$ rpki-client -vvf rpki.apnic.net/member_repository/A91F57D9/0717E9EE9F5D11ECBBCA9618C4F9AE02/FDm85NeiKugDbOsu5uavGPIbtZM.mft File: FDm85NeiKugDbOsu5uavGPIbtZM.mft (raw, json) Hash identifier: QZYHbiQCM+1yuoGfdB/BV0Y9NfyerVyw1yy5HqUd3JI= Subject key identifier: C4:90:93:1E:19:DF:08:E0:CA:8D:F7:FF:59:DD:93:71:03:05:C1:48 Authority key identifier: 14:39:BC:E4:D7:A2:2A:E8:03:6C:EB:2E:E6:E6:AF:18:F2:1B:B5:93 Certificate issuer: /CN=A91F57D9/serialNumber=1439BCE4D7A22AE8036CEB2EE6E6AF18F21BB593 Certificate serial: 03EA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FDm85NeiKugDbOsu5uavGPIbtZM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F57D9/0717E9EE9F5D11ECBBCA9618C4F9AE02/FDm85NeiKugDbOsu5uavGPIbtZM.mft Manifest number: 03DF Signing time: Mon 03 Nov 2025 00:31:54 +0000 Manifest this update: Mon 03 Nov 2025 00:31:54 +0000 Manifest next update: Mon 10 Nov 2025 00:31:54 +0000 Files and hashes: 1: FDm85NeiKugDbOsu5uavGPIbtZM.crl (hash: OFRjbpPe8Ckfb8iism0l0pA7yjTGCyN6kmtnW6Ubvlc=) 2: CD22C9C8DC0D11ECA064B94CC4F9AE02.roa (hash: h1qvpOWxudSOhwTtJ3Z+p/+X0JRO+haXbihi5IJyhXw=) 3: F8071E24DC1111EC80AE816DC4F9AE02.roa (hash: OCdNpCgeUfuyWeLKRdqmiCW32PlQusQy1i0JweMZuFo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F57D9/0717E9EE9F5D11ECBBCA9618C4F9AE02/FDm85NeiKugDbOsu5uavGPIbtZM.crl rsync://rpki.apnic.net/member_repository/A91F57D9/0717E9EE9F5D11ECBBCA9618C4F9AE02/FDm85NeiKugDbOsu5uavGPIbtZM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FDm85NeiKugDbOsu5uavGPIbtZM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 00:31:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1002 (0x3ea) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F57D9, serialNumber=1439BCE4D7A22AE8036CEB2EE6E6AF18F21BB593 Validity Not Before: Nov 3 00:31:54 2025 GMT Not After : Nov 10 00:31:54 2025 GMT Subject: CN=6907f7fa-96db Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:53:6c:8b:65:c5:59:2d:71:2d:53:0b:cc:08: aa:8e:6d:7c:8f:d6:ca:b4:75:b9:1c:81:e8:f9:63: 9f:77:38:31:4f:68:fe:e0:d3:09:c9:34:88:74:ac: df:ad:b7:f2:16:1e:b6:b4:23:49:93:ba:f8:43:76: ab:b0:c5:46:51:03:de:3b:0e:13:5f:f9:fe:17:36: 8d:dc:d7:a1:53:0b:b2:d3:93:60:ec:ad:f7:ef:90: 7f:a2:88:de:63:af:f0:e0:f8:cd:94:46:6b:66:5e: ca:ab:4b:8f:bd:8e:7b:bd:b2:ff:cb:34:1b:39:32: c6:4d:8d:9d:2b:2d:e7:c2:ac:a0:df:f8:b6:70:b5: 9f:9a:ed:36:2e:73:77:88:3c:48:63:0c:d6:51:52: 53:bc:79:42:d9:fa:ee:d2:33:e7:3a:b3:8b:4c:90: d9:fe:dc:31:2d:9d:e5:d0:f1:b7:61:72:ad:c6:20: bb:30:95:5b:0e:1d:9b:65:87:e2:9f:0b:1c:65:cc: 76:e3:65:62:dc:a0:4e:db:4a:6d:73:ea:3e:0d:f4: 40:76:d6:74:74:10:53:0c:ad:44:61:47:b2:19:7e: 09:29:3d:8a:1e:10:af:b2:86:79:cf:be:03:26:38: a4:08:ea:0f:25:b0:73:df:03:d6:4e:3c:e5:50:b7: 8a:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:90:93:1E:19:DF:08:E0:CA:8D:F7:FF:59:DD:93:71:03:05:C1:48 X509v3 Authority Key Identifier: keyid:14:39:BC:E4:D7:A2:2A:E8:03:6C:EB:2E:E6:E6:AF:18:F2:1B:B5:93 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F57D9/0717E9EE9F5D11ECBBCA9618C4F9AE02/FDm85NeiKugDbOsu5uavGPIbtZM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FDm85NeiKugDbOsu5uavGPIbtZM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F57D9/0717E9EE9F5D11ECBBCA9618C4F9AE02/FDm85NeiKugDbOsu5uavGPIbtZM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 03:a4:27:cd:95:72:71:b1:63:7f:62:13:4e:f1:04:1b:09:98: 69:e6:96:07:89:a4:20:69:82:08:35:d8:5c:d3:95:17:72:df: 1a:60:85:51:2c:d8:78:d6:a3:7c:cc:0f:a7:f7:63:1b:6a:0a: 35:82:94:40:f9:a9:ad:65:00:8b:71:40:97:97:0c:f0:e8:cb: 8f:9d:39:5b:87:ea:27:cb:86:7f:04:46:b3:d1:fc:a8:2b:a6: 89:18:51:75:e0:07:e4:9f:c7:fc:3c:6e:fa:43:24:57:f4:21: e9:5e:01:ab:d8:35:12:76:a8:1d:c6:a9:7d:74:a0:44:c9:13: 8a:6a:bb:90:7b:bd:c2:b5:48:a8:f7:ce:da:94:ee:04:ed:bf: ea:16:81:98:be:ec:52:0e:d0:68:ae:6d:83:3c:5b:bd:1e:0c: 39:0a:f1:62:b7:f8:58:8d:74:39:c1:53:79:ec:e4:05:d3:2e: 6d:a2:36:c9:b7:75:d1:19:40:39:a0:66:50:68:13:ad:23:f5: 4e:b6:03:8f:03:e6:ca:b9:66:de:d9:a4:85:44:d1:62:02:24: c7:5b:bd:44:50:c6:9f:bc:b4:fe:ee:06:e8:16:24:fa:ae:b8: 66:cf:37:81:fc:bc:5b:48:60:02:de:3c:39:28:6d:f6:f9:4d: f2:ef:c5:e2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA+owDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjU3RDkxMTAvBgNVBAUTKDE0MzlCQ0U0RDdBMjJBRTgwMzZDRUIyRUU2RTZBRjE4 RjIxQkI1OTMwHhcNMjUxMTAzMDAzMTU0WhcNMjUxMTEwMDAzMTU0WjAYMRYwFAYD VQQDEw02OTA3ZjdmYS05NmRiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxFNsi2XFWS1xLVMLzAiqjm18j9bKtHW5HIHo+WOfdzgxT2j+4NMJyTSIdKzf rbfyFh62tCNJk7r4Q3arsMVGUQPeOw4TX/n+FzaN3NehUwuy05Ng7K3375B/ooje Y6/w4PjNlEZrZl7Kq0uPvY57vbL/yzQbOTLGTY2dKy3nwqyg3/i2cLWfmu02LnN3 iDxIYwzWUVJTvHlC2fru0jPnOrOLTJDZ/twxLZ3l0PG3YXKtxiC7MJVbDh2bZYfi nwscZcx242Vi3KBO20ptc+o+DfRAdtZ0dBBTDK1EYUeyGX4JKT2KHhCvsoZ5z74D JjikCOoPJbBz3wPWTjzlULeKzQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMSQkx4Z 3wjgyo33/1ndk3EDBcFIMB8GA1UdIwQYMBaAFBQ5vOTXoiroA2zrLubmrxjyG7WT MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNTdEOS8wNzE3RTlFRTlG NUQxMUVDQkJDQTk2MThDNEY5QUUwMi9GRG04NU5laUt1Z0RiT3N1NXVhdkdQSWJ0 Wk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZEbTg1TmVpS3VnRGJPc3U1dWF2R1BJYnRaTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NTdEOS8wNzE3RTlFRTlGNUQxMUVDQkJDQTk2MThDNEY5QUUwMi9GRG04NU5laUt1 Z0RiT3N1NXVhdkdQSWJ0Wk0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQADpCfNlXJxsWN/YhNO8QQbCZhp5pYHiaQgaYIINdhc05UXct8aYIVR LNh41qN8zA+n92Mbago1gpRA+amtZQCLcUCXlwzw6MuPnTlbh+ony4Z/BEaz0fyo K6aJGFF14Afkn8f8PG76QyRX9CHpXgGr2DUSdqgdxql9dKBEyROKaruQe73CtUio 987alO4E7b/qFoGYvuxSDtBorm2DPFu9Hgw5CvFit/hYjXQ5wVN57OQF0y5tojbJ t3XRGUA5oGZQaBOtI/VOtgOPA+bKuWbe2aSFRNFiAiTHW71EUMafvLT+7gboFiT6 rrhmzzeB/LxbSGAC3jw5KG32+U3y78Xi -----END CERTIFICATE-----Generated at Tue Nov 4 12:56:40 2025 by rpki-client