$ rpki-client -vvf rpki.apnic.net/member_repository/A9127FC2/5E30BF70BBA611ECBAF43156C4F9AE02/c7ohvjbd39WGkBFtbux73H7--yg.mft File: c7ohvjbd39WGkBFtbux73H7--yg.mft (raw, json) Hash identifier: zoPWtNNaWSNsiP2mz7UAKWMcM3goNsNS73E4S0FgkSo= Subject key identifier: DA:56:39:26:F6:C8:45:2E:90:A0:30:DE:31:BE:02:AE:02:36:E6:19 Authority key identifier: 73:BA:21:BE:36:DD:DF:D5:86:90:11:6D:6E:EC:7B:DC:7E:FE:FB:28 Certificate issuer: /CN=A9127FC2/serialNumber=73BA21BE36DDDFD58690116D6EEC7BDC7EFEFB28 Certificate serial: 03B3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c7ohvjbd39WGkBFtbux73H7--yg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9127FC2/5E30BF70BBA611ECBAF43156C4F9AE02/c7ohvjbd39WGkBFtbux73H7--yg.mft Manifest number: 038B Signing time: Thu 03 Jul 2025 01:19:09 +0000 Manifest this update: Thu 03 Jul 2025 01:19:08 +0000 Manifest next update: Thu 10 Jul 2025 01:19:08 +0000 Files and hashes: 1: c7ohvjbd39WGkBFtbux73H7--yg.crl (hash: JT03RxlLPVzosz260cvaC0ZpYWDxkxiKSu+M9YblosA=) 2: 3143DEC26C8811EEBAB7F227C4F9AE02.roa (hash: DiuzbA0Eyu2SFjBtadVHxxhq9EQIpll9WL5oTCeuzso=) 3: AA730ACCBCFA11EDAD328D3AC4F9AE02.roa (hash: JIgqJZp1UxmLPN/QpABfqnpOQUWAjrpqyosKFp6OS4Q=) 4: 63F359F0620711EE8BBCFF68C4F9AE02.roa (hash: Keth2970vjYbkSSDZ7cyyc004SjVLXN/KW/3yleZzSU=) 5: 1ABD64C4FC4B11EC9E374483C4F9AE02.roa (hash: sxadIBziqD0gGHzlLgMeF3y6MatZTVAVquFeXL0wHHA=) 6: AB95EEC4BCFA11EDAD328D3AC4F9AE02.roa (hash: yTZcvgK0CeflFtKCV7bhb3NpxPPVFQseYnOGqpYevgk=) 7: 9B39DA4A17B611F0949B3513C4F9AE02.roa (hash: JIzx72Iu5kXzy1zuPq6JcTLGHOjrjN0dOL1PQPVedEI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9127FC2/5E30BF70BBA611ECBAF43156C4F9AE02/c7ohvjbd39WGkBFtbux73H7--yg.crl rsync://rpki.apnic.net/member_repository/A9127FC2/5E30BF70BBA611ECBAF43156C4F9AE02/c7ohvjbd39WGkBFtbux73H7--yg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c7ohvjbd39WGkBFtbux73H7--yg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 01:19:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 947 (0x3b3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9127FC2, serialNumber=73BA21BE36DDDFD58690116D6EEC7BDC7EFEFB28 Validity Not Before: Jul 3 01:19:08 2025 GMT Not After : Jul 10 01:19:08 2025 GMT Subject: CN=6865da8c-7d8d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:51:2b:89:fb:36:b6:50:28:03:c4:a6:eb:f2: 8d:e7:d4:15:a7:b5:e1:d1:7c:d1:c7:09:7a:4d:4a: 4e:49:17:5a:8e:f3:f9:8c:57:73:40:16:63:49:21: 0f:2e:e2:c6:a6:45:85:22:22:05:51:de:fd:5c:75: 63:6f:ba:e8:da:a8:12:7c:a5:4e:39:60:c0:72:64: 3c:dd:b1:a9:de:95:9b:d1:97:f9:8b:d0:dd:79:5c: c2:62:be:7f:46:bf:30:14:c2:66:50:0c:a9:04:05: 70:0c:97:aa:ef:f7:3a:f4:38:57:f8:df:2a:59:e5: 4e:de:bf:ac:54:2d:52:35:77:f6:d2:1e:00:d8:71: 91:9c:cb:c9:04:2d:fc:6c:e4:be:09:ad:40:5e:c8: 6a:3e:93:9c:c4:43:be:59:e3:1f:de:90:fc:87:43: 87:c4:77:e2:c1:14:e6:ba:f2:c7:af:7c:c8:c9:53: 99:96:72:e1:27:ad:4b:19:ca:89:8d:bf:73:bf:45: 98:4a:c9:b4:f3:b8:3e:20:4b:df:c0:51:d1:f0:87: 9f:a7:66:3f:c1:a3:cb:4c:9f:b1:bd:4a:c7:27:4a: 3d:cc:7b:34:3c:46:9d:1a:aa:8f:37:1b:5b:8b:33: 0b:62:fc:71:38:0b:b9:43:28:2b:b9:83:c1:6e:71: 58:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:56:39:26:F6:C8:45:2E:90:A0:30:DE:31:BE:02:AE:02:36:E6:19 X509v3 Authority Key Identifier: keyid:73:BA:21:BE:36:DD:DF:D5:86:90:11:6D:6E:EC:7B:DC:7E:FE:FB:28 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9127FC2/5E30BF70BBA611ECBAF43156C4F9AE02/c7ohvjbd39WGkBFtbux73H7--yg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c7ohvjbd39WGkBFtbux73H7--yg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9127FC2/5E30BF70BBA611ECBAF43156C4F9AE02/c7ohvjbd39WGkBFtbux73H7--yg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 56:5d:b9:88:4f:fb:8c:60:8d:f2:68:ae:a5:5e:14:01:01:bc: 89:b5:f0:40:d2:a6:f9:e9:d3:78:e9:4c:36:96:4a:85:f7:20: ad:9b:53:d5:43:f6:01:4b:73:54:45:2b:77:c9:74:9f:bb:54: e4:9a:2d:24:66:a8:e2:43:8f:b1:07:70:56:03:bc:06:e7:03: 2d:04:72:62:d4:20:3e:a4:e6:1a:10:1a:16:14:2d:d9:d1:93: 6a:2f:48:6f:78:ef:da:80:c1:ba:6e:26:b0:b5:27:e4:41:8a: 80:82:c6:c4:c3:2e:7e:70:9d:48:c7:5e:98:d8:bc:29:30:aa: 4b:da:17:a3:b5:10:80:fa:56:d9:bf:2f:b7:1c:79:41:2c:5f: dd:d3:31:ae:5d:0a:f9:ff:e8:d7:95:8f:e8:df:77:b7:97:ec: 05:c2:0a:a5:7c:c7:ad:44:f5:1a:26:bb:ba:0b:ec:a5:f0:b9: ca:37:aa:cf:3d:40:70:aa:f6:6f:96:37:e7:da:05:8b:06:5d: 2a:ee:ec:68:5a:8e:bc:5f:b3:72:21:6e:2a:84:d7:2c:a3:18: 0d:9f:2d:c8:f4:f5:a9:0e:c4:84:e2:58:49:9a:75:f5:7c:f6: dc:5e:3e:4e:53:f4:f9:cb:0a:9c:50:70:79:a1:a0:19:eb:da: ab:2c:bb:dd -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA7MwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjdGQzIxMTAvBgNVBAUTKDczQkEyMUJFMzZERERGRDU4NjkwMTE2RDZFRUM3QkRD N0VGRUZCMjgwHhcNMjUwNzAzMDExOTA4WhcNMjUwNzEwMDExOTA4WjAYMRYwFAYD VQQDEw02ODY1ZGE4Yy03ZDhkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3FErifs2tlAoA8Sm6/KN59QVp7Xh0XzRxwl6TUpOSRdajvP5jFdzQBZjSSEP LuLGpkWFIiIFUd79XHVjb7ro2qgSfKVOOWDAcmQ83bGp3pWb0Zf5i9DdeVzCYr5/ Rr8wFMJmUAypBAVwDJeq7/c69DhX+N8qWeVO3r+sVC1SNXf20h4A2HGRnMvJBC38 bOS+Ca1AXshqPpOcxEO+WeMf3pD8h0OHxHfiwRTmuvLHr3zIyVOZlnLhJ61LGcqJ jb9zv0WYSsm087g+IEvfwFHR8Iefp2Y/waPLTJ+xvUrHJ0o9zHs0PEadGqqPNxtb izMLYvxxOAu5QygruYPBbnFYmwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNpWOSb2 yEUukKAw3jG+Aq4CNuYZMB8GA1UdIwQYMBaAFHO6Ib423d/VhpARbW7se9x+/vso MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyN0ZDMi81RTMwQkY3MEJC QTYxMUVDQkFGNDMxNTZDNEY5QUUwMi9jN29odmpiZDM5V0drQkZ0YnV4NzNINy0t eWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2M3b2h2amJkMzlXR2tCRnRidXg3M0g3LS15Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy N0ZDMi81RTMwQkY3MEJCQTYxMUVDQkFGNDMxNTZDNEY5QUUwMi9jN29odmpiZDM5 V0drQkZ0YnV4NzNINy0teWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBWXbmIT/uMYI3yaK6lXhQBAbyJtfBA0qb56dN46Uw2lkqF9yCtm1PV Q/YBS3NURSt3yXSfu1Tkmi0kZqjiQ4+xB3BWA7wG5wMtBHJi1CA+pOYaEBoWFC3Z 0ZNqL0hveO/agMG6biawtSfkQYqAgsbEwy5+cJ1Ix16Y2LwpMKpL2hejtRCA+lbZ vy+3HHlBLF/d0zGuXQr5/+jXlY/o33e3l+wFwgqlfMetRPUaJru6C+yl8LnKN6rP PUBwqvZvljfn2gWLBl0q7uxoWo68X7NyIW4qhNcsoxgNny3I9PWpDsSE4lhJmnX1 fPbcXj5OU/T5ywqcUHB5oaAZ69qrLLvd -----END CERTIFICATE-----Generated at Fri Jul 4 07:03:39 2025 by rpki-client