$ rpki-client -vvf rpki.apnic.net/member_repository/A91FBEFA/0DA506CC0B3711F08C239863C4F9AE02/FzwmoIboW4_bkXqo2RHhwAq2o6E.mft File: FzwmoIboW4_bkXqo2RHhwAq2o6E.mft (raw, json) Hash identifier: HcMTEYCrmyYjkp0/rxqU8QrBRehVaBr07h5DTmHSQTc= Subject key identifier: 52:B6:1B:60:3D:18:B9:80:46:95:FB:E2:54:BC:CF:43:42:FA:9B:D8 Authority key identifier: 17:3C:26:A0:86:E8:5B:8F:DB:91:7A:A8:D9:11:E1:C0:0A:B6:A3:A1 Certificate issuer: /CN=A91FBEFA/serialNumber=173C26A086E85B8FDB917AA8D911E1C00AB6A3A1 Certificate serial: 59 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FzwmoIboW4_bkXqo2RHhwAq2o6E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FBEFA/0DA506CC0B3711F08C239863C4F9AE02/FzwmoIboW4_bkXqo2RHhwAq2o6E.mft Manifest number: 57 Signing time: Fri 05 Sep 2025 07:44:58 +0000 Manifest this update: Fri 05 Sep 2025 07:44:58 +0000 Manifest next update: Fri 12 Sep 2025 07:44:58 +0000 Files and hashes: 1: FzwmoIboW4_bkXqo2RHhwAq2o6E.crl (hash: 5q21tM5nNaknvWNiEuK6o0/jWlv5ObY8/ufMDGGPlrY=) 2: 4776F9120CCE11F0A08AA749C4F9AE02.roa (hash: VlGCrM3drX5CqJ0PsOFfcqqGKkwf8UbZCTA7SKqIpGI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FBEFA/0DA506CC0B3711F08C239863C4F9AE02/FzwmoIboW4_bkXqo2RHhwAq2o6E.crl rsync://rpki.apnic.net/member_repository/A91FBEFA/0DA506CC0B3711F08C239863C4F9AE02/FzwmoIboW4_bkXqo2RHhwAq2o6E.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FzwmoIboW4_bkXqo2RHhwAq2o6E.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Sep 2025 07:44:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 89 (0x59) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FBEFA, serialNumber=173C26A086E85B8FDB917AA8D911E1C00AB6A3A1 Validity Not Before: Sep 5 07:44:58 2025 GMT Not After : Sep 12 07:44:58 2025 GMT Subject: CN=68ba94fa-ecb5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:b7:ef:9b:a3:2c:f8:69:72:11:c0:7c:59:e7: 12:57:0a:53:44:9c:0f:9c:06:1a:e1:f2:18:02:6e: 78:96:84:e9:5b:75:87:51:dd:81:e2:c2:6f:33:12: c5:57:1f:12:f6:21:3d:1b:6a:ce:e0:18:e1:3d:da: 33:6d:1a:db:c9:0f:aa:f3:9b:40:c3:65:87:78:bd: 09:a4:fd:82:8b:38:69:98:dd:39:78:9e:03:18:90: cd:fb:76:ac:12:58:b0:23:bc:d8:fd:1c:69:da:d2: 60:24:e0:b8:e6:08:00:31:43:f9:be:be:96:89:48: 7b:79:7d:29:d0:84:31:15:3e:5f:a0:06:2e:f9:cb: 15:4c:ce:6d:25:ef:86:2a:95:a8:85:52:fe:08:fa: c7:fa:25:56:cc:23:1e:55:32:7b:3e:75:12:ee:a4: f3:da:d6:a9:5c:df:90:a6:ee:59:bc:5c:9f:b0:17: 4d:5c:79:c2:cf:cc:14:30:c0:fa:ba:91:25:75:60: 70:8d:dd:b3:e9:1b:e0:66:38:35:52:74:be:03:5c: 09:87:af:20:dd:eb:1a:8f:98:0c:60:46:bb:78:47: d4:70:fc:7b:92:48:99:7c:d0:67:dd:c1:d2:a6:a9: ad:03:f0:a9:da:eb:97:16:4e:6d:44:6f:98:c8:cb: eb:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:B6:1B:60:3D:18:B9:80:46:95:FB:E2:54:BC:CF:43:42:FA:9B:D8 X509v3 Authority Key Identifier: keyid:17:3C:26:A0:86:E8:5B:8F:DB:91:7A:A8:D9:11:E1:C0:0A:B6:A3:A1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FBEFA/0DA506CC0B3711F08C239863C4F9AE02/FzwmoIboW4_bkXqo2RHhwAq2o6E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FzwmoIboW4_bkXqo2RHhwAq2o6E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FBEFA/0DA506CC0B3711F08C239863C4F9AE02/FzwmoIboW4_bkXqo2RHhwAq2o6E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c3:4d:b4:95:97:01:75:c8:06:88:60:af:df:f5:4d:35:9d:f6: 20:06:d4:49:a8:af:91:2c:ff:35:f6:78:b0:2f:c9:f7:0c:7a: 67:3d:2e:87:b5:21:68:4e:48:eb:0b:92:6f:7d:aa:76:ba:4f: 63:48:c1:76:03:04:22:84:13:fb:13:b6:03:08:56:64:34:7c: b3:eb:20:bb:d7:e6:b7:a6:d1:dd:59:83:6e:e3:df:79:6d:73: 97:8c:11:76:7e:d0:b5:9d:32:19:f6:3b:c0:f6:2d:7e:f2:8e: 4f:25:88:7d:c0:a7:9d:90:ae:a1:6c:03:00:ee:3b:0d:2f:85: 99:a4:3a:7f:96:71:38:5a:47:e9:f8:c7:5b:ca:29:24:1c:01: 73:30:36:6b:00:13:50:1b:10:58:eb:f3:48:70:58:89:d9:4d: 94:c4:0d:b2:19:71:eb:9d:0a:d4:ee:4e:58:4d:9d:73:2b:b4: 6b:1e:81:13:91:7a:b0:a4:e9:a0:90:f5:74:52:36:7d:51:5a: 62:45:02:89:90:c2:2f:02:7d:73:36:07:5f:54:54:47:e4:53: bc:ef:d4:1c:07:aa:58:10:39:8d:7a:ad:f8:eb:c2:fd:c8:61: 20:b9:15:90:47:47:82:0b:be:ae:9c:fc:26:42:37:32:13:9a: 71:c8:25:75 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBWTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG QkVGQTExMC8GA1UEBRMoMTczQzI2QTA4NkU4NUI4RkRCOTE3QUE4RDkxMUUxQzAw QUI2QTNBMTAeFw0yNTA5MDUwNzQ0NThaFw0yNTA5MTIwNzQ0NThaMBgxFjAUBgNV BAMTDTY4YmE5NGZhLWVjYjUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDNt++boyz4aXIRwHxZ5xJXClNEnA+cBhrh8hgCbniWhOlbdYdR3YHiwm8zEsVX HxL2IT0bas7gGOE92jNtGtvJD6rzm0DDZYd4vQmk/YKLOGmY3Tl4ngMYkM37dqwS WLAjvNj9HGna0mAk4LjmCAAxQ/m+vpaJSHt5fSnQhDEVPl+gBi75yxVMzm0l74Yq laiFUv4I+sf6JVbMIx5VMns+dRLupPPa1qlc35Cm7lm8XJ+wF01cecLPzBQwwPq6 kSV1YHCN3bPpG+BmODVSdL4DXAmHryDd6xqPmAxgRrt4R9Rw/HuSSJl80GfdwdKm qa0D8Kna65cWTm1Eb5jIy+tfAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUUrYbYD0Y uYBGlfviVLzPQ0L6m9gwHwYDVR0jBBgwFoAUFzwmoIboW4/bkXqo2RHhwAq2o6Ew DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUZCRUZBLzBEQTUwNkNDMEIz NzExRjA4QzIzOTg2M0M0RjlBRTAyL0Z6d21vSWJvVzRfYmtYcW8yUkhod0FxMm82 RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvRnp3bW9JYm9XNF9ia1hxbzJSSGh3QXEybzZFLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUZC RUZBLzBEQTUwNkNDMEIzNzExRjA4QzIzOTg2M0M0RjlBRTAyL0Z6d21vSWJvVzRf YmtYcW8yUkhod0FxMm82RS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAMNNtJWXAXXIBohgr9/1TTWd9iAG1Emor5Es/zX2eLAvyfcMemc9Loe1 IWhOSOsLkm99qna6T2NIwXYDBCKEE/sTtgMIVmQ0fLPrILvX5rem0d1Zg27j33lt c5eMEXZ+0LWdMhn2O8D2LX7yjk8liH3Ap52QrqFsAwDuOw0vhZmkOn+WcThaR+n4 x1vKKSQcAXMwNmsAE1AbEFjr80hwWInZTZTEDbIZceudCtTuTlhNnXMrtGsegROR erCk6aCQ9XRSNn1RWmJFAomQwi8CfXM2B19UVEfkU7zv1BwHqlgQOY16rfjrwv3I YSC5FZBHR4ILvq6c/CZCNzITmnHIJXU= -----END CERTIFICATE-----Generated at Sat Sep 6 21:31:27 2025 by rpki-client