$ rpki-client -vvf rpki.apnic.net/member_repository/A91DD299/5EB93A72A1DA11EFB2333A45C4F9AE02/FW7Vv4FDfBtx5xywLuwnqxiveaQ.mft File: FW7Vv4FDfBtx5xywLuwnqxiveaQ.mft (raw, json) Hash identifier: Y6HBRE/HKDaiWyJQUAOKD2NMPiF7g8ADKQ5WKmL0IQ0= Subject key identifier: 20:D2:03:4B:4A:02:6E:38:2C:11:63:B4:E0:5D:E3:CD:B3:4B:16:0D Authority key identifier: 15:6E:D5:BF:81:43:7C:1B:71:E7:1C:B0:2E:EC:27:AB:18:AF:79:A4 Certificate issuer: /CN=A91DD299/serialNumber=156ED5BF81437C1B71E71CB02EEC27AB18AF79A4 Certificate serial: BB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FW7Vv4FDfBtx5xywLuwnqxiveaQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DD299/5EB93A72A1DA11EFB2333A45C4F9AE02/FW7Vv4FDfBtx5xywLuwnqxiveaQ.mft Manifest number: B9 Signing time: Wed 05 Nov 2025 06:13:20 +0000 Manifest this update: Wed 05 Nov 2025 06:13:20 +0000 Manifest next update: Wed 12 Nov 2025 06:13:20 +0000 Files and hashes: 1: FW7Vv4FDfBtx5xywLuwnqxiveaQ.crl (hash: lUjpiTs0ntNO/gkHgDMqG8LF/Pj80F7DNksXyqoyrjc=) 2: F7AA5B1CA1DA11EF86B88981C4F9AE02.roa (hash: DGxrKRXPi2bgrxreeXRQjRNOo70ByLeA01zODoILz2c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DD299/5EB93A72A1DA11EFB2333A45C4F9AE02/FW7Vv4FDfBtx5xywLuwnqxiveaQ.crl rsync://rpki.apnic.net/member_repository/A91DD299/5EB93A72A1DA11EFB2333A45C4F9AE02/FW7Vv4FDfBtx5xywLuwnqxiveaQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FW7Vv4FDfBtx5xywLuwnqxiveaQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 06:13:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 187 (0xbb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DD299, serialNumber=156ED5BF81437C1B71E71CB02EEC27AB18AF79A4 Validity Not Before: Nov 5 06:13:20 2025 GMT Not After : Nov 12 06:13:20 2025 GMT Subject: CN=690aeb00-7b6c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:04:cd:06:fb:84:b7:b8:45:b3:5b:da:59:10: 45:24:44:38:9f:84:2c:d6:1c:f1:b9:d3:6a:f2:1b: 04:c5:80:1c:d2:3b:96:71:46:93:3c:c3:4c:6a:17: 12:b7:5d:f3:46:a3:6d:b3:e1:20:3e:00:7c:87:ff: be:5a:2e:7d:5d:04:cc:6c:e7:87:a8:8a:1d:4b:89: 40:5e:07:3c:97:6a:86:16:31:e8:b4:de:56:ae:48: d1:4c:ef:c0:bd:5e:9d:3c:68:34:63:64:a0:6b:2e: bc:39:08:72:fd:86:2f:70:c9:45:e0:eb:60:c1:55: 59:ee:c2:c5:5d:dd:86:59:ca:45:cb:7f:74:25:d1: a2:27:68:0f:de:6b:bf:10:82:82:ee:a3:86:20:e5: d4:78:94:d0:5b:b1:7f:f5:c4:1a:80:78:fc:d5:77: d4:b6:93:4b:fe:ea:b1:01:5c:c9:6e:6f:70:4e:d0: 60:da:74:32:ef:9f:a4:d2:a2:3c:3a:3b:a2:83:2f: 9e:b5:0e:ac:9c:f5:01:ec:ed:13:54:b2:ab:2f:49: a2:e7:82:59:1e:8c:aa:d4:28:de:f0:b3:f2:d3:32: 80:46:23:07:56:86:85:4b:aa:03:ca:ae:24:e2:60: 2c:7f:73:70:52:99:1d:a6:6e:1a:08:5a:94:9f:54: 4f:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:D2:03:4B:4A:02:6E:38:2C:11:63:B4:E0:5D:E3:CD:B3:4B:16:0D X509v3 Authority Key Identifier: keyid:15:6E:D5:BF:81:43:7C:1B:71:E7:1C:B0:2E:EC:27:AB:18:AF:79:A4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DD299/5EB93A72A1DA11EFB2333A45C4F9AE02/FW7Vv4FDfBtx5xywLuwnqxiveaQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FW7Vv4FDfBtx5xywLuwnqxiveaQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DD299/5EB93A72A1DA11EFB2333A45C4F9AE02/FW7Vv4FDfBtx5xywLuwnqxiveaQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 60:3c:33:2c:64:80:54:43:03:a3:49:da:42:1b:7f:55:4c:f1: 00:9b:63:0e:bf:bd:0f:2a:d1:d9:08:57:be:91:a1:4c:b9:47: 75:b6:e8:30:61:49:5e:fc:4e:87:7a:7a:cc:d4:83:f6:be:51: e4:68:3e:ed:2e:49:57:1e:20:db:16:2b:1e:38:e9:92:85:2e: 8a:f5:ea:c3:9a:3e:f5:a8:93:9f:95:e1:f9:9e:e7:77:2b:07: 97:4d:15:63:f9:a0:27:3a:fb:96:cf:9a:bb:3d:86:6b:55:3e: c2:16:3f:3b:bd:df:1f:95:af:ee:2b:dd:b1:98:37:d0:9b:47: 2c:a9:9c:e8:19:e9:5f:9e:b8:11:2b:49:07:61:c8:0d:e9:ea: df:d1:cb:2a:df:90:c0:cc:02:3c:f5:9d:c1:63:5c:6d:7e:be: 20:17:6e:cc:60:bb:15:34:6f:89:a5:62:1b:0d:11:bf:b3:b0: 75:28:13:fa:d2:08:e7:5e:95:0b:57:72:49:a1:17:ab:29:ad: 01:2c:e7:ff:d4:d4:75:19:84:8a:9e:77:c9:8b:51:1c:31:30: 2b:11:68:de:cd:d2:6c:04:9b:b9:88:08:46:2c:8a:6f:56:ea: 82:72:13:22:f7:da:11:eb:2e:d9:f4:da:62:32:bb:2b:60:cf: be:da:81:9f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICALswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REQyOTkxMTAvBgNVBAUTKDE1NkVENUJGODE0MzdDMUI3MUU3MUNCMDJFRUMyN0FC MThBRjc5QTQwHhcNMjUxMTA1MDYxMzIwWhcNMjUxMTEyMDYxMzIwWjAYMRYwFAYD VQQDEw02OTBhZWIwMC03YjZjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0gTNBvuEt7hFs1vaWRBFJEQ4n4Qs1hzxudNq8hsExYAc0juWcUaTPMNMahcS t13zRqNts+EgPgB8h/++Wi59XQTMbOeHqIodS4lAXgc8l2qGFjHotN5WrkjRTO/A vV6dPGg0Y2Sgay68OQhy/YYvcMlF4OtgwVVZ7sLFXd2GWcpFy390JdGiJ2gP3mu/ EIKC7qOGIOXUeJTQW7F/9cQagHj81XfUtpNL/uqxAVzJbm9wTtBg2nQy75+k0qI8 Ojuigy+etQ6snPUB7O0TVLKrL0mi54JZHoyq1Cje8LPy0zKARiMHVoaFS6oDyq4k 4mAsf3NwUpkdpm4aCFqUn1RPAQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCDSA0tK Am44LBFjtOBd482zSxYNMB8GA1UdIwQYMBaAFBVu1b+BQ3wbceccsC7sJ6sYr3mk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERDI5OS81RUI5M0E3MkEx REExMUVGQjIzMzNBNDVDNEY5QUUwMi9GVzdWdjRGRGZCdHg1eHl3THV3bnF4aXZl YVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZXN1Z2NEZEZkJ0eDV4eXdMdXducXhpdmVhUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RDI5OS81RUI5M0E3MkExREExMUVGQjIzMzNBNDVDNEY5QUUwMi9GVzdWdjRGRGZC dHg1eHl3THV3bnF4aXZlYVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBgPDMsZIBUQwOjSdpCG39VTPEAm2MOv70PKtHZCFe+kaFMuUd1tugw YUle/E6HenrM1IP2vlHkaD7tLklXHiDbFiseOOmShS6K9erDmj71qJOfleH5nud3 KweXTRVj+aAnOvuWz5q7PYZrVT7CFj87vd8fla/uK92xmDfQm0csqZzoGelfnrgR K0kHYcgN6erf0csq35DAzAI89Z3BY1xtfr4gF27MYLsVNG+JpWIbDRG/s7B1KBP6 0gjnXpULV3JJoRerKa0BLOf/1NR1GYSKnnfJi1EcMTArEWjezdJsBJu5iAhGLIpv VuqCchMi99oR6y7Z9NpiMrsrYM++2oGf -----END CERTIFICATE-----Generated at Wed Nov 5 10:25:36 2025 by rpki-client