$ rpki-client -vvf rpki.apnic.net/member_repository/A9126A3C/7BFB4CACC6A011EF928B7960C4F9AE02/7oGaSbjIqEQT7o_oMm7xN_UYXGY.mft File: 7oGaSbjIqEQT7o_oMm7xN_UYXGY.mft (raw, json) Hash identifier: 4jix7FLr5WRhCD1MbA428H2xaE4EOK7Y+XGxI4n5SMg= Subject key identifier: 9B:B2:F9:20:A7:B9:C7:43:DE:BA:54:40:83:7E:BD:23:C1:23:05:F2 Authority key identifier: EE:81:9A:49:B8:C8:A8:44:13:EE:8F:E8:32:6E:F1:37:F5:18:5C:66 Certificate issuer: /CN=A9126A3C/serialNumber=EE819A49B8C8A84413EE8FE8326EF137F5185C66 Certificate serial: 7F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7oGaSbjIqEQT7o_oMm7xN_UYXGY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9126A3C/7BFB4CACC6A011EF928B7960C4F9AE02/7oGaSbjIqEQT7o_oMm7xN_UYXGY.mft Manifest number: 7C Signing time: Sat 23 Aug 2025 06:58:21 +0000 Manifest this update: Sat 23 Aug 2025 06:58:21 +0000 Manifest next update: Sat 30 Aug 2025 06:58:21 +0000 Files and hashes: 1: 7oGaSbjIqEQT7o_oMm7xN_UYXGY.crl (hash: dGOv2Ydas3OHOwba9lmI+vgFEDKMZ9UWcsL4QbeNq4A=) 2: 16E1C8ECC6DB11EFBDDB8A0AC4F9AE02.roa (hash: NFkplWmsMA3dKF672WmukIl9RpnNjHUYN1V/j7l+GN0=) 3: E11BD76CC6D911EF8CC3C849C4F9AE02.roa (hash: FPrJ8rYYz3zXm+ulxONvcKZWR1V8127XQSJ/4rwqktA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9126A3C/7BFB4CACC6A011EF928B7960C4F9AE02/7oGaSbjIqEQT7o_oMm7xN_UYXGY.crl rsync://rpki.apnic.net/member_repository/A9126A3C/7BFB4CACC6A011EF928B7960C4F9AE02/7oGaSbjIqEQT7o_oMm7xN_UYXGY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7oGaSbjIqEQT7o_oMm7xN_UYXGY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 06:58:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 127 (0x7f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9126A3C, serialNumber=EE819A49B8C8A84413EE8FE8326EF137F5185C66 Validity Not Before: Aug 23 06:58:21 2025 GMT Not After : Aug 30 06:58:21 2025 GMT Subject: CN=68a9668d-a90c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:c6:5e:04:08:cf:ab:00:bd:4b:f4:89:32:a9: d2:cc:61:e7:90:7f:ae:7c:0d:b8:2c:49:b2:8e:7b: ce:6f:4b:cf:a3:ca:74:22:94:2e:b7:f3:26:85:f9: 78:e6:a3:46:ce:07:f6:e6:f0:51:bd:95:70:48:e0: e1:49:a3:35:44:09:97:69:c0:b2:16:91:7c:03:40: a4:0c:e5:e8:3d:aa:22:7c:55:e9:7a:f7:c1:22:f7: d2:56:e3:ec:11:37:a8:03:2a:60:05:11:6c:87:be: b5:b8:6f:b4:08:fc:d0:c2:d7:18:24:04:b4:29:da: 02:60:af:67:42:f5:97:35:fd:16:ca:75:5b:4a:43: ee:ae:d7:0e:c5:dd:1b:b8:8a:ff:d8:e4:ee:d7:8e: 70:50:35:dc:06:6d:74:48:ef:fe:64:42:33:1a:09: 64:a1:09:24:37:31:f8:40:85:36:94:e3:aa:a4:e4: 2b:aa:ce:31:de:27:4f:23:a7:a4:31:d8:cb:f3:99: 3d:8b:f8:c4:1c:1a:d3:db:6b:e7:58:fa:85:9a:59: 38:d5:76:0a:ed:a9:90:af:78:45:4c:0b:36:1c:02: 91:63:34:e3:16:bc:4a:e4:65:2f:9f:2a:78:45:0e: 48:78:66:8d:4f:ac:38:bf:cc:31:43:2b:c4:89:c4: ad:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:B2:F9:20:A7:B9:C7:43:DE:BA:54:40:83:7E:BD:23:C1:23:05:F2 X509v3 Authority Key Identifier: keyid:EE:81:9A:49:B8:C8:A8:44:13:EE:8F:E8:32:6E:F1:37:F5:18:5C:66 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9126A3C/7BFB4CACC6A011EF928B7960C4F9AE02/7oGaSbjIqEQT7o_oMm7xN_UYXGY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7oGaSbjIqEQT7o_oMm7xN_UYXGY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9126A3C/7BFB4CACC6A011EF928B7960C4F9AE02/7oGaSbjIqEQT7o_oMm7xN_UYXGY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 15:22:14:a9:e0:e3:ae:94:30:90:47:b7:36:f4:d8:ee:53:0e: 7b:06:f7:7a:8d:8c:d9:02:65:47:0e:9e:24:ae:dc:81:6b:bb: eb:83:16:19:81:9e:7f:a8:ec:58:01:d3:34:c2:91:cb:6f:c4: 0f:72:44:ab:e0:16:ac:35:02:76:6e:f7:fb:53:6b:27:9b:72: 19:ee:0e:43:12:e1:d9:10:b1:22:24:72:e3:ce:8d:6d:0b:8f: 0e:65:54:75:ff:0e:c1:2d:3c:ac:cd:f5:51:d7:0b:5a:c2:67: 6d:ee:b8:f9:7b:d3:ff:33:05:37:21:07:e4:7d:3e:5f:07:69: dc:c3:01:dd:52:a3:4b:8a:b1:cf:08:c8:1e:1a:7d:2e:0f:84: a9:37:57:de:22:08:77:b0:85:b8:0c:0a:e7:0f:7c:71:f5:85: 5e:ad:4b:ff:c8:43:42:68:cc:5d:47:95:9f:02:dd:f1:17:f7: ad:88:90:1a:32:23:10:64:41:ea:40:48:bf:3d:9a:6f:4f:e7: 84:94:92:fe:25:f7:83:5c:c4:ed:f5:bd:4c:8d:31:e6:9d:73: e7:9a:89:97:e7:b8:53:96:44:ac:0e:5d:11:02:c1:a1:b2:31: 3e:e2:eb:4d:97:c1:24:01:d9:85:0f:7d:4c:5f:44:9e:3b:81: 9a:a1:60:55 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBfzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEy NkEzQzExMC8GA1UEBRMoRUU4MTlBNDlCOEM4QTg0NDEzRUU4RkU4MzI2RUYxMzdG NTE4NUM2NjAeFw0yNTA4MjMwNjU4MjFaFw0yNTA4MzAwNjU4MjFaMBgxFjAUBgNV BAMTDTY4YTk2NjhkLWE5MGMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDIxl4ECM+rAL1L9IkyqdLMYeeQf658DbgsSbKOe85vS8+jynQilC638yaF+Xjm o0bOB/bm8FG9lXBI4OFJozVECZdpwLIWkXwDQKQM5eg9qiJ8Vel698Ei99JW4+wR N6gDKmAFEWyHvrW4b7QI/NDC1xgkBLQp2gJgr2dC9Zc1/RbKdVtKQ+6u1w7F3Ru4 iv/Y5O7XjnBQNdwGbXRI7/5kQjMaCWShCSQ3MfhAhTaU46qk5CuqzjHeJ08jp6Qx 2MvzmT2L+MQcGtPba+dY+oWaWTjVdgrtqZCveEVMCzYcApFjNOMWvErkZS+fKnhF Dkh4Zo1PrDi/zDFDK8SJxK09AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUm7L5IKe5 x0PeulRAg369I8EjBfIwHwYDVR0jBBgwFoAU7oGaSbjIqEQT7o/oMm7xN/UYXGYw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTI2QTNDLzdCRkI0Q0FDQzZB MDExRUY5MjhCNzk2MEM0RjlBRTAyLzdvR2FTYmpJcUVRVDdvX29NbTd4Tl9VWVhH WS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvN29HYVNiaklxRVFUN29fb01tN3hOX1VZWEdZLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTI2 QTNDLzdCRkI0Q0FDQzZBMDExRUY5MjhCNzk2MEM0RjlBRTAyLzdvR2FTYmpJcUVR VDdvX29NbTd4Tl9VWVhHWS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBABUiFKng466UMJBHtzb02O5TDnsG93qNjNkCZUcOniSu3IFru+uDFhmB nn+o7FgB0zTCkctvxA9yRKvgFqw1AnZu9/tTayebchnuDkMS4dkQsSIkcuPOjW0L jw5lVHX/DsEtPKzN9VHXC1rCZ23uuPl70/8zBTchB+R9Pl8HadzDAd1So0uKsc8I yB4afS4PhKk3V94iCHewhbgMCucPfHH1hV6tS//IQ0JozF1HlZ8C3fEX962IkBoy IxBkQepASL89mm9P54SUkv4l94NcxO31vUyNMeadc+eaiZfnuFOWRKwOXRECwaGy MT7i602XwSQB2YUPfUxfRJ47gZqhYFU= -----END CERTIFICATE-----Generated at Sat Aug 23 19:26:48 2025 by rpki-client