$ rpki-client -vvf rpki.apnic.net/member_repository/A91F523F/56A4CB8AB05311EF9C2B8D3FC4F9AE02/q4PFkhuEDFQXM78Ucyl13UlzP_w.mft File: q4PFkhuEDFQXM78Ucyl13UlzP_w.mft (raw, json) Hash identifier: YsQxBidlZmSDw63st2XFFFw9P129aMIzEqE51vJY60Y= Subject key identifier: FD:F2:5F:5C:DE:68:15:4A:27:7E:96:58:8E:0A:1B:8D:BA:7A:25:D6 Authority key identifier: AB:83:C5:92:1B:84:0C:54:17:33:BF:14:73:29:75:DD:49:73:3F:FC Certificate issuer: /CN=A91F523F/serialNumber=AB83C5921B840C541733BF14732975DD49733FFC Certificate serial: 7F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q4PFkhuEDFQXM78Ucyl13UlzP_w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F523F/56A4CB8AB05311EF9C2B8D3FC4F9AE02/q4PFkhuEDFQXM78Ucyl13UlzP_w.mft Manifest number: 7F Signing time: Tue 05 Aug 2025 07:17:22 +0000 Manifest this update: Tue 05 Aug 2025 07:17:22 +0000 Manifest next update: Tue 12 Aug 2025 07:17:22 +0000 Files and hashes: 1: q4PFkhuEDFQXM78Ucyl13UlzP_w.crl (hash: xveImt1kuMiwipHcOQ9WjWJJkNR6afc3NH/ttqbo9MU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F523F/56A4CB8AB05311EF9C2B8D3FC4F9AE02/q4PFkhuEDFQXM78Ucyl13UlzP_w.crl rsync://rpki.apnic.net/member_repository/A91F523F/56A4CB8AB05311EF9C2B8D3FC4F9AE02/q4PFkhuEDFQXM78Ucyl13UlzP_w.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q4PFkhuEDFQXM78Ucyl13UlzP_w.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 12 Aug 2025 07:17:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 127 (0x7f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F523F, serialNumber=AB83C5921B840C541733BF14732975DD49733FFC Validity Not Before: Aug 5 07:17:22 2025 GMT Not After : Aug 12 07:17:22 2025 GMT Subject: CN=6891b002-6bf2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:93:26:77:d2:c4:ff:2f:b9:a6:db:77:9c:b0: 8f:cf:a0:1d:3c:12:92:2d:c3:46:af:9a:2c:2b:81: a8:60:0c:45:49:cc:8f:56:08:f4:35:a3:5b:d2:01: 63:a4:c4:ab:3f:68:24:16:71:28:ca:46:85:a7:22: 3b:06:f0:fd:b7:2e:22:8e:9a:3f:e5:a4:35:29:49: c7:0d:06:37:71:6b:02:1a:cc:1a:ec:ba:52:1a:80: 2e:1b:6d:88:95:95:65:75:69:f6:fb:79:c5:28:26: 58:0a:18:ba:57:83:0b:f5:35:ed:f5:5f:63:39:1d: b8:60:85:17:18:c8:f6:04:eb:16:29:ef:0c:34:84: 4c:02:37:18:d0:e5:6b:62:06:33:cb:29:f1:5c:3c: 2f:b9:3a:7a:fb:32:1f:78:c2:da:5d:ef:c6:4b:60: f2:ac:19:ac:04:c3:89:47:97:f0:4e:55:58:dd:d2: 12:5b:72:52:57:17:20:cf:65:8a:7e:7d:55:21:cd: 8f:e4:81:5e:d4:c5:9b:e6:77:90:6d:55:e4:bb:85: 93:d8:27:7a:2b:fb:e8:35:d9:62:09:f5:20:14:6b: 12:92:69:25:5b:19:fd:33:fb:a7:2d:ca:5f:0f:a4: 8b:ee:25:9a:f0:c7:34:7b:15:f3:63:1f:8f:6e:7c: 3d:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:F2:5F:5C:DE:68:15:4A:27:7E:96:58:8E:0A:1B:8D:BA:7A:25:D6 X509v3 Authority Key Identifier: keyid:AB:83:C5:92:1B:84:0C:54:17:33:BF:14:73:29:75:DD:49:73:3F:FC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F523F/56A4CB8AB05311EF9C2B8D3FC4F9AE02/q4PFkhuEDFQXM78Ucyl13UlzP_w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q4PFkhuEDFQXM78Ucyl13UlzP_w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F523F/56A4CB8AB05311EF9C2B8D3FC4F9AE02/q4PFkhuEDFQXM78Ucyl13UlzP_w.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption e1:b3:38:92:d8:71:c5:14:2d:86:84:c6:e3:50:31:ea:f2:b3: 23:9e:bf:71:9a:dc:45:2d:b8:dd:01:e5:a5:4e:5a:7b:7f:af: 9b:42:e3:25:51:a5:ef:f5:d6:55:fb:13:64:81:9d:6e:1b:ce: 0f:81:1a:1c:1a:bd:ce:38:42:8d:fd:37:56:06:1f:35:da:8e: 55:90:b2:f4:4c:74:fe:fa:33:80:3b:3c:2f:42:d2:e3:c0:7b: bd:f9:35:a9:6c:3e:c4:5b:68:d7:8f:7d:43:44:88:54:6a:9b: 9d:38:60:f7:53:b4:97:57:69:84:68:24:ab:81:68:32:19:e1: dd:78:d5:f9:21:2f:42:80:33:86:ce:21:2f:87:83:36:e0:35: 3b:29:85:f7:9c:0f:7c:83:40:60:9b:ab:19:fe:a5:79:7b:64: f4:80:d4:ad:6e:63:79:a9:b8:ef:8c:02:fc:72:ca:bb:5a:80: de:6b:4d:8b:6e:53:e4:e8:d4:b9:89:70:67:03:7e:f9:c7:00: 3f:3a:c5:f6:7a:06:71:e6:f8:88:e4:dc:94:38:95:26:04:e1: 16:71:fb:cf:02:60:29:23:9c:02:f9:8a:30:9d:c6:bc:c3:d4: 86:c7:91:3c:50:84:be:31:fb:9d:46:1a:89:2c:cd:09:10:e0: 68:3c:77:f5 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBfzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG NTIzRjExMC8GA1UEBRMoQUI4M0M1OTIxQjg0MEM1NDE3MzNCRjE0NzMyOTc1REQ0 OTczM0ZGQzAeFw0yNTA4MDUwNzE3MjJaFw0yNTA4MTIwNzE3MjJaMBgxFjAUBgNV BAMTDTY4OTFiMDAyLTZiZjIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCjkyZ30sT/L7mm23ecsI/PoB08EpItw0avmiwrgahgDEVJzI9WCPQ1o1vSAWOk xKs/aCQWcSjKRoWnIjsG8P23LiKOmj/lpDUpSccNBjdxawIazBrsulIagC4bbYiV lWV1afb7ecUoJlgKGLpXgwv1Ne31X2M5HbhghRcYyPYE6xYp7ww0hEwCNxjQ5Wti BjPLKfFcPC+5Onr7Mh94wtpd78ZLYPKsGawEw4lHl/BOVVjd0hJbclJXFyDPZYp+ fVUhzY/kgV7UxZvmd5BtVeS7hZPYJ3or++g12WIJ9SAUaxKSaSVbGf0z+6ctyl8P pIvuJZrwxzR7FfNjH49ufD3ZAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU/fJfXN5o FUonfpZYjgobjbp6JdYwHwYDVR0jBBgwFoAUq4PFkhuEDFQXM78Ucyl13UlzP/ww DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUY1MjNGLzU2QTRDQjhBQjA1 MzExRUY5QzJCOEQzRkM0RjlBRTAyL3E0UEZraHVFREZRWE03OFVjeWwxM1VselBf dy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvcTRQRmtodUVERlFYTTc4VWN5bDEzVWx6UF93LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUY1 MjNGLzU2QTRDQjhBQjA1MzExRUY5QzJCOEQzRkM0RjlBRTAyL3E0UEZraHVFREZR WE03OFVjeWwxM1VselBfdy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAOGzOJLYccUULYaExuNQMerysyOev3Ga3EUtuN0B5aVOWnt/r5tC4yVR pe/11lX7E2SBnW4bzg+BGhwavc44Qo39N1YGHzXajlWQsvRMdP76M4A7PC9C0uPA e735NalsPsRbaNePfUNEiFRqm504YPdTtJdXaYRoJKuBaDIZ4d141fkhL0KAM4bO IS+HgzbgNTsphfecD3yDQGCbqxn+pXl7ZPSA1K1uY3mpuO+MAvxyyrtagN5rTYtu U+To1LmJcGcDfvnHAD86xfZ6BnHm+Ijk3JQ4lSYE4RZx+88CYCkjnAL5ijCdxrzD 1IbHkTxQhL4x+51GGokszQkQ4Gg8d/U= -----END CERTIFICATE-----Generated at Thu Aug 7 04:44:23 2025 by rpki-client