$ rpki-client -vvf rpki.apnic.net/member_repository/A91444E5/2E822DAA1B9111EC9E7A3114C4F9AE02/Fgi_RiSn4bcjIotGYd1mHnCu8_Q.mft File: Fgi_RiSn4bcjIotGYd1mHnCu8_Q.mft (raw, json) Hash identifier: Tt14IFKBZVNEAjd0erL7g0UOfEbqJdN36N8MPqmu5QI= Subject key identifier: 6C:DC:6A:A3:1B:19:F9:05:E6:4D:6F:34:0B:D7:0E:60:38:12:46:8A Authority key identifier: 16:08:BF:46:24:A7:E1:B7:23:22:8B:46:61:DD:66:1E:70:AE:F3:F4 Certificate issuer: /CN=A91444E5/serialNumber=1608BF4624A7E1B723228B4661DD661E70AEF3F4 Certificate serial: 0513 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fgi_RiSn4bcjIotGYd1mHnCu8_Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91444E5/2E822DAA1B9111EC9E7A3114C4F9AE02/Fgi_RiSn4bcjIotGYd1mHnCu8_Q.mft Manifest number: 050C Signing time: Fri 22 Aug 2025 23:49:29 +0000 Manifest this update: Fri 22 Aug 2025 23:49:28 +0000 Manifest next update: Fri 29 Aug 2025 23:49:28 +0000 Files and hashes: 1: Fgi_RiSn4bcjIotGYd1mHnCu8_Q.crl (hash: //1+JB3oA/PI1exOE1E359X0lgc4JHB5IBBf47lTVi0=) 2: 90AB89E4547511EEB44F391AC4F9AE02.roa (hash: xx0/0c099Z+DcfDq5KxpcRvexWoXtqPp/xhoiOnuqgg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91444E5/2E822DAA1B9111EC9E7A3114C4F9AE02/Fgi_RiSn4bcjIotGYd1mHnCu8_Q.crl rsync://rpki.apnic.net/member_repository/A91444E5/2E822DAA1B9111EC9E7A3114C4F9AE02/Fgi_RiSn4bcjIotGYd1mHnCu8_Q.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fgi_RiSn4bcjIotGYd1mHnCu8_Q.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 23:49:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1299 (0x513) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91444E5, serialNumber=1608BF4624A7E1B723228B4661DD661E70AEF3F4 Validity Not Before: Aug 22 23:49:28 2025 GMT Not After : Aug 29 23:49:28 2025 GMT Subject: CN=68a90209-55f7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:5a:2b:ef:21:38:33:7c:67:db:4d:ac:e5:35: be:ac:36:48:cb:92:13:f3:96:5c:52:b6:31:a7:34: ab:0e:4f:80:6d:18:1a:5e:16:df:e0:9f:87:0a:40: 0f:55:81:dd:9e:00:f0:0c:79:47:ad:11:94:87:c0: 83:2d:f5:43:e9:81:04:90:40:47:4e:97:38:8a:39: aa:57:07:d9:04:6b:31:75:ff:87:80:98:6e:24:02: cd:5e:8c:5d:bd:3e:cb:cd:8b:11:88:1c:26:49:92: 5b:be:2b:bc:e7:82:a2:ca:71:a4:f2:6d:ca:66:38: 7d:ed:10:98:97:dc:2b:f5:0e:a4:a5:ce:76:ab:ea: 14:af:e0:e1:52:76:0a:59:ca:7b:5c:72:4a:c5:98: 71:75:75:1f:7f:07:95:2c:81:de:80:02:16:57:10: 18:04:e2:e5:ef:62:e2:be:fa:e6:4e:4c:d0:50:ee: 7a:44:5e:46:a2:96:8b:a5:e0:63:fa:59:68:61:a7: 14:b4:7c:11:99:36:50:08:35:6b:0e:6a:48:c7:77: 6c:fa:54:be:26:f3:39:39:01:8e:c5:be:ea:b5:5b: 4f:31:10:06:34:c1:80:69:19:0c:f3:e3:99:ba:50: 47:cf:41:c0:1e:0d:92:84:50:f3:8c:d8:48:9b:36: 25:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:DC:6A:A3:1B:19:F9:05:E6:4D:6F:34:0B:D7:0E:60:38:12:46:8A X509v3 Authority Key Identifier: keyid:16:08:BF:46:24:A7:E1:B7:23:22:8B:46:61:DD:66:1E:70:AE:F3:F4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91444E5/2E822DAA1B9111EC9E7A3114C4F9AE02/Fgi_RiSn4bcjIotGYd1mHnCu8_Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fgi_RiSn4bcjIotGYd1mHnCu8_Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91444E5/2E822DAA1B9111EC9E7A3114C4F9AE02/Fgi_RiSn4bcjIotGYd1mHnCu8_Q.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8f:63:b7:63:15:cd:33:d6:2e:65:74:2e:7d:ed:0c:1d:f5:e1: 34:4c:92:95:f4:11:5f:ec:df:16:18:15:34:54:72:05:cf:bc: 0c:d8:08:6c:37:35:eb:e3:ae:d2:3e:d8:03:13:f2:7e:24:ee: fa:64:5f:25:0c:f6:4d:49:bb:bf:53:e8:82:07:47:06:a1:ac: da:5e:a2:51:d6:39:58:fc:4c:d6:1f:ec:58:24:2b:70:53:9d: 97:5a:b4:ef:6b:73:16:46:0b:2e:2c:91:d5:af:4f:1b:0b:23: 73:9b:cc:16:26:15:5f:e5:a0:fd:e7:9c:77:2c:9d:bb:41:36: 8f:ca:bf:c4:f1:64:85:ac:05:ce:e3:59:53:18:14:89:b8:df: 95:02:61:4b:97:0f:99:1b:b0:4e:ee:03:1e:1f:06:50:a0:74: 45:6a:30:a9:75:0f:6b:7e:ae:63:a4:93:11:4e:e5:bc:e6:06: 33:40:0e:bc:ce:d5:20:8b:59:14:81:cf:72:1a:9c:9e:7f:18: 7f:83:e8:9a:87:33:e7:56:41:d4:65:1a:53:0a:83:a1:1f:c7: 7a:fa:d3:48:16:cd:64:86:1f:86:45:56:e2:9d:31:c5:d3:f9: 3d:f9:bb:f1:a1:9e:18:76:c2:6e:6a:69:a9:b8:e5:a2:31:47: 00:14:e4:0f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBRMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDQ0RTUxMTAvBgNVBAUTKDE2MDhCRjQ2MjRBN0UxQjcyMzIyOEI0NjYxREQ2NjFF NzBBRUYzRjQwHhcNMjUwODIyMjM0OTI4WhcNMjUwODI5MjM0OTI4WjAYMRYwFAYD VQQDEw02OGE5MDIwOS01NWY3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtVor7yE4M3xn202s5TW+rDZIy5IT85ZcUrYxpzSrDk+AbRgaXhbf4J+HCkAP VYHdngDwDHlHrRGUh8CDLfVD6YEEkEBHTpc4ijmqVwfZBGsxdf+HgJhuJALNXoxd vT7LzYsRiBwmSZJbviu854KiynGk8m3KZjh97RCYl9wr9Q6kpc52q+oUr+DhUnYK Wcp7XHJKxZhxdXUffweVLIHegAIWVxAYBOLl72LivvrmTkzQUO56RF5GopaLpeBj +lloYacUtHwRmTZQCDVrDmpIx3ds+lS+JvM5OQGOxb7qtVtPMRAGNMGAaRkM8+OZ ulBHz0HAHg2ShFDzjNhImzYl+QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGzcaqMb GfkF5k1vNAvXDmA4EkaKMB8GA1UdIwQYMBaAFBYIv0Ykp+G3IyKLRmHdZh5wrvP0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NDRFNS8yRTgyMkRBQTFC OTExMUVDOUU3QTMxMTRDNEY5QUUwMi9GZ2lfUmlTbjRiY2pJb3RHWWQxbUhuQ3U4 X1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZnaV9SaVNuNGJjaklvdEdZZDFtSG5DdThfUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NDRFNS8yRTgyMkRBQTFCOTExMUVDOUU3QTMxMTRDNEY5QUUwMi9GZ2lfUmlTbjRi Y2pJb3RHWWQxbUhuQ3U4X1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCPY7djFc0z1i5ldC597Qwd9eE0TJKV9BFf7N8WGBU0VHIFz7wM2Ahs NzXr467SPtgDE/J+JO76ZF8lDPZNSbu/U+iCB0cGoazaXqJR1jlY/EzWH+xYJCtw U52XWrTva3MWRgsuLJHVr08bCyNzm8wWJhVf5aD955x3LJ27QTaPyr/E8WSFrAXO 41lTGBSJuN+VAmFLlw+ZG7BO7gMeHwZQoHRFajCpdQ9rfq5jpJMRTuW85gYzQA68 ztUgi1kUgc9yGpyefxh/g+iahzPnVkHUZRpTCoOhH8d6+tNIFs1khh+GRVbinTHF 0/k9+bvxoZ4YdsJuammpuOWiMUcAFOQP -----END CERTIFICATE-----Generated at Sat Aug 23 17:21:02 2025 by rpki-client