$ rpki-client -vvf rpki.apnic.net/member_repository/A91FDA40/96F0D70CBBDA11ED8878EF47C4F9AE02/N7YqdyUcUqBLM7gtLtAgTJJ6Qpo.mft File: N7YqdyUcUqBLM7gtLtAgTJJ6Qpo.mft (raw, json) Hash identifier: QaitlFvLKkPokcswesWXfJQyT3ucIY+HLfufMS+ROqw= Subject key identifier: 2B:E7:8A:B6:69:25:C4:0D:98:76:46:2D:BD:7C:76:78:71:AC:30:9A Authority key identifier: 37:B6:2A:77:25:1C:52:A0:4B:33:B8:2D:2E:D0:20:4C:92:7A:42:9A Certificate issuer: /CN=A91FDA40/serialNumber=37B62A77251C52A04B33B82D2ED0204C927A429A Certificate serial: 01CB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N7YqdyUcUqBLM7gtLtAgTJJ6Qpo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FDA40/96F0D70CBBDA11ED8878EF47C4F9AE02/N7YqdyUcUqBLM7gtLtAgTJJ6Qpo.mft Manifest number: 01C2 Signing time: Sat 19 Jul 2025 03:12:41 +0000 Manifest this update: Sat 19 Jul 2025 03:12:41 +0000 Manifest next update: Sat 26 Jul 2025 03:12:41 +0000 Files and hashes: 1: N7YqdyUcUqBLM7gtLtAgTJJ6Qpo.crl (hash: KpC4n3Hy0kXegrMEUYpUlI1ACrM+NRlngIGBPWZqb4w=) 2: A24D0F54140C11EFBC640B71C4F9AE02.roa (hash: wRJLakVb4OT38G6t+rRsnOSv4LpQV0AO0Scq5OD6JMU=) 3: 545EDE9C140911EF8520A25BC4F9AE02.roa (hash: Tv8VFI61ht6g4zpgpyoiarorIdL71VBSjtb/bqzuKfo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FDA40/96F0D70CBBDA11ED8878EF47C4F9AE02/N7YqdyUcUqBLM7gtLtAgTJJ6Qpo.crl rsync://rpki.apnic.net/member_repository/A91FDA40/96F0D70CBBDA11ED8878EF47C4F9AE02/N7YqdyUcUqBLM7gtLtAgTJJ6Qpo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N7YqdyUcUqBLM7gtLtAgTJJ6Qpo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 03:12:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 459 (0x1cb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FDA40, serialNumber=37B62A77251C52A04B33B82D2ED0204C927A429A Validity Not Before: Jul 19 03:12:41 2025 GMT Not After : Jul 26 03:12:41 2025 GMT Subject: CN=687b0d29-a313 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:c7:8c:5f:06:1d:54:08:40:b7:ba:48:29:25: f3:3b:f0:df:b2:14:2a:97:8c:ad:61:50:02:a6:75: 70:f0:a0:3c:27:2f:d0:1b:9b:23:11:72:7a:34:2d: ef:b2:c8:8e:57:b6:d6:85:01:c4:8c:39:eb:2d:fc: c7:e4:30:c9:99:d4:38:55:6d:f4:76:e4:16:77:0d: 01:6a:92:ce:14:fd:0c:3d:b2:3c:eb:aa:f8:1e:cf: a3:b1:12:7f:a0:8a:8e:27:1c:f9:71:46:48:cf:b1: d0:a1:20:f7:94:76:89:96:75:16:e9:a0:73:66:c1: 68:e1:60:9e:b7:e0:f1:ec:b4:3b:e4:f1:b1:f0:7b: 98:11:8a:c8:49:da:66:d6:ec:84:4b:a7:27:fb:07: 19:4e:9e:7f:90:bc:2b:d7:39:e2:bb:90:22:01:de: 3a:9d:fd:9b:03:7e:3c:82:a2:83:d6:93:a3:1c:fe: af:ec:c7:0c:61:01:fe:c1:10:56:c8:85:c4:d6:71: 39:98:67:39:82:9e:f4:6a:93:17:9c:02:1d:8a:16: 91:85:88:26:95:7e:9c:0a:7d:fb:43:ec:a1:3e:66: f8:25:b4:3e:70:3e:1b:f6:31:77:9e:46:ab:a6:21: ec:47:15:2d:f5:eb:a7:af:dc:69:cd:30:e7:0c:d4: fe:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:E7:8A:B6:69:25:C4:0D:98:76:46:2D:BD:7C:76:78:71:AC:30:9A X509v3 Authority Key Identifier: keyid:37:B6:2A:77:25:1C:52:A0:4B:33:B8:2D:2E:D0:20:4C:92:7A:42:9A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FDA40/96F0D70CBBDA11ED8878EF47C4F9AE02/N7YqdyUcUqBLM7gtLtAgTJJ6Qpo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N7YqdyUcUqBLM7gtLtAgTJJ6Qpo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FDA40/96F0D70CBBDA11ED8878EF47C4F9AE02/N7YqdyUcUqBLM7gtLtAgTJJ6Qpo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b4:ee:d5:c1:40:c7:92:da:9f:f3:3d:2a:6c:35:a3:b3:53:92: 81:1b:9f:ba:cd:0f:09:14:a1:85:ec:6e:1d:c8:70:0d:ee:f0: 5e:13:82:50:3e:bb:3b:5b:ac:1b:5f:e6:9b:0b:77:5a:60:f2: 45:c6:84:58:0e:05:bf:ff:ee:2c:fb:3e:e1:14:b7:7a:4f:83: fb:c6:24:8e:25:86:40:2a:49:0b:9b:9a:8b:93:3a:2a:55:d2: 39:9f:e8:83:26:8a:b6:5f:47:8b:8d:72:3c:ec:f4:da:a9:ca: 74:c7:89:17:3e:83:cb:4a:d1:d0:30:26:12:cc:1b:eb:01:8a: 73:53:aa:0f:67:b5:7d:e2:0c:44:7d:ca:38:c9:36:f2:c3:63: 1a:71:5c:23:71:8a:77:d2:d4:9d:e4:f0:89:c1:a7:cc:9b:bd: dd:2b:cd:fa:e6:46:3e:3c:1b:54:d4:3b:a1:53:73:8d:64:59: df:ab:80:5c:ae:eb:cd:cf:7c:00:82:b3:88:45:4e:30:39:4e: c3:9d:51:ff:30:c9:3b:fb:2e:58:38:7e:78:37:88:99:2f:fb: 7d:82:01:00:9b:03:7d:2f:7c:87:95:bb:27:6b:ab:ec:85:f3: 05:88:3e:9d:e2:6c:5f:6f:ba:47:cc:ea:60:d6:9f:22:06:11: 58:64:4a:88 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAcswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkRBNDAxMTAvBgNVBAUTKDM3QjYyQTc3MjUxQzUyQTA0QjMzQjgyRDJFRDAyMDRD OTI3QTQyOUEwHhcNMjUwNzE5MDMxMjQxWhcNMjUwNzI2MDMxMjQxWjAYMRYwFAYD VQQDEw02ODdiMGQyOS1hMzEzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmseMXwYdVAhAt7pIKSXzO/DfshQql4ytYVACpnVw8KA8Jy/QG5sjEXJ6NC3v ssiOV7bWhQHEjDnrLfzH5DDJmdQ4VW30duQWdw0BapLOFP0MPbI866r4Hs+jsRJ/ oIqOJxz5cUZIz7HQoSD3lHaJlnUW6aBzZsFo4WCet+Dx7LQ75PGx8HuYEYrISdpm 1uyES6cn+wcZTp5/kLwr1zniu5AiAd46nf2bA348gqKD1pOjHP6v7McMYQH+wRBW yIXE1nE5mGc5gp70apMXnAIdihaRhYgmlX6cCn37Q+yhPmb4JbQ+cD4b9jF3nkar piHsRxUt9eunr9xpzTDnDNT+AQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCvnirZp JcQNmHZGLb18dnhxrDCaMB8GA1UdIwQYMBaAFDe2KnclHFKgSzO4LS7QIEySekKa MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGREE0MC85NkYwRDcwQ0JC REExMUVEODg3OEVGNDdDNEY5QUUwMi9ON1lxZHlVY1VxQkxNN2d0THRBZ1RKSjZR cG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL043WXFkeVVjVXFCTE03Z3RMdEFnVEpKNlFwby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG REE0MC85NkYwRDcwQ0JCREExMUVEODg3OEVGNDdDNEY5QUUwMi9ON1lxZHlVY1Vx QkxNN2d0THRBZ1RKSjZRcG8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC07tXBQMeS2p/zPSpsNaOzU5KBG5+6zQ8JFKGF7G4dyHAN7vBeE4JQ Prs7W6wbX+abC3daYPJFxoRYDgW//+4s+z7hFLd6T4P7xiSOJYZAKkkLm5qLkzoq VdI5n+iDJoq2X0eLjXI87PTaqcp0x4kXPoPLStHQMCYSzBvrAYpzU6oPZ7V94gxE fco4yTbyw2MacVwjcYp30tSd5PCJwafMm73dK8365kY+PBtU1DuhU3ONZFnfq4Bc ruvNz3wAgrOIRU4wOU7DnVH/MMk7+y5YOH54N4iZL/t9ggEAmwN9L3yHlbsna6vs hfMFiD6d4mxfb7pHzOpg1p8iBhFYZEqI -----END CERTIFICATE-----Generated at Sun Jul 20 01:57:25 2025 by rpki-client