$ rpki-client -vvf rpki.apnic.net/member_repository/A91DD4A6/6A5969A87E9511EC82EE520AC4F9AE02/FwBKozEFsKDm0-tOR8UTBj2SzsI.mft File: FwBKozEFsKDm0-tOR8UTBj2SzsI.mft (raw, json) Hash identifier: CPdziIoKKhN3K1cLERC/duJ460CJYvL/0WLRzGiZQYE= Subject key identifier: 5E:27:C1:EF:BF:59:EB:75:DF:30:CB:13:A6:93:22:0E:78:D2:A3:6E Authority key identifier: 17:00:4A:A3:31:05:B0:A0:E6:D3:EB:4E:47:C5:13:06:3D:92:CE:C2 Certificate issuer: /CN=A91DD4A6/serialNumber=17004AA33105B0A0E6D3EB4E47C513063D92CEC2 Certificate serial: 04A4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FwBKozEFsKDm0-tOR8UTBj2SzsI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DD4A6/6A5969A87E9511EC82EE520AC4F9AE02/FwBKozEFsKDm0-tOR8UTBj2SzsI.mft Manifest number: 0477 Signing time: Wed 05 Nov 2025 00:22:06 +0000 Manifest this update: Wed 05 Nov 2025 00:22:05 +0000 Manifest next update: Wed 12 Nov 2025 00:22:05 +0000 Files and hashes: 1: FwBKozEFsKDm0-tOR8UTBj2SzsI.crl (hash: gw+slsAqAdOz1GJlPsCpc60lWpmYq62gk4tkomdCxQw=) 2: F29967B22B0011F0B0319E61C4F9AE02.roa (hash: AWipWCwfBJg9FTHPHDUNW5DfQTImAx6KbbjHRDTBNc8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DD4A6/6A5969A87E9511EC82EE520AC4F9AE02/FwBKozEFsKDm0-tOR8UTBj2SzsI.crl rsync://rpki.apnic.net/member_repository/A91DD4A6/6A5969A87E9511EC82EE520AC4F9AE02/FwBKozEFsKDm0-tOR8UTBj2SzsI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FwBKozEFsKDm0-tOR8UTBj2SzsI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 00:22:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1188 (0x4a4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DD4A6, serialNumber=17004AA33105B0A0E6D3EB4E47C513063D92CEC2 Validity Not Before: Nov 5 00:22:05 2025 GMT Not After : Nov 12 00:22:05 2025 GMT Subject: CN=690a98ad-595e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:25:52:c1:fa:9b:6f:a4:1f:a5:6d:d7:9a:80: 81:03:96:50:2a:0d:fd:1c:cc:31:74:04:15:c7:22: 09:c0:53:92:de:76:b1:b4:4f:da:d6:fd:10:78:ae: 88:d2:d9:a4:ab:c4:ab:98:60:4d:cb:2c:92:53:fa: 92:49:f8:fa:1a:bf:80:2c:f9:7e:90:52:89:64:8c: 35:ba:05:2e:d4:81:b5:c0:f4:c8:69:6f:fc:87:9e: ed:26:d2:8f:21:a2:a8:d2:e2:13:0e:0e:ad:03:93: 09:03:6b:18:39:a6:33:3e:00:00:37:1f:a4:2e:3f: c7:b1:7f:29:65:92:c7:93:55:ac:0f:56:0b:0e:13: 8e:c4:fe:ff:4d:15:ce:7f:61:e8:b4:53:d6:ba:32: cb:72:83:9b:fc:6d:7b:05:da:2b:74:79:bb:19:5d: f8:87:69:cc:f1:f6:13:c3:ef:0d:34:ad:91:8d:a9: 8f:41:34:a9:79:b1:51:f9:65:a5:5e:fc:42:9c:38: 20:37:c9:c7:b1:ca:c5:37:3f:ff:78:26:13:97:2b: 68:ec:37:e1:61:b2:76:f6:bc:c5:9e:60:fc:78:38: 39:f6:53:0e:29:7a:e8:de:d0:b1:0d:8f:5e:f6:7e: 28:63:f4:d7:94:07:ea:a2:1b:87:76:b0:b3:7e:e6: 93:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:27:C1:EF:BF:59:EB:75:DF:30:CB:13:A6:93:22:0E:78:D2:A3:6E X509v3 Authority Key Identifier: keyid:17:00:4A:A3:31:05:B0:A0:E6:D3:EB:4E:47:C5:13:06:3D:92:CE:C2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DD4A6/6A5969A87E9511EC82EE520AC4F9AE02/FwBKozEFsKDm0-tOR8UTBj2SzsI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FwBKozEFsKDm0-tOR8UTBj2SzsI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DD4A6/6A5969A87E9511EC82EE520AC4F9AE02/FwBKozEFsKDm0-tOR8UTBj2SzsI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 06:f4:f9:a8:c9:8b:ee:2c:ee:7f:51:60:03:29:ab:d2:82:d3: 9e:73:3e:8b:8c:6a:45:df:93:4c:6d:6a:d0:f6:d7:71:ae:8c: 32:8b:a6:d5:74:6a:67:62:28:0d:c3:98:fc:85:64:e0:d8:5f: 8b:9e:dd:3b:ad:a0:42:a2:5e:b7:89:00:b6:c0:c6:64:88:06: d1:c0:7f:91:2c:bd:a7:5a:49:13:e4:4f:0f:eb:aa:25:16:a3: 84:af:55:5c:94:19:d2:af:ae:dd:2f:0a:8f:90:07:8e:aa:dd: 04:96:e2:cc:df:9f:71:72:66:de:36:f0:8a:db:ce:f8:cd:23: bb:66:22:8f:71:6b:5d:25:7e:9d:cf:c4:07:d8:02:7d:4a:c4: 3f:e7:fb:de:0c:40:a8:4e:52:2a:78:5a:c9:3b:68:34:9a:96: 08:a8:13:28:17:20:62:a7:66:65:d6:c1:55:3f:d2:42:4e:4f: 89:3a:ff:d4:b6:92:49:a7:7e:55:cc:7b:f7:ee:bd:c0:ae:ab: a3:91:9e:23:a8:48:0d:fc:24:03:36:7c:b8:45:a5:2e:b0:4c: b3:3c:9e:7f:da:26:89:42:a3:dd:74:d3:3a:5f:61:85:b7:75: fc:c0:2d:1e:ea:fb:47:c8:2e:5c:b8:db:0e:55:3d:21:f1:00: f7:8f:b3:a3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBKQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REQ0QTYxMTAvBgNVBAUTKDE3MDA0QUEzMzEwNUIwQTBFNkQzRUI0RTQ3QzUxMzA2 M0Q5MkNFQzIwHhcNMjUxMTA1MDAyMjA1WhcNMjUxMTEyMDAyMjA1WjAYMRYwFAYD VQQDEw02OTBhOThhZC01OTVlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAySVSwfqbb6QfpW3XmoCBA5ZQKg39HMwxdAQVxyIJwFOS3naxtE/a1v0QeK6I 0tmkq8SrmGBNyyySU/qSSfj6Gr+ALPl+kFKJZIw1ugUu1IG1wPTIaW/8h57tJtKP IaKo0uITDg6tA5MJA2sYOaYzPgAANx+kLj/HsX8pZZLHk1WsD1YLDhOOxP7/TRXO f2HotFPWujLLcoOb/G17BdordHm7GV34h2nM8fYTw+8NNK2RjamPQTSpebFR+WWl XvxCnDggN8nHscrFNz//eCYTlyto7DfhYbJ29rzFnmD8eDg59lMOKXro3tCxDY9e 9n4oY/TXlAfqohuHdrCzfuaTXQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFF4nwe+/ Wet13zDLE6aTIg540qNuMB8GA1UdIwQYMBaAFBcASqMxBbCg5tPrTkfFEwY9ks7C MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERDRBNi82QTU5NjlBODdF OTUxMUVDODJFRTUyMEFDNEY5QUUwMi9Gd0JLb3pFRnNLRG0wLXRPUjhVVEJqMlN6 c0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0Z3QktvekVGc0tEbTAtdE9SOFVUQmoyU3pzSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RDRBNi82QTU5NjlBODdFOTUxMUVDODJFRTUyMEFDNEY5QUUwMi9Gd0JLb3pFRnNL RG0wLXRPUjhVVEJqMlN6c0kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAG9PmoyYvuLO5/UWADKavSgtOecz6LjGpF35NMbWrQ9tdxrowyi6bV dGpnYigNw5j8hWTg2F+Lnt07raBCol63iQC2wMZkiAbRwH+RLL2nWkkT5E8P66ol FqOEr1VclBnSr67dLwqPkAeOqt0EluLM359xcmbeNvCK2874zSO7ZiKPcWtdJX6d z8QH2AJ9SsQ/5/veDECoTlIqeFrJO2g0mpYIqBMoFyBip2Zl1sFVP9JCTk+JOv/U tpJJp35VzHv37r3ArqujkZ4jqEgN/CQDNny4RaUusEyzPJ5/2iaJQqPddNM6X2GF t3X8wC0e6vtHyC5cuNsOVT0h8QD3j7Oj -----END CERTIFICATE-----Generated at Wed Nov 5 11:55:41 2025 by rpki-client