$ rpki-client -vvf rpki.apnic.net/member_repository/A91CF4FE/BA13124E1D8511E2A77999DC08B02CD2/FrVkt1jfzVLFzokRkuMbcVscv-g.mft File: FrVkt1jfzVLFzokRkuMbcVscv-g.mft (raw, json) Hash identifier: eJOg0werIT5U+KhzWAMY/PH3YvpykIp53SMzXiIlHmY= Subject key identifier: 99:7E:CB:83:5D:52:48:88:49:31:2F:D8:3C:6B:60:26:32:D1:0C:9F Authority key identifier: 16:B5:64:B7:58:DF:CD:52:C5:CE:89:11:92:E3:1B:71:5B:1C:BF:E8 Certificate issuer: /CN=A91CF4FE/serialNumber=16B564B758DFCD52C5CE891192E31B715B1CBFE8 Certificate serial: 3548 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FrVkt1jfzVLFzokRkuMbcVscv-g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CF4FE/BA13124E1D8511E2A77999DC08B02CD2/FrVkt1jfzVLFzokRkuMbcVscv-g.mft Manifest number: 34F9 Signing time: Fri 08 Aug 2025 14:26:13 +0000 Manifest this update: Fri 08 Aug 2025 14:26:13 +0000 Manifest next update: Fri 15 Aug 2025 14:26:13 +0000 Files and hashes: 1: FrVkt1jfzVLFzokRkuMbcVscv-g.crl (hash: ATeRibVA/5/Mdg/qJ9XMjnc4eUNYGOp/t+0Kwge7cDc=) 2: 10DAE05EB04811EABB4AEF61C4F9AE02.roa (hash: +b4JTzk5rUoiBhLUxnA3EW+SFsT+j/Ycd9v6oicmMdQ=) 3: 40DFD5AC650711EFB94FD44FC4F9AE02.roa (hash: 7lbO8FJw1G5XebxqgjyAycbRZnwkoSKxE4lbb1qM6S8=) 4: F6FAB490BB5811EF8C37CB81C4F9AE02.roa (hash: 8BNZKJ0bk38KOQOWjsH36VcnyN3HEx5P7NFwwrluJjM=) 5: 534379FCEE1611ECA6DE1824C4F9AE02.roa (hash: nz0TqyYIJbty+IiMMO1L40DQ1f9SJsrGYZW4STnoOWg=) 6: 5F22E1129B3011EF952F2762C4F9AE02.roa (hash: GzI1DKhtNKvZlRIctznDCQywZe9adFXYq+KIp89kCD4=) 7: 427BAA66E23211E8BD132210C4F9AE02.roa (hash: M3hgU5ipnFVKj6gek7MHkg0fz4T5KcW7+G9KqLsqkNs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CF4FE/BA13124E1D8511E2A77999DC08B02CD2/FrVkt1jfzVLFzokRkuMbcVscv-g.crl rsync://rpki.apnic.net/member_repository/A91CF4FE/BA13124E1D8511E2A77999DC08B02CD2/FrVkt1jfzVLFzokRkuMbcVscv-g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FrVkt1jfzVLFzokRkuMbcVscv-g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13640 (0x3548) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CF4FE, serialNumber=16B564B758DFCD52C5CE891192E31B715B1CBFE8 Validity Not Before: Aug 8 14:26:13 2025 GMT Not After : Aug 15 14:26:13 2025 GMT Subject: CN=68960905-f4ef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:1d:e3:06:30:f0:f5:1a:ed:51:35:3c:53:69: be:68:a6:c9:d1:ad:ff:a0:be:92:bd:1a:81:e1:fd: a1:26:60:05:ca:0e:46:50:e4:c0:0f:6b:23:18:c3: 6d:44:11:c3:7a:61:0d:48:de:4e:98:22:f9:43:80: 98:65:d9:bb:a2:49:10:51:7c:f9:1f:73:26:ea:b6: 26:3a:e8:e5:6c:71:33:54:56:51:08:39:0b:3c:bc: aa:28:cc:0e:fd:c6:f9:c4:50:be:57:35:d6:dd:de: a3:37:e9:b3:ba:c4:cd:88:84:05:64:26:ca:b8:be: 47:3a:50:0b:16:87:cd:cc:01:85:12:e2:e2:c2:ec: 6f:0a:f2:13:f5:5d:aa:3e:58:57:eb:f4:76:77:49: 7c:f3:05:11:94:91:25:e1:3f:aa:d0:7b:1c:0b:ac: cf:5a:79:31:59:10:af:46:5f:8a:9c:c6:b8:e5:60: b9:28:6b:fb:fd:e1:9d:a5:72:ac:13:38:54:57:86: c1:50:22:54:4c:48:81:f4:51:7f:ce:38:d1:4c:3d: cb:cb:9f:e4:09:7b:1b:00:1a:d9:d8:34:d3:c7:40: ee:ba:de:52:75:a2:66:0e:bd:d7:4f:b4:b3:53:05: 23:65:6f:66:50:49:1b:3c:ee:21:28:60:ad:41:48: e5:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:7E:CB:83:5D:52:48:88:49:31:2F:D8:3C:6B:60:26:32:D1:0C:9F X509v3 Authority Key Identifier: keyid:16:B5:64:B7:58:DF:CD:52:C5:CE:89:11:92:E3:1B:71:5B:1C:BF:E8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CF4FE/BA13124E1D8511E2A77999DC08B02CD2/FrVkt1jfzVLFzokRkuMbcVscv-g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FrVkt1jfzVLFzokRkuMbcVscv-g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CF4FE/BA13124E1D8511E2A77999DC08B02CD2/FrVkt1jfzVLFzokRkuMbcVscv-g.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b1:bf:9a:13:54:1f:a9:01:84:26:14:1d:3e:01:3f:ff:a3:f2: 7b:07:e5:25:66:fa:44:ca:46:bc:0b:a7:32:f2:9e:68:b4:9a: 30:67:1f:61:e5:a4:0e:71:1b:ea:2f:38:b1:25:f0:96:58:82: 79:7b:9a:f5:bd:58:d0:19:e4:37:6a:b7:0a:14:5f:aa:ee:db: 5b:a5:db:bb:15:2d:27:72:1e:dc:38:e8:5d:a7:1b:4c:ad:28: 56:be:5d:a0:65:04:3b:ab:af:57:fd:ac:59:b3:27:a9:6b:85: 61:14:f6:3c:28:5a:87:6b:c7:9d:49:dd:57:a2:97:1a:bb:a7: 84:5f:6f:f7:8e:0b:1d:34:ae:78:f5:32:59:80:9d:f5:51:0d: c0:2a:eb:9e:12:ab:97:75:36:73:63:09:d4:d9:cf:5b:2b:d7: 5b:e5:4d:d2:ed:f4:14:ca:00:b9:0b:30:59:f5:9c:9c:54:04: c8:a7:23:70:3b:92:4c:d9:55:4c:bb:5d:8d:98:40:47:fd:14: d6:11:bb:af:68:65:53:c6:0c:a9:cb:71:6a:d8:4e:29:41:c2: 09:99:fa:b7:0e:f0:fa:30:b1:d2:13:61:f4:7a:ed:a0:95:ab: 1f:42:64:43:7d:0f:1b:7a:cc:81:c5:c2:3b:08:81:a6:c6:26: ca:d1:50:c0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNUgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0Y0RkUxMTAvBgNVBAUTKDE2QjU2NEI3NThERkNENTJDNUNFODkxMTkyRTMxQjcx NUIxQ0JGRTgwHhcNMjUwODA4MTQyNjEzWhcNMjUwODE1MTQyNjEzWjAYMRYwFAYD VQQDEw02ODk2MDkwNS1mNGVmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnR3jBjDw9RrtUTU8U2m+aKbJ0a3/oL6SvRqB4f2hJmAFyg5GUOTAD2sjGMNt RBHDemENSN5OmCL5Q4CYZdm7okkQUXz5H3Mm6rYmOujlbHEzVFZRCDkLPLyqKMwO /cb5xFC+VzXW3d6jN+mzusTNiIQFZCbKuL5HOlALFofNzAGFEuLiwuxvCvIT9V2q PlhX6/R2d0l88wURlJEl4T+q0HscC6zPWnkxWRCvRl+KnMa45WC5KGv7/eGdpXKs EzhUV4bBUCJUTEiB9FF/zjjRTD3Ly5/kCXsbABrZ2DTTx0Duut5SdaJmDr3XT7Sz UwUjZW9mUEkbPO4hKGCtQUjlwQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJl+y4Nd UkiISTEv2DxrYCYy0QyfMB8GA1UdIwQYMBaAFBa1ZLdY381Sxc6JEZLjG3FbHL/o MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRjRGRS9CQTEzMTI0RTFE ODUxMUUyQTc3OTk5REMwOEIwMkNEMi9GclZrdDFqZnpWTEZ6b2tSa3VNYmNWc2N2 LWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZyVmt0MWpmelZMRnpva1JrdU1iY1ZzY3YtZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RjRGRS9CQTEzMTI0RTFEODUxMUUyQTc3OTk5REMwOEIwMkNEMi9GclZrdDFqZnpW TEZ6b2tSa3VNYmNWc2N2LWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCxv5oTVB+pAYQmFB0+AT//o/J7B+UlZvpEyka8C6cy8p5otJowZx9h 5aQOcRvqLzixJfCWWIJ5e5r1vVjQGeQ3arcKFF+q7ttbpdu7FS0nch7cOOhdpxtM rShWvl2gZQQ7q69X/axZsyepa4VhFPY8KFqHa8edSd1Xopcau6eEX2/3jgsdNK54 9TJZgJ31UQ3AKuueEquXdTZzYwnU2c9bK9db5U3S7fQUygC5CzBZ9ZycVATIpyNw O5JM2VVMu12NmEBH/RTWEbuvaGVTxgypy3Fq2E4pQcIJmfq3DvD6MLHSE2H0eu2g lasfQmRDfQ8besyBxcI7CIGmxibK0VDA -----END CERTIFICATE-----Generated at Sun Aug 10 05:37:26 2025 by rpki-client