$ rpki-client -vvf rpki.apnic.net/member_repository/A919542A/5BE418828EE511F090902D68C4F9AE02/ffgmqR46CHq9KaYomhI7qR8RMF8.mft File: ffgmqR46CHq9KaYomhI7qR8RMF8.mft (raw, json) Hash identifier: kjbjYt0toLhBc2bHxw+ZppzkJ07u5tY8qYwvKdOIaf8= Subject key identifier: F5:73:7C:CC:28:2D:97:E7:37:92:5A:B6:D7:9F:5F:73:5C:10:43:C3 Authority key identifier: 7D:F8:26:A9:1E:3A:08:7A:BD:29:A6:28:9A:12:3B:A9:1F:11:30:5F Certificate issuer: /CN=A919542A/serialNumber=7DF826A91E3A087ABD29A6289A123BA91F11305F Certificate serial: 1C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ffgmqR46CHq9KaYomhI7qR8RMF8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919542A/5BE418828EE511F090902D68C4F9AE02/ffgmqR46CHq9KaYomhI7qR8RMF8.mft Manifest number: 1B Signing time: Mon 03 Nov 2025 07:48:34 +0000 Manifest this update: Mon 03 Nov 2025 07:48:33 +0000 Manifest next update: Mon 10 Nov 2025 07:48:33 +0000 Files and hashes: 1: ffgmqR46CHq9KaYomhI7qR8RMF8.crl (hash: QW7W58wy7wSWGyXVYubB+k/k+9YDPQOc/vfFB4EyG3o=) 2: FC15F5FA8EE511F0BFFDD274C4F9AE02.roa (hash: zt0uCLgW+WWAHldwRnw7MoXPpXtobKJ/yD9+5SdfbTo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919542A/5BE418828EE511F090902D68C4F9AE02/ffgmqR46CHq9KaYomhI7qR8RMF8.crl rsync://rpki.apnic.net/member_repository/A919542A/5BE418828EE511F090902D68C4F9AE02/ffgmqR46CHq9KaYomhI7qR8RMF8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ffgmqR46CHq9KaYomhI7qR8RMF8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 07:48:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28 (0x1c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919542A, serialNumber=7DF826A91E3A087ABD29A6289A123BA91F11305F Validity Not Before: Nov 3 07:48:33 2025 GMT Not After : Nov 10 07:48:33 2025 GMT Subject: CN=69085e51-6854 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:4e:00:53:bd:24:32:a8:c9:f8:62:bb:0b:2b: 74:a6:26:50:71:9a:d5:a2:8b:80:66:14:e8:bf:b8: 1d:28:cd:71:cf:35:24:3c:5b:a0:9c:ab:f1:d2:78: 43:77:43:a6:93:d0:6d:f8:e7:1e:68:4e:ee:a8:3d: 5a:45:4f:d9:ba:cb:33:47:12:f9:57:5d:dd:f0:5e: bb:5e:7c:54:bb:82:18:ec:6a:16:91:a7:d0:b6:4e: d0:c2:34:88:0b:11:a6:92:dd:17:cd:f5:68:43:42: ed:74:12:f5:ed:64:94:49:02:6a:87:cf:cd:31:f7: 7e:1b:95:dc:e4:d0:1e:6f:c4:f8:bf:ef:33:dd:2a: 23:6a:a3:11:73:9d:77:e1:b6:27:94:5d:24:f8:33: 89:82:48:49:60:28:cf:fd:94:61:a1:be:1d:16:db: 66:01:05:f9:31:cd:51:c0:29:19:0f:3a:cf:e2:dd: 2f:93:9d:de:18:bf:11:0c:85:18:d4:9f:50:8d:a1: a8:e7:30:86:cd:3d:f9:ba:33:34:d4:3b:97:32:67: 0a:3a:49:93:71:e1:84:bb:26:ba:08:dd:53:e6:35: 2f:46:35:da:54:2d:05:6e:8c:05:d5:4e:40:ad:02: 81:cc:00:c8:b0:f6:1d:d2:e7:86:f1:94:f8:a1:f7: a7:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:73:7C:CC:28:2D:97:E7:37:92:5A:B6:D7:9F:5F:73:5C:10:43:C3 X509v3 Authority Key Identifier: keyid:7D:F8:26:A9:1E:3A:08:7A:BD:29:A6:28:9A:12:3B:A9:1F:11:30:5F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919542A/5BE418828EE511F090902D68C4F9AE02/ffgmqR46CHq9KaYomhI7qR8RMF8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ffgmqR46CHq9KaYomhI7qR8RMF8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919542A/5BE418828EE511F090902D68C4F9AE02/ffgmqR46CHq9KaYomhI7qR8RMF8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a2:01:7f:b8:77:ad:ff:42:3c:21:af:f9:f1:f1:a3:1f:55:d1: 5b:99:9b:a4:4e:d1:8b:3f:a5:ab:de:db:8b:b0:00:fc:dd:ba: eb:cd:aa:1d:c3:56:a6:11:8b:2d:7f:d9:0d:2d:69:ae:70:91: 5f:14:af:43:e5:fb:6a:e9:a9:62:d9:87:19:2b:1d:a4:42:9b: c0:ae:55:a4:e7:0e:20:bc:04:79:bc:4e:15:63:5b:7f:17:36: f0:e2:97:d7:e7:25:9d:57:7e:34:87:7a:89:0d:fd:d4:b1:91: b6:90:74:f6:d1:00:a2:8f:46:e8:8f:64:31:95:ac:fe:bc:0b: a1:15:cf:75:13:94:2f:3f:3e:89:9e:82:08:ef:14:d0:a0:5a: 51:65:72:ac:a6:71:52:c9:b3:97:14:3f:17:d8:06:98:03:fb: f7:7f:60:9c:6e:93:78:cc:c9:d2:e6:0c:a9:2f:bd:16:aa:57: 6f:db:c4:5a:10:9d:0a:9e:96:9b:40:bd:2d:70:8d:de:00:67: d5:6d:67:83:79:de:16:d4:5a:28:f7:5d:ca:8e:bc:84:0e:3b: 8b:28:9a:92:fa:39:8e:02:65:44:c1:a2:08:0a:ac:7a:0f:4c: 48:06:46:f3:7c:ea:a3:ba:56:66:43:ba:6c:d9:e6:81:3e:8f: e0:4b:dc:8a -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBHDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE5 NTQyQTExMC8GA1UEBRMoN0RGODI2QTkxRTNBMDg3QUJEMjlBNjI4OUExMjNCQTkx RjExMzA1RjAeFw0yNTExMDMwNzQ4MzNaFw0yNTExMTAwNzQ4MzNaMBgxFjAUBgNV BAMTDTY5MDg1ZTUxLTY4NTQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCuTgBTvSQyqMn4YrsLK3SmJlBxmtWii4BmFOi/uB0ozXHPNSQ8W6Ccq/HSeEN3 Q6aT0G345x5oTu6oPVpFT9m6yzNHEvlXXd3wXrtefFS7ghjsahaRp9C2TtDCNIgL EaaS3RfN9WhDQu10EvXtZJRJAmqHz80x934bldzk0B5vxPi/7zPdKiNqoxFznXfh tieUXST4M4mCSElgKM/9lGGhvh0W22YBBfkxzVHAKRkPOs/i3S+Tnd4YvxEMhRjU n1CNoajnMIbNPfm6MzTUO5cyZwo6SZNx4YS7JroI3VPmNS9GNdpULQVujAXVTkCt AoHMAMiw9h3S54bxlPih96erAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU9XN8zCgt l+c3klq2159fc1wQQ8MwHwYDVR0jBBgwFoAUffgmqR46CHq9KaYomhI7qR8RMF8w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTk1NDJBLzVCRTQxODgyOEVF NTExRjA5MDkwMkQ2OEM0RjlBRTAyL2ZmZ21xUjQ2Q0hxOUthWW9taEk3cVI4Uk1G OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvZmZnbXFSNDZDSHE5S2FZb21oSTdxUjhSTUY4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTk1 NDJBLzVCRTQxODgyOEVFNTExRjA5MDkwMkQ2OEM0RjlBRTAyL2ZmZ21xUjQ2Q0hx OUthWW9taEk3cVI4Uk1GOC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAKIBf7h3rf9CPCGv+fHxox9V0VuZm6RO0Ys/pave24uwAPzduuvNqh3D VqYRiy1/2Q0taa5wkV8Ur0Pl+2rpqWLZhxkrHaRCm8CuVaTnDiC8BHm8ThVjW38X NvDil9fnJZ1XfjSHeokN/dSxkbaQdPbRAKKPRuiPZDGVrP68C6EVz3UTlC8/Pome ggjvFNCgWlFlcqymcVLJs5cUPxfYBpgD+/d/YJxuk3jMydLmDKkvvRaqV2/bxFoQ nQqelptAvS1wjd4AZ9VtZ4N53hbUWij3XcqOvIQOO4sompL6OY4CZUTBoggKrHoP TEgGRvN86qO6VmZDumzZ5oE+j+BL3Io= -----END CERTIFICATE-----Generated at Wed Nov 5 05:37:40 2025 by rpki-client