$ rpki-client -vvf rpki.apnic.net/member_repository/A91FDD88/C8236AC2049011EC8CC1A386C4F9AE02/FBD9h4cUD_mXb-nB-lhE7V3R48U.mft File: FBD9h4cUD_mXb-nB-lhE7V3R48U.mft (raw, json) Hash identifier: ppM61Xpm9uoFTGjXx2dfSwLuUk7rXb34zIKwWWZqJHA= Subject key identifier: 26:BD:C2:C4:D8:59:AB:82:A3:F1:04:EA:80:4B:88:B9:CF:4A:68:EB Authority key identifier: 14:10:FD:87:87:14:0F:F9:97:6F:E9:C1:FA:58:44:ED:5D:D1:E3:C5 Certificate issuer: /CN=A91FDD88/serialNumber=1410FD8787140FF9976FE9C1FA5844ED5DD1E3C5 Certificate serial: 056C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FBD9h4cUD_mXb-nB-lhE7V3R48U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FDD88/C8236AC2049011EC8CC1A386C4F9AE02/FBD9h4cUD_mXb-nB-lhE7V3R48U.mft Manifest number: 0567 Signing time: Tue 04 Nov 2025 23:25:38 +0000 Manifest this update: Tue 04 Nov 2025 23:25:37 +0000 Manifest next update: Tue 11 Nov 2025 23:25:37 +0000 Files and hashes: 1: FBD9h4cUD_mXb-nB-lhE7V3R48U.crl (hash: ysD56wfHVX6VEe8o4z8HbxnqzUUw/v84xQtC5CsocMg=) 2: A2835264049511ECB774BA31C4F9AE02.roa (hash: PcE88PvoHtH4Ij2/lKWEyW6+bdwrSYmzkRCPzAMwYvU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FDD88/C8236AC2049011EC8CC1A386C4F9AE02/FBD9h4cUD_mXb-nB-lhE7V3R48U.crl rsync://rpki.apnic.net/member_repository/A91FDD88/C8236AC2049011EC8CC1A386C4F9AE02/FBD9h4cUD_mXb-nB-lhE7V3R48U.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FBD9h4cUD_mXb-nB-lhE7V3R48U.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 23:25:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1388 (0x56c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FDD88, serialNumber=1410FD8787140FF9976FE9C1FA5844ED5DD1E3C5 Validity Not Before: Nov 4 23:25:37 2025 GMT Not After : Nov 11 23:25:37 2025 GMT Subject: CN=690a8b72-dc16 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:ed:61:6d:e9:81:1e:ab:ff:4b:ad:6b:92:69: 48:e1:e5:2f:30:aa:89:69:2e:8b:84:c1:9f:c7:fa: 0b:cf:5b:88:69:c6:ab:5d:b2:6e:48:85:21:44:e6: 86:68:73:e7:de:ba:83:57:7f:f1:30:ed:f2:d4:ac: 28:55:4b:d7:0f:fe:0a:9a:13:c7:15:d3:6c:14:84: 9d:f7:e7:b9:16:e1:da:93:fb:b9:e7:04:14:49:fc: 1c:dc:99:dc:a8:37:9f:df:d1:cf:57:f8:7a:e9:7e: 26:f3:2d:d4:56:96:81:06:5b:42:e3:3e:cc:ed:46: 89:7e:59:35:40:2b:e8:db:bd:bb:20:09:bd:4c:05: 5c:68:71:fc:6e:18:e0:5b:fd:7a:cb:58:e2:51:e9: cb:9a:da:94:c7:0e:66:92:87:3a:53:d1:a0:c4:32: 46:90:1b:5e:ae:2a:5e:0d:c3:9c:53:2c:aa:a6:ac: 3d:8e:a4:cd:eb:a2:43:36:72:fe:6c:8a:68:44:c3: 36:fc:a7:d6:b7:c1:81:d0:81:c5:ae:20:91:5c:1e: f5:ba:d8:93:07:ba:5f:4c:7c:d3:a1:ce:78:a7:8e: 03:db:16:80:10:93:52:1c:e3:d2:3b:6b:4a:69:c4: 02:47:7d:c4:cf:5d:8c:46:12:6b:a9:75:90:13:11: e4:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:BD:C2:C4:D8:59:AB:82:A3:F1:04:EA:80:4B:88:B9:CF:4A:68:EB X509v3 Authority Key Identifier: keyid:14:10:FD:87:87:14:0F:F9:97:6F:E9:C1:FA:58:44:ED:5D:D1:E3:C5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FDD88/C8236AC2049011EC8CC1A386C4F9AE02/FBD9h4cUD_mXb-nB-lhE7V3R48U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FBD9h4cUD_mXb-nB-lhE7V3R48U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FDD88/C8236AC2049011EC8CC1A386C4F9AE02/FBD9h4cUD_mXb-nB-lhE7V3R48U.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2c:c2:bf:71:e7:cb:42:a9:63:81:b2:a9:81:03:2a:dc:45:20: e8:e2:d5:26:cc:de:0f:ee:80:a2:12:9f:5b:23:c4:51:8e:1b: fe:f0:76:6c:bb:99:47:10:1e:24:fd:1f:20:31:a8:58:0b:0d: 15:70:e6:8e:a1:fe:49:08:ac:8d:21:af:a7:8f:69:7b:1f:2a: c0:11:6d:24:7c:25:a3:53:7e:98:7d:5f:1f:74:e5:c6:c9:4c: 3e:46:41:0c:e2:02:e6:c9:31:9c:86:97:c8:4f:d1:38:04:84: 5e:b7:7f:9e:ae:41:04:d6:de:18:a3:01:09:c9:e1:71:4e:1b: e1:de:2c:e6:39:d6:2d:2e:1a:b7:5a:9a:1d:9a:82:85:02:a2: 3d:56:91:0e:bb:62:ef:08:01:f9:de:f4:2b:60:de:22:fa:90: ee:7a:d1:5a:a6:c1:50:8a:2f:c5:5c:85:26:a4:ff:d2:28:ce: 79:01:a4:0e:e1:35:b6:9b:c5:ee:e5:61:71:19:1d:57:94:aa: d7:c7:44:fd:d3:29:6c:d5:30:7d:16:6a:e7:83:96:66:7d:e1: 99:89:e4:89:0d:de:3a:e2:c1:6e:14:e4:da:ea:5a:95:5b:0d: fe:86:4e:01:e3:91:44:91:4c:77:02:30:33:de:17:4e:be:13: b3:c6:0b:93 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBWwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkREODgxMTAvBgNVBAUTKDE0MTBGRDg3ODcxNDBGRjk5NzZGRTlDMUZBNTg0NEVE NUREMUUzQzUwHhcNMjUxMTA0MjMyNTM3WhcNMjUxMTExMjMyNTM3WjAYMRYwFAYD VQQDEw02OTBhOGI3Mi1kYzE2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvO1hbemBHqv/S61rkmlI4eUvMKqJaS6LhMGfx/oLz1uIacarXbJuSIUhROaG aHPn3rqDV3/xMO3y1KwoVUvXD/4KmhPHFdNsFISd9+e5FuHak/u55wQUSfwc3Jnc qDef39HPV/h66X4m8y3UVpaBBltC4z7M7UaJflk1QCvo2727IAm9TAVcaHH8bhjg W/16y1jiUenLmtqUxw5mkoc6U9GgxDJGkBteripeDcOcUyyqpqw9jqTN66JDNnL+ bIpoRMM2/KfWt8GB0IHFriCRXB71utiTB7pfTHzToc54p44D2xaAEJNSHOPSO2tK acQCR33Ez12MRhJrqXWQExHkFQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCa9wsTY WauCo/EE6oBLiLnPSmjrMB8GA1UdIwQYMBaAFBQQ/YeHFA/5l2/pwfpYRO1d0ePF MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGREQ4OC9DODIzNkFDMjA0 OTAxMUVDOENDMUEzODZDNEY5QUUwMi9GQkQ5aDRjVURfbVhiLW5CLWxoRTdWM1I0 OFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZCRDloNGNVRF9tWGItbkItbGhFN1YzUjQ4VS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG REQ4OC9DODIzNkFDMjA0OTAxMUVDOENDMUEzODZDNEY5QUUwMi9GQkQ5aDRjVURf bVhiLW5CLWxoRTdWM1I0OFUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAswr9x58tCqWOBsqmBAyrcRSDo4tUmzN4P7oCiEp9bI8RRjhv+8HZs u5lHEB4k/R8gMahYCw0VcOaOof5JCKyNIa+nj2l7HyrAEW0kfCWjU36YfV8fdOXG yUw+RkEM4gLmyTGchpfIT9E4BIRet3+erkEE1t4YowEJyeFxThvh3izmOdYtLhq3 WpodmoKFAqI9VpEOu2LvCAH53vQrYN4i+pDuetFapsFQii/FXIUmpP/SKM55AaQO 4TW2m8Xu5WFxGR1XlKrXx0T90yls1TB9Fmrng5ZmfeGZieSJDd464sFuFOTa6lqV Ww3+hk4B45FEkUx3AjAz3hdOvhOzxguT -----END CERTIFICATE-----Generated at Wed Nov 5 17:49:17 2025 by rpki-client