$ rpki-client -vvf rpki.apnic.net/member_repository/A91F2230/ADFA554C708211E9B7BC390AC4F9AE02/F2pOA7VAryUUqLxxnCug-fdv-y8.mft File: F2pOA7VAryUUqLxxnCug-fdv-y8.mft (raw, json) Hash identifier: EhMumXqL0IEgh8Ycg45vfGVaBNiWmNbtyD6/m4RBlok= Subject key identifier: 18:1C:53:AD:60:47:18:85:D5:4C:AE:C6:F0:E3:09:E7:DD:4B:26:3D Authority key identifier: 17:6A:4E:03:B5:40:AF:25:14:A8:BC:71:9C:2B:A0:F9:F7:6F:FB:2F Certificate issuer: /CN=A91F2230/serialNumber=176A4E03B540AF2514A8BC719C2BA0F9F76FFB2F Certificate serial: 0F8F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F2pOA7VAryUUqLxxnCug-fdv-y8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F2230/ADFA554C708211E9B7BC390AC4F9AE02/F2pOA7VAryUUqLxxnCug-fdv-y8.mft Manifest number: 0F86 Signing time: Sun 02 Nov 2025 17:33:44 +0000 Manifest this update: Sun 02 Nov 2025 17:33:44 +0000 Manifest next update: Sun 09 Nov 2025 17:33:44 +0000 Files and hashes: 1: F2pOA7VAryUUqLxxnCug-fdv-y8.crl (hash: q1sJ2UXDG7dcOrgv0VRy0liAza/03OrXnjYlFqXwGf0=) 2: 09CEF4D0708411E9AC9EA90EC4F9AE02.roa (hash: qze9TLSC/LlQUaDdTzlKDoE3Bw7Tcrh+S+c1zck+d7A=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F2230/ADFA554C708211E9B7BC390AC4F9AE02/F2pOA7VAryUUqLxxnCug-fdv-y8.crl rsync://rpki.apnic.net/member_repository/A91F2230/ADFA554C708211E9B7BC390AC4F9AE02/F2pOA7VAryUUqLxxnCug-fdv-y8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F2pOA7VAryUUqLxxnCug-fdv-y8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 17:33:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3983 (0xf8f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F2230, serialNumber=176A4E03B540AF2514A8BC719C2BA0F9F76FFB2F Validity Not Before: Nov 2 17:33:44 2025 GMT Not After : Nov 9 17:33:44 2025 GMT Subject: CN=690795f8-123c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:2c:50:a8:03:d5:76:7a:ab:d7:f0:c7:66:6d: 71:05:9d:a1:0c:5e:6f:8b:04:9d:6d:df:85:52:84: f5:7a:67:ca:02:25:ef:60:98:85:82:d8:98:2d:0b: 33:e9:16:00:6d:f7:b0:3c:06:9b:96:bb:eb:97:d1: cd:9c:70:6f:9b:9d:1d:84:bb:d3:0c:d8:ce:94:db: 77:43:c6:09:11:db:51:f2:9f:a3:ae:49:64:3c:58: fc:90:fa:59:60:b5:d2:9c:ff:ca:7f:56:ee:11:06: 52:2a:e1:5f:f2:41:f9:d0:10:ff:32:33:59:96:4b: d6:c9:c6:17:2b:ac:80:c3:ae:ac:d3:84:95:b6:36: f5:f6:63:a9:e5:63:2f:ed:e9:80:98:eb:0b:c1:af: 58:99:f0:09:32:aa:ca:f8:d5:fa:83:43:ae:5c:44: d5:1b:47:d4:41:b3:bb:34:00:13:e6:86:fa:ea:bd: 7e:9e:0e:54:58:54:be:d6:b9:76:0c:3b:ea:a8:28: 10:65:8b:b8:97:1e:fc:e3:c7:56:4c:ff:2b:51:f6: 4f:2b:f4:a7:61:a5:84:1f:7c:f1:81:58:29:a9:44: 23:1b:84:f1:38:c5:3c:f6:4d:bd:0e:b9:97:6e:7b: c1:f2:c2:2c:3d:9f:59:a3:22:3c:35:34:eb:08:88: 3e:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:1C:53:AD:60:47:18:85:D5:4C:AE:C6:F0:E3:09:E7:DD:4B:26:3D X509v3 Authority Key Identifier: keyid:17:6A:4E:03:B5:40:AF:25:14:A8:BC:71:9C:2B:A0:F9:F7:6F:FB:2F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F2230/ADFA554C708211E9B7BC390AC4F9AE02/F2pOA7VAryUUqLxxnCug-fdv-y8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F2pOA7VAryUUqLxxnCug-fdv-y8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F2230/ADFA554C708211E9B7BC390AC4F9AE02/F2pOA7VAryUUqLxxnCug-fdv-y8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 51:3e:ed:62:03:27:01:52:5b:57:a3:c5:79:5c:99:62:54:00: 56:da:9b:06:c6:a9:bf:28:d8:f4:eb:fd:25:70:1a:f6:ba:1b: 18:b3:e0:90:09:46:41:b1:bf:04:5c:d7:c6:1c:da:5a:b5:3f: d3:06:a2:c1:43:31:b5:4c:8f:4a:31:fb:c2:83:da:4c:6f:97: 75:f3:1b:31:1d:5d:84:82:33:93:a0:ca:7a:2b:a4:7a:4e:1b: d1:4d:f2:ad:3e:c3:89:10:a1:6f:21:44:85:f6:16:89:2b:3a: f4:f3:04:c5:f0:96:c3:97:41:41:ce:6c:df:55:dc:ac:6a:17: ad:d1:8e:de:83:ef:93:56:cd:f3:e8:10:49:6b:01:8a:a7:4f: 9f:46:3c:38:23:ea:ae:ad:a5:e6:99:6a:f3:ee:7a:6f:66:a5: ec:7d:9a:c0:bc:fb:8a:ed:d7:e7:b4:ca:29:73:f8:bd:90:5c: 52:93:3c:77:8a:2f:e3:1b:f9:75:68:7e:e3:9c:92:58:9c:07: f2:f4:9b:12:58:eb:6b:9a:a8:b5:2c:dd:e2:f1:71:db:3f:93: ad:23:67:98:81:0c:e8:d7:fa:ef:c2:67:2a:80:f1:13:d8:8a: 4e:2e:3b:8d:3b:ce:d8:fa:38:1e:98:70:14:69:1d:3c:5b:7b: a9:fb:65:63 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICD48wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjIyMzAxMTAvBgNVBAUTKDE3NkE0RTAzQjU0MEFGMjUxNEE4QkM3MTlDMkJBMEY5 Rjc2RkZCMkYwHhcNMjUxMTAyMTczMzQ0WhcNMjUxMTA5MTczMzQ0WjAYMRYwFAYD VQQDEw02OTA3OTVmOC0xMjNjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA8yxQqAPVdnqr1/DHZm1xBZ2hDF5viwSdbd+FUoT1emfKAiXvYJiFgtiYLQsz 6RYAbfewPAablrvrl9HNnHBvm50dhLvTDNjOlNt3Q8YJEdtR8p+jrklkPFj8kPpZ YLXSnP/Kf1buEQZSKuFf8kH50BD/MjNZlkvWycYXK6yAw66s04SVtjb19mOp5WMv 7emAmOsLwa9YmfAJMqrK+NX6g0OuXETVG0fUQbO7NAAT5ob66r1+ng5UWFS+1rl2 DDvqqCgQZYu4lx7848dWTP8rUfZPK/SnYaWEH3zxgVgpqUQjG4TxOMU89k29DrmX bnvB8sIsPZ9ZoyI8NTTrCIg+HwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBgcU61g RxiF1UyuxvDjCefdSyY9MB8GA1UdIwQYMBaAFBdqTgO1QK8lFKi8cZwroPn3b/sv MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMjIzMC9BREZBNTU0Qzcw ODIxMUU5QjdCQzM5MEFDNEY5QUUwMi9GMnBPQTdWQXJ5VVVxTHh4bkN1Zy1mZHYt eTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0YycE9BN1ZBcnlVVXFMeHhuQ3VnLWZkdi15OC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG MjIzMC9BREZBNTU0QzcwODIxMUU5QjdCQzM5MEFDNEY5QUUwMi9GMnBPQTdWQXJ5 VVVxTHh4bkN1Zy1mZHYteTgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBRPu1iAycBUltXo8V5XJliVABW2psGxqm/KNj06/0lcBr2uhsYs+CQ CUZBsb8EXNfGHNpatT/TBqLBQzG1TI9KMfvCg9pMb5d18xsxHV2EgjOToMp6K6R6 ThvRTfKtPsOJEKFvIUSF9haJKzr08wTF8JbDl0FBzmzfVdysahet0Y7eg++TVs3z 6BBJawGKp0+fRjw4I+quraXmmWrz7npvZqXsfZrAvPuK7dfntMopc/i9kFxSkzx3 ii/jG/l1aH7jnJJYnAfy9JsSWOtrmqi1LN3i8XHbP5OtI2eYgQzo1/rvwmcqgPET 2IpOLjuNO87Y+jgemHAUaR08W3up+2Vj -----END CERTIFICATE-----Generated at Tue Nov 4 16:04:47 2025 by rpki-client