$ rpki-client -vvf rpki.apnic.net/member_repository/A91F30AE/E7FC0D14378E11EC843CD245C4F9AE02/7qM-huKBrRPcYp8y2NU3YK4dAEc.mft File: 7qM-huKBrRPcYp8y2NU3YK4dAEc.mft (raw, json) Hash identifier: mgmC10s9D7dsvNois2LVPqrXKqJ3yxjobv5Rneb6qIg= Subject key identifier: C2:9C:33:88:41:37:1B:32:10:1E:17:66:C4:33:CE:BA:F9:17:22:1B Authority key identifier: EE:A3:3E:86:E2:81:AD:13:DC:62:9F:32:D8:D5:37:60:AE:1D:00:47 Certificate issuer: /CN=A91F30AE/serialNumber=EEA33E86E281AD13DC629F32D8D53760AE1D0047 Certificate serial: 04D7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7qM-huKBrRPcYp8y2NU3YK4dAEc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F30AE/E7FC0D14378E11EC843CD245C4F9AE02/7qM-huKBrRPcYp8y2NU3YK4dAEc.mft Manifest number: 04D2 Signing time: Fri 19 Sep 2025 00:09:30 +0000 Manifest this update: Fri 19 Sep 2025 00:09:29 +0000 Manifest next update: Fri 26 Sep 2025 00:09:29 +0000 Files and hashes: 1: 7qM-huKBrRPcYp8y2NU3YK4dAEc.crl (hash: bR3Q3kJnN21eVsCXGstjiYFDrfmovBiDy7ygNMEoWgY=) 2: 84CEFB0E379111EC92DB9A48C4F9AE02.roa (hash: 1ALWg1Qlo5IyGVR2E3WZposvdzb9mETdXX2ZGs91bhg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F30AE/E7FC0D14378E11EC843CD245C4F9AE02/7qM-huKBrRPcYp8y2NU3YK4dAEc.crl rsync://rpki.apnic.net/member_repository/A91F30AE/E7FC0D14378E11EC843CD245C4F9AE02/7qM-huKBrRPcYp8y2NU3YK4dAEc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7qM-huKBrRPcYp8y2NU3YK4dAEc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Sep 2025 00:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1239 (0x4d7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F30AE, serialNumber=EEA33E86E281AD13DC629F32D8D53760AE1D0047 Validity Not Before: Sep 19 00:09:29 2025 GMT Not After : Sep 26 00:09:29 2025 GMT Subject: CN=68cc9f39-5216 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:82:34:47:d6:0d:56:07:ac:01:9b:e7:7c:e2: 3b:26:60:76:d6:8d:cb:d5:0f:79:01:46:78:ab:44: 68:f4:bc:31:2b:52:df:99:32:6c:14:25:a7:a6:15: f7:54:83:23:94:e5:e0:25:a3:0b:90:14:b6:55:0e: dd:9e:32:19:19:fe:8f:e5:fc:1f:d0:fa:3d:bc:49: 2b:4f:d8:c9:4e:00:33:7b:82:c5:e2:84:39:40:56: dd:96:ba:b1:3d:a5:c8:6d:56:38:fe:04:1d:65:cf: e2:3f:ff:d6:78:17:84:a6:af:c3:91:0a:48:b0:1b: 84:76:bc:fc:78:cb:b8:bb:f6:33:05:cb:8f:1a:e8: d9:2a:b2:4d:f4:e2:5a:f9:fa:e3:5b:b0:06:eb:a6: 24:82:3d:fc:26:08:1a:3e:de:5c:7b:81:af:f3:5c: 83:37:c7:52:27:4f:ab:38:c9:80:66:b6:26:08:3a: 95:96:8b:2c:32:6c:90:cb:67:1a:8e:e5:f8:aa:90: 2a:5f:61:16:68:76:65:e8:e2:32:00:c5:b2:81:0c: 45:06:50:13:2e:29:f1:8d:89:68:3e:55:01:ff:26: b5:da:07:1e:bc:38:64:97:d7:d4:ba:84:35:25:32: d7:ed:d1:65:eb:14:e1:4e:f2:81:1b:60:e1:7a:3e: ba:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:9C:33:88:41:37:1B:32:10:1E:17:66:C4:33:CE:BA:F9:17:22:1B X509v3 Authority Key Identifier: keyid:EE:A3:3E:86:E2:81:AD:13:DC:62:9F:32:D8:D5:37:60:AE:1D:00:47 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F30AE/E7FC0D14378E11EC843CD245C4F9AE02/7qM-huKBrRPcYp8y2NU3YK4dAEc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7qM-huKBrRPcYp8y2NU3YK4dAEc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F30AE/E7FC0D14378E11EC843CD245C4F9AE02/7qM-huKBrRPcYp8y2NU3YK4dAEc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 34:22:80:08:cd:e9:9c:f2:92:76:23:fc:3f:70:19:b9:11:08: c4:a4:64:8b:7e:0e:69:be:b8:66:6b:f6:68:b6:ae:9e:60:cc: 5f:9f:68:fd:4a:03:8c:e9:77:5d:0a:ac:fa:4e:a3:12:5c:83: f7:fe:74:21:88:08:8c:b3:f6:93:34:87:73:6a:88:31:9e:ee: 42:7b:fa:62:f6:d5:96:8f:ca:7f:61:bd:8b:cf:34:0b:99:2a: 6b:d2:5c:36:91:87:b7:d3:89:82:d4:02:2d:f3:e7:a1:64:a6: 53:52:2d:44:12:58:cb:a8:2b:be:d1:af:d3:ed:af:f7:84:ab: 0d:d2:f6:80:0d:3a:9e:fe:bc:6a:c8:02:92:a5:00:5c:e0:40: c0:54:29:31:56:f1:22:88:ed:c5:75:7e:73:3c:24:a8:bc:ed: 45:dc:4e:2c:62:a6:19:f2:d4:88:ff:27:90:e8:95:81:38:1b: ab:35:c7:b9:1d:41:b6:1c:15:8a:ea:2a:ef:62:1d:1a:3a:aa: 1e:b1:7d:e9:5a:71:cc:ef:b8:dd:8f:c4:41:2a:4a:a4:56:c1: 2d:ca:b2:b8:f0:91:09:96:88:6f:aa:07:0f:98:38:15:55:eb: f1:f3:9a:3b:9c:2f:79:4b:f0:e1:74:d7:dd:47:9e:a8:44:e1: 10:78:d0:86 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBNcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjMwQUUxMTAvBgNVBAUTKEVFQTMzRTg2RTI4MUFEMTNEQzYyOUYzMkQ4RDUzNzYw QUUxRDAwNDcwHhcNMjUwOTE5MDAwOTI5WhcNMjUwOTI2MDAwOTI5WjAYMRYwFAYD VQQDEw02OGNjOWYzOS01MjE2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAz4I0R9YNVgesAZvnfOI7JmB21o3L1Q95AUZ4q0Ro9LwxK1LfmTJsFCWnphX3 VIMjlOXgJaMLkBS2VQ7dnjIZGf6P5fwf0Po9vEkrT9jJTgAze4LF4oQ5QFbdlrqx PaXIbVY4/gQdZc/iP//WeBeEpq/DkQpIsBuEdrz8eMu4u/YzBcuPGujZKrJN9OJa +frjW7AG66Ykgj38JggaPt5ce4Gv81yDN8dSJ0+rOMmAZrYmCDqVlossMmyQy2ca juX4qpAqX2EWaHZl6OIyAMWygQxFBlATLinxjYloPlUB/ya12gcevDhkl9fUuoQ1 JTLX7dFl6xThTvKBG2Dhej66wwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMKcM4hB NxsyEB4XZsQzzrr5FyIbMB8GA1UdIwQYMBaAFO6jPobiga0T3GKfMtjVN2CuHQBH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMzBBRS9FN0ZDMEQxNDM3 OEUxMUVDODQzQ0QyNDVDNEY5QUUwMi83cU0taHVLQnJSUGNZcDh5Mk5VM1lLNGRB RWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzdxTS1odUtCclJQY1lwOHkyTlUzWUs0ZEFFYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG MzBBRS9FN0ZDMEQxNDM3OEUxMUVDODQzQ0QyNDVDNEY5QUUwMi83cU0taHVLQnJS UGNZcDh5Mk5VM1lLNGRBRWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA0IoAIzemc8pJ2I/w/cBm5EQjEpGSLfg5pvrhma/Zotq6eYMxfn2j9 SgOM6XddCqz6TqMSXIP3/nQhiAiMs/aTNIdzaogxnu5Ce/pi9tWWj8p/Yb2LzzQL mSpr0lw2kYe304mC1AIt8+ehZKZTUi1EEljLqCu+0a/T7a/3hKsN0vaADTqe/rxq yAKSpQBc4EDAVCkxVvEiiO3FdX5zPCSovO1F3E4sYqYZ8tSI/yeQ6JWBOBurNce5 HUG2HBWK6irvYh0aOqoesX3pWnHM77jdj8RBKkqkVsEtyrK48JEJlohvqgcPmDgV Vevx85o7nC95S/DhdNfdR56oROEQeNCG -----END CERTIFICATE-----Generated at Fri Sep 19 02:32:27 2025 by rpki-client