$ rpki-client -vvf rpki.apnic.net/member_repository/A91F30AE/E7FC0D14378E11EC843CD245C4F9AE02/7qM-huKBrRPcYp8y2NU3YK4dAEc.mft File: 7qM-huKBrRPcYp8y2NU3YK4dAEc.mft (raw, json) Hash identifier: EbbOp+6nG+m3hJFPA3Q610asaEUnZgOZeG3bD27wKu4= Subject key identifier: 80:DD:3F:53:C6:70:F5:87:D4:9F:E2:73:88:54:BB:80:7A:14:A3:57 Authority key identifier: EE:A3:3E:86:E2:81:AD:13:DC:62:9F:32:D8:D5:37:60:AE:1D:00:47 Certificate issuer: /CN=A91F30AE/serialNumber=EEA33E86E281AD13DC629F32D8D53760AE1D0047 Certificate serial: 04A7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7qM-huKBrRPcYp8y2NU3YK4dAEc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F30AE/E7FC0D14378E11EC843CD245C4F9AE02/7qM-huKBrRPcYp8y2NU3YK4dAEc.mft Manifest number: 04A2 Signing time: Mon 16 Jun 2025 23:34:20 +0000 Manifest this update: Mon 16 Jun 2025 23:34:20 +0000 Manifest next update: Mon 23 Jun 2025 23:34:20 +0000 Files and hashes: 1: 7qM-huKBrRPcYp8y2NU3YK4dAEc.crl (hash: YqIQsN0BkZtZVqNdZ8qLVZw/3v/731TGOekErAkRNek=) 2: 84CEFB0E379111EC92DB9A48C4F9AE02.roa (hash: 1ALWg1Qlo5IyGVR2E3WZposvdzb9mETdXX2ZGs91bhg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F30AE/E7FC0D14378E11EC843CD245C4F9AE02/7qM-huKBrRPcYp8y2NU3YK4dAEc.crl rsync://rpki.apnic.net/member_repository/A91F30AE/E7FC0D14378E11EC843CD245C4F9AE02/7qM-huKBrRPcYp8y2NU3YK4dAEc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7qM-huKBrRPcYp8y2NU3YK4dAEc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 23 Jun 2025 23:34:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1191 (0x4a7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F30AE, serialNumber=EEA33E86E281AD13DC629F32D8D53760AE1D0047 Validity Not Before: Jun 16 23:34:20 2025 GMT Not After : Jun 23 23:34:20 2025 GMT Subject: CN=6850a9fc-575a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:97:31:ed:a0:d2:de:a9:0e:a6:06:2a:e2:56: 9e:ba:18:2b:87:01:ee:29:29:4b:88:8a:ac:66:00: 29:48:fc:47:9f:39:db:09:85:f9:c5:3d:25:d5:05: 4a:79:3b:5d:6d:9d:ad:4d:cd:6d:91:25:ac:1e:b3: 6f:98:3e:85:54:37:c4:34:82:05:4b:a8:cd:49:5f: e3:2a:6a:86:a9:28:63:b3:e5:a3:36:e0:75:2b:40: 16:16:a8:8a:03:04:e0:b8:a9:fd:d6:ed:49:ba:47: cd:43:bb:2e:46:3e:c5:f6:08:00:7c:76:98:35:90: b3:57:f8:ce:04:0d:dd:d4:3f:7b:34:6b:0a:3b:9f: 68:f1:53:18:a4:6a:a0:3f:22:16:20:83:01:23:4c: 62:af:0c:57:74:f9:25:f3:77:03:06:1e:b3:db:ae: 0e:71:65:fb:eb:f5:c1:5a:8a:98:58:3f:6a:62:dc: 93:fc:5a:94:ea:30:f0:ae:38:30:54:d0:c3:72:85: 57:29:f6:87:ff:7b:2b:41:6e:e2:70:cc:2e:14:1f: 8b:90:1a:16:3d:85:98:55:d3:9b:30:4a:6b:3a:c1: 76:67:21:f3:82:a9:b7:aa:53:54:0f:c5:5c:24:28: 1b:a1:d7:74:c9:7c:07:3a:21:7d:0c:56:22:49:43: 51:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:DD:3F:53:C6:70:F5:87:D4:9F:E2:73:88:54:BB:80:7A:14:A3:57 X509v3 Authority Key Identifier: keyid:EE:A3:3E:86:E2:81:AD:13:DC:62:9F:32:D8:D5:37:60:AE:1D:00:47 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F30AE/E7FC0D14378E11EC843CD245C4F9AE02/7qM-huKBrRPcYp8y2NU3YK4dAEc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7qM-huKBrRPcYp8y2NU3YK4dAEc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F30AE/E7FC0D14378E11EC843CD245C4F9AE02/7qM-huKBrRPcYp8y2NU3YK4dAEc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6c:ab:7d:32:0e:4b:60:21:b4:99:99:a3:bc:d1:d2:bf:02:2d: 49:2e:32:ab:de:cf:3d:12:54:e8:43:fd:7b:37:67:a9:91:2a: 40:1d:73:ee:dc:76:34:5d:a4:56:1e:6e:33:03:87:ad:87:4d: bc:14:6a:a4:c2:3f:76:67:bb:28:14:3c:4d:1f:eb:54:46:24: 15:99:af:ea:57:d5:69:07:86:78:a8:b2:1c:21:0c:a9:c2:3e: 1c:91:33:85:37:e6:b0:63:74:19:c1:82:0f:29:a0:94:34:c1: 79:f7:f4:4d:a6:0c:94:e9:0b:90:0c:fa:2a:0d:b4:e3:e0:69: 37:f3:45:5e:ab:35:bc:4d:37:30:40:74:2e:63:48:40:c8:ac: e6:14:96:be:74:ec:54:5c:c9:4c:e6:f0:c0:fb:fb:0c:6c:59: ad:9d:16:6f:64:19:54:78:93:51:10:fe:b1:99:a5:b0:85:36: 7e:ce:33:8b:e8:27:d0:9f:23:a4:a5:9c:08:05:bd:d0:2f:6a: dd:00:35:0f:1a:03:df:f9:dc:3f:3f:6a:20:ae:94:34:7b:e5: 22:18:31:1c:df:f9:e9:c0:8f:ae:7c:17:c3:4b:2f:c6:a4:4e: e9:0a:fe:76:e4:87:c9:7c:48:f2:8c:14:95:54:65:68:ce:d2: e9:de:0f:7e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBKcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjMwQUUxMTAvBgNVBAUTKEVFQTMzRTg2RTI4MUFEMTNEQzYyOUYzMkQ4RDUzNzYw QUUxRDAwNDcwHhcNMjUwNjE2MjMzNDIwWhcNMjUwNjIzMjMzNDIwWjAYMRYwFAYD VQQDEw02ODUwYTlmYy01NzVhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnZcx7aDS3qkOpgYq4laeuhgrhwHuKSlLiIqsZgApSPxHnznbCYX5xT0l1QVK eTtdbZ2tTc1tkSWsHrNvmD6FVDfENIIFS6jNSV/jKmqGqShjs+WjNuB1K0AWFqiK AwTguKn91u1JukfNQ7suRj7F9ggAfHaYNZCzV/jOBA3d1D97NGsKO59o8VMYpGqg PyIWIIMBI0xirwxXdPkl83cDBh6z264OcWX76/XBWoqYWD9qYtyT/FqU6jDwrjgw VNDDcoVXKfaH/3srQW7icMwuFB+LkBoWPYWYVdObMEprOsF2ZyHzgqm3qlNUD8Vc JCgbodd0yXwHOiF9DFYiSUNRvQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIDdP1PG cPWH1J/ic4hUu4B6FKNXMB8GA1UdIwQYMBaAFO6jPobiga0T3GKfMtjVN2CuHQBH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMzBBRS9FN0ZDMEQxNDM3 OEUxMUVDODQzQ0QyNDVDNEY5QUUwMi83cU0taHVLQnJSUGNZcDh5Mk5VM1lLNGRB RWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzdxTS1odUtCclJQY1lwOHkyTlUzWUs0ZEFFYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG MzBBRS9FN0ZDMEQxNDM3OEUxMUVDODQzQ0QyNDVDNEY5QUUwMi83cU0taHVLQnJS UGNZcDh5Mk5VM1lLNGRBRWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBsq30yDktgIbSZmaO80dK/Ai1JLjKr3s89ElToQ/17N2epkSpAHXPu 3HY0XaRWHm4zA4eth028FGqkwj92Z7soFDxNH+tURiQVma/qV9VpB4Z4qLIcIQyp wj4ckTOFN+awY3QZwYIPKaCUNMF59/RNpgyU6QuQDPoqDbTj4Gk380VeqzW8TTcw QHQuY0hAyKzmFJa+dOxUXMlM5vDA+/sMbFmtnRZvZBlUeJNREP6xmaWwhTZ+zjOL 6CfQnyOkpZwIBb3QL2rdADUPGgPf+dw/P2ogrpQ0e+UiGDEc3/npwI+ufBfDSy/G pE7pCv525IfJfEjyjBSVVGVoztLp3g9+ -----END CERTIFICATE-----Generated at Wed Jun 18 06:46:45 2025 by rpki-client