$ rpki-client -vvf rpki.apnic.net/member_repository/A91CDB75/DCD2D494BB7711EEAAD7B241C4F9AE02/FYg0tWOnwztJgzS8-jD41rZ03J4.mft File: FYg0tWOnwztJgzS8-jD41rZ03J4.mft (raw, json) Hash identifier: ReGNF2pC7oSRpdlYflBKqt+IeK65v0UCpJ2bwFz+x60= Subject key identifier: C1:B7:C7:1D:8C:3D:63:4F:3B:9A:C5:2D:CF:A4:7B:26:5D:D2:3A:B0 Authority key identifier: 15:88:34:B5:63:A7:C3:3B:49:83:34:BC:FA:30:F8:D6:B6:74:DC:9E Certificate issuer: /CN=A91CDB75/serialNumber=158834B563A7C33B498334BCFA30F8D6B674DC9E Certificate serial: 0152 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FYg0tWOnwztJgzS8-jD41rZ03J4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CDB75/DCD2D494BB7711EEAAD7B241C4F9AE02/FYg0tWOnwztJgzS8-jD41rZ03J4.mft Manifest number: 014E Signing time: Mon 03 Nov 2025 04:16:02 +0000 Manifest this update: Mon 03 Nov 2025 04:16:02 +0000 Manifest next update: Mon 10 Nov 2025 04:16:02 +0000 Files and hashes: 1: FYg0tWOnwztJgzS8-jD41rZ03J4.crl (hash: 3P2NhvtaZFGY0Y4TirdwK5C0NPj/Y2ARHauy/tAmPQg=) 2: C5589FB4BF9C11EEAAE7743EC4F9AE02.roa (hash: dUufcGrEf1g89p6hQjifaNkQf1XSBUMLG147+uIrEko=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CDB75/DCD2D494BB7711EEAAD7B241C4F9AE02/FYg0tWOnwztJgzS8-jD41rZ03J4.crl rsync://rpki.apnic.net/member_repository/A91CDB75/DCD2D494BB7711EEAAD7B241C4F9AE02/FYg0tWOnwztJgzS8-jD41rZ03J4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FYg0tWOnwztJgzS8-jD41rZ03J4.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 04:16:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 338 (0x152) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CDB75, serialNumber=158834B563A7C33B498334BCFA30F8D6B674DC9E Validity Not Before: Nov 3 04:16:02 2025 GMT Not After : Nov 10 04:16:02 2025 GMT Subject: CN=69082c82-17f1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:88:49:2b:d4:17:f0:4a:eb:58:fb:d6:af:53: e8:e5:9c:9c:e2:f9:59:9b:e8:cb:db:11:06:96:48: 6e:e9:5a:ca:cf:1e:d4:f2:1f:26:8e:0c:6d:db:35: 0d:88:8c:ad:5d:f4:0c:a4:dd:54:24:db:f7:23:ad: 99:4e:b8:45:21:42:67:05:1d:f7:19:d2:e5:ed:81: ce:9c:01:9b:20:04:1d:23:b8:95:a2:f8:2d:e4:80: 57:70:37:3b:29:ec:fc:a9:70:50:d7:7c:75:c5:3a: 75:de:ed:f8:99:2c:5c:84:4e:48:86:4a:cd:36:74: 2f:f1:22:e9:14:9d:8a:92:fb:eb:af:49:58:2a:06: 47:af:7b:64:51:74:2e:fc:f9:b9:24:f5:24:fd:10: a4:4a:07:e7:3e:fa:8b:72:e2:a7:22:8d:c0:e2:5e: bd:dc:eb:51:5f:01:cc:b3:80:52:ae:36:ef:6a:d7: 3b:7a:bf:15:c9:45:70:69:6a:87:bd:5a:98:17:f8: 85:bc:12:37:a3:8a:ae:28:49:8c:ef:e6:31:c6:04: 0f:44:9b:e7:55:b8:8f:23:a8:b9:a7:23:00:55:45: 84:7c:e8:f3:d5:2a:a8:98:80:0c:44:68:3b:85:de: 0a:43:58:0f:29:bc:b6:1b:77:eb:c6:fb:e8:ff:7c: 5a:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:B7:C7:1D:8C:3D:63:4F:3B:9A:C5:2D:CF:A4:7B:26:5D:D2:3A:B0 X509v3 Authority Key Identifier: keyid:15:88:34:B5:63:A7:C3:3B:49:83:34:BC:FA:30:F8:D6:B6:74:DC:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CDB75/DCD2D494BB7711EEAAD7B241C4F9AE02/FYg0tWOnwztJgzS8-jD41rZ03J4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FYg0tWOnwztJgzS8-jD41rZ03J4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CDB75/DCD2D494BB7711EEAAD7B241C4F9AE02/FYg0tWOnwztJgzS8-jD41rZ03J4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 75:d3:d9:5d:13:0c:67:d3:2e:e3:1c:56:f8:67:fc:c6:07:ed: b3:1c:c9:1f:e8:ac:8e:40:76:3e:f3:49:65:78:49:bf:5e:0d: f8:76:b0:1d:1e:9c:69:78:6b:ae:b6:30:48:31:cc:83:2c:db: a5:95:aa:5e:6d:a2:83:9a:e0:2f:56:dd:b2:2f:78:bc:04:b2: 77:30:9d:9c:19:e4:4c:68:16:88:8a:bc:8c:49:db:59:b0:23: 2e:2f:9e:33:b2:7d:8f:1e:66:cb:f3:e9:d5:de:c2:13:3c:0c: 1d:82:bb:8b:1b:28:c8:8a:1a:e2:0a:c6:72:23:61:f7:de:59: 72:9d:16:a4:ca:3b:73:cc:1c:5e:ec:dc:8e:f6:61:d1:8a:db: 56:72:93:46:e3:39:20:77:c8:46:7f:77:e3:35:7d:56:75:1b: b2:3f:c0:95:44:fc:c4:a4:41:36:f7:9b:c3:32:49:33:29:0f: 27:05:4d:3c:eb:cd:59:2a:ba:ef:e0:45:b6:10:8d:5b:de:5d: 2f:4a:ee:7c:e2:f7:b5:e3:05:13:17:b8:b4:15:c2:a9:79:8a: 5d:7e:52:fe:6e:6d:29:a7:95:96:c9:16:c8:61:60:c9:d9:2c: 7e:98:56:35:93:5b:df:24:af:00:8d:29:22:ab:cc:54:f5:1b: 64:ad:3f:20 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAVIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0RCNzUxMTAvBgNVBAUTKDE1ODgzNEI1NjNBN0MzM0I0OTgzMzRCQ0ZBMzBGOEQ2 QjY3NERDOUUwHhcNMjUxMTAzMDQxNjAyWhcNMjUxMTEwMDQxNjAyWjAYMRYwFAYD VQQDEw02OTA4MmM4Mi0xN2YxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqYhJK9QX8ErrWPvWr1Po5Zyc4vlZm+jL2xEGlkhu6VrKzx7U8h8mjgxt2zUN iIytXfQMpN1UJNv3I62ZTrhFIUJnBR33GdLl7YHOnAGbIAQdI7iVovgt5IBXcDc7 Kez8qXBQ13x1xTp13u34mSxchE5IhkrNNnQv8SLpFJ2Kkvvrr0lYKgZHr3tkUXQu /Pm5JPUk/RCkSgfnPvqLcuKnIo3A4l693OtRXwHMs4BSrjbvatc7er8VyUVwaWqH vVqYF/iFvBI3o4quKEmM7+YxxgQPRJvnVbiPI6i5pyMAVUWEfOjz1SqomIAMRGg7 hd4KQ1gPKby2G3frxvvo/3xadQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMG3xx2M PWNPO5rFLc+keyZd0jqwMB8GA1UdIwQYMBaAFBWINLVjp8M7SYM0vPow+Na2dNye MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDREI3NS9EQ0QyRDQ5NEJC NzcxMUVFQUFEN0IyNDFDNEY5QUUwMi9GWWcwdFdPbnd6dEpnelM4LWpENDFyWjAz SjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0ZZZzB0V09ud3p0Smd6UzgtakQ0MXJaMDNKNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD REI3NS9EQ0QyRDQ5NEJCNzcxMUVFQUFEN0IyNDFDNEY5QUUwMi9GWWcwdFdPbnd6 dEpnelM4LWpENDFyWjAzSjQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB109ldEwxn0y7jHFb4Z/zGB+2zHMkf6KyOQHY+80lleEm/Xg34drAd HpxpeGuutjBIMcyDLNullapebaKDmuAvVt2yL3i8BLJ3MJ2cGeRMaBaIiryMSdtZ sCMuL54zsn2PHmbL8+nV3sITPAwdgruLGyjIihriCsZyI2H33llynRakyjtzzBxe 7NyO9mHRittWcpNG4zkgd8hGf3fjNX1WdRuyP8CVRPzEpEE295vDMkkzKQ8nBU08 681ZKrrv4EW2EI1b3l0vSu584ve14wUTF7i0FcKpeYpdflL+bm0pp5WWyRbIYWDJ 2Sx+mFY1k1vfJK8AjSkiq8xU9RtkrT8g -----END CERTIFICATE-----Generated at Tue Nov 4 19:01:53 2025 by rpki-client