$ rpki-client -vvf rpki.apnic.net/member_repository/A918681B/C43FBD061A3A11EC8FBF417BC4F9AE02/0fxphnCiQetFTVXFZ6paY1rwoGM.mft File: 0fxphnCiQetFTVXFZ6paY1rwoGM.mft (raw, json) Hash identifier: +qcUfmSQXShg0yhnVxys0UKyqCGee7Ypiw1FXVYAXSA= Subject key identifier: 96:E4:68:77:DA:1F:B2:E2:84:34:B6:C5:5B:88:C6:31:C8:53:44:98 Authority key identifier: D1:FC:69:86:70:A2:41:EB:45:4D:55:C5:67:AA:5A:63:5A:F0:A0:63 Certificate issuer: /CN=A918681B/serialNumber=D1FC698670A241EB454D55C567AA5A635AF0A063 Certificate serial: 054E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0fxphnCiQetFTVXFZ6paY1rwoGM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918681B/C43FBD061A3A11EC8FBF417BC4F9AE02/0fxphnCiQetFTVXFZ6paY1rwoGM.mft Manifest number: 0542 Signing time: Sun 02 Nov 2025 23:28:51 +0000 Manifest this update: Sun 02 Nov 2025 23:28:51 +0000 Manifest next update: Sun 09 Nov 2025 23:28:51 +0000 Files and hashes: 1: 0fxphnCiQetFTVXFZ6paY1rwoGM.crl (hash: vxiCy7OEKZLq3VgHYe9L62Hh2eWvnc6fgn3/THwXn7o=) 2: 5D4D3E261A3E11ECB42D0B80C4F9AE02.roa (hash: Am0tyv0SW/vQBy5lGTGy4TYfxwQ9Lc6UrqhzC51ywy4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918681B/C43FBD061A3A11EC8FBF417BC4F9AE02/0fxphnCiQetFTVXFZ6paY1rwoGM.crl rsync://rpki.apnic.net/member_repository/A918681B/C43FBD061A3A11EC8FBF417BC4F9AE02/0fxphnCiQetFTVXFZ6paY1rwoGM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0fxphnCiQetFTVXFZ6paY1rwoGM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 23:28:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1358 (0x54e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918681B, serialNumber=D1FC698670A241EB454D55C567AA5A635AF0A063 Validity Not Before: Nov 2 23:28:51 2025 GMT Not After : Nov 9 23:28:51 2025 GMT Subject: CN=6907e933-df45 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:22:6f:33:45:cd:c1:00:16:0d:6d:d5:a7:f7: b2:4b:b7:f5:b5:bd:e5:6a:92:e6:42:9d:ad:71:d2: 65:a3:39:16:dc:ba:78:9a:1d:e2:da:2c:82:d9:e1: 6d:68:a0:12:d5:d2:64:58:ec:5c:68:ff:c9:25:c9: fe:4b:6d:6c:b1:22:d7:fc:15:70:6a:38:2a:0d:f0: d0:c1:05:0f:60:c6:55:61:d9:10:55:b8:69:9c:75: 27:11:35:37:27:47:c1:30:1e:ad:32:4d:ac:c8:c4: 24:45:e7:b2:c2:26:8f:95:27:3a:a3:08:66:ef:d6: ab:1f:56:d1:9e:99:47:7d:4b:17:d4:50:18:dc:8a: ad:69:24:49:0a:67:78:bc:d8:15:62:e7:05:c4:ce: a6:e5:76:ad:ad:5c:47:e5:4b:7d:5a:a8:1b:85:05: c8:4c:aa:5a:4f:0e:f9:9f:4a:5c:30:fb:48:e0:61: 4e:88:ce:1c:17:ea:c5:b9:d6:78:da:b8:e0:2f:13: 49:1b:2c:f2:d8:2f:cc:1b:13:06:90:89:71:d3:bf: 4a:92:63:e7:2b:25:29:b0:ec:07:fa:18:80:0c:76: 52:f5:c2:50:db:66:fc:67:6d:63:68:47:f2:a2:34: 75:ca:b6:57:4c:f7:be:dd:5a:19:21:18:10:c5:4d: 9c:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:E4:68:77:DA:1F:B2:E2:84:34:B6:C5:5B:88:C6:31:C8:53:44:98 X509v3 Authority Key Identifier: keyid:D1:FC:69:86:70:A2:41:EB:45:4D:55:C5:67:AA:5A:63:5A:F0:A0:63 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918681B/C43FBD061A3A11EC8FBF417BC4F9AE02/0fxphnCiQetFTVXFZ6paY1rwoGM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0fxphnCiQetFTVXFZ6paY1rwoGM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918681B/C43FBD061A3A11EC8FBF417BC4F9AE02/0fxphnCiQetFTVXFZ6paY1rwoGM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 83:04:b4:75:36:41:ea:77:c3:55:fc:00:0e:09:05:12:ff:c4: 6c:ab:e0:37:7d:f5:58:54:86:5c:4f:84:9c:44:4b:8e:d7:e2: 07:18:f9:52:4f:b5:c4:85:8e:d0:18:dd:60:c6:dd:d1:54:2b: 46:ff:54:49:b1:cd:15:b9:c6:dc:a9:41:dd:4c:f4:34:fd:35: d6:50:89:af:64:dd:dc:17:83:51:09:b2:fe:dd:db:09:8d:92: f9:1c:56:5f:74:ba:ef:9a:8e:62:94:4e:eb:36:dc:c3:d3:bc: 7c:38:62:63:93:eb:28:cb:d6:7e:b1:bb:34:09:3f:60:ed:f0: a0:16:9d:59:1a:d3:37:38:de:9e:84:36:ba:c1:29:98:29:d9: c3:73:dd:30:48:96:63:12:55:28:05:10:7e:32:3a:ec:34:f3: 59:20:a6:03:16:ed:52:f5:69:40:83:ef:73:b1:9f:aa:55:98: 37:f9:66:f5:a1:4b:d7:0f:09:d1:57:80:0f:1f:e4:17:99:d5: bb:37:2a:e2:0c:41:52:47:c1:46:a6:ac:f4:3c:ce:76:c5:65: 8b:12:ec:e7:a6:e8:d5:e0:82:17:12:3f:0d:6b:a8:e5:1f:eb: bd:6c:ca:8d:40:94:c0:82:ac:17:6b:bf:f6:05:f5:93:f8:39: c0:47:7b:21 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBU4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODY4MUIxMTAvBgNVBAUTKEQxRkM2OTg2NzBBMjQxRUI0NTRENTVDNTY3QUE1QTYz NUFGMEEwNjMwHhcNMjUxMTAyMjMyODUxWhcNMjUxMTA5MjMyODUxWjAYMRYwFAYD VQQDEw02OTA3ZTkzMy1kZjQ1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAviJvM0XNwQAWDW3Vp/eyS7f1tb3lapLmQp2tcdJlozkW3Lp4mh3i2iyC2eFt aKAS1dJkWOxcaP/JJcn+S21ssSLX/BVwajgqDfDQwQUPYMZVYdkQVbhpnHUnETU3 J0fBMB6tMk2syMQkReeywiaPlSc6owhm79arH1bRnplHfUsX1FAY3IqtaSRJCmd4 vNgVYucFxM6m5XatrVxH5Ut9WqgbhQXITKpaTw75n0pcMPtI4GFOiM4cF+rFudZ4 2rjgLxNJGyzy2C/MGxMGkIlx079KkmPnKyUpsOwH+hiADHZS9cJQ22b8Z21jaEfy ojR1yrZXTPe+3VoZIRgQxU2c/QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJbkaHfa H7LihDS2xVuIxjHIU0SYMB8GA1UdIwQYMBaAFNH8aYZwokHrRU1VxWeqWmNa8KBj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NjgxQi9DNDNGQkQwNjFB M0ExMUVDOEZCRjQxN0JDNEY5QUUwMi8wZnhwaG5DaVFldEZUVlhGWjZwYVkxcndv R00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzBmeHBobkNpUWV0RlRWWEZaNnBhWTFyd29HTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NjgxQi9DNDNGQkQwNjFBM0ExMUVDOEZCRjQxN0JDNEY5QUUwMi8wZnhwaG5DaVFl dEZUVlhGWjZwYVkxcndvR00ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCDBLR1NkHqd8NV/AAOCQUS/8Rsq+A3ffVYVIZcT4ScREuO1+IHGPlS T7XEhY7QGN1gxt3RVCtG/1RJsc0VucbcqUHdTPQ0/TXWUImvZN3cF4NRCbL+3dsJ jZL5HFZfdLrvmo5ilE7rNtzD07x8OGJjk+soy9Z+sbs0CT9g7fCgFp1ZGtM3ON6e hDa6wSmYKdnDc90wSJZjElUoBRB+MjrsNPNZIKYDFu1S9WlAg+9zsZ+qVZg3+Wb1 oUvXDwnRV4APH+QXmdW7NyriDEFSR8FGpqz0PM52xWWLEuznpujV4IIXEj8Na6jl H+u9bMqNQJTAgqwXa7/2BfWT+DnAR3sh -----END CERTIFICATE-----Generated at Tue Nov 4 02:16:45 2025 by rpki-client