$ rpki-client -vvf rpki.apnic.net/member_repository/A91B777C/6CD8133CB2DA11EB8B384A60C4F9AE02/frs7Qcl_MxP654HvYzI8SvYrj7c.mft File: frs7Qcl_MxP654HvYzI8SvYrj7c.mft (raw, json) Hash identifier: 2ruHCVQEi756kLJdcNUWlcSFmA0Gt0DQe3ve+wXHX/E= Subject key identifier: 6E:B0:58:4D:6B:DA:C9:FD:33:33:52:E3:3C:F4:09:C8:72:D1:BF:6B Authority key identifier: 7E:BB:3B:41:C9:7F:33:13:FA:E7:81:EF:63:32:3C:4A:F6:2B:8F:B7 Certificate issuer: /CN=A91B777C/serialNumber=7EBB3B41C97F3313FAE781EF63323C4AF62B8FB7 Certificate serial: 063B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/frs7Qcl_MxP654HvYzI8SvYrj7c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B777C/6CD8133CB2DA11EB8B384A60C4F9AE02/frs7Qcl_MxP654HvYzI8SvYrj7c.mft Manifest number: 0634 Signing time: Sun 19 Oct 2025 00:19:27 +0000 Manifest this update: Sun 19 Oct 2025 00:19:26 +0000 Manifest next update: Sun 26 Oct 2025 00:19:26 +0000 Files and hashes: 1: frs7Qcl_MxP654HvYzI8SvYrj7c.crl (hash: FjhA1XHd68+xRWSM8VmNpcEjQ1QArpTbDN0VdTqpLcs=) 2: 10BBF6CEB2E711EB8A61B44EC4F9AE02.roa (hash: 0y9VyknIsSUScmWS3621geMMX5dlAHgNZtNYOtKkDmI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B777C/6CD8133CB2DA11EB8B384A60C4F9AE02/frs7Qcl_MxP654HvYzI8SvYrj7c.crl rsync://rpki.apnic.net/member_repository/A91B777C/6CD8133CB2DA11EB8B384A60C4F9AE02/frs7Qcl_MxP654HvYzI8SvYrj7c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/frs7Qcl_MxP654HvYzI8SvYrj7c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 00:19:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1595 (0x63b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B777C, serialNumber=7EBB3B41C97F3313FAE781EF63323C4AF62B8FB7 Validity Not Before: Oct 19 00:19:26 2025 GMT Not After : Oct 26 00:19:26 2025 GMT Subject: CN=68f42e8f-4698 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:46:62:87:19:0e:b7:c1:61:45:05:cc:b4:51: 4a:41:40:4c:ae:c0:1b:73:54:55:8b:a8:47:fb:9e: 3b:51:da:70:fa:0a:37:d6:bb:52:29:17:d2:0c:07: 74:0b:d1:c0:53:f9:8b:91:35:f3:b6:f8:39:b2:69: ec:6c:6e:73:5f:57:b2:4b:f5:1f:31:d0:10:a5:51: 84:e0:e3:f3:7e:37:4e:66:e7:aa:50:12:9e:0d:28: 29:0c:eb:d5:5e:fd:fa:2d:76:8a:1f:f7:a6:9d:04: 6e:e6:7d:8c:9c:4c:77:2b:26:37:73:92:e4:24:c6: ce:8b:e2:07:50:76:5a:bd:af:46:8f:e2:0d:10:4e: 8b:8b:84:fe:04:80:e4:9d:67:a7:8c:25:6a:c2:18: 99:aa:5f:3d:c0:5c:13:a0:ae:20:41:e7:ba:98:53: 98:8f:04:2e:15:cb:c1:fb:f2:7b:6e:ce:db:97:5d: 4e:98:fb:23:e8:01:1f:65:96:95:59:d0:9f:f7:f9: 84:8f:b1:3f:f0:22:83:7f:d2:88:a2:cd:c0:68:26: b2:2d:75:38:c6:07:62:5c:9d:54:d4:c3:81:38:d6: 4e:1c:ca:e0:f2:a3:7e:fa:b9:a4:31:66:9a:1f:95: a9:10:55:7f:4f:10:6e:1b:a4:a4:0a:f3:f4:d7:7c: dd:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:B0:58:4D:6B:DA:C9:FD:33:33:52:E3:3C:F4:09:C8:72:D1:BF:6B X509v3 Authority Key Identifier: keyid:7E:BB:3B:41:C9:7F:33:13:FA:E7:81:EF:63:32:3C:4A:F6:2B:8F:B7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B777C/6CD8133CB2DA11EB8B384A60C4F9AE02/frs7Qcl_MxP654HvYzI8SvYrj7c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/frs7Qcl_MxP654HvYzI8SvYrj7c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B777C/6CD8133CB2DA11EB8B384A60C4F9AE02/frs7Qcl_MxP654HvYzI8SvYrj7c.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 78:73:ef:a2:4c:28:4d:c3:8b:15:d8:4c:4b:1d:91:0f:73:cf: ed:f2:99:5e:8f:0a:a8:bc:da:2d:74:49:61:a1:e7:66:3b:bb: 44:47:6d:d5:66:3b:09:12:f3:77:91:eb:96:3f:20:7e:7d:13: 69:14:d6:e4:67:54:e8:83:54:43:b7:d7:92:72:78:ab:01:45: fb:c5:37:95:c5:e5:50:d4:90:c8:e6:5c:52:a6:fa:69:17:67: f6:4c:c4:1a:d6:3a:08:6b:87:0d:74:68:9c:bd:8d:78:8a:43: 1e:48:51:4e:ee:98:7c:07:ab:53:bf:42:c0:b3:ca:17:dd:d8: 40:cd:f9:67:73:79:81:00:82:5b:aa:88:14:a8:11:70:0c:8b: 91:df:df:0e:72:d9:40:3d:b4:40:2b:bd:7f:16:e0:17:b6:b5: 6d:5e:41:8f:00:f9:8c:5f:c0:17:50:55:c9:74:5e:e1:b7:88: f0:a8:82:7b:ba:0a:0b:80:cc:21:07:b6:1c:81:66:fa:0c:e7: 62:c8:4c:58:4b:6c:f0:d2:2e:ad:63:59:bd:6e:5a:3c:8a:d1: d3:89:2d:82:83:f8:da:65:fb:12:64:2c:4b:8c:f0:ed:6a:21: f4:ec:33:94:68:f9:df:49:3f:bf:b4:ff:07:6f:bd:5a:45:2a: d5:c4:8f:17 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBjswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Qjc3N0MxMTAvBgNVBAUTKDdFQkIzQjQxQzk3RjMzMTNGQUU3ODFFRjYzMzIzQzRB RjYyQjhGQjcwHhcNMjUxMDE5MDAxOTI2WhcNMjUxMDI2MDAxOTI2WjAYMRYwFAYD VQQDEw02OGY0MmU4Zi00Njk4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApEZihxkOt8FhRQXMtFFKQUBMrsAbc1RVi6hH+547Udpw+go31rtSKRfSDAd0 C9HAU/mLkTXztvg5smnsbG5zX1eyS/UfMdAQpVGE4OPzfjdOZueqUBKeDSgpDOvV Xv36LXaKH/emnQRu5n2MnEx3KyY3c5LkJMbOi+IHUHZava9Gj+INEE6Li4T+BIDk nWenjCVqwhiZql89wFwToK4gQee6mFOYjwQuFcvB+/J7bs7bl11OmPsj6AEfZZaV WdCf9/mEj7E/8CKDf9KIos3AaCayLXU4xgdiXJ1U1MOBONZOHMrg8qN++rmkMWaa H5WpEFV/TxBuG6SkCvP013zd0QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFG6wWE1r 2sn9MzNS4zz0Cchy0b9rMB8GA1UdIwQYMBaAFH67O0HJfzMT+ueB72MyPEr2K4+3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNzc3Qy82Q0Q4MTMzQ0Iy REExMUVCOEIzODRBNjBDNEY5QUUwMi9mcnM3UWNsX014UDY1NEh2WXpJOFN2WXJq N2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ZyczdRY2xfTXhQNjU0SHZZekk4U3ZZcmo3Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC Nzc3Qy82Q0Q4MTMzQ0IyREExMUVCOEIzODRBNjBDNEY5QUUwMi9mcnM3UWNsX014 UDY1NEh2WXpJOFN2WXJqN2MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB4c++iTChNw4sV2ExLHZEPc8/t8plejwqovNotdElhoedmO7tER23V ZjsJEvN3keuWPyB+fRNpFNbkZ1Tog1RDt9eScnirAUX7xTeVxeVQ1JDI5lxSpvpp F2f2TMQa1joIa4cNdGicvY14ikMeSFFO7ph8B6tTv0LAs8oX3dhAzflnc3mBAIJb qogUqBFwDIuR398OctlAPbRAK71/FuAXtrVtXkGPAPmMX8AXUFXJdF7ht4jwqIJ7 ugoLgMwhB7YcgWb6DOdiyExYS2zw0i6tY1m9blo8itHTiS2Cg/jaZfsSZCxLjPDt aiH07DOUaPnfST+/tP8Hb71aRSrVxI8X -----END CERTIFICATE-----Generated at Mon Oct 20 13:43:14 2025 by rpki-client