$ rpki-client -vvf rpki.apnic.net/member_repository/A91FBEFA/0DA506CC0B3711F08C239863C4F9AE02/FzwmoIboW4_bkXqo2RHhwAq2o6E.mft File: FzwmoIboW4_bkXqo2RHhwAq2o6E.mft (raw, json) Hash identifier: Hy3EM1gd8Nw/QkL807T3i/uaLmLhZdo5V/zSzuD6eXs= Subject key identifier: 7F:E2:64:CD:0B:57:32:2A:89:AA:C0:5E:5A:F5:53:AB:0D:07:2F:85 Authority key identifier: 17:3C:26:A0:86:E8:5B:8F:DB:91:7A:A8:D9:11:E1:C0:0A:B6:A3:A1 Certificate issuer: /CN=A91FBEFA/serialNumber=173C26A086E85B8FDB917AA8D911E1C00AB6A3A1 Certificate serial: 40 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FzwmoIboW4_bkXqo2RHhwAq2o6E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FBEFA/0DA506CC0B3711F08C239863C4F9AE02/FzwmoIboW4_bkXqo2RHhwAq2o6E.mft Manifest number: 3E Signing time: Sat 19 Jul 2025 07:49:14 +0000 Manifest this update: Sat 19 Jul 2025 07:49:14 +0000 Manifest next update: Sat 26 Jul 2025 07:49:14 +0000 Files and hashes: 1: FzwmoIboW4_bkXqo2RHhwAq2o6E.crl (hash: ec629e0LesZ6L+R+5PAUf97dS6GomhwPqBCDkb8erQY=) 2: 4776F9120CCE11F0A08AA749C4F9AE02.roa (hash: VlGCrM3drX5CqJ0PsOFfcqqGKkwf8UbZCTA7SKqIpGI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FBEFA/0DA506CC0B3711F08C239863C4F9AE02/FzwmoIboW4_bkXqo2RHhwAq2o6E.crl rsync://rpki.apnic.net/member_repository/A91FBEFA/0DA506CC0B3711F08C239863C4F9AE02/FzwmoIboW4_bkXqo2RHhwAq2o6E.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FzwmoIboW4_bkXqo2RHhwAq2o6E.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 07:49:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 64 (0x40) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FBEFA, serialNumber=173C26A086E85B8FDB917AA8D911E1C00AB6A3A1 Validity Not Before: Jul 19 07:49:14 2025 GMT Not After : Jul 26 07:49:14 2025 GMT Subject: CN=687b4dfa-210d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:88:2b:d8:00:6a:c4:35:a4:a3:ef:95:27:38: 77:98:1a:34:de:ad:88:89:0d:41:55:d6:f0:5d:b7: 11:a6:73:62:c5:20:12:b2:c0:f4:17:f7:ae:3e:82: b2:61:82:81:7e:62:38:26:b1:c7:76:55:4a:86:8e: 1d:55:51:fe:10:89:0d:ab:df:1f:bb:de:8a:22:f7: 54:b8:41:ab:9c:a7:45:b4:56:a9:fc:f4:5f:2d:6c: 21:0f:df:95:4a:85:a8:0e:e7:a6:34:fd:69:6b:63: 87:81:b5:05:2a:5f:97:40:66:7e:27:7b:db:e7:4e: f7:03:20:1f:22:1a:d5:8e:35:d4:50:c0:d8:38:6c: 0f:d0:ef:b7:e6:56:d4:f8:20:e0:a8:77:cd:c4:7d: a1:20:a4:3f:73:4b:23:75:bd:0f:40:f5:5b:a1:3f: eb:8e:1e:63:b1:bf:f7:38:1e:4c:6c:60:9d:92:67: 6d:c7:47:bd:63:3a:82:e8:dd:11:f4:e4:e1:09:33: e1:28:c8:0c:83:3d:b2:46:d0:ff:49:80:d2:3c:52: 62:07:20:a0:79:c7:93:ac:e3:0c:5d:08:6c:10:a9: 2e:6f:01:64:ae:21:e9:59:0c:42:d7:08:ec:3b:f5: d1:36:a4:4d:3b:96:d5:e7:b3:58:ff:40:39:09:7c: 3b:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:E2:64:CD:0B:57:32:2A:89:AA:C0:5E:5A:F5:53:AB:0D:07:2F:85 X509v3 Authority Key Identifier: keyid:17:3C:26:A0:86:E8:5B:8F:DB:91:7A:A8:D9:11:E1:C0:0A:B6:A3:A1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FBEFA/0DA506CC0B3711F08C239863C4F9AE02/FzwmoIboW4_bkXqo2RHhwAq2o6E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FzwmoIboW4_bkXqo2RHhwAq2o6E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FBEFA/0DA506CC0B3711F08C239863C4F9AE02/FzwmoIboW4_bkXqo2RHhwAq2o6E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c9:7b:39:16:9b:67:f4:be:11:29:17:c1:93:fa:02:a9:ec:ba: b0:c8:8c:0c:27:dd:63:f1:0b:11:d2:df:90:d8:d9:39:7a:60: 88:4c:dc:fd:53:2d:c0:9f:b2:b1:45:b0:d8:4c:6c:23:d4:55: bc:f7:0e:1a:c6:bc:09:e7:44:4f:69:0c:a4:a0:a2:d0:2b:2b: 59:4b:4d:d5:a4:4b:65:d8:ee:b2:da:fd:24:1b:f3:a6:00:7f: a9:b7:17:3e:bf:9a:e1:0f:c6:74:8d:fe:11:fe:3d:92:5c:c3: 17:16:0c:4c:07:18:aa:b5:f9:73:c9:d4:df:65:25:9e:b9:08: 13:0f:8c:1a:33:70:fc:8d:4f:e8:e8:fe:9a:a4:7e:f2:ad:e4: e1:c0:8a:42:cd:4f:38:33:ac:31:84:b9:55:71:58:68:18:66: 6a:6d:48:28:e8:01:17:40:87:80:0c:21:2a:84:fa:f1:8b:af: b4:2d:0b:9e:24:df:05:5a:dc:b0:5c:2e:1b:1e:c9:fe:dd:a2: b6:5a:5c:40:af:9e:6d:c3:2b:17:e6:44:15:22:58:69:a3:1b: de:77:c6:b1:45:fc:2d:b7:67:aa:4c:f5:9b:c8:d1:71:33:94: bb:09:ef:4b:03:01:81:38:a3:7b:52:37:46:eb:75:c9:f2:c1: 4d:2a:36:73 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBQDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG QkVGQTExMC8GA1UEBRMoMTczQzI2QTA4NkU4NUI4RkRCOTE3QUE4RDkxMUUxQzAw QUI2QTNBMTAeFw0yNTA3MTkwNzQ5MTRaFw0yNTA3MjYwNzQ5MTRaMBgxFjAUBgNV BAMTDTY4N2I0ZGZhLTIxMGQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCpiCvYAGrENaSj75UnOHeYGjTerYiJDUFV1vBdtxGmc2LFIBKywPQX964+grJh goF+Yjgmscd2VUqGjh1VUf4QiQ2r3x+73ooi91S4Qaucp0W0Vqn89F8tbCEP35VK hagO56Y0/WlrY4eBtQUqX5dAZn4ne9vnTvcDIB8iGtWONdRQwNg4bA/Q77fmVtT4 IOCod83EfaEgpD9zSyN1vQ9A9VuhP+uOHmOxv/c4HkxsYJ2SZ23HR71jOoLo3RH0 5OEJM+EoyAyDPbJG0P9JgNI8UmIHIKB5x5Os4wxdCGwQqS5vAWSuIelZDELXCOw7 9dE2pE07ltXns1j/QDkJfDvHAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUf+JkzQtX MiqJqsBeWvVTqw0HL4UwHwYDVR0jBBgwFoAUFzwmoIboW4/bkXqo2RHhwAq2o6Ew DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUZCRUZBLzBEQTUwNkNDMEIz NzExRjA4QzIzOTg2M0M0RjlBRTAyL0Z6d21vSWJvVzRfYmtYcW8yUkhod0FxMm82 RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvRnp3bW9JYm9XNF9ia1hxbzJSSGh3QXEybzZFLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUZC RUZBLzBEQTUwNkNDMEIzNzExRjA4QzIzOTg2M0M0RjlBRTAyL0Z6d21vSWJvVzRf YmtYcW8yUkhod0FxMm82RS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAMl7ORabZ/S+ESkXwZP6AqnsurDIjAwn3WPxCxHS35DY2Tl6YIhM3P1T LcCfsrFFsNhMbCPUVbz3DhrGvAnnRE9pDKSgotArK1lLTdWkS2XY7rLa/SQb86YA f6m3Fz6/muEPxnSN/hH+PZJcwxcWDEwHGKq1+XPJ1N9lJZ65CBMPjBozcPyNT+jo /pqkfvKt5OHAikLNTzgzrDGEuVVxWGgYZmptSCjoARdAh4AMISqE+vGLr7QtC54k 3wVa3LBcLhseyf7dorZaXECvnm3DKxfmRBUiWGmjG953xrFF/C23Z6pM9ZvI0XEz lLsJ70sDAYE4o3tSN0brdcnywU0qNnM= -----END CERTIFICATE-----Generated at Sun Jul 20 20:40:40 2025 by rpki-client