$ rpki-client -vvf rpki.apnic.net/member_repository/A91B777C/6CD8133CB2DA11EB8B384A60C4F9AE02/frs7Qcl_MxP654HvYzI8SvYrj7c.mft File: frs7Qcl_MxP654HvYzI8SvYrj7c.mft (raw, json) Hash identifier: dH9R/LcpIxjgFYpAHjmB4TmXwnYA4zFDPLB3pXduLYw= Subject key identifier: 89:5D:04:7A:AA:56:B4:3E:9D:E1:C6:17:D4:D4:0E:C4:1C:A5:7D:75 Authority key identifier: 7E:BB:3B:41:C9:7F:33:13:FA:E7:81:EF:63:32:3C:4A:F6:2B:8F:B7 Certificate issuer: /CN=A91B777C/serialNumber=7EBB3B41C97F3313FAE781EF63323C4AF62B8FB7 Certificate serial: 0642 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/frs7Qcl_MxP654HvYzI8SvYrj7c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B777C/6CD8133CB2DA11EB8B384A60C4F9AE02/frs7Qcl_MxP654HvYzI8SvYrj7c.mft Manifest number: 063B Signing time: Sun 02 Nov 2025 22:42:52 +0000 Manifest this update: Sun 02 Nov 2025 22:42:51 +0000 Manifest next update: Sun 09 Nov 2025 22:42:51 +0000 Files and hashes: 1: frs7Qcl_MxP654HvYzI8SvYrj7c.crl (hash: M3W2p6+11X2w1hbPMz97JcqcUiHkaoZW2w0H3RT+CFM=) 2: 10BBF6CEB2E711EB8A61B44EC4F9AE02.roa (hash: 0y9VyknIsSUScmWS3621geMMX5dlAHgNZtNYOtKkDmI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B777C/6CD8133CB2DA11EB8B384A60C4F9AE02/frs7Qcl_MxP654HvYzI8SvYrj7c.crl rsync://rpki.apnic.net/member_repository/A91B777C/6CD8133CB2DA11EB8B384A60C4F9AE02/frs7Qcl_MxP654HvYzI8SvYrj7c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/frs7Qcl_MxP654HvYzI8SvYrj7c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 22:42:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1602 (0x642) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B777C, serialNumber=7EBB3B41C97F3313FAE781EF63323C4AF62B8FB7 Validity Not Before: Nov 2 22:42:51 2025 GMT Not After : Nov 9 22:42:51 2025 GMT Subject: CN=6907de6b-03be Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:b5:0e:82:c8:e9:3d:f5:c7:74:86:60:e3:35: a4:75:85:d4:b4:95:a7:25:12:9a:6b:2a:ad:d4:81: 9e:67:b6:17:3b:06:7f:70:7c:11:a1:0e:0c:80:9d: 35:87:76:38:ff:b6:a2:5e:18:67:48:7e:8b:87:88: b0:de:54:f3:c5:78:fa:78:34:45:0c:bb:8f:cf:5c: 32:ad:ba:30:72:14:82:68:cb:42:0f:21:12:1d:5a: a5:97:21:6c:29:89:13:62:5f:c6:53:99:7d:ff:4c: c5:0b:98:1c:9c:8c:8b:13:56:a6:f4:a2:6a:43:62: 26:30:39:20:9e:5a:11:65:00:05:f0:6c:1c:b3:28: cc:69:ea:0f:da:ca:80:11:03:83:39:9e:e8:a2:d6: 0c:ff:27:01:97:ad:08:be:9e:32:48:48:9d:3c:1c: 5b:dc:30:8f:00:b7:13:f2:34:e0:0f:bd:02:43:76: 3c:be:31:ff:61:01:69:81:25:b7:5f:01:5f:f1:0f: 20:71:04:ba:81:d3:a6:02:32:c1:b3:63:d2:04:e5: a7:98:0d:b4:be:7a:bf:ec:b2:d3:1c:61:ab:8d:8f: ca:41:01:9d:2f:18:d6:28:51:23:86:af:0b:7f:52: 13:71:98:d3:89:97:2d:ad:9f:e0:6e:f9:be:c3:5a: da:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:5D:04:7A:AA:56:B4:3E:9D:E1:C6:17:D4:D4:0E:C4:1C:A5:7D:75 X509v3 Authority Key Identifier: keyid:7E:BB:3B:41:C9:7F:33:13:FA:E7:81:EF:63:32:3C:4A:F6:2B:8F:B7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B777C/6CD8133CB2DA11EB8B384A60C4F9AE02/frs7Qcl_MxP654HvYzI8SvYrj7c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/frs7Qcl_MxP654HvYzI8SvYrj7c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B777C/6CD8133CB2DA11EB8B384A60C4F9AE02/frs7Qcl_MxP654HvYzI8SvYrj7c.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 06:89:1b:87:29:0a:b2:5d:13:25:f9:81:51:34:54:9c:20:2b: 78:74:0f:95:23:74:00:96:76:bf:d2:fa:9b:13:21:13:30:0d: 9c:f0:47:d5:7c:5f:92:29:38:f3:e8:91:83:61:aa:91:bd:7a: 58:ab:41:66:25:09:77:52:ce:e4:f6:d9:b4:2b:57:9f:ba:8f: c3:24:14:81:fd:6c:18:54:ad:c3:25:95:d2:be:3d:16:25:e8: b7:4b:e7:69:d6:b4:08:74:b0:03:7a:97:ea:59:1c:06:0c:a3: 4a:ca:ef:c7:1d:78:df:9f:08:59:5b:9d:55:f0:b6:d7:a7:9f: 5c:20:0b:35:7a:9c:c0:12:b1:0c:4f:60:e3:44:eb:fb:29:4c: d7:fa:a4:11:e5:bf:57:da:4c:0c:6a:ed:0b:41:ff:9e:e5:e6: c2:6e:08:95:e2:0b:60:3f:d9:97:f2:aa:0c:79:21:6c:6c:3b: d8:b3:eb:1c:cc:c6:b7:f8:ff:ce:b9:2c:58:5e:3c:af:07:14: 9a:16:19:2e:5e:68:51:e7:26:f8:e1:98:ab:cb:0b:0f:a4:6b: fe:3e:01:93:ff:c2:c2:93:bd:47:01:eb:a2:be:fb:cc:d1:92: a5:25:e9:91:46:4b:5d:47:9d:ea:a6:e4:53:78:b2:e4:95:04: 85:46:50:fd -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBkIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Qjc3N0MxMTAvBgNVBAUTKDdFQkIzQjQxQzk3RjMzMTNGQUU3ODFFRjYzMzIzQzRB RjYyQjhGQjcwHhcNMjUxMTAyMjI0MjUxWhcNMjUxMTA5MjI0MjUxWjAYMRYwFAYD VQQDEw02OTA3ZGU2Yi0wM2JlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAorUOgsjpPfXHdIZg4zWkdYXUtJWnJRKaayqt1IGeZ7YXOwZ/cHwRoQ4MgJ01 h3Y4/7aiXhhnSH6Lh4iw3lTzxXj6eDRFDLuPz1wyrbowchSCaMtCDyESHVqllyFs KYkTYl/GU5l9/0zFC5gcnIyLE1am9KJqQ2ImMDkgnloRZQAF8GwcsyjMaeoP2sqA EQODOZ7ootYM/ycBl60Ivp4ySEidPBxb3DCPALcT8jTgD70CQ3Y8vjH/YQFpgSW3 XwFf8Q8gcQS6gdOmAjLBs2PSBOWnmA20vnq/7LLTHGGrjY/KQQGdLxjWKFEjhq8L f1ITcZjTiZctrZ/gbvm+w1ralwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIldBHqq VrQ+neHGF9TUDsQcpX11MB8GA1UdIwQYMBaAFH67O0HJfzMT+ueB72MyPEr2K4+3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNzc3Qy82Q0Q4MTMzQ0Iy REExMUVCOEIzODRBNjBDNEY5QUUwMi9mcnM3UWNsX014UDY1NEh2WXpJOFN2WXJq N2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ZyczdRY2xfTXhQNjU0SHZZekk4U3ZZcmo3Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC Nzc3Qy82Q0Q4MTMzQ0IyREExMUVCOEIzODRBNjBDNEY5QUUwMi9mcnM3UWNsX014 UDY1NEh2WXpJOFN2WXJqN2MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAGiRuHKQqyXRMl+YFRNFScICt4dA+VI3QAlna/0vqbEyETMA2c8EfV fF+SKTjz6JGDYaqRvXpYq0FmJQl3Us7k9tm0K1efuo/DJBSB/WwYVK3DJZXSvj0W Jei3S+dp1rQIdLADepfqWRwGDKNKyu/HHXjfnwhZW51V8LbXp59cIAs1epzAErEM T2DjROv7KUzX+qQR5b9X2kwMau0LQf+e5ebCbgiV4gtgP9mX8qoMeSFsbDvYs+sc zMa3+P/OuSxYXjyvBxSaFhkuXmhR5yb44ZirywsPpGv+PgGT/8LCk71HAeuivvvM 0ZKlJemRRktdR53qpuRTeLLklQSFRlD9 -----END CERTIFICATE-----Generated at Tue Nov 4 21:36:31 2025 by rpki-client