$ rpki-client -vvf rpki.apnic.net/member_repository/A9195661/EDC71444D5CE11ECA9DB2462C4F9AE02/FZNmkyrLwvOB-BEGIpgEpBUrNfE.mft File: FZNmkyrLwvOB-BEGIpgEpBUrNfE.mft (raw, json) Hash identifier: KVNgbPyzdaWsitKBD0u7Xciv/QPugzXm9GKVkvEliuo= Subject key identifier: 4E:73:F8:45:42:7F:F3:51:78:99:93:11:2A:C7:E2:96:26:10:85:19 Authority key identifier: 15:93:66:93:2A:CB:C2:F3:81:F8:11:06:22:98:04:A4:15:2B:35:F1 Certificate issuer: /CN=A9195661/serialNumber=159366932ACBC2F381F81106229804A4152B35F1 Certificate serial: 0358 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FZNmkyrLwvOB-BEGIpgEpBUrNfE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9195661/EDC71444D5CE11ECA9DB2462C4F9AE02/FZNmkyrLwvOB-BEGIpgEpBUrNfE.mft Manifest number: 0354 Signing time: Mon 03 Nov 2025 00:55:46 +0000 Manifest this update: Mon 03 Nov 2025 00:55:45 +0000 Manifest next update: Mon 10 Nov 2025 00:55:45 +0000 Files and hashes: 1: FZNmkyrLwvOB-BEGIpgEpBUrNfE.crl (hash: bJq3O/ji7IPqHGDNzcNvy1bBxwm12QA+pGzPZA0XbNg=) 2: 31A11606D5D411ECA6C65869C4F9AE02.roa (hash: VogHJglI9rky4AydWtAfoBxunD313LfIB0cTNRda674=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9195661/EDC71444D5CE11ECA9DB2462C4F9AE02/FZNmkyrLwvOB-BEGIpgEpBUrNfE.crl rsync://rpki.apnic.net/member_repository/A9195661/EDC71444D5CE11ECA9DB2462C4F9AE02/FZNmkyrLwvOB-BEGIpgEpBUrNfE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FZNmkyrLwvOB-BEGIpgEpBUrNfE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 00:55:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 856 (0x358) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9195661, serialNumber=159366932ACBC2F381F81106229804A4152B35F1 Validity Not Before: Nov 3 00:55:45 2025 GMT Not After : Nov 10 00:55:45 2025 GMT Subject: CN=6907fd91-1ba7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:b2:99:bf:23:7b:db:40:6e:f6:47:4e:99:1f: 4a:d5:ca:b6:f7:54:9b:9e:99:18:6d:5f:95:ef:93: 5a:8c:a8:01:77:41:d0:8c:f4:9e:11:89:a1:87:7d: 8b:3d:6c:7b:fd:59:14:2f:18:c7:64:d8:c2:30:31: 7a:9d:de:50:37:56:93:4c:8e:ef:ad:d8:22:0a:a5: 6b:1b:0f:89:d9:c5:5e:d9:ea:08:3a:f3:11:1d:af: d3:ce:f0:fd:b1:86:80:eb:e2:a0:17:9b:0d:f9:cf: ca:87:54:63:9b:0e:8d:29:21:c8:6e:9c:7e:08:8d: b4:3e:25:f0:96:30:b3:16:bd:06:b4:8b:c3:4d:10: 2b:d4:bf:d1:b6:2b:e8:88:03:68:89:3b:3a:dd:45: 8a:11:31:f2:81:b9:75:6a:20:e6:e1:65:62:78:06: 80:59:0d:a2:0d:fc:02:15:9e:04:c9:d9:6b:3c:04: 73:d0:04:bf:a6:5b:c2:6f:fa:ed:6d:71:65:2f:09: 46:5b:5d:9b:6b:42:01:0b:d4:b3:fc:99:e5:ea:03: 29:2a:3a:5e:14:ac:d8:38:e6:a2:66:40:d0:d4:fa: a4:da:73:78:8a:0a:74:62:aa:dd:44:82:ba:cc:ed: 3e:8c:0d:5e:be:a3:ef:be:1d:0f:f2:30:2e:b2:c8: 2f:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:73:F8:45:42:7F:F3:51:78:99:93:11:2A:C7:E2:96:26:10:85:19 X509v3 Authority Key Identifier: keyid:15:93:66:93:2A:CB:C2:F3:81:F8:11:06:22:98:04:A4:15:2B:35:F1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9195661/EDC71444D5CE11ECA9DB2462C4F9AE02/FZNmkyrLwvOB-BEGIpgEpBUrNfE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FZNmkyrLwvOB-BEGIpgEpBUrNfE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9195661/EDC71444D5CE11ECA9DB2462C4F9AE02/FZNmkyrLwvOB-BEGIpgEpBUrNfE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7a:0a:5b:8a:65:64:81:9c:0a:84:3b:33:b2:86:37:19:27:bc: b2:98:cc:81:94:08:d8:4b:a5:d6:e9:c7:5f:29:6b:a5:28:c3: 96:a5:85:e9:54:26:24:06:79:18:6a:f5:d5:e9:e0:27:3f:4a: 2b:b7:9a:5f:7d:cc:83:ce:65:62:87:5b:78:8d:63:cd:32:da: 5a:17:07:17:65:ec:b5:01:26:fd:4f:a2:f0:21:48:cd:6e:85: fe:14:a9:1c:82:cf:37:3f:44:32:5d:23:38:bc:2f:6b:1d:c0: ce:9c:55:2f:26:9d:46:9d:02:fc:d3:45:e1:fb:c0:13:7a:7f: 9e:da:fa:82:db:c9:a2:5c:b4:ff:4d:02:a9:51:6b:d9:47:32: 84:2f:77:29:d3:fe:db:38:3e:f1:54:06:81:40:bd:ea:b3:fe: e7:07:c1:71:a6:50:c7:c3:35:a9:83:e9:8f:48:4c:25:41:1d: 16:b9:02:23:fb:b5:80:4d:20:80:8d:be:f8:cc:f6:59:37:89: f2:b6:c9:7e:a9:cf:80:a2:f6:46:42:76:29:6a:ec:85:dd:d9: 52:87:1d:d3:19:7e:3c:80:b3:fa:c8:7a:70:ff:5f:ae:aa:58: b2:d1:a6:4d:cd:01:5d:d9:14:f0:ea:f4:42:b6:0d:09:85:1d: 9d:4b:64:c8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA1gwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTU2NjExMTAvBgNVBAUTKDE1OTM2NjkzMkFDQkMyRjM4MUY4MTEwNjIyOTgwNEE0 MTUyQjM1RjEwHhcNMjUxMTAzMDA1NTQ1WhcNMjUxMTEwMDA1NTQ1WjAYMRYwFAYD VQQDEw02OTA3ZmQ5MS0xYmE3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0LKZvyN720Bu9kdOmR9K1cq291SbnpkYbV+V75NajKgBd0HQjPSeEYmhh32L PWx7/VkULxjHZNjCMDF6nd5QN1aTTI7vrdgiCqVrGw+J2cVe2eoIOvMRHa/TzvD9 sYaA6+KgF5sN+c/Kh1Rjmw6NKSHIbpx+CI20PiXwljCzFr0GtIvDTRAr1L/Rtivo iANoiTs63UWKETHygbl1aiDm4WVieAaAWQ2iDfwCFZ4EydlrPARz0AS/plvCb/rt bXFlLwlGW12ba0IBC9Sz/Jnl6gMpKjpeFKzYOOaiZkDQ1Pqk2nN4igp0YqrdRIK6 zO0+jA1evqPvvh0P8jAussgvuwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFE5z+EVC f/NReJmTESrH4pYmEIUZMB8GA1UdIwQYMBaAFBWTZpMqy8LzgfgRBiKYBKQVKzXx MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NTY2MS9FREM3MTQ0NEQ1 Q0UxMUVDQTlEQjI0NjJDNEY5QUUwMi9GWk5ta3lyTHd2T0ItQkVHSXBnRXBCVXJO ZkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZaTm1reXJMd3ZPQi1CRUdJcGdFcEJVck5mRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NTY2MS9FREM3MTQ0NEQ1Q0UxMUVDQTlEQjI0NjJDNEY5QUUwMi9GWk5ta3lyTHd2 T0ItQkVHSXBnRXBCVXJOZkUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB6CluKZWSBnAqEOzOyhjcZJ7yymMyBlAjYS6XW6cdfKWulKMOWpYXp VCYkBnkYavXV6eAnP0ort5pffcyDzmVih1t4jWPNMtpaFwcXZey1ASb9T6LwIUjN boX+FKkcgs83P0QyXSM4vC9rHcDOnFUvJp1GnQL800Xh+8ATen+e2vqC28miXLT/ TQKpUWvZRzKEL3cp0/7bOD7xVAaBQL3qs/7nB8FxplDHwzWpg+mPSEwlQR0WuQIj +7WATSCAjb74zPZZN4nytsl+qc+AovZGQnYpauyF3dlShx3TGX48gLP6yHpw/1+u qliy0aZNzQFd2RTw6vRCtg0JhR2dS2TI -----END CERTIFICATE-----Generated at Tue Nov 4 12:34:52 2025 by rpki-client