$ rpki-client -vvf rpki.apnic.net/member_repository/A91895D8/4F314C403ADC11E9B1D30C12C4F9AE02/n7qfr8GmfUUaL1m57iMkLqndRXI.mft File: n7qfr8GmfUUaL1m57iMkLqndRXI.mft (raw, json) Hash identifier: W7tok5bRaYZKkRJY1GmsyUSSn3R3U+ATFJ9f6GG4nj0= Subject key identifier: B4:95:4A:7D:C7:DC:C8:F2:21:5E:BE:B1:85:B0:BA:AF:0A:71:6D:8B Authority key identifier: 9F:BA:9F:AF:C1:A6:7D:45:1A:2F:59:B9:EE:23:24:2E:A9:DD:45:72 Certificate issuer: /CN=A91895D8/serialNumber=9FBA9FAFC1A67D451A2F59B9EE23242EA9DD4572 Certificate serial: 105E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n7qfr8GmfUUaL1m57iMkLqndRXI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91895D8/4F314C403ADC11E9B1D30C12C4F9AE02/n7qfr8GmfUUaL1m57iMkLqndRXI.mft Manifest number: 1056 Signing time: Fri 04 Jul 2025 17:41:18 +0000 Manifest this update: Fri 04 Jul 2025 17:41:18 +0000 Manifest next update: Fri 11 Jul 2025 17:41:18 +0000 Files and hashes: 1: n7qfr8GmfUUaL1m57iMkLqndRXI.crl (hash: q3xrkkW0ySJRXFP0bv8F5QNEYIhd0fkQDiLVCELCBHc=) 2: 566988C8717411E9AF629E4BC4F9AE02.roa (hash: XI/7jfg+GeSHUA3qICjMcaW/9XUB7SlPIfPTYeMPDXE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91895D8/4F314C403ADC11E9B1D30C12C4F9AE02/n7qfr8GmfUUaL1m57iMkLqndRXI.crl rsync://rpki.apnic.net/member_repository/A91895D8/4F314C403ADC11E9B1D30C12C4F9AE02/n7qfr8GmfUUaL1m57iMkLqndRXI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n7qfr8GmfUUaL1m57iMkLqndRXI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4190 (0x105e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91895D8, serialNumber=9FBA9FAFC1A67D451A2F59B9EE23242EA9DD4572 Validity Not Before: Jul 4 17:41:18 2025 GMT Not After : Jul 11 17:41:18 2025 GMT Subject: CN=6868123e-a251 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:6c:61:6d:84:0b:32:6e:63:14:44:cd:5f:58: ba:da:ef:9f:00:15:cd:f8:cc:c3:ca:50:89:77:d7: 88:13:c0:e3:d3:53:c0:3c:da:00:91:d8:0a:6a:f3: 42:16:29:92:2f:04:58:fb:e5:75:1a:47:c0:9c:0f: 98:d2:0f:77:38:a3:bb:fb:c7:8b:a5:fb:fd:80:34: 2c:2a:db:d2:a3:78:93:ad:64:67:b9:59:bc:47:60: 90:b3:af:42:d8:99:ec:82:c1:cd:c6:c1:7b:17:79: 59:6a:d4:db:a0:a9:06:95:2e:de:bb:27:09:e1:a3: 2c:c5:6a:5d:90:60:ee:4c:27:f6:86:7e:f5:28:c3: d7:aa:83:ca:c0:48:c4:a7:b3:ba:76:8d:e3:27:96: a9:92:b9:1f:d3:2c:62:ba:cb:09:82:19:23:dc:7b: c6:3c:1e:5d:5f:9e:05:68:34:11:1c:57:1d:2f:90: e0:4f:10:6a:15:aa:49:ba:86:55:9e:21:ea:06:16: e8:41:57:93:d0:53:9a:cd:6e:c7:50:3b:96:0a:1b: 20:8c:57:b7:32:d2:65:45:4a:80:15:6b:74:26:0e: ec:5a:8b:45:12:a3:c6:3e:4f:7d:cb:59:73:75:6e: 2b:7c:c8:9d:06:8a:af:16:9f:6c:92:5d:59:e3:3c: 9c:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:95:4A:7D:C7:DC:C8:F2:21:5E:BE:B1:85:B0:BA:AF:0A:71:6D:8B X509v3 Authority Key Identifier: keyid:9F:BA:9F:AF:C1:A6:7D:45:1A:2F:59:B9:EE:23:24:2E:A9:DD:45:72 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91895D8/4F314C403ADC11E9B1D30C12C4F9AE02/n7qfr8GmfUUaL1m57iMkLqndRXI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n7qfr8GmfUUaL1m57iMkLqndRXI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91895D8/4F314C403ADC11E9B1D30C12C4F9AE02/n7qfr8GmfUUaL1m57iMkLqndRXI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 17:47:7b:95:69:8b:43:71:02:4f:5a:21:8a:c5:18:4f:f8:13: 92:cd:b6:e8:eb:4f:db:4a:c6:c8:93:3d:31:60:16:87:39:e6: 43:c6:62:c6:5f:15:23:0e:69:73:f2:7e:3b:4e:3c:da:d4:25: 86:6b:e8:ff:a3:a4:05:ac:a3:33:1d:ef:cd:77:d8:61:bc:e0: 56:66:41:6b:6f:87:3e:90:e9:b9:64:a4:de:b9:4c:0c:4b:28: f2:88:b0:48:0a:bf:5f:45:d7:dc:49:ca:a0:67:b6:57:32:21: e9:71:f7:06:80:26:58:74:05:ff:84:eb:70:f1:5a:b8:d5:97: 3b:28:57:6d:cf:92:77:af:0b:98:36:0e:8a:74:05:a6:1a:ea: 9f:22:c5:4e:65:31:4c:61:78:6f:2e:00:d3:06:7f:6d:a6:02: 1d:59:b6:67:ea:b3:ea:da:de:29:06:a6:3b:81:1f:51:96:65: f2:5b:68:36:db:e0:00:c7:12:66:83:12:ab:32:ba:1a:2d:f0: cb:57:4b:bc:f6:dc:f9:ee:2e:b9:c1:cc:f5:32:52:51:f1:7d: d4:1c:f9:cf:21:b7:46:ff:1e:10:37:a8:ef:ce:67:26:c3:49: b9:dc:24:cd:b9:a7:84:45:54:80:5a:50:0f:6f:31:d4:09:07: 2d:2c:17:c0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEF4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODk1RDgxMTAvBgNVBAUTKDlGQkE5RkFGQzFBNjdENDUxQTJGNTlCOUVFMjMyNDJF QTlERDQ1NzIwHhcNMjUwNzA0MTc0MTE4WhcNMjUwNzExMTc0MTE4WjAYMRYwFAYD VQQDEw02ODY4MTIzZS1hMjUxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv2xhbYQLMm5jFETNX1i62u+fABXN+MzDylCJd9eIE8Dj01PAPNoAkdgKavNC FimSLwRY++V1GkfAnA+Y0g93OKO7+8eLpfv9gDQsKtvSo3iTrWRnuVm8R2CQs69C 2JnsgsHNxsF7F3lZatTboKkGlS7euycJ4aMsxWpdkGDuTCf2hn71KMPXqoPKwEjE p7O6do3jJ5apkrkf0yxiussJghkj3HvGPB5dX54FaDQRHFcdL5DgTxBqFapJuoZV niHqBhboQVeT0FOazW7HUDuWChsgjFe3MtJlRUqAFWt0Jg7sWotFEqPGPk99y1lz dW4rfMidBoqvFp9skl1Z4zyczwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLSVSn3H 3MjyIV6+sYWwuq8KcW2LMB8GA1UdIwQYMBaAFJ+6n6/Bpn1FGi9Zue4jJC6p3UVy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4OTVEOC80RjMxNEM0MDNB REMxMUU5QjFEMzBDMTJDNEY5QUUwMi9uN3FmcjhHbWZVVWFMMW01N2lNa0xxbmRS WEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL243cWZyOEdtZlVVYUwxbTU3aU1rTHFuZFJYSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 OTVEOC80RjMxNEM0MDNBREMxMUU5QjFEMzBDMTJDNEY5QUUwMi9uN3FmcjhHbWZV VWFMMW01N2lNa0xxbmRSWEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAXR3uVaYtDcQJPWiGKxRhP+BOSzbbo60/bSsbIkz0xYBaHOeZDxmLG XxUjDmlz8n47Tjza1CWGa+j/o6QFrKMzHe/Nd9hhvOBWZkFrb4c+kOm5ZKTeuUwM SyjyiLBICr9fRdfcScqgZ7ZXMiHpcfcGgCZYdAX/hOtw8Vq41Zc7KFdtz5J3rwuY Ng6KdAWmGuqfIsVOZTFMYXhvLgDTBn9tpgIdWbZn6rPq2t4pBqY7gR9RlmXyW2g2 2+AAxxJmgxKrMroaLfDLV0u89tz57i65wcz1MlJR8X3UHPnPIbdG/x4QN6jvzmcm w0m53CTNuaeERVSAWlAPbzHUCQctLBfA -----END CERTIFICATE-----Generated at Fri Jul 4 19:10:51 2025 by rpki-client