$ rpki-client -vvf rpki.apnic.net/member_repository/A91F367D/99DA7ABE039411EBB6648446C4F9AE02/q8dSj86PeUX0YPdSdIJB2tVnilo.mft File: q8dSj86PeUX0YPdSdIJB2tVnilo.mft (raw, json) Hash identifier: 3tPBrf2VbLo3HWvae0KdfH7yiPFDFIADko1W9vJgOH0= Subject key identifier: 07:60:4B:97:1D:2D:D4:48:14:8C:E4:78:14:DA:00:93:00:93:E2:7F Authority key identifier: AB:C7:52:8F:CE:8F:79:45:F4:60:F7:52:74:82:41:DA:D5:67:8A:5A Certificate issuer: /CN=A91F367D/serialNumber=ABC7528FCE8F7945F460F752748241DAD5678A5A Certificate serial: 07BB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q8dSj86PeUX0YPdSdIJB2tVnilo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F367D/99DA7ABE039411EBB6648446C4F9AE02/q8dSj86PeUX0YPdSdIJB2tVnilo.mft Manifest number: 07B5 Signing time: Wed 02 Jul 2025 21:28:19 +0000 Manifest this update: Wed 02 Jul 2025 21:28:18 +0000 Manifest next update: Wed 09 Jul 2025 21:28:18 +0000 Files and hashes: 1: q8dSj86PeUX0YPdSdIJB2tVnilo.crl (hash: Rzu9H3r1ApEUef3UBtinunAy4IK08f8t6YUiqTFWskU=) 2: AC1CD860039511EBBE8C7F47C4F9AE02.roa (hash: cujX/yOvlRxdf5P8eSmQLnHVmBWJtY4Bh7R/a7D9SZs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F367D/99DA7ABE039411EBB6648446C4F9AE02/q8dSj86PeUX0YPdSdIJB2tVnilo.crl rsync://rpki.apnic.net/member_repository/A91F367D/99DA7ABE039411EBB6648446C4F9AE02/q8dSj86PeUX0YPdSdIJB2tVnilo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q8dSj86PeUX0YPdSdIJB2tVnilo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 21:28:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1979 (0x7bb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F367D, serialNumber=ABC7528FCE8F7945F460F752748241DAD5678A5A Validity Not Before: Jul 2 21:28:18 2025 GMT Not After : Jul 9 21:28:18 2025 GMT Subject: CN=6865a473-c1a7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:91:d4:8f:5e:a1:34:0a:96:f3:49:d4:c0:eb: c0:bb:60:e5:bb:65:a9:ec:b7:52:1e:01:9a:83:df: 7e:10:a6:49:86:1c:c5:15:2b:f9:69:4a:5f:c0:4c: 47:b7:0a:42:29:67:4a:65:71:19:54:9f:bf:44:5d: e5:9e:6a:1a:f3:25:77:e3:13:f5:a7:9f:b3:29:9e: 23:cc:b3:09:da:86:1d:56:15:94:34:86:48:34:bb: b8:e4:8d:ee:f6:fd:1e:eb:45:6e:4e:0c:29:65:ff: 68:cf:36:30:95:10:1c:86:32:08:04:ef:fe:d9:2c: 7c:6a:91:d2:44:90:72:6f:85:e6:ab:59:b4:b3:e3: 05:f7:8c:12:14:59:58:60:63:dd:45:04:9b:0c:e6: 3f:1f:eb:08:84:80:14:d1:46:a2:dd:f3:03:34:4e: 6a:42:ac:d2:7f:f6:68:f8:5f:b6:b7:c6:60:ae:3e: 9e:4b:1a:f6:65:2e:22:ee:38:1e:8a:4b:15:25:33: 00:fd:8c:e5:88:9a:3a:c6:21:6a:b3:a2:35:33:05: 25:82:b2:71:86:5d:c5:cb:a4:03:cf:6d:bb:fd:9b: 54:9e:fc:09:93:2e:83:aa:22:89:cc:13:ed:6f:c0: 53:da:eb:06:7d:a5:3f:1f:21:5b:ba:6c:16:74:b4: fe:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:60:4B:97:1D:2D:D4:48:14:8C:E4:78:14:DA:00:93:00:93:E2:7F X509v3 Authority Key Identifier: keyid:AB:C7:52:8F:CE:8F:79:45:F4:60:F7:52:74:82:41:DA:D5:67:8A:5A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F367D/99DA7ABE039411EBB6648446C4F9AE02/q8dSj86PeUX0YPdSdIJB2tVnilo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q8dSj86PeUX0YPdSdIJB2tVnilo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F367D/99DA7ABE039411EBB6648446C4F9AE02/q8dSj86PeUX0YPdSdIJB2tVnilo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0d:16:44:1c:ae:00:33:11:fe:b2:f4:44:ec:61:4c:b6:e3:52: 25:9b:46:46:b5:4b:c4:16:00:d2:4d:7f:66:32:1c:9b:06:d8: 50:eb:ce:a2:6b:90:7c:9a:db:67:18:d3:3b:06:e3:c2:3c:eb: ce:4b:dd:de:2d:71:09:2b:64:39:a7:54:14:4b:28:ce:5c:20: 43:05:b8:eb:d1:2e:8b:31:2a:2e:2c:ca:c8:8c:35:cc:35:23: 49:8b:35:61:b7:af:b1:c0:cc:cf:5a:7e:1e:75:14:a9:67:6b: 60:4a:bb:55:ad:1f:9e:da:27:e3:3d:8d:fb:5a:f2:25:e4:78: bf:be:a7:c3:28:1d:9e:ed:ee:4c:4d:d9:ab:52:39:c1:e4:1a: d7:8a:49:3b:ee:59:55:62:e3:70:e1:c9:9c:06:8f:cd:d0:ee: 0b:19:a9:bd:29:72:c4:39:0e:05:30:06:00:e7:bc:b6:f5:58: 35:b7:c3:de:51:34:d5:04:46:64:05:b8:6c:0f:9f:45:7c:70: cb:3c:9a:c4:11:7e:52:46:36:e4:0c:af:6a:a0:74:e2:bc:1e: 8b:25:04:14:4d:8f:c3:a6:2c:05:2c:bc:4a:57:a3:b3:db:91: 63:07:e8:91:f1:aa:3a:31:64:92:b9:79:a1:73:2a:8e:5c:a8: f5:f9:8c:91 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB7swDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjM2N0QxMTAvBgNVBAUTKEFCQzc1MjhGQ0U4Rjc5NDVGNDYwRjc1Mjc0ODI0MURB RDU2NzhBNUEwHhcNMjUwNzAyMjEyODE4WhcNMjUwNzA5MjEyODE4WjAYMRYwFAYD VQQDEw02ODY1YTQ3My1jMWE3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyZHUj16hNAqW80nUwOvAu2Dlu2Wp7LdSHgGag99+EKZJhhzFFSv5aUpfwExH twpCKWdKZXEZVJ+/RF3lnmoa8yV34xP1p5+zKZ4jzLMJ2oYdVhWUNIZINLu45I3u 9v0e60VuTgwpZf9ozzYwlRAchjIIBO/+2Sx8apHSRJByb4Xmq1m0s+MF94wSFFlY YGPdRQSbDOY/H+sIhIAU0Uai3fMDNE5qQqzSf/Zo+F+2t8Zgrj6eSxr2ZS4i7jge iksVJTMA/YzliJo6xiFqs6I1MwUlgrJxhl3Fy6QDz227/ZtUnvwJky6DqiKJzBPt b8BT2usGfaU/HyFbumwWdLT+bwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAdgS5cd LdRIFIzkeBTaAJMAk+J/MB8GA1UdIwQYMBaAFKvHUo/Oj3lF9GD3UnSCQdrVZ4pa MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMzY3RC85OURBN0FCRTAz OTQxMUVCQjY2NDg0NDZDNEY5QUUwMi9xOGRTajg2UGVVWDBZUGRTZElKQjJ0Vm5p bG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3E4ZFNqODZQZVVYMFlQZFNkSUpCMnRWbmlsby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG MzY3RC85OURBN0FCRTAzOTQxMUVCQjY2NDg0NDZDNEY5QUUwMi9xOGRTajg2UGVV WDBZUGRTZElKQjJ0Vm5pbG8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQANFkQcrgAzEf6y9ETsYUy241Ilm0ZGtUvEFgDSTX9mMhybBthQ686i a5B8mttnGNM7BuPCPOvOS93eLXEJK2Q5p1QUSyjOXCBDBbjr0S6LMSouLMrIjDXM NSNJizVht6+xwMzPWn4edRSpZ2tgSrtVrR+e2ifjPY37WvIl5Hi/vqfDKB2e7e5M TdmrUjnB5BrXikk77llVYuNw4cmcBo/N0O4LGam9KXLEOQ4FMAYA57y29Vg1t8Pe UTTVBEZkBbhsD59FfHDLPJrEEX5SRjbkDK9qoHTivB6LJQQUTY/DpiwFLLxKV6Oz 25FjB+iR8ao6MWSSuXmhcyqOXKj1+YyR -----END CERTIFICATE-----Generated at Thu Jul 3 18:08:14 2025 by rpki-client