$ rpki-client -vvf rpki.apnic.net/member_repository/A91CE4A1/85FA0CE880B711EC9FEB2C67C4F9AE02/FUc--zxa6KDEdke34P3liGtrH6M.mft File: FUc--zxa6KDEdke34P3liGtrH6M.mft (raw, json) Hash identifier: lcrt9JHmEUOEi/SgvJj9W+x5vx0k7RwbbXETUBwWF2s= Subject key identifier: 4A:08:63:D1:C5:FA:54:AC:EC:E7:24:1C:FB:A6:EC:D6:53:46:84:42 Authority key identifier: 15:47:3E:FB:3C:5A:E8:A0:C4:76:47:B7:E0:FD:E5:88:6B:6B:1F:A3 Certificate issuer: /CN=A91CE4A1/serialNumber=15473EFB3C5AE8A0C47647B7E0FDE5886B6B1FA3 Certificate serial: 0451 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FUc--zxa6KDEdke34P3liGtrH6M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CE4A1/85FA0CE880B711EC9FEB2C67C4F9AE02/FUc--zxa6KDEdke34P3liGtrH6M.mft Manifest number: 0443 Signing time: Wed 05 Nov 2025 00:23:37 +0000 Manifest this update: Wed 05 Nov 2025 00:23:36 +0000 Manifest next update: Wed 12 Nov 2025 00:23:36 +0000 Files and hashes: 1: FUc--zxa6KDEdke34P3liGtrH6M.crl (hash: puskVYrzP7rxSHiSLXcgEDTkQIaXKFGk+EI11ZWm1ms=) 2: 2D81FF3680BB11EC8FD7663DC4F9AE02.roa (hash: 93hMZoZD1IeR9WgZB4O3EInu2uvTAMcqxAyD5/FgSlQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CE4A1/85FA0CE880B711EC9FEB2C67C4F9AE02/FUc--zxa6KDEdke34P3liGtrH6M.crl rsync://rpki.apnic.net/member_repository/A91CE4A1/85FA0CE880B711EC9FEB2C67C4F9AE02/FUc--zxa6KDEdke34P3liGtrH6M.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FUc--zxa6KDEdke34P3liGtrH6M.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 00:23:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1105 (0x451) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CE4A1, serialNumber=15473EFB3C5AE8A0C47647B7E0FDE5886B6B1FA3 Validity Not Before: Nov 5 00:23:36 2025 GMT Not After : Nov 12 00:23:36 2025 GMT Subject: CN=690a9909-51fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:42:af:84:42:9e:cd:04:8b:6f:a7:f6:9f:85: dd:42:5e:31:63:a5:97:b1:37:6f:1e:95:87:7a:f1: 25:b0:7a:f2:1e:dc:8e:4c:be:84:f6:66:55:6f:27: 54:4c:a4:0f:c6:cc:f7:d7:71:83:ff:95:16:03:8e: 44:47:79:01:d3:ca:53:89:e8:42:4a:0d:98:19:15: 18:4a:2f:43:fe:0a:ed:19:7c:3f:84:b8:af:17:5b: 30:d7:d5:70:be:3a:68:86:dd:5f:82:c0:c5:9b:51: 96:72:17:aa:32:05:f0:60:0d:ba:b1:af:4e:68:c0: 84:ca:f4:63:b1:72:1a:ab:b0:b6:4e:c6:95:2f:c9: 76:ce:5a:26:51:55:65:40:bf:11:07:a7:5c:c5:8b: 9d:df:88:b4:0e:b4:8c:95:42:1d:dd:38:dc:84:af: 2f:f5:e7:97:56:53:ab:3a:30:c3:39:a7:d3:d0:1f: 66:b1:4a:22:01:cf:6a:45:98:91:70:cb:c5:d3:44: 6a:3c:84:1c:69:75:06:b1:2c:c7:1e:55:6c:41:c6: 23:bc:2a:8a:bc:67:6e:d0:6e:cc:7f:00:3d:17:58: de:b5:ca:a9:87:d4:c3:f7:04:fd:53:3b:d9:b7:26: 93:04:34:3d:44:ac:2a:de:46:21:d8:38:06:f4:df: bb:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:08:63:D1:C5:FA:54:AC:EC:E7:24:1C:FB:A6:EC:D6:53:46:84:42 X509v3 Authority Key Identifier: keyid:15:47:3E:FB:3C:5A:E8:A0:C4:76:47:B7:E0:FD:E5:88:6B:6B:1F:A3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CE4A1/85FA0CE880B711EC9FEB2C67C4F9AE02/FUc--zxa6KDEdke34P3liGtrH6M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FUc--zxa6KDEdke34P3liGtrH6M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CE4A1/85FA0CE880B711EC9FEB2C67C4F9AE02/FUc--zxa6KDEdke34P3liGtrH6M.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c0:1f:8c:fb:d8:3a:a4:f5:c6:cf:ce:52:97:16:3f:9c:fb:21: b0:f4:e9:3f:c7:69:0b:4e:df:4f:5e:46:ae:71:23:26:21:a2: 09:2f:4b:92:16:3d:4f:66:69:ce:a2:fb:84:19:c9:e1:da:75: e2:6b:37:d5:3d:10:69:00:21:55:2e:a4:c9:97:77:89:d4:ef: 0e:fd:24:69:9c:c5:48:18:79:8f:92:86:1c:9f:43:4d:78:a6: 15:ee:5e:1a:36:e3:9e:3e:cd:c9:41:96:a0:21:98:2e:dc:e0: d3:1d:d8:22:d3:d3:3e:77:74:67:c1:96:90:a4:2f:8b:30:69: 21:e6:64:93:9c:2d:7c:21:a0:44:de:b1:e8:25:df:dc:4c:e2: 75:aa:25:ab:7e:07:cb:0d:d0:02:da:c6:61:8d:3b:35:8a:61: 8a:11:7b:55:f9:c8:a8:86:8f:97:a4:f1:e3:f8:a4:1f:80:c3: 6c:d0:b5:27:96:ef:4e:a3:f4:b8:60:76:9a:67:a7:f8:42:11: a4:ea:be:ed:68:78:a4:ee:39:80:74:ab:7a:f0:4b:9d:74:c4: 5e:22:58:f0:8b:35:1a:4e:fb:20:c0:f1:ed:19:43:88:b3:1a: ec:dc:19:67:c3:f8:54:d8:38:c1:a9:03:27:d0:4f:bc:31:cf: 1c:3f:6c:d8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBFEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0U0QTExMTAvBgNVBAUTKDE1NDczRUZCM0M1QUU4QTBDNDc2NDdCN0UwRkRFNTg4 NkI2QjFGQTMwHhcNMjUxMTA1MDAyMzM2WhcNMjUxMTEyMDAyMzM2WjAYMRYwFAYD VQQDEw02OTBhOTkwOS01MWZhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAukKvhEKezQSLb6f2n4XdQl4xY6WXsTdvHpWHevElsHryHtyOTL6E9mZVbydU TKQPxsz313GD/5UWA45ER3kB08pTiehCSg2YGRUYSi9D/grtGXw/hLivF1sw19Vw vjpoht1fgsDFm1GWcheqMgXwYA26sa9OaMCEyvRjsXIaq7C2TsaVL8l2zlomUVVl QL8RB6dcxYud34i0DrSMlUId3TjchK8v9eeXVlOrOjDDOafT0B9msUoiAc9qRZiR cMvF00RqPIQcaXUGsSzHHlVsQcYjvCqKvGdu0G7MfwA9F1jetcqph9TD9wT9UzvZ tyaTBDQ9RKwq3kYh2DgG9N+7cwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEoIY9HF +lSs7OckHPum7NZTRoRCMB8GA1UdIwQYMBaAFBVHPvs8WuigxHZHt+D95Yhrax+j MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRTRBMS84NUZBMENFODgw QjcxMUVDOUZFQjJDNjdDNEY5QUUwMi9GVWMtLXp4YTZLREVka2UzNFAzbGlHdHJI Nk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZVYy0tenhhNktERWRrZTM0UDNsaUd0ckg2TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RTRBMS84NUZBMENFODgwQjcxMUVDOUZFQjJDNjdDNEY5QUUwMi9GVWMtLXp4YTZL REVka2UzNFAzbGlHdHJINk0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDAH4z72Dqk9cbPzlKXFj+c+yGw9Ok/x2kLTt9PXkaucSMmIaIJL0uS Fj1PZmnOovuEGcnh2nXiazfVPRBpACFVLqTJl3eJ1O8O/SRpnMVIGHmPkoYcn0NN eKYV7l4aNuOePs3JQZagIZgu3ODTHdgi09M+d3RnwZaQpC+LMGkh5mSTnC18IaBE 3rHoJd/cTOJ1qiWrfgfLDdAC2sZhjTs1imGKEXtV+cioho+XpPHj+KQfgMNs0LUn lu9Oo/S4YHaaZ6f4QhGk6r7taHik7jmAdKt68EuddMReIljwizUaTvsgwPHtGUOI sxrs3Blnw/hU2DjBqQMn0E+8Mc8cP2zY -----END CERTIFICATE-----Generated at Wed Nov 5 05:47:27 2025 by rpki-client