$ rpki-client -vvf rpki.apnic.net/member_repository/A91B777C/6CD8133CB2DA11EB8B384A60C4F9AE02/frs7Qcl_MxP654HvYzI8SvYrj7c.mft File: frs7Qcl_MxP654HvYzI8SvYrj7c.mft (raw, json) Hash identifier: TZKfUdrQBCzeBsw1RYpBEJz7uRSazthRG4MMPSgag/g= Subject key identifier: 8E:85:FD:15:D0:31:79:6B:FF:BC:1D:C7:AC:32:48:FD:7A:C4:09:FE Authority key identifier: 7E:BB:3B:41:C9:7F:33:13:FA:E7:81:EF:63:32:3C:4A:F6:2B:8F:B7 Certificate issuer: /CN=A91B777C/serialNumber=7EBB3B41C97F3313FAE781EF63323C4AF62B8FB7 Certificate serial: 061E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/frs7Qcl_MxP654HvYzI8SvYrj7c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B777C/6CD8133CB2DA11EB8B384A60C4F9AE02/frs7Qcl_MxP654HvYzI8SvYrj7c.mft Manifest number: 0617 Signing time: Fri 22 Aug 2025 23:00:10 +0000 Manifest this update: Fri 22 Aug 2025 23:00:09 +0000 Manifest next update: Fri 29 Aug 2025 23:00:09 +0000 Files and hashes: 1: frs7Qcl_MxP654HvYzI8SvYrj7c.crl (hash: /suu2mimhG3bWY8Xe6kphPX7PBVjqDkcEUdukLKpvT4=) 2: 10BBF6CEB2E711EB8A61B44EC4F9AE02.roa (hash: 0y9VyknIsSUScmWS3621geMMX5dlAHgNZtNYOtKkDmI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B777C/6CD8133CB2DA11EB8B384A60C4F9AE02/frs7Qcl_MxP654HvYzI8SvYrj7c.crl rsync://rpki.apnic.net/member_repository/A91B777C/6CD8133CB2DA11EB8B384A60C4F9AE02/frs7Qcl_MxP654HvYzI8SvYrj7c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/frs7Qcl_MxP654HvYzI8SvYrj7c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 23:00:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1566 (0x61e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B777C, serialNumber=7EBB3B41C97F3313FAE781EF63323C4AF62B8FB7 Validity Not Before: Aug 22 23:00:09 2025 GMT Not After : Aug 29 23:00:09 2025 GMT Subject: CN=68a8f67a-d947 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:a9:be:64:1c:78:1a:d3:20:2c:26:d8:ab:b2: 23:fa:f7:08:fc:6d:61:c7:93:6c:6e:ad:3c:c2:40: 6a:54:a2:ef:60:3c:db:96:77:6d:38:ee:05:dd:85: 22:0b:43:54:2c:62:a8:01:24:76:59:22:15:22:28: f5:7f:37:4b:bb:5d:e3:e3:4d:0b:03:29:1f:fd:e1: d0:49:d3:9c:22:ea:fb:09:e5:93:c9:3c:59:3e:30: 08:6f:26:23:a8:b8:2a:ca:1d:bb:d3:89:72:24:6d: 56:c9:00:90:8c:55:cd:b8:30:7c:fc:b1:cd:eb:82: c9:49:a2:a4:90:88:b2:82:7d:ac:3b:a4:69:93:c5: ed:c1:84:24:05:5d:99:25:c9:23:3a:3c:0b:34:95: 9c:49:5f:9b:04:d9:33:68:68:6d:7f:63:54:71:d9: c0:6e:f9:89:0c:a8:33:37:98:39:e2:98:34:69:52: 8d:7c:04:fb:ea:97:c7:6d:db:14:ff:5d:59:9d:f2: 2c:8d:2c:05:76:0d:1a:33:c6:23:70:e5:d3:eb:45: 2c:6f:27:59:8e:3e:03:ff:6d:b5:37:26:1a:b2:5b: 3b:6a:cd:6c:86:a4:f8:52:d9:e8:b1:6f:45:39:56: 9a:52:3e:e8:7f:cd:be:b9:39:3c:39:5b:8a:cc:1d: 93:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:85:FD:15:D0:31:79:6B:FF:BC:1D:C7:AC:32:48:FD:7A:C4:09:FE X509v3 Authority Key Identifier: keyid:7E:BB:3B:41:C9:7F:33:13:FA:E7:81:EF:63:32:3C:4A:F6:2B:8F:B7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B777C/6CD8133CB2DA11EB8B384A60C4F9AE02/frs7Qcl_MxP654HvYzI8SvYrj7c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/frs7Qcl_MxP654HvYzI8SvYrj7c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B777C/6CD8133CB2DA11EB8B384A60C4F9AE02/frs7Qcl_MxP654HvYzI8SvYrj7c.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 62:75:37:6f:73:d6:da:ff:f0:d9:ce:4c:01:8c:79:07:7a:65: 7f:4f:ff:9e:ba:9b:8c:44:f7:70:ab:15:e6:df:77:4a:39:da: 06:10:56:5e:12:cb:47:17:7f:e5:86:bf:96:5e:67:7a:f5:81: e5:0c:c7:45:ee:89:52:4a:51:42:19:5b:d7:47:96:29:18:96: 5e:ed:c6:9b:c9:4f:4b:80:f0:87:d3:ff:fe:be:15:3a:97:aa: bb:3a:6c:47:ab:b5:d2:a8:86:a2:dd:54:32:ae:e7:4f:5f:0d: 63:60:4a:e3:75:ea:3e:e9:8a:c9:1e:d7:b8:e7:b0:79:1d:d0: 2e:81:97:7a:03:8b:8a:a8:02:66:df:6a:47:02:75:cb:cc:b1: 60:64:ac:a1:19:a6:1f:d9:11:44:a5:02:7b:d9:07:62:91:34: 08:3d:22:80:15:f0:44:12:c7:52:71:ec:b7:2b:3f:5b:20:83: c3:0e:75:13:b5:2b:98:24:9c:07:85:d5:af:26:9a:a2:e9:b5: df:0a:06:9d:4b:a6:d1:61:d0:6a:20:fc:ff:28:0b:85:64:23: 21:49:b5:88:89:c7:f7:06:7b:02:28:47:67:a8:4e:a6:00:9f: d8:5f:d8:da:76:56:84:ee:cf:e0:e2:bb:e8:96:02:5a:bb:ad: 1a:8c:21:3a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBh4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Qjc3N0MxMTAvBgNVBAUTKDdFQkIzQjQxQzk3RjMzMTNGQUU3ODFFRjYzMzIzQzRB RjYyQjhGQjcwHhcNMjUwODIyMjMwMDA5WhcNMjUwODI5MjMwMDA5WjAYMRYwFAYD VQQDEw02OGE4ZjY3YS1kOTQ3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuKm+ZBx4GtMgLCbYq7Ij+vcI/G1hx5Nsbq08wkBqVKLvYDzblndtOO4F3YUi C0NULGKoASR2WSIVIij1fzdLu13j400LAykf/eHQSdOcIur7CeWTyTxZPjAIbyYj qLgqyh2704lyJG1WyQCQjFXNuDB8/LHN64LJSaKkkIiygn2sO6Rpk8XtwYQkBV2Z JckjOjwLNJWcSV+bBNkzaGhtf2NUcdnAbvmJDKgzN5g54pg0aVKNfAT76pfHbdsU /11ZnfIsjSwFdg0aM8YjcOXT60UsbydZjj4D/221NyYasls7as1shqT4UtnosW9F OVaaUj7of82+uTk8OVuKzB2TrwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFI6F/RXQ MXlr/7wdx6wySP16xAn+MB8GA1UdIwQYMBaAFH67O0HJfzMT+ueB72MyPEr2K4+3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNzc3Qy82Q0Q4MTMzQ0Iy REExMUVCOEIzODRBNjBDNEY5QUUwMi9mcnM3UWNsX014UDY1NEh2WXpJOFN2WXJq N2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ZyczdRY2xfTXhQNjU0SHZZekk4U3ZZcmo3Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC Nzc3Qy82Q0Q4MTMzQ0IyREExMUVCOEIzODRBNjBDNEY5QUUwMi9mcnM3UWNsX014 UDY1NEh2WXpJOFN2WXJqN2MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBidTdvc9ba//DZzkwBjHkHemV/T/+eupuMRPdwqxXm33dKOdoGEFZe EstHF3/lhr+WXmd69YHlDMdF7olSSlFCGVvXR5YpGJZe7cabyU9LgPCH0//+vhU6 l6q7OmxHq7XSqIai3VQyrudPXw1jYErjdeo+6YrJHte457B5HdAugZd6A4uKqAJm 32pHAnXLzLFgZKyhGaYf2RFEpQJ72QdikTQIPSKAFfBEEsdScey3Kz9bIIPDDnUT tSuYJJwHhdWvJpqi6bXfCgadS6bRYdBqIPz/KAuFZCMhSbWIicf3BnsCKEdnqE6m AJ/YX9jadlaE7s/g4rvolgJau60ajCE6 -----END CERTIFICATE-----Generated at Sun Aug 24 00:39:31 2025 by rpki-client