$ rpki-client -vvf rpki.apnic.net/member_repository/A91895D8/4F314C403ADC11E9B1D30C12C4F9AE02/n7qfr8GmfUUaL1m57iMkLqndRXI.mft File: n7qfr8GmfUUaL1m57iMkLqndRXI.mft (raw, json) Hash identifier: RHHLcRsd5u1QSVtG9XeCV1O0/6aTocLFCRDO76tgYoU= Subject key identifier: 0B:A1:C4:84:9C:03:FE:A0:BC:7E:3A:6B:08:78:84:7B:E8:99:4B:0E Authority key identifier: 9F:BA:9F:AF:C1:A6:7D:45:1A:2F:59:B9:EE:23:24:2E:A9:DD:45:72 Certificate issuer: /CN=A91895D8/serialNumber=9FBA9FAFC1A67D451A2F59B9EE23242EA9DD4572 Certificate serial: 1071 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n7qfr8GmfUUaL1m57iMkLqndRXI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91895D8/4F314C403ADC11E9B1D30C12C4F9AE02/n7qfr8GmfUUaL1m57iMkLqndRXI.mft Manifest number: 1069 Signing time: Sun 10 Aug 2025 17:23:27 +0000 Manifest this update: Sun 10 Aug 2025 17:23:27 +0000 Manifest next update: Sun 17 Aug 2025 17:23:27 +0000 Files and hashes: 1: n7qfr8GmfUUaL1m57iMkLqndRXI.crl (hash: EiYxyeWZ6z6XrW7XssQDGkS+OyLPs/Tp8nzDiQz8qac=) 2: 566988C8717411E9AF629E4BC4F9AE02.roa (hash: XI/7jfg+GeSHUA3qICjMcaW/9XUB7SlPIfPTYeMPDXE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91895D8/4F314C403ADC11E9B1D30C12C4F9AE02/n7qfr8GmfUUaL1m57iMkLqndRXI.crl rsync://rpki.apnic.net/member_repository/A91895D8/4F314C403ADC11E9B1D30C12C4F9AE02/n7qfr8GmfUUaL1m57iMkLqndRXI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n7qfr8GmfUUaL1m57iMkLqndRXI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4209 (0x1071) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91895D8, serialNumber=9FBA9FAFC1A67D451A2F59B9EE23242EA9DD4572 Validity Not Before: Aug 10 17:23:27 2025 GMT Not After : Aug 17 17:23:27 2025 GMT Subject: CN=6898d58f-039f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:e4:73:1d:9e:9f:d1:10:66:e7:cd:dc:e2:d8: f4:ac:01:72:7b:31:2c:2d:97:26:28:17:fc:d9:ba: e7:f2:f6:99:ee:1b:79:7c:ba:2e:ea:8c:8b:9f:6f: bc:6b:e3:6d:c6:b0:2a:e5:79:90:30:cc:0c:c4:77: 9b:a3:76:df:ea:91:64:b9:78:b2:fc:50:93:e1:61: 99:4f:0f:86:8c:f2:49:cc:7c:11:a9:ab:8c:89:df: 5d:61:35:1c:a1:f4:06:19:cb:2e:53:d9:1c:2b:aa: cb:a8:dc:55:8c:22:c9:f5:8f:75:61:d5:22:17:eb: a1:c3:8a:c3:05:07:b7:0a:4f:1a:cc:c4:9c:7c:7c: c1:15:4d:bb:c6:79:30:d1:d9:32:92:84:16:af:88: 6a:4c:0b:4d:87:09:a2:f5:e0:a4:02:f0:7d:c8:b2: 55:39:16:88:26:7c:48:e4:1d:45:be:58:b5:7c:4d: 0b:09:03:9a:b3:9c:06:fe:bf:a5:81:a0:b7:46:17: 2a:15:98:c6:5b:92:8d:d6:af:99:b1:30:78:28:9f: 21:47:9c:2a:15:c6:a2:dd:7e:16:72:ba:df:b8:f0: 66:e3:62:8c:37:63:f5:ee:6f:54:a2:58:9f:71:7f: ab:c8:a4:8b:6f:ac:aa:ea:1a:5b:aa:ff:66:93:a0: 93:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:A1:C4:84:9C:03:FE:A0:BC:7E:3A:6B:08:78:84:7B:E8:99:4B:0E X509v3 Authority Key Identifier: keyid:9F:BA:9F:AF:C1:A6:7D:45:1A:2F:59:B9:EE:23:24:2E:A9:DD:45:72 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91895D8/4F314C403ADC11E9B1D30C12C4F9AE02/n7qfr8GmfUUaL1m57iMkLqndRXI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n7qfr8GmfUUaL1m57iMkLqndRXI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91895D8/4F314C403ADC11E9B1D30C12C4F9AE02/n7qfr8GmfUUaL1m57iMkLqndRXI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2f:01:c8:42:ab:b3:63:c3:ca:e6:4f:11:ce:2f:99:dc:8f:19: d0:8b:b5:32:d4:32:72:48:7c:31:c3:2a:74:e4:a6:68:6d:b4: 70:81:2d:3c:b2:0c:b0:87:79:83:56:11:1e:3a:56:4b:36:19: b4:a3:60:40:3c:cf:95:0c:ee:23:73:10:60:29:83:bb:5f:d6: e8:a1:7a:a6:de:9b:29:c6:9c:36:b2:eb:43:f2:db:42:29:d1: 9f:86:7f:1a:c7:f0:07:f4:a6:12:0b:f3:72:26:a8:57:e1:b4: 75:15:40:72:39:dd:0a:01:57:ac:ea:fd:a0:3b:a9:33:4f:91: f0:d8:6d:0a:ab:63:9f:d8:e9:6f:29:9f:d9:d1:f4:57:a1:b3: 51:58:8b:a4:f2:a8:68:3b:67:42:56:59:1a:48:d7:8d:d8:0d: 67:5c:ec:d1:ee:7f:17:fa:9b:c7:97:d5:76:8d:b9:81:d6:6e: 50:29:f2:67:ac:cb:1d:fe:c9:4e:71:3b:40:a9:70:d1:f3:38: 38:c6:f3:50:35:c2:dc:f6:1b:83:39:63:57:ef:48:dc:b1:5f: a3:fe:db:79:d3:46:ac:3b:fe:75:1b:b6:a1:a0:e4:59:59:79: 92:eb:98:4c:6d:c5:65:f7:e5:0d:a8:56:0c:66:85:51:ff:ab: 63:6b:5f:27 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEHEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODk1RDgxMTAvBgNVBAUTKDlGQkE5RkFGQzFBNjdENDUxQTJGNTlCOUVFMjMyNDJF QTlERDQ1NzIwHhcNMjUwODEwMTcyMzI3WhcNMjUwODE3MTcyMzI3WjAYMRYwFAYD VQQDEw02ODk4ZDU4Zi0wMzlmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwuRzHZ6f0RBm583c4tj0rAFyezEsLZcmKBf82brn8vaZ7ht5fLou6oyLn2+8 a+NtxrAq5XmQMMwMxHebo3bf6pFkuXiy/FCT4WGZTw+GjPJJzHwRqauMid9dYTUc ofQGGcsuU9kcK6rLqNxVjCLJ9Y91YdUiF+uhw4rDBQe3Ck8azMScfHzBFU27xnkw 0dkykoQWr4hqTAtNhwmi9eCkAvB9yLJVORaIJnxI5B1Fvli1fE0LCQOas5wG/r+l gaC3RhcqFZjGW5KN1q+ZsTB4KJ8hR5wqFcai3X4WcrrfuPBm42KMN2P17m9Uolif cX+ryKSLb6yq6hpbqv9mk6CTzwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAuhxISc A/6gvH46awh4hHvomUsOMB8GA1UdIwQYMBaAFJ+6n6/Bpn1FGi9Zue4jJC6p3UVy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4OTVEOC80RjMxNEM0MDNB REMxMUU5QjFEMzBDMTJDNEY5QUUwMi9uN3FmcjhHbWZVVWFMMW01N2lNa0xxbmRS WEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL243cWZyOEdtZlVVYUwxbTU3aU1rTHFuZFJYSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 OTVEOC80RjMxNEM0MDNBREMxMUU5QjFEMzBDMTJDNEY5QUUwMi9uN3FmcjhHbWZV VWFMMW01N2lNa0xxbmRSWEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAvAchCq7Njw8rmTxHOL5ncjxnQi7Uy1DJySHwxwyp05KZobbRwgS08 sgywh3mDVhEeOlZLNhm0o2BAPM+VDO4jcxBgKYO7X9booXqm3pspxpw2sutD8ttC KdGfhn8ax/AH9KYSC/NyJqhX4bR1FUByOd0KAVes6v2gO6kzT5Hw2G0Kq2Of2Olv KZ/Z0fRXobNRWIuk8qhoO2dCVlkaSNeN2A1nXOzR7n8X+pvHl9V2jbmB1m5QKfJn rMsd/slOcTtAqXDR8zg4xvNQNcLc9huDOWNX70jcsV+j/tt500asO/51G7ahoORZ WXmS65hMbcVl9+UNqFYMZoVR/6tja18n -----END CERTIFICATE-----Generated at Mon Aug 11 04:27:09 2025 by rpki-client