$ rpki-client -vvf rpki.apnic.net/member_repository/A91CF4FE/BA13124E1D8511E2A77999DC08B02CD2/FrVkt1jfzVLFzokRkuMbcVscv-g.mft File: FrVkt1jfzVLFzokRkuMbcVscv-g.mft (raw, json) Hash identifier: DNfIjlAEcNfoCs9H4rPvY3DZfawFmIC7aP/7FA+MPK0= Subject key identifier: 39:7E:03:3D:81:05:B6:9E:04:1E:D5:8C:7F:B5:39:DA:D2:2D:A3:C3 Authority key identifier: 16:B5:64:B7:58:DF:CD:52:C5:CE:89:11:92:E3:1B:71:5B:1C:BF:E8 Certificate issuer: /CN=A91CF4FE/serialNumber=16B564B758DFCD52C5CE891192E31B715B1CBFE8 Certificate serial: 355E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FrVkt1jfzVLFzokRkuMbcVscv-g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CF4FE/BA13124E1D8511E2A77999DC08B02CD2/FrVkt1jfzVLFzokRkuMbcVscv-g.mft Manifest number: 3509 Signing time: Thu 04 Sep 2025 14:26:19 +0000 Manifest this update: Thu 04 Sep 2025 14:26:19 +0000 Manifest next update: Thu 11 Sep 2025 14:26:19 +0000 Files and hashes: 1: FrVkt1jfzVLFzokRkuMbcVscv-g.crl (hash: WmlidpGlbzZ01swyfF5SxMPGm/43fYjBq91VPTMrA9o=) 2: 10DAE05EB04811EABB4AEF61C4F9AE02.roa (hash: bPtENJEcOoeg2k8xe2jWRrY5UKQvlUbjR5xndoVRe10=) 3: 40DFD5AC650711EFB94FD44FC4F9AE02.roa (hash: zawwiUMAVIdG2bykFeNbnA88n/1gVRjEvWeHRre2uoI=) 4: F6FAB490BB5811EF8C37CB81C4F9AE02.roa (hash: 4h0iDWjsfa7NDKLfke8j7fgE3a1MCnkylqCcKoNifz0=) 5: 534379FCEE1611ECA6DE1824C4F9AE02.roa (hash: IzD5q2GzmuV18q1dnBjmacTQl4qcdKe2UsljJfilqlM=) 6: 5F22E1129B3011EF952F2762C4F9AE02.roa (hash: qTYeOx6pg1ogjikS/4HOIDZ4QqzqAPHZTv7DK6zo/c4=) 7: 427BAA66E23211E8BD132210C4F9AE02.roa (hash: h82lo/wGrqpMf7HWVtsO8+F8lE20C+ULtc+zbWn4ALA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CF4FE/BA13124E1D8511E2A77999DC08B02CD2/FrVkt1jfzVLFzokRkuMbcVscv-g.crl rsync://rpki.apnic.net/member_repository/A91CF4FE/BA13124E1D8511E2A77999DC08B02CD2/FrVkt1jfzVLFzokRkuMbcVscv-g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FrVkt1jfzVLFzokRkuMbcVscv-g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 11 Sep 2025 14:26:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13662 (0x355e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CF4FE, serialNumber=16B564B758DFCD52C5CE891192E31B715B1CBFE8 Validity Not Before: Sep 4 14:26:19 2025 GMT Not After : Sep 11 14:26:19 2025 GMT Subject: CN=68b9a18b-e0e6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:c9:74:2e:e9:07:8c:ec:c7:3b:4c:a8:76:0f: 87:11:b5:6d:53:ef:c6:af:32:17:9f:b1:91:6b:ba: 7c:1e:8b:a8:77:fa:86:76:29:1c:4b:b6:d6:b7:9b: 46:3b:23:bd:88:e4:4a:76:93:55:0c:f8:68:47:be: f6:5d:54:d2:ce:a3:3d:d6:e9:c1:b6:4d:1e:84:f9: 34:a5:5b:4a:b8:17:b5:47:19:00:65:ac:e3:6e:28: bf:c2:29:d9:3b:11:a2:f4:3c:46:9f:4f:1b:60:63: c2:01:8d:e0:34:e7:2a:ae:e7:f4:0e:fc:e3:04:8f: 2b:2b:22:a8:3d:d0:a0:69:40:be:b7:aa:39:e6:ba: 27:23:53:b8:e2:b9:39:0e:b5:b0:5e:19:15:cd:cd: 67:0f:70:0c:67:e6:13:c8:fa:85:bc:4f:3e:6a:aa: 07:e8:de:70:44:94:ed:3e:98:b2:ae:f7:f3:bf:59: 13:8f:de:4b:cd:28:2d:9f:14:ad:f0:f6:ee:e8:f2: 90:b2:95:da:39:6e:cc:7b:e7:00:b7:61:66:4b:de: c9:48:5f:34:f2:a9:be:3f:5d:69:72:9c:2f:d6:c8: f9:8b:e1:ff:ec:d3:68:f1:ee:be:38:10:e9:b9:b7: 00:3a:62:db:d1:fc:14:a5:ca:e0:50:f9:5a:37:72: 54:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:7E:03:3D:81:05:B6:9E:04:1E:D5:8C:7F:B5:39:DA:D2:2D:A3:C3 X509v3 Authority Key Identifier: keyid:16:B5:64:B7:58:DF:CD:52:C5:CE:89:11:92:E3:1B:71:5B:1C:BF:E8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CF4FE/BA13124E1D8511E2A77999DC08B02CD2/FrVkt1jfzVLFzokRkuMbcVscv-g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FrVkt1jfzVLFzokRkuMbcVscv-g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CF4FE/BA13124E1D8511E2A77999DC08B02CD2/FrVkt1jfzVLFzokRkuMbcVscv-g.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0f:e1:29:c3:a6:bd:bc:ea:b9:10:b8:fa:68:2c:51:a7:47:d0: b4:e3:2f:41:6d:b8:46:cd:8e:df:de:7c:d3:3e:49:77:ca:e1: 57:5f:b8:30:7e:43:23:bb:e9:3f:b9:a6:0a:05:62:be:c6:19: 50:cb:ac:0d:ac:ce:81:83:64:61:2e:84:3a:2c:89:c2:ad:07: 55:13:3e:2c:7c:ee:af:08:39:25:21:c2:e3:98:13:69:02:f0: 49:d8:02:c2:42:ff:04:38:c8:cd:a8:7a:7b:58:66:b0:6e:03: 05:56:9c:e4:b9:d1:91:8b:0c:33:17:97:a4:3e:a2:d6:aa:fd: 6d:c6:89:64:5b:9d:c8:25:5f:73:f2:0e:32:16:b0:42:fd:fc: 2c:92:25:45:95:0e:1f:93:6d:1b:f9:21:42:48:6d:d7:14:59: 5b:f2:08:e3:77:9d:d1:7d:4b:21:f4:95:f6:9b:ad:40:03:51: 46:96:85:3c:e5:d8:e4:60:49:f7:84:7f:29:ba:ae:e8:ff:cd: ea:7d:ae:e2:96:a2:96:74:7e:9e:ad:8b:02:c4:07:c3:03:f3: bc:5c:ad:40:88:c9:1c:43:50:5e:53:7c:b6:3b:5f:e9:d7:2b: 4c:70:98:6b:1b:b8:0b:05:68:0f:40:81:8c:4d:06:e7:e8:8c: d4:f8:d4:1a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNV4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0Y0RkUxMTAvBgNVBAUTKDE2QjU2NEI3NThERkNENTJDNUNFODkxMTkyRTMxQjcx NUIxQ0JGRTgwHhcNMjUwOTA0MTQyNjE5WhcNMjUwOTExMTQyNjE5WjAYMRYwFAYD VQQDEw02OGI5YTE4Yi1lMGU2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAm8l0LukHjOzHO0yodg+HEbVtU+/GrzIXn7GRa7p8Houod/qGdikcS7bWt5tG OyO9iORKdpNVDPhoR772XVTSzqM91unBtk0ehPk0pVtKuBe1RxkAZazjbii/winZ OxGi9DxGn08bYGPCAY3gNOcqruf0DvzjBI8rKyKoPdCgaUC+t6o55ronI1O44rk5 DrWwXhkVzc1nD3AMZ+YTyPqFvE8+aqoH6N5wRJTtPpiyrvfzv1kTj95LzSgtnxSt 8Pbu6PKQspXaOW7Me+cAt2FmS97JSF808qm+P11pcpwv1sj5i+H/7NNo8e6+OBDp ubcAOmLb0fwUpcrgUPlaN3JUPwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDl+Az2B BbaeBB7VjH+1OdrSLaPDMB8GA1UdIwQYMBaAFBa1ZLdY381Sxc6JEZLjG3FbHL/o MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRjRGRS9CQTEzMTI0RTFE ODUxMUUyQTc3OTk5REMwOEIwMkNEMi9GclZrdDFqZnpWTEZ6b2tSa3VNYmNWc2N2 LWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZyVmt0MWpmelZMRnpva1JrdU1iY1ZzY3YtZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RjRGRS9CQTEzMTI0RTFEODUxMUUyQTc3OTk5REMwOEIwMkNEMi9GclZrdDFqZnpW TEZ6b2tSa3VNYmNWc2N2LWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAP4SnDpr286rkQuPpoLFGnR9C04y9BbbhGzY7f3nzTPkl3yuFXX7gw fkMju+k/uaYKBWK+xhlQy6wNrM6Bg2RhLoQ6LInCrQdVEz4sfO6vCDklIcLjmBNp AvBJ2ALCQv8EOMjNqHp7WGawbgMFVpzkudGRiwwzF5ekPqLWqv1txolkW53IJV9z 8g4yFrBC/fwskiVFlQ4fk20b+SFCSG3XFFlb8gjjd53RfUsh9JX2m61AA1FGloU8 5djkYEn3hH8puq7o/83qfa7ilqKWdH6erYsCxAfDA/O8XK1AiMkcQ1BeU3y2O1/p 1ytMcJhrG7gLBWgPQIGMTQbn6IzU+NQa -----END CERTIFICATE-----Generated at Sat Sep 6 12:06:28 2025 by rpki-client