$ rpki-client -vvf rpki.apnic.net/member_repository/A91FBEFA/0DA506CC0B3711F08C239863C4F9AE02/FzwmoIboW4_bkXqo2RHhwAq2o6E.mft File: FzwmoIboW4_bkXqo2RHhwAq2o6E.mft (raw, json) Hash identifier: Zfriqyl5WCUzBMcsiwjNBcuRIQ7qeMWQk1coc7jn2bQ= Subject key identifier: 69:C8:41:CA:54:5A:62:7F:2F:CA:6F:F9:56:3E:A9:2F:3C:8D:D5:FB Authority key identifier: 17:3C:26:A0:86:E8:5B:8F:DB:91:7A:A8:D9:11:E1:C0:0A:B6:A3:A1 Certificate issuer: /CN=A91FBEFA/serialNumber=173C26A086E85B8FDB917AA8D911E1C00AB6A3A1 Certificate serial: 4B Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FzwmoIboW4_bkXqo2RHhwAq2o6E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FBEFA/0DA506CC0B3711F08C239863C4F9AE02/FzwmoIboW4_bkXqo2RHhwAq2o6E.mft Manifest number: 49 Signing time: Sat 09 Aug 2025 07:55:41 +0000 Manifest this update: Sat 09 Aug 2025 07:55:41 +0000 Manifest next update: Sat 16 Aug 2025 07:55:41 +0000 Files and hashes: 1: FzwmoIboW4_bkXqo2RHhwAq2o6E.crl (hash: k63R6LeC2Fj0qcetyBQctXdhiI4PcL+c0EvEpZTj0q0=) 2: 4776F9120CCE11F0A08AA749C4F9AE02.roa (hash: VlGCrM3drX5CqJ0PsOFfcqqGKkwf8UbZCTA7SKqIpGI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FBEFA/0DA506CC0B3711F08C239863C4F9AE02/FzwmoIboW4_bkXqo2RHhwAq2o6E.crl rsync://rpki.apnic.net/member_repository/A91FBEFA/0DA506CC0B3711F08C239863C4F9AE02/FzwmoIboW4_bkXqo2RHhwAq2o6E.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FzwmoIboW4_bkXqo2RHhwAq2o6E.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 75 (0x4b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FBEFA, serialNumber=173C26A086E85B8FDB917AA8D911E1C00AB6A3A1 Validity Not Before: Aug 9 07:55:41 2025 GMT Not After : Aug 16 07:55:41 2025 GMT Subject: CN=6896fefd-6b78 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:cf:ab:32:3d:2f:dd:59:11:63:30:a7:93:d0: 35:c8:e8:75:ce:3a:8c:87:12:e5:15:e7:d5:48:97: 90:13:8a:35:1e:6b:01:0a:d7:49:f6:6b:29:9e:44: f6:38:46:4e:5d:7d:67:6f:c7:f7:63:cb:48:39:0e: c8:6a:34:1f:1e:88:36:99:5f:9e:f2:02:68:a8:fc: 8c:c1:cc:52:69:76:6d:15:4c:79:d9:9f:86:d3:e6: c8:cd:45:9a:92:7e:b9:0f:62:ef:dd:ed:be:90:39: 95:7f:d0:7c:77:69:a0:ac:f8:18:31:b6:b9:b0:77: 85:7f:6e:a0:f8:47:e2:d8:d6:4a:8e:6a:7f:71:39: b1:8c:44:92:62:c3:07:d0:d9:1a:ec:31:98:5c:8d: e9:d8:3a:5a:ce:c9:0a:58:83:b2:21:4c:c5:a7:4e: fa:f8:b9:b7:7d:e4:b8:26:e1:3c:8d:e4:fe:5b:f7: ab:a5:7b:97:9d:5b:f4:07:d3:aa:3d:2e:9b:92:c2: be:86:e2:67:1c:28:e8:38:ba:45:c4:d9:89:89:8c: 4a:4a:ab:65:0b:a9:65:bf:6f:74:64:e3:02:01:4c: 33:7d:f1:5a:d3:75:10:9f:71:84:65:13:7c:a1:88: 43:4b:2b:a2:4d:6c:09:25:d0:aa:df:29:d9:74:85: 95:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:C8:41:CA:54:5A:62:7F:2F:CA:6F:F9:56:3E:A9:2F:3C:8D:D5:FB X509v3 Authority Key Identifier: keyid:17:3C:26:A0:86:E8:5B:8F:DB:91:7A:A8:D9:11:E1:C0:0A:B6:A3:A1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FBEFA/0DA506CC0B3711F08C239863C4F9AE02/FzwmoIboW4_bkXqo2RHhwAq2o6E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FzwmoIboW4_bkXqo2RHhwAq2o6E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FBEFA/0DA506CC0B3711F08C239863C4F9AE02/FzwmoIboW4_bkXqo2RHhwAq2o6E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption d6:a7:75:83:4d:e8:d6:c2:09:81:e8:56:52:b0:b3:ba:20:bf: d2:07:59:75:99:c5:cf:5c:82:10:10:36:ff:19:40:22:a6:04: 49:0e:fb:16:00:0a:86:40:4e:33:1b:b7:d4:f1:61:d6:87:19: 93:df:17:16:b9:27:31:7f:2d:ae:e1:dc:98:99:65:eb:15:0a: 8f:0e:ce:9f:25:a6:b5:83:9b:e9:28:36:2d:90:fd:23:d3:aa: 00:84:54:9e:29:f5:0e:be:45:8b:95:dd:73:d2:e2:3d:7a:67: 8b:5f:29:64:4a:6e:2f:15:4a:9d:de:94:6d:0a:fb:e6:5c:c8: 3b:82:57:87:8b:f3:63:66:f7:e5:86:c2:1a:c7:4a:d8:ae:99: 50:cf:da:ae:5d:e8:35:72:1f:52:58:59:e0:12:56:28:57:6c: f2:5d:b7:50:95:38:2d:7a:d6:0a:e4:ae:06:4b:22:08:2a:e2: 08:84:35:80:83:70:63:24:f3:3a:bc:9e:8c:4d:35:01:e1:86: 0a:fb:e1:7c:8a:04:43:68:78:2f:07:6b:1c:42:8c:34:78:c9: 70:cf:cf:ce:9e:6e:30:28:be:14:8e:b7:f5:16:8c:b5:57:a9: 25:aa:5b:a2:c4:fc:84:c6:20:da:02:c6:63:ee:b6:41:ea:00: e2:69:53:2c -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBSzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG QkVGQTExMC8GA1UEBRMoMTczQzI2QTA4NkU4NUI4RkRCOTE3QUE4RDkxMUUxQzAw QUI2QTNBMTAeFw0yNTA4MDkwNzU1NDFaFw0yNTA4MTYwNzU1NDFaMBgxFjAUBgNV BAMTDTY4OTZmZWZkLTZiNzgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDmz6syPS/dWRFjMKeT0DXI6HXOOoyHEuUV59VIl5ATijUeawEK10n2aymeRPY4 Rk5dfWdvx/djy0g5DshqNB8eiDaZX57yAmio/IzBzFJpdm0VTHnZn4bT5sjNRZqS frkPYu/d7b6QOZV/0Hx3aaCs+Bgxtrmwd4V/bqD4R+LY1kqOan9xObGMRJJiwwfQ 2RrsMZhcjenYOlrOyQpYg7IhTMWnTvr4ubd95Lgm4TyN5P5b96ule5edW/QH06o9 LpuSwr6G4mccKOg4ukXE2YmJjEpKq2ULqWW/b3Rk4wIBTDN98VrTdRCfcYRlE3yh iENLK6JNbAkl0KrfKdl0hZXhAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUachBylRa Yn8vym/5Vj6pLzyN1fswHwYDVR0jBBgwFoAUFzwmoIboW4/bkXqo2RHhwAq2o6Ew DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUZCRUZBLzBEQTUwNkNDMEIz NzExRjA4QzIzOTg2M0M0RjlBRTAyL0Z6d21vSWJvVzRfYmtYcW8yUkhod0FxMm82 RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvRnp3bW9JYm9XNF9ia1hxbzJSSGh3QXEybzZFLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUZC RUZBLzBEQTUwNkNDMEIzNzExRjA4QzIzOTg2M0M0RjlBRTAyL0Z6d21vSWJvVzRf YmtYcW8yUkhod0FxMm82RS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBANandYNN6NbCCYHoVlKws7ogv9IHWXWZxc9cghAQNv8ZQCKmBEkO+xYA CoZATjMbt9TxYdaHGZPfFxa5JzF/La7h3JiZZesVCo8Ozp8lprWDm+koNi2Q/SPT qgCEVJ4p9Q6+RYuV3XPS4j16Z4tfKWRKbi8VSp3elG0K++ZcyDuCV4eL82Nm9+WG whrHStiumVDP2q5d6DVyH1JYWeASVihXbPJdt1CVOC161grkrgZLIggq4giENYCD cGMk8zq8noxNNQHhhgr74XyKBENoeC8HaxxCjDR4yXDPz86ebjAovhSOt/UWjLVX qSWqW6LE/ITGINoCxmPutkHqAOJpUyw= -----END CERTIFICATE-----Generated at Sun Aug 10 16:13:19 2025 by rpki-client