$ rpki-client -vvf rpki.apnic.net/member_repository/A9173CF2/1AE9034681EE11EBBE35495FC4F9AE02/FEfUS0n3kG3GNzGl2Y2FLsELd0U.mft File: FEfUS0n3kG3GNzGl2Y2FLsELd0U.mft (raw, json) Hash identifier: DqXnO3JIsay6GgkIy16ec54DjNUs2ajS97rlirt+PAU= Subject key identifier: 96:4B:A0:88:C6:1F:08:9A:E6:14:95:82:24:F2:96:3C:E7:65:10:B8 Authority key identifier: 14:47:D4:4B:49:F7:90:6D:C6:37:31:A5:D9:8D:85:2E:C1:0B:77:45 Certificate issuer: /CN=A9173CF2/serialNumber=1447D44B49F7906DC63731A5D98D852EC10B7745 Certificate serial: 06B8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FEfUS0n3kG3GNzGl2Y2FLsELd0U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9173CF2/1AE9034681EE11EBBE35495FC4F9AE02/FEfUS0n3kG3GNzGl2Y2FLsELd0U.mft Manifest number: 06B2 Signing time: Tue 04 Nov 2025 22:18:34 +0000 Manifest this update: Tue 04 Nov 2025 22:18:34 +0000 Manifest next update: Tue 11 Nov 2025 22:18:34 +0000 Files and hashes: 1: FEfUS0n3kG3GNzGl2Y2FLsELd0U.crl (hash: TnOsQB2VKW6OVopyCIH2gcvTYR9OsB42FATaVKNfMOU=) 2: D9E7CFF681EF11EBAEE9D17AC4F9AE02.roa (hash: c9M9mRbjF0BZcSk0yGj1HQe17Ih56nG/Gq+RFkDxc6g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9173CF2/1AE9034681EE11EBBE35495FC4F9AE02/FEfUS0n3kG3GNzGl2Y2FLsELd0U.crl rsync://rpki.apnic.net/member_repository/A9173CF2/1AE9034681EE11EBBE35495FC4F9AE02/FEfUS0n3kG3GNzGl2Y2FLsELd0U.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FEfUS0n3kG3GNzGl2Y2FLsELd0U.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 22:18:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1720 (0x6b8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9173CF2, serialNumber=1447D44B49F7906DC63731A5D98D852EC10B7745 Validity Not Before: Nov 4 22:18:34 2025 GMT Not After : Nov 11 22:18:34 2025 GMT Subject: CN=690a7bba-44d1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:34:7d:41:44:86:66:1b:ec:9d:5f:88:8b:7d: e6:14:85:e1:28:06:ec:80:f9:da:39:fa:ef:26:cf: 60:54:06:d4:7a:76:28:19:58:32:51:17:02:86:f6: ca:29:9c:a0:dc:a7:72:76:5c:03:f0:3e:60:a6:9a: 9a:7e:d9:bf:99:3c:ea:ce:84:b2:53:c9:18:ca:03: db:63:45:30:e3:0f:ee:e1:08:ba:55:e9:9d:e4:02: 96:7b:9c:ae:09:2b:14:fb:a2:cf:eb:fb:27:c1:34: ce:01:03:7e:c6:4d:c8:b5:b8:a6:09:c7:bb:a0:4e: 9f:b3:1e:af:d7:27:87:dc:47:78:5e:4d:19:65:2c: 97:f9:c5:de:13:16:00:af:05:5b:29:b8:d7:78:29: ac:43:d4:f1:b8:ff:cc:3e:af:21:79:18:71:0f:97: 19:f7:70:f7:24:51:66:2e:b4:a2:50:23:25:6a:f6: 3e:25:8d:f9:c6:c5:6e:30:e4:b0:c8:f2:3d:1a:22: a0:4a:71:e5:4e:5c:b1:fe:10:03:6d:29:76:fa:12: 06:d7:fa:e8:0b:33:7c:72:c4:fc:e3:de:61:01:60: d6:85:31:42:d0:37:4d:dc:5f:de:37:b3:72:67:de: ca:53:43:24:77:9e:95:50:d0:c2:fd:41:40:9a:dd: 20:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:4B:A0:88:C6:1F:08:9A:E6:14:95:82:24:F2:96:3C:E7:65:10:B8 X509v3 Authority Key Identifier: keyid:14:47:D4:4B:49:F7:90:6D:C6:37:31:A5:D9:8D:85:2E:C1:0B:77:45 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9173CF2/1AE9034681EE11EBBE35495FC4F9AE02/FEfUS0n3kG3GNzGl2Y2FLsELd0U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FEfUS0n3kG3GNzGl2Y2FLsELd0U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9173CF2/1AE9034681EE11EBBE35495FC4F9AE02/FEfUS0n3kG3GNzGl2Y2FLsELd0U.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 48:b3:b6:29:d7:70:ac:9a:b1:00:7b:0d:bf:94:ac:a4:c6:8c: ef:44:00:e2:29:2a:92:40:f9:9f:18:a4:3d:e3:3b:83:10:ed: 6c:4b:6d:bd:e2:13:0c:91:5a:f5:d3:5c:f3:76:7d:fd:4b:e2: 97:2f:50:b1:fb:2a:bb:86:ae:85:9d:5a:bf:43:28:bc:fe:89: 2f:38:9c:aa:7c:cc:9e:a5:68:65:22:73:a1:7b:ef:3b:1c:cf: 00:0f:a3:03:1f:da:87:5a:9b:33:38:23:5f:8e:a8:f6:23:ff: fc:4f:1a:7d:81:e8:95:34:18:a0:b3:a4:63:74:86:bd:07:fa: 26:81:62:eb:b6:be:49:3b:7b:c0:f9:26:f9:61:0a:7f:93:dc: 07:8c:e7:f3:97:d6:37:ef:c0:31:77:1a:9b:b2:6d:15:94:c1: 1a:8a:1f:db:c0:bf:33:8e:9c:2f:71:d0:64:9e:30:32:a3:96: 42:b2:fe:a6:75:82:26:1a:cc:13:17:44:37:9f:97:93:48:c1: d3:8e:ba:fe:66:a8:ba:3a:c8:42:b9:4d:e0:6b:8c:4f:6b:90: 3a:42:0f:b1:58:1a:37:67:ab:98:d8:d1:c2:6f:f7:18:30:38: 31:e9:dc:f5:df:91:fe:47:14:5d:a3:50:cf:56:f9:91:0b:4a: c4:7a:f8:6b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBrgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzNDRjIxMTAvBgNVBAUTKDE0NDdENDRCNDlGNzkwNkRDNjM3MzFBNUQ5OEQ4NTJF QzEwQjc3NDUwHhcNMjUxMTA0MjIxODM0WhcNMjUxMTExMjIxODM0WjAYMRYwFAYD VQQDEw02OTBhN2JiYS00NGQxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyjR9QUSGZhvsnV+Ii33mFIXhKAbsgPnaOfrvJs9gVAbUenYoGVgyURcChvbK KZyg3KdydlwD8D5gppqaftm/mTzqzoSyU8kYygPbY0Uw4w/u4Qi6Vemd5AKWe5yu CSsU+6LP6/snwTTOAQN+xk3ItbimCce7oE6fsx6v1yeH3Ed4Xk0ZZSyX+cXeExYA rwVbKbjXeCmsQ9TxuP/MPq8heRhxD5cZ93D3JFFmLrSiUCMlavY+JY35xsVuMOSw yPI9GiKgSnHlTlyx/hADbSl2+hIG1/roCzN8csT8495hAWDWhTFC0DdN3F/eN7Ny Z97KU0Mkd56VUNDC/UFAmt0gJQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJZLoIjG Hwia5hSVgiTyljznZRC4MB8GA1UdIwQYMBaAFBRH1EtJ95BtxjcxpdmNhS7BC3dF MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3M0NGMi8xQUU5MDM0Njgx RUUxMUVCQkUzNTQ5NUZDNEY5QUUwMi9GRWZVUzBuM2tHM0dOekdsMlkyRkxzRUxk MFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZFZlVTMG4za0czR056R2wyWTJGTHNFTGQwVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 M0NGMi8xQUU5MDM0NjgxRUUxMUVCQkUzNTQ5NUZDNEY5QUUwMi9GRWZVUzBuM2tH M0dOekdsMlkyRkxzRUxkMFUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBIs7Yp13CsmrEAew2/lKykxozvRADiKSqSQPmfGKQ94zuDEO1sS229 4hMMkVr101zzdn39S+KXL1Cx+yq7hq6FnVq/Qyi8/okvOJyqfMyepWhlInOhe+87 HM8AD6MDH9qHWpszOCNfjqj2I//8Txp9geiVNBigs6RjdIa9B/omgWLrtr5JO3vA +Sb5YQp/k9wHjOfzl9Y378Axdxqbsm0VlMEaih/bwL8zjpwvcdBknjAyo5ZCsv6m dYImGswTF0Q3n5eTSMHTjrr+Zqi6OshCuU3ga4xPa5A6Qg+xWBo3Z6uY2NHCb/cY MDgx6dz135H+RxRdo1DPVvmRC0rEevhr -----END CERTIFICATE-----Generated at Wed Nov 5 11:55:17 2025 by rpki-client