$ rpki-client -vvf rpki.apnic.net/member_repository/A91444E5/2E822DAA1B9111EC9E7A3114C4F9AE02/Fgi_RiSn4bcjIotGYd1mHnCu8_Q.mft File: Fgi_RiSn4bcjIotGYd1mHnCu8_Q.mft (raw, json) Hash identifier: aldBxtJUU9pjvyAHnamMiGYpnkNTu1YRg/arU95C/Fw= Subject key identifier: 77:BB:8F:74:3D:F1:07:F5:1D:21:5A:C4:1D:DD:A5:69:A3:02:04:61 Authority key identifier: 16:08:BF:46:24:A7:E1:B7:23:22:8B:46:61:DD:66:1E:70:AE:F3:F4 Certificate issuer: /CN=A91444E5/serialNumber=1608BF4624A7E1B723228B4661DD661E70AEF3F4 Certificate serial: 053B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fgi_RiSn4bcjIotGYd1mHnCu8_Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91444E5/2E822DAA1B9111EC9E7A3114C4F9AE02/Fgi_RiSn4bcjIotGYd1mHnCu8_Q.mft Manifest number: 0533 Signing time: Tue 04 Nov 2025 23:35:02 +0000 Manifest this update: Tue 04 Nov 2025 23:35:01 +0000 Manifest next update: Tue 11 Nov 2025 23:35:01 +0000 Files and hashes: 1: Fgi_RiSn4bcjIotGYd1mHnCu8_Q.crl (hash: AfUCuoBmBLljK+OCnupHtI1segrhBKyTAoXT1udLtJI=) 2: 90AB89E4547511EEB44F391AC4F9AE02.roa (hash: 9PQho0kFLoK528MTXKQJuaitZOSaZ/91m7DaZwI2M3w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91444E5/2E822DAA1B9111EC9E7A3114C4F9AE02/Fgi_RiSn4bcjIotGYd1mHnCu8_Q.crl rsync://rpki.apnic.net/member_repository/A91444E5/2E822DAA1B9111EC9E7A3114C4F9AE02/Fgi_RiSn4bcjIotGYd1mHnCu8_Q.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fgi_RiSn4bcjIotGYd1mHnCu8_Q.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 23:35:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1339 (0x53b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91444E5, serialNumber=1608BF4624A7E1B723228B4661DD661E70AEF3F4 Validity Not Before: Nov 4 23:35:01 2025 GMT Not After : Nov 11 23:35:01 2025 GMT Subject: CN=690a8da6-5d23 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:21:44:af:23:ad:5c:59:20:06:79:da:36:e2: 9b:e9:43:49:66:4d:51:50:c8:ed:1a:c8:5a:cb:47: e4:76:74:0c:4e:c0:55:d4:38:04:88:76:c5:43:42: 84:15:2e:7f:90:73:08:b4:e2:54:49:42:13:92:78: 2c:d5:09:7d:bf:48:ba:44:5e:7b:3a:e0:04:05:61: 42:0f:47:44:4a:f6:0c:d1:5e:7e:78:a9:ee:a8:39: b8:de:80:54:87:33:bf:16:75:04:55:32:20:4a:10: 6b:05:7a:bb:31:9b:f0:70:53:c6:ca:49:a3:2b:ed: 97:74:59:1b:46:6e:b8:99:69:ba:91:d4:ad:02:b1: 1f:0f:b5:89:91:a0:21:62:dc:ed:78:32:6b:90:72: c4:cb:0c:ec:dc:c3:54:e5:b0:1d:5a:dc:1c:84:7d: 40:2d:16:64:8b:69:e0:97:4b:a7:ec:9d:96:93:6a: 06:e8:14:bd:52:2f:13:2c:4b:bd:4f:e7:e2:5d:47: 49:1b:05:e9:92:03:af:98:a1:1a:cb:c2:12:92:6f: d6:a2:db:47:b7:3b:a0:49:09:ed:2c:d5:89:27:42: b6:fd:e5:ed:47:02:9e:df:57:87:a1:52:f8:d3:ec: 5e:f6:fd:bc:2c:a1:21:4c:7e:81:0f:a2:60:b6:18: c9:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:BB:8F:74:3D:F1:07:F5:1D:21:5A:C4:1D:DD:A5:69:A3:02:04:61 X509v3 Authority Key Identifier: keyid:16:08:BF:46:24:A7:E1:B7:23:22:8B:46:61:DD:66:1E:70:AE:F3:F4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91444E5/2E822DAA1B9111EC9E7A3114C4F9AE02/Fgi_RiSn4bcjIotGYd1mHnCu8_Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fgi_RiSn4bcjIotGYd1mHnCu8_Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91444E5/2E822DAA1B9111EC9E7A3114C4F9AE02/Fgi_RiSn4bcjIotGYd1mHnCu8_Q.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7e:f9:07:34:08:80:63:f0:08:ff:51:c8:34:ef:43:e4:38:61: 68:65:94:d2:87:ce:a8:77:2a:7b:36:16:7b:89:78:a6:0a:58: a9:b2:64:c9:a1:89:45:ed:6f:b2:cb:22:ca:6b:91:10:fa:ff: 45:04:04:59:ea:13:00:0a:76:22:09:cd:59:8d:52:bb:7b:e6: e1:3b:b3:b7:06:90:a1:ae:d6:73:34:c4:a9:57:8a:61:cc:88: 87:61:f5:3f:b7:74:e5:b6:b9:6a:e7:36:3c:62:2c:27:0d:78: 9d:49:b1:cd:f2:52:96:4f:33:2b:9c:50:3d:f4:2d:53:88:cb: 9e:11:3e:71:e6:18:76:a7:80:cd:6e:e5:6e:fb:30:88:7f:2d: 90:b2:01:a7:34:b4:14:3f:49:4a:0c:79:1e:b2:ed:ff:e8:32: 78:2e:fd:a3:16:b7:83:ba:1a:78:d0:64:55:e0:6e:09:fb:5e: 2f:69:ea:67:4a:42:e5:02:d4:0b:09:1f:96:80:3e:8d:d9:91: 69:9d:8c:39:6f:f5:38:96:7f:55:1d:8b:64:6a:ed:e2:97:b7: 29:6d:25:dc:a8:bf:88:7e:4e:48:8c:91:6f:b9:49:d7:0a:73: 30:24:11:cf:f9:7f:0c:2a:ed:cb:38:ee:b7:15:db:eb:2f:bb: af:13:ee:83 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBTswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDQ0RTUxMTAvBgNVBAUTKDE2MDhCRjQ2MjRBN0UxQjcyMzIyOEI0NjYxREQ2NjFF NzBBRUYzRjQwHhcNMjUxMTA0MjMzNTAxWhcNMjUxMTExMjMzNTAxWjAYMRYwFAYD VQQDEw02OTBhOGRhNi01ZDIzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxyFEryOtXFkgBnnaNuKb6UNJZk1RUMjtGshay0fkdnQMTsBV1DgEiHbFQ0KE FS5/kHMItOJUSUITkngs1Ql9v0i6RF57OuAEBWFCD0dESvYM0V5+eKnuqDm43oBU hzO/FnUEVTIgShBrBXq7MZvwcFPGykmjK+2XdFkbRm64mWm6kdStArEfD7WJkaAh YtzteDJrkHLEywzs3MNU5bAdWtwchH1ALRZki2ngl0un7J2Wk2oG6BS9Ui8TLEu9 T+fiXUdJGwXpkgOvmKEay8ISkm/WottHtzugSQntLNWJJ0K2/eXtRwKe31eHoVL4 0+xe9v28LKEhTH6BD6JgthjJYQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHe7j3Q9 8Qf1HSFaxB3dpWmjAgRhMB8GA1UdIwQYMBaAFBYIv0Ykp+G3IyKLRmHdZh5wrvP0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NDRFNS8yRTgyMkRBQTFC OTExMUVDOUU3QTMxMTRDNEY5QUUwMi9GZ2lfUmlTbjRiY2pJb3RHWWQxbUhuQ3U4 X1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZnaV9SaVNuNGJjaklvdEdZZDFtSG5DdThfUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NDRFNS8yRTgyMkRBQTFCOTExMUVDOUU3QTMxMTRDNEY5QUUwMi9GZ2lfUmlTbjRi Y2pJb3RHWWQxbUhuQ3U4X1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB++Qc0CIBj8Aj/Ucg070PkOGFoZZTSh86odyp7NhZ7iXimClipsmTJ oYlF7W+yyyLKa5EQ+v9FBARZ6hMACnYiCc1ZjVK7e+bhO7O3BpChrtZzNMSpV4ph zIiHYfU/t3Tltrlq5zY8YiwnDXidSbHN8lKWTzMrnFA99C1TiMueET5x5hh2p4DN buVu+zCIfy2QsgGnNLQUP0lKDHkesu3/6DJ4Lv2jFreDuhp40GRV4G4J+14vaepn SkLlAtQLCR+WgD6N2ZFpnYw5b/U4ln9VHYtkau3il7cpbSXcqL+Ifk5IjJFvuUnX CnMwJBHP+X8MKu3LOO63FdvrL7uvE+6D -----END CERTIFICATE-----Generated at Wed Nov 5 20:54:41 2025 by rpki-client