$ rpki-client -vvf rpki.apnic.net/member_repository/A91E2AE5/9D7276B65CA911E8AA42A346C4F9AE02/fGOyg9m4oG7q0GIbgj7Q9OaZ3fQ.mft File: fGOyg9m4oG7q0GIbgj7Q9OaZ3fQ.mft (raw, json) Hash identifier: UzUgJq4qjpqibKJCYSWxDtpMF3cQAfRVlMBd/V4WN8k= Subject key identifier: 4C:4D:C6:6B:99:21:D7:96:FB:39:BC:0C:AF:76:38:3C:C4:C9:F0:21 Authority key identifier: 7C:63:B2:83:D9:B8:A0:6E:EA:D0:62:1B:82:3E:D0:F4:E6:99:DD:F4 Certificate issuer: /CN=A91E2AE5/serialNumber=7C63B283D9B8A06EEAD0621B823ED0F4E699DDF4 Certificate serial: 1520 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fGOyg9m4oG7q0GIbgj7Q9OaZ3fQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E2AE5/9D7276B65CA911E8AA42A346C4F9AE02/fGOyg9m4oG7q0GIbgj7Q9OaZ3fQ.mft Manifest number: 150F Signing time: Tue 04 Nov 2025 15:35:05 +0000 Manifest this update: Tue 04 Nov 2025 15:35:04 +0000 Manifest next update: Tue 11 Nov 2025 15:35:04 +0000 Files and hashes: 1: fGOyg9m4oG7q0GIbgj7Q9OaZ3fQ.crl (hash: y7N0Hn9KSKfscB5APc5lmcodaAu4jTVm0Gdc9G4eL3s=) 2: C163B1881A4711EDA547FE24C4F9AE02.roa (hash: YyHC9fQHplsWKxQpqgQ61v95ti092y+Fsw7rZXStZmE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E2AE5/9D7276B65CA911E8AA42A346C4F9AE02/fGOyg9m4oG7q0GIbgj7Q9OaZ3fQ.crl rsync://rpki.apnic.net/member_repository/A91E2AE5/9D7276B65CA911E8AA42A346C4F9AE02/fGOyg9m4oG7q0GIbgj7Q9OaZ3fQ.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fGOyg9m4oG7q0GIbgj7Q9OaZ3fQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 15:35:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5408 (0x1520) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E2AE5, serialNumber=7C63B283D9B8A06EEAD0621B823ED0F4E699DDF4 Validity Not Before: Nov 4 15:35:04 2025 GMT Not After : Nov 11 15:35:04 2025 GMT Subject: CN=690a1d28-330f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:b4:53:60:da:d6:2b:b0:f9:a2:6c:d4:03:8f: a7:22:60:d9:a0:3c:41:64:75:62:9a:82:10:88:d7: bd:10:ba:07:e6:e0:e5:21:dd:7e:6a:21:5a:ef:9c: 21:d1:08:57:b6:20:c3:8c:80:a0:0a:9f:89:d6:4f: 84:7d:cc:bb:e4:81:ea:c1:ba:ed:90:6f:8c:dc:39: eb:72:dd:24:81:43:38:05:4a:5e:f1:dd:ac:d8:f3: d2:ba:5d:ef:ff:bc:f0:bd:8e:f6:39:fc:c1:7c:6c: 72:09:ae:b2:b8:44:34:5e:f4:ce:09:67:30:92:56: eb:28:1f:5c:1a:bd:0e:36:ac:72:74:dd:ff:3e:d8: e1:ea:83:1c:c1:50:f4:17:3c:ea:3f:9a:60:b8:6a: e8:a5:81:79:47:d6:90:1c:95:56:b2:63:87:2b:c0: 80:7b:97:76:d7:0e:d1:da:21:dc:cf:fe:66:04:9d: 73:e1:e8:9d:2d:57:01:6f:53:89:e0:8c:26:f0:dc: e8:84:19:fe:7d:47:3f:46:30:69:f6:1e:ff:12:22: 7e:a6:25:e9:e8:de:93:e9:34:0f:5c:2e:2b:bc:43: a1:d0:38:d0:ec:77:46:d7:88:57:22:6d:c9:04:ac: 6d:d1:b2:00:01:52:1d:7b:65:0c:74:5a:b1:71:8a: d0:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:4D:C6:6B:99:21:D7:96:FB:39:BC:0C:AF:76:38:3C:C4:C9:F0:21 X509v3 Authority Key Identifier: keyid:7C:63:B2:83:D9:B8:A0:6E:EA:D0:62:1B:82:3E:D0:F4:E6:99:DD:F4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E2AE5/9D7276B65CA911E8AA42A346C4F9AE02/fGOyg9m4oG7q0GIbgj7Q9OaZ3fQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fGOyg9m4oG7q0GIbgj7Q9OaZ3fQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E2AE5/9D7276B65CA911E8AA42A346C4F9AE02/fGOyg9m4oG7q0GIbgj7Q9OaZ3fQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 64:c9:23:76:97:91:f0:e7:1c:b3:ed:56:1b:52:70:8f:c5:83: 40:ca:0e:24:33:9c:ea:ed:d5:53:57:33:2a:c0:19:17:7c:31: 20:21:cc:a1:4b:d1:0f:70:65:6c:9e:81:8b:61:b0:0f:4c:5b: 11:23:92:80:41:23:ae:61:c8:14:f2:65:78:95:6a:b0:54:96: fb:9c:50:78:1b:e6:55:01:06:8b:e5:f2:88:94:ef:6d:36:52: 1d:1e:ec:49:07:9d:c0:8d:2b:67:bf:70:78:f8:75:10:ce:21: f4:aa:b7:15:bd:33:95:16:3c:f3:86:57:1d:47:f9:06:45:54: 17:0b:c9:0b:e8:9c:cd:d2:cd:57:23:ca:d2:ce:e4:43:80:61: f3:de:ec:f3:84:1f:88:54:b2:1b:59:09:42:05:eb:20:c9:d0: 4b:31:73:fc:1e:e6:3d:a8:6a:e2:e3:9b:d8:37:e9:77:80:42: 29:d1:38:5b:3c:b6:23:68:fa:64:32:27:6f:7e:3b:7b:f5:73: c9:3c:a6:b0:d1:7f:c6:87:a9:5b:02:f0:19:3c:b9:cb:95:eb: 0a:10:a9:e5:18:00:f3:ad:9b:ef:90:a4:d7:3c:a5:e8:f2:04: 4a:7c:f2:a6:03:26:3d:60:03:4d:d0:2e:46:bd:b7:ac:d9:7d: a2:47:8e:57 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICFSAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTJBRTUxMTAvBgNVBAUTKDdDNjNCMjgzRDlCOEEwNkVFQUQwNjIxQjgyM0VEMEY0 RTY5OURERjQwHhcNMjUxMTA0MTUzNTA0WhcNMjUxMTExMTUzNTA0WjAYMRYwFAYD VQQDEw02OTBhMWQyOC0zMzBmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4rRTYNrWK7D5omzUA4+nImDZoDxBZHVimoIQiNe9ELoH5uDlId1+aiFa75wh 0QhXtiDDjICgCp+J1k+Efcy75IHqwbrtkG+M3Dnrct0kgUM4BUpe8d2s2PPSul3v /7zwvY72OfzBfGxyCa6yuEQ0XvTOCWcwklbrKB9cGr0ONqxydN3/Ptjh6oMcwVD0 FzzqP5pguGropYF5R9aQHJVWsmOHK8CAe5d21w7R2iHcz/5mBJ1z4eidLVcBb1OJ 4Iwm8NzohBn+fUc/RjBp9h7/EiJ+piXp6N6T6TQPXC4rvEOh0DjQ7HdG14hXIm3J BKxt0bIAAVIde2UMdFqxcYrQwwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFExNxmuZ IdeW+zm8DK92ODzEyfAhMB8GA1UdIwQYMBaAFHxjsoPZuKBu6tBiG4I+0PTmmd30 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMkFFNS85RDcyNzZCNjVD QTkxMUU4QUE0MkEzNDZDNEY5QUUwMi9mR095ZzltNG9HN3EwR0liZ2o3UTlPYVoz ZlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2ZHT3lnOW00b0c3cTBHSWJnajdROU9hWjNmUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MkFFNS85RDcyNzZCNjVDQTkxMUU4QUE0MkEzNDZDNEY5QUUwMi9mR095ZzltNG9H N3EwR0liZ2o3UTlPYVozZlEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBkySN2l5Hw5xyz7VYbUnCPxYNAyg4kM5zq7dVTVzMqwBkXfDEgIcyh S9EPcGVsnoGLYbAPTFsRI5KAQSOuYcgU8mV4lWqwVJb7nFB4G+ZVAQaL5fKIlO9t NlIdHuxJB53AjStnv3B4+HUQziH0qrcVvTOVFjzzhlcdR/kGRVQXC8kL6JzN0s1X I8rSzuRDgGHz3uzzhB+IVLIbWQlCBesgydBLMXP8HuY9qGri45vYN+l3gEIp0Thb PLYjaPpkMidvfjt79XPJPKaw0X/Gh6lbAvAZPLnLlesKEKnlGADzrZvvkKTXPKXo 8gRKfPKmAyY9YANN0C5Gvbes2X2iR45X -----END CERTIFICATE-----Generated at Wed Nov 5 15:05:36 2025 by rpki-client