$ rpki-client -vvf rpki.apnic.net/member_repository/A9127FC2/5E30BF70BBA611ECBAF43156C4F9AE02/c7ohvjbd39WGkBFtbux73H7--yg.mft File: c7ohvjbd39WGkBFtbux73H7--yg.mft (raw, json) Hash identifier: NgcfsIa1b+qIGXPBgHUa98Dt3wI5CB8UoKQXwRZjXt4= Subject key identifier: 8F:05:67:CE:A6:0D:20:2E:A2:B5:03:D3:F0:38:E3:F9:3B:0D:82:3D Authority key identifier: 73:BA:21:BE:36:DD:DF:D5:86:90:11:6D:6E:EC:7B:DC:7E:FE:FB:28 Certificate issuer: /CN=A9127FC2/serialNumber=73BA21BE36DDDFD58690116D6EEC7BDC7EFEFB28 Certificate serial: 03EA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c7ohvjbd39WGkBFtbux73H7--yg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9127FC2/5E30BF70BBA611ECBAF43156C4F9AE02/c7ohvjbd39WGkBFtbux73H7--yg.mft Manifest number: 03C2 Signing time: Sun 19 Oct 2025 02:47:09 +0000 Manifest this update: Sun 19 Oct 2025 02:47:08 +0000 Manifest next update: Sun 26 Oct 2025 02:47:08 +0000 Files and hashes: 1: c7ohvjbd39WGkBFtbux73H7--yg.crl (hash: f3oqALkFAwaV5AD4PnenXN8Kj/DXs3hIi7zyaUeEhiI=) 2: 3143DEC26C8811EEBAB7F227C4F9AE02.roa (hash: DiuzbA0Eyu2SFjBtadVHxxhq9EQIpll9WL5oTCeuzso=) 3: AA730ACCBCFA11EDAD328D3AC4F9AE02.roa (hash: JIgqJZp1UxmLPN/QpABfqnpOQUWAjrpqyosKFp6OS4Q=) 4: 63F359F0620711EE8BBCFF68C4F9AE02.roa (hash: Keth2970vjYbkSSDZ7cyyc004SjVLXN/KW/3yleZzSU=) 5: 1ABD64C4FC4B11EC9E374483C4F9AE02.roa (hash: sxadIBziqD0gGHzlLgMeF3y6MatZTVAVquFeXL0wHHA=) 6: AB95EEC4BCFA11EDAD328D3AC4F9AE02.roa (hash: yTZcvgK0CeflFtKCV7bhb3NpxPPVFQseYnOGqpYevgk=) 7: 9B39DA4A17B611F0949B3513C4F9AE02.roa (hash: JIzx72Iu5kXzy1zuPq6JcTLGHOjrjN0dOL1PQPVedEI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9127FC2/5E30BF70BBA611ECBAF43156C4F9AE02/c7ohvjbd39WGkBFtbux73H7--yg.crl rsync://rpki.apnic.net/member_repository/A9127FC2/5E30BF70BBA611ECBAF43156C4F9AE02/c7ohvjbd39WGkBFtbux73H7--yg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c7ohvjbd39WGkBFtbux73H7--yg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 02:47:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1002 (0x3ea) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9127FC2, serialNumber=73BA21BE36DDDFD58690116D6EEC7BDC7EFEFB28 Validity Not Before: Oct 19 02:47:08 2025 GMT Not After : Oct 26 02:47:08 2025 GMT Subject: CN=68f4512d-073e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:dd:ac:24:c2:09:be:ec:96:6f:c4:e0:3b:f6: 8b:41:cf:e7:76:ed:9f:40:20:92:1e:39:74:78:cd: 40:23:9a:eb:eb:86:2d:cf:e8:8c:c7:62:f9:5b:1a: 0a:88:69:a0:b5:c0:d5:97:27:8a:74:1a:57:2a:2f: 0d:95:1f:84:2f:19:f1:c8:cd:ab:5f:ea:4a:16:be: 0d:0e:55:21:1b:90:e7:3c:40:8e:4a:f3:89:38:67: 89:04:0f:46:e4:cb:f0:ee:b8:e1:38:bd:67:e7:d2: 14:84:3f:41:36:28:94:0c:ae:fd:a5:ad:67:51:8b: ea:83:6e:bb:c3:40:07:a5:5f:a8:77:99:d9:8c:5e: ca:1b:80:2b:34:eb:f1:cd:34:89:e0:5d:49:a2:9e: 5d:f9:24:d7:62:6c:cf:35:d0:a6:a5:f2:0c:c5:20: ab:27:ec:e7:fd:21:dc:b8:63:be:1f:3b:0b:e5:5a: 3b:98:60:fb:6a:d6:61:ed:b0:07:2c:90:61:1e:a1: 86:d8:50:35:63:a2:89:53:a9:2b:b1:e5:c7:f3:df: 1a:9b:98:fd:3c:44:39:1d:4e:33:9e:94:47:33:fe: 68:26:8b:64:ff:38:e6:a8:f6:df:97:a7:df:ba:1c: a9:7e:48:f8:fc:6b:37:8f:9b:28:f6:08:f1:25:9b: 0b:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:05:67:CE:A6:0D:20:2E:A2:B5:03:D3:F0:38:E3:F9:3B:0D:82:3D X509v3 Authority Key Identifier: keyid:73:BA:21:BE:36:DD:DF:D5:86:90:11:6D:6E:EC:7B:DC:7E:FE:FB:28 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9127FC2/5E30BF70BBA611ECBAF43156C4F9AE02/c7ohvjbd39WGkBFtbux73H7--yg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c7ohvjbd39WGkBFtbux73H7--yg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9127FC2/5E30BF70BBA611ECBAF43156C4F9AE02/c7ohvjbd39WGkBFtbux73H7--yg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 07:64:70:a5:4f:f5:3f:bf:54:d5:86:a4:e1:e2:6f:39:a9:51: ac:0b:25:7f:42:3c:b1:92:7d:2c:a9:f9:93:27:34:22:a6:f5: 8e:45:7a:5a:86:e8:3e:c5:b2:91:e3:32:46:58:ef:a3:df:0f: c3:67:84:1c:50:ec:34:26:2e:dc:56:81:31:9d:4c:6a:28:59: ee:68:85:9c:4d:56:2e:eb:71:6d:9c:53:ff:11:6c:8b:29:85: c6:d8:e6:aa:da:a4:f4:18:89:76:c7:78:c4:18:7d:dc:10:80: d1:ad:b8:3f:28:1e:e7:96:26:ef:11:9b:25:50:cd:6a:8e:2e: 1f:2d:4e:28:2d:6d:58:87:77:e4:76:1f:51:af:ef:60:29:40: b9:c4:e6:42:d4:21:a2:0a:29:ae:2c:66:a2:c7:cc:80:69:63: 09:bb:f8:60:08:0e:25:c7:4a:35:a5:cf:0a:ae:8a:26:27:63: 7c:25:a1:be:47:94:f7:0c:1d:fb:14:f3:e6:52:2e:26:57:3b: 60:62:9c:f2:eb:0d:61:dc:62:59:80:43:da:cf:72:4a:b1:72: 4c:09:ca:00:10:a0:83:3f:b7:a7:35:b3:bb:0c:32:d6:dc:ac: 81:be:86:40:6c:1c:ab:f0:d5:b4:46:88:ac:70:47:02:22:5f: 59:29:16:a2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA+owDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjdGQzIxMTAvBgNVBAUTKDczQkEyMUJFMzZERERGRDU4NjkwMTE2RDZFRUM3QkRD N0VGRUZCMjgwHhcNMjUxMDE5MDI0NzA4WhcNMjUxMDI2MDI0NzA4WjAYMRYwFAYD VQQDEw02OGY0NTEyZC0wNzNlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAut2sJMIJvuyWb8TgO/aLQc/ndu2fQCCSHjl0eM1AI5rr64Ytz+iMx2L5WxoK iGmgtcDVlyeKdBpXKi8NlR+ELxnxyM2rX+pKFr4NDlUhG5DnPECOSvOJOGeJBA9G 5Mvw7rjhOL1n59IUhD9BNiiUDK79pa1nUYvqg267w0AHpV+od5nZjF7KG4ArNOvx zTSJ4F1Jop5d+STXYmzPNdCmpfIMxSCrJ+zn/SHcuGO+HzsL5Vo7mGD7atZh7bAH LJBhHqGG2FA1Y6KJU6krseXH898am5j9PEQ5HU4znpRHM/5oJotk/zjmqPbfl6ff uhypfkj4/Gs3j5so9gjxJZsLDwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFI8FZ86m DSAuorUD0/A44/k7DYI9MB8GA1UdIwQYMBaAFHO6Ib423d/VhpARbW7se9x+/vso MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyN0ZDMi81RTMwQkY3MEJC QTYxMUVDQkFGNDMxNTZDNEY5QUUwMi9jN29odmpiZDM5V0drQkZ0YnV4NzNINy0t eWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2M3b2h2amJkMzlXR2tCRnRidXg3M0g3LS15Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy N0ZDMi81RTMwQkY3MEJCQTYxMUVDQkFGNDMxNTZDNEY5QUUwMi9jN29odmpiZDM5 V0drQkZ0YnV4NzNINy0teWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAHZHClT/U/v1TVhqTh4m85qVGsCyV/Qjyxkn0sqfmTJzQipvWORXpa hug+xbKR4zJGWO+j3w/DZ4QcUOw0Ji7cVoExnUxqKFnuaIWcTVYu63FtnFP/EWyL KYXG2Oaq2qT0GIl2x3jEGH3cEIDRrbg/KB7nlibvEZslUM1qji4fLU4oLW1Yh3fk dh9Rr+9gKUC5xOZC1CGiCimuLGaix8yAaWMJu/hgCA4lx0o1pc8KroomJ2N8JaG+ R5T3DB37FPPmUi4mVztgYpzy6w1h3GJZgEPaz3JKsXJMCcoAEKCDP7enNbO7DDLW 3KyBvoZAbByr8NW0RoiscEcCIl9ZKRai -----END CERTIFICATE-----Generated at Mon Oct 20 04:50:04 2025 by rpki-client