$ rpki-client -vvf rpki.apnic.net/member_repository/A916B826/6CE5D6C0743811EA90270781C4F9AE02/fSGgNfHk9MpCeHMKwuUHXbIxG08.mft File: fSGgNfHk9MpCeHMKwuUHXbIxG08.mft (raw, json) Hash identifier: HIxMuDAyYjWOhJMWQe/1zV+QFQw73EGrvViLf7T642I= Subject key identifier: EC:BF:AC:5D:5E:1B:8A:3B:F3:4C:E2:4F:8A:CB:E7:C4:CF:E4:EF:45 Authority key identifier: 7D:21:A0:35:F1:E4:F4:CA:42:78:73:0A:C2:E5:07:5D:B2:31:1B:4F Certificate issuer: /CN=A916B826/serialNumber=7D21A035F1E4F4CA4278730AC2E5075DB2311B4F Certificate serial: 0A65 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fSGgNfHk9MpCeHMKwuUHXbIxG08.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916B826/6CE5D6C0743811EA90270781C4F9AE02/fSGgNfHk9MpCeHMKwuUHXbIxG08.mft Manifest number: 0A5C Signing time: Tue 04 Nov 2025 19:45:42 +0000 Manifest this update: Tue 04 Nov 2025 19:45:41 +0000 Manifest next update: Tue 11 Nov 2025 19:45:41 +0000 Files and hashes: 1: fSGgNfHk9MpCeHMKwuUHXbIxG08.crl (hash: mcOQtO1GgY4e8UpfA5i1PMb54C7dyObDaCnflq/ihVA=) 2: 705B0F54743911EAA55F0482C4F9AE02.roa (hash: dtGf9lHKD+XSra1Ic0YW/IxEbS3xgcrQOVyMLgE54Qo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916B826/6CE5D6C0743811EA90270781C4F9AE02/fSGgNfHk9MpCeHMKwuUHXbIxG08.crl rsync://rpki.apnic.net/member_repository/A916B826/6CE5D6C0743811EA90270781C4F9AE02/fSGgNfHk9MpCeHMKwuUHXbIxG08.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fSGgNfHk9MpCeHMKwuUHXbIxG08.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 19:17:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2661 (0xa65) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916B826, serialNumber=7D21A035F1E4F4CA4278730AC2E5075DB2311B4F Validity Not Before: Nov 4 19:45:41 2025 GMT Not After : Nov 11 19:45:41 2025 GMT Subject: CN=690a57e5-f863 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:70:f0:7a:59:21:8f:6e:03:5c:a6:36:f9:6b: a2:dc:62:fc:f3:ec:c1:2b:7f:b5:b5:43:e3:80:58: 66:96:b9:73:9e:bd:c6:4f:a1:6d:5f:b8:63:ba:8b: 3d:89:01:d1:d6:94:d0:3d:7f:fb:fb:48:5c:ab:53: 8d:4e:53:80:f4:b1:12:c3:a4:82:13:83:ea:fd:b6: 74:54:bb:26:cb:96:8e:da:f1:f1:68:2e:d0:fa:f2: 9e:de:f0:3f:a4:77:92:0a:04:cc:4d:cc:18:4d:cd: 27:7a:16:0a:43:68:d1:b2:5b:64:17:bd:12:13:d4: c2:25:5e:a9:c0:27:7f:59:05:cc:42:85:c5:f3:fa: 7e:a1:96:72:9a:c0:22:03:8c:e6:e4:1f:f9:67:c8: 68:eb:e1:75:6b:5e:10:4d:71:f0:31:93:60:3b:37: c4:23:88:f0:63:77:cd:d5:5d:32:78:a0:88:7d:77: e6:ff:17:74:03:d7:9e:70:f7:bd:1a:c0:78:e4:12: a7:d9:74:57:16:00:56:fc:8b:8f:d1:a1:c6:cc:1b: 9e:81:6e:9e:32:3a:ae:58:0f:e2:11:71:e3:23:85: f1:d4:43:24:ac:d7:ab:33:0f:9a:8a:67:c1:5d:a8: a7:a3:0d:23:63:33:d4:73:6b:03:fc:ca:ef:3b:3a: aa:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:BF:AC:5D:5E:1B:8A:3B:F3:4C:E2:4F:8A:CB:E7:C4:CF:E4:EF:45 X509v3 Authority Key Identifier: keyid:7D:21:A0:35:F1:E4:F4:CA:42:78:73:0A:C2:E5:07:5D:B2:31:1B:4F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916B826/6CE5D6C0743811EA90270781C4F9AE02/fSGgNfHk9MpCeHMKwuUHXbIxG08.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fSGgNfHk9MpCeHMKwuUHXbIxG08.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916B826/6CE5D6C0743811EA90270781C4F9AE02/fSGgNfHk9MpCeHMKwuUHXbIxG08.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b4:9c:e3:4d:a5:63:11:b7:65:1a:83:2d:00:9f:27:64:19:a8: f2:eb:fa:8c:7a:e9:e2:19:eb:f0:da:3c:c6:76:a3:4d:18:56: 7d:73:c8:4b:c2:8f:c4:cc:51:29:a3:25:e3:e5:e7:1d:c7:af: 23:ed:53:53:2b:4f:6b:d1:f6:74:3f:5e:f7:6e:2b:6d:b4:6d: 03:0b:84:dd:f8:aa:54:cd:f7:c1:9f:d0:07:33:ce:46:28:9f: b6:22:de:75:af:f6:db:27:6b:a6:de:21:35:23:77:5c:68:bc: 34:14:c0:dd:55:95:2f:87:16:6c:86:55:b4:37:5b:8c:02:2e: c7:77:7d:d0:54:8c:14:86:2a:25:24:a1:5f:c5:52:65:af:15: db:9d:51:9d:c8:bc:0c:0f:0c:01:cb:f2:26:5b:e1:8a:d9:5e: 8b:44:b4:c6:28:47:77:61:1b:ed:e0:54:9d:7c:40:3e:c3:5e: c1:97:11:12:4d:0f:c4:70:9e:d5:d4:44:12:f0:d8:4f:d7:50: 97:81:3b:ae:87:0a:d1:a6:df:cf:69:26:8a:a3:a5:0c:7e:7f: 99:f4:7b:03:d7:42:f0:c6:82:9a:45:e0:39:da:3b:9d:dd:5f: 45:e8:38:4d:5d:77:92:de:59:0f:d2:93:43:45:8c:54:2d:d9: f1:52:11:b9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCmUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkI4MjYxMTAvBgNVBAUTKDdEMjFBMDM1RjFFNEY0Q0E0Mjc4NzMwQUMyRTUwNzVE QjIzMTFCNEYwHhcNMjUxMTA0MTk0NTQxWhcNMjUxMTExMTk0NTQxWjAYMRYwFAYD VQQDEw02OTBhNTdlNS1mODYzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArXDwelkhj24DXKY2+Wui3GL88+zBK3+1tUPjgFhmlrlznr3GT6FtX7hjuos9 iQHR1pTQPX/7+0hcq1ONTlOA9LESw6SCE4Pq/bZ0VLsmy5aO2vHxaC7Q+vKe3vA/ pHeSCgTMTcwYTc0nehYKQ2jRsltkF70SE9TCJV6pwCd/WQXMQoXF8/p+oZZymsAi A4zm5B/5Z8ho6+F1a14QTXHwMZNgOzfEI4jwY3fN1V0yeKCIfXfm/xd0A9eecPe9 GsB45BKn2XRXFgBW/IuP0aHGzBuegW6eMjquWA/iEXHjI4Xx1EMkrNerMw+aimfB Xainow0jYzPUc2sD/MrvOzqq+wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOy/rF1e G4o780ziT4rL58TP5O9FMB8GA1UdIwQYMBaAFH0hoDXx5PTKQnhzCsLlB12yMRtP MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QjgyNi82Q0U1RDZDMDc0 MzgxMUVBOTAyNzA3ODFDNEY5QUUwMi9mU0dnTmZIazlNcENlSE1Ld3VVSFhiSXhH MDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ZTR2dOZkhrOU1wQ2VITUt3dVVIWGJJeEcwOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 QjgyNi82Q0U1RDZDMDc0MzgxMUVBOTAyNzA3ODFDNEY5QUUwMi9mU0dnTmZIazlN cENlSE1Ld3VVSFhiSXhHMDgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC0nONNpWMRt2Uagy0AnydkGajy6/qMeuniGevw2jzGdqNNGFZ9c8hL wo/EzFEpoyXj5ecdx68j7VNTK09r0fZ0P173bitttG0DC4Td+KpUzffBn9AHM85G KJ+2It51r/bbJ2um3iE1I3dcaLw0FMDdVZUvhxZshlW0N1uMAi7Hd33QVIwUhiol JKFfxVJlrxXbnVGdyLwMDwwBy/ImW+GK2V6LRLTGKEd3YRvt4FSdfEA+w17BlxES TQ/EcJ7V1EQS8NhP11CXgTuuhwrRpt/PaSaKo6UMfn+Z9HsD10LwxoKaReA52jud 3V9F6DhNXXeS3lkP0pNDRYxULdnxUhG5 -----END CERTIFICATE-----Generated at Tue Nov 4 21:34:41 2025 by rpki-client