$ rpki-client -vvf rpki.apnic.net/member_repository/A91895D8/4F314C403ADC11E9B1D30C12C4F9AE02/n7qfr8GmfUUaL1m57iMkLqndRXI.mft File: n7qfr8GmfUUaL1m57iMkLqndRXI.mft (raw, json) Hash identifier: peZoADPxn7vBZfmpPB4FQygTi2nU70/qKcq9kyl9+sI= Subject key identifier: 6E:94:83:5C:46:FB:B4:19:EF:96:55:2F:68:A4:03:46:E0:61:17:31 Authority key identifier: 9F:BA:9F:AF:C1:A6:7D:45:1A:2F:59:B9:EE:23:24:2E:A9:DD:45:72 Certificate issuer: /CN=A91895D8/serialNumber=9FBA9FAFC1A67D451A2F59B9EE23242EA9DD4572 Certificate serial: 104C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n7qfr8GmfUUaL1m57iMkLqndRXI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91895D8/4F314C403ADC11E9B1D30C12C4F9AE02/n7qfr8GmfUUaL1m57iMkLqndRXI.mft Manifest number: 1044 Signing time: Fri 30 May 2025 17:34:50 +0000 Manifest this update: Fri 30 May 2025 17:34:49 +0000 Manifest next update: Fri 06 Jun 2025 17:34:49 +0000 Files and hashes: 1: n7qfr8GmfUUaL1m57iMkLqndRXI.crl (hash: j54d7wMxWs1tinNtsgtniqr8i+auza95fth6GO6z8PY=) 2: 566988C8717411E9AF629E4BC4F9AE02.roa (hash: XI/7jfg+GeSHUA3qICjMcaW/9XUB7SlPIfPTYeMPDXE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91895D8/4F314C403ADC11E9B1D30C12C4F9AE02/n7qfr8GmfUUaL1m57iMkLqndRXI.crl rsync://rpki.apnic.net/member_repository/A91895D8/4F314C403ADC11E9B1D30C12C4F9AE02/n7qfr8GmfUUaL1m57iMkLqndRXI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n7qfr8GmfUUaL1m57iMkLqndRXI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 17:34:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4172 (0x104c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91895D8, serialNumber=9FBA9FAFC1A67D451A2F59B9EE23242EA9DD4572 Validity Not Before: May 30 17:34:49 2025 GMT Not After : Jun 6 17:34:49 2025 GMT Subject: CN=6839ec3a-7499 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:4d:bd:51:a0:21:db:cd:00:fd:22:a0:97:d2: 1c:ed:7f:5c:cf:bb:64:8c:15:90:b8:87:e4:1e:04: 6a:0c:96:d4:b5:12:51:a0:17:dc:1d:c2:f5:03:f2: 19:7b:c7:5e:52:4f:60:1a:62:a8:66:14:55:c1:3f: 00:66:69:56:55:70:bd:99:26:46:f4:ed:37:c3:a9: 43:81:dc:11:fd:7f:a9:5b:93:0b:9b:e3:34:ce:a3: 0a:49:0a:06:6f:99:23:a1:36:ce:07:49:1c:b6:d1: 88:bc:78:0b:8a:45:ce:dc:d1:f8:76:62:48:fb:dc: 2b:67:83:0f:68:0a:c3:5b:62:7e:bb:a2:58:fd:e7: 80:9e:79:42:35:ea:44:61:69:cb:c5:7e:bb:82:71: d3:8d:77:fe:b9:ff:47:f9:c8:f3:82:ae:7e:af:29: b8:04:ed:aa:5f:2a:3c:3b:89:bb:d0:80:ac:ab:bf: f4:8c:5a:c7:6b:00:96:f4:6a:5c:07:9a:4a:1c:43: 6b:13:87:7d:fb:dd:46:ab:01:4c:16:2a:00:31:27: e2:fa:a5:51:7e:0d:88:d0:ec:49:36:fe:52:e0:f9: b9:8d:6b:19:dd:d3:74:64:1b:63:e3:93:60:b6:e4: e7:56:31:77:10:4a:66:47:5d:97:c1:d0:f5:e7:4d: 95:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:94:83:5C:46:FB:B4:19:EF:96:55:2F:68:A4:03:46:E0:61:17:31 X509v3 Authority Key Identifier: keyid:9F:BA:9F:AF:C1:A6:7D:45:1A:2F:59:B9:EE:23:24:2E:A9:DD:45:72 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91895D8/4F314C403ADC11E9B1D30C12C4F9AE02/n7qfr8GmfUUaL1m57iMkLqndRXI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n7qfr8GmfUUaL1m57iMkLqndRXI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91895D8/4F314C403ADC11E9B1D30C12C4F9AE02/n7qfr8GmfUUaL1m57iMkLqndRXI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 88:54:83:d1:d5:ee:7d:66:0e:12:c9:c0:02:f9:2e:16:d0:c8: 13:b5:dc:98:89:23:6e:4f:1d:00:6b:3e:9e:30:c5:38:35:15: be:dc:30:5b:42:c5:4f:68:ff:15:93:65:d5:8e:56:76:af:38: 9b:ad:d6:b1:fe:17:99:5a:ed:e9:29:df:fa:24:42:12:c8:83: 2e:00:5b:96:3b:e7:b8:c8:d3:33:cb:c0:ea:b9:16:0f:c4:34: 73:02:71:23:ca:57:53:f5:be:6b:9d:9c:ab:ae:a5:5b:68:0f: 12:bf:57:3c:c3:3b:1d:2f:1a:ea:23:1e:34:2a:98:55:ca:d0: 09:90:5a:b9:66:c7:e3:9d:19:99:fe:5f:50:37:68:dd:6d:6c: 04:38:bf:4c:a0:9e:6e:5d:24:78:a4:3c:6e:c4:12:23:a5:5e: 99:48:1d:d2:44:06:c2:d3:76:79:68:6b:f1:9a:f4:20:71:d6: f7:df:26:5e:db:6e:19:aa:0c:9f:10:f1:b8:11:e0:85:e7:11: d0:ab:d4:96:52:73:32:0d:22:52:37:1f:6d:5d:a4:57:b8:9c: ec:59:09:36:b9:cd:f0:d9:c9:46:c8:c5:91:07:7a:3b:ce:38: c8:f2:47:0b:7c:40:57:57:29:4d:40:8f:17:22:de:8a:ad:e0: 64:d1:15:a0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEEwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODk1RDgxMTAvBgNVBAUTKDlGQkE5RkFGQzFBNjdENDUxQTJGNTlCOUVFMjMyNDJF QTlERDQ1NzIwHhcNMjUwNTMwMTczNDQ5WhcNMjUwNjA2MTczNDQ5WjAYMRYwFAYD VQQDEw02ODM5ZWMzYS03NDk5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2E29UaAh280A/SKgl9Ic7X9cz7tkjBWQuIfkHgRqDJbUtRJRoBfcHcL1A/IZ e8deUk9gGmKoZhRVwT8AZmlWVXC9mSZG9O03w6lDgdwR/X+pW5MLm+M0zqMKSQoG b5kjoTbOB0kcttGIvHgLikXO3NH4dmJI+9wrZ4MPaArDW2J+u6JY/eeAnnlCNepE YWnLxX67gnHTjXf+uf9H+cjzgq5+rym4BO2qXyo8O4m70ICsq7/0jFrHawCW9Gpc B5pKHENrE4d9+91GqwFMFioAMSfi+qVRfg2I0OxJNv5S4Pm5jWsZ3dN0ZBtj45Ng tuTnVjF3EEpmR12XwdD1502V3wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFG6Ug1xG +7QZ75ZVL2ikA0bgYRcxMB8GA1UdIwQYMBaAFJ+6n6/Bpn1FGi9Zue4jJC6p3UVy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4OTVEOC80RjMxNEM0MDNB REMxMUU5QjFEMzBDMTJDNEY5QUUwMi9uN3FmcjhHbWZVVWFMMW01N2lNa0xxbmRS WEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL243cWZyOEdtZlVVYUwxbTU3aU1rTHFuZFJYSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 OTVEOC80RjMxNEM0MDNBREMxMUU5QjFEMzBDMTJDNEY5QUUwMi9uN3FmcjhHbWZV VWFMMW01N2lNa0xxbmRSWEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCIVIPR1e59Zg4SycAC+S4W0MgTtdyYiSNuTx0Aaz6eMMU4NRW+3DBb QsVPaP8Vk2XVjlZ2rzibrdax/heZWu3pKd/6JEISyIMuAFuWO+e4yNMzy8DquRYP xDRzAnEjyldT9b5rnZyrrqVbaA8Sv1c8wzsdLxrqIx40KphVytAJkFq5ZsfjnRmZ /l9QN2jdbWwEOL9MoJ5uXSR4pDxuxBIjpV6ZSB3SRAbC03Z5aGvxmvQgcdb33yZe 224ZqgyfEPG4EeCF5xHQq9SWUnMyDSJSNx9tXaRXuJzsWQk2uc3w2clGyMWRB3o7 zjjI8kcLfEBXVylNQI8XIt6KreBk0RWg -----END CERTIFICATE-----Generated at Sat May 31 17:49:41 2025 by rpki-client