$ rpki-client -vvf rpki.apnic.net/member_repository/A91895D8/4F314C403ADC11E9B1D30C12C4F9AE02/n7qfr8GmfUUaL1m57iMkLqndRXI.mft File: n7qfr8GmfUUaL1m57iMkLqndRXI.mft (raw, json) Hash identifier: HPrz/5tD3C3imY+5sg/YL1sROG4Xw1t8TMqSqXcOwRk= Subject key identifier: E1:EC:70:20:08:E8:21:F2:94:93:51:9D:2D:B3:9C:FE:4A:02:62:9E Authority key identifier: 9F:BA:9F:AF:C1:A6:7D:45:1A:2F:59:B9:EE:23:24:2E:A9:DD:45:72 Certificate issuer: /CN=A91895D8/serialNumber=9FBA9FAFC1A67D451A2F59B9EE23242EA9DD4572 Certificate serial: 109F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n7qfr8GmfUUaL1m57iMkLqndRXI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91895D8/4F314C403ADC11E9B1D30C12C4F9AE02/n7qfr8GmfUUaL1m57iMkLqndRXI.mft Manifest number: 1096 Signing time: Sun 02 Nov 2025 17:22:36 +0000 Manifest this update: Sun 02 Nov 2025 17:22:35 +0000 Manifest next update: Sun 09 Nov 2025 17:22:35 +0000 Files and hashes: 1: n7qfr8GmfUUaL1m57iMkLqndRXI.crl (hash: W+gVdJNJ0gb6jZnQv31ZV3HcopAqupLO5o/XQ3BYQR4=) 2: 566988C8717411E9AF629E4BC4F9AE02.roa (hash: EtmvbN1xVVE7PUjHrIh1I7up8NoBR/klrPWqoCS0Bq8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91895D8/4F314C403ADC11E9B1D30C12C4F9AE02/n7qfr8GmfUUaL1m57iMkLqndRXI.crl rsync://rpki.apnic.net/member_repository/A91895D8/4F314C403ADC11E9B1D30C12C4F9AE02/n7qfr8GmfUUaL1m57iMkLqndRXI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n7qfr8GmfUUaL1m57iMkLqndRXI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 17:22:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4255 (0x109f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91895D8, serialNumber=9FBA9FAFC1A67D451A2F59B9EE23242EA9DD4572 Validity Not Before: Nov 2 17:22:35 2025 GMT Not After : Nov 9 17:22:35 2025 GMT Subject: CN=6907935b-bc49 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:b8:c3:75:c4:13:37:3a:45:8d:18:b9:93:d7: a0:49:4c:00:97:89:e4:7f:4a:9d:3e:ac:b3:23:f1: 32:b2:a1:6a:75:5a:40:ef:45:ee:20:3d:10:ee:b6: 21:46:41:50:78:eb:f5:1c:1c:69:72:29:77:58:e3: 2d:e2:d6:ef:06:01:b3:15:44:3e:cd:32:8d:2b:51: 9e:77:54:ec:aa:92:58:b9:b6:e8:c1:27:53:ec:ae: df:d1:43:26:26:ed:96:c1:90:6e:90:09:87:72:d2: 7e:47:31:2d:85:c1:19:c5:52:2b:e4:31:d1:87:18: b3:4f:9a:e2:f3:98:e8:b5:b6:2e:ca:ca:b4:3f:f4: ed:ba:1d:7b:31:ca:f1:94:87:df:13:c9:c5:8d:ad: db:7f:06:ad:fe:17:2b:02:72:8c:77:7a:3e:d7:55: b3:0c:b1:6d:17:82:e6:b9:f1:73:b8:3e:d1:b0:9b: 34:34:ea:c9:1f:88:9f:c4:f7:81:cf:a7:b6:56:5b: 9b:07:38:c8:47:a6:0f:e4:7b:87:2b:e9:df:9d:2e: 46:7d:63:a8:15:69:48:7b:d7:68:b3:b1:53:67:e6: 0c:28:8c:b5:ab:bd:79:cf:56:6c:90:87:81:82:6f: 51:de:e6:06:94:81:c7:3a:83:f0:74:12:2d:67:10: da:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:EC:70:20:08:E8:21:F2:94:93:51:9D:2D:B3:9C:FE:4A:02:62:9E X509v3 Authority Key Identifier: keyid:9F:BA:9F:AF:C1:A6:7D:45:1A:2F:59:B9:EE:23:24:2E:A9:DD:45:72 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91895D8/4F314C403ADC11E9B1D30C12C4F9AE02/n7qfr8GmfUUaL1m57iMkLqndRXI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n7qfr8GmfUUaL1m57iMkLqndRXI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91895D8/4F314C403ADC11E9B1D30C12C4F9AE02/n7qfr8GmfUUaL1m57iMkLqndRXI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 44:34:c4:e4:13:e7:1b:ad:0c:f0:45:a8:c4:59:54:7f:f7:5c: 43:a8:b0:24:ce:28:b1:f6:a6:e1:c8:14:38:09:2a:07:d9:5d: 31:e8:a8:07:78:a2:3d:6d:c2:d1:e5:4d:19:14:b4:05:c5:30: dd:94:3b:5d:a4:a3:0e:05:29:a7:b9:81:1e:86:dd:53:d5:16: 08:b4:58:fa:51:49:96:fc:e5:04:2a:23:a1:a4:d3:e1:86:09: 37:58:a0:c8:3d:16:6b:b2:34:46:e8:a1:3a:fa:72:92:0c:42: ca:d0:ac:6c:0c:74:90:c8:97:f4:67:34:bd:09:90:a9:24:91: b9:71:ce:c0:93:f2:59:5e:8e:47:f0:08:08:0f:c9:a0:3e:5d: 15:e9:f1:22:eb:70:bd:81:a1:0c:1f:03:ee:b3:5f:10:c7:e6: 27:6d:fc:95:7f:f3:73:65:b3:38:6f:ad:18:89:f5:e0:87:3a: 54:a5:c4:f7:ab:ae:f8:04:44:a8:54:06:df:59:d0:15:a6:a6: f1:44:db:dd:43:61:b3:00:1a:4c:b4:59:b6:30:d2:6e:08:69: 8d:83:58:6c:d2:fa:8d:f3:50:08:ad:49:e5:09:91:c9:d0:8d: 5a:55:17:1c:48:d6:9c:c1:26:fd:41:e8:f7:d1:1b:5d:8f:ba: df:63:95:4b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEJ8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODk1RDgxMTAvBgNVBAUTKDlGQkE5RkFGQzFBNjdENDUxQTJGNTlCOUVFMjMyNDJF QTlERDQ1NzIwHhcNMjUxMTAyMTcyMjM1WhcNMjUxMTA5MTcyMjM1WjAYMRYwFAYD VQQDEw02OTA3OTM1Yi1iYzQ5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv7jDdcQTNzpFjRi5k9egSUwAl4nkf0qdPqyzI/EysqFqdVpA70XuID0Q7rYh RkFQeOv1HBxpcil3WOMt4tbvBgGzFUQ+zTKNK1Ged1TsqpJYubbowSdT7K7f0UMm Ju2WwZBukAmHctJ+RzEthcEZxVIr5DHRhxizT5ri85jotbYuysq0P/Ttuh17Mcrx lIffE8nFja3bfwat/hcrAnKMd3o+11WzDLFtF4LmufFzuD7RsJs0NOrJH4ifxPeB z6e2VlubBzjIR6YP5HuHK+nfnS5GfWOoFWlIe9dos7FTZ+YMKIy1q715z1ZskIeB gm9R3uYGlIHHOoPwdBItZxDa7QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOHscCAI 6CHylJNRnS2znP5KAmKeMB8GA1UdIwQYMBaAFJ+6n6/Bpn1FGi9Zue4jJC6p3UVy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4OTVEOC80RjMxNEM0MDNB REMxMUU5QjFEMzBDMTJDNEY5QUUwMi9uN3FmcjhHbWZVVWFMMW01N2lNa0xxbmRS WEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL243cWZyOEdtZlVVYUwxbTU3aU1rTHFuZFJYSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 OTVEOC80RjMxNEM0MDNBREMxMUU5QjFEMzBDMTJDNEY5QUUwMi9uN3FmcjhHbWZV VWFMMW01N2lNa0xxbmRSWEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBENMTkE+cbrQzwRajEWVR/91xDqLAkziix9qbhyBQ4CSoH2V0x6KgH eKI9bcLR5U0ZFLQFxTDdlDtdpKMOBSmnuYEeht1T1RYItFj6UUmW/OUEKiOhpNPh hgk3WKDIPRZrsjRG6KE6+nKSDELK0KxsDHSQyJf0ZzS9CZCpJJG5cc7Ak/JZXo5H 8AgID8mgPl0V6fEi63C9gaEMHwPus18Qx+YnbfyVf/NzZbM4b60YifXghzpUpcT3 q674BESoVAbfWdAVpqbxRNvdQ2GzABpMtFm2MNJuCGmNg1hs0vqN81AIrUnlCZHJ 0I1aVRccSNacwSb9Qej30Rtdj7rfY5VL -----END CERTIFICATE-----Generated at Tue Nov 4 12:37:00 2025 by rpki-client