$ rpki-client -vvf rpki.apnic.net/member_repository/A91B7770/E6810410C0AE11EAB95AB572C4F9AE02/fVVGmSbR-TTzrylkXrbBC7YGm8k.mft File: fVVGmSbR-TTzrylkXrbBC7YGm8k.mft (raw, json) Hash identifier: xlHwr1F8KyEW3ge2Pxkfk6GVQfd8G26LuhQoOi1U2dg= Subject key identifier: 28:34:3A:7B:A3:FA:2C:68:CE:0C:28:20:9B:E8:B6:61:A0:16:1E:A9 Authority key identifier: 7D:55:46:99:26:D1:F9:34:F3:AF:29:64:5E:B6:C1:0B:B6:06:9B:C9 Certificate issuer: /CN=A91B7770/serialNumber=7D55469926D1F934F3AF29645EB6C10BB6069BC9 Certificate serial: 09B7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fVVGmSbR-TTzrylkXrbBC7YGm8k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B7770/E6810410C0AE11EAB95AB572C4F9AE02/fVVGmSbR-TTzrylkXrbBC7YGm8k.mft Manifest number: 0949 Signing time: Tue 04 Nov 2025 20:30:36 +0000 Manifest this update: Tue 04 Nov 2025 20:30:36 +0000 Manifest next update: Tue 11 Nov 2025 20:30:36 +0000 Files and hashes: 1: fVVGmSbR-TTzrylkXrbBC7YGm8k.crl (hash: Qkdz8eE3xoaitPjMKk2bOfFGadNYtV1KF3+58dv36T0=) 2: 49E75ECAD66F11EF8C443287C4F9AE02.roa (hash: 6eLBLTiRLG59b19Vh6VakQSbL4yifX/0CdBZxWB4WEY=) 3: 501941C093F211EEA029A113C4F9AE02.roa (hash: FhESrn/DCqUnNSrnrcCxTem1wxJCB6TNgEsA8vGhFD0=) 4: 8DA3D4E03F7E11F0B8EF8F28C4F9AE02.roa (hash: /znaKV3KjWiiYiywi65esGpUip1B0gcKXgL7UimYW5U=) 5: 781C64FAF58611ED89273159C4F9AE02.roa (hash: lwV/ynteCUHJi+p3z2mrWfc4T5PCrXOSxxmLmNk4dP0=) 6: FECBA2C23B2611EFAF167E83C4F9AE02.roa (hash: Y7HIfK+dgei476aRla7phi/541mDTNFxZ1eh4K1sDYk=) 7: A8896B1892E811F0A5E48134C4F9AE02.roa (hash: xCyhd7BrMRSo37r2kc8C1tCVJGoR2T+Kqf1BZgUiJL0=) 8: 9672E862793811EE92C54834C4F9AE02.roa (hash: UGwpdFjyj5op9VWtjdDebDyJLyb7++gFQLq7ibC5Zo8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B7770/E6810410C0AE11EAB95AB572C4F9AE02/fVVGmSbR-TTzrylkXrbBC7YGm8k.crl rsync://rpki.apnic.net/member_repository/A91B7770/E6810410C0AE11EAB95AB572C4F9AE02/fVVGmSbR-TTzrylkXrbBC7YGm8k.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fVVGmSbR-TTzrylkXrbBC7YGm8k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 20:30:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2487 (0x9b7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B7770, serialNumber=7D55469926D1F934F3AF29645EB6C10BB6069BC9 Validity Not Before: Nov 4 20:30:36 2025 GMT Not After : Nov 11 20:30:36 2025 GMT Subject: CN=690a626c-b01a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:23:e2:5a:e4:4d:c4:ac:f0:e1:6a:d1:98:6a: d2:f5:f6:9d:67:79:58:e8:a4:2d:a3:0d:da:cd:2a: 13:9f:06:90:36:8b:ac:40:1f:fe:d6:7f:ae:0b:e3: 03:25:f2:9f:83:62:63:72:b1:3e:37:83:11:93:3e: 11:ea:3c:2d:07:f4:28:08:98:0d:0f:22:c9:46:cf: 80:0a:33:6f:4f:b3:98:fc:7f:9b:00:96:0a:ad:41: 07:2f:8b:23:d8:bc:dc:46:0a:35:80:8f:18:f5:f5: 35:cf:d9:aa:f5:cd:2b:d7:3f:bd:cf:34:8a:c2:99: 73:14:19:05:e5:ba:91:04:1e:9a:36:b5:b9:b5:17: 39:53:71:81:c8:51:57:43:36:4d:c9:77:31:b2:d0: 23:2e:b7:43:b4:f7:70:05:93:3a:97:9c:62:2e:15: e8:3e:bd:56:5f:59:c7:a0:fd:d2:9a:6f:df:d8:d7: d9:f4:c4:87:9c:9c:25:d8:92:07:ca:a6:93:03:85: 53:ce:65:5b:2c:a2:80:ce:b1:6a:45:41:58:8e:e1: 63:8d:f1:34:0f:a0:c5:db:60:c0:91:4f:b8:55:3c: ba:9a:71:19:72:b4:d9:5d:56:3a:33:cf:ee:ae:41: be:2d:43:26:83:2b:ab:b3:7c:ad:61:92:77:ea:82: 7d:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:34:3A:7B:A3:FA:2C:68:CE:0C:28:20:9B:E8:B6:61:A0:16:1E:A9 X509v3 Authority Key Identifier: keyid:7D:55:46:99:26:D1:F9:34:F3:AF:29:64:5E:B6:C1:0B:B6:06:9B:C9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B7770/E6810410C0AE11EAB95AB572C4F9AE02/fVVGmSbR-TTzrylkXrbBC7YGm8k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fVVGmSbR-TTzrylkXrbBC7YGm8k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B7770/E6810410C0AE11EAB95AB572C4F9AE02/fVVGmSbR-TTzrylkXrbBC7YGm8k.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 18:8b:12:dd:bd:a0:0d:94:83:23:ae:fd:d5:1c:1c:84:b2:a4: 8e:0f:c4:32:55:bf:0a:7f:84:38:21:2f:c7:66:10:bb:19:ef: d9:02:09:3c:61:90:60:27:20:3e:0f:fd:0c:99:2a:eb:21:f0: e3:10:56:98:3b:38:a6:13:14:a1:20:86:e8:ba:58:41:9f:ac: fa:94:9e:72:35:6d:f1:dd:cb:50:8b:6a:f8:cd:1c:b2:3d:b2: d1:11:80:da:28:50:36:4e:07:3b:2c:f9:c5:c3:c0:df:cc:3b: a5:67:c4:35:8c:48:08:83:3b:f1:cf:2c:16:6c:35:9a:9e:05: d9:eb:1d:54:f0:9c:aa:b4:24:7d:be:91:c4:a4:f6:20:c7:e5: f3:ea:43:f9:47:9a:b2:34:48:4a:0a:7f:ce:10:17:be:aa:30: 4b:d7:44:0c:e4:83:17:7d:5f:40:aa:a3:de:34:98:42:7f:2d: ee:21:3c:25:3e:2b:80:ba:99:12:4c:99:60:0e:28:de:f8:64: 5e:1e:be:e2:d9:16:84:d2:14:8c:aa:b5:e1:bc:c8:43:f1:c1: ff:51:9b:65:75:b8:7f:e3:05:b6:4b:ea:73:4f:ba:0f:6a:5d: ae:4a:0c:b1:45:5e:43:7d:cd:f8:59:94:73:77:76:25:13:93: 25:7f:8a:aa -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCbcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Qjc3NzAxMTAvBgNVBAUTKDdENTU0Njk5MjZEMUY5MzRGM0FGMjk2NDVFQjZDMTBC QjYwNjlCQzkwHhcNMjUxMTA0MjAzMDM2WhcNMjUxMTExMjAzMDM2WjAYMRYwFAYD VQQDEw02OTBhNjI2Yy1iMDFhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsyPiWuRNxKzw4WrRmGrS9fadZ3lY6KQtow3azSoTnwaQNousQB/+1n+uC+MD JfKfg2JjcrE+N4MRkz4R6jwtB/QoCJgNDyLJRs+ACjNvT7OY/H+bAJYKrUEHL4sj 2LzcRgo1gI8Y9fU1z9mq9c0r1z+9zzSKwplzFBkF5bqRBB6aNrW5tRc5U3GByFFX QzZNyXcxstAjLrdDtPdwBZM6l5xiLhXoPr1WX1nHoP3Smm/f2NfZ9MSHnJwl2JIH yqaTA4VTzmVbLKKAzrFqRUFYjuFjjfE0D6DF22DAkU+4VTy6mnEZcrTZXVY6M8/u rkG+LUMmgyurs3ytYZJ36oJ9OwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCg0Onuj +ixozgwoIJvotmGgFh6pMB8GA1UdIwQYMBaAFH1VRpkm0fk0868pZF62wQu2BpvJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNzc3MC9FNjgxMDQxMEMw QUUxMUVBQjk1QUI1NzJDNEY5QUUwMi9mVlZHbVNiUi1UVHpyeWxrWHJiQkM3WUdt OGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ZWVkdtU2JSLVRUenJ5bGtYcmJCQzdZR204ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC Nzc3MC9FNjgxMDQxMEMwQUUxMUVBQjk1QUI1NzJDNEY5QUUwMi9mVlZHbVNiUi1U VHpyeWxrWHJiQkM3WUdtOGsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAYixLdvaANlIMjrv3VHByEsqSOD8QyVb8Kf4Q4IS/HZhC7Ge/ZAgk8 YZBgJyA+D/0MmSrrIfDjEFaYOzimExShIIboulhBn6z6lJ5yNW3x3ctQi2r4zRyy PbLREYDaKFA2Tgc7LPnFw8DfzDulZ8Q1jEgIgzvxzywWbDWangXZ6x1U8JyqtCR9 vpHEpPYgx+Xz6kP5R5qyNEhKCn/OEBe+qjBL10QM5IMXfV9AqqPeNJhCfy3uITwl PiuAupkSTJlgDije+GReHr7i2RaE0hSMqrXhvMhD8cH/UZtldbh/4wW2S+pzT7oP al2uSgyxRV5Dfc34WZRzd3YlE5Mlf4qq -----END CERTIFICATE-----Generated at Wed Nov 5 13:06:09 2025 by rpki-client