$ rpki-client -vvf rpki.apnic.net/member_repository/A91F367D/99DA7ABE039411EBB6648446C4F9AE02/q8dSj86PeUX0YPdSdIJB2tVnilo.mft File: q8dSj86PeUX0YPdSdIJB2tVnilo.mft (raw, json) Hash identifier: dfJ/M8C/kyQppaykLGCpjcPQImqbt7yc+jLWgcraZZs= Subject key identifier: C9:2E:68:36:88:81:01:42:C1:9B:11:BB:D8:2B:FF:9F:D4:5A:D5:B1 Authority key identifier: AB:C7:52:8F:CE:8F:79:45:F4:60:F7:52:74:82:41:DA:D5:67:8A:5A Certificate issuer: /CN=A91F367D/serialNumber=ABC7528FCE8F7945F460F752748241DAD5678A5A Certificate serial: 07C4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q8dSj86PeUX0YPdSdIJB2tVnilo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F367D/99DA7ABE039411EBB6648446C4F9AE02/q8dSj86PeUX0YPdSdIJB2tVnilo.mft Manifest number: 07BE Signing time: Sun 20 Jul 2025 21:18:07 +0000 Manifest this update: Sun 20 Jul 2025 21:18:07 +0000 Manifest next update: Sun 27 Jul 2025 21:18:07 +0000 Files and hashes: 1: q8dSj86PeUX0YPdSdIJB2tVnilo.crl (hash: kQUa9ReCREgCwhG7r0fgmkNRtBHFDU+XTOdAb93q5Yg=) 2: AC1CD860039511EBBE8C7F47C4F9AE02.roa (hash: cujX/yOvlRxdf5P8eSmQLnHVmBWJtY4Bh7R/a7D9SZs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F367D/99DA7ABE039411EBB6648446C4F9AE02/q8dSj86PeUX0YPdSdIJB2tVnilo.crl rsync://rpki.apnic.net/member_repository/A91F367D/99DA7ABE039411EBB6648446C4F9AE02/q8dSj86PeUX0YPdSdIJB2tVnilo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q8dSj86PeUX0YPdSdIJB2tVnilo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Jul 2025 21:18:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1988 (0x7c4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F367D, serialNumber=ABC7528FCE8F7945F460F752748241DAD5678A5A Validity Not Before: Jul 20 21:18:07 2025 GMT Not After : Jul 27 21:18:07 2025 GMT Subject: CN=687d5d0f-1dc9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:78:c1:eb:48:da:98:da:4f:05:fd:06:69:b8: 7f:39:d0:5b:ca:fe:12:1e:95:d4:40:cb:d1:0f:0a: 02:66:78:66:84:e3:0d:c3:87:ca:da:88:e3:0a:7e: 27:67:ca:c9:2f:63:f6:ba:20:c3:d1:1a:fa:8c:8b: 96:65:c4:48:16:e2:a9:59:d9:06:35:f6:df:4c:24: dd:b7:81:2e:d5:ac:35:a7:67:60:d7:e4:c6:e8:10: eb:3a:90:ed:02:46:f6:ea:01:97:d6:d0:7f:d6:33: 18:bc:49:ed:6b:69:cd:66:81:a2:b2:7c:cb:93:75: 3c:39:62:de:d5:fe:0c:61:ac:c9:86:d0:1d:41:0e: 7d:54:fc:d9:a8:ee:77:2b:c5:3a:49:fe:6b:95:1c: 3d:d3:6a:e3:c8:a0:89:ac:aa:cf:24:10:c9:48:58: 8b:e4:cc:19:1a:d6:1d:c5:8f:1e:fb:cb:3f:7b:d5: 6a:f5:aa:09:53:41:69:a1:56:d0:e1:dd:08:b1:a2: 14:20:67:32:b5:f9:3e:6d:b4:2f:e6:ef:65:7b:c4: c7:1d:ef:f0:41:07:1f:d8:d4:7b:99:f6:72:18:43: 57:d9:7c:75:70:7e:92:23:9d:ca:c4:9d:70:00:07: 3e:ea:c9:5e:28:66:94:23:d6:f4:34:78:13:97:56: fe:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:2E:68:36:88:81:01:42:C1:9B:11:BB:D8:2B:FF:9F:D4:5A:D5:B1 X509v3 Authority Key Identifier: keyid:AB:C7:52:8F:CE:8F:79:45:F4:60:F7:52:74:82:41:DA:D5:67:8A:5A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F367D/99DA7ABE039411EBB6648446C4F9AE02/q8dSj86PeUX0YPdSdIJB2tVnilo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q8dSj86PeUX0YPdSdIJB2tVnilo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F367D/99DA7ABE039411EBB6648446C4F9AE02/q8dSj86PeUX0YPdSdIJB2tVnilo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 35:82:85:a5:6b:29:41:49:0c:91:36:d3:0b:8a:29:da:01:1d: 76:11:ae:1e:e8:82:b2:58:cb:36:ed:77:5e:24:76:d0:b0:02: c5:3f:21:6b:5b:24:00:84:50:55:2a:8f:da:3b:58:64:33:de: 00:d7:5d:f6:12:ec:07:ec:d0:07:54:58:9d:6a:4c:a4:f7:f1: 21:65:0a:63:69:28:9c:59:37:00:f1:06:0f:bd:c9:6e:a4:66: 37:f3:09:16:3d:72:51:82:90:cc:71:56:24:ae:72:77:ce:0a: 45:5b:9e:16:e6:dd:3b:9e:d9:ac:53:1e:96:4f:9f:6f:0e:43: b6:1c:01:86:7e:22:04:cb:f4:f2:04:18:52:2b:80:fa:c0:6c: c5:9f:c2:0e:e4:88:f1:72:b8:02:ce:88:1b:78:ba:dd:46:41: 16:ac:b7:59:38:ed:a1:2a:3e:f2:94:73:07:e0:4c:77:a4:8e: b0:6d:50:2f:24:13:a6:88:a3:95:cb:14:d2:0d:25:7d:f9:89: 29:6f:a6:bc:ff:1b:67:85:fe:b8:9f:de:07:cb:05:b7:55:99: d3:77:60:73:51:6a:dd:51:2a:f5:58:9f:88:73:fd:ec:6f:ed: 87:b6:a6:31:4b:91:2f:3d:90:5c:b3:e2:79:1f:5b:85:94:72: 38:63:0b:dc -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB8QwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjM2N0QxMTAvBgNVBAUTKEFCQzc1MjhGQ0U4Rjc5NDVGNDYwRjc1Mjc0ODI0MURB RDU2NzhBNUEwHhcNMjUwNzIwMjExODA3WhcNMjUwNzI3MjExODA3WjAYMRYwFAYD VQQDEw02ODdkNWQwZi0xZGM5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAunjB60jamNpPBf0Gabh/OdBbyv4SHpXUQMvRDwoCZnhmhOMNw4fK2ojjCn4n Z8rJL2P2uiDD0Rr6jIuWZcRIFuKpWdkGNfbfTCTdt4Eu1aw1p2dg1+TG6BDrOpDt Akb26gGX1tB/1jMYvEnta2nNZoGisnzLk3U8OWLe1f4MYazJhtAdQQ59VPzZqO53 K8U6Sf5rlRw902rjyKCJrKrPJBDJSFiL5MwZGtYdxY8e+8s/e9Vq9aoJU0FpoVbQ 4d0IsaIUIGcytfk+bbQv5u9le8THHe/wQQcf2NR7mfZyGENX2Xx1cH6SI53KxJ1w AAc+6sleKGaUI9b0NHgTl1b+bwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMkuaDaI gQFCwZsRu9gr/5/UWtWxMB8GA1UdIwQYMBaAFKvHUo/Oj3lF9GD3UnSCQdrVZ4pa MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMzY3RC85OURBN0FCRTAz OTQxMUVCQjY2NDg0NDZDNEY5QUUwMi9xOGRTajg2UGVVWDBZUGRTZElKQjJ0Vm5p bG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3E4ZFNqODZQZVVYMFlQZFNkSUpCMnRWbmlsby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG MzY3RC85OURBN0FCRTAzOTQxMUVCQjY2NDg0NDZDNEY5QUUwMi9xOGRTajg2UGVV WDBZUGRTZElKQjJ0Vm5pbG8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA1goWlaylBSQyRNtMLiinaAR12Ea4e6IKyWMs27XdeJHbQsALFPyFr WyQAhFBVKo/aO1hkM94A1132EuwH7NAHVFidakyk9/EhZQpjaSicWTcA8QYPvclu pGY38wkWPXJRgpDMcVYkrnJ3zgpFW54W5t07ntmsUx6WT59vDkO2HAGGfiIEy/Ty BBhSK4D6wGzFn8IO5IjxcrgCzogbeLrdRkEWrLdZOO2hKj7ylHMH4Ex3pI6wbVAv JBOmiKOVyxTSDSV9+Ykpb6a8/xtnhf64n94HywW3VZnTd2BzUWrdUSr1WJ+Ic/3s b+2HtqYxS5EvPZBcs+J5H1uFlHI4Ywvc -----END CERTIFICATE-----Generated at Mon Jul 21 07:21:38 2025 by rpki-client