$ rpki-client -vvf rpki.apnic.net/member_repository/A91F75E9/E694FC4AFBD711EABFEE5246C4F9AE02/u1q7WfMXq3zpVUHKWsUvIX_pWTE.mft File: u1q7WfMXq3zpVUHKWsUvIX_pWTE.mft (raw, json) Hash identifier: eNauAztduTphRUxnHNawHyJiI+wH4EhddJADVT0GQnk= Subject key identifier: FF:39:3F:F8:62:F8:48:42:4D:04:49:F3:0D:CA:D9:FD:C2:F1:9D:EA Authority key identifier: BB:5A:BB:59:F3:17:AB:7C:E9:55:41:CA:5A:C5:2F:21:7F:E9:59:31 Certificate issuer: /CN=A91F75E9/serialNumber=BB5ABB59F317AB7CE95541CA5AC52F217FE95931 Certificate serial: 07FE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u1q7WfMXq3zpVUHKWsUvIX_pWTE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F75E9/E694FC4AFBD711EABFEE5246C4F9AE02/u1q7WfMXq3zpVUHKWsUvIX_pWTE.mft Manifest number: 07F1 Signing time: Fri 22 Aug 2025 21:10:07 +0000 Manifest this update: Fri 22 Aug 2025 21:10:07 +0000 Manifest next update: Fri 29 Aug 2025 21:10:07 +0000 Files and hashes: 1: u1q7WfMXq3zpVUHKWsUvIX_pWTE.crl (hash: meEKN2jNp9AQyNfUOFRlJXczeh+m4j8PnPXh1sB7XX0=) 2: B3A2D41A071211F0B9531F0DC4F9AE02.roa (hash: 0UTI8vBXyFaaaPE8GDLKNFY+lSRTHbfC3s12YcpVQog=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F75E9/E694FC4AFBD711EABFEE5246C4F9AE02/u1q7WfMXq3zpVUHKWsUvIX_pWTE.crl rsync://rpki.apnic.net/member_repository/A91F75E9/E694FC4AFBD711EABFEE5246C4F9AE02/u1q7WfMXq3zpVUHKWsUvIX_pWTE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u1q7WfMXq3zpVUHKWsUvIX_pWTE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 21:10:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2046 (0x7fe) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F75E9, serialNumber=BB5ABB59F317AB7CE95541CA5AC52F217FE95931 Validity Not Before: Aug 22 21:10:07 2025 GMT Not After : Aug 29 21:10:07 2025 GMT Subject: CN=68a8dcaf-5445 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:95:0c:1b:7f:be:a8:ea:9a:83:76:15:f6:1c: ad:a1:07:11:79:59:56:0b:93:bf:e3:c2:9a:59:37: 2d:b3:b1:e6:25:18:a5:3c:51:aa:f7:9f:25:6a:e0: dc:60:22:b2:06:c8:83:df:7d:82:44:3e:0d:28:73: a9:aa:d9:10:92:e3:79:58:30:5f:49:b0:c3:8c:15: 11:2a:fc:83:4c:6a:11:4a:f6:61:30:1e:57:3b:f4: 61:5a:6e:a9:50:cc:fd:c8:cc:67:ae:0f:bf:c2:b2: 3c:07:b6:95:31:be:8a:3d:85:cf:97:d0:05:a5:04: c7:94:15:dd:3d:02:ae:dd:a6:26:4f:05:7e:ba:42: 31:e5:dd:63:b4:96:75:ea:e2:45:44:63:fd:37:68: 59:d3:fe:95:4f:b6:81:01:68:12:d5:a2:bf:e1:75: 88:ef:3f:a6:b2:22:da:f5:f3:2d:a6:34:ab:f2:11: ee:21:d9:d6:33:26:db:59:ac:9e:2d:a8:90:3e:bc: 3b:f3:34:38:2e:5a:92:5f:d2:9c:b6:6f:27:2b:7a: 92:4d:aa:51:42:da:22:16:82:92:8e:cf:62:4b:50: 67:b7:70:dd:c7:c6:e3:92:87:ce:af:c8:5d:88:39: 13:3d:0f:3c:ad:94:c3:c9:12:fa:7a:e2:19:2c:e1: 72:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:39:3F:F8:62:F8:48:42:4D:04:49:F3:0D:CA:D9:FD:C2:F1:9D:EA X509v3 Authority Key Identifier: keyid:BB:5A:BB:59:F3:17:AB:7C:E9:55:41:CA:5A:C5:2F:21:7F:E9:59:31 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F75E9/E694FC4AFBD711EABFEE5246C4F9AE02/u1q7WfMXq3zpVUHKWsUvIX_pWTE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u1q7WfMXq3zpVUHKWsUvIX_pWTE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F75E9/E694FC4AFBD711EABFEE5246C4F9AE02/u1q7WfMXq3zpVUHKWsUvIX_pWTE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 67:d5:1e:f2:cf:d8:c4:0d:03:e8:dd:49:f2:a7:a7:f7:13:1b: 86:89:4e:d5:99:2c:9b:47:2f:e1:3e:88:d5:cc:de:44:5e:cc: d8:df:cc:8d:c4:84:76:c6:36:c8:03:02:8c:3b:4d:52:0d:d9: 03:97:02:ab:43:06:c9:99:28:59:db:e7:7c:a1:f3:ad:23:2b: 8b:9d:f9:ad:90:2c:0a:52:77:55:d7:ed:84:71:fe:8d:3c:32: 65:86:78:6d:fa:fa:03:37:70:7a:2a:8e:1a:f3:53:7c:49:64: 7c:95:b1:1a:2c:f6:8f:1c:17:cf:90:6b:7c:55:cd:d0:c1:89: 92:28:47:28:0f:0f:76:be:cb:52:56:86:78:00:98:7e:85:d7: ea:06:76:1f:23:f1:e6:23:83:b8:37:40:f7:91:f2:98:6a:ad: a1:11:75:ad:8e:39:06:c2:54:6a:4a:2f:fb:cf:20:4e:7d:38: 24:fb:0a:9d:ef:81:9b:ad:9b:2e:6a:ad:d7:69:30:6a:f5:66: ce:72:4e:cf:33:e4:bd:47:d0:b2:cf:bc:a6:94:04:6d:46:14: ea:b2:ab:ab:9d:60:cf:df:aa:c3:63:aa:e9:05:97:e4:35:87: a7:4b:bc:4d:e8:25:79:9b:66:ae:93:95:83:94:02:aa:f3:6e: 61:b1:5f:cd -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB/4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Rjc1RTkxMTAvBgNVBAUTKEJCNUFCQjU5RjMxN0FCN0NFOTU1NDFDQTVBQzUyRjIx N0ZFOTU5MzEwHhcNMjUwODIyMjExMDA3WhcNMjUwODI5MjExMDA3WjAYMRYwFAYD VQQDEw02OGE4ZGNhZi01NDQ1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtZUMG3++qOqag3YV9hytoQcReVlWC5O/48KaWTcts7HmJRilPFGq958lauDc YCKyBsiD332CRD4NKHOpqtkQkuN5WDBfSbDDjBURKvyDTGoRSvZhMB5XO/RhWm6p UMz9yMxnrg+/wrI8B7aVMb6KPYXPl9AFpQTHlBXdPQKu3aYmTwV+ukIx5d1jtJZ1 6uJFRGP9N2hZ0/6VT7aBAWgS1aK/4XWI7z+msiLa9fMtpjSr8hHuIdnWMybbWaye LaiQPrw78zQ4LlqSX9Kctm8nK3qSTapRQtoiFoKSjs9iS1Bnt3Ddx8bjkofOr8hd iDkTPQ88rZTDyRL6euIZLOFyVwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFP85P/hi +EhCTQRJ8w3K2f3C8Z3qMB8GA1UdIwQYMBaAFLtau1nzF6t86VVBylrFLyF/6Vkx MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNzVFOS9FNjk0RkM0QUZC RDcxMUVBQkZFRTUyNDZDNEY5QUUwMi91MXE3V2ZNWHEzenBWVUhLV3NVdklYX3BX VEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3UxcTdXZk1YcTN6cFZVSEtXc1V2SVhfcFdURS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NzVFOS9FNjk0RkM0QUZCRDcxMUVBQkZFRTUyNDZDNEY5QUUwMi91MXE3V2ZNWHEz enBWVUhLV3NVdklYX3BXVEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBn1R7yz9jEDQPo3Unyp6f3ExuGiU7VmSybRy/hPojVzN5EXszY38yN xIR2xjbIAwKMO01SDdkDlwKrQwbJmShZ2+d8ofOtIyuLnfmtkCwKUndV1+2Ecf6N PDJlhnht+voDN3B6Ko4a81N8SWR8lbEaLPaPHBfPkGt8Vc3QwYmSKEcoDw92vstS VoZ4AJh+hdfqBnYfI/HmI4O4N0D3kfKYaq2hEXWtjjkGwlRqSi/7zyBOfTgk+wqd 74GbrZsuaq3XaTBq9WbOck7PM+S9R9Cyz7ymlARtRhTqsqurnWDP36rDY6rpBZfk NYenS7xN6CV5m2auk5WDlAKq825hsV/N -----END CERTIFICATE-----Generated at Sat Aug 23 14:27:36 2025 by rpki-client