$ rpki-client -vvf rpki.apnic.net/member_repository/A91895D8/4F314C403ADC11E9B1D30C12C4F9AE02/n7qfr8GmfUUaL1m57iMkLqndRXI.mft File: n7qfr8GmfUUaL1m57iMkLqndRXI.mft (raw, json) Hash identifier: xnU9rqzUqvCxNLETa6hr/AQw7S9hSkgRy+loeEJ30bs= Subject key identifier: 84:31:3F:5A:32:0D:A4:81:CC:3C:2D:39:C2:8A:F8:9C:90:37:95:AC Authority key identifier: 9F:BA:9F:AF:C1:A6:7D:45:1A:2F:59:B9:EE:23:24:2E:A9:DD:45:72 Certificate issuer: /CN=A91895D8/serialNumber=9FBA9FAFC1A67D451A2F59B9EE23242EA9DD4572 Certificate serial: 1066 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n7qfr8GmfUUaL1m57iMkLqndRXI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91895D8/4F314C403ADC11E9B1D30C12C4F9AE02/n7qfr8GmfUUaL1m57iMkLqndRXI.mft Manifest number: 105E Signing time: Sun 20 Jul 2025 17:24:57 +0000 Manifest this update: Sun 20 Jul 2025 17:24:57 +0000 Manifest next update: Sun 27 Jul 2025 17:24:57 +0000 Files and hashes: 1: n7qfr8GmfUUaL1m57iMkLqndRXI.crl (hash: Dfgl9nUWohNsCFWRYx0Z1znZhRc1BANNTM+8sVx4d54=) 2: 566988C8717411E9AF629E4BC4F9AE02.roa (hash: XI/7jfg+GeSHUA3qICjMcaW/9XUB7SlPIfPTYeMPDXE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91895D8/4F314C403ADC11E9B1D30C12C4F9AE02/n7qfr8GmfUUaL1m57iMkLqndRXI.crl rsync://rpki.apnic.net/member_repository/A91895D8/4F314C403ADC11E9B1D30C12C4F9AE02/n7qfr8GmfUUaL1m57iMkLqndRXI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n7qfr8GmfUUaL1m57iMkLqndRXI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Jul 2025 17:24:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4198 (0x1066) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91895D8, serialNumber=9FBA9FAFC1A67D451A2F59B9EE23242EA9DD4572 Validity Not Before: Jul 20 17:24:57 2025 GMT Not After : Jul 27 17:24:57 2025 GMT Subject: CN=687d2669-0498 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:14:df:af:0c:9d:02:9a:73:e5:7d:14:51:e3: 78:2f:dc:1a:c1:26:6e:f1:ed:6d:29:98:24:b2:b2: 9c:cd:91:61:0d:52:28:40:bc:f5:e7:b2:c7:90:26: 7f:12:81:9d:07:cf:8b:d9:f6:07:09:25:5c:a3:ae: ad:d2:6a:4c:9f:27:57:d0:8f:2b:a4:51:13:c2:44: 61:9f:b9:64:2c:fd:40:c9:c0:2d:39:eb:38:00:45: 99:49:db:67:b3:32:23:76:dd:d8:85:7e:69:22:09: 59:62:0a:1f:17:a2:71:25:6d:e2:ea:5e:36:02:6b: 8d:f9:4c:2c:99:a0:99:39:f0:c3:f0:f9:cc:25:18: e4:3e:9c:96:37:a4:ce:dd:c3:6b:b3:cc:d2:ae:9e: 79:99:6f:a9:22:12:53:f0:2a:6f:10:45:2f:2f:21: 62:11:36:89:9a:71:50:0b:c0:ab:ab:df:c8:fd:a0: dd:18:7b:d5:ee:15:75:e2:15:8a:58:df:ab:df:50: 56:4e:d5:23:89:33:1b:d2:4a:0a:ca:12:5a:d0:14: 85:e6:0d:5b:a7:0a:44:21:3c:77:3d:41:c2:03:4f: 1b:d3:1f:e3:b4:9b:d0:0d:d5:f1:8d:b1:b8:f1:b6: cb:37:ca:ca:36:71:12:6c:d4:d2:4f:4a:2a:ed:a5: 71:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:31:3F:5A:32:0D:A4:81:CC:3C:2D:39:C2:8A:F8:9C:90:37:95:AC X509v3 Authority Key Identifier: keyid:9F:BA:9F:AF:C1:A6:7D:45:1A:2F:59:B9:EE:23:24:2E:A9:DD:45:72 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91895D8/4F314C403ADC11E9B1D30C12C4F9AE02/n7qfr8GmfUUaL1m57iMkLqndRXI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n7qfr8GmfUUaL1m57iMkLqndRXI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91895D8/4F314C403ADC11E9B1D30C12C4F9AE02/n7qfr8GmfUUaL1m57iMkLqndRXI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b8:c6:6d:c6:e1:8b:79:a4:ed:b6:39:10:3c:68:a7:f3:83:ff: af:0f:07:85:ef:f1:c7:bf:f0:95:4a:b3:32:48:df:89:43:ae: 3e:54:0a:27:15:1b:78:f0:ed:be:52:d7:67:78:0a:59:b6:73: 80:de:77:b9:aa:43:41:cf:81:9d:1b:00:f4:5e:41:e8:6e:82: 7b:ea:a8:ba:89:54:47:8c:ef:2b:ce:37:1f:98:93:8c:10:f3: a5:8d:2b:8e:07:f8:4b:48:46:1e:6e:75:92:7d:9a:87:e1:fd: 04:f8:fa:35:9e:19:0f:8e:6b:2a:0b:6c:dd:17:b1:81:94:7d: a8:68:79:8e:12:55:d2:cf:71:10:f1:2f:1a:9b:9b:77:46:32: 60:a1:80:72:69:82:59:5c:4c:97:2c:84:32:50:18:a8:cc:63: c9:53:21:a4:59:8a:c9:1f:75:2d:ec:d8:f0:06:d1:f9:d0:da: 43:00:f2:b6:f4:6e:07:2b:0f:85:2f:6e:9e:fb:83:af:7e:7d: 72:e6:b1:f3:80:72:42:f9:aa:5c:06:40:48:76:dc:d6:47:0d: de:fd:ad:9c:4a:43:92:9b:8a:0f:cb:5c:c2:76:04:da:54:e9: 0c:a1:4c:73:b9:91:85:dd:6d:fd:70:ef:03:36:f8:22:0d:39: d5:34:0e:38 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEGYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODk1RDgxMTAvBgNVBAUTKDlGQkE5RkFGQzFBNjdENDUxQTJGNTlCOUVFMjMyNDJF QTlERDQ1NzIwHhcNMjUwNzIwMTcyNDU3WhcNMjUwNzI3MTcyNDU3WjAYMRYwFAYD VQQDEw02ODdkMjY2OS0wNDk4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2BTfrwydAppz5X0UUeN4L9wawSZu8e1tKZgksrKczZFhDVIoQLz157LHkCZ/ EoGdB8+L2fYHCSVco66t0mpMnydX0I8rpFETwkRhn7lkLP1AycAtOes4AEWZSdtn szIjdt3YhX5pIglZYgofF6JxJW3i6l42AmuN+UwsmaCZOfDD8PnMJRjkPpyWN6TO 3cNrs8zSrp55mW+pIhJT8CpvEEUvLyFiETaJmnFQC8Crq9/I/aDdGHvV7hV14hWK WN+r31BWTtUjiTMb0koKyhJa0BSF5g1bpwpEITx3PUHCA08b0x/jtJvQDdXxjbG4 8bbLN8rKNnESbNTST0oq7aVxDQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIQxP1oy DaSBzDwtOcKK+JyQN5WsMB8GA1UdIwQYMBaAFJ+6n6/Bpn1FGi9Zue4jJC6p3UVy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4OTVEOC80RjMxNEM0MDNB REMxMUU5QjFEMzBDMTJDNEY5QUUwMi9uN3FmcjhHbWZVVWFMMW01N2lNa0xxbmRS WEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL243cWZyOEdtZlVVYUwxbTU3aU1rTHFuZFJYSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 OTVEOC80RjMxNEM0MDNBREMxMUU5QjFEMzBDMTJDNEY5QUUwMi9uN3FmcjhHbWZV VWFMMW01N2lNa0xxbmRSWEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC4xm3G4Yt5pO22ORA8aKfzg/+vDweF7/HHv/CVSrMySN+JQ64+VAon FRt48O2+UtdneApZtnOA3ne5qkNBz4GdGwD0XkHoboJ76qi6iVRHjO8rzjcfmJOM EPOljSuOB/hLSEYebnWSfZqH4f0E+Po1nhkPjmsqC2zdF7GBlH2oaHmOElXSz3EQ 8S8am5t3RjJgoYByaYJZXEyXLIQyUBiozGPJUyGkWYrJH3Ut7NjwBtH50NpDAPK2 9G4HKw+FL26e+4Ovfn1y5rHzgHJC+apcBkBIdtzWRw3e/a2cSkOSm4oPy1zCdgTa VOkMoUxzuZGF3W39cO8DNvgiDTnVNA44 -----END CERTIFICATE-----Generated at Tue Jul 22 05:13:41 2025 by rpki-client