$ rpki-client -vvf rpki.apnic.net/member_repository/A91DF93A/F7DFA72EE5F311EAB3A91561C4F9AE02/fiRDENekVusSe5JsQvJteems24g.mft File: fiRDENekVusSe5JsQvJteems24g.mft (raw, json) Hash identifier: bC6euDA5IMlSIVLky8ih5LzYl94ap1axN89EOX8UiwA= Subject key identifier: D0:BB:42:26:85:25:B5:6F:BF:89:35:D5:EF:E5:0C:8F:B6:6C:8F:7D Authority key identifier: 7E:24:43:10:D7:A4:56:EB:12:7B:92:6C:42:F2:6D:79:E9:AC:DB:88 Certificate issuer: /CN=A91DF93A/serialNumber=7E244310D7A456EB127B926C42F26D79E9ACDB88 Certificate serial: 090F Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fiRDENekVusSe5JsQvJteems24g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DF93A/F7DFA72EE5F311EAB3A91561C4F9AE02/fiRDENekVusSe5JsQvJteems24g.mft Manifest number: 08AA Signing time: Tue 04 Nov 2025 20:49:12 +0000 Manifest this update: Tue 04 Nov 2025 20:49:11 +0000 Manifest next update: Tue 11 Nov 2025 20:49:11 +0000 Files and hashes: 1: fiRDENekVusSe5JsQvJteems24g.crl (hash: vCYBZYN2F0sKiVAwfvDiG0WLjY1NqN8dl3jmFLEKZiM=) 2: 536CEA945D5D11F0A20A8B47C4F9AE02.roa (hash: NudhcCG6U8c/iVjiv9Q5GA7zP2bSr5Lt2Lyl6qOq+zo=) 3: BE33817A69AE11EEBBC89D75C4F9AE02.roa (hash: ygq1dkv+uF4QDS+bggz98LoWciehSBzYRj/fw8Od03I=) 4: 885A3B4C198C11EEA06C1429C4F9AE02.roa (hash: UwbxqlIoeWN/uj0INOlxAStWat7EJVu9aWA6OuSDC9Q=) 5: B59B34B2A59511EFB1B8AF36C4F9AE02.roa (hash: vWyefttpePLkPBEoycC5X0lmEGRfAIuwi2Ngs4ojIYc=) 6: 48DDFB8E8FAF11F0B59F0948C4F9AE02.roa (hash: mA/WE2Bh4RmqFgp1Gp11Wu83VKDJFyoxbw2SeY/E7bk=) 7: A64C29AA3D9811EE88B2694CC4F9AE02.roa (hash: /yoDz91aVKDMVKQFN5vWqL0kcfwjMSXqa0ohs5b1IqQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DF93A/F7DFA72EE5F311EAB3A91561C4F9AE02/fiRDENekVusSe5JsQvJteems24g.crl rsync://rpki.apnic.net/member_repository/A91DF93A/F7DFA72EE5F311EAB3A91561C4F9AE02/fiRDENekVusSe5JsQvJteems24g.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fiRDENekVusSe5JsQvJteems24g.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 20:49:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2319 (0x90f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DF93A, serialNumber=7E244310D7A456EB127B926C42F26D79E9ACDB88 Validity Not Before: Nov 4 20:49:11 2025 GMT Not After : Nov 11 20:49:11 2025 GMT Subject: CN=690a66c8-46a5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:77:a8:d7:08:94:ec:a7:bf:77:3a:9e:be:8a: 2d:e7:53:9a:a4:0d:ab:4a:c6:0d:9b:f5:52:da:58: 10:42:18:af:e2:6d:02:09:b5:04:a6:b1:10:07:8d: ef:ef:4f:81:cb:68:ab:ea:49:68:e3:3b:fb:bc:da: 77:c3:e3:c0:23:77:19:be:1b:1f:bc:5f:e3:3f:b6: cc:2e:f1:42:86:33:b7:71:e6:7b:62:be:6a:4d:84: 6b:66:f6:19:1e:cb:75:1d:c0:1c:30:9e:c6:0c:2d: f5:09:cd:fa:15:c9:a6:0f:bd:bf:73:91:3c:ee:39: c5:ed:51:73:55:42:dd:7b:f4:ff:ce:2c:19:4c:fb: 80:83:a2:04:6c:01:9b:ff:a4:f6:11:f3:ea:0f:4d: a0:21:71:f0:86:79:5b:55:14:bf:e2:74:4f:2f:48: 9d:38:18:86:d4:44:bb:a5:ee:62:12:a2:cd:58:0f: 98:fa:3c:5a:e8:72:c7:de:cc:b2:15:8e:b1:01:d9: 4b:0b:8c:0f:14:56:c6:cc:fc:cf:13:b9:db:a1:a8: c7:0e:0e:b5:02:09:06:db:6a:7e:79:e7:90:41:28: b9:5d:57:81:43:b0:55:43:bf:cf:c1:27:9e:9b:17: 78:d1:00:12:c4:68:88:3f:91:1d:58:c6:41:8d:66: 38:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:BB:42:26:85:25:B5:6F:BF:89:35:D5:EF:E5:0C:8F:B6:6C:8F:7D X509v3 Authority Key Identifier: keyid:7E:24:43:10:D7:A4:56:EB:12:7B:92:6C:42:F2:6D:79:E9:AC:DB:88 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DF93A/F7DFA72EE5F311EAB3A91561C4F9AE02/fiRDENekVusSe5JsQvJteems24g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fiRDENekVusSe5JsQvJteems24g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DF93A/F7DFA72EE5F311EAB3A91561C4F9AE02/fiRDENekVusSe5JsQvJteems24g.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 65:1b:b9:d9:22:e2:2e:06:13:5d:cb:20:ee:f3:86:d1:63:28: ae:47:94:b4:53:11:e1:3d:84:59:9f:b0:c6:78:43:61:ab:2b: 0e:a9:80:d5:f6:a8:64:44:93:f4:92:e3:16:c8:c0:86:68:d9: 52:27:f2:c6:61:c5:84:d5:8f:06:8f:96:45:e0:25:22:5c:1f: 43:61:a7:a9:3a:78:80:26:f4:79:9f:e6:ad:1e:f6:df:d0:af: 8e:1f:81:64:66:68:40:13:50:f8:1a:45:61:be:4b:db:bc:c0: e8:0d:d9:30:ed:40:d8:dd:3c:a2:95:48:72:4d:89:30:a8:98: d3:64:51:02:9a:43:8c:da:1d:76:02:a0:03:53:3b:d1:ab:22: 4b:21:e7:f1:82:13:79:a9:e8:dc:24:31:32:5b:de:44:ad:9f: e0:9b:93:74:08:2a:8b:85:ad:c2:b3:f6:1a:9e:0d:56:ea:cd: ce:41:5d:30:ac:ab:cd:f9:7b:f2:6f:db:a2:98:ba:f6:16:7b: ed:8e:9c:07:02:ee:46:6f:c0:99:63:63:74:c5:7f:b9:67:70: 57:84:09:a1:26:0c:0b:97:5f:eb:47:04:32:17:7b:ff:de:a5: e2:be:02:c1:0f:4a:cb:7c:eb:41:6e:be:ad:b8:cd:b8:99:13: b1:fb:6d:13 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCQ8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REY5M0ExMTAvBgNVBAUTKDdFMjQ0MzEwRDdBNDU2RUIxMjdCOTI2QzQyRjI2RDc5 RTlBQ0RCODgwHhcNMjUxMTA0MjA0OTExWhcNMjUxMTExMjA0OTExWjAYMRYwFAYD VQQDEw02OTBhNjZjOC00NmE1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuHeo1wiU7Ke/dzqevoot51OapA2rSsYNm/VS2lgQQhiv4m0CCbUEprEQB43v 70+By2ir6klo4zv7vNp3w+PAI3cZvhsfvF/jP7bMLvFChjO3ceZ7Yr5qTYRrZvYZ Hst1HcAcMJ7GDC31Cc36FcmmD72/c5E87jnF7VFzVULde/T/ziwZTPuAg6IEbAGb /6T2EfPqD02gIXHwhnlbVRS/4nRPL0idOBiG1ES7pe5iEqLNWA+Y+jxa6HLH3syy FY6xAdlLC4wPFFbGzPzPE7nboajHDg61AgkG22p+eeeQQSi5XVeBQ7BVQ7/PwSee mxd40QASxGiIP5EdWMZBjWY4vQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNC7QiaF JbVvv4k11e/lDI+2bI99MB8GA1UdIwQYMBaAFH4kQxDXpFbrEnuSbELybXnprNuI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERjkzQS9GN0RGQTcyRUU1 RjMxMUVBQjNBOTE1NjFDNEY5QUUwMi9maVJERU5la1Z1c1NlNUpzUXZKdGVlbXMy NGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2ZpUkRFTmVrVnVzU2U1SnNRdkp0ZWVtczI0Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RjkzQS9GN0RGQTcyRUU1RjMxMUVBQjNBOTE1NjFDNEY5QUUwMi9maVJERU5la1Z1 c1NlNUpzUXZKdGVlbXMyNGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBlG7nZIuIuBhNdyyDu84bRYyiuR5S0UxHhPYRZn7DGeENhqysOqYDV 9qhkRJP0kuMWyMCGaNlSJ/LGYcWE1Y8Gj5ZF4CUiXB9DYaepOniAJvR5n+atHvbf 0K+OH4FkZmhAE1D4GkVhvkvbvMDoDdkw7UDY3TyilUhyTYkwqJjTZFECmkOM2h12 AqADUzvRqyJLIefxghN5qejcJDEyW95ErZ/gm5N0CCqLha3Cs/Yang1W6s3OQV0w rKvN+Xvyb9uimLr2FnvtjpwHAu5Gb8CZY2N0xX+5Z3BXhAmhJgwLl1/rRwQyF3v/ 3qXivgLBD0rLfOtBbr6tuM24mROx+20T -----END CERTIFICATE-----Generated at Wed Nov 5 05:10:21 2025 by rpki-client