$ rpki-client -vvf rpki.apnic.net/member_repository/A91444E5/2E822DAA1B9111EC9E7A3114C4F9AE02/Fgi_RiSn4bcjIotGYd1mHnCu8_Q.mft File: Fgi_RiSn4bcjIotGYd1mHnCu8_Q.mft (raw, json) Hash identifier: l/tHeAYfwq+jTWsInTwu6Gmu0hQSTel2qIiQKXvGK9g= Subject key identifier: 10:1C:E7:0F:38:1F:7A:29:91:01:4F:70:FB:3D:3E:EC:12:B7:B0:2C Authority key identifier: 16:08:BF:46:24:A7:E1:B7:23:22:8B:46:61:DD:66:1E:70:AE:F3:F4 Certificate issuer: /CN=A91444E5/serialNumber=1608BF4624A7E1B723228B4661DD661E70AEF3F4 Certificate serial: 04F0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fgi_RiSn4bcjIotGYd1mHnCu8_Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91444E5/2E822DAA1B9111EC9E7A3114C4F9AE02/Fgi_RiSn4bcjIotGYd1mHnCu8_Q.mft Manifest number: 04E9 Signing time: Sat 14 Jun 2025 23:27:42 +0000 Manifest this update: Sat 14 Jun 2025 23:27:41 +0000 Manifest next update: Sat 21 Jun 2025 23:27:41 +0000 Files and hashes: 1: Fgi_RiSn4bcjIotGYd1mHnCu8_Q.crl (hash: HFw9Da8qUqAoZt4/WVqqIbie26z9Dyh+Zrm57m5EoOg=) 2: 90AB89E4547511EEB44F391AC4F9AE02.roa (hash: xx0/0c099Z+DcfDq5KxpcRvexWoXtqPp/xhoiOnuqgg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91444E5/2E822DAA1B9111EC9E7A3114C4F9AE02/Fgi_RiSn4bcjIotGYd1mHnCu8_Q.crl rsync://rpki.apnic.net/member_repository/A91444E5/2E822DAA1B9111EC9E7A3114C4F9AE02/Fgi_RiSn4bcjIotGYd1mHnCu8_Q.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fgi_RiSn4bcjIotGYd1mHnCu8_Q.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Jun 2025 23:27:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1264 (0x4f0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91444E5, serialNumber=1608BF4624A7E1B723228B4661DD661E70AEF3F4 Validity Not Before: Jun 14 23:27:41 2025 GMT Not After : Jun 21 23:27:41 2025 GMT Subject: CN=684e056e-2f14 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:66:4b:a9:81:98:bb:32:c8:70:ec:a4:d1:07: e9:67:84:1b:aa:9f:2d:d4:cc:f5:29:00:3e:6b:3a: 4c:d9:4d:e3:7f:69:78:d1:7a:bf:4d:e3:e2:50:66: eb:6c:dd:07:54:c8:91:7b:2c:b7:85:66:0f:96:a2: 3d:34:d7:be:6f:74:57:4d:8e:af:9d:37:9e:89:8f: e5:00:64:ac:5c:ca:b7:4c:10:e4:82:f0:c5:8c:fb: 4b:5e:3f:ac:e8:bd:72:ab:27:9e:6a:c0:08:87:74: 70:60:32:0d:cc:6d:3d:84:cf:2b:9f:7c:37:14:19: fe:53:ef:a1:42:84:55:da:04:cb:78:84:8a:a1:13: 0a:1a:72:05:28:c9:8f:78:e2:74:54:af:f8:8d:bf: 93:07:38:49:19:2f:09:62:f0:d2:77:89:1c:41:97: 37:ed:61:3e:84:20:27:f1:e7:c3:36:14:94:3a:05: ce:08:4c:5c:65:dd:17:2a:75:f8:9b:1d:8a:a2:64: 1f:cf:81:65:40:af:62:8c:0c:19:c7:3b:55:9e:7a: d5:7e:10:8e:c2:7b:f0:30:88:78:b2:12:92:1a:34: aa:5d:58:3e:29:3d:74:87:37:01:82:dd:42:ad:bf: 5a:6f:69:27:b9:5a:70:98:60:ae:7a:61:a4:24:1c: 29:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:1C:E7:0F:38:1F:7A:29:91:01:4F:70:FB:3D:3E:EC:12:B7:B0:2C X509v3 Authority Key Identifier: keyid:16:08:BF:46:24:A7:E1:B7:23:22:8B:46:61:DD:66:1E:70:AE:F3:F4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91444E5/2E822DAA1B9111EC9E7A3114C4F9AE02/Fgi_RiSn4bcjIotGYd1mHnCu8_Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fgi_RiSn4bcjIotGYd1mHnCu8_Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91444E5/2E822DAA1B9111EC9E7A3114C4F9AE02/Fgi_RiSn4bcjIotGYd1mHnCu8_Q.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 52:0e:35:3c:d0:a6:b1:da:c4:ff:85:32:9c:d6:de:21:27:d9: 70:dd:89:d1:13:e6:93:81:56:c9:de:62:1f:9b:c4:7c:4d:64: 50:a6:d6:4a:e9:83:b2:1f:e7:00:cd:5a:33:12:a5:44:df:64: 50:c7:2a:44:0c:8d:7a:78:88:bd:86:72:7d:30:02:a7:7f:1b: 8b:ed:b4:c0:b6:64:6c:d2:2c:d2:7a:67:4f:ad:97:73:9e:59: 3e:a2:c5:b4:67:36:60:3b:b5:87:46:2e:9f:99:dd:ba:b3:3c: 00:d8:1b:b6:69:ce:5c:01:d2:a5:4c:f9:18:73:29:38:1b:2d: 95:55:6a:a0:05:56:14:fe:1c:68:b6:31:d4:c7:0a:9f:29:6b: 62:cf:e3:63:82:9d:cb:8c:fc:fb:5a:63:ac:c3:2f:d4:06:9b: dd:dd:ec:d1:84:25:d4:f0:3c:dd:0e:0e:cd:3f:24:48:ed:7b: 8a:b4:b2:c2:27:70:49:ad:19:af:0f:1e:4e:49:e9:3c:ee:e7: 32:91:f2:39:48:54:3c:7e:71:87:48:15:47:51:6c:4b:4e:49: 96:46:c5:0e:ef:f5:05:5c:d8:fd:aa:60:ab:9e:b3:ed:c6:1a: b5:9d:44:b3:84:a5:e2:28:a2:5e:1e:dc:d9:c2:e8:f0:ea:97: 72:90:5a:6a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBPAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDQ0RTUxMTAvBgNVBAUTKDE2MDhCRjQ2MjRBN0UxQjcyMzIyOEI0NjYxREQ2NjFF NzBBRUYzRjQwHhcNMjUwNjE0MjMyNzQxWhcNMjUwNjIxMjMyNzQxWjAYMRYwFAYD VQQDEw02ODRlMDU2ZS0yZjE0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzGZLqYGYuzLIcOyk0QfpZ4Qbqp8t1Mz1KQA+azpM2U3jf2l40Xq/TePiUGbr bN0HVMiReyy3hWYPlqI9NNe+b3RXTY6vnTeeiY/lAGSsXMq3TBDkgvDFjPtLXj+s 6L1yqyeeasAIh3RwYDINzG09hM8rn3w3FBn+U++hQoRV2gTLeISKoRMKGnIFKMmP eOJ0VK/4jb+TBzhJGS8JYvDSd4kcQZc37WE+hCAn8efDNhSUOgXOCExcZd0XKnX4 mx2KomQfz4FlQK9ijAwZxztVnnrVfhCOwnvwMIh4shKSGjSqXVg+KT10hzcBgt1C rb9ab2knuVpwmGCuemGkJBwpaQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBAc5w84 H3opkQFPcPs9PuwSt7AsMB8GA1UdIwQYMBaAFBYIv0Ykp+G3IyKLRmHdZh5wrvP0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NDRFNS8yRTgyMkRBQTFC OTExMUVDOUU3QTMxMTRDNEY5QUUwMi9GZ2lfUmlTbjRiY2pJb3RHWWQxbUhuQ3U4 X1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZnaV9SaVNuNGJjaklvdEdZZDFtSG5DdThfUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NDRFNS8yRTgyMkRBQTFCOTExMUVDOUU3QTMxMTRDNEY5QUUwMi9GZ2lfUmlTbjRi Y2pJb3RHWWQxbUhuQ3U4X1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBSDjU80Kax2sT/hTKc1t4hJ9lw3YnRE+aTgVbJ3mIfm8R8TWRQptZK 6YOyH+cAzVozEqVE32RQxypEDI16eIi9hnJ9MAKnfxuL7bTAtmRs0izSemdPrZdz nlk+osW0ZzZgO7WHRi6fmd26szwA2Bu2ac5cAdKlTPkYcyk4Gy2VVWqgBVYU/hxo tjHUxwqfKWtiz+Njgp3LjPz7WmOswy/UBpvd3ezRhCXU8DzdDg7NPyRI7XuKtLLC J3BJrRmvDx5OSek87ucykfI5SFQ8fnGHSBVHUWxLTkmWRsUO7/UFXNj9qmCrnrPt xhq1nUSzhKXiKKJeHtzZwujw6pdykFpq -----END CERTIFICATE-----Generated at Sun Jun 15 08:26:37 2025 by rpki-client