$ rpki-client -vvf rpki.apnic.net/member_repository/A91895D8/4F314C403ADC11E9B1D30C12C4F9AE02/n7qfr8GmfUUaL1m57iMkLqndRXI.mft File: n7qfr8GmfUUaL1m57iMkLqndRXI.mft (raw, json) Hash identifier: s2ZJte2ywXFxRw0hMANUZfGT9r7oMJojzixejpICHwg= Subject key identifier: D4:12:87:5A:E8:14:91:C5:6B:CC:66:A5:A8:E9:81:8F:11:AF:4F:D1 Authority key identifier: 9F:BA:9F:AF:C1:A6:7D:45:1A:2F:59:B9:EE:23:24:2E:A9:DD:45:72 Certificate issuer: /CN=A91895D8/serialNumber=9FBA9FAFC1A67D451A2F59B9EE23242EA9DD4572 Certificate serial: 1046 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n7qfr8GmfUUaL1m57iMkLqndRXI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91895D8/4F314C403ADC11E9B1D30C12C4F9AE02/n7qfr8GmfUUaL1m57iMkLqndRXI.mft Manifest number: 103E Signing time: Fri 16 May 2025 17:39:03 +0000 Manifest this update: Fri 16 May 2025 17:39:03 +0000 Manifest next update: Fri 23 May 2025 17:39:03 +0000 Files and hashes: 1: n7qfr8GmfUUaL1m57iMkLqndRXI.crl (hash: QLexh074Eq9d5+Ea9UPYI+S4MiugMsRj5l8XNp71hdM=) 2: 566988C8717411E9AF629E4BC4F9AE02.roa (hash: XI/7jfg+GeSHUA3qICjMcaW/9XUB7SlPIfPTYeMPDXE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91895D8/4F314C403ADC11E9B1D30C12C4F9AE02/n7qfr8GmfUUaL1m57iMkLqndRXI.crl rsync://rpki.apnic.net/member_repository/A91895D8/4F314C403ADC11E9B1D30C12C4F9AE02/n7qfr8GmfUUaL1m57iMkLqndRXI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n7qfr8GmfUUaL1m57iMkLqndRXI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 23 May 2025 17:39:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4166 (0x1046) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91895D8, serialNumber=9FBA9FAFC1A67D451A2F59B9EE23242EA9DD4572 Validity Not Before: May 16 17:39:03 2025 GMT Not After : May 23 17:39:03 2025 GMT Subject: CN=68277837-0faa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:93:78:69:4c:46:2b:85:15:bf:49:3a:24:f0: 4e:2c:90:c2:34:45:4d:7e:f5:50:90:7e:c2:ce:04: 16:df:2d:8c:bb:da:70:6b:1c:ba:90:94:f5:d1:6b: 9d:f0:59:f8:d0:94:03:04:82:9b:c7:16:06:ee:b1: 8d:cd:39:32:da:ed:b3:50:b2:76:33:d0:ac:a3:e6: e4:46:ce:94:99:41:0a:9e:f4:bf:17:c9:85:63:a4: 26:81:ed:50:6e:90:8b:79:4f:4f:c9:74:7c:72:84: e2:df:8f:f6:9a:8a:10:82:24:42:cf:28:f6:9b:22: ff:70:6a:f0:a5:6a:64:7a:00:16:2a:3c:5b:e6:b1: 9e:46:e7:c2:ba:5b:41:d0:84:78:a5:2c:8c:e3:62: 6c:fd:42:46:89:23:f8:be:ec:60:ca:93:65:0b:73: 69:1a:3a:cf:50:cc:2b:5a:78:80:73:3f:64:e4:1b: 55:07:61:c5:3a:8d:74:3c:18:98:d8:37:80:49:31: b6:a2:16:59:d4:8c:47:37:8f:4e:8a:84:c4:22:4c: b3:7e:17:5a:06:7e:c9:79:72:57:25:47:b7:0c:44: fa:3d:47:04:cf:e3:d4:6f:00:91:d0:76:4c:9d:4d: ba:d0:fa:12:54:e6:d1:ec:5a:54:de:37:8f:ac:58: 45:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:12:87:5A:E8:14:91:C5:6B:CC:66:A5:A8:E9:81:8F:11:AF:4F:D1 X509v3 Authority Key Identifier: keyid:9F:BA:9F:AF:C1:A6:7D:45:1A:2F:59:B9:EE:23:24:2E:A9:DD:45:72 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91895D8/4F314C403ADC11E9B1D30C12C4F9AE02/n7qfr8GmfUUaL1m57iMkLqndRXI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n7qfr8GmfUUaL1m57iMkLqndRXI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91895D8/4F314C403ADC11E9B1D30C12C4F9AE02/n7qfr8GmfUUaL1m57iMkLqndRXI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a4:81:71:83:85:a3:e4:a7:4b:db:0a:b9:d0:3c:f2:1d:64:5a: b4:12:15:c2:0e:c5:c3:cb:ee:02:99:e8:88:86:a1:61:e2:98: 11:bb:75:02:2c:5c:05:50:11:a5:2a:b6:85:52:1d:c5:49:4f: 96:54:1e:1f:36:0e:2d:94:f4:e6:fc:8b:bf:1c:1e:43:c4:70: 03:4d:b4:85:c9:7d:ea:42:72:4c:fb:dc:dd:11:3c:b9:3a:fd: 1a:25:4b:3f:50:c8:53:57:82:8e:aa:da:42:34:73:dd:d3:ae: d8:7d:e9:18:7f:f3:eb:ee:68:cb:6a:c4:95:f4:0f:10:a6:dd: 2f:85:ec:bc:97:9e:60:4a:22:33:83:9f:e7:7b:93:8c:83:69: a0:57:10:f9:d5:37:3a:9c:7c:26:18:69:a3:c9:53:4c:e7:ba: b7:97:94:18:28:b9:39:6f:a1:9a:42:b9:8b:c0:4e:da:47:80: 65:c8:26:90:95:58:1d:ca:e7:fa:e4:f0:02:27:cf:ce:b7:28: b1:71:bf:2e:f9:83:ee:e9:50:bf:c6:47:4a:45:5a:0c:8f:94: 98:c3:ff:82:3c:34:b6:29:ba:0f:6f:92:b9:49:30:a9:99:47: 21:08:ec:aa:2a:b7:26:7d:c8:0e:fb:33:93:28:78:3a:f8:e7: 95:1e:3e:4a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEEYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODk1RDgxMTAvBgNVBAUTKDlGQkE5RkFGQzFBNjdENDUxQTJGNTlCOUVFMjMyNDJF QTlERDQ1NzIwHhcNMjUwNTE2MTczOTAzWhcNMjUwNTIzMTczOTAzWjAYMRYwFAYD VQQDEw02ODI3NzgzNy0wZmFhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApJN4aUxGK4UVv0k6JPBOLJDCNEVNfvVQkH7CzgQW3y2Mu9pwaxy6kJT10Wud 8Fn40JQDBIKbxxYG7rGNzTky2u2zULJ2M9Cso+bkRs6UmUEKnvS/F8mFY6Qmge1Q bpCLeU9PyXR8coTi34/2mooQgiRCzyj2myL/cGrwpWpkegAWKjxb5rGeRufCultB 0IR4pSyM42Js/UJGiSP4vuxgypNlC3NpGjrPUMwrWniAcz9k5BtVB2HFOo10PBiY 2DeASTG2ohZZ1IxHN49OioTEIkyzfhdaBn7JeXJXJUe3DET6PUcEz+PUbwCR0HZM nU260PoSVObR7FpU3jePrFhF5QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNQSh1ro FJHFa8xmpajpgY8Rr0/RMB8GA1UdIwQYMBaAFJ+6n6/Bpn1FGi9Zue4jJC6p3UVy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4OTVEOC80RjMxNEM0MDNB REMxMUU5QjFEMzBDMTJDNEY5QUUwMi9uN3FmcjhHbWZVVWFMMW01N2lNa0xxbmRS WEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL243cWZyOEdtZlVVYUwxbTU3aU1rTHFuZFJYSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 OTVEOC80RjMxNEM0MDNBREMxMUU5QjFEMzBDMTJDNEY5QUUwMi9uN3FmcjhHbWZV VWFMMW01N2lNa0xxbmRSWEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCkgXGDhaPkp0vbCrnQPPIdZFq0EhXCDsXDy+4CmeiIhqFh4pgRu3UC LFwFUBGlKraFUh3FSU+WVB4fNg4tlPTm/Iu/HB5DxHADTbSFyX3qQnJM+9zdETy5 Ov0aJUs/UMhTV4KOqtpCNHPd067YfekYf/Pr7mjLasSV9A8Qpt0vhey8l55gSiIz g5/ne5OMg2mgVxD51Tc6nHwmGGmjyVNM57q3l5QYKLk5b6GaQrmLwE7aR4BlyCaQ lVgdyuf65PACJ8/Otyixcb8u+YPu6VC/xkdKRVoMj5SYw/+CPDS2KboPb5K5STCp mUchCOyqKrcmfcgO+zOTKHg6+OeVHj5K -----END CERTIFICATE-----Generated at Fri May 16 20:51:27 2025 by rpki-client