$ rpki-client -vvf rpki.apnic.net/member_repository/A91444E5/2E822DAA1B9111EC9E7A3114C4F9AE02/Fgi_RiSn4bcjIotGYd1mHnCu8_Q.mft File: Fgi_RiSn4bcjIotGYd1mHnCu8_Q.mft (raw, json) Hash identifier: mJcQHsMmsWvjRfhjsauat3RyV3jq4YKGeZxCdvuUsV4= Subject key identifier: B1:4B:F4:D6:38:5C:60:FE:5F:A1:C1:C8:91:18:6F:78:A2:39:26:42 Authority key identifier: 16:08:BF:46:24:A7:E1:B7:23:22:8B:46:61:DD:66:1E:70:AE:F3:F4 Certificate issuer: /CN=A91444E5/serialNumber=1608BF4624A7E1B723228B4661DD661E70AEF3F4 Certificate serial: 053C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fgi_RiSn4bcjIotGYd1mHnCu8_Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91444E5/2E822DAA1B9111EC9E7A3114C4F9AE02/Fgi_RiSn4bcjIotGYd1mHnCu8_Q.mft Manifest number: 0534 Signing time: Thu 06 Nov 2025 20:49:01 +0000 Manifest this update: Thu 06 Nov 2025 20:49:01 +0000 Manifest next update: Thu 13 Nov 2025 20:49:01 +0000 Files and hashes: 1: Fgi_RiSn4bcjIotGYd1mHnCu8_Q.crl (hash: jfWHq93+bDIrDn45gDf7Zs0XDgIqT9l5WjrIT0VUEeU=) 2: 90AB89E4547511EEB44F391AC4F9AE02.roa (hash: 9PQho0kFLoK528MTXKQJuaitZOSaZ/91m7DaZwI2M3w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91444E5/2E822DAA1B9111EC9E7A3114C4F9AE02/Fgi_RiSn4bcjIotGYd1mHnCu8_Q.crl rsync://rpki.apnic.net/member_repository/A91444E5/2E822DAA1B9111EC9E7A3114C4F9AE02/Fgi_RiSn4bcjIotGYd1mHnCu8_Q.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fgi_RiSn4bcjIotGYd1mHnCu8_Q.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 13 Nov 2025 20:49:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1340 (0x53c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91444E5, serialNumber=1608BF4624A7E1B723228B4661DD661E70AEF3F4 Validity Not Before: Nov 6 20:49:01 2025 GMT Not After : Nov 13 20:49:01 2025 GMT Subject: CN=690d09bd-9fd7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:5a:90:8b:8b:30:bd:dd:b6:6c:66:0a:07:fc: 19:71:d4:7c:1d:47:6a:af:36:47:2d:bc:dd:b2:d8: e2:c0:ea:dc:a8:a7:57:87:1c:44:c8:65:53:3f:f7: 24:30:a7:f4:64:37:5b:36:2f:e1:51:4a:b4:df:e5: c1:09:4e:82:a3:cc:69:6b:3a:3f:1b:6b:4a:fc:01: 40:a1:40:f0:1e:07:38:ca:25:e0:24:39:eb:72:22: 7e:10:d3:2f:9d:2e:3d:7b:8a:b0:98:e9:00:a2:49: b0:73:4d:09:cb:e3:10:2c:65:87:7d:0e:bb:0d:ee: 0a:55:01:b9:32:1c:f4:c7:43:8f:6e:b0:c5:bb:6e: 22:c0:6b:5d:55:fd:a3:e3:28:ba:48:cd:72:6c:1f: 25:29:35:fc:43:db:c6:5e:9c:9c:47:07:96:0a:65: 5f:5c:d9:37:38:ed:e4:4c:72:74:6b:07:c9:56:cd: 40:bf:0b:a3:d6:1e:00:ec:50:a1:0b:00:70:c7:87: 0d:67:84:f9:4b:ac:ee:32:61:47:64:1a:27:5a:38: 0b:53:f4:cd:94:73:36:a9:8c:8d:d7:9c:3b:f1:70: b2:b1:17:be:86:22:7f:79:f1:73:8c:68:e2:9f:ee: ff:fb:16:1a:79:7d:49:8d:80:bd:bc:f1:02:d6:dd: 52:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:4B:F4:D6:38:5C:60:FE:5F:A1:C1:C8:91:18:6F:78:A2:39:26:42 X509v3 Authority Key Identifier: keyid:16:08:BF:46:24:A7:E1:B7:23:22:8B:46:61:DD:66:1E:70:AE:F3:F4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91444E5/2E822DAA1B9111EC9E7A3114C4F9AE02/Fgi_RiSn4bcjIotGYd1mHnCu8_Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fgi_RiSn4bcjIotGYd1mHnCu8_Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91444E5/2E822DAA1B9111EC9E7A3114C4F9AE02/Fgi_RiSn4bcjIotGYd1mHnCu8_Q.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7a:a3:3e:51:0d:47:09:35:33:66:86:1c:df:31:df:c7:5a:de: 54:88:5e:0d:f9:f7:d1:2d:fa:56:ee:fa:0b:d4:a3:25:0d:ce: b7:d8:1b:f3:ec:52:6c:8f:ae:94:4c:a5:99:cc:6d:4c:38:f8: c8:1e:b6:84:87:9c:48:c3:ab:f3:e3:cb:42:39:b1:81:b2:84: c0:c5:f6:15:f2:1f:ef:14:7b:f3:9b:3b:ea:ad:01:33:63:39: e4:06:64:cf:00:85:35:1b:9a:be:bb:03:d7:48:e9:52:16:ef: 42:b2:ad:dc:ee:b2:20:0b:80:59:59:72:07:75:52:da:c9:7f: 5d:8d:3c:7f:d7:43:82:93:8d:44:15:c9:34:5a:4a:a9:9a:86: 71:3f:5f:78:dd:ba:08:c9:40:f5:b5:76:31:2f:34:4a:36:77: 6b:62:dd:c2:09:44:a0:5d:40:eb:d6:0d:09:ee:16:ae:35:91: 8e:65:d1:31:72:11:7e:37:77:f3:6b:0e:71:96:fb:fc:54:4c: c3:0a:5a:76:b9:8d:d4:cf:4d:31:1e:e9:d5:14:0d:92:26:f0: 31:76:9e:49:98:9f:09:6b:3f:a7:ce:1b:f2:5b:1a:7b:df:37: 77:2d:27:95:90:1c:65:cd:23:4f:05:b4:08:e7:29:d2:53:19: de:d4:e6:47 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBTwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDQ0RTUxMTAvBgNVBAUTKDE2MDhCRjQ2MjRBN0UxQjcyMzIyOEI0NjYxREQ2NjFF NzBBRUYzRjQwHhcNMjUxMTA2MjA0OTAxWhcNMjUxMTEzMjA0OTAxWjAYMRYwFAYD VQQDEw02OTBkMDliZC05ZmQ3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvlqQi4swvd22bGYKB/wZcdR8HUdqrzZHLbzdstjiwOrcqKdXhxxEyGVTP/ck MKf0ZDdbNi/hUUq03+XBCU6Co8xpazo/G2tK/AFAoUDwHgc4yiXgJDnrciJ+ENMv nS49e4qwmOkAokmwc00Jy+MQLGWHfQ67De4KVQG5Mhz0x0OPbrDFu24iwGtdVf2j 4yi6SM1ybB8lKTX8Q9vGXpycRweWCmVfXNk3OO3kTHJ0awfJVs1Avwuj1h4A7FCh CwBwx4cNZ4T5S6zuMmFHZBonWjgLU/TNlHM2qYyN15w78XCysRe+hiJ/efFzjGji n+7/+xYaeX1JjYC9vPEC1t1SowIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLFL9NY4 XGD+X6HByJEYb3iiOSZCMB8GA1UdIwQYMBaAFBYIv0Ykp+G3IyKLRmHdZh5wrvP0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NDRFNS8yRTgyMkRBQTFC OTExMUVDOUU3QTMxMTRDNEY5QUUwMi9GZ2lfUmlTbjRiY2pJb3RHWWQxbUhuQ3U4 X1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZnaV9SaVNuNGJjaklvdEdZZDFtSG5DdThfUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NDRFNS8yRTgyMkRBQTFCOTExMUVDOUU3QTMxMTRDNEY5QUUwMi9GZ2lfUmlTbjRi Y2pJb3RHWWQxbUhuQ3U4X1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB6oz5RDUcJNTNmhhzfMd/HWt5UiF4N+ffRLfpW7voL1KMlDc632Bvz 7FJsj66UTKWZzG1MOPjIHraEh5xIw6vz48tCObGBsoTAxfYV8h/vFHvzmzvqrQEz YznkBmTPAIU1G5q+uwPXSOlSFu9Csq3c7rIgC4BZWXIHdVLayX9djTx/10OCk41E Fck0WkqpmoZxP1943boIyUD1tXYxLzRKNndrYt3CCUSgXUDr1g0J7hauNZGOZdEx chF+N3fzaw5xlvv8VEzDClp2uY3Uz00xHunVFA2SJvAxdp5JmJ8Jaz+nzhvyWxp7 3zd3LSeVkBxlzSNPBbQI5ynSUxne1OZH -----END CERTIFICATE-----Generated at Fri Nov 7 11:48:14 2025 by rpki-client