$ rpki-client -vvf rpki.apnic.net/member_repository/A91CF4FE/BA13124E1D8511E2A77999DC08B02CD2/FrVkt1jfzVLFzokRkuMbcVscv-g.mft File: FrVkt1jfzVLFzokRkuMbcVscv-g.mft (raw, json) Hash identifier: H+pTfgKvZqwPzg6T6VSQNz4yJbC1x/rAkQYNDxrk4jY= Subject key identifier: B5:B9:72:3B:FE:D4:B4:11:D3:17:F1:61:1A:F6:B2:59:23:EE:EB:29 Authority key identifier: 16:B5:64:B7:58:DF:CD:52:C5:CE:89:11:92:E3:1B:71:5B:1C:BF:E8 Certificate issuer: /CN=A91CF4FE/serialNumber=16B564B758DFCD52C5CE891192E31B715B1CBFE8 Certificate serial: 357E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FrVkt1jfzVLFzokRkuMbcVscv-g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CF4FE/BA13124E1D8511E2A77999DC08B02CD2/FrVkt1jfzVLFzokRkuMbcVscv-g.mft Manifest number: 3529 Signing time: Tue 04 Nov 2025 14:27:29 +0000 Manifest this update: Tue 04 Nov 2025 14:27:28 +0000 Manifest next update: Tue 11 Nov 2025 14:27:28 +0000 Files and hashes: 1: FrVkt1jfzVLFzokRkuMbcVscv-g.crl (hash: lQLpgxgGBfqzGwxKy4N6eNL+PxcAP+jNMwYwqu1yVSU=) 2: 10DAE05EB04811EABB4AEF61C4F9AE02.roa (hash: bPtENJEcOoeg2k8xe2jWRrY5UKQvlUbjR5xndoVRe10=) 3: 40DFD5AC650711EFB94FD44FC4F9AE02.roa (hash: zawwiUMAVIdG2bykFeNbnA88n/1gVRjEvWeHRre2uoI=) 4: F6FAB490BB5811EF8C37CB81C4F9AE02.roa (hash: 4h0iDWjsfa7NDKLfke8j7fgE3a1MCnkylqCcKoNifz0=) 5: 534379FCEE1611ECA6DE1824C4F9AE02.roa (hash: IzD5q2GzmuV18q1dnBjmacTQl4qcdKe2UsljJfilqlM=) 6: 5F22E1129B3011EF952F2762C4F9AE02.roa (hash: qTYeOx6pg1ogjikS/4HOIDZ4QqzqAPHZTv7DK6zo/c4=) 7: 427BAA66E23211E8BD132210C4F9AE02.roa (hash: h82lo/wGrqpMf7HWVtsO8+F8lE20C+ULtc+zbWn4ALA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CF4FE/BA13124E1D8511E2A77999DC08B02CD2/FrVkt1jfzVLFzokRkuMbcVscv-g.crl rsync://rpki.apnic.net/member_repository/A91CF4FE/BA13124E1D8511E2A77999DC08B02CD2/FrVkt1jfzVLFzokRkuMbcVscv-g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FrVkt1jfzVLFzokRkuMbcVscv-g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 14:27:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13694 (0x357e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CF4FE, serialNumber=16B564B758DFCD52C5CE891192E31B715B1CBFE8 Validity Not Before: Nov 4 14:27:28 2025 GMT Not After : Nov 11 14:27:28 2025 GMT Subject: CN=690a0d51-d0e6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:6e:a2:01:77:46:ee:3f:83:f0:48:59:5e:13: 87:30:a2:c2:b2:40:6e:d0:19:55:b2:7a:bb:cd:7b: 96:65:41:d7:0d:dd:3a:92:74:01:80:0a:d5:c7:84: cf:c2:58:df:a3:25:6c:58:30:15:46:6f:ee:73:79: b2:ab:64:fa:59:e7:94:1c:6d:27:8e:59:8a:0a:f6: de:60:8c:72:bb:7d:68:f2:0b:bb:53:ae:d7:df:61: ee:6e:8b:ac:37:f3:97:56:2c:6b:eb:c9:e7:63:9f: 2b:b0:f6:67:3a:0e:cc:3a:74:2b:c0:b9:b0:62:88: df:76:dc:48:67:be:0d:d5:c5:dd:4f:ac:0c:d6:46: 5b:a8:5e:e5:24:9f:2b:e8:f8:42:b9:50:c0:e5:f1: b3:36:85:dd:a5:a6:68:c2:8f:5d:7c:c2:7b:e4:4a: 3d:7d:df:1a:92:8d:be:fb:5a:1c:aa:c4:dc:04:4c: 65:b7:64:6a:df:33:e4:c7:ed:7a:16:c0:4c:83:1e: cd:a2:2e:88:35:b4:cd:a5:f5:b9:32:aa:9e:b7:2c: 58:9b:03:eb:db:b6:f4:81:ce:0b:1e:4a:36:60:4b: dd:d6:53:13:09:01:10:2c:cd:06:8a:b5:8d:e8:83: ff:24:2d:66:42:2e:08:2f:ab:4e:46:14:8a:c5:b6: 60:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:B9:72:3B:FE:D4:B4:11:D3:17:F1:61:1A:F6:B2:59:23:EE:EB:29 X509v3 Authority Key Identifier: keyid:16:B5:64:B7:58:DF:CD:52:C5:CE:89:11:92:E3:1B:71:5B:1C:BF:E8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CF4FE/BA13124E1D8511E2A77999DC08B02CD2/FrVkt1jfzVLFzokRkuMbcVscv-g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FrVkt1jfzVLFzokRkuMbcVscv-g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CF4FE/BA13124E1D8511E2A77999DC08B02CD2/FrVkt1jfzVLFzokRkuMbcVscv-g.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 16:cd:0f:6a:c4:b1:d3:cc:2f:3a:89:25:a8:17:5f:26:3c:f8: 47:6a:70:e9:e5:df:53:ba:48:52:b7:1d:4d:97:b2:40:90:d2: 9e:96:dd:e6:30:a4:c8:41:7c:65:08:f2:b2:6e:ab:54:81:64: 98:8e:e7:5b:4f:ae:20:cf:26:90:b1:b6:79:71:8e:22:45:ea: 66:7e:54:15:dc:4a:ad:69:ea:54:f5:20:96:5a:25:b5:93:3f: ff:93:27:fe:9c:d7:90:d8:30:20:79:92:eb:89:b1:c1:bc:f5: bf:5c:67:ea:e4:69:d4:01:55:15:34:94:8d:75:76:02:94:3d: 64:10:8c:41:34:7c:f1:5f:c0:02:67:9c:65:c2:4f:43:ed:24: c6:1b:6c:c1:cc:d5:16:2d:2d:c1:72:8c:19:ce:ce:d0:70:54: 5a:35:af:4b:8d:df:01:a4:58:ca:c0:af:07:c4:96:7e:84:ff: 85:07:5c:e9:ba:93:41:fa:b6:11:45:df:4c:c6:07:8f:13:32: 4f:d7:0d:5f:30:02:7b:e4:d2:38:64:51:70:ad:50:73:c8:78: cb:02:2e:db:6f:18:46:1b:80:5c:23:71:bc:be:72:e7:ec:63: 04:1d:78:bf:b1:e7:7e:a3:06:11:37:ed:44:bc:1a:f8:e3:82: 69:e2:ef:5d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNX4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0Y0RkUxMTAvBgNVBAUTKDE2QjU2NEI3NThERkNENTJDNUNFODkxMTkyRTMxQjcx NUIxQ0JGRTgwHhcNMjUxMTA0MTQyNzI4WhcNMjUxMTExMTQyNzI4WjAYMRYwFAYD VQQDEw02OTBhMGQ1MS1kMGU2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsm6iAXdG7j+D8EhZXhOHMKLCskBu0BlVsnq7zXuWZUHXDd06knQBgArVx4TP wljfoyVsWDAVRm/uc3myq2T6WeeUHG0njlmKCvbeYIxyu31o8gu7U67X32Hubous N/OXVixr68nnY58rsPZnOg7MOnQrwLmwYojfdtxIZ74N1cXdT6wM1kZbqF7lJJ8r 6PhCuVDA5fGzNoXdpaZowo9dfMJ75Eo9fd8ako2++1ocqsTcBExlt2Rq3zPkx+16 FsBMgx7Noi6INbTNpfW5MqqetyxYmwPr27b0gc4LHko2YEvd1lMTCQEQLM0GirWN 6IP/JC1mQi4IL6tORhSKxbZgDQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLW5cjv+ 1LQR0xfxYRr2slkj7uspMB8GA1UdIwQYMBaAFBa1ZLdY381Sxc6JEZLjG3FbHL/o MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRjRGRS9CQTEzMTI0RTFE ODUxMUUyQTc3OTk5REMwOEIwMkNEMi9GclZrdDFqZnpWTEZ6b2tSa3VNYmNWc2N2 LWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZyVmt0MWpmelZMRnpva1JrdU1iY1ZzY3YtZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RjRGRS9CQTEzMTI0RTFEODUxMUUyQTc3OTk5REMwOEIwMkNEMi9GclZrdDFqZnpW TEZ6b2tSa3VNYmNWc2N2LWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAWzQ9qxLHTzC86iSWoF18mPPhHanDp5d9TukhStx1Nl7JAkNKelt3m MKTIQXxlCPKybqtUgWSYjudbT64gzyaQsbZ5cY4iRepmflQV3EqtaepU9SCWWiW1 kz//kyf+nNeQ2DAgeZLribHBvPW/XGfq5GnUAVUVNJSNdXYClD1kEIxBNHzxX8AC Z5xlwk9D7STGG2zBzNUWLS3BcowZzs7QcFRaNa9Ljd8BpFjKwK8HxJZ+hP+FB1zp upNB+rYRRd9MxgePEzJP1w1fMAJ75NI4ZFFwrVBzyHjLAi7bbxhGG4BcI3G8vnLn 7GMEHXi/sed+owYRN+1EvBr444Jp4u9d -----END CERTIFICATE-----Generated at Wed Nov 5 11:45:07 2025 by rpki-client