$ rpki-client -vvf rpki.apnic.net/member_repository/A918B0C4/F3A872DA7A0211EDBB36DB2EC4F9AE02/FfCkBoXmmmQdtw6Cv3gKmr_j8Vk.mft File: FfCkBoXmmmQdtw6Cv3gKmr_j8Vk.mft (raw, json) Hash identifier: Eq7r14EDnYcrwn2gYQvTQPjqq03cCp1XJIk/pbONhwc= Subject key identifier: 7A:71:12:96:DF:D9:C9:08:91:A7:3E:CC:0A:3F:AF:1C:33:C1:80:F3 Authority key identifier: 15:F0:A4:06:85:E6:9A:64:1D:B7:0E:82:BF:78:0A:9A:BF:E3:F1:59 Certificate issuer: /CN=A918B0C4/serialNumber=15F0A40685E69A641DB70E82BF780A9ABFE3F159 Certificate serial: 0227 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FfCkBoXmmmQdtw6Cv3gKmr_j8Vk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918B0C4/F3A872DA7A0211EDBB36DB2EC4F9AE02/FfCkBoXmmmQdtw6Cv3gKmr_j8Vk.mft Manifest number: 0221 Signing time: Mon 03 Nov 2025 02:05:53 +0000 Manifest this update: Mon 03 Nov 2025 02:05:53 +0000 Manifest next update: Mon 10 Nov 2025 02:05:53 +0000 Files and hashes: 1: FfCkBoXmmmQdtw6Cv3gKmr_j8Vk.crl (hash: rlbWRSaQi+QmnBmsIotY+2pruX7PZkrANn26gf7RqD8=) 2: F59959807A0511EDA112EF32C4F9AE02.roa (hash: hlcOiwDISzas5tiOnv5T5pSK2UpZ6cfJveUb3LnTEYo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918B0C4/F3A872DA7A0211EDBB36DB2EC4F9AE02/FfCkBoXmmmQdtw6Cv3gKmr_j8Vk.crl rsync://rpki.apnic.net/member_repository/A918B0C4/F3A872DA7A0211EDBB36DB2EC4F9AE02/FfCkBoXmmmQdtw6Cv3gKmr_j8Vk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FfCkBoXmmmQdtw6Cv3gKmr_j8Vk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 02:05:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 551 (0x227) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918B0C4, serialNumber=15F0A40685E69A641DB70E82BF780A9ABFE3F159 Validity Not Before: Nov 3 02:05:53 2025 GMT Not After : Nov 10 02:05:53 2025 GMT Subject: CN=69080e01-a1a0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:4d:f4:c2:b2:5a:10:25:11:81:e0:cb:94:e4: 48:fd:9e:a4:11:36:e8:9d:42:6f:b3:0b:5d:23:c2: 74:e9:55:e9:0d:d9:6e:39:f6:99:d2:57:24:e6:e9: 34:dc:6e:77:2e:99:0b:60:02:32:f8:e1:32:5c:e2: 53:1f:75:d8:77:a5:90:a9:72:38:c2:f4:87:bd:1e: 4b:18:db:e3:86:16:64:2b:83:fa:b1:fa:8c:9a:0b: 2e:ac:9b:f6:85:ac:ee:3b:7a:95:cc:d5:9a:1c:fe: a9:c4:c7:80:e3:b0:06:d7:d2:56:ac:41:1a:6a:b0: 80:d5:e5:5b:6d:99:66:e3:fb:4f:a2:96:e9:3c:05: 36:d9:7d:16:77:a5:73:86:66:21:ef:3e:15:06:86: cc:56:0d:16:23:dc:32:25:72:0e:94:32:67:76:44: c0:5e:0c:fb:eb:7b:8a:49:40:73:23:74:a0:12:eb: f2:b4:1f:3c:fc:82:e8:d0:c1:3e:41:b8:c2:f5:c1: 70:ac:04:2c:94:33:ca:39:32:0c:26:4e:79:92:df: 58:a1:61:e9:84:0a:a7:65:7e:2b:d7:40:8a:21:ea: e3:e2:56:89:b3:d4:aa:8e:80:a4:f0:0c:2e:9e:3a: 36:7e:7f:1b:cd:80:91:bb:c2:1e:dd:30:16:fb:cb: b7:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:71:12:96:DF:D9:C9:08:91:A7:3E:CC:0A:3F:AF:1C:33:C1:80:F3 X509v3 Authority Key Identifier: keyid:15:F0:A4:06:85:E6:9A:64:1D:B7:0E:82:BF:78:0A:9A:BF:E3:F1:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918B0C4/F3A872DA7A0211EDBB36DB2EC4F9AE02/FfCkBoXmmmQdtw6Cv3gKmr_j8Vk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FfCkBoXmmmQdtw6Cv3gKmr_j8Vk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918B0C4/F3A872DA7A0211EDBB36DB2EC4F9AE02/FfCkBoXmmmQdtw6Cv3gKmr_j8Vk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b1:bd:71:9b:60:65:a9:c5:cd:4a:98:b7:4c:24:f2:e2:d4:f5: c7:79:0f:49:19:6f:08:7d:86:72:a4:82:2b:2b:f4:a9:18:bc: 1e:9f:b1:9f:49:9c:42:da:81:5b:b4:c9:6b:7e:c6:5e:5e:76: 35:bc:84:e0:8b:25:fc:9a:63:7b:5a:cd:da:ea:1e:d6:f8:a9: 23:53:47:67:88:79:87:c3:6a:8d:1e:11:21:f3:b7:6b:dc:07: 8f:4c:56:92:25:d1:aa:a6:2e:6f:6d:5a:58:9e:4d:67:b6:d8: 76:d7:6d:ed:cc:ae:f5:72:f4:b3:1f:d1:79:21:64:67:ef:1e: 23:a5:02:4d:03:e9:1e:67:53:16:5e:37:64:85:2f:b4:39:76: f1:7a:97:3a:f5:6a:f3:9f:09:ce:6a:31:14:7f:34:1d:c7:05: ad:6a:74:8b:dc:f6:8e:31:78:d5:a8:d0:58:0e:fb:27:5b:62: 37:56:e0:61:6d:19:33:18:0f:8e:b3:e5:5d:a8:ec:30:98:a8: 1a:8a:4c:d3:e7:c2:2c:20:e5:c4:ff:37:cb:ba:c5:7f:fe:0d: 05:6b:8e:77:7b:a1:6f:d7:33:d7:74:0a:cb:ca:7d:85:b6:79: b5:2b:e6:37:55:0c:5e:9b:af:01:31:02:8e:1b:aa:28:0e:54: a8:78:fa:c1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAicwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEIwQzQxMTAvBgNVBAUTKDE1RjBBNDA2ODVFNjlBNjQxREI3MEU4MkJGNzgwQTlB QkZFM0YxNTkwHhcNMjUxMTAzMDIwNTUzWhcNMjUxMTEwMDIwNTUzWjAYMRYwFAYD VQQDEw02OTA4MGUwMS1hMWEwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7U30wrJaECURgeDLlORI/Z6kETbonUJvswtdI8J06VXpDdluOfaZ0lck5uk0 3G53LpkLYAIy+OEyXOJTH3XYd6WQqXI4wvSHvR5LGNvjhhZkK4P6sfqMmgsurJv2 hazuO3qVzNWaHP6pxMeA47AG19JWrEEaarCA1eVbbZlm4/tPopbpPAU22X0Wd6Vz hmYh7z4VBobMVg0WI9wyJXIOlDJndkTAXgz763uKSUBzI3SgEuvytB88/ILo0ME+ QbjC9cFwrAQslDPKOTIMJk55kt9YoWHphAqnZX4r10CKIerj4laJs9SqjoCk8Awu njo2fn8bzYCRu8Ie3TAW+8u37QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHpxEpbf 2ckIkac+zAo/rxwzwYDzMB8GA1UdIwQYMBaAFBXwpAaF5ppkHbcOgr94Cpq/4/FZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4QjBDNC9GM0E4NzJEQTdB MDIxMUVEQkIzNkRCMkVDNEY5QUUwMi9GZkNrQm9YbW1tUWR0dzZDdjNnS21yX2o4 VmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZmQ2tCb1htbW1RZHR3NkN2M2dLbXJfajhWay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 QjBDNC9GM0E4NzJEQTdBMDIxMUVEQkIzNkRCMkVDNEY5QUUwMi9GZkNrQm9YbW1t UWR0dzZDdjNnS21yX2o4VmsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCxvXGbYGWpxc1KmLdMJPLi1PXHeQ9JGW8IfYZypIIrK/SpGLwen7Gf SZxC2oFbtMlrfsZeXnY1vITgiyX8mmN7Ws3a6h7W+KkjU0dniHmHw2qNHhEh87dr 3AePTFaSJdGqpi5vbVpYnk1ntth2123tzK71cvSzH9F5IWRn7x4jpQJNA+keZ1MW XjdkhS+0OXbxepc69WrznwnOajEUfzQdxwWtanSL3PaOMXjVqNBYDvsnW2I3VuBh bRkzGA+Os+VdqOwwmKgaikzT58IsIOXE/zfLusV//g0Fa453e6Fv1zPXdArLyn2F tnm1K+Y3VQxem68BMQKOG6ooDlSoePrB -----END CERTIFICATE-----Generated at Tue Nov 4 02:14:28 2025 by rpki-client