$ rpki-client -vvf rpki.apnic.net/member_repository/A9186363/B5600AECAFAC11EFB886D651C4F9AE02/Fx7dP3eF4PU4VW-e8mvtcWaejYw.mft File: Fx7dP3eF4PU4VW-e8mvtcWaejYw.mft (raw, json) Hash identifier: WNpMo4t4otTlfuusUY7eBP91Zey/bNhSyJrjZQBY6iE= Subject key identifier: AA:2E:8C:E0:E8:4B:AA:3E:D4:A1:2B:80:12:24:DC:48:15:A3:FB:10 Authority key identifier: 17:1E:DD:3F:77:85:E0:F5:38:55:6F:9E:F2:6B:ED:71:66:9E:8D:8C Certificate issuer: /CN=A9186363/serialNumber=171EDD3F7785E0F538556F9EF26BED71669E8D8C Certificate serial: AD Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Fx7dP3eF4PU4VW-e8mvtcWaejYw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9186363/B5600AECAFAC11EFB886D651C4F9AE02/Fx7dP3eF4PU4VW-e8mvtcWaejYw.mft Manifest number: AC Signing time: Mon 03 Nov 2025 06:08:56 +0000 Manifest this update: Mon 03 Nov 2025 06:08:56 +0000 Manifest next update: Mon 10 Nov 2025 06:08:56 +0000 Files and hashes: 1: Fx7dP3eF4PU4VW-e8mvtcWaejYw.crl (hash: 4Fh5of0Y4872ysJvPwJJhzUa1OypXX7QF1NpHNIh9TQ=) 2: 0FFCC5E8AFAE11EFAC818674C4F9AE02.roa (hash: P+H7fb6sxOYzaDyJFH2WCrqrlvTjPog92898KvwjrwQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9186363/B5600AECAFAC11EFB886D651C4F9AE02/Fx7dP3eF4PU4VW-e8mvtcWaejYw.crl rsync://rpki.apnic.net/member_repository/A9186363/B5600AECAFAC11EFB886D651C4F9AE02/Fx7dP3eF4PU4VW-e8mvtcWaejYw.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Fx7dP3eF4PU4VW-e8mvtcWaejYw.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 06:08:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 173 (0xad) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9186363, serialNumber=171EDD3F7785E0F538556F9EF26BED71669E8D8C Validity Not Before: Nov 3 06:08:56 2025 GMT Not After : Nov 10 06:08:56 2025 GMT Subject: CN=690846f8-d749 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:5b:c0:48:b9:b6:b2:da:45:10:6e:88:5a:d5: 71:82:84:e9:b5:dc:1b:73:44:f3:89:88:3b:9b:97: 11:d1:84:18:14:d1:69:f4:4c:57:28:49:15:ae:78: 12:30:1d:68:96:fe:51:35:36:52:4a:db:de:f0:4e: 4d:82:ee:72:11:d1:0c:88:dd:9b:cd:f2:76:94:47: 54:c3:12:af:c7:12:de:ba:c1:b6:d3:0e:0e:c8:8a: 71:ce:20:66:35:75:5e:63:7b:67:86:71:8c:e3:72: 18:bc:99:05:4d:09:67:17:68:df:f2:40:ce:18:74: 6d:7c:4e:31:3d:6f:85:8c:16:27:72:c9:30:4c:a5: 9a:3b:a7:6f:96:e4:f5:f2:10:ea:8d:8c:e3:41:85: fd:bb:49:02:18:e3:4a:61:f3:8b:d0:a0:d9:b3:d3: 54:8a:c8:29:41:04:75:6a:e1:67:5e:28:07:2e:c3: 59:ec:72:95:8d:2a:8d:9b:7a:0f:c5:32:ca:12:c8: e3:3a:65:8f:f9:2e:57:42:62:fa:1f:5b:71:eb:85: 49:13:3c:ce:4a:ec:27:f4:ce:1d:f3:8a:3b:7a:6c: 87:ef:28:9d:06:9f:00:88:4a:d3:02:ae:56:fb:0f: 83:fd:43:a1:97:de:23:d5:9c:31:8f:7b:e8:e0:aa: cb:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:2E:8C:E0:E8:4B:AA:3E:D4:A1:2B:80:12:24:DC:48:15:A3:FB:10 X509v3 Authority Key Identifier: keyid:17:1E:DD:3F:77:85:E0:F5:38:55:6F:9E:F2:6B:ED:71:66:9E:8D:8C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9186363/B5600AECAFAC11EFB886D651C4F9AE02/Fx7dP3eF4PU4VW-e8mvtcWaejYw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Fx7dP3eF4PU4VW-e8mvtcWaejYw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186363/B5600AECAFAC11EFB886D651C4F9AE02/Fx7dP3eF4PU4VW-e8mvtcWaejYw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1d:91:c0:b6:80:67:d7:7e:41:7a:97:24:cc:0e:a1:b7:f1:bc: c0:8a:0f:4c:56:a6:2e:37:46:a2:f9:9d:b8:d9:4e:e9:0c:f8: 09:40:a9:e8:ae:b4:8c:32:e6:6e:03:66:72:3e:bc:fb:83:45: 77:a7:33:8e:1d:88:c4:a6:a8:3e:93:91:34:d5:5a:a3:48:df: 97:27:a7:88:b1:4f:65:bc:47:53:a2:be:98:31:4b:0b:64:31: 16:2c:31:e6:20:60:96:21:08:29:d2:fc:1f:a2:a7:68:15:58: 20:b0:80:90:50:3f:f5:53:d0:b1:4e:48:e9:31:8e:ed:0c:41: f8:67:fe:81:f8:d6:c6:47:35:2c:fb:7a:0d:83:bb:59:f4:e0: 28:64:33:de:c9:75:d8:dd:a0:94:31:7a:32:2f:8a:2f:58:5d: 4f:bf:24:82:f3:53:6b:d1:e0:82:fb:a4:74:95:c0:b2:69:7c: 72:ff:ff:47:2b:52:89:6d:23:b8:8b:ac:3a:02:b7:7c:ce:94: 95:e3:bc:91:d4:0c:dc:ba:83:33:01:71:bd:28:f5:0d:02:34: ee:91:5b:67:a9:d3:a7:52:e2:ef:b9:92:a3:c6:1e:3b:08:94: 1b:b5:61:32:29:96:f0:c2:1a:a9:a9:87:95:70:64:46:f8:d0: f5:29:51:db -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAK0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODYzNjMxMTAvBgNVBAUTKDE3MUVERDNGNzc4NUUwRjUzODU1NkY5RUYyNkJFRDcx NjY5RThEOEMwHhcNMjUxMTAzMDYwODU2WhcNMjUxMTEwMDYwODU2WjAYMRYwFAYD VQQDEw02OTA4NDZmOC1kNzQ5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwlvASLm2stpFEG6IWtVxgoTptdwbc0TziYg7m5cR0YQYFNFp9ExXKEkVrngS MB1olv5RNTZSStve8E5Ngu5yEdEMiN2bzfJ2lEdUwxKvxxLeusG20w4OyIpxziBm NXVeY3tnhnGM43IYvJkFTQlnF2jf8kDOGHRtfE4xPW+FjBYncskwTKWaO6dvluT1 8hDqjYzjQYX9u0kCGONKYfOL0KDZs9NUisgpQQR1auFnXigHLsNZ7HKVjSqNm3oP xTLKEsjjOmWP+S5XQmL6H1tx64VJEzzOSuwn9M4d84o7emyH7yidBp8AiErTAq5W +w+D/UOhl94j1Zwxj3vo4KrLAQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKoujODo S6o+1KErgBIk3EgVo/sQMB8GA1UdIwQYMBaAFBce3T93heD1OFVvnvJr7XFmno2M MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NjM2My9CNTYwMEFFQ0FG QUMxMUVGQjg4NkQ2NTFDNEY5QUUwMi9GeDdkUDNlRjRQVTRWVy1lOG12dGNXYWVq WXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0Z4N2RQM2VGNFBVNFZXLWU4bXZ0Y1dhZWpZdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NjM2My9CNTYwMEFFQ0FGQUMxMUVGQjg4NkQ2NTFDNEY5QUUwMi9GeDdkUDNlRjRQ VTRWVy1lOG12dGNXYWVqWXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAdkcC2gGfXfkF6lyTMDqG38bzAig9MVqYuN0ai+Z242U7pDPgJQKno rrSMMuZuA2ZyPrz7g0V3pzOOHYjEpqg+k5E01VqjSN+XJ6eIsU9lvEdTor6YMUsL ZDEWLDHmIGCWIQgp0vwfoqdoFVggsICQUD/1U9CxTkjpMY7tDEH4Z/6B+NbGRzUs +3oNg7tZ9OAoZDPeyXXY3aCUMXoyL4ovWF1PvySC81Nr0eCC+6R0lcCyaXxy//9H K1KJbSO4i6w6Ard8zpSV47yR1AzcuoMzAXG9KPUNAjTukVtnqdOnUuLvuZKjxh47 CJQbtWEyKZbwwhqpqYeVcGRG+ND1KVHb -----END CERTIFICATE-----Generated at Tue Nov 4 21:36:10 2025 by rpki-client