$ rpki-client -vvf rpki.apnic.net/member_repository/A91B777C/6CD8133CB2DA11EB8B384A60C4F9AE02/frs7Qcl_MxP654HvYzI8SvYrj7c.mft File: frs7Qcl_MxP654HvYzI8SvYrj7c.mft (raw, json) Hash identifier: p60Pxy10MVEEsXjYV1XMqVwHoMN4obLJV5+5GC0hnys= Subject key identifier: A6:2E:2D:3F:ED:BA:07:4B:43:18:21:26:44:38:22:FD:43:DF:EE:33 Authority key identifier: 7E:BB:3B:41:C9:7F:33:13:FA:E7:81:EF:63:32:3C:4A:F6:2B:8F:B7 Certificate issuer: /CN=A91B777C/serialNumber=7EBB3B41C97F3313FAE781EF63323C4AF62B8FB7 Certificate serial: 060D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/frs7Qcl_MxP654HvYzI8SvYrj7c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B777C/6CD8133CB2DA11EB8B384A60C4F9AE02/frs7Qcl_MxP654HvYzI8SvYrj7c.mft Manifest number: 0606 Signing time: Sun 20 Jul 2025 23:02:52 +0000 Manifest this update: Sun 20 Jul 2025 23:02:51 +0000 Manifest next update: Sun 27 Jul 2025 23:02:51 +0000 Files and hashes: 1: frs7Qcl_MxP654HvYzI8SvYrj7c.crl (hash: p6Wf7H+P2s0k4SCp3P4R50EOCynO3iIHrUi9o6TVLPw=) 2: 10BBF6CEB2E711EB8A61B44EC4F9AE02.roa (hash: 0y9VyknIsSUScmWS3621geMMX5dlAHgNZtNYOtKkDmI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B777C/6CD8133CB2DA11EB8B384A60C4F9AE02/frs7Qcl_MxP654HvYzI8SvYrj7c.crl rsync://rpki.apnic.net/member_repository/A91B777C/6CD8133CB2DA11EB8B384A60C4F9AE02/frs7Qcl_MxP654HvYzI8SvYrj7c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/frs7Qcl_MxP654HvYzI8SvYrj7c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Jul 2025 23:02:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1549 (0x60d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B777C, serialNumber=7EBB3B41C97F3313FAE781EF63323C4AF62B8FB7 Validity Not Before: Jul 20 23:02:51 2025 GMT Not After : Jul 27 23:02:51 2025 GMT Subject: CN=687d759c-16f1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:6e:ca:34:1a:c3:8c:60:c0:eb:b4:e6:e5:3a: b0:29:43:74:52:52:29:27:7e:3b:db:eb:07:89:8c: aa:45:71:8b:70:c2:41:2b:6f:b7:85:7c:72:3a:d2: f3:ca:d4:50:d6:ec:3f:92:65:a0:9d:9d:6c:52:16: 2e:85:43:31:0d:30:67:ad:fd:dc:37:6e:55:63:d1: 46:03:39:be:ee:3d:d5:13:17:6f:11:54:5c:5d:35: a1:91:d0:e2:b4:77:ea:14:bc:11:24:a2:62:ea:56: 89:05:34:02:08:84:8a:b5:10:9a:51:a8:34:65:b6: b6:95:ee:2f:af:eb:53:6c:ec:80:98:de:c2:90:1a: 2e:93:91:c7:99:f1:75:8e:00:4c:53:72:58:12:da: fe:2c:8a:4d:66:86:d3:8c:a0:c0:6a:d4:fc:18:41: 77:55:e9:db:9c:42:d1:65:02:4d:66:01:e9:d6:0b: 6f:d1:75:b7:b7:3f:d7:6b:0e:36:a6:ba:de:fa:49: 74:80:58:8b:f7:87:85:f2:ac:f5:e4:f1:0e:1a:a8: 98:9a:0f:3e:4e:80:ea:16:54:7a:9b:ce:e4:aa:8f: 32:0f:53:1a:c1:82:43:69:cf:e1:cb:e8:eb:ac:56: a2:bf:c8:72:87:21:5a:5d:79:ef:cc:39:25:a2:1a: 01:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:2E:2D:3F:ED:BA:07:4B:43:18:21:26:44:38:22:FD:43:DF:EE:33 X509v3 Authority Key Identifier: keyid:7E:BB:3B:41:C9:7F:33:13:FA:E7:81:EF:63:32:3C:4A:F6:2B:8F:B7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B777C/6CD8133CB2DA11EB8B384A60C4F9AE02/frs7Qcl_MxP654HvYzI8SvYrj7c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/frs7Qcl_MxP654HvYzI8SvYrj7c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B777C/6CD8133CB2DA11EB8B384A60C4F9AE02/frs7Qcl_MxP654HvYzI8SvYrj7c.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0d:9d:8b:a8:e9:1b:2d:78:78:f7:7f:f2:c5:c3:3e:06:1a:ca: 02:64:2f:67:a2:e6:8e:4d:1a:7b:94:45:af:3d:0d:81:59:ec: 69:fe:a5:aa:1a:ad:89:2d:42:70:09:89:87:ca:16:50:36:82: b4:a5:15:7a:a5:a1:82:f7:b2:ca:29:11:a8:32:06:83:a4:64: 8f:25:28:c0:eb:e8:aa:ce:42:cd:d7:ff:84:e1:b3:62:15:a2: cf:c8:b7:75:62:10:99:30:d7:67:e2:6d:8b:42:1b:b4:f9:f5: 37:4e:55:51:d6:27:0b:79:0d:7a:78:e4:51:cd:a5:12:c3:00: 23:06:53:b4:d3:7a:14:33:4d:25:21:b1:a7:19:1a:57:ee:f7: 3b:11:31:c2:b0:7a:97:51:25:e7:1b:36:3e:b6:84:fa:fd:55: 1b:92:8e:b6:65:c1:f4:05:2c:21:ff:ee:1d:1f:f2:7b:a2:84: b7:7a:0e:fa:e4:fc:fc:92:7e:31:c0:99:33:35:d9:e6:3b:ac: dc:91:0b:58:26:58:7b:49:31:99:5e:91:19:df:56:5b:97:e7: 34:2b:46:32:74:97:21:68:8a:b2:4a:13:1d:3d:45:e4:73:a6: 9c:05:77:b7:7c:04:e2:cd:e0:52:3c:10:9c:0c:46:7f:1e:e5: 45:c5:b8:e8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBg0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Qjc3N0MxMTAvBgNVBAUTKDdFQkIzQjQxQzk3RjMzMTNGQUU3ODFFRjYzMzIzQzRB RjYyQjhGQjcwHhcNMjUwNzIwMjMwMjUxWhcNMjUwNzI3MjMwMjUxWjAYMRYwFAYD VQQDEw02ODdkNzU5Yy0xNmYxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAum7KNBrDjGDA67Tm5TqwKUN0UlIpJ3472+sHiYyqRXGLcMJBK2+3hXxyOtLz ytRQ1uw/kmWgnZ1sUhYuhUMxDTBnrf3cN25VY9FGAzm+7j3VExdvEVRcXTWhkdDi tHfqFLwRJKJi6laJBTQCCISKtRCaUag0Zba2le4vr+tTbOyAmN7CkBouk5HHmfF1 jgBMU3JYEtr+LIpNZobTjKDAatT8GEF3VenbnELRZQJNZgHp1gtv0XW3tz/Xaw42 prre+kl0gFiL94eF8qz15PEOGqiYmg8+ToDqFlR6m87kqo8yD1MawYJDac/hy+jr rFaiv8hyhyFaXXnvzDklohoB4QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKYuLT/t ugdLQxghJkQ4Iv1D3+4zMB8GA1UdIwQYMBaAFH67O0HJfzMT+ueB72MyPEr2K4+3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNzc3Qy82Q0Q4MTMzQ0Iy REExMUVCOEIzODRBNjBDNEY5QUUwMi9mcnM3UWNsX014UDY1NEh2WXpJOFN2WXJq N2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ZyczdRY2xfTXhQNjU0SHZZekk4U3ZZcmo3Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC Nzc3Qy82Q0Q4MTMzQ0IyREExMUVCOEIzODRBNjBDNEY5QUUwMi9mcnM3UWNsX014 UDY1NEh2WXpJOFN2WXJqN2MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQANnYuo6RsteHj3f/LFwz4GGsoCZC9nouaOTRp7lEWvPQ2BWexp/qWq Gq2JLUJwCYmHyhZQNoK0pRV6paGC97LKKRGoMgaDpGSPJSjA6+iqzkLN1/+E4bNi FaLPyLd1YhCZMNdn4m2LQhu0+fU3TlVR1icLeQ16eORRzaUSwwAjBlO003oUM00l IbGnGRpX7vc7ETHCsHqXUSXnGzY+toT6/VUbko62ZcH0BSwh/+4dH/J7ooS3eg76 5Pz8kn4xwJkzNdnmO6zckQtYJlh7STGZXpEZ31Zbl+c0K0YydJchaIqyShMdPUXk c6acBXe3fATizeBSPBCcDEZ/HuVFxbjo -----END CERTIFICATE-----Generated at Mon Jul 21 08:04:59 2025 by rpki-client