$ rpki-client -vvf rpki.apnic.net/member_repository/A91FBEFA/0DA506CC0B3711F08C239863C4F9AE02/FzwmoIboW4_bkXqo2RHhwAq2o6E.mft File: FzwmoIboW4_bkXqo2RHhwAq2o6E.mft (raw, json) Hash identifier: FwZijMn7Ie4CT6CO6G/5dfkvl2JZREb6Zsqd5bVZzsY= Subject key identifier: 9A:D2:79:D5:8B:BA:2A:5D:1C:CC:0F:EB:B2:DF:AE:91:34:A7:86:38 Authority key identifier: 17:3C:26:A0:86:E8:5B:8F:DB:91:7A:A8:D9:11:E1:C0:0A:B6:A3:A1 Certificate issuer: /CN=A91FBEFA/serialNumber=173C26A086E85B8FDB917AA8D911E1C00AB6A3A1 Certificate serial: 77 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FzwmoIboW4_bkXqo2RHhwAq2o6E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FBEFA/0DA506CC0B3711F08C239863C4F9AE02/FzwmoIboW4_bkXqo2RHhwAq2o6E.mft Manifest number: 75 Signing time: Wed 05 Nov 2025 07:05:23 +0000 Manifest this update: Wed 05 Nov 2025 07:05:23 +0000 Manifest next update: Wed 12 Nov 2025 07:05:23 +0000 Files and hashes: 1: FzwmoIboW4_bkXqo2RHhwAq2o6E.crl (hash: FgOhfJ0HXn9V4e1K+nbQScHZgL2l5vdZdISpcOeZq/Q=) 2: 4776F9120CCE11F0A08AA749C4F9AE02.roa (hash: VlGCrM3drX5CqJ0PsOFfcqqGKkwf8UbZCTA7SKqIpGI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FBEFA/0DA506CC0B3711F08C239863C4F9AE02/FzwmoIboW4_bkXqo2RHhwAq2o6E.crl rsync://rpki.apnic.net/member_repository/A91FBEFA/0DA506CC0B3711F08C239863C4F9AE02/FzwmoIboW4_bkXqo2RHhwAq2o6E.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FzwmoIboW4_bkXqo2RHhwAq2o6E.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 07:05:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 119 (0x77) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FBEFA, serialNumber=173C26A086E85B8FDB917AA8D911E1C00AB6A3A1 Validity Not Before: Nov 5 07:05:23 2025 GMT Not After : Nov 12 07:05:23 2025 GMT Subject: CN=690af733-dde5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:98:55:8c:a2:32:0b:64:81:15:d1:25:fa:ed: e8:5c:ba:aa:c5:a1:b3:2e:84:b9:7a:b0:6b:78:4e: 47:b3:50:7b:59:2a:03:48:93:98:91:db:b0:66:38: 4c:64:e3:ad:96:f0:52:9b:62:7b:6d:45:5a:2a:ef: 04:9f:4a:93:eb:b2:28:84:45:32:5d:4a:14:12:5a: c8:56:77:b8:6f:42:13:88:ca:2e:0e:44:30:bb:c9: 40:54:23:23:0d:96:37:03:80:43:eb:41:dd:c7:14: 34:1f:71:22:f8:10:40:0e:00:2b:cb:ac:04:2e:03: b5:33:08:e9:07:de:12:61:29:79:5c:3e:22:b9:78: 3d:f8:fa:26:c7:b7:19:8a:2a:9e:14:16:47:bd:0c: c4:db:9b:23:3a:f8:fc:b5:62:8b:5c:20:ff:d4:ad: 86:d1:d4:98:9f:9b:e4:1a:f9:d3:21:fe:43:f0:18: c5:21:3c:6d:30:d4:dd:c6:e2:ef:ad:c5:e3:58:64: ad:74:bd:3f:a5:4d:d1:83:c3:45:68:fc:d6:ac:9f: 76:b5:9c:22:86:27:43:0b:89:14:cf:ab:f4:6e:61: 50:c8:04:b4:b3:a9:c7:8a:e2:de:10:d6:32:96:e2: 12:72:8c:4a:1c:f0:5b:f1:96:98:d3:c7:fc:da:53: ba:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:D2:79:D5:8B:BA:2A:5D:1C:CC:0F:EB:B2:DF:AE:91:34:A7:86:38 X509v3 Authority Key Identifier: keyid:17:3C:26:A0:86:E8:5B:8F:DB:91:7A:A8:D9:11:E1:C0:0A:B6:A3:A1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FBEFA/0DA506CC0B3711F08C239863C4F9AE02/FzwmoIboW4_bkXqo2RHhwAq2o6E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FzwmoIboW4_bkXqo2RHhwAq2o6E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FBEFA/0DA506CC0B3711F08C239863C4F9AE02/FzwmoIboW4_bkXqo2RHhwAq2o6E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4b:75:68:74:06:46:75:9d:b3:ed:46:63:ef:4b:01:35:b9:c1: 56:e0:f2:cb:d8:69:c7:ab:ad:84:02:3b:0b:c1:37:6d:37:53: 81:68:16:c4:c8:ca:62:c3:f3:bc:18:46:af:91:24:3c:15:fd: 66:e9:f7:f9:9f:ff:dc:fb:fc:46:c1:67:68:03:e5:52:20:2d: 8c:c3:7a:18:72:55:53:f1:7a:37:95:a9:c3:d5:ef:f9:89:6e: d3:5d:02:09:76:fe:8f:ed:d0:b5:3b:6d:fa:b1:4f:09:71:be: a4:bb:59:b5:21:33:d5:69:2e:45:bb:95:27:76:ca:23:94:49: c0:5e:a2:10:91:53:74:3d:ca:4f:20:ae:8f:7a:e8:1c:73:cf: af:e2:7f:38:45:45:0d:4b:04:a0:9f:92:24:b9:43:dc:31:8b: e9:c8:9a:07:a8:93:7e:52:6b:8c:56:c1:9e:56:ef:90:03:b4: c2:ad:2a:12:8f:9a:63:2d:80:15:2c:bd:13:96:67:13:0c:fb: d7:d8:4e:4f:e3:f8:a6:ff:90:4c:b8:59:ba:38:92:c2:9a:27: 93:9e:b0:99:43:d1:e6:0e:95:d1:04:81:1d:76:f2:17:c1:35: b7:bf:b3:06:87:1f:81:9a:30:41:8f:b3:c3:10:b7:56:a8:b7: 59:35:de:e8 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBdzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG QkVGQTExMC8GA1UEBRMoMTczQzI2QTA4NkU4NUI4RkRCOTE3QUE4RDkxMUUxQzAw QUI2QTNBMTAeFw0yNTExMDUwNzA1MjNaFw0yNTExMTIwNzA1MjNaMBgxFjAUBgNV BAMTDTY5MGFmNzMzLWRkZTUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC2mFWMojILZIEV0SX67ehcuqrFobMuhLl6sGt4TkezUHtZKgNIk5iR27BmOExk 462W8FKbYnttRVoq7wSfSpPrsiiERTJdShQSWshWd7hvQhOIyi4ORDC7yUBUIyMN ljcDgEPrQd3HFDQfcSL4EEAOACvLrAQuA7UzCOkH3hJhKXlcPiK5eD34+ibHtxmK Kp4UFke9DMTbmyM6+Py1YotcIP/UrYbR1Jifm+Qa+dMh/kPwGMUhPG0w1N3G4u+t xeNYZK10vT+lTdGDw0Vo/Nasn3a1nCKGJ0MLiRTPq/RuYVDIBLSzqceK4t4Q1jKW 4hJyjEoc8FvxlpjTx/zaU7qfAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUmtJ51Yu6 Kl0czA/rst+ukTSnhjgwHwYDVR0jBBgwFoAUFzwmoIboW4/bkXqo2RHhwAq2o6Ew DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUZCRUZBLzBEQTUwNkNDMEIz NzExRjA4QzIzOTg2M0M0RjlBRTAyL0Z6d21vSWJvVzRfYmtYcW8yUkhod0FxMm82 RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvRnp3bW9JYm9XNF9ia1hxbzJSSGh3QXEybzZFLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUZC RUZBLzBEQTUwNkNDMEIzNzExRjA4QzIzOTg2M0M0RjlBRTAyL0Z6d21vSWJvVzRf YmtYcW8yUkhod0FxMm82RS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAEt1aHQGRnWds+1GY+9LATW5wVbg8svYacerrYQCOwvBN203U4FoFsTI ymLD87wYRq+RJDwV/Wbp9/mf/9z7/EbBZ2gD5VIgLYzDehhyVVPxejeVqcPV7/mJ btNdAgl2/o/t0LU7bfqxTwlxvqS7WbUhM9VpLkW7lSd2yiOUScBeohCRU3Q9yk8g ro966Bxzz6/ifzhFRQ1LBKCfkiS5Q9wxi+nImgeok35Sa4xWwZ5W75ADtMKtKhKP mmMtgBUsvROWZxMM+9fYTk/j+Kb/kEy4Wbo4ksKaJ5OesJlD0eYOldEEgR128hfB Nbe/swaHH4GaMEGPs8MQt1aot1k13ug= -----END CERTIFICATE-----Generated at Wed Nov 5 21:27:33 2025 by rpki-client