$ rpki-client -vvf rpki.apnic.net/member_repository/A91CF4FE/BA13124E1D8511E2A77999DC08B02CD2/FrVkt1jfzVLFzokRkuMbcVscv-g.mft File: FrVkt1jfzVLFzokRkuMbcVscv-g.mft (raw, json) Hash identifier: TfmpXo9B7DmXhw/XpX5GjoOuGERj4xhMUw/4HvxONiA= Subject key identifier: BA:61:91:67:92:A9:6C:FE:2A:22:C2:6E:41:5F:B2:F3:55:6E:0D:D8 Authority key identifier: 16:B5:64:B7:58:DF:CD:52:C5:CE:89:11:92:E3:1B:71:5B:1C:BF:E8 Certificate issuer: /CN=A91CF4FE/serialNumber=16B564B758DFCD52C5CE891192E31B715B1CBFE8 Certificate serial: 354F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FrVkt1jfzVLFzokRkuMbcVscv-g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CF4FE/BA13124E1D8511E2A77999DC08B02CD2/FrVkt1jfzVLFzokRkuMbcVscv-g.mft Manifest number: 3500 Signing time: Fri 22 Aug 2025 14:26:11 +0000 Manifest this update: Fri 22 Aug 2025 14:26:10 +0000 Manifest next update: Fri 29 Aug 2025 14:26:10 +0000 Files and hashes: 1: FrVkt1jfzVLFzokRkuMbcVscv-g.crl (hash: nPQbC+tQkQdCzltcpHA0cQOBCW0ybD5LsbQMkJnJO9E=) 2: 10DAE05EB04811EABB4AEF61C4F9AE02.roa (hash: +b4JTzk5rUoiBhLUxnA3EW+SFsT+j/Ycd9v6oicmMdQ=) 3: 40DFD5AC650711EFB94FD44FC4F9AE02.roa (hash: 7lbO8FJw1G5XebxqgjyAycbRZnwkoSKxE4lbb1qM6S8=) 4: F6FAB490BB5811EF8C37CB81C4F9AE02.roa (hash: 8BNZKJ0bk38KOQOWjsH36VcnyN3HEx5P7NFwwrluJjM=) 5: 534379FCEE1611ECA6DE1824C4F9AE02.roa (hash: nz0TqyYIJbty+IiMMO1L40DQ1f9SJsrGYZW4STnoOWg=) 6: 5F22E1129B3011EF952F2762C4F9AE02.roa (hash: GzI1DKhtNKvZlRIctznDCQywZe9adFXYq+KIp89kCD4=) 7: 427BAA66E23211E8BD132210C4F9AE02.roa (hash: M3hgU5ipnFVKj6gek7MHkg0fz4T5KcW7+G9KqLsqkNs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CF4FE/BA13124E1D8511E2A77999DC08B02CD2/FrVkt1jfzVLFzokRkuMbcVscv-g.crl rsync://rpki.apnic.net/member_repository/A91CF4FE/BA13124E1D8511E2A77999DC08B02CD2/FrVkt1jfzVLFzokRkuMbcVscv-g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FrVkt1jfzVLFzokRkuMbcVscv-g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 14:26:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13647 (0x354f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CF4FE, serialNumber=16B564B758DFCD52C5CE891192E31B715B1CBFE8 Validity Not Before: Aug 22 14:26:10 2025 GMT Not After : Aug 29 14:26:10 2025 GMT Subject: CN=68a87e02-c929 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:c5:21:f8:22:4a:a5:b2:60:59:9e:d6:18:64: c3:91:c4:35:5d:c8:d2:0e:a2:a0:ab:43:c2:90:cd: 8f:33:29:20:0d:a2:67:04:c6:45:41:ee:b9:16:0d: ab:ea:35:52:5e:af:d7:7f:a9:e8:34:b5:4a:54:73: 1b:89:6a:e4:eb:74:ef:73:5b:73:9a:54:d8:21:19: b7:64:8d:a1:f4:89:e0:5a:17:13:49:06:22:27:4b: ae:b7:4b:07:79:36:a1:03:c6:a4:56:4d:88:eb:d6: b9:71:37:83:f9:a8:08:59:73:e5:d0:b2:2e:1c:b1: b4:6e:12:61:19:f9:6f:57:85:de:6d:21:b9:df:19: 71:2a:80:d4:d0:97:b2:1c:62:d9:f9:d1:5e:38:cb: f3:7c:de:55:de:0b:48:74:b3:91:85:07:01:ee:9b: 11:ef:0e:76:e6:bd:8b:dc:5b:0b:05:01:ff:07:1c: 60:be:79:52:80:86:f3:8a:98:3b:3c:cb:73:25:7b: 70:6a:db:64:0b:9b:a0:41:52:dd:67:96:ca:d5:8d: 00:38:da:01:9d:ee:b0:bf:41:fe:63:91:b2:e6:d2: 43:65:26:64:89:27:86:cd:56:16:de:4c:ec:0b:93: 05:df:21:69:9f:7b:46:0a:76:02:35:48:0b:fe:bb: 56:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:61:91:67:92:A9:6C:FE:2A:22:C2:6E:41:5F:B2:F3:55:6E:0D:D8 X509v3 Authority Key Identifier: keyid:16:B5:64:B7:58:DF:CD:52:C5:CE:89:11:92:E3:1B:71:5B:1C:BF:E8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CF4FE/BA13124E1D8511E2A77999DC08B02CD2/FrVkt1jfzVLFzokRkuMbcVscv-g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FrVkt1jfzVLFzokRkuMbcVscv-g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CF4FE/BA13124E1D8511E2A77999DC08B02CD2/FrVkt1jfzVLFzokRkuMbcVscv-g.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8c:a5:65:c1:43:cd:63:58:0c:56:c2:cc:ac:7c:d1:0e:c1:23: b4:27:6d:aa:33:05:7e:68:d0:a3:1a:51:13:fc:68:03:e4:49: 65:9c:cd:9a:b6:6b:c3:7b:bf:ba:77:06:17:54:9b:07:15:32: a5:bf:43:4c:e8:d1:e6:9c:9a:41:2e:69:68:a9:3b:66:09:34: 48:6c:9b:1f:4b:35:9b:61:fe:43:bc:29:a1:3f:54:7e:ec:c3: 93:30:44:52:84:27:53:a7:75:0b:2d:a2:c7:13:06:a7:00:6f: 5f:b3:aa:de:e6:52:19:41:ea:2e:dd:ce:b6:30:03:69:ca:16: 5c:04:74:86:3e:e7:c7:20:92:38:32:25:bc:68:ec:35:63:84: 9e:1f:c4:e2:83:4c:96:37:6d:4b:41:2d:65:19:5c:88:74:67: f5:9c:0f:29:8e:34:1e:93:21:17:87:6b:f6:78:16:98:52:59: fb:73:87:0d:02:c8:b2:47:10:d5:93:57:7f:67:d9:6c:c7:4d: 3e:1e:9a:59:4b:6e:72:6c:7c:23:f7:75:bd:81:1f:72:4a:ad: f8:2d:86:51:37:fb:73:b7:11:04:bb:c7:69:29:70:52:fd:97: e5:0f:64:83:8c:d1:49:19:51:60:77:9a:10:73:36:b1:5c:1a: b0:69:61:f5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNU8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0Y0RkUxMTAvBgNVBAUTKDE2QjU2NEI3NThERkNENTJDNUNFODkxMTkyRTMxQjcx NUIxQ0JGRTgwHhcNMjUwODIyMTQyNjEwWhcNMjUwODI5MTQyNjEwWjAYMRYwFAYD VQQDEw02OGE4N2UwMi1jOTI5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAp8Uh+CJKpbJgWZ7WGGTDkcQ1XcjSDqKgq0PCkM2PMykgDaJnBMZFQe65Fg2r 6jVSXq/Xf6noNLVKVHMbiWrk63Tvc1tzmlTYIRm3ZI2h9IngWhcTSQYiJ0uut0sH eTahA8akVk2I69a5cTeD+agIWXPl0LIuHLG0bhJhGflvV4XebSG53xlxKoDU0Jey HGLZ+dFeOMvzfN5V3gtIdLORhQcB7psR7w525r2L3FsLBQH/BxxgvnlSgIbzipg7 PMtzJXtwattkC5ugQVLdZ5bK1Y0AONoBne6wv0H+Y5Gy5tJDZSZkiSeGzVYW3kzs C5MF3yFpn3tGCnYCNUgL/rtWhwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLphkWeS qWz+KiLCbkFfsvNVbg3YMB8GA1UdIwQYMBaAFBa1ZLdY381Sxc6JEZLjG3FbHL/o MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRjRGRS9CQTEzMTI0RTFE ODUxMUUyQTc3OTk5REMwOEIwMkNEMi9GclZrdDFqZnpWTEZ6b2tSa3VNYmNWc2N2 LWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZyVmt0MWpmelZMRnpva1JrdU1iY1ZzY3YtZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RjRGRS9CQTEzMTI0RTFEODUxMUUyQTc3OTk5REMwOEIwMkNEMi9GclZrdDFqZnpW TEZ6b2tSa3VNYmNWc2N2LWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCMpWXBQ81jWAxWwsysfNEOwSO0J22qMwV+aNCjGlET/GgD5EllnM2a tmvDe7+6dwYXVJsHFTKlv0NM6NHmnJpBLmloqTtmCTRIbJsfSzWbYf5DvCmhP1R+ 7MOTMERShCdTp3ULLaLHEwanAG9fs6re5lIZQeou3c62MANpyhZcBHSGPufHIJI4 MiW8aOw1Y4SeH8Tig0yWN21LQS1lGVyIdGf1nA8pjjQekyEXh2v2eBaYUln7c4cN AsiyRxDVk1d/Z9lsx00+HppZS25ybHwj93W9gR9ySq34LYZRN/tztxEEu8dpKXBS /ZflD2SDjNFJGVFgd5oQczaxXBqwaWH1 -----END CERTIFICATE-----Generated at Sat Aug 23 17:15:34 2025 by rpki-client