$ rpki-client -vvf rpki.apnic.net/member_repository/A91C96A7/26E74996577F11E98E90CA18C4F9AE02/fcVok9o1SD_ZCU3wNQTeIXtuOzs.mft File: fcVok9o1SD_ZCU3wNQTeIXtuOzs.mft (raw, json) Hash identifier: AND1rEk0DEB0H1Ua05LXjZaUXKnrye9E0+ZXdY7Clb4= Subject key identifier: F7:C6:5B:71:5C:2D:A2:F0:65:8A:DE:6A:CE:5F:F3:D2:C7:D7:E7:ED Authority key identifier: 7D:C5:68:93:DA:35:48:3F:D9:09:4D:F0:35:04:DE:21:7B:6E:3B:3B Certificate issuer: /CN=A91C96A7/serialNumber=7DC56893DA35483FD9094DF03504DE217B6E3B3B Certificate serial: 101A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fcVok9o1SD_ZCU3wNQTeIXtuOzs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C96A7/26E74996577F11E98E90CA18C4F9AE02/fcVok9o1SD_ZCU3wNQTeIXtuOzs.mft Manifest number: 100D Signing time: Tue 04 Nov 2025 17:32:52 +0000 Manifest this update: Tue 04 Nov 2025 17:32:51 +0000 Manifest next update: Tue 11 Nov 2025 17:32:51 +0000 Files and hashes: 1: fcVok9o1SD_ZCU3wNQTeIXtuOzs.crl (hash: /6Xan+Zu4WdKLMenseCunS7HFTQ2AAMr/HFZKfVX6Lc=) 2: 1BB9CAB6578011E99E80631AC4F9AE02.roa (hash: frN4lZuv4ZlRLTeZDqpWstvGTNjkjq8jINytoj03BxI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C96A7/26E74996577F11E98E90CA18C4F9AE02/fcVok9o1SD_ZCU3wNQTeIXtuOzs.crl rsync://rpki.apnic.net/member_repository/A91C96A7/26E74996577F11E98E90CA18C4F9AE02/fcVok9o1SD_ZCU3wNQTeIXtuOzs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fcVok9o1SD_ZCU3wNQTeIXtuOzs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 17:32:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4122 (0x101a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C96A7, serialNumber=7DC56893DA35483FD9094DF03504DE217B6E3B3B Validity Not Before: Nov 4 17:32:51 2025 GMT Not After : Nov 11 17:32:51 2025 GMT Subject: CN=690a38c3-7636 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:f3:1b:f2:bf:b6:4b:ae:a6:b9:7d:33:e7:0d: 67:e6:55:7a:78:b9:c5:40:61:5c:b6:03:ed:dd:11: 7f:93:a7:ca:1c:b5:5f:73:38:bf:c6:df:f3:18:eb: 1f:5c:40:41:37:f8:cc:4a:41:19:39:eb:d2:46:5f: fd:4f:de:7f:59:63:e0:a1:57:9e:f5:68:1b:ab:5a: f4:30:4e:03:70:ee:90:4e:fd:dc:79:52:1f:86:f8: 3c:64:e4:d3:3b:e8:da:b5:2e:24:d8:0c:b2:cd:fb: 54:ce:29:b6:84:ce:cb:c9:e1:30:61:ec:12:21:1a: b1:4e:d5:21:67:93:17:30:73:94:f7:ef:86:d6:a3: b9:78:ab:5e:3b:41:e7:e5:c0:1a:24:06:74:d8:0e: 8d:8e:17:05:8a:db:c7:c2:57:6a:35:37:d2:28:65: 34:7c:1b:0c:64:88:bf:c8:1c:fa:5d:15:53:9a:f6: 80:11:f1:df:b4:94:47:e6:db:3a:a5:33:b3:e4:27: 92:0f:20:12:7d:8e:9f:16:bb:ae:56:c1:77:8d:a8: 05:6e:31:57:a7:ba:4c:ab:7b:b5:3c:85:5f:a4:d2: 6e:65:e8:d3:b8:44:1b:6d:d3:b6:12:72:40:f1:62: 47:8c:1d:f8:02:74:3e:9a:bb:9f:9e:5a:09:f4:08: 0f:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:C6:5B:71:5C:2D:A2:F0:65:8A:DE:6A:CE:5F:F3:D2:C7:D7:E7:ED X509v3 Authority Key Identifier: keyid:7D:C5:68:93:DA:35:48:3F:D9:09:4D:F0:35:04:DE:21:7B:6E:3B:3B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C96A7/26E74996577F11E98E90CA18C4F9AE02/fcVok9o1SD_ZCU3wNQTeIXtuOzs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fcVok9o1SD_ZCU3wNQTeIXtuOzs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C96A7/26E74996577F11E98E90CA18C4F9AE02/fcVok9o1SD_ZCU3wNQTeIXtuOzs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 29:fc:67:94:56:68:88:66:7a:f5:9a:f3:8b:10:6d:ec:46:b3: ce:01:88:80:6a:15:d4:bf:ac:ba:35:4c:f4:f6:41:84:a1:0d: 68:dc:77:52:23:2c:28:d7:62:c3:07:e5:57:ba:f3:08:f3:b1: 4d:1e:22:e2:b2:81:d4:f9:9b:ae:d7:f9:f6:2d:76:3a:ae:16: 8c:db:6a:1d:52:f6:4c:c5:0f:ba:8f:9f:99:2e:0b:78:d6:ff: 93:3a:4c:f5:b0:f6:a3:da:d2:9b:d2:38:ab:9a:a1:13:97:2b: bf:25:73:3a:5f:f3:39:b1:dc:15:8c:e7:ae:a8:36:a2:ae:64: f5:ed:77:74:9b:08:16:c0:e8:e1:d2:6f:8b:4a:25:ab:ed:42: c3:b4:98:f2:49:87:8e:db:05:d8:96:c3:c8:a8:28:46:28:72: 27:3a:95:95:f6:21:11:a9:e8:5b:cb:33:2c:01:31:29:dd:e6: 98:75:7e:98:0e:a9:81:4e:45:97:c4:a9:85:43:70:03:1d:ec: 87:d0:a5:f3:3f:f2:22:2e:1f:c1:56:18:aa:3d:17:f7:41:45: 3d:47:e2:ae:c9:9a:d3:f3:34:4e:fd:cc:a5:63:17:d2:3c:7b: a3:2a:bb:8d:e0:f3:ea:b2:fd:1b:aa:d9:ab:48:b9:cb:f4:4c: d7:9a:83:52 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEBowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Qzk2QTcxMTAvBgNVBAUTKDdEQzU2ODkzREEzNTQ4M0ZEOTA5NERGMDM1MDRERTIx N0I2RTNCM0IwHhcNMjUxMTA0MTczMjUxWhcNMjUxMTExMTczMjUxWjAYMRYwFAYD VQQDEw02OTBhMzhjMy03NjM2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwvMb8r+2S66muX0z5w1n5lV6eLnFQGFctgPt3RF/k6fKHLVfczi/xt/zGOsf XEBBN/jMSkEZOevSRl/9T95/WWPgoVee9Wgbq1r0ME4DcO6QTv3ceVIfhvg8ZOTT O+jatS4k2AyyzftUzim2hM7LyeEwYewSIRqxTtUhZ5MXMHOU9++G1qO5eKteO0Hn 5cAaJAZ02A6NjhcFitvHwldqNTfSKGU0fBsMZIi/yBz6XRVTmvaAEfHftJRH5ts6 pTOz5CeSDyASfY6fFruuVsF3jagFbjFXp7pMq3u1PIVfpNJuZejTuEQbbdO2EnJA 8WJHjB34AnQ+mrufnloJ9AgPJwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPfGW3Fc LaLwZYreas5f89LH1+ftMB8GA1UdIwQYMBaAFH3FaJPaNUg/2QlN8DUE3iF7bjs7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDOTZBNy8yNkU3NDk5NjU3 N0YxMUU5OEU5MENBMThDNEY5QUUwMi9mY1ZvazlvMVNEX1pDVTN3TlFUZUlYdHVP enMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ZjVm9rOW8xU0RfWkNVM3dOUVRlSVh0dU96cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD OTZBNy8yNkU3NDk5NjU3N0YxMUU5OEU5MENBMThDNEY5QUUwMi9mY1ZvazlvMVNE X1pDVTN3TlFUZUlYdHVPenMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAp/GeUVmiIZnr1mvOLEG3sRrPOAYiAahXUv6y6NUz09kGEoQ1o3HdS Iywo12LDB+VXuvMI87FNHiLisoHU+Zuu1/n2LXY6rhaM22odUvZMxQ+6j5+ZLgt4 1v+TOkz1sPaj2tKb0jirmqETlyu/JXM6X/M5sdwVjOeuqDairmT17Xd0mwgWwOjh 0m+LSiWr7ULDtJjySYeO2wXYlsPIqChGKHInOpWV9iERqehbyzMsATEp3eaYdX6Y DqmBTkWXxKmFQ3ADHeyH0KXzP/IiLh/BVhiqPRf3QUU9R+KuyZrT8zRO/cylYxfS PHujKruN4PPqsv0bqtmrSLnL9EzXmoNS -----END CERTIFICATE-----Generated at Wed Nov 5 12:24:42 2025 by rpki-client