$ rpki-client -vvf rpki.apnic.net/member_repository/A9126A3C/7390B34AC6A011EF928B7960C4F9AE02/l7A9ovtF9W4_WCFj33vZUGk5mUQ.mft File: l7A9ovtF9W4_WCFj33vZUGk5mUQ.mft (raw, json) Hash identifier: Hk5sFRujXhKFiwhjDpej3COXB2zcbBtVUiHMxKS8SNM= Subject key identifier: 2D:6B:D8:8A:A1:EA:DB:EB:B1:45:13:7F:4F:1C:6D:D9:8A:B4:9F:B0 Authority key identifier: 97:B0:3D:A2:FB:45:F5:6E:3F:58:21:63:DF:7B:D9:50:69:39:99:44 Certificate issuer: /CN=A9126A3C/serialNumber=97B03DA2FB45F56E3F582163DF7BD95069399944 Certificate serial: 7F Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/l7A9ovtF9W4_WCFj33vZUGk5mUQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9126A3C/7390B34AC6A011EF928B7960C4F9AE02/l7A9ovtF9W4_WCFj33vZUGk5mUQ.mft Manifest number: 7C Signing time: Sat 23 Aug 2025 06:58:23 +0000 Manifest this update: Sat 23 Aug 2025 06:58:23 +0000 Manifest next update: Sat 30 Aug 2025 06:58:23 +0000 Files and hashes: 1: l7A9ovtF9W4_WCFj33vZUGk5mUQ.crl (hash: 9/JsZL9dTZgO+9N/t7gqPS+RI/HgEyNJ/eUYIsOZxL4=) 2: F120EB84C6D911EFA447E849C4F9AE02.roa (hash: mo70D3RkkFpkqu5IGLksT/J6Tz0OUu7ujkEgshBAI8o=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9126A3C/7390B34AC6A011EF928B7960C4F9AE02/l7A9ovtF9W4_WCFj33vZUGk5mUQ.crl rsync://rpki.apnic.net/member_repository/A9126A3C/7390B34AC6A011EF928B7960C4F9AE02/l7A9ovtF9W4_WCFj33vZUGk5mUQ.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/l7A9ovtF9W4_WCFj33vZUGk5mUQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 06:58:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 127 (0x7f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9126A3C, serialNumber=97B03DA2FB45F56E3F582163DF7BD95069399944 Validity Not Before: Aug 23 06:58:23 2025 GMT Not After : Aug 30 06:58:23 2025 GMT Subject: CN=68a9668f-c690 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:ce:d0:77:b3:d2:f8:28:fe:37:63:2c:db:b6: c9:bc:6d:d9:cd:d8:d1:fe:90:c9:05:62:6a:9c:3e: 9c:4f:df:b4:0e:3e:e7:a9:bf:b3:9e:46:3a:08:e7: 0b:22:cf:59:9e:a5:18:8e:a0:3b:e5:14:d1:3b:9e: f4:8b:2e:e4:eb:9e:ca:e7:bd:0e:80:a8:34:d8:e8: c7:ab:f7:6f:2d:9d:d8:ac:cf:45:c1:d5:11:be:c8: d3:e8:30:16:d5:34:52:31:fa:d9:46:ae:f5:d1:80: d7:94:d9:4c:94:ec:e3:7c:63:e1:eb:90:64:94:43: 2c:27:f5:36:e3:e3:5d:fb:c1:3a:44:d7:fa:81:25: 76:de:10:f0:15:3d:7d:72:d5:8b:4e:6e:ef:46:6b: 08:d6:66:65:a3:e9:32:5d:09:d0:72:87:4c:de:6d: ba:99:11:6c:44:fe:89:c6:60:79:c7:3a:4f:91:72: 14:a8:71:7f:7e:84:29:33:7b:de:37:d2:ac:84:83: d1:ea:2b:0f:9b:69:49:81:b8:b4:54:69:aa:a7:4e: 5c:e5:7b:ca:d5:10:4b:fb:e0:4d:1d:87:18:24:b8: 37:db:62:3e:01:13:ac:1a:c6:bc:bb:5e:34:73:25: 8d:04:ba:e4:a6:6d:fb:c0:34:c5:cb:f4:43:0e:ef: ab:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:6B:D8:8A:A1:EA:DB:EB:B1:45:13:7F:4F:1C:6D:D9:8A:B4:9F:B0 X509v3 Authority Key Identifier: keyid:97:B0:3D:A2:FB:45:F5:6E:3F:58:21:63:DF:7B:D9:50:69:39:99:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9126A3C/7390B34AC6A011EF928B7960C4F9AE02/l7A9ovtF9W4_WCFj33vZUGk5mUQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/l7A9ovtF9W4_WCFj33vZUGk5mUQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9126A3C/7390B34AC6A011EF928B7960C4F9AE02/l7A9ovtF9W4_WCFj33vZUGk5mUQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 55:6e:5c:86:06:56:58:b5:82:71:63:be:18:59:75:e9:67:9f: cb:ed:e2:aa:5c:f5:77:93:4c:71:ad:ea:ae:17:3b:30:ea:ee: 91:d1:18:cf:cc:b4:99:a9:26:28:70:3d:71:86:3e:da:a1:82: 05:a3:c9:d7:e0:80:ad:39:4a:cd:ec:1f:37:3f:a4:34:72:8c: 26:eb:51:d0:64:9c:c5:f4:6e:8f:0f:47:18:52:24:38:61:9c: 58:57:b5:35:52:0f:2e:24:af:e4:a2:9d:c4:65:ae:be:c3:16: 0a:7c:a6:e7:3d:bc:a2:c3:73:75:18:d4:9e:d6:0a:5a:b2:6d: 70:86:cd:16:d0:79:20:03:2e:dd:7f:2a:ae:b5:be:72:76:7c: df:91:06:f1:14:94:e2:5f:6a:63:4c:2e:b1:86:2c:7d:94:7c: 03:2e:87:f3:8e:33:ec:d2:76:99:98:e1:ec:97:75:72:70:92: db:75:4a:2e:4c:1d:bb:23:4c:1d:38:b6:50:42:1d:4b:57:e5: 61:9f:ab:1d:1c:23:73:e3:04:c6:d9:11:d7:65:9f:ec:f4:6f: a6:2f:76:b3:40:01:ec:a7:be:f9:35:e5:d8:95:d7:21:bf:4b: a3:f6:18:38:6c:bd:0e:35:4a:a2:ca:d4:91:07:d8:4f:ac:8b: a0:73:37:14 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBfzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEy NkEzQzExMC8GA1UEBRMoOTdCMDNEQTJGQjQ1RjU2RTNGNTgyMTYzREY3QkQ5NTA2 OTM5OTk0NDAeFw0yNTA4MjMwNjU4MjNaFw0yNTA4MzAwNjU4MjNaMBgxFjAUBgNV BAMTDTY4YTk2NjhmLWM2OTAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCyztB3s9L4KP43Yyzbtsm8bdnN2NH+kMkFYmqcPpxP37QOPuepv7OeRjoI5wsi z1mepRiOoDvlFNE7nvSLLuTrnsrnvQ6AqDTY6Mer928tndisz0XB1RG+yNPoMBbV NFIx+tlGrvXRgNeU2UyU7ON8Y+HrkGSUQywn9Tbj4137wTpE1/qBJXbeEPAVPX1y 1YtObu9GawjWZmWj6TJdCdByh0zebbqZEWxE/onGYHnHOk+RchSocX9+hCkze943 0qyEg9HqKw+baUmBuLRUaaqnTlzle8rVEEv74E0dhxgkuDfbYj4BE6waxry7XjRz JY0EuuSmbfvANMXL9EMO76tpAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQULWvYiqHq 2+uxRRN/Txxt2Yq0n7AwHwYDVR0jBBgwFoAUl7A9ovtF9W4/WCFj33vZUGk5mUQw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTI2QTNDLzczOTBCMzRBQzZB MDExRUY5MjhCNzk2MEM0RjlBRTAyL2w3QTlvdnRGOVc0X1dDRmozM3ZaVUdrNW1V US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvbDdBOW92dEY5VzRfV0NGajMzdlpVR2s1bVVRLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTI2 QTNDLzczOTBCMzRBQzZBMDExRUY5MjhCNzk2MEM0RjlBRTAyL2w3QTlvdnRGOVc0 X1dDRmozM3ZaVUdrNW1VUS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAFVuXIYGVli1gnFjvhhZdelnn8vt4qpc9XeTTHGt6q4XOzDq7pHRGM/M tJmpJihwPXGGPtqhggWjydfggK05Ss3sHzc/pDRyjCbrUdBknMX0bo8PRxhSJDhh nFhXtTVSDy4kr+SincRlrr7DFgp8puc9vKLDc3UY1J7WClqybXCGzRbQeSADLt1/ Kq61vnJ2fN+RBvEUlOJfamNMLrGGLH2UfAMuh/OOM+zSdpmY4eyXdXJwktt1Si5M HbsjTB04tlBCHUtX5WGfqx0cI3PjBMbZEddln+z0b6YvdrNAAeynvvk15diV1yG/ S6P2GDhsvQ41SqLK1JEH2E+si6BzNxQ= -----END CERTIFICATE-----Generated at Sat Aug 23 12:43:59 2025 by rpki-client