$ rpki-client -vvf rpki.apnic.net/member_repository/A91FE769/C5D6A57E604C11F090816A15C4F9AE02/FOFy6-ntnDEE1U8RqpdiI-s3aQc.mft File: FOFy6-ntnDEE1U8RqpdiI-s3aQc.mft (raw, json) Hash identifier: pyfDsA9L7Tb162eMVC+f94l9Zahp+vV/7RhT3jkkU6w= Subject key identifier: D6:F0:C2:D5:A0:02:9A:E9:74:7B:68:F8:AD:AB:46:F6:19:E0:96:F8 Authority key identifier: 14:E1:72:EB:E9:ED:9C:31:04:D5:4F:11:AA:97:62:23:EB:37:69:07 Certificate issuer: /CN=A91FE769/serialNumber=14E172EBE9ED9C3104D54F11AA976223EB376907 Certificate serial: 3F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FOFy6-ntnDEE1U8RqpdiI-s3aQc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FE769/C5D6A57E604C11F090816A15C4F9AE02/FOFy6-ntnDEE1U8RqpdiI-s3aQc.mft Manifest number: 3D Signing time: Mon 03 Nov 2025 07:30:11 +0000 Manifest this update: Mon 03 Nov 2025 07:30:11 +0000 Manifest next update: Mon 10 Nov 2025 07:30:11 +0000 Files and hashes: 1: FOFy6-ntnDEE1U8RqpdiI-s3aQc.crl (hash: HgsESphnWXANZJS/qN5HCwbNqABzTcitfK7uNWO//p4=) 2: D63D48DE604F11F0B5D8E73CC4F9AE02.roa (hash: emv514v8DwKzvHJH8ilfs/YN+XFNOa2awfMLCjPK/mI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FE769/C5D6A57E604C11F090816A15C4F9AE02/FOFy6-ntnDEE1U8RqpdiI-s3aQc.crl rsync://rpki.apnic.net/member_repository/A91FE769/C5D6A57E604C11F090816A15C4F9AE02/FOFy6-ntnDEE1U8RqpdiI-s3aQc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FOFy6-ntnDEE1U8RqpdiI-s3aQc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 07:30:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 63 (0x3f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FE769, serialNumber=14E172EBE9ED9C3104D54F11AA976223EB376907 Validity Not Before: Nov 3 07:30:11 2025 GMT Not After : Nov 10 07:30:11 2025 GMT Subject: CN=69085a03-d6c1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:8f:ec:5e:15:05:dd:3d:99:c4:51:52:98:cd: fa:6a:ad:34:20:38:ba:4f:6c:fc:80:31:5f:14:61: 66:ea:e9:88:22:5e:54:b0:55:20:9d:46:e4:df:a2: c7:81:26:6b:9a:b0:eb:75:91:e0:9c:d9:a7:b6:ba: 1b:cf:54:d9:b1:f3:cd:a9:b6:68:6b:56:d8:6e:33: 74:e6:93:ff:3b:19:54:3c:32:b6:77:f5:69:97:f8: 22:6d:f8:d1:7f:2e:19:63:11:89:e7:63:8c:10:d8: 6f:e4:b5:e1:95:6f:4f:a8:bd:01:b2:96:79:ae:0f: 01:fc:1f:a8:ce:bd:36:ce:4a:5c:02:07:d0:5f:5b: d6:a5:c4:c6:2e:b5:7f:76:e9:27:2b:f3:08:9a:d6: ea:2e:74:bc:d7:77:24:ec:03:39:a8:52:12:24:ef: 89:8e:d7:ca:c4:c4:20:96:49:94:c5:31:53:27:30: 40:2c:83:aa:68:fb:9f:00:9f:e5:44:1a:26:f9:48: 0a:ab:50:b9:da:48:d4:a1:e2:9c:7e:ed:f8:d0:a0: 00:db:81:25:54:0a:30:0a:c8:20:41:eb:b3:9d:79: 63:5e:7b:f2:84:11:30:52:16:9b:60:eb:94:92:ef: 07:e7:ab:66:17:b0:f7:a6:71:68:3f:5b:23:d2:7e: 3a:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:F0:C2:D5:A0:02:9A:E9:74:7B:68:F8:AD:AB:46:F6:19:E0:96:F8 X509v3 Authority Key Identifier: keyid:14:E1:72:EB:E9:ED:9C:31:04:D5:4F:11:AA:97:62:23:EB:37:69:07 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FE769/C5D6A57E604C11F090816A15C4F9AE02/FOFy6-ntnDEE1U8RqpdiI-s3aQc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FOFy6-ntnDEE1U8RqpdiI-s3aQc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FE769/C5D6A57E604C11F090816A15C4F9AE02/FOFy6-ntnDEE1U8RqpdiI-s3aQc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 47:90:b1:f3:de:00:38:ea:f4:93:62:8d:a5:63:3c:51:48:3a: 32:0e:26:c9:c0:61:04:ee:ca:a2:c1:f2:fa:d1:0f:8d:88:7d: d0:ff:1f:16:a1:6c:bd:63:48:f2:9a:fe:21:77:ab:fc:6e:36: b8:8b:26:64:b3:02:7e:54:67:91:05:93:fe:c8:0c:93:d7:e8: 27:ed:4b:ee:34:b8:cb:a9:1b:53:3a:9d:54:62:fa:83:de:97: 72:7f:ce:e2:d2:6e:97:3e:37:f9:f3:d5:b1:cf:ef:c0:bc:14: 73:5e:dd:91:1c:a5:df:c1:e5:55:eb:94:de:53:33:27:35:29: 75:5b:d7:ce:13:06:ef:ef:8c:15:56:61:83:80:19:36:55:59: d3:12:ba:91:3d:6b:fd:cf:2c:a2:97:29:26:b6:11:72:34:a8: c0:a5:2f:5b:02:38:7a:ab:de:72:10:58:e2:79:40:3e:76:84: 54:72:c3:64:45:2c:3c:8f:85:a2:37:7b:be:a5:8f:c8:14:97: 97:ee:29:40:b5:a1:ca:43:4a:23:27:91:09:4f:ab:ed:22:06: be:7a:64:9b:4b:cb:4a:f2:d3:74:ea:fe:ce:94:dd:97:48:38: 1d:fa:2a:81:46:c3:37:a5:3b:f1:04:32:6f:4e:8b:b0:8a:48: 0a:34:63:f7 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBPzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG RTc2OTExMC8GA1UEBRMoMTRFMTcyRUJFOUVEOUMzMTA0RDU0RjExQUE5NzYyMjNF QjM3NjkwNzAeFw0yNTExMDMwNzMwMTFaFw0yNTExMTAwNzMwMTFaMBgxFjAUBgNV BAMTDTY5MDg1YTAzLWQ2YzEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDrj+xeFQXdPZnEUVKYzfpqrTQgOLpPbPyAMV8UYWbq6YgiXlSwVSCdRuTfoseB JmuasOt1keCc2ae2uhvPVNmx882ptmhrVthuM3Tmk/87GVQ8MrZ39WmX+CJt+NF/ LhljEYnnY4wQ2G/kteGVb0+ovQGylnmuDwH8H6jOvTbOSlwCB9BfW9alxMYutX92 6Scr8wia1uoudLzXdyTsAzmoUhIk74mO18rExCCWSZTFMVMnMEAsg6po+58An+VE Gib5SAqrULnaSNSh4px+7fjQoADbgSVUCjAKyCBB67OdeWNee/KEETBSFptg65SS 7wfnq2YXsPemcWg/WyPSfjrdAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU1vDC1aAC mul0e2j4ratG9hnglvgwHwYDVR0jBBgwFoAUFOFy6+ntnDEE1U8RqpdiI+s3aQcw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUZFNzY5L0M1RDZBNTdFNjA0 QzExRjA5MDgxNkExNUM0RjlBRTAyL0ZPRnk2LW50bkRFRTFVOFJxcGRpSS1zM2FR Yy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvRk9GeTYtbnRuREVFMVU4UnFwZGlJLXMzYVFjLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUZF NzY5L0M1RDZBNTdFNjA0QzExRjA5MDgxNkExNUM0RjlBRTAyL0ZPRnk2LW50bkRF RTFVOFJxcGRpSS1zM2FRYy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAEeQsfPeADjq9JNijaVjPFFIOjIOJsnAYQTuyqLB8vrRD42IfdD/Hxah bL1jSPKa/iF3q/xuNriLJmSzAn5UZ5EFk/7IDJPX6CftS+40uMupG1M6nVRi+oPe l3J/zuLSbpc+N/nz1bHP78C8FHNe3ZEcpd/B5VXrlN5TMyc1KXVb184TBu/vjBVW YYOAGTZVWdMSupE9a/3PLKKXKSa2EXI0qMClL1sCOHqr3nIQWOJ5QD52hFRyw2RF LDyPhaI3e76lj8gUl5fuKUC1ocpDSiMnkQlPq+0iBr56ZJtLy0ry03Tq/s6U3ZdI OB36KoFGwzelO/EEMm9Oi7CKSAo0Y/c= -----END CERTIFICATE-----Generated at Wed Nov 5 00:24:15 2025 by rpki-client