$ rpki-client -vvf rpki.apnic.net/member_repository/A91B777C/6CD8133CB2DA11EB8B384A60C4F9AE02/frs7Qcl_MxP654HvYzI8SvYrj7c.mft File: frs7Qcl_MxP654HvYzI8SvYrj7c.mft (raw, json) Hash identifier: slHIG2W97dGclpWCPFdGgP60cZWuzHTnknO+h4jwT5U= Subject key identifier: F4:08:AF:79:6E:36:B2:09:A9:B8:8F:29:DC:92:87:38:A1:60:DE:D9 Authority key identifier: 7E:BB:3B:41:C9:7F:33:13:FA:E7:81:EF:63:32:3C:4A:F6:2B:8F:B7 Certificate issuer: /CN=A91B777C/serialNumber=7EBB3B41C97F3313FAE781EF63323C4AF62B8FB7 Certificate serial: 0626 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/frs7Qcl_MxP654HvYzI8SvYrj7c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B777C/6CD8133CB2DA11EB8B384A60C4F9AE02/frs7Qcl_MxP654HvYzI8SvYrj7c.mft Manifest number: 061F Signing time: Sat 06 Sep 2025 23:06:56 +0000 Manifest this update: Sat 06 Sep 2025 23:06:56 +0000 Manifest next update: Sat 13 Sep 2025 23:06:56 +0000 Files and hashes: 1: frs7Qcl_MxP654HvYzI8SvYrj7c.crl (hash: LZdw/J3duHg8XFSKnmi9RDpK9+JGIq066Oule+jy5eo=) 2: 10BBF6CEB2E711EB8A61B44EC4F9AE02.roa (hash: 0y9VyknIsSUScmWS3621geMMX5dlAHgNZtNYOtKkDmI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B777C/6CD8133CB2DA11EB8B384A60C4F9AE02/frs7Qcl_MxP654HvYzI8SvYrj7c.crl rsync://rpki.apnic.net/member_repository/A91B777C/6CD8133CB2DA11EB8B384A60C4F9AE02/frs7Qcl_MxP654HvYzI8SvYrj7c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/frs7Qcl_MxP654HvYzI8SvYrj7c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Sep 2025 23:06:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1574 (0x626) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B777C, serialNumber=7EBB3B41C97F3313FAE781EF63323C4AF62B8FB7 Validity Not Before: Sep 6 23:06:56 2025 GMT Not After : Sep 13 23:06:56 2025 GMT Subject: CN=68bcbe90-0361 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:c9:84:fe:68:f9:e4:eb:18:ec:b4:0c:2a:37: 92:3c:9b:05:c1:fc:46:26:8c:b8:aa:f4:7e:cf:eb: 23:7e:ce:a2:3c:90:df:34:40:f9:24:9d:c8:11:4e: 45:92:5b:57:76:ef:fc:80:1c:3b:27:0b:86:fb:9c: 98:9c:37:60:fd:af:e8:ae:7b:3a:d6:26:6d:fb:d0: 8b:ec:48:4c:fe:b5:43:42:65:fb:04:33:04:6e:ef: 79:0f:20:65:fe:a2:22:86:b4:3d:be:a9:34:6f:fe: 70:d8:88:2e:1a:0b:7a:31:ce:50:77:db:73:80:ac: 78:32:92:df:13:42:1c:8a:51:50:06:38:e6:52:ab: 6c:1b:d5:2c:85:07:28:e9:4d:74:1b:98:15:66:b7: c4:19:0b:ce:10:b8:9b:62:ad:c1:04:82:9c:b3:18: e3:f3:9e:50:ab:b7:1b:86:7f:af:2b:c0:15:3a:b9: b1:47:62:86:f4:14:e8:0c:fb:16:61:71:ae:f4:ec: 76:39:31:23:a6:85:6b:57:08:c4:25:9c:37:21:5f: 95:a8:9f:dd:47:66:b2:44:76:27:92:f7:32:05:d0: e2:83:f4:51:3a:af:aa:86:e8:a5:7b:44:61:84:8e: a8:f8:49:a2:a6:4c:23:ca:91:9c:e5:02:1d:c7:7e: 1b:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:08:AF:79:6E:36:B2:09:A9:B8:8F:29:DC:92:87:38:A1:60:DE:D9 X509v3 Authority Key Identifier: keyid:7E:BB:3B:41:C9:7F:33:13:FA:E7:81:EF:63:32:3C:4A:F6:2B:8F:B7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B777C/6CD8133CB2DA11EB8B384A60C4F9AE02/frs7Qcl_MxP654HvYzI8SvYrj7c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/frs7Qcl_MxP654HvYzI8SvYrj7c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B777C/6CD8133CB2DA11EB8B384A60C4F9AE02/frs7Qcl_MxP654HvYzI8SvYrj7c.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 27:9a:ac:af:40:e8:1c:3b:8e:04:b1:28:8d:0e:b1:5b:15:1a: 1f:c9:dc:c7:8f:28:fb:84:93:81:35:84:ac:83:ae:41:5c:4a: be:3d:bc:d9:1f:89:b2:9f:b5:fe:23:64:35:cf:b6:20:5a:9f: 26:2b:77:9c:a2:20:9d:e8:a7:0c:b6:81:6e:46:60:2e:a6:8a: 89:72:c5:a3:93:62:ca:7b:ea:c0:2c:c1:60:70:5b:e0:de:95: bd:03:f9:9a:3d:1b:c3:fa:20:f1:60:d3:67:a2:d9:78:90:b6: 54:78:3f:db:66:8b:8d:46:24:94:37:7f:61:78:c9:59:d3:63: a2:08:2e:52:8a:c7:b4:67:a6:53:f9:78:6a:46:ca:ea:28:6f: e0:44:28:74:29:1e:a7:8d:e1:22:e0:16:97:09:8e:48:16:32: 75:ea:b6:76:0c:8a:82:4f:f9:c8:e9:68:10:84:13:89:4c:2d: 54:32:46:88:76:df:65:f8:3d:01:27:cb:17:50:71:eb:e1:d3: 28:c8:5b:b6:1c:ad:c5:60:49:17:ec:0d:5a:2e:83:8d:0f:fb: ba:1d:cb:3d:f5:d1:51:d8:53:c8:2f:b1:32:81:eb:0d:53:c6: e5:e6:6e:e2:b5:2f:89:1d:3c:39:bd:74:ec:18:da:ba:8d:15: 34:5e:5e:b5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBiYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Qjc3N0MxMTAvBgNVBAUTKDdFQkIzQjQxQzk3RjMzMTNGQUU3ODFFRjYzMzIzQzRB RjYyQjhGQjcwHhcNMjUwOTA2MjMwNjU2WhcNMjUwOTEzMjMwNjU2WjAYMRYwFAYD VQQDEw02OGJjYmU5MC0wMzYxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAz8mE/mj55OsY7LQMKjeSPJsFwfxGJoy4qvR+z+sjfs6iPJDfNED5JJ3IEU5F kltXdu/8gBw7JwuG+5yYnDdg/a/orns61iZt+9CL7EhM/rVDQmX7BDMEbu95DyBl /qIihrQ9vqk0b/5w2IguGgt6Mc5Qd9tzgKx4MpLfE0IcilFQBjjmUqtsG9UshQco 6U10G5gVZrfEGQvOELibYq3BBIKcsxjj855Qq7cbhn+vK8AVOrmxR2KG9BToDPsW YXGu9Ox2OTEjpoVrVwjEJZw3IV+VqJ/dR2ayRHYnkvcyBdDig/RROq+qhuile0Rh hI6o+EmipkwjypGc5QIdx34bSQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPQIr3lu NrIJqbiPKdyShzihYN7ZMB8GA1UdIwQYMBaAFH67O0HJfzMT+ueB72MyPEr2K4+3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNzc3Qy82Q0Q4MTMzQ0Iy REExMUVCOEIzODRBNjBDNEY5QUUwMi9mcnM3UWNsX014UDY1NEh2WXpJOFN2WXJq N2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ZyczdRY2xfTXhQNjU0SHZZekk4U3ZZcmo3Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC Nzc3Qy82Q0Q4MTMzQ0IyREExMUVCOEIzODRBNjBDNEY5QUUwMi9mcnM3UWNsX014 UDY1NEh2WXpJOFN2WXJqN2MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAnmqyvQOgcO44EsSiNDrFbFRofydzHjyj7hJOBNYSsg65BXEq+PbzZ H4myn7X+I2Q1z7YgWp8mK3ecoiCd6KcMtoFuRmAupoqJcsWjk2LKe+rALMFgcFvg 3pW9A/maPRvD+iDxYNNnotl4kLZUeD/bZouNRiSUN39heMlZ02OiCC5Sise0Z6ZT +XhqRsrqKG/gRCh0KR6njeEi4BaXCY5IFjJ16rZ2DIqCT/nI6WgQhBOJTC1UMkaI dt9l+D0BJ8sXUHHr4dMoyFu2HK3FYEkX7A1aLoOND/u6Hcs99dFR2FPIL7EygesN U8bl5m7itS+JHTw5vXTsGNq6jRU0Xl61 -----END CERTIFICATE-----Generated at Mon Sep 8 08:47:56 2025 by rpki-client