$ rpki-client -vvf rpki.apnic.net/member_repository/A91836C4/9D4B10688FCA11EDB7911254C4F9AE02/fDPCHh829n5MagTrI5AZrXcryyo.mft File: fDPCHh829n5MagTrI5AZrXcryyo.mft (raw, json) Hash identifier: /FiCOSJh9bnxkUzAsZOzEBG7BzF6nxoIn0tq4fFlbZ4= Subject key identifier: 1A:89:D5:D3:6A:21:20:C8:5F:9A:2C:47:50:D2:3E:FB:63:6C:74:AF Authority key identifier: 7C:33:C2:1E:1F:36:F6:7E:4C:6A:04:EB:23:90:19:AD:77:2B:CB:2A Certificate issuer: /CN=A91836C4/serialNumber=7C33C21E1F36F67E4C6A04EB239019AD772BCB2A Certificate serial: 0212 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fDPCHh829n5MagTrI5AZrXcryyo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91836C4/9D4B10688FCA11EDB7911254C4F9AE02/fDPCHh829n5MagTrI5AZrXcryyo.mft Manifest number: 020E Signing time: Mon 03 Nov 2025 02:14:04 +0000 Manifest this update: Mon 03 Nov 2025 02:14:04 +0000 Manifest next update: Mon 10 Nov 2025 02:14:04 +0000 Files and hashes: 1: fDPCHh829n5MagTrI5AZrXcryyo.crl (hash: B5cHCrPxApKmbWF0GeupvGeyJY2Q8YBxTxwzUYW03uI=) 2: 37A0ACFC8FCD11EDB4772D55C4F9AE02.roa (hash: oBuS5xinsgEEPRO4L87WKgJisQvCYTMja8uyPjXphjc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91836C4/9D4B10688FCA11EDB7911254C4F9AE02/fDPCHh829n5MagTrI5AZrXcryyo.crl rsync://rpki.apnic.net/member_repository/A91836C4/9D4B10688FCA11EDB7911254C4F9AE02/fDPCHh829n5MagTrI5AZrXcryyo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fDPCHh829n5MagTrI5AZrXcryyo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 02:14:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 530 (0x212) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91836C4, serialNumber=7C33C21E1F36F67E4C6A04EB239019AD772BCB2A Validity Not Before: Nov 3 02:14:04 2025 GMT Not After : Nov 10 02:14:04 2025 GMT Subject: CN=69080fec-a948 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:6b:b0:82:27:25:25:eb:5b:8d:90:b7:09:b8: 76:8d:84:76:92:96:a1:62:68:68:81:16:f5:85:6c: 1c:61:50:12:9f:03:97:09:92:30:9c:82:fb:e1:c5: 22:07:fb:93:09:ce:33:7a:b9:1f:89:c8:a0:1e:27: be:71:58:b5:db:7d:41:3a:45:e8:ec:cc:c1:c4:a2: 39:e1:9c:76:db:57:bc:35:0a:c4:c3:cb:22:92:5a: 3e:ac:81:90:37:30:d5:f8:fd:71:ca:cb:af:10:e3: 5f:5f:37:bf:ed:17:b1:ad:f5:d1:b7:91:a4:15:3a: 76:e5:18:f0:a8:be:f2:9a:33:6b:3c:43:c1:52:05: 10:41:5f:5e:1b:18:e2:11:3c:ce:e6:ed:8b:a2:f1: f4:3e:3e:a5:06:30:62:07:ad:af:fa:ca:84:3f:19: 11:0b:9a:2d:ad:17:6a:f4:3b:32:ba:45:fe:71:f1: e5:ad:a4:c7:da:89:ac:75:e4:6b:aa:58:12:c1:f5: b0:02:1b:56:17:46:3c:d6:c2:5d:19:5f:bd:f5:f4: a2:6d:51:27:63:83:fd:fb:96:e5:d8:fd:a5:e3:fc: e5:b6:63:16:d0:1c:3e:be:07:1d:82:cb:94:7e:c7: 80:44:80:8a:06:70:4f:b2:3d:15:e4:3d:5c:75:44: d9:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:89:D5:D3:6A:21:20:C8:5F:9A:2C:47:50:D2:3E:FB:63:6C:74:AF X509v3 Authority Key Identifier: keyid:7C:33:C2:1E:1F:36:F6:7E:4C:6A:04:EB:23:90:19:AD:77:2B:CB:2A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91836C4/9D4B10688FCA11EDB7911254C4F9AE02/fDPCHh829n5MagTrI5AZrXcryyo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fDPCHh829n5MagTrI5AZrXcryyo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91836C4/9D4B10688FCA11EDB7911254C4F9AE02/fDPCHh829n5MagTrI5AZrXcryyo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 10:83:9f:15:77:bd:0c:d2:eb:95:de:ed:99:b6:09:d2:2f:e9: 97:2a:eb:70:13:1f:a8:70:1b:0d:38:3b:c1:1e:62:61:87:00: 7e:0f:cf:12:39:04:ec:ad:4a:88:7f:90:8f:d9:a0:1c:d6:49: b2:38:13:5f:eb:b5:44:f0:1b:a7:6c:92:10:ae:a8:15:34:17: 2e:43:ed:7d:b8:b5:04:32:5d:8f:fe:fb:3a:5b:2d:be:1f:5c: 4a:0e:46:2f:2e:c2:32:d7:53:57:de:32:19:cd:16:fd:5f:ea: 78:60:76:c0:aa:46:69:c9:34:9f:42:02:97:3a:64:37:f3:9f: 29:b9:e5:2b:aa:6b:e5:33:ed:a3:9c:0b:eb:a8:c7:5f:14:28: 5c:04:39:4f:bc:6c:46:80:99:43:8d:a4:e5:6c:62:e2:70:f2: d4:44:3e:32:2e:9f:84:22:14:7b:14:91:f1:ad:ee:6f:0a:7b: f8:bd:65:9c:2e:24:64:63:6c:e4:b5:ab:00:cc:de:a9:3d:22: a7:ba:de:7e:4c:c4:c7:2f:31:f5:16:d9:5e:5e:04:8c:cb:e6: 08:64:3e:0b:f5:df:47:b4:06:cd:87:bf:0c:58:56:80:f4:32: b2:33:a3:89:da:20:ab:d4:dd:2b:45:66:27:11:24:29:f4:fd: 1e:66:24:50 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAhIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODM2QzQxMTAvBgNVBAUTKDdDMzNDMjFFMUYzNkY2N0U0QzZBMDRFQjIzOTAxOUFE NzcyQkNCMkEwHhcNMjUxMTAzMDIxNDA0WhcNMjUxMTEwMDIxNDA0WjAYMRYwFAYD VQQDEw02OTA4MGZlYy1hOTQ4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwGuwgiclJetbjZC3Cbh2jYR2kpahYmhogRb1hWwcYVASnwOXCZIwnIL74cUi B/uTCc4zerkficigHie+cVi1231BOkXo7MzBxKI54Zx221e8NQrEw8siklo+rIGQ NzDV+P1xysuvEONfXze/7RexrfXRt5GkFTp25RjwqL7ymjNrPEPBUgUQQV9eGxji ETzO5u2LovH0Pj6lBjBiB62v+sqEPxkRC5otrRdq9DsyukX+cfHlraTH2omsdeRr qlgSwfWwAhtWF0Y81sJdGV+99fSibVEnY4P9+5bl2P2l4/zltmMW0Bw+vgcdgsuU fseARICKBnBPsj0V5D1cdUTZrwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBqJ1dNq ISDIX5osR1DSPvtjbHSvMB8GA1UdIwQYMBaAFHwzwh4fNvZ+TGoE6yOQGa13K8sq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MzZDNC85RDRCMTA2ODhG Q0ExMUVEQjc5MTEyNTRDNEY5QUUwMi9mRFBDSGg4MjluNU1hZ1RySTVBWnJYY3J5 eW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ZEUENIaDgyOW41TWFnVHJJNUFaclhjcnl5by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 MzZDNC85RDRCMTA2ODhGQ0ExMUVEQjc5MTEyNTRDNEY5QUUwMi9mRFBDSGg4Mjlu NU1hZ1RySTVBWnJYY3J5eW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAQg58Vd70M0uuV3u2ZtgnSL+mXKutwEx+ocBsNODvBHmJhhwB+D88S OQTsrUqIf5CP2aAc1kmyOBNf67VE8BunbJIQrqgVNBcuQ+19uLUEMl2P/vs6Wy2+ H1xKDkYvLsIy11NX3jIZzRb9X+p4YHbAqkZpyTSfQgKXOmQ3858pueUrqmvlM+2j nAvrqMdfFChcBDlPvGxGgJlDjaTlbGLicPLURD4yLp+EIhR7FJHxre5vCnv4vWWc LiRkY2zktasAzN6pPSKnut5+TMTHLzH1FtleXgSMy+YIZD4L9d9HtAbNh78MWFaA 9DKyM6OJ2iCr1N0rRWYnESQp9P0eZiRQ -----END CERTIFICATE-----Generated at Tue Nov 4 08:20:02 2025 by rpki-client