$ rpki-client -vvf rpki.apnic.net/member_repository/A91BDA06/2BFC8948713611E9869DBF10C4F9AE02/fPkomAMwIeA7O5PA7riCE8f7XsU.mft File: fPkomAMwIeA7O5PA7riCE8f7XsU.mft (raw, json) Hash identifier: eTRZmc8K3Q6r8woz0qjqnA6yHXR13Qw7zcvnYnu13EE= Subject key identifier: 8B:F6:9F:00:FF:79:3B:DD:50:C2:94:63:BB:94:F7:63:1F:E8:B2:DC Authority key identifier: 7C:F9:28:98:03:30:21:E0:3B:3B:93:C0:EE:B8:82:13:C7:FB:5E:C5 Certificate issuer: /CN=A91BDA06/serialNumber=7CF92898033021E03B3B93C0EEB88213C7FB5EC5 Certificate serial: 0F8A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fPkomAMwIeA7O5PA7riCE8f7XsU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BDA06/2BFC8948713611E9869DBF10C4F9AE02/fPkomAMwIeA7O5PA7riCE8f7XsU.mft Manifest number: 0F83 Signing time: Tue 04 Nov 2025 17:38:39 +0000 Manifest this update: Tue 04 Nov 2025 17:38:39 +0000 Manifest next update: Tue 11 Nov 2025 17:38:39 +0000 Files and hashes: 1: fPkomAMwIeA7O5PA7riCE8f7XsU.crl (hash: PMqE+7SHepaWGvmRQrMNPZ82MoKL/Q1OK77VWCnYJpo=) 2: DCE5E9CA713611E9A71D3311C4F9AE02.roa (hash: yUcmYZ18wT5AwWICmpq0ZcagYP+uu8UmtnyixruA6kM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BDA06/2BFC8948713611E9869DBF10C4F9AE02/fPkomAMwIeA7O5PA7riCE8f7XsU.crl rsync://rpki.apnic.net/member_repository/A91BDA06/2BFC8948713611E9869DBF10C4F9AE02/fPkomAMwIeA7O5PA7riCE8f7XsU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fPkomAMwIeA7O5PA7riCE8f7XsU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 17:38:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3978 (0xf8a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BDA06, serialNumber=7CF92898033021E03B3B93C0EEB88213C7FB5EC5 Validity Not Before: Nov 4 17:38:39 2025 GMT Not After : Nov 11 17:38:39 2025 GMT Subject: CN=690a3a1f-756d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:29:df:27:38:e0:c9:22:28:73:dc:7f:3d:dd: ab:b1:5f:aa:2b:d5:b5:f9:f1:b1:71:1c:02:b6:25: d9:31:85:3a:27:ed:1c:b7:75:b2:83:ae:d3:d9:bc: 0c:eb:f9:db:e7:41:be:e4:e4:7d:1e:53:48:7b:7c: d6:59:cc:51:05:fe:a6:f3:31:40:07:5f:aa:ea:5e: 3a:d7:a8:a1:e8:f7:4e:b8:bb:bf:4f:92:a1:7f:de: 60:27:6a:1d:12:ad:be:11:5b:35:04:ca:1a:8d:68: 90:a1:99:e8:10:8b:d8:67:0c:63:4f:e0:30:52:66: 01:55:c1:9c:cb:f3:90:19:bf:33:bf:75:d2:05:31: 87:71:37:63:04:bd:f6:fb:89:7a:83:2b:1e:17:58: f0:04:0e:9b:be:00:65:ce:3c:f4:a8:e6:29:35:cb: 52:ac:77:cd:5c:3b:47:f9:d3:48:4c:e5:0d:49:83: e7:f0:0e:e7:54:67:5e:24:f0:32:d1:df:68:02:33: cf:09:02:41:35:c8:3d:14:9c:36:b7:be:1d:f5:85: 76:97:04:18:7a:51:2f:ac:79:49:d0:22:8d:f3:fe: ba:a3:fb:9e:a0:23:cb:70:d5:3a:6a:20:11:da:eb: fb:f1:b3:d8:80:4b:49:d8:63:4d:2c:ca:9a:ed:bb: 16:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:F6:9F:00:FF:79:3B:DD:50:C2:94:63:BB:94:F7:63:1F:E8:B2:DC X509v3 Authority Key Identifier: keyid:7C:F9:28:98:03:30:21:E0:3B:3B:93:C0:EE:B8:82:13:C7:FB:5E:C5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BDA06/2BFC8948713611E9869DBF10C4F9AE02/fPkomAMwIeA7O5PA7riCE8f7XsU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fPkomAMwIeA7O5PA7riCE8f7XsU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BDA06/2BFC8948713611E9869DBF10C4F9AE02/fPkomAMwIeA7O5PA7riCE8f7XsU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9b:1e:17:17:f5:63:d0:7d:d0:fe:92:c5:88:eb:ba:17:24:fe: 6e:72:74:b6:9f:ca:45:00:50:39:01:c6:95:3a:de:15:16:58: e3:0d:24:f8:43:68:f2:f7:44:53:1e:ff:ac:20:74:35:ce:fd: 7a:be:f3:94:8a:65:b7:05:eb:f7:e2:b7:a8:28:f2:8c:82:96: 08:50:cd:f6:8a:11:96:15:c5:5b:d0:6f:ab:77:10:4e:e4:75: 76:25:7e:9f:e4:23:54:ad:b2:4b:55:e9:dc:88:2e:1e:c0:36: 6e:36:a0:f1:24:27:f0:40:59:3f:be:f6:48:49:b8:5a:37:20: 5c:58:4b:b6:f5:7b:15:f4:d7:9a:06:b3:9d:3a:9d:cd:60:ff: 6d:25:54:cc:57:07:42:57:f2:6d:29:68:52:7f:9e:77:f2:39: d5:18:b6:ea:80:88:4f:e1:17:24:66:10:fb:5e:32:4e:fc:e4: ab:39:35:28:5e:ce:35:1b:38:b7:b6:07:c1:eb:1f:25:b4:71: f3:9c:d9:c8:0c:a7:5f:0d:41:ac:7e:c0:23:7b:03:71:77:1c: d9:68:62:0e:4e:cc:f2:3c:7d:a8:d0:f2:1a:73:7d:c9:bd:79: ec:60:65:04:2d:d0:35:c0:01:dd:76:22:77:b0:2f:5a:d7:35: 60:8d:da:62 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICD4owDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkRBMDYxMTAvBgNVBAUTKDdDRjkyODk4MDMzMDIxRTAzQjNCOTNDMEVFQjg4MjEz QzdGQjVFQzUwHhcNMjUxMTA0MTczODM5WhcNMjUxMTExMTczODM5WjAYMRYwFAYD VQQDEw02OTBhM2ExZi03NTZkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoynfJzjgySIoc9x/Pd2rsV+qK9W1+fGxcRwCtiXZMYU6J+0ct3Wyg67T2bwM 6/nb50G+5OR9HlNIe3zWWcxRBf6m8zFAB1+q6l4616ih6PdOuLu/T5Khf95gJ2od Eq2+EVs1BMoajWiQoZnoEIvYZwxjT+AwUmYBVcGcy/OQGb8zv3XSBTGHcTdjBL32 +4l6gyseF1jwBA6bvgBlzjz0qOYpNctSrHfNXDtH+dNITOUNSYPn8A7nVGdeJPAy 0d9oAjPPCQJBNcg9FJw2t74d9YV2lwQYelEvrHlJ0CKN8/66o/ueoCPLcNU6aiAR 2uv78bPYgEtJ2GNNLMqa7bsWMQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIv2nwD/ eTvdUMKUY7uU92Mf6LLcMB8GA1UdIwQYMBaAFHz5KJgDMCHgOzuTwO64ghPH+17F MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCREEwNi8yQkZDODk0ODcx MzYxMUU5ODY5REJGMTBDNEY5QUUwMi9mUGtvbUFNd0llQTdPNVBBN3JpQ0U4ZjdY c1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ZQa29tQU13SWVBN081UEE3cmlDRThmN1hzVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC REEwNi8yQkZDODk0ODcxMzYxMUU5ODY5REJGMTBDNEY5QUUwMi9mUGtvbUFNd0ll QTdPNVBBN3JpQ0U4ZjdYc1UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCbHhcX9WPQfdD+ksWI67oXJP5ucnS2n8pFAFA5AcaVOt4VFljjDST4 Q2jy90RTHv+sIHQ1zv16vvOUimW3Bev34reoKPKMgpYIUM32ihGWFcVb0G+rdxBO 5HV2JX6f5CNUrbJLVenciC4ewDZuNqDxJCfwQFk/vvZISbhaNyBcWEu29XsV9Nea BrOdOp3NYP9tJVTMVwdCV/JtKWhSf5538jnVGLbqgIhP4RckZhD7XjJO/OSrOTUo Xs41Gzi3tgfB6x8ltHHznNnIDKdfDUGsfsAjewNxdxzZaGIOTszyPH2o0PIac33J vXnsYGUELdA1wAHddiJ3sC9a1zVgjdpi -----END CERTIFICATE-----Generated at Wed Nov 5 17:05:52 2025 by rpki-client