$ rpki-client -vvf rpki.apnic.net/member_repository/A91444E5/2E822DAA1B9111EC9E7A3114C4F9AE02/Fgi_RiSn4bcjIotGYd1mHnCu8_Q.mft File: Fgi_RiSn4bcjIotGYd1mHnCu8_Q.mft (raw, json) Hash identifier: NdIksngs3xMZQsOBl+A2jC+3XBjtVywrccrfYqidLJ4= Subject key identifier: 3D:44:14:CE:39:E2:14:BB:97:3F:40:BF:9F:2A:8B:2C:7C:38:8F:A4 Authority key identifier: 16:08:BF:46:24:A7:E1:B7:23:22:8B:46:61:DD:66:1E:70:AE:F3:F4 Certificate issuer: /CN=A91444E5/serialNumber=1608BF4624A7E1B723228B4661DD661E70AEF3F4 Certificate serial: 0533 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fgi_RiSn4bcjIotGYd1mHnCu8_Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91444E5/2E822DAA1B9111EC9E7A3114C4F9AE02/Fgi_RiSn4bcjIotGYd1mHnCu8_Q.mft Manifest number: 052B Signing time: Sun 19 Oct 2025 01:16:51 +0000 Manifest this update: Sun 19 Oct 2025 01:16:50 +0000 Manifest next update: Sun 26 Oct 2025 01:16:50 +0000 Files and hashes: 1: Fgi_RiSn4bcjIotGYd1mHnCu8_Q.crl (hash: YmF2wAmz4iv/SowfdhraDkqu9outHF4+rRZUtfVKTao=) 2: 90AB89E4547511EEB44F391AC4F9AE02.roa (hash: 9PQho0kFLoK528MTXKQJuaitZOSaZ/91m7DaZwI2M3w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91444E5/2E822DAA1B9111EC9E7A3114C4F9AE02/Fgi_RiSn4bcjIotGYd1mHnCu8_Q.crl rsync://rpki.apnic.net/member_repository/A91444E5/2E822DAA1B9111EC9E7A3114C4F9AE02/Fgi_RiSn4bcjIotGYd1mHnCu8_Q.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fgi_RiSn4bcjIotGYd1mHnCu8_Q.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 01:16:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1331 (0x533) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91444E5, serialNumber=1608BF4624A7E1B723228B4661DD661E70AEF3F4 Validity Not Before: Oct 19 01:16:50 2025 GMT Not After : Oct 26 01:16:50 2025 GMT Subject: CN=68f43c02-0e07 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:35:a9:ec:b8:7b:6a:b3:85:6e:32:60:79:87: 53:8e:df:7d:2f:4f:6d:ab:1b:6b:4c:cb:b9:48:d6: 3e:a2:b8:52:02:69:d9:92:7a:b2:b9:89:18:97:d1: 7b:c1:a2:7b:29:d2:fb:3a:5e:b9:2f:68:e8:90:a0: 92:56:0c:44:9d:b4:5a:9c:a2:fa:6e:02:5d:c0:b8: 89:a3:b4:a9:5c:79:ae:8c:54:b5:1a:91:22:c0:ee: 43:c5:38:40:98:7b:11:7b:b7:55:fd:1d:3b:ef:62: 0e:b4:70:7b:ce:af:1d:31:96:8c:fa:39:19:0b:9f: 12:e6:85:9b:98:d3:2b:de:b7:6c:e6:8d:76:5e:e6: 4f:72:dd:59:02:28:84:f0:cf:40:75:c7:25:8f:17: 09:52:d0:84:a4:5e:2f:b1:aa:b3:34:34:a3:15:db: f5:6d:98:74:78:00:f9:80:16:ec:d9:65:76:5c:2d: 25:88:12:70:b4:ce:f1:6a:d7:4c:9d:4a:ea:4a:7a: 95:19:72:45:ac:3d:a8:74:ac:95:28:18:5e:0f:5f: d2:73:cb:a4:2b:8e:a6:5c:2b:5d:b8:f5:0e:4c:f0: 9c:ea:c1:a8:9a:61:cc:ea:81:81:eb:6f:41:54:24: fd:2e:2b:c6:32:43:ba:a0:83:1b:b5:4c:8e:75:db: ff:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:44:14:CE:39:E2:14:BB:97:3F:40:BF:9F:2A:8B:2C:7C:38:8F:A4 X509v3 Authority Key Identifier: keyid:16:08:BF:46:24:A7:E1:B7:23:22:8B:46:61:DD:66:1E:70:AE:F3:F4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91444E5/2E822DAA1B9111EC9E7A3114C4F9AE02/Fgi_RiSn4bcjIotGYd1mHnCu8_Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fgi_RiSn4bcjIotGYd1mHnCu8_Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91444E5/2E822DAA1B9111EC9E7A3114C4F9AE02/Fgi_RiSn4bcjIotGYd1mHnCu8_Q.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 78:cf:ba:c7:c7:49:d1:f0:50:d8:b4:83:06:ec:29:4d:b9:2e: ab:fa:13:1a:7a:51:86:96:2c:77:cc:23:17:09:c6:f8:94:b1: 35:f8:fd:09:c2:6b:0a:af:7a:ec:db:d1:a4:87:0e:d3:01:a5: 26:da:84:84:cc:e4:9f:0e:1e:c3:21:76:7d:29:20:bd:ca:3a: cd:89:ba:dc:1e:99:23:a6:63:0f:2b:07:02:71:43:30:81:51: 0b:a9:2e:5f:11:11:e7:3f:98:99:4c:9b:1e:5e:2e:e1:b3:75: 79:a9:34:4f:01:fb:39:67:ef:08:31:0c:b4:84:b9:de:ac:3c: ce:e8:8f:30:29:88:2f:bb:65:22:e9:2a:f1:5d:a3:3c:be:9e: 30:eb:28:ba:97:e6:9a:70:65:1a:0c:7c:4e:5b:9a:c9:7c:48: e1:6f:48:fa:5b:ab:2a:2e:21:f3:d1:4c:5b:4d:a7:69:40:27: 6e:74:ae:f2:9e:3c:5e:f1:c7:13:62:cf:80:c7:3b:d9:c2:91: 07:2e:a8:6d:76:a0:57:15:72:11:b5:09:b1:56:a6:37:7b:44: 46:9d:3c:be:01:49:63:77:6f:85:7c:8b:0a:8e:1e:2f:e4:fb: 3b:69:a8:59:d9:9a:64:4d:07:8d:08:a6:c1:45:2d:82:a5:e2: 74:2f:2e:7a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBTMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDQ0RTUxMTAvBgNVBAUTKDE2MDhCRjQ2MjRBN0UxQjcyMzIyOEI0NjYxREQ2NjFF NzBBRUYzRjQwHhcNMjUxMDE5MDExNjUwWhcNMjUxMDI2MDExNjUwWjAYMRYwFAYD VQQDEw02OGY0M2MwMi0wZTA3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwTWp7Lh7arOFbjJgeYdTjt99L09tqxtrTMu5SNY+orhSAmnZknqyuYkYl9F7 waJ7KdL7Ol65L2jokKCSVgxEnbRanKL6bgJdwLiJo7SpXHmujFS1GpEiwO5DxThA mHsRe7dV/R0772IOtHB7zq8dMZaM+jkZC58S5oWbmNMr3rds5o12XuZPct1ZAiiE 8M9AdccljxcJUtCEpF4vsaqzNDSjFdv1bZh0eAD5gBbs2WV2XC0liBJwtM7xatdM nUrqSnqVGXJFrD2odKyVKBheD1/Sc8ukK46mXCtduPUOTPCc6sGommHM6oGB629B VCT9LivGMkO6oIMbtUyOddv/CQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFD1EFM45 4hS7lz9Av58qiyx8OI+kMB8GA1UdIwQYMBaAFBYIv0Ykp+G3IyKLRmHdZh5wrvP0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NDRFNS8yRTgyMkRBQTFC OTExMUVDOUU3QTMxMTRDNEY5QUUwMi9GZ2lfUmlTbjRiY2pJb3RHWWQxbUhuQ3U4 X1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZnaV9SaVNuNGJjaklvdEdZZDFtSG5DdThfUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NDRFNS8yRTgyMkRBQTFCOTExMUVDOUU3QTMxMTRDNEY5QUUwMi9GZ2lfUmlTbjRi Y2pJb3RHWWQxbUhuQ3U4X1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB4z7rHx0nR8FDYtIMG7ClNuS6r+hMaelGGlix3zCMXCcb4lLE1+P0J wmsKr3rs29Gkhw7TAaUm2oSEzOSfDh7DIXZ9KSC9yjrNibrcHpkjpmMPKwcCcUMw gVELqS5fERHnP5iZTJseXi7hs3V5qTRPAfs5Z+8IMQy0hLnerDzO6I8wKYgvu2Ui 6SrxXaM8vp4w6yi6l+aacGUaDHxOW5rJfEjhb0j6W6sqLiHz0UxbTadpQCdudK7y njxe8ccTYs+AxzvZwpEHLqhtdqBXFXIRtQmxVqY3e0RGnTy+AUljd2+FfIsKjh4v 5Ps7aahZ2ZpkTQeNCKbBRS2CpeJ0Ly56 -----END CERTIFICATE-----Generated at Mon Oct 20 01:48:12 2025 by rpki-client