$ rpki-client -vvf rpki.apnic.net/member_repository/A91D17E6/0594FAE21E5F11F09518664DC4F9AE02/FizOhuKjaX6Ri3y11W2goALHk3E.mft File: FizOhuKjaX6Ri3y11W2goALHk3E.mft (raw, json) Hash identifier: nMDcIPJqU0cZaiHCn2u1oQmJ3Ds1EC3kE3srj1FWrpI= Subject key identifier: A6:9C:DC:FC:E7:A5:23:FF:E4:50:DF:E5:A8:8B:AF:EB:91:70:84:6F Authority key identifier: 16:2C:CE:86:E2:A3:69:7E:91:8B:7C:B5:D5:6D:A0:A0:02:C7:93:71 Certificate issuer: /CN=A91D17E6/serialNumber=162CCE86E2A3697E918B7CB5D56DA0A002C79371 Certificate serial: 67 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FizOhuKjaX6Ri3y11W2goALHk3E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D17E6/0594FAE21E5F11F09518664DC4F9AE02/FizOhuKjaX6Ri3y11W2goALHk3E.mft Manifest number: 65 Signing time: Mon 03 Nov 2025 07:01:17 +0000 Manifest this update: Mon 03 Nov 2025 07:01:16 +0000 Manifest next update: Mon 10 Nov 2025 07:01:16 +0000 Files and hashes: 1: FizOhuKjaX6Ri3y11W2goALHk3E.crl (hash: t1V/G66ywW/eWL89hDywzEJ69i3mtHWWR1eYs8w6m5A=) 2: AF69D6BA4C0311F08D3CD93AC4F9AE02.roa (hash: rcGL+ObZ3SX0Z7dA7NG3vylGQnp7zRpBYV2OeNWL8lQ=) 3: BA5D351C4C0311F0ABCEF33AC4F9AE02.roa (hash: Kcq7bCUGmI5Bp+s4yhX/8VE1f6QaguT6MUZ8dIkMVNc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D17E6/0594FAE21E5F11F09518664DC4F9AE02/FizOhuKjaX6Ri3y11W2goALHk3E.crl rsync://rpki.apnic.net/member_repository/A91D17E6/0594FAE21E5F11F09518664DC4F9AE02/FizOhuKjaX6Ri3y11W2goALHk3E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FizOhuKjaX6Ri3y11W2goALHk3E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 07:01:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 103 (0x67) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D17E6, serialNumber=162CCE86E2A3697E918B7CB5D56DA0A002C79371 Validity Not Before: Nov 3 07:01:16 2025 GMT Not After : Nov 10 07:01:16 2025 GMT Subject: CN=6908533c-8d5c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:b2:96:1a:ee:38:2f:a2:42:8a:47:7d:4e:83: a0:f5:0b:4b:cb:db:4e:86:82:7f:3e:52:88:ad:95: a3:c5:94:b6:ab:38:dd:b1:14:e6:79:85:be:9d:4b: e7:4b:35:60:24:43:91:70:fc:74:47:55:3c:e9:d1: 4b:11:f6:81:12:c7:f7:51:32:4f:33:85:f1:2e:d8: 44:f7:ad:28:5b:82:12:69:ca:46:7f:d4:c0:6f:f7: ed:03:11:28:34:01:c6:98:dd:a3:fc:5f:81:eb:c5: 20:e3:5c:08:c7:70:06:20:f6:f8:1d:f9:f2:c5:c5: da:8d:3c:bf:b7:b7:03:38:c0:bd:dc:0e:f2:a1:aa: a0:3f:e0:01:7b:36:85:fb:d9:13:d6:0e:c1:39:64: c5:43:dc:14:d7:35:ce:de:d7:f7:78:e5:dd:dc:11: 63:01:c2:86:d4:6e:19:3e:5d:99:68:5c:f2:c5:97: c4:64:6a:59:a4:04:61:60:82:07:d4:c2:5a:b4:f2: a0:4e:1e:1a:d6:4a:7b:45:50:64:b7:86:cd:32:3a: 21:41:1e:4d:ca:4c:3a:19:4c:a6:ff:8a:a4:73:ba: 70:97:11:1e:e0:05:21:60:32:e9:cd:33:ae:64:a7: 05:94:f4:c7:29:e1:9d:47:d5:d3:59:10:5a:47:61: 91:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:9C:DC:FC:E7:A5:23:FF:E4:50:DF:E5:A8:8B:AF:EB:91:70:84:6F X509v3 Authority Key Identifier: keyid:16:2C:CE:86:E2:A3:69:7E:91:8B:7C:B5:D5:6D:A0:A0:02:C7:93:71 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D17E6/0594FAE21E5F11F09518664DC4F9AE02/FizOhuKjaX6Ri3y11W2goALHk3E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FizOhuKjaX6Ri3y11W2goALHk3E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D17E6/0594FAE21E5F11F09518664DC4F9AE02/FizOhuKjaX6Ri3y11W2goALHk3E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption be:0d:df:1e:0c:af:71:41:a2:ca:6a:97:f2:03:58:98:e6:4b: 9a:d6:bf:79:65:51:c6:69:72:9c:c6:d7:1b:5c:04:b4:cf:50: b4:f1:73:a0:8e:28:ff:d0:5b:e1:95:1d:31:7e:94:e4:2d:46: 77:e5:d2:dd:53:3d:ad:6c:fa:b5:c3:aa:a1:c9:eb:a7:d0:4b: 30:e9:90:2a:b8:fa:86:b3:e2:97:92:22:6f:a2:fb:48:b8:98: 7d:c4:c4:2c:96:c8:0f:5d:93:7a:1c:a9:09:63:4b:38:8b:59: 67:92:f3:80:2a:ca:12:92:f3:4e:a4:d6:65:39:d1:d6:b6:c6: e0:7c:70:2c:23:fc:a7:ef:01:1f:d0:1c:67:e9:bc:bb:b2:6a: 92:13:04:f4:13:5f:43:96:72:5e:f5:f7:f2:10:3c:9d:4e:07: 76:da:03:57:f9:e1:bc:9e:8d:f7:25:c6:0b:b7:b9:d5:5c:7c: 7b:62:c9:20:28:db:71:75:49:21:e1:02:b6:2b:9b:98:27:9d: df:28:49:c8:99:32:40:34:69:b8:0e:3c:17:31:0e:a3:63:9f: c7:56:50:8b:b4:05:89:c3:6b:93:a1:fb:a8:7b:57:ed:95:57: 92:aa:5a:db:73:6c:3b:dc:7a:a9:11:77:e7:a1:0d:53:fe:0a: a5:fc:20:0d -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBZzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFE MTdFNjExMC8GA1UEBRMoMTYyQ0NFODZFMkEzNjk3RTkxOEI3Q0I1RDU2REEwQTAw MkM3OTM3MTAeFw0yNTExMDMwNzAxMTZaFw0yNTExMTAwNzAxMTZaMBgxFjAUBgNV BAMTDTY5MDg1MzNjLThkNWMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCqspYa7jgvokKKR31Og6D1C0vL206Ggn8+UoitlaPFlLarON2xFOZ5hb6dS+dL NWAkQ5Fw/HRHVTzp0UsR9oESx/dRMk8zhfEu2ET3rShbghJpykZ/1MBv9+0DESg0 AcaY3aP8X4HrxSDjXAjHcAYg9vgd+fLFxdqNPL+3twM4wL3cDvKhqqA/4AF7NoX7 2RPWDsE5ZMVD3BTXNc7e1/d45d3cEWMBwobUbhk+XZloXPLFl8RkalmkBGFgggfU wlq08qBOHhrWSntFUGS3hs0yOiFBHk3KTDoZTKb/iqRzunCXER7gBSFgMunNM65k pwWU9Mcp4Z1H1dNZEFpHYZFHAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUppzc/Oel I//kUN/lqIuv65FwhG8wHwYDVR0jBBgwFoAUFizOhuKjaX6Ri3y11W2goALHk3Ew DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQxN0U2LzA1OTRGQUUyMUU1 RjExRjA5NTE4NjY0REM0RjlBRTAyL0Zpek9odUtqYVg2UmkzeTExVzJnb0FMSGsz RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvRml6T2h1S2phWDZSaTN5MTFXMmdvQUxIazNFLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQx N0U2LzA1OTRGQUUyMUU1RjExRjA5NTE4NjY0REM0RjlBRTAyL0Zpek9odUtqYVg2 UmkzeTExVzJnb0FMSGszRS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAL4N3x4Mr3FBospql/IDWJjmS5rWv3llUcZpcpzG1xtcBLTPULTxc6CO KP/QW+GVHTF+lOQtRnfl0t1TPa1s+rXDqqHJ66fQSzDpkCq4+oaz4peSIm+i+0i4 mH3ExCyWyA9dk3ocqQljSziLWWeS84AqyhKS806k1mU50da2xuB8cCwj/KfvAR/Q HGfpvLuyapITBPQTX0OWcl719/IQPJ1OB3baA1f54byejfclxgu3udVcfHtiySAo 23F1SSHhArYrm5gnnd8oSciZMkA0abgOPBcxDqNjn8dWUIu0BYnDa5Oh+6h7V+2V V5KqWttzbDvceqkRd+ehDVP+CqX8IA0= -----END CERTIFICATE-----Generated at Tue Nov 4 20:04:54 2025 by rpki-client