$ rpki-client -vvf rpki.apnic.net/member_repository/A91A7F56/94D57236ACCD11EE81069050C4F9AE02/n7dBtymAPGtDKbw7QOduUqvYufg.mft File: n7dBtymAPGtDKbw7QOduUqvYufg.mft (raw, json) Hash identifier: LvJGsfdT8NE++yOq7zYAB370EKK9C85ffprQiBDFknA= Subject key identifier: C5:DF:38:22:9B:F6:AB:4B:66:52:39:A0:72:EF:09:F4:90:AB:78:F2 Authority key identifier: 9F:B7:41:B7:29:80:3C:6B:43:29:BC:3B:40:E7:6E:52:AB:D8:B9:F8 Certificate issuer: /CN=A91A7F56/serialNumber=9FB741B729803C6B4329BC3B40E76E52ABD8B9F8 Certificate serial: 0125 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/n7dBtymAPGtDKbw7QOduUqvYufg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A7F56/94D57236ACCD11EE81069050C4F9AE02/n7dBtymAPGtDKbw7QOduUqvYufg.mft Manifest number: 0122 Signing time: Mon 21 Jul 2025 04:49:19 +0000 Manifest this update: Mon 21 Jul 2025 04:49:19 +0000 Manifest next update: Mon 28 Jul 2025 04:49:18 +0000 Files and hashes: 1: n7dBtymAPGtDKbw7QOduUqvYufg.crl (hash: wFcT2ZXYLMSnKwPFL3s0q05Hk46ez7Ex/PhPwFWG9Mo=) 2: 1FFCF508ADF211EE93DC0A12C4F9AE02.roa (hash: kN/JSLj9TvzMzCv/SkXvYZbvfv6T8T6WGICKq1DXwxA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A7F56/94D57236ACCD11EE81069050C4F9AE02/n7dBtymAPGtDKbw7QOduUqvYufg.crl rsync://rpki.apnic.net/member_repository/A91A7F56/94D57236ACCD11EE81069050C4F9AE02/n7dBtymAPGtDKbw7QOduUqvYufg.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/n7dBtymAPGtDKbw7QOduUqvYufg.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Jul 2025 04:49:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 293 (0x125) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A7F56, serialNumber=9FB741B729803C6B4329BC3B40E76E52ABD8B9F8 Validity Not Before: Jul 21 04:49:19 2025 GMT Not After : Jul 28 04:49:18 2025 GMT Subject: CN=687dc6cf-885c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:4d:7a:43:3d:e9:c1:49:76:76:ad:16:10:44: d9:17:dd:cb:45:9d:35:71:a8:8c:12:59:c4:aa:a9: 9e:23:47:8f:8d:2e:b0:2f:32:94:99:78:4f:a3:60: 22:5a:59:34:3d:22:33:73:da:b2:c3:25:34:95:21: 85:d7:a4:dd:73:ed:5e:50:ec:3a:22:e3:12:a1:f2: ff:f2:d0:45:96:1c:82:8a:93:c3:5e:e6:78:23:9b: 33:aa:8e:c1:17:03:30:e6:93:1f:f5:84:ac:72:0e: 4b:0d:27:0f:55:28:ce:f1:ba:5b:57:2c:1d:83:e4: e3:5f:55:57:c7:aa:7a:c7:9a:e0:39:a0:d4:bc:cd: a6:6b:98:e6:cd:13:2e:14:45:b2:28:55:29:63:a3: 12:00:2e:43:2c:2f:dc:bf:c3:5d:99:cb:12:e9:cc: f0:30:52:06:a3:b7:1c:dd:09:a4:7d:ec:cc:ff:56: 3e:17:2c:58:bc:ec:2c:8f:67:e3:dc:25:82:62:d7: df:6d:f9:a2:f0:b8:77:d4:d6:53:73:e7:1f:1b:6b: b4:ed:ae:74:88:3b:7e:23:b4:f7:74:a8:2c:bd:70: 0a:8d:4b:fc:53:6f:e1:b2:7a:31:74:92:46:f2:7d: f7:0b:d8:0e:5e:c7:04:33:8e:d8:da:dc:87:10:86: ad:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:DF:38:22:9B:F6:AB:4B:66:52:39:A0:72:EF:09:F4:90:AB:78:F2 X509v3 Authority Key Identifier: keyid:9F:B7:41:B7:29:80:3C:6B:43:29:BC:3B:40:E7:6E:52:AB:D8:B9:F8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A7F56/94D57236ACCD11EE81069050C4F9AE02/n7dBtymAPGtDKbw7QOduUqvYufg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/n7dBtymAPGtDKbw7QOduUqvYufg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A7F56/94D57236ACCD11EE81069050C4F9AE02/n7dBtymAPGtDKbw7QOduUqvYufg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 68:e0:47:8a:07:b2:da:f6:18:c0:9d:c0:46:27:db:ac:ed:9d: 1a:e7:ef:70:1d:7f:a1:ee:df:30:82:c6:3d:24:20:9a:b6:df: 02:f2:28:6a:15:bd:4c:3c:c3:80:ac:32:70:9b:c0:37:58:f2: 42:b0:27:53:3d:a2:0f:b7:dc:28:14:2a:8a:eb:88:8f:1b:06: a9:c5:4b:e7:a9:fe:81:26:d4:84:13:34:5a:8e:94:28:11:49: 90:3a:15:12:02:86:1a:7a:60:1c:f5:1d:4f:3f:6a:92:86:2b: 1b:11:ec:af:15:d8:29:e3:79:20:c0:82:5b:fb:7c:a8:87:08: 91:99:00:09:ba:33:4b:85:41:45:f7:95:2b:e8:4f:cf:c8:33: 3b:75:a7:57:3a:66:d8:63:05:93:75:37:4d:0e:f6:e3:4e:e8: 24:fb:b1:fe:78:f8:64:e5:e5:6d:28:28:34:8f:d4:72:7a:0b: 38:d1:39:98:e0:50:e1:63:f7:fd:2a:3b:3a:53:65:20:3c:70: 60:f4:80:11:4b:9d:24:7f:49:89:8e:d0:f4:ca:3c:27:9d:60: 81:54:06:d7:a5:c5:96:19:e3:ff:24:df:15:5e:c2:29:01:45: df:ae:e1:8b:95:c2:b7:df:3f:c0:88:50:73:48:f3:29:a4:45: 12:51:3c:cd -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICASUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTdGNTYxMTAvBgNVBAUTKDlGQjc0MUI3Mjk4MDNDNkI0MzI5QkMzQjQwRTc2RTUy QUJEOEI5RjgwHhcNMjUwNzIxMDQ0OTE5WhcNMjUwNzI4MDQ0OTE4WjAYMRYwFAYD VQQDEw02ODdkYzZjZi04ODVjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1U16Qz3pwUl2dq0WEETZF93LRZ01caiMElnEqqmeI0ePjS6wLzKUmXhPo2Ai Wlk0PSIzc9qywyU0lSGF16Tdc+1eUOw6IuMSofL/8tBFlhyCipPDXuZ4I5szqo7B FwMw5pMf9YSscg5LDScPVSjO8bpbVywdg+TjX1VXx6p6x5rgOaDUvM2ma5jmzRMu FEWyKFUpY6MSAC5DLC/cv8NdmcsS6czwMFIGo7cc3QmkfezM/1Y+FyxYvOwsj2fj 3CWCYtffbfmi8Lh31NZTc+cfG2u07a50iDt+I7T3dKgsvXAKjUv8U2/hsnoxdJJG 8n33C9gOXscEM47Y2tyHEIatzQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMXfOCKb 9qtLZlI5oHLvCfSQq3jyMB8GA1UdIwQYMBaAFJ+3QbcpgDxrQym8O0DnblKr2Ln4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBN0Y1Ni85NEQ1NzIzNkFD Q0QxMUVFODEwNjkwNTBDNEY5QUUwMi9uN2RCdHltQVBHdERLYnc3UU9kdVVxdll1 ZmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL243ZEJ0eW1BUEd0REtidzdRT2R1VXF2WXVmZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB N0Y1Ni85NEQ1NzIzNkFDQ0QxMUVFODEwNjkwNTBDNEY5QUUwMi9uN2RCdHltQVBH dERLYnc3UU9kdVVxdll1ZmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBo4EeKB7La9hjAncBGJ9us7Z0a5+9wHX+h7t8wgsY9JCCatt8C8ihq Fb1MPMOArDJwm8A3WPJCsCdTPaIPt9woFCqK64iPGwapxUvnqf6BJtSEEzRajpQo EUmQOhUSAoYaemAc9R1PP2qShisbEeyvFdgp43kgwIJb+3yohwiRmQAJujNLhUFF 95Ur6E/PyDM7dadXOmbYYwWTdTdNDvbjTugk+7H+ePhk5eVtKCg0j9Ryegs40TmY 4FDhY/f9Kjs6U2UgPHBg9IARS50kf0mJjtD0yjwnnWCBVAbXpcWWGeP/JN8VXsIp AUXfruGLlcK33z/AiFBzSPMppEUSUTzN -----END CERTIFICATE-----Generated at Mon Jul 21 07:50:52 2025 by rpki-client