$ rpki-client -vvf rpki.apnic.net/member_repository/A91FBEFA/0DA506CC0B3711F08C239863C4F9AE02/FzwmoIboW4_bkXqo2RHhwAq2o6E.mft File: FzwmoIboW4_bkXqo2RHhwAq2o6E.mft (raw, json) Hash identifier: E2IVJy16fzAgO2RVxXBfOiTWi4H+Dbxs/gFyLitKLo8= Subject key identifier: C9:A0:1C:C7:46:5A:0E:F3:87:C5:60:6C:7E:7A:73:73:7C:5B:B5:D1 Authority key identifier: 17:3C:26:A0:86:E8:5B:8F:DB:91:7A:A8:D9:11:E1:C0:0A:B6:A3:A1 Certificate issuer: /CN=A91FBEFA/serialNumber=173C26A086E85B8FDB917AA8D911E1C00AB6A3A1 Certificate serial: 52 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FzwmoIboW4_bkXqo2RHhwAq2o6E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FBEFA/0DA506CC0B3711F08C239863C4F9AE02/FzwmoIboW4_bkXqo2RHhwAq2o6E.mft Manifest number: 50 Signing time: Sat 23 Aug 2025 07:34:51 +0000 Manifest this update: Sat 23 Aug 2025 07:34:51 +0000 Manifest next update: Sat 30 Aug 2025 07:34:51 +0000 Files and hashes: 1: FzwmoIboW4_bkXqo2RHhwAq2o6E.crl (hash: XnpdvW/QMBvdXyYtuxYHI/AHMyK04qZufJdlNNd8WZs=) 2: 4776F9120CCE11F0A08AA749C4F9AE02.roa (hash: VlGCrM3drX5CqJ0PsOFfcqqGKkwf8UbZCTA7SKqIpGI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FBEFA/0DA506CC0B3711F08C239863C4F9AE02/FzwmoIboW4_bkXqo2RHhwAq2o6E.crl rsync://rpki.apnic.net/member_repository/A91FBEFA/0DA506CC0B3711F08C239863C4F9AE02/FzwmoIboW4_bkXqo2RHhwAq2o6E.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FzwmoIboW4_bkXqo2RHhwAq2o6E.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 07:34:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 82 (0x52) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FBEFA, serialNumber=173C26A086E85B8FDB917AA8D911E1C00AB6A3A1 Validity Not Before: Aug 23 07:34:51 2025 GMT Not After : Aug 30 07:34:51 2025 GMT Subject: CN=68a96f1b-af89 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:80:f0:29:c6:fa:eb:80:78:fe:d9:34:33:b4: 09:ef:62:39:58:60:2a:c7:b2:4e:b8:43:f7:77:13: dd:02:ab:94:7b:fa:77:ea:5a:de:0e:c3:3e:e0:05: e7:c5:66:33:a3:f9:6a:b0:d0:8d:24:1d:94:4f:ad: 17:bb:fb:30:ee:e9:aa:c6:59:29:6e:ce:d2:f4:ab: 4b:f6:cd:df:e6:03:3c:1e:4f:e5:80:c2:85:67:22: 74:0c:11:dd:ca:b9:97:21:41:f1:66:b1:ea:aa:7f: 37:3c:68:e3:07:20:e8:30:ee:c8:b2:ff:32:a8:46: 84:e8:51:6e:bf:e9:bb:8e:0d:0b:91:06:42:1d:af: ff:ca:3d:65:25:fa:66:87:aa:5d:2c:57:98:58:84: ee:19:9a:cf:ee:35:ca:36:d3:36:fc:3f:04:f9:e2: 8e:f9:66:96:6b:c3:c2:c6:64:8f:cc:7d:3b:2f:fb: de:70:bb:fb:0d:b3:50:e3:16:89:44:95:97:80:99: b8:68:37:50:ff:30:b3:0b:6b:25:ac:15:e4:85:94: d3:ef:f4:01:46:0a:74:3c:50:80:a9:a6:bb:a1:27: 75:2c:60:05:91:57:60:04:a4:13:b0:34:b8:58:33: b2:1c:20:7c:2d:d5:06:68:50:28:69:c6:fc:07:ba: a6:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:A0:1C:C7:46:5A:0E:F3:87:C5:60:6C:7E:7A:73:73:7C:5B:B5:D1 X509v3 Authority Key Identifier: keyid:17:3C:26:A0:86:E8:5B:8F:DB:91:7A:A8:D9:11:E1:C0:0A:B6:A3:A1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FBEFA/0DA506CC0B3711F08C239863C4F9AE02/FzwmoIboW4_bkXqo2RHhwAq2o6E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FzwmoIboW4_bkXqo2RHhwAq2o6E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FBEFA/0DA506CC0B3711F08C239863C4F9AE02/FzwmoIboW4_bkXqo2RHhwAq2o6E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c3:ba:be:c6:a4:47:22:39:97:75:d3:fb:23:08:94:52:7a:20: f0:f6:1c:a8:77:da:fb:8d:e1:86:64:a3:08:8b:19:7c:bf:29: 29:c1:22:b2:31:d2:68:4f:d4:45:1c:4d:79:89:47:4b:24:34: 3e:4a:00:34:c9:1e:a8:f1:28:33:28:ef:f9:90:d9:7a:c2:44: 68:39:79:2e:45:31:79:85:e6:93:cd:00:4a:d6:a6:cd:15:a3: 89:0f:3e:40:78:aa:57:09:32:3a:8d:23:54:64:86:ca:5c:bf: a1:75:e2:88:80:cc:48:04:18:8f:d1:61:15:51:eb:54:35:8c: c3:a7:ad:5a:d4:e4:4a:d5:d9:1e:5c:0c:ce:ef:9e:6d:22:e6: 1f:8e:57:9e:b5:fa:dc:15:65:19:2a:e5:01:69:aa:c5:eb:3e: 02:bb:60:b6:c6:78:96:f6:cb:f2:de:61:ee:00:12:bb:5f:9f: f0:f3:6b:96:67:ed:fc:c0:4e:fc:84:16:2e:51:6f:3f:c4:50: 72:63:8e:51:14:bf:4b:16:5d:1f:dd:ed:c1:2a:d0:98:6b:10: 3a:79:39:8c:09:c3:c4:cc:60:de:16:3d:6f:8b:34:cc:50:d2: 5e:d0:3b:22:5a:c6:f7:3e:69:08:f8:cc:dc:8e:98:d2:73:42: 1a:b3:88:7b -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBUjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG QkVGQTExMC8GA1UEBRMoMTczQzI2QTA4NkU4NUI4RkRCOTE3QUE4RDkxMUUxQzAw QUI2QTNBMTAeFw0yNTA4MjMwNzM0NTFaFw0yNTA4MzAwNzM0NTFaMBgxFjAUBgNV BAMTDTY4YTk2ZjFiLWFmODkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC9gPApxvrrgHj+2TQztAnvYjlYYCrHsk64Q/d3E90Cq5R7+nfqWt4Owz7gBefF ZjOj+Wqw0I0kHZRPrRe7+zDu6arGWSluztL0q0v2zd/mAzweT+WAwoVnInQMEd3K uZchQfFmseqqfzc8aOMHIOgw7siy/zKoRoToUW6/6buODQuRBkIdr//KPWUl+maH ql0sV5hYhO4Zms/uNco20zb8PwT54o75ZpZrw8LGZI/MfTsv+95wu/sNs1DjFolE lZeAmbhoN1D/MLMLayWsFeSFlNPv9AFGCnQ8UICppruhJ3UsYAWRV2AEpBOwNLhY M7IcIHwt1QZoUChpxvwHuqZ3AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUyaAcx0Za DvOHxWBsfnpzc3xbtdEwHwYDVR0jBBgwFoAUFzwmoIboW4/bkXqo2RHhwAq2o6Ew DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUZCRUZBLzBEQTUwNkNDMEIz NzExRjA4QzIzOTg2M0M0RjlBRTAyL0Z6d21vSWJvVzRfYmtYcW8yUkhod0FxMm82 RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvRnp3bW9JYm9XNF9ia1hxbzJSSGh3QXEybzZFLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUZC RUZBLzBEQTUwNkNDMEIzNzExRjA4QzIzOTg2M0M0RjlBRTAyL0Z6d21vSWJvVzRf YmtYcW8yUkhod0FxMm82RS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAMO6vsakRyI5l3XT+yMIlFJ6IPD2HKh32vuN4YZkowiLGXy/KSnBIrIx 0mhP1EUcTXmJR0skND5KADTJHqjxKDMo7/mQ2XrCRGg5eS5FMXmF5pPNAErWps0V o4kPPkB4qlcJMjqNI1Rkhspcv6F14oiAzEgEGI/RYRVR61Q1jMOnrVrU5ErV2R5c DM7vnm0i5h+OV561+twVZRkq5QFpqsXrPgK7YLbGeJb2y/LeYe4AErtfn/Dza5Zn 7fzATvyEFi5Rbz/EUHJjjlEUv0sWXR/d7cEq0JhrEDp5OYwJw8TMYN4WPW+LNMxQ 0l7QOyJaxvc+aQj4zNyOmNJzQhqziHs= -----END CERTIFICATE-----Generated at Sat Aug 23 12:44:18 2025 by rpki-client