$ rpki-client -vvf rpki.apnic.net/member_repository/A918E951/51BD7DDA623A11F0A7E2760BC4F9AE02/FbuDXdtfKLfj9RKIflfp_jFzh0Q.mft File: FbuDXdtfKLfj9RKIflfp_jFzh0Q.mft (raw, json) Hash identifier: mDE1EQAQG+qBzmP/7uUJZQIc6tpbwDkMNA/QpWwHRTo= Subject key identifier: 2F:64:AB:E7:B9:D9:ED:58:A5:5D:C4:ED:29:40:F3:3C:49:AA:3C:AC Authority key identifier: 15:BB:83:5D:DB:5F:28:B7:E3:F5:12:88:7E:57:E9:FE:31:73:87:44 Certificate issuer: /CN=A918E951/serialNumber=15BB835DDB5F28B7E3F512887E57E9FE31738744 Certificate serial: 3B Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FbuDXdtfKLfj9RKIflfp_jFzh0Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918E951/51BD7DDA623A11F0A7E2760BC4F9AE02/FbuDXdtfKLfj9RKIflfp_jFzh0Q.mft Manifest number: 3A Signing time: Mon 03 Nov 2025 07:32:21 +0000 Manifest this update: Mon 03 Nov 2025 07:32:21 +0000 Manifest next update: Mon 10 Nov 2025 07:32:21 +0000 Files and hashes: 1: FbuDXdtfKLfj9RKIflfp_jFzh0Q.crl (hash: hXPNc0dsiL95iB8RyPNY0h7GhFAVhLgJ6PmtiT58pEk=) 2: A1E831AA623B11F0BEB49510C4F9AE02.roa (hash: lW7fDVCe8bhLbHVbi9D8490xI/Aio6OMPBNi0xrKgHI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918E951/51BD7DDA623A11F0A7E2760BC4F9AE02/FbuDXdtfKLfj9RKIflfp_jFzh0Q.crl rsync://rpki.apnic.net/member_repository/A918E951/51BD7DDA623A11F0A7E2760BC4F9AE02/FbuDXdtfKLfj9RKIflfp_jFzh0Q.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FbuDXdtfKLfj9RKIflfp_jFzh0Q.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 07:32:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59 (0x3b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918E951, serialNumber=15BB835DDB5F28B7E3F512887E57E9FE31738744 Validity Not Before: Nov 3 07:32:21 2025 GMT Not After : Nov 10 07:32:21 2025 GMT Subject: CN=69085a85-ed0a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:3b:ac:ff:43:34:d2:9a:bb:58:ec:db:40:8f: 08:c2:b8:b9:bd:47:03:6c:62:c4:55:d4:6f:07:e1: ab:f7:3c:ec:5d:04:39:f8:61:1d:c7:a7:bf:ad:b0: 8f:2c:b9:31:6f:09:af:c9:15:5b:ca:68:98:b1:3f: 32:99:d1:26:53:e5:6e:b0:24:30:19:b0:15:d0:69: 2f:d1:9b:b7:81:60:00:f6:c1:fe:1d:c6:03:61:86: 4c:df:b7:1d:03:6e:19:b9:3c:0a:1f:05:e2:7d:12: 5f:33:fe:40:f6:d2:e2:26:3a:d2:8f:46:d8:32:ac: 60:59:53:df:32:a8:99:d4:52:d7:f4:9e:5a:9d:cd: 57:c9:4c:43:96:73:5c:dc:fd:69:70:94:86:52:42: 3a:db:44:a8:eb:e3:12:e7:a6:ab:d2:99:24:83:be: 28:ea:9f:0e:75:76:98:c1:fb:84:98:87:c7:ac:54: 23:80:6d:4f:f3:92:f7:16:05:2b:70:83:13:cd:25: a1:1d:12:24:88:34:07:55:dc:2d:6f:3a:9b:3b:80: 0b:52:1b:da:94:31:4c:f9:29:c7:d7:53:b4:9e:fd: 0f:c3:0f:73:5a:8f:ff:80:c3:1d:28:89:10:60:5e: c8:ee:43:ba:73:f5:c5:61:f3:9f:36:e6:bd:68:ab: d9:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:64:AB:E7:B9:D9:ED:58:A5:5D:C4:ED:29:40:F3:3C:49:AA:3C:AC X509v3 Authority Key Identifier: keyid:15:BB:83:5D:DB:5F:28:B7:E3:F5:12:88:7E:57:E9:FE:31:73:87:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918E951/51BD7DDA623A11F0A7E2760BC4F9AE02/FbuDXdtfKLfj9RKIflfp_jFzh0Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FbuDXdtfKLfj9RKIflfp_jFzh0Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918E951/51BD7DDA623A11F0A7E2760BC4F9AE02/FbuDXdtfKLfj9RKIflfp_jFzh0Q.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption be:96:14:82:56:c8:eb:33:b3:80:9d:97:c6:af:43:9b:6f:da: 9a:f4:90:56:69:2b:59:c7:4f:61:f2:b8:42:55:fc:eb:4b:73: d7:e5:be:36:f3:b2:f5:86:4d:d5:90:a1:2f:b5:f6:ad:47:b3: 00:b6:a2:9a:dd:eb:42:8b:4e:53:db:be:e1:83:5a:5e:c3:2f: c1:36:e6:a5:5f:f9:94:f7:c7:67:eb:e8:68:12:75:f4:a2:5c: cb:09:90:54:1b:e9:0c:cc:1a:62:05:ba:3e:3d:b6:ab:98:03: 20:4a:d2:15:5e:f9:b4:89:f1:75:57:cb:7c:29:70:ea:03:d1: 3b:7d:ce:29:02:26:a3:2d:29:c0:83:4c:35:2e:48:26:76:ae: 29:77:4d:44:05:33:31:96:ad:78:24:4d:e5:5a:a2:91:e8:de: af:97:54:e4:99:18:23:3e:de:7a:2d:be:04:64:5b:4a:6a:21: 23:52:fd:81:cb:96:59:81:6b:76:14:1a:02:f5:31:e9:ff:00: 8f:5c:2b:fb:e1:cf:52:56:ac:f9:3d:59:15:17:89:53:22:bd: 5b:fb:cd:78:5e:98:ac:55:46:17:5b:4d:c5:90:e2:cd:96:49: 75:66:4e:db:f3:80:e6:9d:fe:d3:85:e0:11:6f:c4:d9:00:6e: 89:3b:b8:96 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBOzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE4 RTk1MTExMC8GA1UEBRMoMTVCQjgzNUREQjVGMjhCN0UzRjUxMjg4N0U1N0U5RkUz MTczODc0NDAeFw0yNTExMDMwNzMyMjFaFw0yNTExMTAwNzMyMjFaMBgxFjAUBgNV BAMTDTY5MDg1YTg1LWVkMGEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDhO6z/QzTSmrtY7NtAjwjCuLm9RwNsYsRV1G8H4av3POxdBDn4YR3Hp7+tsI8s uTFvCa/JFVvKaJixPzKZ0SZT5W6wJDAZsBXQaS/Rm7eBYAD2wf4dxgNhhkzftx0D bhm5PAofBeJ9El8z/kD20uImOtKPRtgyrGBZU98yqJnUUtf0nlqdzVfJTEOWc1zc /WlwlIZSQjrbRKjr4xLnpqvSmSSDvijqnw51dpjB+4SYh8esVCOAbU/zkvcWBStw gxPNJaEdEiSINAdV3C1vOps7gAtSG9qUMUz5KcfXU7Se/Q/DD3Naj/+Awx0oiRBg XsjuQ7pz9cVh85825r1oq9k9AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUL2Sr57nZ 7VilXcTtKUDzPEmqPKwwHwYDVR0jBBgwFoAUFbuDXdtfKLfj9RKIflfp/jFzh0Qw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MThFOTUxLzUxQkQ3RERBNjIz QTExRjBBN0UyNzYwQkM0RjlBRTAyL0ZidURYZHRmS0xmajlSS0lmbGZwX2pGemgw US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvRmJ1RFhkdGZLTGZqOVJLSWZsZnBfakZ6aDBRLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MThF OTUxLzUxQkQ3RERBNjIzQTExRjBBN0UyNzYwQkM0RjlBRTAyL0ZidURYZHRmS0xm ajlSS0lmbGZwX2pGemgwUS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAL6WFIJWyOszs4Cdl8avQ5tv2pr0kFZpK1nHT2HyuEJV/OtLc9flvjbz svWGTdWQoS+19q1HswC2oprd60KLTlPbvuGDWl7DL8E25qVf+ZT3x2fr6GgSdfSi XMsJkFQb6QzMGmIFuj49tquYAyBK0hVe+bSJ8XVXy3wpcOoD0Tt9zikCJqMtKcCD TDUuSCZ2ril3TUQFMzGWrXgkTeVaopHo3q+XVOSZGCM+3notvgRkW0pqISNS/YHL llmBa3YUGgL1Men/AI9cK/vhz1JWrPk9WRUXiVMivVv7zXhemKxVRhdbTcWQ4s2W SXVmTtvzgOad/tOF4BFvxNkAbok7uJY= -----END CERTIFICATE-----Generated at Tue Nov 4 21:36:04 2025 by rpki-client