$ rpki-client -vvf rpki.apnic.net/member_repository/A91A4179/43E4AF26B95111EBAA60CD3CC4F9AE02/FkHRP62KIKsKlPYlrtoQa-Kmbhc.mft File: FkHRP62KIKsKlPYlrtoQa-Kmbhc.mft (raw, json) Hash identifier: 32VFQ8Nhx/XNsVHXSaxMr2Rje4iu85/eDX144jjCcSw= Subject key identifier: 90:33:85:AE:D2:C2:9F:AA:BB:09:D1:EB:89:7D:E5:EA:91:95:73:3C Authority key identifier: 16:41:D1:3F:AD:8A:20:AB:0A:94:F6:25:AE:DA:10:6B:E2:A6:6E:17 Certificate issuer: /CN=A91A4179/serialNumber=1641D13FAD8A20AB0A94F625AEDA106BE2A66E17 Certificate serial: 0645 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FkHRP62KIKsKlPYlrtoQa-Kmbhc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A4179/43E4AF26B95111EBAA60CD3CC4F9AE02/FkHRP62KIKsKlPYlrtoQa-Kmbhc.mft Manifest number: 0632 Signing time: Tue 04 Nov 2025 22:50:19 +0000 Manifest this update: Tue 04 Nov 2025 22:50:19 +0000 Manifest next update: Tue 11 Nov 2025 22:50:19 +0000 Files and hashes: 1: FkHRP62KIKsKlPYlrtoQa-Kmbhc.crl (hash: x3tWUO2GFCrsjvu03h8LZEW2N+X7+YRr430qp/C6cpU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A4179/43E4AF26B95111EBAA60CD3CC4F9AE02/FkHRP62KIKsKlPYlrtoQa-Kmbhc.crl rsync://rpki.apnic.net/member_repository/A91A4179/43E4AF26B95111EBAA60CD3CC4F9AE02/FkHRP62KIKsKlPYlrtoQa-Kmbhc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FkHRP62KIKsKlPYlrtoQa-Kmbhc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 22:50:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1605 (0x645) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A4179, serialNumber=1641D13FAD8A20AB0A94F625AEDA106BE2A66E17 Validity Not Before: Nov 4 22:50:19 2025 GMT Not After : Nov 11 22:50:19 2025 GMT Subject: CN=690a832b-bb8d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:6d:75:b9:02:e5:56:f3:34:36:ae:ff:43:6b: 39:33:78:75:bb:7a:18:a6:12:fe:dd:1a:84:1c:01: 5a:19:82:77:fe:18:94:7a:30:58:90:28:82:ec:2b: 56:0c:b2:6e:94:0f:35:34:eb:b2:cf:b0:c2:73:be: e0:d2:bc:a0:3a:65:47:a1:90:90:05:12:f5:bb:cd: b9:0f:f6:ce:8d:7b:32:8e:8d:35:2b:01:f0:4a:2d: 45:47:c4:57:cf:2b:62:14:9f:a7:89:b1:b5:86:7a: 96:2b:7f:a0:ff:89:0a:f5:18:bc:13:b8:a9:c1:4b: b4:48:98:6c:90:75:ae:ba:06:75:4f:13:d3:d6:d6: 02:3a:7d:92:13:6a:eb:6d:82:fe:f6:32:94:2d:f6: 30:e6:f3:c8:1a:01:f8:0f:24:01:17:09:12:33:43: 6e:b5:05:de:4a:7f:ec:70:53:2e:b4:b8:01:4b:dd: cc:34:04:b4:03:4b:1e:bd:1a:24:f5:01:09:c3:c4: 1f:06:87:69:1d:f6:68:9a:57:02:7a:d6:8d:15:3d: 65:c6:ba:c0:4a:da:e9:64:79:66:04:29:20:6b:4c: 19:d0:e4:09:53:81:35:fa:74:d6:93:5b:d3:2a:d6: 34:3d:30:d1:5e:fa:e3:ab:3e:10:1b:63:d3:48:76: 72:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:33:85:AE:D2:C2:9F:AA:BB:09:D1:EB:89:7D:E5:EA:91:95:73:3C X509v3 Authority Key Identifier: keyid:16:41:D1:3F:AD:8A:20:AB:0A:94:F6:25:AE:DA:10:6B:E2:A6:6E:17 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A4179/43E4AF26B95111EBAA60CD3CC4F9AE02/FkHRP62KIKsKlPYlrtoQa-Kmbhc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FkHRP62KIKsKlPYlrtoQa-Kmbhc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A4179/43E4AF26B95111EBAA60CD3CC4F9AE02/FkHRP62KIKsKlPYlrtoQa-Kmbhc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8e:9c:29:3d:89:54:65:82:18:47:6c:a4:ee:91:de:79:5b:6f: 1c:48:ed:c7:b9:ae:72:b7:98:ff:5c:96:5e:ef:24:64:79:75: c9:80:58:6a:81:ae:c9:eb:26:a0:2c:16:d1:3d:2b:ad:a5:53: a3:61:f1:14:09:b5:74:5e:5c:8d:90:f2:04:ab:77:58:45:bd: cb:83:10:f0:9f:ad:e4:29:7a:11:51:a3:cc:ea:23:a8:f7:76: a0:6c:d6:f6:8d:73:f8:33:f5:8d:e2:67:39:d3:cc:c2:2c:a7: 92:4d:04:2c:81:56:13:59:0c:7c:05:4f:ea:3e:6b:43:8f:63: 69:9b:90:15:99:d0:61:34:04:96:e4:40:07:21:0c:ca:d6:6a: 88:b5:c8:19:5b:e4:77:4c:44:fe:06:5f:f9:cf:91:9e:5b:b6: fa:5e:07:e5:58:ce:e6:3f:ed:55:f5:85:06:c1:97:24:39:cd: f8:2e:bf:6c:30:e5:cc:f0:63:6c:a1:13:e9:cc:69:f5:21:ab: c4:f9:e6:ba:43:22:be:d5:39:12:ce:e4:b5:8b:27:ab:c6:6a: 8b:ce:e6:89:ac:50:e6:33:b1:b6:e6:01:e0:79:61:6f:88:65: b2:70:53:e1:60:c5:23:90:79:aa:b6:57:f0:ca:6b:d5:02:62: 9d:46:50:55 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBkUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTQxNzkxMTAvBgNVBAUTKDE2NDFEMTNGQUQ4QTIwQUIwQTk0RjYyNUFFREExMDZC RTJBNjZFMTcwHhcNMjUxMTA0MjI1MDE5WhcNMjUxMTExMjI1MDE5WjAYMRYwFAYD VQQDEw02OTBhODMyYi1iYjhkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu211uQLlVvM0Nq7/Q2s5M3h1u3oYphL+3RqEHAFaGYJ3/hiUejBYkCiC7CtW DLJulA81NOuyz7DCc77g0rygOmVHoZCQBRL1u825D/bOjXsyjo01KwHwSi1FR8RX zytiFJ+nibG1hnqWK3+g/4kK9Ri8E7ipwUu0SJhskHWuugZ1TxPT1tYCOn2SE2rr bYL+9jKULfYw5vPIGgH4DyQBFwkSM0NutQXeSn/scFMutLgBS93MNAS0A0sevRok 9QEJw8QfBodpHfZomlcCetaNFT1lxrrAStrpZHlmBCkga0wZ0OQJU4E1+nTWk1vT KtY0PTDRXvrjqz4QG2PTSHZygQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJAzha7S wp+quwnR64l95eqRlXM8MB8GA1UdIwQYMBaAFBZB0T+tiiCrCpT2Ja7aEGvipm4X MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNDE3OS80M0U0QUYyNkI5 NTExMUVCQUE2MENEM0NDNEY5QUUwMi9Ga0hSUDYyS0lLc0tsUFlscnRvUWEtS21i aGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZrSFJQNjJLSUtzS2xQWWxydG9RYS1LbWJoYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NDE3OS80M0U0QUYyNkI5NTExMUVCQUE2MENEM0NDNEY5QUUwMi9Ga0hSUDYyS0lL c0tsUFlscnRvUWEtS21iaGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCOnCk9iVRlghhHbKTukd55W28cSO3Hua5yt5j/XJZe7yRkeXXJgFhq ga7J6yagLBbRPSutpVOjYfEUCbV0XlyNkPIEq3dYRb3LgxDwn63kKXoRUaPM6iOo 93agbNb2jXP4M/WN4mc508zCLKeSTQQsgVYTWQx8BU/qPmtDj2Npm5AVmdBhNASW 5EAHIQzK1mqItcgZW+R3TET+Bl/5z5GeW7b6XgflWM7mP+1V9YUGwZckOc34Lr9s MOXM8GNsoRPpzGn1IavE+ea6QyK+1TkSzuS1iyerxmqLzuaJrFDmM7G25gHgeWFv iGWycFPhYMUjkHmqtlfwymvVAmKdRlBV -----END CERTIFICATE-----Generated at Wed Nov 5 13:46:37 2025 by rpki-client