$ rpki-client -vvf rpki.apnic.net/member_repository/A91B7770/E6810410C0AE11EAB95AB572C4F9AE02/fVVGmSbR-TTzrylkXrbBC7YGm8k.mft File: fVVGmSbR-TTzrylkXrbBC7YGm8k.mft (raw, json) Hash identifier: B8bDyDB3OCBvLd3XbEeiNniGgt1aEnUeRUXuD5x08rU= Subject key identifier: EC:A6:36:21:A4:81:FA:AC:F6:3B:CC:A9:20:6F:A7:08:F3:1C:07:0B Authority key identifier: 7D:55:46:99:26:D1:F9:34:F3:AF:29:64:5E:B6:C1:0B:B6:06:9B:C9 Certificate issuer: /CN=A91B7770/serialNumber=7D55469926D1F934F3AF29645EB6C10BB6069BC9 Certificate serial: 09AE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fVVGmSbR-TTzrylkXrbBC7YGm8k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B7770/E6810410C0AE11EAB95AB572C4F9AE02/fVVGmSbR-TTzrylkXrbBC7YGm8k.mft Manifest number: 0940 Signing time: Sat 18 Oct 2025 21:34:16 +0000 Manifest this update: Sat 18 Oct 2025 21:34:16 +0000 Manifest next update: Sat 25 Oct 2025 21:34:16 +0000 Files and hashes: 1: fVVGmSbR-TTzrylkXrbBC7YGm8k.crl (hash: HwcpsvAlE7sTrCH9fL7Hdh2RSg7z8tEg/WYUEwSo384=) 2: 49E75ECAD66F11EF8C443287C4F9AE02.roa (hash: 6eLBLTiRLG59b19Vh6VakQSbL4yifX/0CdBZxWB4WEY=) 3: 501941C093F211EEA029A113C4F9AE02.roa (hash: FhESrn/DCqUnNSrnrcCxTem1wxJCB6TNgEsA8vGhFD0=) 4: 8DA3D4E03F7E11F0B8EF8F28C4F9AE02.roa (hash: /znaKV3KjWiiYiywi65esGpUip1B0gcKXgL7UimYW5U=) 5: 781C64FAF58611ED89273159C4F9AE02.roa (hash: lwV/ynteCUHJi+p3z2mrWfc4T5PCrXOSxxmLmNk4dP0=) 6: FECBA2C23B2611EFAF167E83C4F9AE02.roa (hash: Y7HIfK+dgei476aRla7phi/541mDTNFxZ1eh4K1sDYk=) 7: A8896B1892E811F0A5E48134C4F9AE02.roa (hash: xCyhd7BrMRSo37r2kc8C1tCVJGoR2T+Kqf1BZgUiJL0=) 8: 9672E862793811EE92C54834C4F9AE02.roa (hash: UGwpdFjyj5op9VWtjdDebDyJLyb7++gFQLq7ibC5Zo8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B7770/E6810410C0AE11EAB95AB572C4F9AE02/fVVGmSbR-TTzrylkXrbBC7YGm8k.crl rsync://rpki.apnic.net/member_repository/A91B7770/E6810410C0AE11EAB95AB572C4F9AE02/fVVGmSbR-TTzrylkXrbBC7YGm8k.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fVVGmSbR-TTzrylkXrbBC7YGm8k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 21:34:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2478 (0x9ae) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B7770, serialNumber=7D55469926D1F934F3AF29645EB6C10BB6069BC9 Validity Not Before: Oct 18 21:34:16 2025 GMT Not After : Oct 25 21:34:16 2025 GMT Subject: CN=68f407d8-3e8e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:a5:49:b2:2b:47:28:d6:11:ca:4c:57:c3:0a: c4:bb:6c:e7:c2:a3:0a:8d:e2:23:de:60:8c:f3:7e: 5f:a3:78:bb:ab:49:e3:2f:b6:71:5a:ad:2f:36:d3: 7c:13:a2:58:8a:aa:15:f2:b1:58:cf:c1:55:32:81: a6:29:df:48:ff:84:02:a4:20:e7:3c:fe:52:42:43: 5a:f5:ef:57:35:0c:43:c3:e6:cf:1b:ca:55:43:de: 4e:e5:69:9b:4a:e6:10:0e:6d:d6:8c:1d:ee:d6:57: bb:dd:f4:64:91:57:bf:e6:d2:21:95:e7:6e:84:98: 0d:1f:a9:b8:63:13:e5:1e:bf:31:88:c0:f5:d8:3a: 2b:04:3f:37:e7:5c:24:af:e1:99:ae:e6:90:fb:57: 31:eb:96:41:16:a8:9e:ca:a2:56:67:ed:0c:8f:bb: 86:ac:c2:ca:c5:80:f2:7b:cc:52:8f:83:e7:5e:b1: c5:ef:5a:7a:56:39:be:cc:74:2b:8a:89:43:ef:15: 5f:77:a5:92:cc:a3:18:9f:ea:8d:d9:b3:b1:48:09: 9b:8c:a3:0d:2e:06:ad:2e:60:66:8c:d9:fa:6b:21: cb:1a:1b:06:cd:a0:03:ce:f5:ee:26:33:81:df:6b: ec:13:c7:0f:51:50:64:42:64:e1:a4:c7:a5:f9:ee: cb:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:A6:36:21:A4:81:FA:AC:F6:3B:CC:A9:20:6F:A7:08:F3:1C:07:0B X509v3 Authority Key Identifier: keyid:7D:55:46:99:26:D1:F9:34:F3:AF:29:64:5E:B6:C1:0B:B6:06:9B:C9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B7770/E6810410C0AE11EAB95AB572C4F9AE02/fVVGmSbR-TTzrylkXrbBC7YGm8k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fVVGmSbR-TTzrylkXrbBC7YGm8k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B7770/E6810410C0AE11EAB95AB572C4F9AE02/fVVGmSbR-TTzrylkXrbBC7YGm8k.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0c:3f:bc:c7:3a:79:2e:ac:f7:78:cb:2e:5d:14:13:5b:c3:51: 27:74:a1:31:e5:e1:b0:8b:59:15:0a:7c:f4:2b:6e:8d:32:ea: 09:c3:d3:c8:cb:c7:ac:0a:f8:35:87:fc:fe:a2:0b:73:65:1a: bf:1a:35:f4:6a:77:2a:66:01:63:f0:97:bb:1f:b8:5f:b2:66: 94:2d:97:09:3e:2f:d1:b8:03:b8:6c:0c:e7:ce:23:65:5c:ab: 81:b1:fe:8d:01:05:f6:32:0a:a9:3f:58:0e:c8:b2:51:e4:3f: b0:ef:63:9f:bc:ab:d5:55:9f:55:39:0b:d3:6c:ff:e4:63:4e: 79:3e:fc:2d:d3:cd:2e:8c:f4:3e:c3:de:a2:1b:96:8c:ea:ad: 92:7f:c7:39:3e:42:57:7a:bd:52:10:37:ef:2a:29:25:55:e5: b3:8e:84:02:9e:3a:f9:bb:f3:f4:15:bd:c7:a1:f2:c2:af:03: 2e:ba:31:f7:c8:dc:cc:20:36:b7:3d:a4:94:a0:bf:a7:d5:09: 0a:44:04:c6:24:f0:c0:bc:15:e2:7f:7d:1e:64:91:39:2c:d1: b7:e5:06:96:55:c0:d5:b4:3f:1b:a5:77:d0:80:28:2c:13:7f: 8e:ad:b0:c7:47:2a:8a:b4:dd:44:ff:b0:95:bc:ea:8f:6d:87: 46:8b:7c:51 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCa4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Qjc3NzAxMTAvBgNVBAUTKDdENTU0Njk5MjZEMUY5MzRGM0FGMjk2NDVFQjZDMTBC QjYwNjlCQzkwHhcNMjUxMDE4MjEzNDE2WhcNMjUxMDI1MjEzNDE2WjAYMRYwFAYD VQQDEw02OGY0MDdkOC0zZThlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAy6VJsitHKNYRykxXwwrEu2znwqMKjeIj3mCM835fo3i7q0njL7ZxWq0vNtN8 E6JYiqoV8rFYz8FVMoGmKd9I/4QCpCDnPP5SQkNa9e9XNQxDw+bPG8pVQ95O5Wmb SuYQDm3WjB3u1le73fRkkVe/5tIhleduhJgNH6m4YxPlHr8xiMD12DorBD8351wk r+GZruaQ+1cx65ZBFqieyqJWZ+0Mj7uGrMLKxYDye8xSj4PnXrHF71p6Vjm+zHQr iolD7xVfd6WSzKMYn+qN2bOxSAmbjKMNLgatLmBmjNn6ayHLGhsGzaADzvXuJjOB 32vsE8cPUVBkQmThpMel+e7LTwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOymNiGk gfqs9jvMqSBvpwjzHAcLMB8GA1UdIwQYMBaAFH1VRpkm0fk0868pZF62wQu2BpvJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNzc3MC9FNjgxMDQxMEMw QUUxMUVBQjk1QUI1NzJDNEY5QUUwMi9mVlZHbVNiUi1UVHpyeWxrWHJiQkM3WUdt OGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ZWVkdtU2JSLVRUenJ5bGtYcmJCQzdZR204ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC Nzc3MC9FNjgxMDQxMEMwQUUxMUVBQjk1QUI1NzJDNEY5QUUwMi9mVlZHbVNiUi1U VHpyeWxrWHJiQkM3WUdtOGsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAMP7zHOnkurPd4yy5dFBNbw1EndKEx5eGwi1kVCnz0K26NMuoJw9PI y8esCvg1h/z+ogtzZRq/GjX0ancqZgFj8Je7H7hfsmaULZcJPi/RuAO4bAznziNl XKuBsf6NAQX2MgqpP1gOyLJR5D+w72OfvKvVVZ9VOQvTbP/kY055Pvwt080ujPQ+ w96iG5aM6q2Sf8c5PkJXer1SEDfvKiklVeWzjoQCnjr5u/P0Fb3HofLCrwMuujH3 yNzMIDa3PaSUoL+n1QkKRATGJPDAvBXif30eZJE5LNG35QaWVcDVtD8bpXfQgCgs E3+OrbDHRyqKtN1E/7CVvOqPbYdGi3xR -----END CERTIFICATE-----Generated at Mon Oct 20 13:34:18 2025 by rpki-client