$ rpki-client -vvf rpki.apnic.net/member_repository/A91CF4FE/BA13124E1D8511E2A77999DC08B02CD2/FrVkt1jfzVLFzokRkuMbcVscv-g.mft File: FrVkt1jfzVLFzokRkuMbcVscv-g.mft (raw, json) Hash identifier: LNVSYDq2ArTHaBx3n0DXO0Vn89A3jSzbI4mJQecEyss= Subject key identifier: 5A:A1:6A:30:65:5B:C7:3B:20:1F:AE:9F:0E:A2:4E:AF:81:C6:2F:44 Authority key identifier: 16:B5:64:B7:58:DF:CD:52:C5:CE:89:11:92:E3:1B:71:5B:1C:BF:E8 Certificate issuer: /CN=A91CF4FE/serialNumber=16B564B758DFCD52C5CE891192E31B715B1CBFE8 Certificate serial: 3574 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FrVkt1jfzVLFzokRkuMbcVscv-g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CF4FE/BA13124E1D8511E2A77999DC08B02CD2/FrVkt1jfzVLFzokRkuMbcVscv-g.mft Manifest number: 351F Signing time: Sat 18 Oct 2025 14:28:04 +0000 Manifest this update: Sat 18 Oct 2025 14:28:03 +0000 Manifest next update: Sat 25 Oct 2025 14:28:03 +0000 Files and hashes: 1: FrVkt1jfzVLFzokRkuMbcVscv-g.crl (hash: s46bZ1CB5uBFvpVECOmY0yL/bV7nyenx0+hwtqOwr5I=) 2: 10DAE05EB04811EABB4AEF61C4F9AE02.roa (hash: bPtENJEcOoeg2k8xe2jWRrY5UKQvlUbjR5xndoVRe10=) 3: 40DFD5AC650711EFB94FD44FC4F9AE02.roa (hash: zawwiUMAVIdG2bykFeNbnA88n/1gVRjEvWeHRre2uoI=) 4: F6FAB490BB5811EF8C37CB81C4F9AE02.roa (hash: 4h0iDWjsfa7NDKLfke8j7fgE3a1MCnkylqCcKoNifz0=) 5: 534379FCEE1611ECA6DE1824C4F9AE02.roa (hash: IzD5q2GzmuV18q1dnBjmacTQl4qcdKe2UsljJfilqlM=) 6: 5F22E1129B3011EF952F2762C4F9AE02.roa (hash: qTYeOx6pg1ogjikS/4HOIDZ4QqzqAPHZTv7DK6zo/c4=) 7: 427BAA66E23211E8BD132210C4F9AE02.roa (hash: h82lo/wGrqpMf7HWVtsO8+F8lE20C+ULtc+zbWn4ALA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CF4FE/BA13124E1D8511E2A77999DC08B02CD2/FrVkt1jfzVLFzokRkuMbcVscv-g.crl rsync://rpki.apnic.net/member_repository/A91CF4FE/BA13124E1D8511E2A77999DC08B02CD2/FrVkt1jfzVLFzokRkuMbcVscv-g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FrVkt1jfzVLFzokRkuMbcVscv-g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 14:28:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13684 (0x3574) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CF4FE, serialNumber=16B564B758DFCD52C5CE891192E31B715B1CBFE8 Validity Not Before: Oct 18 14:28:03 2025 GMT Not After : Oct 25 14:28:03 2025 GMT Subject: CN=68f3a3f4-c80c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:b7:a2:d2:ea:0c:95:ed:72:fb:65:a9:d5:15: 86:5f:f2:fd:52:6d:9e:bc:97:9b:36:83:e3:9b:a6: 7c:3f:d1:88:31:ed:7a:b3:ae:48:56:fc:ce:ed:0d: 1f:21:65:5f:c6:c7:ec:0e:5c:77:4e:1f:d6:a2:0e: 63:c3:a3:df:1d:06:97:41:33:26:2c:c1:e4:f4:07: 09:eb:32:26:b8:63:a4:a0:b2:03:19:d6:67:82:4e: 36:90:6a:10:2e:16:22:e4:0c:cd:e5:e4:29:04:75: 79:3b:32:39:64:83:4e:45:04:b8:57:2e:2f:e3:91: dc:61:99:67:6c:24:f7:9d:9d:bc:74:2b:85:8c:d1: f0:bc:b5:fc:cc:30:11:06:86:c7:26:0c:a4:59:03: 27:7b:77:9a:02:42:17:83:f7:de:e1:4d:5e:2a:3f: 49:8b:73:d8:7b:f3:3d:94:86:3a:e6:74:e5:07:83: 97:a2:e2:6f:da:1d:f3:7d:2f:ae:aa:3b:66:9b:b1: e3:4f:ec:6e:d8:bd:61:4c:eb:0a:e8:e2:a3:31:07: 2a:0e:b3:92:d6:ea:db:74:c3:0e:1a:d2:24:8a:7a: 05:09:19:2f:83:57:07:ac:8e:bf:fa:26:bb:4d:3f: 5f:a3:c2:74:00:d7:e0:21:5b:72:dc:6d:03:46:93: 97:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:A1:6A:30:65:5B:C7:3B:20:1F:AE:9F:0E:A2:4E:AF:81:C6:2F:44 X509v3 Authority Key Identifier: keyid:16:B5:64:B7:58:DF:CD:52:C5:CE:89:11:92:E3:1B:71:5B:1C:BF:E8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CF4FE/BA13124E1D8511E2A77999DC08B02CD2/FrVkt1jfzVLFzokRkuMbcVscv-g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FrVkt1jfzVLFzokRkuMbcVscv-g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CF4FE/BA13124E1D8511E2A77999DC08B02CD2/FrVkt1jfzVLFzokRkuMbcVscv-g.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b0:4b:aa:94:f5:df:6f:62:5a:df:f5:33:dd:14:76:a4:02:e3: e7:5e:c3:c1:44:57:6a:d2:b0:d1:47:08:7a:81:2e:56:8f:ce: 7b:bf:5b:a5:46:83:50:f8:7c:0d:ea:82:7d:65:a9:fa:a3:bd: 4c:46:4a:11:76:72:0a:34:f1:b0:c5:27:e6:83:fe:ab:1b:8a: 50:a6:c7:eb:16:58:c0:c2:39:9b:2f:54:f3:d2:fd:dd:69:99: 7f:23:5f:47:6b:5e:86:4e:7f:24:06:e5:17:40:d0:5c:06:93: 95:c9:3f:ad:f2:67:2a:de:f1:64:70:52:08:5a:00:2f:5c:7e: bd:b0:d7:75:a9:d6:23:78:24:5b:7c:c3:65:63:3c:84:5f:11: 88:d8:f3:b4:7b:60:aa:20:f8:fc:8e:80:12:7c:b2:b8:5b:40: fb:d0:6c:36:b0:3f:7f:6f:c0:af:e1:5a:89:97:dc:17:8c:ea: fd:67:20:25:df:f9:a8:64:72:bd:ab:86:c3:3c:b1:e1:78:4c: eb:35:fa:67:42:f9:c4:39:dc:96:70:84:a9:1a:d1:97:97:9d: 6e:90:0d:de:45:a3:e9:2b:b2:42:8a:17:fd:ee:63:2e:c4:2f: 2a:5d:53:9d:ab:5b:83:50:8e:04:11:0b:44:cf:5d:60:a7:61: 25:cb:4e:08 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNXQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0Y0RkUxMTAvBgNVBAUTKDE2QjU2NEI3NThERkNENTJDNUNFODkxMTkyRTMxQjcx NUIxQ0JGRTgwHhcNMjUxMDE4MTQyODAzWhcNMjUxMDI1MTQyODAzWjAYMRYwFAYD VQQDEw02OGYzYTNmNC1jODBjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqLei0uoMle1y+2Wp1RWGX/L9Um2evJebNoPjm6Z8P9GIMe16s65IVvzO7Q0f IWVfxsfsDlx3Th/Wog5jw6PfHQaXQTMmLMHk9AcJ6zImuGOkoLIDGdZngk42kGoQ LhYi5AzN5eQpBHV5OzI5ZINORQS4Vy4v45HcYZlnbCT3nZ28dCuFjNHwvLX8zDAR BobHJgykWQMne3eaAkIXg/fe4U1eKj9Ji3PYe/M9lIY65nTlB4OXouJv2h3zfS+u qjtmm7HjT+xu2L1hTOsK6OKjMQcqDrOS1urbdMMOGtIkinoFCRkvg1cHrI6/+ia7 TT9fo8J0ANfgIVty3G0DRpOXjQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFqhajBl W8c7IB+unw6iTq+Bxi9EMB8GA1UdIwQYMBaAFBa1ZLdY381Sxc6JEZLjG3FbHL/o MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRjRGRS9CQTEzMTI0RTFE ODUxMUUyQTc3OTk5REMwOEIwMkNEMi9GclZrdDFqZnpWTEZ6b2tSa3VNYmNWc2N2 LWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZyVmt0MWpmelZMRnpva1JrdU1iY1ZzY3YtZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RjRGRS9CQTEzMTI0RTFEODUxMUUyQTc3OTk5REMwOEIwMkNEMi9GclZrdDFqZnpW TEZ6b2tSa3VNYmNWc2N2LWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCwS6qU9d9vYlrf9TPdFHakAuPnXsPBRFdq0rDRRwh6gS5Wj857v1ul RoNQ+HwN6oJ9Zan6o71MRkoRdnIKNPGwxSfmg/6rG4pQpsfrFljAwjmbL1Tz0v3d aZl/I19Ha16GTn8kBuUXQNBcBpOVyT+t8mcq3vFkcFIIWgAvXH69sNd1qdYjeCRb fMNlYzyEXxGI2PO0e2CqIPj8joASfLK4W0D70Gw2sD9/b8Cv4VqJl9wXjOr9ZyAl 3/moZHK9q4bDPLHheEzrNfpnQvnEOdyWcISpGtGXl51ukA3eRaPpK7JCihf97mMu xC8qXVOdq1uDUI4EEQtEz11gp2Ely04I -----END CERTIFICATE-----Generated at Mon Oct 20 01:45:54 2025 by rpki-client