$ rpki-client -vvf rpki.apnic.net/member_repository/A91FBEFA/0DA506CC0B3711F08C239863C4F9AE02/FzwmoIboW4_bkXqo2RHhwAq2o6E.mft File: FzwmoIboW4_bkXqo2RHhwAq2o6E.mft (raw, json) Hash identifier: fQxaLw+FXls+ou/eOwgy/0/EJ5ZS5QXdFonX8TogomY= Subject key identifier: B1:06:A2:DB:6A:32:4C:CC:68:49:51:1E:6A:17:8A:69:5D:72:C5:2E Authority key identifier: 17:3C:26:A0:86:E8:5B:8F:DB:91:7A:A8:D9:11:E1:C0:0A:B6:A3:A1 Certificate issuer: /CN=A91FBEFA/serialNumber=173C26A086E85B8FDB917AA8D911E1C00AB6A3A1 Certificate serial: 6F Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FzwmoIboW4_bkXqo2RHhwAq2o6E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FBEFA/0DA506CC0B3711F08C239863C4F9AE02/FzwmoIboW4_bkXqo2RHhwAq2o6E.mft Manifest number: 6D Signing time: Sun 19 Oct 2025 10:20:20 +0000 Manifest this update: Sun 19 Oct 2025 10:20:19 +0000 Manifest next update: Sun 26 Oct 2025 10:20:19 +0000 Files and hashes: 1: FzwmoIboW4_bkXqo2RHhwAq2o6E.crl (hash: edsI8ykHf6euZ5zxTRTN5nJHu2j6daDgtCN9tBC6lX0=) 2: 4776F9120CCE11F0A08AA749C4F9AE02.roa (hash: VlGCrM3drX5CqJ0PsOFfcqqGKkwf8UbZCTA7SKqIpGI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FBEFA/0DA506CC0B3711F08C239863C4F9AE02/FzwmoIboW4_bkXqo2RHhwAq2o6E.crl rsync://rpki.apnic.net/member_repository/A91FBEFA/0DA506CC0B3711F08C239863C4F9AE02/FzwmoIboW4_bkXqo2RHhwAq2o6E.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FzwmoIboW4_bkXqo2RHhwAq2o6E.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 10:20:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 111 (0x6f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FBEFA, serialNumber=173C26A086E85B8FDB917AA8D911E1C00AB6A3A1 Validity Not Before: Oct 19 10:20:19 2025 GMT Not After : Oct 26 10:20:19 2025 GMT Subject: CN=68f4bb64-b839 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:40:02:bd:ac:2b:37:a8:ea:80:f1:07:a1:ba: aa:ca:5d:e8:97:7d:9c:d1:8f:da:27:a6:d4:81:74: af:35:ec:c0:5c:64:2f:03:6f:ce:78:66:5d:6c:e5: 02:36:e0:e3:aa:37:0b:48:d5:cd:c5:71:12:d8:ae: a7:22:d6:75:bc:ea:c9:af:f2:26:b5:ca:42:65:16: 57:82:78:33:8f:5d:39:3c:c6:fe:5b:8b:d2:7e:e5: 33:c1:75:29:db:a5:34:df:54:70:31:c8:de:e6:77: bb:0f:3f:44:8f:8e:23:4c:8e:ec:bf:a3:3d:21:00: 01:ee:ca:4c:61:e8:b9:c0:17:f3:63:5f:4b:ca:8b: 34:d6:a6:8b:1d:8c:62:ba:53:78:b3:ea:51:02:ac: 82:36:5e:14:87:bc:8b:ed:51:b7:55:e8:2d:d2:6b: 96:29:3e:8c:ba:29:1d:7f:02:11:7c:e6:11:75:f5: 3f:46:01:88:71:4b:bc:3d:54:d7:3d:a1:da:d6:f3: a5:cb:43:19:7e:1e:51:aa:12:4b:9c:40:fb:92:9c: 4a:ae:a3:b4:2b:4a:f8:e3:f4:3d:f6:b9:83:ac:be: 78:a2:2c:67:23:13:79:4f:2b:37:92:95:95:e1:d2: 13:cc:24:0a:74:14:96:c6:c8:ed:d2:a3:85:1c:23: d6:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:06:A2:DB:6A:32:4C:CC:68:49:51:1E:6A:17:8A:69:5D:72:C5:2E X509v3 Authority Key Identifier: keyid:17:3C:26:A0:86:E8:5B:8F:DB:91:7A:A8:D9:11:E1:C0:0A:B6:A3:A1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FBEFA/0DA506CC0B3711F08C239863C4F9AE02/FzwmoIboW4_bkXqo2RHhwAq2o6E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FzwmoIboW4_bkXqo2RHhwAq2o6E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FBEFA/0DA506CC0B3711F08C239863C4F9AE02/FzwmoIboW4_bkXqo2RHhwAq2o6E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c1:cc:7a:38:02:5c:5c:7c:4d:00:25:df:8c:b4:84:9a:de:9d: 4f:57:93:ab:f5:7b:f2:dd:3a:07:46:ff:9f:76:5d:fb:1f:6d: 62:9f:15:ac:ba:f0:42:f1:c3:f0:c9:ec:2b:a8:c6:76:07:25: a2:35:90:64:04:06:dd:8e:8c:47:99:dc:01:8e:d1:15:5e:d0: 90:c7:dc:bf:6c:a2:fd:54:92:06:81:78:a0:08:70:b0:10:27: 81:88:6b:75:82:0e:af:9c:e4:39:84:58:06:b5:b9:16:dc:e9: 8d:c6:bd:5e:03:c0:94:ff:a1:98:3a:6f:cb:89:b4:93:14:35: c5:d1:8d:1a:2d:64:cc:41:cf:6b:f0:1a:07:6d:3f:58:33:7b: 7f:10:07:93:f1:e9:7c:1a:8e:6d:2b:c3:5d:44:bc:d7:1c:e3: 56:c9:72:ed:3a:ad:a1:a3:a9:de:29:3e:7b:ec:7d:75:bf:18: 83:f3:67:cc:c0:0b:17:ce:80:a3:b0:dd:fe:05:4a:db:08:73: e1:37:0d:6a:c1:f8:3d:96:17:61:7b:e9:c2:a5:31:12:38:54: 84:08:a1:60:26:90:42:f4:34:88:70:2b:ef:d4:5c:e7:3e:63: 45:2d:f2:d4:41:b6:f7:99:17:1a:b3:91:8a:45:2f:41:d3:0d: 42:42:a0:41 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBbzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG QkVGQTExMC8GA1UEBRMoMTczQzI2QTA4NkU4NUI4RkRCOTE3QUE4RDkxMUUxQzAw QUI2QTNBMTAeFw0yNTEwMTkxMDIwMTlaFw0yNTEwMjYxMDIwMTlaMBgxFjAUBgNV BAMTDTY4ZjRiYjY0LWI4MzkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDBQAK9rCs3qOqA8QehuqrKXeiXfZzRj9onptSBdK817MBcZC8Db854Zl1s5QI2 4OOqNwtI1c3FcRLYrqci1nW86smv8ia1ykJlFleCeDOPXTk8xv5bi9J+5TPBdSnb pTTfVHAxyN7md7sPP0SPjiNMjuy/oz0hAAHuykxh6LnAF/NjX0vKizTWposdjGK6 U3iz6lECrII2XhSHvIvtUbdV6C3Sa5YpPoy6KR1/AhF85hF19T9GAYhxS7w9VNc9 odrW86XLQxl+HlGqEkucQPuSnEquo7QrSvjj9D32uYOsvniiLGcjE3lPKzeSlZXh 0hPMJAp0FJbGyO3So4UcI9a1AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUsQai22oy TMxoSVEeaheKaV1yxS4wHwYDVR0jBBgwFoAUFzwmoIboW4/bkXqo2RHhwAq2o6Ew DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUZCRUZBLzBEQTUwNkNDMEIz NzExRjA4QzIzOTg2M0M0RjlBRTAyL0Z6d21vSWJvVzRfYmtYcW8yUkhod0FxMm82 RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvRnp3bW9JYm9XNF9ia1hxbzJSSGh3QXEybzZFLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUZC RUZBLzBEQTUwNkNDMEIzNzExRjA4QzIzOTg2M0M0RjlBRTAyL0Z6d21vSWJvVzRf YmtYcW8yUkhod0FxMm82RS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAMHMejgCXFx8TQAl34y0hJrenU9Xk6v1e/LdOgdG/592XfsfbWKfFay6 8ELxw/DJ7CuoxnYHJaI1kGQEBt2OjEeZ3AGO0RVe0JDH3L9sov1UkgaBeKAIcLAQ J4GIa3WCDq+c5DmEWAa1uRbc6Y3GvV4DwJT/oZg6b8uJtJMUNcXRjRotZMxBz2vw GgdtP1gze38QB5Px6Xwajm0rw11EvNcc41bJcu06raGjqd4pPnvsfXW/GIPzZ8zA CxfOgKOw3f4FStsIc+E3DWrB+D2WF2F76cKlMRI4VIQIoWAmkEL0NIhwK+/UXOc+ Y0Ut8tRBtveZFxqzkYpFL0HTDUJCoEE= -----END CERTIFICATE-----Generated at Tue Oct 21 02:26:01 2025 by rpki-client