (hash: ERTLamQHXAize+DQS050C0oNyt0XOaqRatFR9EGeJt8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916892A/0C526DCE5DDF11EF8B583365C4F9AE02/fRcij0ReGEsUhJvkCPvZ2yl7uAE.crl rsync://rpki.apnic.net/member_repository/A916892A/0C526DCE5DDF11EF8B583365C4F9AE02/fRcij0ReGEsUhJvkCPvZ2yl7uAE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fRcij0ReGEsUhJvkCPvZ2yl7uAE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 05:36:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 237 (0xed) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916892A, serialNumber=7D17228F445E184B14849BE408FBD9DB297BB801 Validity Not Before: Nov 5 05:36:25 2025 GMT Not After : Nov 12 05:36:25 2025 GMT Subject: CN=690ae259-fef3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:81:31:18:3f:39:66:d5:d7:b2:92:42:1b:a5: 4b:b0:36:33:dc:af:83:82:65:37:6e:06:e5:b2:de: 16:fa:3f:97:90:09:03:a6:d3:d2:ec:0a:91:75:81: 5a:13:9b:64:4b:08:df:76:00:2c:81:8c:25:38:25: bc:06:b5:a1:0b:4e:9e:00:0e:92:ff:8e:07:78:02: 38:f9:77:22:83:4f:3e:d2:4e:9a:15:0a:39:4e:35: ae:8f:75:14:54:52:99:20:3a:af:14:a1:fc:93:56: 2b:55:a6:f6:f9:c5:96:ec:2a:de:b2:ea:2c:78:00: 33:23:58:07:37:b6:aa:7d:0a:a3:a6:43:bd:07:df: ac:5d:c5:0d:b3:c0:c8:9f:35:85:ea:e3:3d:42:5d: 04:62:6f:ab:cc:97:64:b5:bf:12:1f:19:5e:6b:23: 6c:84:16:f5:6a:56:9a:66:04:ac:e2:5d:60:a3:eb: 6f:bf:a3:b4:9f:02:4f:86:ab:41:32:23:04:66:d4: d0:83:e0:40:6b:b3:50:c5:fd:80:06:64:e6:8f:b8: de:e2:63:a7:68:fe:99:57:0b:cd:1f:1f:01:20:24: 6e:b4:dd:1e:1a:d4:0b:e4:91:ce:e1:3b:ee:4a:64: 3f:8e:6d:e4:f5:70:68:d7:18:ed:8c:ef:16:10:89: 51:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:C4:57:38:BA:6E:33:97:CB:5E:14:E3:D8:27:AF:A7:4F:33:72:9A X509v3 Authority Key Identifier: keyid:7D:17:22:8F:44:5E:18:4B:14:84:9B:E4:08:FB:D9:DB:29:7B:B8:01 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916892A/0C526DCE5DDF11EF8B583365C4F9AE02/fRcij0ReGEsUhJvkCPvZ2yl7uAE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fRcij0ReGEsUhJvkCPvZ2yl7uAE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916892A/0C526DCE5DDF11EF8B583365C4F9AE02/fRcij0ReGEsUhJvkCPvZ2yl7uAE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 94:bc:3e:13:85:6b:b1:4a:19:9f:21:62:e7:88:29:18:6c:68: 61:87:43:a3:35:dc:cb:39:77:52:bd:f4:60:bb:27:81:c2:b8: 6e:bd:27:2b:c6:88:9a:3d:f2:e7:9f:d0:f5:04:5d:2d:c4:87: b0:23:6e:4c:76:63:85:60:cf:7a:44:c5:c5:f8:f3:5f:12:60: bc:2b:8f:94:d8:d3:26:c1:e3:9c:4d:56:88:e9:8b:e3:21:3e: b9:d7:eb:77:c4:ba:c0:cf:9d:1a:ec:ed:5f:a2:b8:6a:2c:f0: 93:b4:9a:70:6d:02:ad:04:69:a7:bb:80:6e:be:37:37:00:e7: 95:0d:0c:f6:6d:82:56:2b:f4:28:f1:13:e6:4d:66:48:4c:c7: 0a:24:ac:40:f3:0a:98:72:3e:19:03:ac:f5:16:27:09:5b:28: 26:83:98:fb:c8:28:08:f7:ee:2f:43:db:7e:05:8d:ed:91:2d: 85:80:eb:8a:00:70:1b:86:d5:dd:c5:58:ce:64:63:6d:3a:1c: cb:c5:b8:6f:54:47:6f:6d:8c:ed:df:45:1d:9d:20:6d:75:7f: 10:e7:99:a2:a4:9c:8f:77:91:2c:16:36:f1:e7:7e:55:67:60: ef:e0:03:97:04:3c:62:69:a2:23:aa:a2:4a:92:34:f7:96:2c: 31:cf:7b:ba -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAO0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Njg5MkExMTAvBgNVBAUTKDdEMTcyMjhGNDQ1RTE4NEIxNDg0OUJFNDA4RkJEOURC Mjk3QkI4MDEwHhcNMjUxMTA1MDUzNjI1WhcNMjUxMTEyMDUzNjI1WjAYMRYwFAYD VQQDEw02OTBhZTI1OS1mZWYzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv4ExGD85ZtXXspJCG6VLsDYz3K+DgmU3bgblst4W+j+XkAkDptPS7AqRdYFa E5tkSwjfdgAsgYwlOCW8BrWhC06eAA6S/44HeAI4+Xcig08+0k6aFQo5TjWuj3UU VFKZIDqvFKH8k1YrVab2+cWW7CresuoseAAzI1gHN7aqfQqjpkO9B9+sXcUNs8DI nzWF6uM9Ql0EYm+rzJdktb8SHxleayNshBb1alaaZgSs4l1go+tvv6O0nwJPhqtB MiMEZtTQg+BAa7NQxf2ABmTmj7je4mOnaP6ZVwvNHx8BICRutN0eGtQL5JHO4Tvu SmQ/jm3k9XBo1xjtjO8WEIlR9wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBnEVzi6 bjOXy14U49gnr6dPM3KaMB8GA1UdIwQYMBaAFH0XIo9EXhhLFISb5Aj72dspe7gB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2ODkyQS8wQzUyNkRDRTVE REYxMUVGOEI1ODMzNjVDNEY5QUUwMi9mUmNpajBSZUdFc1VoSnZrQ1B2WjJ5bDd1 QUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ZSY2lqMFJlR0VzVWhKdmtDUHZaMnlsN3VBRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 ODkyQS8wQzUyNkRDRTVEREYxMUVGOEI1ODMzNjVDNEY5QUUwMi9mUmNpajBSZUdF c1VoSnZrQ1B2WjJ5bDd1QUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCUvD4ThWuxShmfIWLniCkYbGhhh0OjNdzLOXdSvfRguyeBwrhuvScr xoiaPfLnn9D1BF0txIewI25MdmOFYM96RMXF+PNfEmC8K4+U2NMmweOcTVaI6Yvj IT651+t3xLrAz50a7O1forhqLPCTtJpwbQKtBGmnu4Buvjc3AOeVDQz2bYJWK/Qo 8RPmTWZITMcKJKxA8wqYcj4ZA6z1FicJWygmg5j7yCgI9+4vQ9t+BY3tkS2FgOuK AHAbhtXdxVjOZGNtOhzLxbhvVEdvbYzt30UdnSBtdX8Q55mipJyPd5EsFjbx535V Z2Dv4AOXBDxiaaIjqqJKkjT3liwxz3u6 -----END CERTIFICATE-----Generated at Wed Nov 5 11:44:22 2025 by rpki-client