$ rpki-client -vvf rpki.apnic.net/member_repository/A91B7770/E6810410C0AE11EAB95AB572C4F9AE02/fVVGmSbR-TTzrylkXrbBC7YGm8k.mft File: fVVGmSbR-TTzrylkXrbBC7YGm8k.mft (raw, json) Hash identifier: 0C2dc13fDBYgga6gxEpsNBqgFNZsUGLmSd4hecC4Q40= Subject key identifier: 93:DB:55:2E:45:F9:79:0D:EB:E9:9F:2F:72:5D:74:D0:BD:48:04:1E Authority key identifier: 7D:55:46:99:26:D1:F9:34:F3:AF:29:64:5E:B6:C1:0B:B6:06:9B:C9 Certificate issuer: /CN=A91B7770/serialNumber=7D55469926D1F934F3AF29645EB6C10BB6069BC9 Certificate serial: 0988 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fVVGmSbR-TTzrylkXrbBC7YGm8k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B7770/E6810410C0AE11EAB95AB572C4F9AE02/fVVGmSbR-TTzrylkXrbBC7YGm8k.mft Manifest number: 091B Signing time: Fri 08 Aug 2025 20:53:21 +0000 Manifest this update: Fri 08 Aug 2025 20:53:20 +0000 Manifest next update: Fri 15 Aug 2025 20:53:20 +0000 Files and hashes: 1: fVVGmSbR-TTzrylkXrbBC7YGm8k.crl (hash: anW1bfZxU/PE1F/7kDciQRL3lMM9qcTLqk8KOup4D3o=) 2: 49E75ECAD66F11EF8C443287C4F9AE02.roa (hash: 6eLBLTiRLG59b19Vh6VakQSbL4yifX/0CdBZxWB4WEY=) 3: 501941C093F211EEA029A113C4F9AE02.roa (hash: FhESrn/DCqUnNSrnrcCxTem1wxJCB6TNgEsA8vGhFD0=) 4: 8DA3D4E03F7E11F0B8EF8F28C4F9AE02.roa (hash: /znaKV3KjWiiYiywi65esGpUip1B0gcKXgL7UimYW5U=) 5: 781C64FAF58611ED89273159C4F9AE02.roa (hash: lwV/ynteCUHJi+p3z2mrWfc4T5PCrXOSxxmLmNk4dP0=) 6: FECBA2C23B2611EFAF167E83C4F9AE02.roa (hash: Y7HIfK+dgei476aRla7phi/541mDTNFxZ1eh4K1sDYk=) 7: 9672E862793811EE92C54834C4F9AE02.roa (hash: UGwpdFjyj5op9VWtjdDebDyJLyb7++gFQLq7ibC5Zo8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B7770/E6810410C0AE11EAB95AB572C4F9AE02/fVVGmSbR-TTzrylkXrbBC7YGm8k.crl rsync://rpki.apnic.net/member_repository/A91B7770/E6810410C0AE11EAB95AB572C4F9AE02/fVVGmSbR-TTzrylkXrbBC7YGm8k.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fVVGmSbR-TTzrylkXrbBC7YGm8k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2440 (0x988) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B7770, serialNumber=7D55469926D1F934F3AF29645EB6C10BB6069BC9 Validity Not Before: Aug 8 20:53:20 2025 GMT Not After : Aug 15 20:53:20 2025 GMT Subject: CN=689663c0-7f23 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:fc:53:60:d2:91:d2:7d:b1:66:99:c0:75:31: 94:e3:1a:fd:bc:b3:1d:2b:b4:9b:d7:b4:51:69:62: 2e:1b:34:91:c8:73:38:a8:2e:7c:88:c6:81:77:6f: d0:0c:a7:de:29:ad:b2:ca:43:d4:e9:85:31:a4:8e: f0:27:7a:81:12:12:79:64:77:e5:62:1a:1d:bc:bf: 8c:22:d6:3f:09:c8:06:56:82:d6:26:18:6f:23:12: dc:24:b8:50:c0:a4:31:d2:95:6f:0f:58:c2:b6:af: df:1f:d8:23:bd:43:0d:da:f7:d2:a9:40:fa:44:0c: 12:7c:d7:41:5b:54:44:44:e2:4c:3b:38:c7:77:77: 61:42:06:ba:2b:cb:d7:ac:62:d6:0b:6c:7f:6f:6d: 61:8f:86:77:55:1e:2e:eb:fd:7f:9e:65:b1:e1:d0: db:97:a9:4d:86:df:f1:4f:25:c1:a1:b3:93:80:38: a7:a2:64:0b:0e:04:f7:f9:2d:c9:c2:6a:ed:80:07: 12:e1:04:f3:ab:98:37:ba:c8:f3:d7:0b:2c:26:ac: bf:c3:a0:e1:37:09:67:f9:aa:2e:bd:97:a0:83:7e: 5d:e4:57:43:6f:f7:c3:26:0e:71:67:8f:f1:40:47: dd:64:fa:17:62:f2:00:df:d3:ed:ac:04:ba:0f:c8: 41:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:DB:55:2E:45:F9:79:0D:EB:E9:9F:2F:72:5D:74:D0:BD:48:04:1E X509v3 Authority Key Identifier: keyid:7D:55:46:99:26:D1:F9:34:F3:AF:29:64:5E:B6:C1:0B:B6:06:9B:C9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B7770/E6810410C0AE11EAB95AB572C4F9AE02/fVVGmSbR-TTzrylkXrbBC7YGm8k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fVVGmSbR-TTzrylkXrbBC7YGm8k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B7770/E6810410C0AE11EAB95AB572C4F9AE02/fVVGmSbR-TTzrylkXrbBC7YGm8k.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 96:f8:24:02:1c:b4:ad:ca:b9:b3:b6:81:ae:37:af:b7:50:ec: 4b:a3:7c:8f:74:89:b1:cf:df:77:7c:13:28:c7:03:08:0f:cc: 57:21:b3:b4:b0:9f:dc:9c:35:63:dd:5d:c7:d8:8d:8c:88:e4: 52:05:62:90:77:76:5d:40:96:09:d6:23:ed:b6:90:13:6e:16: 53:dd:fb:4b:59:84:a9:5b:9f:42:2b:d8:e9:76:e7:c7:54:3e: f9:05:c5:bb:72:5d:f8:cf:fd:24:f2:d0:2a:51:07:47:a5:b3: 62:5d:b3:4a:4c:f6:90:59:54:fa:43:23:f3:7d:ce:c4:8f:47: 58:50:e6:f8:db:47:52:0b:50:3a:d3:e5:64:8c:60:18:5c:99: 0f:83:54:76:da:03:38:6a:ca:6a:2d:a6:7c:97:f2:42:ab:19: 93:39:b6:be:2b:81:ce:86:b8:ea:f2:1f:f2:80:70:e9:5d:bd: 5f:30:67:65:24:f5:42:67:a3:af:cd:3c:5a:2d:b9:f9:0e:33: c3:1d:6e:e2:2d:9a:6f:ff:a4:d6:45:99:8b:1e:0b:7e:ef:6b: 26:18:29:e2:5c:78:d4:89:86:e2:57:15:12:8c:63:34:8d:31: 41:18:bd:0a:0e:3e:38:39:55:12:b9:8e:28:99:6f:a1:eb:d5: 5c:4f:f2:b2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCYgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Qjc3NzAxMTAvBgNVBAUTKDdENTU0Njk5MjZEMUY5MzRGM0FGMjk2NDVFQjZDMTBC QjYwNjlCQzkwHhcNMjUwODA4MjA1MzIwWhcNMjUwODE1MjA1MzIwWjAYMRYwFAYD VQQDEw02ODk2NjNjMC03ZjIzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2fxTYNKR0n2xZpnAdTGU4xr9vLMdK7Sb17RRaWIuGzSRyHM4qC58iMaBd2/Q DKfeKa2yykPU6YUxpI7wJ3qBEhJ5ZHflYhodvL+MItY/CcgGVoLWJhhvIxLcJLhQ wKQx0pVvD1jCtq/fH9gjvUMN2vfSqUD6RAwSfNdBW1REROJMOzjHd3dhQga6K8vX rGLWC2x/b21hj4Z3VR4u6/1/nmWx4dDbl6lNht/xTyXBobOTgDinomQLDgT3+S3J wmrtgAcS4QTzq5g3usjz1wssJqy/w6DhNwln+aouvZegg35d5FdDb/fDJg5xZ4/x QEfdZPoXYvIA39PtrAS6D8hBHwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJPbVS5F +XkN6+mfL3JddNC9SAQeMB8GA1UdIwQYMBaAFH1VRpkm0fk0868pZF62wQu2BpvJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNzc3MC9FNjgxMDQxMEMw QUUxMUVBQjk1QUI1NzJDNEY5QUUwMi9mVlZHbVNiUi1UVHpyeWxrWHJiQkM3WUdt OGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ZWVkdtU2JSLVRUenJ5bGtYcmJCQzdZR204ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC Nzc3MC9FNjgxMDQxMEMwQUUxMUVBQjk1QUI1NzJDNEY5QUUwMi9mVlZHbVNiUi1U VHpyeWxrWHJiQkM3WUdtOGsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCW+CQCHLStyrmztoGuN6+3UOxLo3yPdImxz993fBMoxwMID8xXIbO0 sJ/cnDVj3V3H2I2MiORSBWKQd3ZdQJYJ1iPttpATbhZT3ftLWYSpW59CK9jpdufH VD75BcW7cl34z/0k8tAqUQdHpbNiXbNKTPaQWVT6QyPzfc7Ej0dYUOb420dSC1A6 0+VkjGAYXJkPg1R22gM4aspqLaZ8l/JCqxmTOba+K4HOhrjq8h/ygHDpXb1fMGdl JPVCZ6OvzTxaLbn5DjPDHW7iLZpv/6TWRZmLHgt+72smGCniXHjUiYbiVxUSjGM0 jTFBGL0KDj44OVUSuY4omW+h69VcT/Ky -----END CERTIFICATE-----Generated at Sun Aug 10 16:04:31 2025 by rpki-client