$ rpki-client -vvf rpki.apnic.net/member_repository/A91895D8/4F314C403ADC11E9B1D30C12C4F9AE02/n7qfr8GmfUUaL1m57iMkLqndRXI.mft File: n7qfr8GmfUUaL1m57iMkLqndRXI.mft (raw, json) Hash identifier: n8A7Cc6mxV3tVUCyih8V5pnkBmXYQbqPL2W+b9ztIyo= Subject key identifier: D2:7C:05:56:AD:2B:A2:3D:1F:BD:D2:D5:C6:73:AE:4B:D0:24:95:40 Authority key identifier: 9F:BA:9F:AF:C1:A6:7D:45:1A:2F:59:B9:EE:23:24:2E:A9:DD:45:72 Certificate issuer: /CN=A91895D8/serialNumber=9FBA9FAFC1A67D451A2F59B9EE23242EA9DD4572 Certificate serial: 1088 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n7qfr8GmfUUaL1m57iMkLqndRXI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91895D8/4F314C403ADC11E9B1D30C12C4F9AE02/n7qfr8GmfUUaL1m57iMkLqndRXI.mft Manifest number: 107F Signing time: Thu 18 Sep 2025 17:32:03 +0000 Manifest this update: Thu 18 Sep 2025 17:32:03 +0000 Manifest next update: Thu 25 Sep 2025 17:32:03 +0000 Files and hashes: 1: n7qfr8GmfUUaL1m57iMkLqndRXI.crl (hash: 3BidH590paGBmS8Nil0/6BS2D8FEkWZCtQOOb1crJyY=) 2: 566988C8717411E9AF629E4BC4F9AE02.roa (hash: EtmvbN1xVVE7PUjHrIh1I7up8NoBR/klrPWqoCS0Bq8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91895D8/4F314C403ADC11E9B1D30C12C4F9AE02/n7qfr8GmfUUaL1m57iMkLqndRXI.crl rsync://rpki.apnic.net/member_repository/A91895D8/4F314C403ADC11E9B1D30C12C4F9AE02/n7qfr8GmfUUaL1m57iMkLqndRXI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n7qfr8GmfUUaL1m57iMkLqndRXI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Sep 2025 17:32:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4232 (0x1088) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91895D8, serialNumber=9FBA9FAFC1A67D451A2F59B9EE23242EA9DD4572 Validity Not Before: Sep 18 17:32:03 2025 GMT Not After : Sep 25 17:32:03 2025 GMT Subject: CN=68cc4213-ff72 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:11:db:bb:9c:04:d9:53:94:c5:45:60:7b:dd: b3:83:6c:16:52:fc:ee:7a:cd:20:02:e3:b0:a8:4a: c9:46:77:91:6d:f1:fe:7f:14:1a:86:ea:87:43:f6: d2:84:04:05:14:a7:2a:75:3f:ac:8b:05:17:7e:71: bc:0e:a8:06:b8:64:37:af:d6:d5:c9:ca:c3:8a:34: ff:15:70:6b:5e:c3:bc:61:ca:cd:77:a0:f6:92:a6: 2d:80:4c:40:98:9d:76:30:1a:4f:90:46:3b:2d:46: 3b:a4:0b:fa:f9:98:57:9e:6a:3b:57:d9:aa:a5:8d: 51:07:9c:8a:4d:08:ec:38:83:2b:7d:bf:26:f4:42: cd:7e:d8:37:2d:72:18:a9:41:ea:bb:45:b4:0b:28: 61:e6:9d:d6:62:a5:48:28:77:9b:5e:d4:37:5e:3f: f1:28:02:97:19:70:4e:63:27:b2:5c:e6:10:65:04: d5:2d:df:d5:b8:79:9e:60:ef:ba:7b:ef:b6:ea:11: f9:91:f9:75:6b:c7:9a:ab:48:11:81:ed:e8:7e:91: b6:ba:4e:3f:43:b3:fb:ce:a6:47:80:e9:62:af:1a: 82:27:e0:75:a2:dc:23:92:23:75:61:00:6a:95:da: 9e:34:f5:f1:bd:bf:93:5f:01:c8:dc:84:04:73:41: 20:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:7C:05:56:AD:2B:A2:3D:1F:BD:D2:D5:C6:73:AE:4B:D0:24:95:40 X509v3 Authority Key Identifier: keyid:9F:BA:9F:AF:C1:A6:7D:45:1A:2F:59:B9:EE:23:24:2E:A9:DD:45:72 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91895D8/4F314C403ADC11E9B1D30C12C4F9AE02/n7qfr8GmfUUaL1m57iMkLqndRXI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n7qfr8GmfUUaL1m57iMkLqndRXI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91895D8/4F314C403ADC11E9B1D30C12C4F9AE02/n7qfr8GmfUUaL1m57iMkLqndRXI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 25:cf:91:e0:01:5b:3d:7c:3c:84:66:42:92:b0:91:36:4a:f2: 0e:b5:48:2d:8d:5b:fe:a2:a7:25:d4:ce:41:13:86:ec:41:e1: 31:d2:df:f2:aa:13:00:3a:03:45:67:55:88:7f:7b:79:31:94: 14:17:d5:07:47:c3:c7:8a:74:b0:ed:3f:2d:74:2d:3a:e9:b3: 10:8e:7c:f6:7f:ab:86:10:aa:8a:23:d6:c3:09:80:0e:7f:0c: a7:ec:f9:38:6f:a6:30:5e:1a:ef:a4:5f:43:ed:1c:a9:eb:77: c3:07:fd:e2:af:4b:23:56:3e:e0:75:ac:85:a4:60:aa:0c:18: c5:6e:55:86:46:67:50:e1:65:8f:48:95:fc:0a:eb:f2:02:d8: d6:d7:dc:39:f0:3a:6d:7f:73:a9:63:04:61:c2:e8:a3:e0:e6: 64:55:e1:8c:55:e1:25:fd:2f:9b:d7:0f:8d:99:a9:03:31:51: 0a:83:2d:24:11:dc:3c:ae:06:bb:02:c3:12:ab:b9:80:87:ac: 16:7f:f7:06:1f:81:39:50:7e:3f:da:1a:c4:d6:3e:80:c8:c6: 0a:10:fb:7b:22:12:ed:99:b8:a6:69:d8:dc:44:cb:7e:96:5d: d1:55:7b:d7:b0:3e:ee:52:21:61:99:06:0b:25:5b:fa:4e:16: 9a:d0:d7:b3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEIgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODk1RDgxMTAvBgNVBAUTKDlGQkE5RkFGQzFBNjdENDUxQTJGNTlCOUVFMjMyNDJF QTlERDQ1NzIwHhcNMjUwOTE4MTczMjAzWhcNMjUwOTI1MTczMjAzWjAYMRYwFAYD VQQDEw02OGNjNDIxMy1mZjcyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAlhHbu5wE2VOUxUVge92zg2wWUvzues0gAuOwqErJRneRbfH+fxQahuqHQ/bS hAQFFKcqdT+siwUXfnG8DqgGuGQ3r9bVycrDijT/FXBrXsO8YcrNd6D2kqYtgExA mJ12MBpPkEY7LUY7pAv6+ZhXnmo7V9mqpY1RB5yKTQjsOIMrfb8m9ELNftg3LXIY qUHqu0W0Cyhh5p3WYqVIKHebXtQ3Xj/xKAKXGXBOYyeyXOYQZQTVLd/VuHmeYO+6 e++26hH5kfl1a8eaq0gRge3ofpG2uk4/Q7P7zqZHgOlirxqCJ+B1otwjkiN1YQBq ldqeNPXxvb+TXwHI3IQEc0Eg/QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNJ8BVat K6I9H73S1cZzrkvQJJVAMB8GA1UdIwQYMBaAFJ+6n6/Bpn1FGi9Zue4jJC6p3UVy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4OTVEOC80RjMxNEM0MDNB REMxMUU5QjFEMzBDMTJDNEY5QUUwMi9uN3FmcjhHbWZVVWFMMW01N2lNa0xxbmRS WEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL243cWZyOEdtZlVVYUwxbTU3aU1rTHFuZFJYSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 OTVEOC80RjMxNEM0MDNBREMxMUU5QjFEMzBDMTJDNEY5QUUwMi9uN3FmcjhHbWZV VWFMMW01N2lNa0xxbmRSWEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAlz5HgAVs9fDyEZkKSsJE2SvIOtUgtjVv+oqcl1M5BE4bsQeEx0t/y qhMAOgNFZ1WIf3t5MZQUF9UHR8PHinSw7T8tdC066bMQjnz2f6uGEKqKI9bDCYAO fwyn7Pk4b6YwXhrvpF9D7Ryp63fDB/3ir0sjVj7gdayFpGCqDBjFblWGRmdQ4WWP SJX8CuvyAtjW19w58Dptf3OpYwRhwuij4OZkVeGMVeEl/S+b1w+NmakDMVEKgy0k Edw8rga7AsMSq7mAh6wWf/cGH4E5UH4/2hrE1j6AyMYKEPt7IhLtmbimadjcRMt+ ll3RVXvXsD7uUiFhmQYLJVv6Thaa0Nez -----END CERTIFICATE-----Generated at Thu Sep 18 21:39:38 2025 by rpki-client