$ rpki-client -vvf rpki.apnic.net/member_repository/A91D17E6/0594FAE21E5F11F09518664DC4F9AE02/FizOhuKjaX6Ri3y11W2goALHk3E.mft File: FizOhuKjaX6Ri3y11W2goALHk3E.mft (raw, json) Hash identifier: DOsFw0sevc+Qjyc4nkPN0C+7Eb1/4XY520DIpzOWM5s= Subject key identifier: E2:8F:E8:76:9F:DB:66:C9:B4:24:6E:44:F5:D8:20:8A:0A:8A:3C:3D Authority key identifier: 16:2C:CE:86:E2:A3:69:7E:91:8B:7C:B5:D5:6D:A0:A0:02:C7:93:71 Certificate issuer: /CN=A91D17E6/serialNumber=162CCE86E2A3697E918B7CB5D56DA0A002C79371 Certificate serial: 60 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FizOhuKjaX6Ri3y11W2goALHk3E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D17E6/0594FAE21E5F11F09518664DC4F9AE02/FizOhuKjaX6Ri3y11W2goALHk3E.mft Manifest number: 5E Signing time: Sun 19 Oct 2025 10:29:08 +0000 Manifest this update: Sun 19 Oct 2025 10:29:08 +0000 Manifest next update: Sun 26 Oct 2025 10:29:08 +0000 Files and hashes: 1: FizOhuKjaX6Ri3y11W2goALHk3E.crl (hash: wz9AtI2Jns2eX2zZbgpfnxkh9kzbXYkyPQuPiJD/4V4=) 2: AF69D6BA4C0311F08D3CD93AC4F9AE02.roa (hash: rcGL+ObZ3SX0Z7dA7NG3vylGQnp7zRpBYV2OeNWL8lQ=) 3: BA5D351C4C0311F0ABCEF33AC4F9AE02.roa (hash: Kcq7bCUGmI5Bp+s4yhX/8VE1f6QaguT6MUZ8dIkMVNc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D17E6/0594FAE21E5F11F09518664DC4F9AE02/FizOhuKjaX6Ri3y11W2goALHk3E.crl rsync://rpki.apnic.net/member_repository/A91D17E6/0594FAE21E5F11F09518664DC4F9AE02/FizOhuKjaX6Ri3y11W2goALHk3E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FizOhuKjaX6Ri3y11W2goALHk3E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 10:29:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 96 (0x60) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D17E6, serialNumber=162CCE86E2A3697E918B7CB5D56DA0A002C79371 Validity Not Before: Oct 19 10:29:08 2025 GMT Not After : Oct 26 10:29:08 2025 GMT Subject: CN=68f4bd74-fb39 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:91:e1:a4:b2:6a:7a:a6:01:6c:20:30:02:b2: bd:35:da:78:8d:34:70:f8:bb:8f:64:77:4f:cd:1a: c1:da:26:dc:24:60:4c:99:70:d3:a1:04:15:2e:a8: f2:1f:03:26:a7:43:85:25:bd:4c:8a:f9:0b:a0:61: 4b:a5:50:71:59:f9:60:91:2c:79:bb:49:d3:c0:c5: ed:95:6d:ad:ea:de:35:6d:f1:e4:cc:e3:88:8f:2a: 58:47:f8:22:26:6a:8e:df:c3:60:71:ac:54:2c:aa: d3:71:25:fd:a2:24:c5:00:04:37:0e:75:03:ad:cb: 3b:08:54:94:f7:3b:09:34:c2:39:21:8a:b5:ca:56: bb:a9:e3:82:4b:af:8d:35:8c:95:eb:89:50:1f:d5: ef:97:30:ab:4d:56:ef:a6:3f:10:94:a6:48:f5:86: d0:c4:5c:5d:13:59:5d:a6:14:bc:9d:cc:c4:70:89: 6d:f4:c9:64:75:2c:cb:02:c8:37:30:09:94:16:55: 6f:bc:c4:50:5d:62:7f:b6:79:63:0e:13:6a:7f:30: 40:54:76:d7:47:5d:ca:76:93:4d:45:0d:67:d7:22: 2b:b7:95:b3:97:76:73:24:d3:d9:d8:a4:bc:12:d0: 30:1d:df:e6:1a:d1:70:4c:be:81:57:8b:3f:68:18: 91:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:8F:E8:76:9F:DB:66:C9:B4:24:6E:44:F5:D8:20:8A:0A:8A:3C:3D X509v3 Authority Key Identifier: keyid:16:2C:CE:86:E2:A3:69:7E:91:8B:7C:B5:D5:6D:A0:A0:02:C7:93:71 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D17E6/0594FAE21E5F11F09518664DC4F9AE02/FizOhuKjaX6Ri3y11W2goALHk3E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FizOhuKjaX6Ri3y11W2goALHk3E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D17E6/0594FAE21E5F11F09518664DC4F9AE02/FizOhuKjaX6Ri3y11W2goALHk3E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption dd:32:79:72:c4:df:29:cb:18:cb:d4:67:3c:ab:84:5d:35:9f: 74:af:8a:c1:4d:9a:d9:ca:22:e9:2a:31:0c:b3:c5:cb:9b:20: ad:d2:05:83:e8:b2:78:19:f7:65:49:3a:0e:1c:3d:75:b5:5e: 3a:9f:0e:2c:ba:79:d7:69:e0:eb:9b:67:49:39:72:33:0d:77: 6c:1f:69:b5:eb:85:55:cd:10:a6:fd:51:0a:64:d1:ba:c5:78: c6:5a:6c:bd:2b:50:66:2c:a2:da:a1:f5:f8:ad:b2:5f:b4:4a: 38:51:fa:ab:11:d8:72:91:75:ed:c4:75:02:5a:18:a1:d0:d1: 87:79:0e:7d:4d:54:52:3a:9b:1f:f4:b4:30:a8:50:4a:ba:c0: ef:5c:15:f4:16:ac:6e:d8:28:20:e0:88:d7:52:48:04:c2:de: 8d:d0:43:17:5f:a1:8f:21:51:f9:ef:e3:b5:85:4b:c0:75:c1: 28:ec:3a:07:1e:67:b6:54:4f:55:13:1a:cc:7b:54:37:0c:af: 7d:a2:38:61:6d:75:e1:77:a8:db:d9:e5:97:b6:a7:40:81:39: 51:b7:b1:21:08:76:d4:2a:4c:55:c0:40:89:c9:db:a0:bf:71: 38:60:04:ae:f0:f9:5b:27:83:fa:9f:8f:39:53:29:5b:a4:9a: 41:f1:d9:c9 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBYDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFE MTdFNjExMC8GA1UEBRMoMTYyQ0NFODZFMkEzNjk3RTkxOEI3Q0I1RDU2REEwQTAw MkM3OTM3MTAeFw0yNTEwMTkxMDI5MDhaFw0yNTEwMjYxMDI5MDhaMBgxFjAUBgNV BAMTDTY4ZjRiZDc0LWZiMzkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC5keGksmp6pgFsIDACsr012niNNHD4u49kd0/NGsHaJtwkYEyZcNOhBBUuqPIf AyanQ4UlvUyK+QugYUulUHFZ+WCRLHm7SdPAxe2Vba3q3jVt8eTM44iPKlhH+CIm ao7fw2BxrFQsqtNxJf2iJMUABDcOdQOtyzsIVJT3Owk0wjkhirXKVrup44JLr401 jJXriVAf1e+XMKtNVu+mPxCUpkj1htDEXF0TWV2mFLydzMRwiW30yWR1LMsCyDcw CZQWVW+8xFBdYn+2eWMOE2p/MEBUdtdHXcp2k01FDWfXIiu3lbOXdnMk09nYpLwS 0DAd3+Ya0XBMvoFXiz9oGJGBAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU4o/odp/b Zsm0JG5E9dggigqKPD0wHwYDVR0jBBgwFoAUFizOhuKjaX6Ri3y11W2goALHk3Ew DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQxN0U2LzA1OTRGQUUyMUU1 RjExRjA5NTE4NjY0REM0RjlBRTAyL0Zpek9odUtqYVg2UmkzeTExVzJnb0FMSGsz RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvRml6T2h1S2phWDZSaTN5MTFXMmdvQUxIazNFLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQx N0U2LzA1OTRGQUUyMUU1RjExRjA5NTE4NjY0REM0RjlBRTAyL0Zpek9odUtqYVg2 UmkzeTExVzJnb0FMSGszRS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAN0yeXLE3ynLGMvUZzyrhF01n3SvisFNmtnKIukqMQyzxcubIK3SBYPo sngZ92VJOg4cPXW1XjqfDiy6eddp4OubZ0k5cjMNd2wfabXrhVXNEKb9UQpk0brF eMZabL0rUGYsotqh9fitsl+0SjhR+qsR2HKRde3EdQJaGKHQ0Yd5Dn1NVFI6mx/0 tDCoUEq6wO9cFfQWrG7YKCDgiNdSSATC3o3QQxdfoY8hUfnv47WFS8B1wSjsOgce Z7ZUT1UTGsx7VDcMr32iOGFtdeF3qNvZ5Ze2p0CBOVG3sSEIdtQqTFXAQInJ26C/ cThgBK7w+Vsng/qfjzlTKVukmkHx2ck= -----END CERTIFICATE-----Generated at Mon Oct 20 07:54:24 2025 by rpki-client