$ rpki-client -vvf rpki.apnic.net/member_repository/A91D17E6/0594FAE21E5F11F09518664DC4F9AE02/FizOhuKjaX6Ri3y11W2goALHk3E.mft File: FizOhuKjaX6Ri3y11W2goALHk3E.mft (raw, json) Hash identifier: 5+i79/AANbUmvJ9oyLTwiGzZTdkCCc9y8VX9+5iCyHs= Subject key identifier: 22:02:03:E6:5A:AB:9D:4C:74:FC:B1:9B:1B:73:0E:9C:7D:D4:F1:0E Authority key identifier: 16:2C:CE:86:E2:A3:69:7E:91:8B:7C:B5:D5:6D:A0:A0:02:C7:93:71 Certificate issuer: /CN=A91D17E6/serialNumber=162CCE86E2A3697E918B7CB5D56DA0A002C79371 Certificate serial: D3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FizOhuKjaX6Ri3y11W2goALHk3E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D17E6/0594FAE21E5F11F09518664DC4F9AE02/FizOhuKjaX6Ri3y11W2goALHk3E.mft Manifest number: CD Signing time: Thu 21 May 2026 06:53:03 +0000 Manifest this update: Thu 21 May 2026 06:53:03 +0000 Manifest next update: Thu 28 May 2026 06:53:03 +0000 Files and hashes: 1: FizOhuKjaX6Ri3y11W2goALHk3E.crl (hash: MdcOsSq0xvnW2geCUDGqVGjtB+aTgZjbIF3YZK6NajI=) 2: AF69D6BA4C0311F08D3CD93AC4F9AE02.roa (hash: cpq7k1JX/xbHtsPCC0YYOWWVGpVC7cEuSLkMccTVKVc=) 3: BA5D351C4C0311F0ABCEF33AC4F9AE02.roa (hash: CzRt1Vpg04doCx/2AnXX00Zgt+5+vt+JMpvQg/HVV4g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D17E6/0594FAE21E5F11F09518664DC4F9AE02/FizOhuKjaX6Ri3y11W2goALHk3E.crl rsync://rpki.apnic.net/member_repository/A91D17E6/0594FAE21E5F11F09518664DC4F9AE02/FizOhuKjaX6Ri3y11W2goALHk3E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FizOhuKjaX6Ri3y11W2goALHk3E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 May 2026 06:53:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 211 (0xd3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D17E6, serialNumber=162CCE86E2A3697E918B7CB5D56DA0A002C79371 Validity Not Before: May 21 06:53:03 2026 GMT Not After : May 28 06:53:03 2026 GMT Subject: CN=6a0eabcf-5070 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:c7:c5:76:a4:96:91:cd:a0:7b:5d:08:fa:32: e0:fa:9e:eb:2f:0a:1a:18:b7:ce:58:5f:95:87:f8: 4f:07:0c:6e:95:41:52:75:31:83:43:0f:85:e1:23: d9:ac:f9:18:82:0b:92:df:bc:e2:e2:c8:c0:d6:5b: a3:97:99:1c:41:3f:fc:ed:eb:3c:2c:19:d0:cc:97: 82:75:e0:81:2a:67:c3:59:e1:96:3c:55:ed:9f:3d: 5d:a1:a5:b4:7a:45:b6:3c:04:96:9b:53:1a:c1:b4: f3:43:f1:59:a6:64:92:73:0c:df:9d:05:fe:9e:2d: 34:0b:45:87:d0:5a:78:75:83:b6:c2:e9:13:9d:63: c4:c3:e6:05:bd:31:e0:52:1a:a5:f3:b3:a8:cf:fd: 9e:9f:cb:0e:e3:26:36:35:49:3a:bd:d0:55:3b:ea: 61:23:6e:75:58:6c:0d:50:50:fc:21:8b:0c:24:7f: 40:b2:eb:d3:d5:ae:e5:de:b2:1e:a7:d1:0c:c2:08: 22:3c:10:00:87:e3:b8:ef:d3:a5:e4:3b:6f:34:c9: 64:07:b8:81:79:08:9e:2d:7a:c3:fc:a8:79:67:e3: 55:3c:f7:6f:42:3b:5a:59:f6:f7:bc:85:1e:0f:04: 53:e6:c7:35:4f:4e:6e:1b:a7:3d:76:08:37:b5:88: ac:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:02:03:E6:5A:AB:9D:4C:74:FC:B1:9B:1B:73:0E:9C:7D:D4:F1:0E X509v3 Authority Key Identifier: keyid:16:2C:CE:86:E2:A3:69:7E:91:8B:7C:B5:D5:6D:A0:A0:02:C7:93:71 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D17E6/0594FAE21E5F11F09518664DC4F9AE02/FizOhuKjaX6Ri3y11W2goALHk3E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FizOhuKjaX6Ri3y11W2goALHk3E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D17E6/0594FAE21E5F11F09518664DC4F9AE02/FizOhuKjaX6Ri3y11W2goALHk3E.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 47:f5:32:60:87:0d:0b:81:7d:f1:62:6a:12:77:bc:c9:20:8d: f3:ae:b9:1f:e1:26:a4:67:70:65:74:f6:3c:cc:02:ed:91:c9: 82:19:ea:65:8d:0b:2f:3b:f9:81:5e:28:54:c9:52:ea:6c:87: d7:15:29:ed:01:c3:92:60:03:02:ae:3b:32:7a:9f:1a:6a:fa: 29:00:2b:d7:58:4a:fd:69:40:df:fa:0e:d9:c1:c9:34:65:a7: 6c:0c:49:21:2b:18:dd:85:7a:1e:0d:d3:6e:cc:04:61:21:49: 13:f3:66:9f:7c:54:6c:d9:73:52:48:85:a0:83:b5:1a:9f:6d: f1:77:c1:53:bd:c0:80:e8:d8:a5:85:5a:b2:b6:9b:fb:1b:e8: 8a:6f:27:87:77:5f:bf:e3:1d:01:6a:66:ed:15:7e:e5:06:6c: d0:78:7b:d6:c6:d6:45:b4:3e:8c:5a:49:4c:3b:d2:30:f0:b6: be:79:62:2a:d7:0f:c8:4b:9f:60:ab:71:40:38:2c:33:00:8a: e4:7d:fc:3a:90:59:cf:18:15:f8:f1:0e:c5:61:da:b5:27:4c: f5:ea:5a:e1:e4:a7:75:b1:48:5d:b9:7b:b1:9c:02:7a:07:12: 19:22:e2:fb:1f:d4:76:79:ec:ab:e1:f1:6f:85:f7:13:33:12: 47:4c:df:17 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICANMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDE3RTYxMTAvBgNVBAUTKDE2MkNDRTg2RTJBMzY5N0U5MThCN0NCNUQ1NkRBMEEw MDJDNzkzNzEwHhcNMjYwNTIxMDY1MzAzWhcNMjYwNTI4MDY1MzAzWjAYMRYwFAYD VQQDEw02YTBlYWJjZi01MDcwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA18fFdqSWkc2ge10I+jLg+p7rLwoaGLfOWF+Vh/hPBwxulUFSdTGDQw+F4SPZ rPkYgguS37zi4sjA1lujl5kcQT/87es8LBnQzJeCdeCBKmfDWeGWPFXtnz1doaW0 ekW2PASWm1MawbTzQ/FZpmSScwzfnQX+ni00C0WH0Fp4dYO2wukTnWPEw+YFvTHg Uhql87Ooz/2en8sO4yY2NUk6vdBVO+phI251WGwNUFD8IYsMJH9AsuvT1a7l3rIe p9EMwggiPBAAh+O479Ol5DtvNMlkB7iBeQieLXrD/Kh5Z+NVPPdvQjtaWfb3vIUe DwRT5sc1T05uG6c9dgg3tYiswwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCICA+Za q51MdPyxmxtzDpx91PEOMB8GA1UdIwQYMBaAFBYszobio2l+kYt8tdVtoKACx5Nx MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMTdFNi8wNTk0RkFFMjFF NUYxMUYwOTUxODY2NERDNEY5QUUwMi9GaXpPaHVLamFYNlJpM3kxMVcyZ29BTEhr M0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0Zpek9odUtqYVg2UmkzeTExVzJnb0FMSGszRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MTdFNi8wNTk0RkFFMjFFNUYxMUYwOTUxODY2NERDNEY5QUUwMi9GaXpPaHVLamFY NlJpM3kxMVcyZ29BTEhrM0UubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAR/UyYIcNC4F98WJqEne8ySCN8665H+EmpGdwZXT2PMwC7ZHJghnqZY0LLzv5 gV4oVMlS6myH1xUp7QHDkmADAq47MnqfGmr6KQAr11hK/WlA3/oO2cHJNGWnbAxJ ISsY3YV6Hg3TbswEYSFJE/Nmn3xUbNlzUkiFoIO1Gp9t8XfBU73AgOjYpYVasrab +xvoim8nh3dfv+MdAWpm7RV+5QZs0Hh71sbWRbQ+jFpJTDvSMPC2vnliKtcPyEuf YKtxQDgsMwCK5H38OpBZzxgV+PEOxWHatSdM9epa4eSndbFIXbl7sZwCegcSGSLi +x/Udnnsq+Hxb4X3EzMSR0zfFw== -----END CERTIFICATE-----Generated at Thu May 21 10:59:26 2026 by rpki-client