$ rpki-client -vvf rpki.apnic.net/member_repository/A91E275B/AB2022301DA911E2B095C4A408B02CD2/fxYazxZAB-j32MdxFaWjnQQ2SPg.mft File: fxYazxZAB-j32MdxFaWjnQQ2SPg.mft (raw, json) Hash identifier: sHhd9S/b5aNDEFgxs/fxUOgz8ttyRR/kv3LJ2qxlqYU= Subject key identifier: B2:16:A6:C4:0A:50:ED:C9:65:42:65:05:B0:49:DD:F6:01:DB:EE:11 Authority key identifier: 7F:16:1A:CF:16:40:07:E8:F7:D8:C7:71:15:A5:A3:9D:04:36:48:F8 Certificate issuer: /CN=A91E275B/serialNumber=7F161ACF164007E8F7D8C77115A5A39D043648F8 Certificate serial: 34D2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fxYazxZAB-j32MdxFaWjnQQ2SPg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E275B/AB2022301DA911E2B095C4A408B02CD2/fxYazxZAB-j32MdxFaWjnQQ2SPg.mft Manifest number: 9B13 Signing time: Tue 04 Nov 2025 15:19:08 +0000 Manifest this update: Tue 04 Nov 2025 15:19:08 +0000 Manifest next update: Tue 11 Nov 2025 15:19:08 +0000 Files and hashes: 1: fxYazxZAB-j32MdxFaWjnQQ2SPg.crl (hash: Fh4a0LHyJJEJ7a/oWf6PJzkc44C028lJzmjY7/bqZ70=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E275B/AB2022301DA911E2B095C4A408B02CD2/fxYazxZAB-j32MdxFaWjnQQ2SPg.crl rsync://rpki.apnic.net/member_repository/A91E275B/AB2022301DA911E2B095C4A408B02CD2/fxYazxZAB-j32MdxFaWjnQQ2SPg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fxYazxZAB-j32MdxFaWjnQQ2SPg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 15:19:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13522 (0x34d2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E275B, serialNumber=7F161ACF164007E8F7D8C77115A5A39D043648F8 Validity Not Before: Nov 4 15:19:08 2025 GMT Not After : Nov 11 15:19:08 2025 GMT Subject: CN=690a196c-4f3f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:68:8a:c2:ea:b4:f1:2c:06:e9:ee:72:16:e7: 8e:79:e2:c9:c8:60:16:00:84:e1:2c:a1:b4:21:ac: b0:07:97:47:12:bf:06:f9:df:64:cd:cd:60:27:52: f5:af:f1:76:24:86:12:5d:52:cd:d4:85:c1:7b:ed: a7:fe:d8:bb:2c:ff:a2:e4:27:ef:8d:72:b5:b1:6f: 92:56:3f:f4:ac:b1:ea:57:87:f4:e0:c2:5a:88:af: 04:ff:b1:41:89:20:c6:ef:1c:2d:bf:ff:39:ac:49: 98:b8:cc:31:5a:30:02:0c:07:8d:88:c7:32:6c:11: 75:3b:7b:fc:59:df:b3:b0:c4:8d:ad:d5:73:c8:c2: 2f:1b:cc:6f:f9:2c:c3:c0:c0:22:8b:11:eb:df:1f: 96:f8:b8:b8:73:f3:a4:65:6e:4a:26:10:0a:ef:84: 2f:42:c1:0f:a9:52:18:e6:f8:4f:a6:36:19:8e:ba: d2:40:53:8f:39:48:d1:78:17:d9:22:55:49:30:f4: 61:ad:4a:74:7f:59:c9:cc:c9:e5:31:cf:d2:33:0b: e3:b8:6c:92:f7:9d:cb:62:89:dc:6a:ee:7f:ad:88: 4c:b2:f6:44:90:c5:db:25:d8:4c:2b:45:98:a5:ef: db:73:11:aa:78:73:9a:2a:37:35:7c:aa:cb:9b:d5: 7e:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:16:A6:C4:0A:50:ED:C9:65:42:65:05:B0:49:DD:F6:01:DB:EE:11 X509v3 Authority Key Identifier: keyid:7F:16:1A:CF:16:40:07:E8:F7:D8:C7:71:15:A5:A3:9D:04:36:48:F8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E275B/AB2022301DA911E2B095C4A408B02CD2/fxYazxZAB-j32MdxFaWjnQQ2SPg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fxYazxZAB-j32MdxFaWjnQQ2SPg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E275B/AB2022301DA911E2B095C4A408B02CD2/fxYazxZAB-j32MdxFaWjnQQ2SPg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 95:d5:f6:cc:45:63:6a:69:14:60:80:3e:b0:61:b5:be:19:4f: ab:60:99:1a:ae:77:91:22:2b:06:55:e1:67:13:98:1d:bc:28: b8:c6:2e:8c:84:60:3d:2f:38:68:ca:9a:87:a6:ba:4b:ec:b5: 39:22:49:4f:c7:a6:82:2e:03:a1:32:59:aa:c4:d6:2b:74:e4: 6e:1a:35:e4:19:b1:be:fb:70:bd:90:56:c0:2b:de:af:bd:3b: 86:ce:a9:3c:7e:19:0e:bb:95:77:e3:45:e2:ad:1e:4b:3b:ea: d6:85:51:21:50:18:a9:14:16:10:3c:3c:d3:ff:bb:33:ed:f0: e2:55:d2:ec:33:1e:25:d8:26:a4:aa:1a:b1:c8:52:d8:1a:a9: 5f:89:31:89:33:fb:78:e4:16:a3:5c:2b:6c:c5:fe:6e:e4:76: 92:86:de:89:ad:e9:48:96:dd:1a:82:5c:17:e4:4d:82:e7:f6: 59:a7:d8:03:2b:c4:19:69:73:96:6a:4a:b5:4f:65:01:57:e3: 62:f4:79:09:7b:65:a1:02:96:fb:06:8e:ec:a4:f6:40:94:fa: 01:72:9d:81:07:8b:b6:12:46:51:fc:ac:93:c2:55:db:58:12: 2a:be:ef:92:ab:82:16:27:65:9d:cd:86:39:32:9c:6e:ea:d9: 89:c4:e6:40 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNNIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTI3NUIxMTAvBgNVBAUTKDdGMTYxQUNGMTY0MDA3RThGN0Q4Qzc3MTE1QTVBMzlE MDQzNjQ4RjgwHhcNMjUxMTA0MTUxOTA4WhcNMjUxMTExMTUxOTA4WjAYMRYwFAYD VQQDEw02OTBhMTk2Yy00ZjNmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0GiKwuq08SwG6e5yFueOeeLJyGAWAIThLKG0IaywB5dHEr8G+d9kzc1gJ1L1 r/F2JIYSXVLN1IXBe+2n/ti7LP+i5CfvjXK1sW+SVj/0rLHqV4f04MJaiK8E/7FB iSDG7xwtv/85rEmYuMwxWjACDAeNiMcybBF1O3v8Wd+zsMSNrdVzyMIvG8xv+SzD wMAiixHr3x+W+Li4c/OkZW5KJhAK74QvQsEPqVIY5vhPpjYZjrrSQFOPOUjReBfZ IlVJMPRhrUp0f1nJzMnlMc/SMwvjuGyS953LYoncau5/rYhMsvZEkMXbJdhMK0WY pe/bcxGqeHOaKjc1fKrLm9V+HwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLIWpsQK UO3JZUJlBbBJ3fYB2+4RMB8GA1UdIwQYMBaAFH8WGs8WQAfo99jHcRWlo50ENkj4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMjc1Qi9BQjIwMjIzMDFE QTkxMUUyQjA5NUM0QTQwOEIwMkNEMi9meFlhenhaQUItajMyTWR4RmFXam5RUTJT UGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2Z4WWF6eFpBQi1qMzJNZHhGYVdqblFRMlNQZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF Mjc1Qi9BQjIwMjIzMDFEQTkxMUUyQjA5NUM0QTQwOEIwMkNEMi9meFlhenhaQUIt ajMyTWR4RmFXam5RUTJTUGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCV1fbMRWNqaRRggD6wYbW+GU+rYJkarneRIisGVeFnE5gdvCi4xi6M hGA9LzhoypqHprpL7LU5IklPx6aCLgOhMlmqxNYrdORuGjXkGbG++3C9kFbAK96v vTuGzqk8fhkOu5V340XirR5LO+rWhVEhUBipFBYQPDzT/7sz7fDiVdLsMx4l2Cak qhqxyFLYGqlfiTGJM/t45BajXCtsxf5u5HaSht6JrelIlt0aglwX5E2C5/ZZp9gD K8QZaXOWakq1T2UBV+Ni9HkJe2WhApb7Bo7spPZAlPoBcp2BB4u2EkZR/KyTwlXb WBIqvu+Sq4IWJ2WdzYY5Mpxu6tmJxOZA -----END CERTIFICATE-----Generated at Thu Nov 6 02:13:34 2025 by rpki-client