$ rpki-client -vvf rpki.apnic.net/member_repository/A91EF17A/74BB24D23F5D11EF8BF7860EC4F9AE02/s--n1q4ZnRRYLdTsuRY6PJ2EF1k.mft File: s--n1q4ZnRRYLdTsuRY6PJ2EF1k.mft (raw, json) Hash identifier: c7I6/UxdyoBqkBSv8D+UZkN4FEXMIS8FVjG+ec9sMs0= Subject key identifier: 17:00:50:C1:D8:56:90:3D:1D:7A:A0:56:42:AB:DD:8B:A1:4F:5C:18 Authority key identifier: B3:EF:A7:D6:AE:19:9D:14:58:2D:D4:EC:B9:16:3A:3C:9D:84:17:59 Certificate issuer: /CN=A91EF17A/serialNumber=B3EFA7D6AE199D14582DD4ECB9163A3C9D841759 Certificate serial: E4 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/s--n1q4ZnRRYLdTsuRY6PJ2EF1k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EF17A/74BB24D23F5D11EF8BF7860EC4F9AE02/s--n1q4ZnRRYLdTsuRY6PJ2EF1k.mft Manifest number: D8 Signing time: Thu 07 Aug 2025 06:17:20 +0000 Manifest this update: Thu 07 Aug 2025 06:17:19 +0000 Manifest next update: Thu 14 Aug 2025 06:17:19 +0000 Files and hashes: 1: s--n1q4ZnRRYLdTsuRY6PJ2EF1k.crl (hash: vzjZQdCnrSyTfFuS+96LhnHuImnHy2WiWtlaMF0XTkY=) 2: B4F165084F1F11EFA3B1F709C4F9AE02.roa (hash: 6g7DJTli/YH5hSeeCwQn1OlBs7GZnC1wNbHw8krPxSQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EF17A/74BB24D23F5D11EF8BF7860EC4F9AE02/s--n1q4ZnRRYLdTsuRY6PJ2EF1k.crl rsync://rpki.apnic.net/member_repository/A91EF17A/74BB24D23F5D11EF8BF7860EC4F9AE02/s--n1q4ZnRRYLdTsuRY6PJ2EF1k.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/s--n1q4ZnRRYLdTsuRY6PJ2EF1k.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 228 (0xe4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EF17A, serialNumber=B3EFA7D6AE199D14582DD4ECB9163A3C9D841759 Validity Not Before: Aug 7 06:17:19 2025 GMT Not After : Aug 14 06:17:19 2025 GMT Subject: CN=689444f0-9e3f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:81:16:2e:c6:59:1f:2a:71:ac:87:f3:10:32: fd:5e:aa:85:d5:53:e3:b8:a5:af:57:7d:c8:0a:83: 3f:1d:20:c5:8d:ad:4d:21:c6:27:b7:c7:bc:57:6a: b5:7b:9e:4a:be:47:49:7d:27:0f:a7:74:cf:d1:ae: 14:eb:53:7f:f1:21:c8:ae:96:d3:a3:32:ec:a3:96: 1d:05:a4:37:e2:3b:9d:de:46:bc:89:33:9d:94:a6: 96:f3:9c:c2:68:1c:50:12:00:cc:92:54:b1:21:7f: ae:40:0d:a9:ec:89:fb:c5:81:37:bf:c4:99:8b:71: 9a:25:e6:93:9f:d1:24:42:15:83:4b:24:8c:bb:b3: 6d:8d:af:a5:35:20:c2:15:b3:92:e4:92:53:1e:2d: f1:cd:e6:16:98:ae:db:9b:58:7f:87:aa:84:fe:f9: 8a:ea:4f:4c:92:ba:33:24:33:d3:85:ae:0c:fb:b6: 80:ed:d0:33:29:c4:7b:6c:98:0c:9f:3b:da:9d:27: b2:bd:24:13:1b:f0:11:42:20:09:17:41:f7:39:db: 96:f2:ab:79:12:e7:f1:31:79:00:2f:e9:59:6a:09: 14:7e:13:2a:d0:c7:5c:78:16:76:fa:f6:7b:c4:32: 3b:13:48:fe:32:d2:7f:d0:b6:07:0e:ea:35:96:a6: 25:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:00:50:C1:D8:56:90:3D:1D:7A:A0:56:42:AB:DD:8B:A1:4F:5C:18 X509v3 Authority Key Identifier: keyid:B3:EF:A7:D6:AE:19:9D:14:58:2D:D4:EC:B9:16:3A:3C:9D:84:17:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EF17A/74BB24D23F5D11EF8BF7860EC4F9AE02/s--n1q4ZnRRYLdTsuRY6PJ2EF1k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/s--n1q4ZnRRYLdTsuRY6PJ2EF1k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EF17A/74BB24D23F5D11EF8BF7860EC4F9AE02/s--n1q4ZnRRYLdTsuRY6PJ2EF1k.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ae:a0:2e:08:81:fe:d1:f2:a6:35:e1:53:82:d4:d3:7a:fd:21: dc:41:7e:ff:d2:fe:00:fc:10:35:4a:a5:1b:ad:fe:60:78:e6: d4:e2:ea:cf:91:27:e1:06:62:e5:2c:a2:eb:e9:cf:e3:fc:7a: 71:78:6e:ef:c7:2d:4a:7d:01:97:17:d3:bf:35:73:03:6a:b0: cf:59:ee:7f:85:43:77:89:78:14:6e:ce:b4:bf:eb:95:1b:5a: 08:dd:a1:f9:8c:f5:5a:50:26:be:d2:cf:9e:f6:b9:b0:b9:77: 1d:26:86:53:27:48:6f:2d:6f:2e:68:78:50:49:ff:e5:d9:fb: 54:9a:06:6e:ee:99:d1:89:d2:3c:70:b7:07:84:9a:0f:24:3d: 5e:5e:7f:2f:46:07:3a:b3:ff:f4:83:42:65:df:e8:f4:7d:d2: cc:8f:b6:bb:79:04:cc:39:28:3e:d9:4d:9e:9d:ad:ab:1f:48: 48:7d:d9:34:65:a9:07:ef:c1:93:d8:ab:2b:11:b6:c4:ff:bc: 08:c0:1a:e4:98:2b:6b:74:4a:1a:58:85:b2:ee:27:ac:34:3b: 91:40:6c:6f:cc:56:4a:69:cf:1d:f4:12:fb:f1:4e:c8:a8:0d: ae:30:d7:ed:e8:37:12:6d:9b:66:4a:94:7c:3b:c0:0a:7e:a8: a8:a4:f8:0c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAOQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUYxN0ExMTAvBgNVBAUTKEIzRUZBN0Q2QUUxOTlEMTQ1ODJERDRFQ0I5MTYzQTND OUQ4NDE3NTkwHhcNMjUwODA3MDYxNzE5WhcNMjUwODE0MDYxNzE5WjAYMRYwFAYD VQQDEw02ODk0NDRmMC05ZTNmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwIEWLsZZHypxrIfzEDL9XqqF1VPjuKWvV33ICoM/HSDFja1NIcYnt8e8V2q1 e55KvkdJfScPp3TP0a4U61N/8SHIrpbTozLso5YdBaQ34jud3ka8iTOdlKaW85zC aBxQEgDMklSxIX+uQA2p7In7xYE3v8SZi3GaJeaTn9EkQhWDSySMu7Ntja+lNSDC FbOS5JJTHi3xzeYWmK7bm1h/h6qE/vmK6k9MkrozJDPTha4M+7aA7dAzKcR7bJgM nzvanSeyvSQTG/ARQiAJF0H3OduW8qt5EufxMXkAL+lZagkUfhMq0MdceBZ2+vZ7 xDI7E0j+MtJ/0LYHDuo1lqYlmwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBcAUMHY VpA9HXqgVkKr3YuhT1wYMB8GA1UdIwQYMBaAFLPvp9auGZ0UWC3U7LkWOjydhBdZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRjE3QS83NEJCMjREMjNG NUQxMUVGOEJGNzg2MEVDNEY5QUUwMi9zLS1uMXE0Wm5SUllMZFRzdVJZNlBKMkVG MWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3MtLW4xcTRablJSWUxkVHN1Ulk2UEoyRUYxay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF RjE3QS83NEJCMjREMjNGNUQxMUVGOEJGNzg2MEVDNEY5QUUwMi9zLS1uMXE0Wm5S UllMZFRzdVJZNlBKMkVGMWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCuoC4Igf7R8qY14VOC1NN6/SHcQX7/0v4A/BA1SqUbrf5geObU4urP kSfhBmLlLKLr6c/j/HpxeG7vxy1KfQGXF9O/NXMDarDPWe5/hUN3iXgUbs60v+uV G1oI3aH5jPVaUCa+0s+e9rmwuXcdJoZTJ0hvLW8uaHhQSf/l2ftUmgZu7pnRidI8 cLcHhJoPJD1eXn8vRgc6s//0g0Jl3+j0fdLMj7a7eQTMOSg+2U2ena2rH0hIfdk0 ZakH78GT2KsrEbbE/7wIwBrkmCtrdEoaWIWy7iesNDuRQGxvzFZKac8d9BL78U7I qA2uMNft6DcSbZtmSpR8O8AKfqiopPgM -----END CERTIFICATE-----Generated at Fri Aug 8 20:57:13 2025 by rpki-client