$ rpki-client -vvf rpki.apnic.net/member_repository/A91CF4FE/BA13124E1D8511E2A77999DC08B02CD2/FrVkt1jfzVLFzokRkuMbcVscv-g.mft File: FrVkt1jfzVLFzokRkuMbcVscv-g.mft (raw, json) Hash identifier: fX2VqCcQ9XjN5dnU8dBT62R6BqdjZwEKB+afNSLn8a8= Subject key identifier: 87:A6:23:FB:58:01:94:EB:21:B1:8F:73:47:75:0F:46:5F:13:5B:6C Authority key identifier: 16:B5:64:B7:58:DF:CD:52:C5:CE:89:11:92:E3:1B:71:5B:1C:BF:E8 Certificate issuer: /CN=A91CF4FE/serialNumber=16B564B758DFCD52C5CE891192E31B715B1CBFE8 Certificate serial: 3578 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FrVkt1jfzVLFzokRkuMbcVscv-g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CF4FE/BA13124E1D8511E2A77999DC08B02CD2/FrVkt1jfzVLFzokRkuMbcVscv-g.mft Manifest number: 3523 Signing time: Fri 24 Oct 2025 14:27:15 +0000 Manifest this update: Fri 24 Oct 2025 14:27:14 +0000 Manifest next update: Fri 31 Oct 2025 14:27:14 +0000 Files and hashes: 1: FrVkt1jfzVLFzokRkuMbcVscv-g.crl (hash: Kz3xKlqQ4wFI+MFM6og0SuzxHALdOclNQpk1bEXRmUc=) 2: 10DAE05EB04811EABB4AEF61C4F9AE02.roa (hash: bPtENJEcOoeg2k8xe2jWRrY5UKQvlUbjR5xndoVRe10=) 3: 40DFD5AC650711EFB94FD44FC4F9AE02.roa (hash: zawwiUMAVIdG2bykFeNbnA88n/1gVRjEvWeHRre2uoI=) 4: F6FAB490BB5811EF8C37CB81C4F9AE02.roa (hash: 4h0iDWjsfa7NDKLfke8j7fgE3a1MCnkylqCcKoNifz0=) 5: 534379FCEE1611ECA6DE1824C4F9AE02.roa (hash: IzD5q2GzmuV18q1dnBjmacTQl4qcdKe2UsljJfilqlM=) 6: 5F22E1129B3011EF952F2762C4F9AE02.roa (hash: qTYeOx6pg1ogjikS/4HOIDZ4QqzqAPHZTv7DK6zo/c4=) 7: 427BAA66E23211E8BD132210C4F9AE02.roa (hash: h82lo/wGrqpMf7HWVtsO8+F8lE20C+ULtc+zbWn4ALA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CF4FE/BA13124E1D8511E2A77999DC08B02CD2/FrVkt1jfzVLFzokRkuMbcVscv-g.crl rsync://rpki.apnic.net/member_repository/A91CF4FE/BA13124E1D8511E2A77999DC08B02CD2/FrVkt1jfzVLFzokRkuMbcVscv-g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FrVkt1jfzVLFzokRkuMbcVscv-g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 31 Oct 2025 14:27:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13688 (0x3578) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CF4FE, serialNumber=16B564B758DFCD52C5CE891192E31B715B1CBFE8 Validity Not Before: Oct 24 14:27:14 2025 GMT Not After : Oct 31 14:27:14 2025 GMT Subject: CN=68fb8cc3-c1c7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:ea:0a:e4:70:db:bf:73:fa:89:77:60:80:92: 8b:67:0c:19:47:6a:84:b2:bd:ca:c7:42:97:3a:d9: d9:6c:97:f4:d1:94:5a:27:d8:b8:31:86:0b:d6:c0: 68:98:95:21:ba:31:3a:01:c3:c1:8e:62:1d:5f:87: 01:c6:7d:84:f4:74:bc:17:0e:35:b8:48:2b:8d:fc: ea:e1:58:af:65:a2:7a:12:96:86:c7:ed:8c:14:93: e2:b4:23:b2:85:8d:55:dd:4f:de:cb:80:6d:8d:3e: cd:d9:2f:49:ce:eb:ee:0c:93:25:8d:3f:c2:2c:8a: 66:d9:9a:e2:66:a3:1a:e7:28:15:3d:29:c2:0f:e8: 65:4b:3e:d7:59:f6:da:32:67:1a:2f:2e:f6:ba:62: 39:90:2e:5b:bd:45:1f:8b:08:cd:6d:47:5f:df:07: 2e:93:de:5b:39:99:b5:0f:9c:ca:06:a7:18:54:59: b8:4b:8e:81:ed:66:d2:e1:b4:bf:9b:e2:ca:cd:d0: a8:e1:ad:0e:10:3d:3a:d6:11:e3:26:ab:d0:09:31: b7:de:4e:30:2c:85:5c:93:bc:59:30:e2:91:06:59: 46:73:db:b8:91:67:eb:21:26:b9:2d:56:60:4e:14: 8d:95:cf:da:f6:45:9f:d0:3f:56:fc:08:37:ff:3f: ae:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:A6:23:FB:58:01:94:EB:21:B1:8F:73:47:75:0F:46:5F:13:5B:6C X509v3 Authority Key Identifier: keyid:16:B5:64:B7:58:DF:CD:52:C5:CE:89:11:92:E3:1B:71:5B:1C:BF:E8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CF4FE/BA13124E1D8511E2A77999DC08B02CD2/FrVkt1jfzVLFzokRkuMbcVscv-g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FrVkt1jfzVLFzokRkuMbcVscv-g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CF4FE/BA13124E1D8511E2A77999DC08B02CD2/FrVkt1jfzVLFzokRkuMbcVscv-g.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 27:ae:ee:d2:ec:06:23:95:6a:66:ef:96:b8:50:3a:e5:ce:af: 5d:d5:2e:24:64:d3:5e:0b:f1:0f:ce:a5:dc:ef:58:77:3e:e6: 9b:79:cc:50:63:eb:e3:7b:56:49:e5:2c:66:78:eb:ef:77:95: e8:f4:05:40:92:ac:4a:39:de:31:b8:41:f8:31:79:0a:0b:d7: a6:c2:76:b9:e0:8b:19:c0:dc:38:41:71:de:6e:3f:f7:84:4b: 20:9d:01:ee:15:48:e2:bd:86:67:79:ce:03:b5:bb:09:e8:bf: b3:3c:d6:a1:28:75:1c:95:86:a7:3a:a1:76:09:f3:b1:1f:87: b3:2a:f1:32:56:4d:67:82:51:49:50:8b:b3:70:d4:d7:ae:20: 15:1d:57:29:b1:bb:e5:ba:46:de:84:af:f4:64:52:92:41:c8: cb:de:f0:41:c1:87:d5:1b:76:9c:16:02:fb:cb:68:61:63:5f: 93:5c:63:28:7e:8f:12:7d:01:42:b2:ef:c4:be:2c:97:6d:b9: 50:73:6e:da:00:d1:ed:88:04:29:78:54:b5:9d:46:3a:32:9b: 8a:e0:28:10:86:b6:6d:29:7a:e2:86:1a:c7:d2:17:2f:40:ce: 72:32:f2:d2:2d:c5:0f:ff:10:b6:9f:d1:f6:24:2e:4d:79:38: e0:73:b4:67 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNXgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0Y0RkUxMTAvBgNVBAUTKDE2QjU2NEI3NThERkNENTJDNUNFODkxMTkyRTMxQjcx NUIxQ0JGRTgwHhcNMjUxMDI0MTQyNzE0WhcNMjUxMDMxMTQyNzE0WjAYMRYwFAYD VQQDEw02OGZiOGNjMy1jMWM3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzeoK5HDbv3P6iXdggJKLZwwZR2qEsr3Kx0KXOtnZbJf00ZRaJ9i4MYYL1sBo mJUhujE6AcPBjmIdX4cBxn2E9HS8Fw41uEgrjfzq4VivZaJ6EpaGx+2MFJPitCOy hY1V3U/ey4BtjT7N2S9JzuvuDJMljT/CLIpm2ZriZqMa5ygVPSnCD+hlSz7XWfba MmcaLy72umI5kC5bvUUfiwjNbUdf3wcuk95bOZm1D5zKBqcYVFm4S46B7WbS4bS/ m+LKzdCo4a0OED061hHjJqvQCTG33k4wLIVck7xZMOKRBllGc9u4kWfrISa5LVZg ThSNlc/a9kWf0D9W/Ag3/z+ulwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIemI/tY AZTrIbGPc0d1D0ZfE1tsMB8GA1UdIwQYMBaAFBa1ZLdY381Sxc6JEZLjG3FbHL/o MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRjRGRS9CQTEzMTI0RTFE ODUxMUUyQTc3OTk5REMwOEIwMkNEMi9GclZrdDFqZnpWTEZ6b2tSa3VNYmNWc2N2 LWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZyVmt0MWpmelZMRnpva1JrdU1iY1ZzY3YtZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RjRGRS9CQTEzMTI0RTFEODUxMUUyQTc3OTk5REMwOEIwMkNEMi9GclZrdDFqZnpW TEZ6b2tSa3VNYmNWc2N2LWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAnru7S7AYjlWpm75a4UDrlzq9d1S4kZNNeC/EPzqXc71h3PuabecxQ Y+vje1ZJ5SxmeOvvd5Xo9AVAkqxKOd4xuEH4MXkKC9emwna54IsZwNw4QXHebj/3 hEsgnQHuFUjivYZnec4DtbsJ6L+zPNahKHUclYanOqF2CfOxH4ezKvEyVk1nglFJ UIuzcNTXriAVHVcpsbvlukbehK/0ZFKSQcjL3vBBwYfVG3acFgL7y2hhY1+TXGMo fo8SfQFCsu/EviyXbblQc27aANHtiAQpeFS1nUY6MpuK4CgQhrZtKXrihhrH0hcv QM5yMvLSLcUP/xC2n9H2JC5NeTjgc7Rn -----END CERTIFICATE-----Generated at Sat Oct 25 04:42:29 2025 by rpki-client