$ rpki-client -vvf rpki.apnic.net/member_repository/A9126A3C/7390B34AC6A011EF928B7960C4F9AE02/l7A9ovtF9W4_WCFj33vZUGk5mUQ.mft File: l7A9ovtF9W4_WCFj33vZUGk5mUQ.mft (raw, json) Hash identifier: AHLMqlaI0z1VNoZjCKO1WJ92F0eUuGVyKximNWeEfNI= Subject key identifier: BB:22:A2:22:DB:60:17:60:08:08:BC:11:7E:6C:5E:63:16:DB:61:D4 Authority key identifier: 97:B0:3D:A2:FB:45:F5:6E:3F:58:21:63:DF:7B:D9:50:69:39:99:44 Certificate issuer: /CN=A9126A3C/serialNumber=97B03DA2FB45F56E3F582163DF7BD95069399944 Certificate serial: 65 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/l7A9ovtF9W4_WCFj33vZUGk5mUQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9126A3C/7390B34AC6A011EF928B7960C4F9AE02/l7A9ovtF9W4_WCFj33vZUGk5mUQ.mft Manifest number: 62 Signing time: Thu 03 Jul 2025 07:17:10 +0000 Manifest this update: Thu 03 Jul 2025 07:17:09 +0000 Manifest next update: Thu 10 Jul 2025 07:17:09 +0000 Files and hashes: 1: l7A9ovtF9W4_WCFj33vZUGk5mUQ.crl (hash: fTzAeb+s6UQm6NwiEaNp5nLFIqjLfiFQ3ANCvRLhMH4=) 2: F120EB84C6D911EFA447E849C4F9AE02.roa (hash: mo70D3RkkFpkqu5IGLksT/J6Tz0OUu7ujkEgshBAI8o=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9126A3C/7390B34AC6A011EF928B7960C4F9AE02/l7A9ovtF9W4_WCFj33vZUGk5mUQ.crl rsync://rpki.apnic.net/member_repository/A9126A3C/7390B34AC6A011EF928B7960C4F9AE02/l7A9ovtF9W4_WCFj33vZUGk5mUQ.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/l7A9ovtF9W4_WCFj33vZUGk5mUQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 101 (0x65) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9126A3C, serialNumber=97B03DA2FB45F56E3F582163DF7BD95069399944 Validity Not Before: Jul 3 07:17:09 2025 GMT Not After : Jul 10 07:17:09 2025 GMT Subject: CN=68662e75-9ef2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:bd:f6:ad:92:30:f7:7d:5e:8e:d2:ac:dd:a5: f5:80:f1:c8:2f:fb:1c:d1:01:f8:f8:71:50:95:71: 4d:61:66:07:25:de:a5:9e:d2:a3:65:20:d7:1b:7f: 89:ac:69:d0:08:67:0c:48:44:80:4c:6f:c0:48:0f: db:96:9a:f2:7f:a3:63:dd:fb:53:05:14:9b:11:f9: 47:a0:25:f1:e8:50:4a:5c:ea:b8:5b:c9:2b:8e:3f: b3:44:8c:a2:ec:c8:fe:82:16:1f:a7:9b:77:c1:a0: ca:f2:f4:fd:5e:2a:dc:d8:9c:2b:68:9c:82:06:2a: be:3a:85:d4:6b:86:44:04:94:5b:a8:98:8d:1d:30: 53:5f:d0:ed:81:d4:11:05:2c:e4:b6:5a:11:d4:be: e1:5b:ec:bc:e7:ef:2b:8b:59:2e:f3:de:be:fc:e1: 68:13:42:2b:9a:a7:ef:83:ba:41:b6:2d:df:11:01: 5f:d5:24:eb:af:84:56:06:b8:31:41:fa:f6:26:c0: ae:0f:04:e4:57:61:09:de:e2:e5:22:e8:d9:c1:98: 63:a6:f4:22:81:b4:69:16:84:fa:2f:df:90:35:10: a5:56:26:b7:31:89:15:b9:6b:bc:62:2d:c7:89:d9: 9c:66:86:9d:4e:cd:da:e8:8c:7c:dd:3b:ba:6f:fc: 76:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:22:A2:22:DB:60:17:60:08:08:BC:11:7E:6C:5E:63:16:DB:61:D4 X509v3 Authority Key Identifier: keyid:97:B0:3D:A2:FB:45:F5:6E:3F:58:21:63:DF:7B:D9:50:69:39:99:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9126A3C/7390B34AC6A011EF928B7960C4F9AE02/l7A9ovtF9W4_WCFj33vZUGk5mUQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/l7A9ovtF9W4_WCFj33vZUGk5mUQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9126A3C/7390B34AC6A011EF928B7960C4F9AE02/l7A9ovtF9W4_WCFj33vZUGk5mUQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1b:3b:b4:b1:35:2b:2a:02:6b:bd:ba:f0:bc:9d:93:a5:46:bd: 18:a2:3a:b1:6a:84:cd:5b:01:66:16:e0:19:0f:7d:79:5f:19: c7:30:13:6a:6b:7b:f0:60:5e:bd:eb:60:57:ed:9b:b7:26:59: 1c:ad:c4:4d:3c:41:bf:ad:d4:28:9e:ba:77:b0:b4:2c:7d:be: cc:b5:6a:53:d7:d1:85:df:70:fa:89:8d:d1:07:ae:52:b4:94: cb:5c:f2:d9:a7:69:7b:7e:1e:d4:c4:bc:ac:6d:11:0b:b4:cb: af:99:f6:ce:4f:89:cf:a6:e2:85:60:0f:29:27:b0:fb:bf:a1: c1:6a:03:77:ff:cd:43:0b:cd:bd:d3:d8:5d:ae:dd:95:a3:4a: fd:aa:d6:83:19:4b:6f:56:03:42:7c:12:9d:18:04:95:5d:90: cc:fa:cb:58:9a:bc:ff:9a:ac:9c:bc:8e:62:36:ab:32:09:bd: 96:e9:5a:a5:ff:2e:1a:d2:90:ea:93:80:86:d9:7d:e5:50:06: 1a:53:45:49:e3:21:61:ba:6b:cd:c9:a9:74:25:f8:58:c9:af: 19:4c:c0:54:24:18:fe:31:95:ba:66:49:cb:d7:f0:e1:0e:2a: 6f:66:4b:2a:50:4e:f7:9b:b8:6d:a9:95:ca:13:3f:fc:dd:4f: 79:16:6f:aa -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBZTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEy NkEzQzExMC8GA1UEBRMoOTdCMDNEQTJGQjQ1RjU2RTNGNTgyMTYzREY3QkQ5NTA2 OTM5OTk0NDAeFw0yNTA3MDMwNzE3MDlaFw0yNTA3MTAwNzE3MDlaMBgxFjAUBgNV BAMTDTY4NjYyZTc1LTllZjIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC4vfatkjD3fV6O0qzdpfWA8cgv+xzRAfj4cVCVcU1hZgcl3qWe0qNlINcbf4ms adAIZwxIRIBMb8BID9uWmvJ/o2Pd+1MFFJsR+UegJfHoUEpc6rhbySuOP7NEjKLs yP6CFh+nm3fBoMry9P1eKtzYnCtonIIGKr46hdRrhkQElFuomI0dMFNf0O2B1BEF LOS2WhHUvuFb7Lzn7yuLWS7z3r784WgTQiuap++DukG2Ld8RAV/VJOuvhFYGuDFB +vYmwK4PBORXYQne4uUi6NnBmGOm9CKBtGkWhPov35A1EKVWJrcxiRW5a7xiLceJ 2Zxmhp1OzdrojHzdO7pv/HbhAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUuyKiIttg F2AICLwRfmxeYxbbYdQwHwYDVR0jBBgwFoAUl7A9ovtF9W4/WCFj33vZUGk5mUQw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTI2QTNDLzczOTBCMzRBQzZB MDExRUY5MjhCNzk2MEM0RjlBRTAyL2w3QTlvdnRGOVc0X1dDRmozM3ZaVUdrNW1V US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvbDdBOW92dEY5VzRfV0NGajMzdlpVR2s1bVVRLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTI2 QTNDLzczOTBCMzRBQzZBMDExRUY5MjhCNzk2MEM0RjlBRTAyL2w3QTlvdnRGOVc0 X1dDRmozM3ZaVUdrNW1VUS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBABs7tLE1KyoCa7268Lydk6VGvRiiOrFqhM1bAWYW4BkPfXlfGccwE2pr e/BgXr3rYFftm7cmWRytxE08Qb+t1CieunewtCx9vsy1alPX0YXfcPqJjdEHrlK0 lMtc8tmnaXt+HtTEvKxtEQu0y6+Z9s5Pic+m4oVgDyknsPu/ocFqA3f/zUMLzb3T 2F2u3ZWjSv2q1oMZS29WA0J8Ep0YBJVdkMz6y1iavP+arJy8jmI2qzIJvZbpWqX/ LhrSkOqTgIbZfeVQBhpTRUnjIWG6a83JqXQl+FjJrxlMwFQkGP4xlbpmScvX8OEO Km9mSypQTvebuG2plcoTP/zdT3kWb6o= -----END CERTIFICATE-----Generated at Fri Jul 4 07:46:29 2025 by rpki-client