$ rpki-client -vvf rpki.apnic.net/member_repository/A918D75D/7E272F7CA68911EBA44B024FC4F9AE02/cFErPTLQXcMlQemOV1oxxTIHNkg.mft File: cFErPTLQXcMlQemOV1oxxTIHNkg.mft (raw, json) Hash identifier: eqFA/1wK6vtzmO9mm6GkY+q5DfD6lOIWwOuxWOSiAvM= Subject key identifier: 80:F6:74:C0:2C:46:8E:EC:26:5E:C5:2D:6E:AA:1B:74:3E:FA:11:B1 Authority key identifier: 70:51:2B:3D:32:D0:5D:C3:25:41:E9:8E:57:5A:31:C5:32:07:36:48 Certificate issuer: /CN=A918D75D/serialNumber=70512B3D32D05DC32541E98E575A31C532073648 Certificate serial: 065A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cFErPTLQXcMlQemOV1oxxTIHNkg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918D75D/7E272F7CA68911EBA44B024FC4F9AE02/cFErPTLQXcMlQemOV1oxxTIHNkg.mft Manifest number: 0655 Signing time: Tue 04 Nov 2025 22:42:38 +0000 Manifest this update: Tue 04 Nov 2025 22:42:38 +0000 Manifest next update: Tue 11 Nov 2025 22:42:38 +0000 Files and hashes: 1: cFErPTLQXcMlQemOV1oxxTIHNkg.crl (hash: 5IaulRbTUyVSyzlKuPWcWiCycMixndPO5GPbXLs1uDA=) 2: D0763FECA68A11EB9F23D74FC4F9AE02.roa (hash: otn7zJrk0PPbtnlH9qLQ0UvTzJRXUBW5NBaU6fJKloc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918D75D/7E272F7CA68911EBA44B024FC4F9AE02/cFErPTLQXcMlQemOV1oxxTIHNkg.crl rsync://rpki.apnic.net/member_repository/A918D75D/7E272F7CA68911EBA44B024FC4F9AE02/cFErPTLQXcMlQemOV1oxxTIHNkg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cFErPTLQXcMlQemOV1oxxTIHNkg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 22:42:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1626 (0x65a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918D75D, serialNumber=70512B3D32D05DC32541E98E575A31C532073648 Validity Not Before: Nov 4 22:42:38 2025 GMT Not After : Nov 11 22:42:38 2025 GMT Subject: CN=690a815e-0a4d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:f0:b4:f0:d7:8d:14:47:4b:54:1a:4c:0e:e8: 60:45:2a:80:c7:b3:a9:cb:32:18:dd:56:cf:87:2d: 94:75:8d:e3:a3:13:cf:83:ba:94:6f:44:50:d8:88: 8b:64:1d:66:2a:a3:dd:30:26:51:2f:49:32:bd:46: 7b:4c:08:49:43:b1:7d:3f:5c:e3:58:fa:18:93:9b: 5a:57:40:d7:d9:d3:fc:09:86:ab:7d:22:db:66:a1: f8:0a:88:3c:b2:a4:83:89:cc:e4:a7:6e:35:2a:23: 8f:6d:96:e0:80:5f:71:34:ea:0d:8c:ea:9a:f7:f7: 88:2f:45:67:6b:44:62:4e:67:63:d6:05:0f:db:00: b8:18:7c:cb:6c:11:ce:86:a6:81:20:d0:13:1b:bb: 76:ca:bd:b2:83:81:39:71:5d:69:43:20:22:0d:d9: 5d:01:17:6c:ca:86:0d:cd:fe:78:32:e2:f2:e7:a5: 5b:8c:e8:f0:7f:97:ce:3e:45:a8:6a:56:02:97:80: 44:99:3b:1f:26:5d:47:0a:d0:4d:b9:9c:ca:56:4b: 66:df:29:bc:9d:bf:e4:e6:fd:dd:c0:f6:06:ad:3e: c9:58:37:ec:85:05:3e:a9:75:8f:3c:a2:b9:3b:42: 3f:c1:8f:4f:5b:9b:10:e6:85:3e:48:b1:a2:ca:21: 7b:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:F6:74:C0:2C:46:8E:EC:26:5E:C5:2D:6E:AA:1B:74:3E:FA:11:B1 X509v3 Authority Key Identifier: keyid:70:51:2B:3D:32:D0:5D:C3:25:41:E9:8E:57:5A:31:C5:32:07:36:48 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918D75D/7E272F7CA68911EBA44B024FC4F9AE02/cFErPTLQXcMlQemOV1oxxTIHNkg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cFErPTLQXcMlQemOV1oxxTIHNkg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918D75D/7E272F7CA68911EBA44B024FC4F9AE02/cFErPTLQXcMlQemOV1oxxTIHNkg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ae:5e:d9:83:f5:b0:3f:5e:0c:0c:bc:23:6c:ad:63:70:0d:0d: 44:67:4e:1a:07:be:7e:d2:e4:f2:98:27:3f:b9:0b:f1:de:d0: 29:38:15:a8:3c:30:f5:2e:f3:25:62:e1:d5:62:43:73:59:da: eb:38:e5:75:d7:67:e6:f8:5a:e5:40:98:d9:af:01:20:9f:5b: ff:fd:98:6b:c8:cb:3a:3e:c5:e4:f5:0e:2b:f0:33:92:d0:e1: d4:cb:c5:b7:35:26:3c:b2:3a:86:fd:40:c6:b8:5d:25:59:f8: 6c:70:a1:46:33:df:11:a5:de:9b:95:5a:48:a0:12:61:68:b8: e0:1f:22:54:93:17:a4:25:2a:ef:3b:30:41:9f:05:80:1a:d5: f7:7a:64:9a:02:23:dc:b3:e5:ef:58:25:bf:e0:bd:df:00:75: ab:65:5b:0b:3e:87:7e:e0:37:68:56:8b:a1:d9:dc:89:b8:a5: 8e:76:43:f3:96:76:74:a4:6f:f1:08:91:d9:f7:84:01:67:d5: 51:cd:8e:59:3f:dd:a7:68:45:57:58:23:16:36:d5:e9:c7:d9: 05:40:8f:80:f6:9e:c1:33:bc:c9:2e:b8:e4:f3:87:e3:0a:7e: c4:c1:23:0e:80:eb:d7:6f:ff:14:7b:43:ed:c8:b3:1d:8e:4e: 3f:46:72:c9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBlowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEQ3NUQxMTAvBgNVBAUTKDcwNTEyQjNEMzJEMDVEQzMyNTQxRTk4RTU3NUEzMUM1 MzIwNzM2NDgwHhcNMjUxMTA0MjI0MjM4WhcNMjUxMTExMjI0MjM4WjAYMRYwFAYD VQQDEw02OTBhODE1ZS0wYTRkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsvC08NeNFEdLVBpMDuhgRSqAx7OpyzIY3VbPhy2UdY3joxPPg7qUb0RQ2IiL ZB1mKqPdMCZRL0kyvUZ7TAhJQ7F9P1zjWPoYk5taV0DX2dP8CYarfSLbZqH4Cog8 sqSDiczkp241KiOPbZbggF9xNOoNjOqa9/eIL0Vna0RiTmdj1gUP2wC4GHzLbBHO hqaBINATG7t2yr2yg4E5cV1pQyAiDdldARdsyoYNzf54MuLy56VbjOjwf5fOPkWo alYCl4BEmTsfJl1HCtBNuZzKVktm3ym8nb/k5v3dwPYGrT7JWDfshQU+qXWPPKK5 O0I/wY9PW5sQ5oU+SLGiyiF7+wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFID2dMAs Ro7sJl7FLW6qG3Q++hGxMB8GA1UdIwQYMBaAFHBRKz0y0F3DJUHpjldaMcUyBzZI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RDc1RC83RTI3MkY3Q0E2 ODkxMUVCQTQ0QjAyNEZDNEY5QUUwMi9jRkVyUFRMUVhjTWxRZW1PVjFveHhUSUhO a2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NGRXJQVExRWGNNbFFlbU9WMW94eFRJSE5rZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 RDc1RC83RTI3MkY3Q0E2ODkxMUVCQTQ0QjAyNEZDNEY5QUUwMi9jRkVyUFRMUVhj TWxRZW1PVjFveHhUSUhOa2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCuXtmD9bA/XgwMvCNsrWNwDQ1EZ04aB75+0uTymCc/uQvx3tApOBWo PDD1LvMlYuHVYkNzWdrrOOV112fm+FrlQJjZrwEgn1v//ZhryMs6PsXk9Q4r8DOS 0OHUy8W3NSY8sjqG/UDGuF0lWfhscKFGM98Rpd6blVpIoBJhaLjgHyJUkxekJSrv OzBBnwWAGtX3emSaAiPcs+XvWCW/4L3fAHWrZVsLPod+4DdoVouh2dyJuKWOdkPz lnZ0pG/xCJHZ94QBZ9VRzY5ZP92naEVXWCMWNtXpx9kFQI+A9p7BM7zJLrjk84fj Cn7EwSMOgOvXb/8Ue0PtyLMdjk4/RnLJ -----END CERTIFICATE-----Generated at Wed Nov 5 19:48:44 2025 by rpki-client