$ rpki-client -vvf rpki.apnic.net/member_repository/A91CF4FE/BA13124E1D8511E2A77999DC08B02CD2/FrVkt1jfzVLFzokRkuMbcVscv-g.mft File: FrVkt1jfzVLFzokRkuMbcVscv-g.mft (raw, json) Hash identifier: NcjchVPMkcShOBhi7nxEazyN1CfLYnLFkkLPHj3ISU0= Subject key identifier: 15:28:23:C4:C5:D2:10:D6:19:05:48:00:D8:B0:F5:AA:53:AF:B9:F9 Authority key identifier: 16:B5:64:B7:58:DF:CD:52:C5:CE:89:11:92:E3:1B:71:5B:1C:BF:E8 Certificate issuer: /CN=A91CF4FE/serialNumber=16B564B758DFCD52C5CE891192E31B715B1CBFE8 Certificate serial: 3525 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FrVkt1jfzVLFzokRkuMbcVscv-g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CF4FE/BA13124E1D8511E2A77999DC08B02CD2/FrVkt1jfzVLFzokRkuMbcVscv-g.mft Manifest number: 34D6 Signing time: Sat 31 May 2025 14:25:50 +0000 Manifest this update: Sat 31 May 2025 14:25:50 +0000 Manifest next update: Sat 07 Jun 2025 14:25:50 +0000 Files and hashes: 1: FrVkt1jfzVLFzokRkuMbcVscv-g.crl (hash: 8qmEykkFbssSf7YzulC8Fhh2PqNT49V2kkZh+9csTS8=) 2: 10DAE05EB04811EABB4AEF61C4F9AE02.roa (hash: +b4JTzk5rUoiBhLUxnA3EW+SFsT+j/Ycd9v6oicmMdQ=) 3: 40DFD5AC650711EFB94FD44FC4F9AE02.roa (hash: 7lbO8FJw1G5XebxqgjyAycbRZnwkoSKxE4lbb1qM6S8=) 4: F6FAB490BB5811EF8C37CB81C4F9AE02.roa (hash: 8BNZKJ0bk38KOQOWjsH36VcnyN3HEx5P7NFwwrluJjM=) 5: 534379FCEE1611ECA6DE1824C4F9AE02.roa (hash: nz0TqyYIJbty+IiMMO1L40DQ1f9SJsrGYZW4STnoOWg=) 6: 5F22E1129B3011EF952F2762C4F9AE02.roa (hash: GzI1DKhtNKvZlRIctznDCQywZe9adFXYq+KIp89kCD4=) 7: 427BAA66E23211E8BD132210C4F9AE02.roa (hash: M3hgU5ipnFVKj6gek7MHkg0fz4T5KcW7+G9KqLsqkNs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CF4FE/BA13124E1D8511E2A77999DC08B02CD2/FrVkt1jfzVLFzokRkuMbcVscv-g.crl rsync://rpki.apnic.net/member_repository/A91CF4FE/BA13124E1D8511E2A77999DC08B02CD2/FrVkt1jfzVLFzokRkuMbcVscv-g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FrVkt1jfzVLFzokRkuMbcVscv-g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 14:25:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13605 (0x3525) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CF4FE, serialNumber=16B564B758DFCD52C5CE891192E31B715B1CBFE8 Validity Not Before: May 31 14:25:50 2025 GMT Not After : Jun 7 14:25:50 2025 GMT Subject: CN=683b116e-7a13 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:cf:58:1c:a9:7a:d2:50:1c:ca:cb:34:86:a7: 51:81:45:6f:a8:cb:2f:86:2e:a0:4b:dc:85:d7:28: a9:ea:f7:68:94:4d:37:46:42:24:59:81:44:8c:d2: b3:bf:72:48:83:de:9d:79:29:fb:72:5f:a1:40:9f: b5:aa:5d:36:65:ba:1c:23:e7:41:26:2a:14:2b:4e: 67:d6:a3:67:d7:c0:f1:b9:09:4c:a2:cc:94:28:4b: 4e:ec:ed:f5:24:e4:82:94:90:60:5f:cb:8c:66:98: 55:5c:23:fe:b7:6a:19:fe:ae:38:49:6b:d6:67:b6: c0:b9:d6:0c:d2:de:26:b7:00:60:1b:c5:d2:88:da: 16:13:72:2e:98:53:82:96:56:62:62:8d:17:72:65: e1:b6:16:5b:52:9f:d8:12:cf:e4:c3:14:f6:5f:f1: ba:f4:49:c3:9e:0c:6c:0e:d6:e0:1d:cf:00:a3:75: 55:9f:c8:cd:24:b5:ea:5b:15:1d:7e:ab:1f:f5:ce: cb:03:0a:bc:68:a4:da:b8:3d:ad:a8:50:49:8e:9f: 54:3f:7f:f8:8a:98:85:3a:a4:56:96:ba:fc:85:45: 60:7d:aa:1a:78:b1:f9:b4:c1:99:ce:7f:c0:18:1d: b5:ad:a0:77:03:c4:7e:a7:ec:e5:fc:a5:5a:86:5a: 18:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:28:23:C4:C5:D2:10:D6:19:05:48:00:D8:B0:F5:AA:53:AF:B9:F9 X509v3 Authority Key Identifier: keyid:16:B5:64:B7:58:DF:CD:52:C5:CE:89:11:92:E3:1B:71:5B:1C:BF:E8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CF4FE/BA13124E1D8511E2A77999DC08B02CD2/FrVkt1jfzVLFzokRkuMbcVscv-g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FrVkt1jfzVLFzokRkuMbcVscv-g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CF4FE/BA13124E1D8511E2A77999DC08B02CD2/FrVkt1jfzVLFzokRkuMbcVscv-g.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 81:33:38:72:e5:96:f2:48:ad:fa:9e:7d:fb:49:43:ef:6d:68: d1:11:b1:b6:61:65:09:04:a1:04:d6:a7:6c:e7:b5:ee:bd:d6: fc:d8:c3:a1:42:88:c6:8f:7d:76:a8:71:77:8a:1a:53:52:64: 67:2e:4d:a3:6f:ff:0f:57:8e:cb:5d:a5:c1:b5:b8:22:c0:fe: e0:f0:f8:a1:bc:a6:51:cd:4a:70:fe:55:28:58:b6:57:4d:3f: 36:17:6c:5d:44:5d:76:c7:ed:9c:3f:da:b9:03:05:c3:9d:d2: f1:42:d0:7a:1b:bd:9e:52:29:7f:5c:01:2a:56:6e:51:33:62: cc:b4:54:63:18:10:69:08:4b:cd:c2:f3:cc:73:5a:93:1a:d8: 84:a6:d3:3f:b3:28:84:db:66:56:5f:6e:32:f5:78:d4:0d:ca: 30:d6:72:34:56:16:dc:2f:68:6e:5e:37:35:fa:b8:e1:e4:fd: 52:74:28:07:e4:81:3c:ca:c3:2d:69:59:51:5b:62:bf:f5:ce: 6a:d0:9f:35:02:09:ea:73:9f:e1:83:a8:b1:0f:27:9d:2c:2e: d1:2a:b7:fd:3f:fa:19:95:7d:f9:9e:11:53:81:93:cb:6e:cc: 50:56:81:82:ea:a5:9f:e2:2d:a3:b6:ce:44:86:69:4f:5c:47: c6:17:7e:82 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNSUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0Y0RkUxMTAvBgNVBAUTKDE2QjU2NEI3NThERkNENTJDNUNFODkxMTkyRTMxQjcx NUIxQ0JGRTgwHhcNMjUwNTMxMTQyNTUwWhcNMjUwNjA3MTQyNTUwWjAYMRYwFAYD VQQDEw02ODNiMTE2ZS03YTEzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw89YHKl60lAcyss0hqdRgUVvqMsvhi6gS9yF1yip6vdolE03RkIkWYFEjNKz v3JIg96deSn7cl+hQJ+1ql02ZbocI+dBJioUK05n1qNn18DxuQlMosyUKEtO7O31 JOSClJBgX8uMZphVXCP+t2oZ/q44SWvWZ7bAudYM0t4mtwBgG8XSiNoWE3IumFOC llZiYo0XcmXhthZbUp/YEs/kwxT2X/G69EnDngxsDtbgHc8Ao3VVn8jNJLXqWxUd fqsf9c7LAwq8aKTauD2tqFBJjp9UP3/4ipiFOqRWlrr8hUVgfaoaeLH5tMGZzn/A GB21raB3A8R+p+zl/KVahloY3QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBUoI8TF 0hDWGQVIANiw9apTr7n5MB8GA1UdIwQYMBaAFBa1ZLdY381Sxc6JEZLjG3FbHL/o MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRjRGRS9CQTEzMTI0RTFE ODUxMUUyQTc3OTk5REMwOEIwMkNEMi9GclZrdDFqZnpWTEZ6b2tSa3VNYmNWc2N2 LWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZyVmt0MWpmelZMRnpva1JrdU1iY1ZzY3YtZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RjRGRS9CQTEzMTI0RTFEODUxMUUyQTc3OTk5REMwOEIwMkNEMi9GclZrdDFqZnpW TEZ6b2tSa3VNYmNWc2N2LWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCBMzhy5ZbySK36nn37SUPvbWjREbG2YWUJBKEE1qds57Xuvdb82MOh QojGj312qHF3ihpTUmRnLk2jb/8PV47LXaXBtbgiwP7g8PihvKZRzUpw/lUoWLZX TT82F2xdRF12x+2cP9q5AwXDndLxQtB6G72eUil/XAEqVm5RM2LMtFRjGBBpCEvN wvPMc1qTGtiEptM/syiE22ZWX24y9XjUDcow1nI0VhbcL2huXjc1+rjh5P1SdCgH 5IE8ysMtaVlRW2K/9c5q0J81Agnqc5/hg6ixDyedLC7RKrf9P/oZlX35nhFTgZPL bsxQVoGC6qWf4i2jts5EhmlPXEfGF36C -----END CERTIFICATE-----Generated at Sat May 31 16:57:53 2025 by rpki-client