$ rpki-client -vvf rpki.apnic.net/member_repository/A91A86D0/8D8F0ABE0B5A11EA90923066C4F9AE02/FjMWdiEa7mdzSFtlIzxiw6RYev0.mft File: FjMWdiEa7mdzSFtlIzxiw6RYev0.mft (raw, json) Hash identifier: KSAjAnqlW9G831Vc7mATe/14sah4F2iOdVV/Wuo8jSA= Subject key identifier: D6:13:40:4A:43:10:CF:23:C7:E4:02:FB:29:2F:D2:AC:B3:7B:00:9F Authority key identifier: 16:33:16:76:21:1A:EE:67:73:48:5B:65:23:3C:62:C3:A4:58:7A:FD Certificate issuer: /CN=A91A86D0/serialNumber=16331676211AEE6773485B65233C62C3A4587AFD Certificate serial: 0C83 Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/FjMWdiEa7mdzSFtlIzxiw6RYev0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A86D0/8D8F0ABE0B5A11EA90923066C4F9AE02/FjMWdiEa7mdzSFtlIzxiw6RYev0.mft Manifest number: 0C76 Signing time: Tue 04 Nov 2025 17:37:49 +0000 Manifest this update: Tue 04 Nov 2025 17:37:49 +0000 Manifest next update: Tue 11 Nov 2025 17:37:49 +0000 Files and hashes: 1: FjMWdiEa7mdzSFtlIzxiw6RYev0.crl (hash: G0HQXoK8ZWuv0gphCXTrzcq2zpBls5t4ZSOmavmfC3M=) 2: CDD0C38ECCE111EB90AF2C7AC4F9AE02.roa (hash: e16SVTPpwjEg2RE9Hpi4GSSEsMxTTKPyjdQEKVYgs6Q=) 3: CF1B3152CCE111EB90AF2C7AC4F9AE02.roa (hash: ZahlDvvl4xqyMO4InfL5NLuVKGcItekitU1WQ9tGmBk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A86D0/8D8F0ABE0B5A11EA90923066C4F9AE02/FjMWdiEa7mdzSFtlIzxiw6RYev0.crl rsync://rpki.apnic.net/member_repository/A91A86D0/8D8F0ABE0B5A11EA90923066C4F9AE02/FjMWdiEa7mdzSFtlIzxiw6RYev0.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/FjMWdiEa7mdzSFtlIzxiw6RYev0.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 17:37:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3203 (0xc83) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A86D0, serialNumber=16331676211AEE6773485B65233C62C3A4587AFD Validity Not Before: Nov 4 17:37:49 2025 GMT Not After : Nov 11 17:37:49 2025 GMT Subject: CN=690a39ed-477e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:81:69:18:4f:44:ba:db:d3:b8:38:0e:2d:35: be:fa:95:83:55:1f:af:61:e0:33:7c:1c:87:8e:ec: 57:4f:98:88:e5:3c:be:76:9b:16:ed:27:6c:91:00: 99:f7:80:6d:d8:0b:c7:c3:01:94:9d:81:d8:b0:62: 09:f0:9d:f9:79:68:5f:f3:b0:e9:d8:52:eb:32:f8: ea:85:d1:de:e0:06:8c:c9:07:ab:a1:3a:08:96:3d: 32:e7:ed:f5:a6:2e:f1:ff:fe:a4:0f:4d:74:92:c9: a7:57:2a:40:2c:17:a1:ce:c8:16:b8:03:b2:d7:ca: 87:3f:76:85:45:b8:a3:2d:db:7f:77:57:dd:2e:05: ff:ec:25:32:df:ca:e3:45:75:e5:4f:84:01:a9:63: b5:02:99:1f:18:ed:8a:42:fc:98:e0:2d:f2:d9:c3: 5a:61:1f:36:22:de:de:0d:48:76:1a:9f:e0:d5:af: eb:b7:d2:40:c3:80:0d:6b:6b:e2:98:02:57:9d:26: 5c:5e:09:e7:a6:27:1f:df:5a:a2:ae:49:0c:8e:19: 0f:20:cf:3d:63:66:39:dd:22:fa:be:5d:27:82:79: c9:d3:70:80:12:2a:05:08:fc:cf:c4:e3:64:7a:52: 48:01:63:69:5e:1e:cc:aa:fc:9f:b0:0a:e7:ed:4f: 76:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:13:40:4A:43:10:CF:23:C7:E4:02:FB:29:2F:D2:AC:B3:7B:00:9F X509v3 Authority Key Identifier: keyid:16:33:16:76:21:1A:EE:67:73:48:5B:65:23:3C:62:C3:A4:58:7A:FD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A86D0/8D8F0ABE0B5A11EA90923066C4F9AE02/FjMWdiEa7mdzSFtlIzxiw6RYev0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/FjMWdiEa7mdzSFtlIzxiw6RYev0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A86D0/8D8F0ABE0B5A11EA90923066C4F9AE02/FjMWdiEa7mdzSFtlIzxiw6RYev0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1b:4d:27:1d:fe:15:d6:ef:d2:52:d8:a9:eb:f1:f2:4c:94:6b: 29:05:5f:42:6c:d7:24:b0:41:1a:f8:65:63:ea:42:83:9d:0b: 39:30:6d:a5:d0:7d:84:3a:5b:a3:fa:96:40:4d:27:43:4a:cb: c9:7e:34:b3:99:83:f5:f5:d0:07:96:0f:18:ee:a6:d0:04:57: 0c:b1:9c:d3:63:81:55:0d:d9:75:ac:48:26:63:21:82:4c:df: 34:9e:02:b0:3c:79:31:33:62:50:47:13:9c:93:53:30:b4:fb: 80:af:82:9e:8b:86:b3:d4:a4:56:78:e4:12:52:2a:d9:cb:91: 66:13:bd:e9:33:63:f7:45:05:11:1d:09:23:ce:19:71:77:a1: 5f:ba:6a:aa:e5:56:77:31:ac:0a:1f:5e:ba:65:df:6e:ec:a5: 40:99:05:bd:9c:53:f3:76:b7:62:d6:ff:8c:8f:fc:dd:56:35: 28:ba:6e:f6:54:7b:a1:91:79:20:9b:1f:d7:5c:e4:82:b2:a7: 8c:70:f4:3e:dc:cf:98:d4:d7:31:a4:a6:0d:67:bf:c5:8b:f9: 49:32:bf:e1:c4:a5:7a:c5:61:45:24:55:77:6b:3e:54:92:a7: 81:e4:31:20:49:0e:9a:16:0e:30:df:bf:a5:fa:bb:e6:2d:c6: e9:27:2b:f9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDIMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTg2RDAxMTAvBgNVBAUTKDE2MzMxNjc2MjExQUVFNjc3MzQ4NUI2NTIzM0M2MkMz QTQ1ODdBRkQwHhcNMjUxMTA0MTczNzQ5WhcNMjUxMTExMTczNzQ5WjAYMRYwFAYD VQQDEw02OTBhMzllZC00NzdlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw4FpGE9EutvTuDgOLTW++pWDVR+vYeAzfByHjuxXT5iI5Ty+dpsW7SdskQCZ 94Bt2AvHwwGUnYHYsGIJ8J35eWhf87Dp2FLrMvjqhdHe4AaMyQeroToIlj0y5+31 pi7x//6kD010ksmnVypALBehzsgWuAOy18qHP3aFRbijLdt/d1fdLgX/7CUy38rj RXXlT4QBqWO1ApkfGO2KQvyY4C3y2cNaYR82It7eDUh2Gp/g1a/rt9JAw4ANa2vi mAJXnSZcXgnnpicf31qirkkMjhkPIM89Y2Y53SL6vl0ngnnJ03CAEioFCPzPxONk elJIAWNpXh7MqvyfsArn7U92AQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNYTQEpD EM8jx+QC+ykv0qyzewCfMB8GA1UdIwQYMBaAFBYzFnYhGu5nc0hbZSM8YsOkWHr9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBODZEMC84RDhGMEFCRTBC NUExMUVBOTA5MjMwNjZDNEY5QUUwMi9Gak1XZGlFYTdtZHpTRnRsSXp4aXc2Ulll djAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyL0ZqTVdkaUVhN21kelNGdGxJenhpdzZSWWV2MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB ODZEMC84RDhGMEFCRTBCNUExMUVBOTA5MjMwNjZDNEY5QUUwMi9Gak1XZGlFYTdt ZHpTRnRsSXp4aXc2UllldjAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAbTScd/hXW79JS2Knr8fJMlGspBV9CbNcksEEa+GVj6kKDnQs5MG2l 0H2EOluj+pZATSdDSsvJfjSzmYP19dAHlg8Y7qbQBFcMsZzTY4FVDdl1rEgmYyGC TN80ngKwPHkxM2JQRxOck1MwtPuAr4Kei4az1KRWeOQSUirZy5FmE73pM2P3RQUR HQkjzhlxd6Ffumqq5VZ3MawKH166Zd9u7KVAmQW9nFPzdrdi1v+Mj/zdVjUoum72 VHuhkXkgmx/XXOSCsqeMcPQ+3M+Y1NcxpKYNZ7/Fi/lJMr/hxKV6xWFFJFV3az5U kqeB5DEgSQ6aFg4w37+l+rvmLcbpJyv5 -----END CERTIFICATE-----Generated at Wed Nov 5 13:06:10 2025 by rpki-client