$ rpki-client -vvf rpki.apnic.net/member_repository/A91C8066/18A5124894F511EDB10BC27DC4F9AE02/FgxyzFd72N5TouywCYwi81pRqp4.mft File: FgxyzFd72N5TouywCYwi81pRqp4.mft (raw, json) Hash identifier: nETrLo36W6bXhLxQXI/AuKqQtztmrBkRznGU6+5uthI= Subject key identifier: A1:26:C7:BA:4D:A1:8E:FE:F0:AB:09:77:50:47:FE:23:93:2F:61:C4 Authority key identifier: 16:0C:72:CC:57:7B:D8:DE:53:A2:EC:B0:09:8C:22:F3:5A:51:AA:9E Certificate issuer: /CN=A91C8066/serialNumber=160C72CC577BD8DE53A2ECB0098C22F35A51AA9E Certificate serial: 0213 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FgxyzFd72N5TouywCYwi81pRqp4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C8066/18A5124894F511EDB10BC27DC4F9AE02/FgxyzFd72N5TouywCYwi81pRqp4.mft Manifest number: 020E Signing time: Wed 05 Nov 2025 02:24:28 +0000 Manifest this update: Wed 05 Nov 2025 02:24:28 +0000 Manifest next update: Wed 12 Nov 2025 02:24:27 +0000 Files and hashes: 1: FgxyzFd72N5TouywCYwi81pRqp4.crl (hash: 4qxiYfK7Q97hdo5CiH0gzSuoqSUrJEbk0F5EE14T1OM=) 2: 452D9EF494F811ED85ADE381C4F9AE02.roa (hash: n8+NWSH/0jbCR4W6RjUOoVJVoSERmDVQnQldNxK/jIo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C8066/18A5124894F511EDB10BC27DC4F9AE02/FgxyzFd72N5TouywCYwi81pRqp4.crl rsync://rpki.apnic.net/member_repository/A91C8066/18A5124894F511EDB10BC27DC4F9AE02/FgxyzFd72N5TouywCYwi81pRqp4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FgxyzFd72N5TouywCYwi81pRqp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 02:24:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 531 (0x213) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C8066, serialNumber=160C72CC577BD8DE53A2ECB0098C22F35A51AA9E Validity Not Before: Nov 5 02:24:28 2025 GMT Not After : Nov 12 02:24:27 2025 GMT Subject: CN=690ab55c-55aa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:8b:83:7a:1d:02:7d:06:b3:c7:6f:77:9f:62: 2a:4a:70:3c:da:51:62:be:19:f2:47:c1:8b:9d:18: 50:1a:af:51:b0:57:2a:aa:90:2a:d6:0c:d1:98:20: dc:be:54:18:52:d9:02:b3:c7:2b:af:b1:9f:8e:a0: af:ed:6b:ad:b1:30:6c:00:41:4a:bd:70:41:1a:41: a1:d9:97:96:fd:60:43:56:d2:f6:6c:b8:16:5f:ab: 75:1f:00:b0:8b:8f:3c:21:c6:31:8a:32:6e:55:d6: 43:90:3c:aa:cf:33:4c:e5:28:86:30:15:ee:f1:bd: 1d:56:48:70:d8:6e:38:60:1b:28:d9:39:4a:dc:f2: 84:e9:fc:08:8f:76:ee:6e:b3:30:20:ea:be:c9:08: 53:28:e5:fe:c5:2a:c1:11:32:25:ae:4f:b4:9b:d3: 72:29:16:4b:b7:df:74:3f:5b:70:a2:08:49:34:f5: f5:5d:9c:2e:ca:ab:15:a5:f2:4d:4a:4b:ad:37:c4: a5:d7:93:c6:1a:22:bd:ba:3a:32:14:a0:60:46:2d: d5:f3:d9:c0:ce:76:7f:20:1c:92:f7:e2:4e:cf:4a: f9:14:4f:21:ba:41:85:95:2a:c2:25:5b:22:a6:9b: 4d:93:6e:98:cc:11:f7:a0:2b:e3:94:c0:8e:d1:fc: e5:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:26:C7:BA:4D:A1:8E:FE:F0:AB:09:77:50:47:FE:23:93:2F:61:C4 X509v3 Authority Key Identifier: keyid:16:0C:72:CC:57:7B:D8:DE:53:A2:EC:B0:09:8C:22:F3:5A:51:AA:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C8066/18A5124894F511EDB10BC27DC4F9AE02/FgxyzFd72N5TouywCYwi81pRqp4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FgxyzFd72N5TouywCYwi81pRqp4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C8066/18A5124894F511EDB10BC27DC4F9AE02/FgxyzFd72N5TouywCYwi81pRqp4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c8:47:3a:eb:f2:da:cd:9c:86:9c:4d:1f:6a:c8:30:a8:cd:8a: 72:d1:ea:e4:6b:96:43:cb:f2:99:79:ef:7c:01:e9:07:91:71: 3e:47:55:da:5d:18:c7:12:70:a6:3f:66:62:d4:ba:5a:38:39: 2b:97:96:fa:a5:ea:c0:89:a7:7a:75:7a:69:c1:76:d0:29:ee: 7e:d5:da:51:da:a9:70:ca:ca:33:40:e1:7e:45:ae:5a:4c:2c: 72:ea:35:74:c3:c5:ff:b7:88:99:be:2b:df:cc:e2:11:5f:5c: 81:0e:05:09:a9:8c:de:8c:5c:8d:5a:10:e9:c8:3d:76:8b:f5: b5:e0:33:3e:07:bc:b8:1f:a1:9a:e4:09:19:6b:d7:0b:5d:01: 71:24:be:31:81:88:44:bd:00:49:a9:6c:aa:68:a5:94:24:91: d0:34:95:c4:39:fa:6a:29:3f:62:8d:13:11:a6:9e:c7:33:e1: 15:d1:7b:f0:c9:f2:d6:d4:82:42:ca:a2:de:8a:ca:67:1d:ad: 5d:31:04:2b:81:8b:0d:99:bb:d3:51:0c:45:3c:ea:2a:2e:16: 2d:76:41:34:9c:23:bb:eb:1a:8a:58:a9:69:0a:8c:b7:e5:df: d6:2c:fb:55:24:d7:18:38:4c:0c:cf:ff:1c:70:39:73:32:50: b8:5e:26:e5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAhMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzgwNjYxMTAvBgNVBAUTKDE2MEM3MkNDNTc3QkQ4REU1M0EyRUNCMDA5OEMyMkYz NUE1MUFBOUUwHhcNMjUxMTA1MDIyNDI4WhcNMjUxMTEyMDIyNDI3WjAYMRYwFAYD VQQDEw02OTBhYjU1Yy01NWFhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnouDeh0CfQazx293n2IqSnA82lFivhnyR8GLnRhQGq9RsFcqqpAq1gzRmCDc vlQYUtkCs8crr7GfjqCv7WutsTBsAEFKvXBBGkGh2ZeW/WBDVtL2bLgWX6t1HwCw i488IcYxijJuVdZDkDyqzzNM5SiGMBXu8b0dVkhw2G44YBso2TlK3PKE6fwIj3bu brMwIOq+yQhTKOX+xSrBETIlrk+0m9NyKRZLt990P1twoghJNPX1XZwuyqsVpfJN SkutN8Sl15PGGiK9ujoyFKBgRi3V89nAznZ/IByS9+JOz0r5FE8hukGFlSrCJVsi pptNk26YzBH3oCvjlMCO0fzltQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKEmx7pN oY7+8KsJd1BH/iOTL2HEMB8GA1UdIwQYMBaAFBYMcsxXe9jeU6LssAmMIvNaUaqe MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDODA2Ni8xOEE1MTI0ODk0 RjUxMUVEQjEwQkMyN0RDNEY5QUUwMi9GZ3h5ekZkNzJONVRvdXl3Q1l3aTgxcFJx cDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZneHl6RmQ3Mk41VG91eXdDWXdpODFwUnFwNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD ODA2Ni8xOEE1MTI0ODk0RjUxMUVEQjEwQkMyN0RDNEY5QUUwMi9GZ3h5ekZkNzJO NVRvdXl3Q1l3aTgxcFJxcDQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDIRzrr8trNnIacTR9qyDCozYpy0erka5ZDy/KZee98AekHkXE+R1Xa XRjHEnCmP2Zi1LpaODkrl5b6perAiad6dXppwXbQKe5+1dpR2qlwysozQOF+Ra5a TCxy6jV0w8X/t4iZvivfzOIRX1yBDgUJqYzejFyNWhDpyD12i/W14DM+B7y4H6Ga 5AkZa9cLXQFxJL4xgYhEvQBJqWyqaKWUJJHQNJXEOfpqKT9ijRMRpp7HM+EV0Xvw yfLW1IJCyqLeispnHa1dMQQrgYsNmbvTUQxFPOoqLhYtdkE0nCO76xqKWKlpCoy3 5d/WLPtVJNcYOEwMz/8ccDlzMlC4Xibl -----END CERTIFICATE-----Generated at Wed Nov 5 17:56:20 2025 by rpki-client