$ rpki-client -vvf rpki.apnic.net/member_repository/A91F6E7D/1E9A11C2838111EAACB9BC30C4F9AE02/FhPW6_zYSc_MCoiNuX5rv1IHrbM.mft File: FhPW6_zYSc_MCoiNuX5rv1IHrbM.mft (raw, json) Hash identifier: rE/u2RbDBokeL8vgiXPprAi6bvfr/tFwxmn2Xsiqwfs= Subject key identifier: F1:26:56:B9:1C:6F:83:E0:8A:7E:05:A9:1A:5A:C6:62:5B:04:3F:D8 Authority key identifier: 16:13:D6:EB:FC:D8:49:CF:CC:0A:88:8D:B9:7E:6B:BF:52:07:AD:B3 Certificate issuer: /CN=A91F6E7D/serialNumber=1613D6EBFCD849CFCC0A888DB97E6BBF5207ADB3 Certificate serial: 0A14 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FhPW6_zYSc_MCoiNuX5rv1IHrbM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F6E7D/1E9A11C2838111EAACB9BC30C4F9AE02/FhPW6_zYSc_MCoiNuX5rv1IHrbM.mft Manifest number: 0A0C Signing time: Tue 04 Nov 2025 19:54:50 +0000 Manifest this update: Tue 04 Nov 2025 19:54:50 +0000 Manifest next update: Tue 11 Nov 2025 19:54:50 +0000 Files and hashes: 1: FhPW6_zYSc_MCoiNuX5rv1IHrbM.crl (hash: 78hpEHpajN5DT25doiMRWsJxP3ioK7X7wpDAp4jFnJI=) 2: 4AEB32A2D2F911EA93B2C659C4F9AE02.roa (hash: TMxL1xAZ65D51is8H5Va3LgyajI14UzGu3dizhDhFWQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F6E7D/1E9A11C2838111EAACB9BC30C4F9AE02/FhPW6_zYSc_MCoiNuX5rv1IHrbM.crl rsync://rpki.apnic.net/member_repository/A91F6E7D/1E9A11C2838111EAACB9BC30C4F9AE02/FhPW6_zYSc_MCoiNuX5rv1IHrbM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FhPW6_zYSc_MCoiNuX5rv1IHrbM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 19:54:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2580 (0xa14) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F6E7D, serialNumber=1613D6EBFCD849CFCC0A888DB97E6BBF5207ADB3 Validity Not Before: Nov 4 19:54:50 2025 GMT Not After : Nov 11 19:54:50 2025 GMT Subject: CN=690a5a0a-0dab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:4d:b5:b2:a7:65:de:ae:55:03:1e:f1:c7:30: 40:6e:7d:17:91:6e:e8:50:68:16:06:af:a0:d1:7c: c3:9b:ad:9b:c0:00:da:d8:1e:01:24:de:29:28:52: 76:0c:23:44:a2:c3:71:39:47:0c:77:98:68:ff:4c: 40:1e:0e:96:99:4f:c1:36:54:b1:e2:5b:44:1d:6a: 9f:8c:b1:67:ba:75:28:f4:04:f6:df:db:95:7b:48: ef:98:51:ca:cc:9f:79:95:bd:95:01:06:5a:f8:e1: 84:4f:4d:aa:f4:f3:34:d6:7f:ed:9e:8d:56:4f:f5: f6:3f:4e:04:15:d7:8f:58:00:5c:b3:60:94:fa:38: cb:b2:26:ab:6a:2f:95:e3:17:9d:d0:86:1f:f4:1f: 91:09:49:f6:fd:b4:a7:24:71:8b:82:88:30:09:0d: be:2d:59:4b:82:9f:2d:b9:d3:f8:c7:57:0e:0f:02: 94:b1:2f:96:78:56:22:c6:56:66:8f:c9:33:9e:08: c1:02:3d:9e:38:db:ea:47:71:3d:82:a0:68:3a:1d: f2:4d:5d:8e:4a:b3:ca:10:65:dc:ab:17:a1:e9:15: 97:fa:2d:2a:7b:68:ac:d7:07:4d:9b:3d:92:52:9b: 40:3b:08:60:25:b1:d1:2d:d8:3b:4a:7f:b8:fe:cc: b4:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:26:56:B9:1C:6F:83:E0:8A:7E:05:A9:1A:5A:C6:62:5B:04:3F:D8 X509v3 Authority Key Identifier: keyid:16:13:D6:EB:FC:D8:49:CF:CC:0A:88:8D:B9:7E:6B:BF:52:07:AD:B3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F6E7D/1E9A11C2838111EAACB9BC30C4F9AE02/FhPW6_zYSc_MCoiNuX5rv1IHrbM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FhPW6_zYSc_MCoiNuX5rv1IHrbM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F6E7D/1E9A11C2838111EAACB9BC30C4F9AE02/FhPW6_zYSc_MCoiNuX5rv1IHrbM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4c:34:9c:fe:98:d9:51:45:1f:a5:1b:08:b7:52:7b:fa:01:af: 23:b5:c6:bd:56:c5:59:cd:fe:d0:4e:8c:55:fa:8e:28:57:4a: 9e:73:de:f7:9d:3c:67:cc:d8:65:9a:a8:39:97:21:23:51:a9: 69:28:eb:1b:41:a0:64:1b:76:23:7b:38:68:78:63:24:0f:26: 50:cc:b9:f6:55:86:74:f9:23:f1:d6:0b:6f:c0:8e:df:a7:02: 8a:0d:99:53:dc:92:90:39:ca:26:d3:de:10:8b:9a:96:a2:61: b1:0c:06:36:21:d8:3d:b4:3d:0c:b1:6b:ae:57:20:8c:e4:fa: 19:53:b2:0a:70:fb:42:10:72:20:c1:35:53:4c:77:e6:fd:4e: c5:d9:d8:18:97:46:ff:32:b1:f0:99:2b:fc:5d:51:0e:d6:2e: 5c:95:ca:5c:dd:b1:70:55:c8:e1:ff:52:a7:a3:8e:78:05:39: 8d:67:7d:c3:c6:36:ac:7d:9d:e5:f2:27:a0:d0:60:bd:4a:32: 2b:ab:1a:aa:2b:7f:cc:ea:0a:75:7a:2c:f2:9c:e1:08:96:53: 85:a1:73:0b:e8:e3:23:63:60:e3:6e:02:a9:22:de:9a:a3:46: c4:d1:fb:ee:b3:c1:27:92:6c:b9:f4:e0:06:07:d4:4e:dc:df: 3d:4d:06:b4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICChQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjZFN0QxMTAvBgNVBAUTKDE2MTNENkVCRkNEODQ5Q0ZDQzBBODg4REI5N0U2QkJG NTIwN0FEQjMwHhcNMjUxMTA0MTk1NDUwWhcNMjUxMTExMTk1NDUwWjAYMRYwFAYD VQQDEw02OTBhNWEwYS0wZGFiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3U21sqdl3q5VAx7xxzBAbn0XkW7oUGgWBq+g0XzDm62bwADa2B4BJN4pKFJ2 DCNEosNxOUcMd5ho/0xAHg6WmU/BNlSx4ltEHWqfjLFnunUo9AT239uVe0jvmFHK zJ95lb2VAQZa+OGET02q9PM01n/tno1WT/X2P04EFdePWABcs2CU+jjLsiarai+V 4xed0IYf9B+RCUn2/bSnJHGLgogwCQ2+LVlLgp8tudP4x1cODwKUsS+WeFYixlZm j8kzngjBAj2eONvqR3E9gqBoOh3yTV2OSrPKEGXcqxeh6RWX+i0qe2is1wdNmz2S UptAOwhgJbHRLdg7Sn+4/sy0hQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPEmVrkc b4Pgin4FqRpaxmJbBD/YMB8GA1UdIwQYMBaAFBYT1uv82EnPzAqIjbl+a79SB62z MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNkU3RC8xRTlBMTFDMjgz ODExMUVBQUNCOUJDMzBDNEY5QUUwMi9GaFBXNl96WVNjX01Db2lOdVg1cnYxSUhy Yk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZoUFc2X3pZU2NfTUNvaU51WDVydjFJSHJiTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NkU3RC8xRTlBMTFDMjgzODExMUVBQUNCOUJDMzBDNEY5QUUwMi9GaFBXNl96WVNj X01Db2lOdVg1cnYxSUhyYk0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBMNJz+mNlRRR+lGwi3Unv6Aa8jtca9VsVZzf7QToxV+o4oV0qec973 nTxnzNhlmqg5lyEjUalpKOsbQaBkG3YjezhoeGMkDyZQzLn2VYZ0+SPx1gtvwI7f pwKKDZlT3JKQOcom094Qi5qWomGxDAY2Idg9tD0MsWuuVyCM5PoZU7IKcPtCEHIg wTVTTHfm/U7F2dgYl0b/MrHwmSv8XVEO1i5clcpc3bFwVcjh/1Kno454BTmNZ33D xjasfZ3l8ieg0GC9SjIrqxqqK3/M6gp1eizynOEIllOFoXML6OMjY2DjbgKpIt6a o0bE0fvus8Enkmy59OAGB9RO3N89TQa0 -----END CERTIFICATE-----Generated at Wed Nov 5 18:00:20 2025 by rpki-client