$ rpki-client -vvf rpki.apnic.net/member_repository/A91B7770/E6810410C0AE11EAB95AB572C4F9AE02/fVVGmSbR-TTzrylkXrbBC7YGm8k.mft File: fVVGmSbR-TTzrylkXrbBC7YGm8k.mft (raw, json) Hash identifier: 2qdo/2Zp7YKAk/R0DaQo8SZgXNulybkcR/j+nJsAbGE= Subject key identifier: AF:66:08:D0:A7:E4:A7:6D:AD:63:BE:F1:B7:E0:FA:14:8C:A7:82:F6 Authority key identifier: 7D:55:46:99:26:D1:F9:34:F3:AF:29:64:5E:B6:C1:0B:B6:06:9B:C9 Certificate issuer: /CN=A91B7770/serialNumber=7D55469926D1F934F3AF29645EB6C10BB6069BC9 Certificate serial: 098F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fVVGmSbR-TTzrylkXrbBC7YGm8k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B7770/E6810410C0AE11EAB95AB572C4F9AE02/fVVGmSbR-TTzrylkXrbBC7YGm8k.mft Manifest number: 0922 Signing time: Fri 22 Aug 2025 20:38:58 +0000 Manifest this update: Fri 22 Aug 2025 20:38:58 +0000 Manifest next update: Fri 29 Aug 2025 20:38:58 +0000 Files and hashes: 1: fVVGmSbR-TTzrylkXrbBC7YGm8k.crl (hash: KyuH/R5tlV9JzqmrwjETzIycTA6Hy45Spyjh0JgpBd8=) 2: 49E75ECAD66F11EF8C443287C4F9AE02.roa (hash: 6eLBLTiRLG59b19Vh6VakQSbL4yifX/0CdBZxWB4WEY=) 3: 501941C093F211EEA029A113C4F9AE02.roa (hash: FhESrn/DCqUnNSrnrcCxTem1wxJCB6TNgEsA8vGhFD0=) 4: 8DA3D4E03F7E11F0B8EF8F28C4F9AE02.roa (hash: /znaKV3KjWiiYiywi65esGpUip1B0gcKXgL7UimYW5U=) 5: 781C64FAF58611ED89273159C4F9AE02.roa (hash: lwV/ynteCUHJi+p3z2mrWfc4T5PCrXOSxxmLmNk4dP0=) 6: FECBA2C23B2611EFAF167E83C4F9AE02.roa (hash: Y7HIfK+dgei476aRla7phi/541mDTNFxZ1eh4K1sDYk=) 7: 9672E862793811EE92C54834C4F9AE02.roa (hash: UGwpdFjyj5op9VWtjdDebDyJLyb7++gFQLq7ibC5Zo8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B7770/E6810410C0AE11EAB95AB572C4F9AE02/fVVGmSbR-TTzrylkXrbBC7YGm8k.crl rsync://rpki.apnic.net/member_repository/A91B7770/E6810410C0AE11EAB95AB572C4F9AE02/fVVGmSbR-TTzrylkXrbBC7YGm8k.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fVVGmSbR-TTzrylkXrbBC7YGm8k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 20:38:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2447 (0x98f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B7770, serialNumber=7D55469926D1F934F3AF29645EB6C10BB6069BC9 Validity Not Before: Aug 22 20:38:58 2025 GMT Not After : Aug 29 20:38:58 2025 GMT Subject: CN=68a8d562-d7aa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:fa:70:1a:1b:ed:26:19:aa:6b:6d:1d:f6:46: 84:25:49:ae:2f:9d:67:4c:51:c0:ba:e1:2e:42:28: 57:88:5f:7d:14:95:ea:6f:8d:37:bb:63:43:fb:56: db:08:56:78:01:17:86:e8:36:65:9a:7f:26:06:b1: 1f:d8:fd:59:1e:ff:02:35:74:4b:79:30:23:21:66: 27:b6:fe:35:24:29:02:1e:8c:df:ce:e5:d1:6a:98: 8d:16:23:a4:10:c4:31:fa:72:b7:99:fd:95:2e:65: f3:18:02:8a:4a:12:af:11:1b:6d:4d:f3:d4:6e:68: fa:d4:83:6a:f5:72:7f:ce:5b:bb:dc:39:e3:c3:49: 28:4c:24:e0:c2:9f:f4:a9:0f:71:29:85:39:56:35: fa:6b:83:7b:83:e4:92:f0:30:b4:3c:df:b0:7c:26: 61:fb:45:7a:dc:39:24:b8:d8:75:07:b1:eb:aa:d8: aa:2a:0c:16:72:e1:50:39:57:b5:42:2b:1e:a0:a2: 5e:d0:e0:82:f2:83:76:5d:dd:56:be:50:22:5b:ee: 2c:8e:71:21:b4:fe:fc:03:12:c6:e3:89:60:19:ca: 55:c7:07:a5:35:46:db:6f:b1:cc:45:3f:76:a9:6e: 47:20:0d:63:de:13:90:b2:8c:22:87:f5:0e:e6:ec: eb:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:66:08:D0:A7:E4:A7:6D:AD:63:BE:F1:B7:E0:FA:14:8C:A7:82:F6 X509v3 Authority Key Identifier: keyid:7D:55:46:99:26:D1:F9:34:F3:AF:29:64:5E:B6:C1:0B:B6:06:9B:C9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B7770/E6810410C0AE11EAB95AB572C4F9AE02/fVVGmSbR-TTzrylkXrbBC7YGm8k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fVVGmSbR-TTzrylkXrbBC7YGm8k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B7770/E6810410C0AE11EAB95AB572C4F9AE02/fVVGmSbR-TTzrylkXrbBC7YGm8k.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 07:66:2d:49:3c:43:25:ec:1a:9d:72:c0:41:3c:55:7d:29:0b: cd:e9:c3:a1:ec:65:01:3c:08:43:2c:4f:bb:57:dc:51:32:5f: 23:63:97:d2:02:5e:09:84:25:8f:06:8e:87:a5:5a:21:e1:a5: 0c:05:c1:4a:bf:89:cc:a4:d6:c3:fd:d4:61:bc:03:34:6e:78: b2:2e:ff:35:ab:c4:52:32:c7:82:fe:64:73:e8:c6:f4:e0:ea: 97:fc:cb:cb:14:6c:0b:91:0d:47:a5:65:13:a7:08:d0:22:96: 7f:e2:97:78:a9:d9:4c:6c:cb:66:1f:40:95:28:3d:09:07:ab: aa:ab:53:09:f3:1e:d7:49:18:1b:c9:76:4b:03:52:9f:95:30: 84:5c:6b:94:ee:1b:6e:57:c7:13:0b:00:05:c9:ba:b2:ca:16: be:59:87:8e:00:ee:7d:61:f3:36:36:da:4d:bb:7a:87:4a:36: 9d:bd:e0:39:bc:b1:e7:58:b2:b3:80:d8:61:18:6c:6d:c9:ec: 0d:87:52:f0:cb:3b:14:82:fb:76:99:f0:97:fd:4a:f1:7e:ea: d2:cd:e0:3e:96:07:ef:09:60:79:56:6c:e9:a7:60:cc:c5:aa: 1e:29:d1:4b:b2:cd:08:f3:68:0c:8c:08:d8:1c:e1:c5:fa:64: d8:10:c5:a0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCY8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Qjc3NzAxMTAvBgNVBAUTKDdENTU0Njk5MjZEMUY5MzRGM0FGMjk2NDVFQjZDMTBC QjYwNjlCQzkwHhcNMjUwODIyMjAzODU4WhcNMjUwODI5MjAzODU4WjAYMRYwFAYD VQQDEw02OGE4ZDU2Mi1kN2FhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvfpwGhvtJhmqa20d9kaEJUmuL51nTFHAuuEuQihXiF99FJXqb403u2ND+1bb CFZ4AReG6DZlmn8mBrEf2P1ZHv8CNXRLeTAjIWYntv41JCkCHozfzuXRapiNFiOk EMQx+nK3mf2VLmXzGAKKShKvERttTfPUbmj61INq9XJ/zlu73Dnjw0koTCTgwp/0 qQ9xKYU5VjX6a4N7g+SS8DC0PN+wfCZh+0V63DkkuNh1B7HrqtiqKgwWcuFQOVe1 QiseoKJe0OCC8oN2Xd1WvlAiW+4sjnEhtP78AxLG44lgGcpVxwelNUbbb7HMRT92 qW5HIA1j3hOQsowih/UO5uzrvwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFK9mCNCn 5KdtrWO+8bfg+hSMp4L2MB8GA1UdIwQYMBaAFH1VRpkm0fk0868pZF62wQu2BpvJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNzc3MC9FNjgxMDQxMEMw QUUxMUVBQjk1QUI1NzJDNEY5QUUwMi9mVlZHbVNiUi1UVHpyeWxrWHJiQkM3WUdt OGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ZWVkdtU2JSLVRUenJ5bGtYcmJCQzdZR204ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC Nzc3MC9FNjgxMDQxMEMwQUUxMUVBQjk1QUI1NzJDNEY5QUUwMi9mVlZHbVNiUi1U VHpyeWxrWHJiQkM3WUdtOGsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAHZi1JPEMl7BqdcsBBPFV9KQvN6cOh7GUBPAhDLE+7V9xRMl8jY5fS Al4JhCWPBo6HpVoh4aUMBcFKv4nMpNbD/dRhvAM0bniyLv81q8RSMseC/mRz6Mb0 4OqX/MvLFGwLkQ1HpWUTpwjQIpZ/4pd4qdlMbMtmH0CVKD0JB6uqq1MJ8x7XSRgb yXZLA1KflTCEXGuU7htuV8cTCwAFybqyyha+WYeOAO59YfM2NtpNu3qHSjadveA5 vLHnWLKzgNhhGGxtyewNh1LwyzsUgvt2mfCX/UrxfurSzeA+lgfvCWB5Vmzpp2DM xaoeKdFLss0I82gMjAjYHOHF+mTYEMWg -----END CERTIFICATE-----Generated at Sun Aug 24 08:50:02 2025 by rpki-client