$ rpki-client -vvf rpki.apnic.net/member_repository/A91B7770/E6810410C0AE11EAB95AB572C4F9AE02/fVVGmSbR-TTzrylkXrbBC7YGm8k.mft File: fVVGmSbR-TTzrylkXrbBC7YGm8k.mft (raw, json) Hash identifier: tOwPImoKxTy2+OSrFQEmVRZSfqn1Oufj2DlQAgM+Tzw= Subject key identifier: 6A:04:74:51:63:D1:9F:F5:36:56:56:5B:4B:F4:B6:BF:50:D7:C4:97 Authority key identifier: 7D:55:46:99:26:D1:F9:34:F3:AF:29:64:5E:B6:C1:0B:B6:06:9B:C9 Certificate issuer: /CN=A91B7770/serialNumber=7D55469926D1F934F3AF29645EB6C10BB6069BC9 Certificate serial: 0997 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fVVGmSbR-TTzrylkXrbBC7YGm8k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B7770/E6810410C0AE11EAB95AB572C4F9AE02/fVVGmSbR-TTzrylkXrbBC7YGm8k.mft Manifest number: 092A Signing time: Sat 06 Sep 2025 20:42:31 +0000 Manifest this update: Sat 06 Sep 2025 20:42:31 +0000 Manifest next update: Sat 13 Sep 2025 20:42:31 +0000 Files and hashes: 1: fVVGmSbR-TTzrylkXrbBC7YGm8k.crl (hash: qTS5Ym4gIpq/ikJWIEzY2L9GPVcPx7rL5uCOx4u82j0=) 2: 49E75ECAD66F11EF8C443287C4F9AE02.roa (hash: 6eLBLTiRLG59b19Vh6VakQSbL4yifX/0CdBZxWB4WEY=) 3: 501941C093F211EEA029A113C4F9AE02.roa (hash: FhESrn/DCqUnNSrnrcCxTem1wxJCB6TNgEsA8vGhFD0=) 4: 8DA3D4E03F7E11F0B8EF8F28C4F9AE02.roa (hash: /znaKV3KjWiiYiywi65esGpUip1B0gcKXgL7UimYW5U=) 5: 781C64FAF58611ED89273159C4F9AE02.roa (hash: lwV/ynteCUHJi+p3z2mrWfc4T5PCrXOSxxmLmNk4dP0=) 6: FECBA2C23B2611EFAF167E83C4F9AE02.roa (hash: Y7HIfK+dgei476aRla7phi/541mDTNFxZ1eh4K1sDYk=) 7: 9672E862793811EE92C54834C4F9AE02.roa (hash: UGwpdFjyj5op9VWtjdDebDyJLyb7++gFQLq7ibC5Zo8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B7770/E6810410C0AE11EAB95AB572C4F9AE02/fVVGmSbR-TTzrylkXrbBC7YGm8k.crl rsync://rpki.apnic.net/member_repository/A91B7770/E6810410C0AE11EAB95AB572C4F9AE02/fVVGmSbR-TTzrylkXrbBC7YGm8k.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fVVGmSbR-TTzrylkXrbBC7YGm8k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Sep 2025 20:42:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2455 (0x997) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B7770, serialNumber=7D55469926D1F934F3AF29645EB6C10BB6069BC9 Validity Not Before: Sep 6 20:42:31 2025 GMT Not After : Sep 13 20:42:31 2025 GMT Subject: CN=68bc9cb7-1387 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:a0:79:d0:0a:6c:0a:d7:c9:05:99:fc:a8:c5: e4:04:5a:74:1c:07:fc:4a:ae:aa:e7:7f:54:95:71: 1f:87:b3:09:cc:63:c6:26:db:74:35:70:fe:de:8d: 4a:fb:df:f1:e5:81:fe:77:fc:cb:3c:e0:f1:ff:4e: e1:90:76:e3:0a:99:3b:17:8b:e0:59:d3:97:3f:12: 76:e1:a0:a5:c9:f2:5b:51:37:87:ca:2c:89:85:34: 78:19:82:d7:e8:07:b0:97:64:98:df:5c:4f:77:8a: 3c:d7:39:fb:7f:82:4b:27:5d:cc:fe:c1:0f:2e:e6: 9d:2c:67:2e:f5:7b:06:2b:24:c4:02:3c:c7:a7:7b: c7:ac:43:46:33:15:27:88:a6:a9:47:23:85:cf:c2: 6f:ce:24:b1:4b:44:e8:72:e1:fd:9d:ae:7c:d2:09: 99:d6:69:5f:b5:27:7a:af:6b:0e:5f:81:44:4a:c4: 06:ea:f5:16:63:e2:f7:ca:a0:2f:6e:43:00:cd:ad: 4c:bb:69:c7:92:a7:04:b2:f9:6f:9a:3a:54:e2:78: 76:41:83:6d:b1:ab:16:7e:0d:45:59:06:35:b4:7a: 93:dd:6f:b3:ca:94:8d:78:fe:a0:44:f3:53:14:a7: 33:21:78:7f:bf:da:77:35:43:0f:d0:c8:51:44:95: ff:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:04:74:51:63:D1:9F:F5:36:56:56:5B:4B:F4:B6:BF:50:D7:C4:97 X509v3 Authority Key Identifier: keyid:7D:55:46:99:26:D1:F9:34:F3:AF:29:64:5E:B6:C1:0B:B6:06:9B:C9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B7770/E6810410C0AE11EAB95AB572C4F9AE02/fVVGmSbR-TTzrylkXrbBC7YGm8k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fVVGmSbR-TTzrylkXrbBC7YGm8k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B7770/E6810410C0AE11EAB95AB572C4F9AE02/fVVGmSbR-TTzrylkXrbBC7YGm8k.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 43:17:2d:00:e9:cf:a6:fe:38:f5:49:ea:ef:63:3b:80:28:5a: 76:06:bd:d6:ab:73:02:24:61:6d:eb:d4:68:e5:96:bb:33:b8: 1e:93:37:da:ec:21:4c:86:66:91:05:e9:c6:a9:74:81:3c:ea: c9:a5:e3:7d:09:f8:3c:d8:a6:2a:62:0e:c1:69:a1:e9:d5:be: f2:3e:f6:7f:cd:87:4e:f3:bb:d1:43:17:79:ab:2f:c1:04:dc: cc:29:15:3a:25:b6:d7:bd:13:24:3d:87:cd:d3:9d:01:9d:0f: b8:ea:d4:7a:99:3f:52:2d:08:00:41:9f:1d:fe:3c:72:ff:18: d8:5d:bb:e5:7f:86:e8:f2:5e:cf:a5:2e:fd:ad:5f:c6:84:4e: c3:3b:c4:ac:86:b5:d9:9a:80:8e:8b:18:ab:16:d2:0c:6c:55: 11:54:ed:ca:df:6b:ae:20:ae:94:ea:b1:31:6a:54:cb:29:66: 4b:a8:c5:48:cf:5e:d8:08:5c:fa:bc:12:98:46:71:e7:26:e7: 6a:87:a0:88:8c:64:6c:7f:7e:b8:b6:b2:2f:e0:0e:c4:af:5c: 8c:91:0e:21:4d:cd:84:9c:37:fa:2f:12:d0:9c:91:e6:b9:04: 9a:e0:7e:12:c2:63:12:33:bc:f2:61:a9:e8:0f:a3:6f:0c:71: b0:64:5d:37 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCZcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Qjc3NzAxMTAvBgNVBAUTKDdENTU0Njk5MjZEMUY5MzRGM0FGMjk2NDVFQjZDMTBC QjYwNjlCQzkwHhcNMjUwOTA2MjA0MjMxWhcNMjUwOTEzMjA0MjMxWjAYMRYwFAYD VQQDEw02OGJjOWNiNy0xMzg3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1KB50ApsCtfJBZn8qMXkBFp0HAf8Sq6q539UlXEfh7MJzGPGJtt0NXD+3o1K +9/x5YH+d/zLPODx/07hkHbjCpk7F4vgWdOXPxJ24aClyfJbUTeHyiyJhTR4GYLX 6Aewl2SY31xPd4o81zn7f4JLJ13M/sEPLuadLGcu9XsGKyTEAjzHp3vHrENGMxUn iKapRyOFz8JvziSxS0TocuH9na580gmZ1mlftSd6r2sOX4FESsQG6vUWY+L3yqAv bkMAza1Mu2nHkqcEsvlvmjpU4nh2QYNtsasWfg1FWQY1tHqT3W+zypSNeP6gRPNT FKczIXh/v9p3NUMP0MhRRJX/gwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGoEdFFj 0Z/1NlZWW0v0tr9Q18SXMB8GA1UdIwQYMBaAFH1VRpkm0fk0868pZF62wQu2BpvJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNzc3MC9FNjgxMDQxMEMw QUUxMUVBQjk1QUI1NzJDNEY5QUUwMi9mVlZHbVNiUi1UVHpyeWxrWHJiQkM3WUdt OGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ZWVkdtU2JSLVRUenJ5bGtYcmJCQzdZR204ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC Nzc3MC9FNjgxMDQxMEMwQUUxMUVBQjk1QUI1NzJDNEY5QUUwMi9mVlZHbVNiUi1U VHpyeWxrWHJiQkM3WUdtOGsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBDFy0A6c+m/jj1ServYzuAKFp2Br3Wq3MCJGFt69Ro5Za7M7gekzfa 7CFMhmaRBenGqXSBPOrJpeN9Cfg82KYqYg7BaaHp1b7yPvZ/zYdO87vRQxd5qy/B BNzMKRU6JbbXvRMkPYfN050BnQ+46tR6mT9SLQgAQZ8d/jxy/xjYXbvlf4bo8l7P pS79rV/GhE7DO8SshrXZmoCOixirFtIMbFURVO3K32uuIK6U6rExalTLKWZLqMVI z17YCFz6vBKYRnHnJudqh6CIjGRsf364trIv4A7Er1yMkQ4hTc2EnDf6LxLQnJHm uQSa4H4SwmMSM7zyYanoD6NvDHGwZF03 -----END CERTIFICATE-----Generated at Mon Sep 8 12:11:16 2025 by rpki-client