$ rpki-client -vvf rpki.apnic.net/member_repository/A9127FC2/5E30BF70BBA611ECBAF43156C4F9AE02/c7ohvjbd39WGkBFtbux73H7--yg.mft File: c7ohvjbd39WGkBFtbux73H7--yg.mft (raw, json) Hash identifier: 1RfWIOjTWSCz93byp3cIO/TVq9CZXDObYSI87Rk6CWw= Subject key identifier: AE:13:B2:B2:FD:AD:E6:D0:38:14:26:2C:B7:50:01:3D:80:A3:0C:D5 Authority key identifier: 73:BA:21:BE:36:DD:DF:D5:86:90:11:6D:6E:EC:7B:DC:7E:FE:FB:28 Certificate issuer: /CN=A9127FC2/serialNumber=73BA21BE36DDDFD58690116D6EEC7BDC7EFEFB28 Certificate serial: 03CD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c7ohvjbd39WGkBFtbux73H7--yg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9127FC2/5E30BF70BBA611ECBAF43156C4F9AE02/c7ohvjbd39WGkBFtbux73H7--yg.mft Manifest number: 03A5 Signing time: Sat 23 Aug 2025 01:07:34 +0000 Manifest this update: Sat 23 Aug 2025 01:07:34 +0000 Manifest next update: Sat 30 Aug 2025 01:07:34 +0000 Files and hashes: 1: c7ohvjbd39WGkBFtbux73H7--yg.crl (hash: NbL884TFnGUMUVqW8f4aaJXH363E44SY53yyOzLlfrs=) 2: 3143DEC26C8811EEBAB7F227C4F9AE02.roa (hash: DiuzbA0Eyu2SFjBtadVHxxhq9EQIpll9WL5oTCeuzso=) 3: AA730ACCBCFA11EDAD328D3AC4F9AE02.roa (hash: JIgqJZp1UxmLPN/QpABfqnpOQUWAjrpqyosKFp6OS4Q=) 4: 63F359F0620711EE8BBCFF68C4F9AE02.roa (hash: Keth2970vjYbkSSDZ7cyyc004SjVLXN/KW/3yleZzSU=) 5: 1ABD64C4FC4B11EC9E374483C4F9AE02.roa (hash: sxadIBziqD0gGHzlLgMeF3y6MatZTVAVquFeXL0wHHA=) 6: AB95EEC4BCFA11EDAD328D3AC4F9AE02.roa (hash: yTZcvgK0CeflFtKCV7bhb3NpxPPVFQseYnOGqpYevgk=) 7: 9B39DA4A17B611F0949B3513C4F9AE02.roa (hash: JIzx72Iu5kXzy1zuPq6JcTLGHOjrjN0dOL1PQPVedEI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9127FC2/5E30BF70BBA611ECBAF43156C4F9AE02/c7ohvjbd39WGkBFtbux73H7--yg.crl rsync://rpki.apnic.net/member_repository/A9127FC2/5E30BF70BBA611ECBAF43156C4F9AE02/c7ohvjbd39WGkBFtbux73H7--yg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c7ohvjbd39WGkBFtbux73H7--yg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 01:07:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 973 (0x3cd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9127FC2, serialNumber=73BA21BE36DDDFD58690116D6EEC7BDC7EFEFB28 Validity Not Before: Aug 23 01:07:34 2025 GMT Not After : Aug 30 01:07:34 2025 GMT Subject: CN=68a91456-4094 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:07:a2:c2:13:4d:10:83:db:25:0c:1b:79:18: 2e:6f:86:7c:fc:6f:18:03:f3:a8:59:bc:63:22:fd: 54:af:86:86:1a:e5:b5:72:0d:ff:d6:c2:c0:48:d3: 8d:32:32:17:f5:44:13:f5:8a:72:02:e8:8e:6a:35: bf:70:32:8b:e7:99:32:b9:7b:5a:6a:16:a1:2c:77: a2:68:54:7d:d8:99:e7:07:04:48:23:2c:6d:f8:e7: 23:e3:69:0d:e5:14:3a:ca:a3:ef:de:32:00:a1:17: 3d:f6:f4:a9:3d:24:1c:cd:67:d4:d4:c9:fb:4a:65: 28:5e:b0:42:e2:c8:e2:54:b8:34:24:a7:9c:95:5d: 15:14:f8:6e:c5:ab:d0:51:c7:d9:61:63:60:58:65: e1:da:92:bd:a6:e6:88:87:60:a9:3e:81:5a:33:0e: 13:27:8c:37:07:a3:34:1f:da:fe:d0:63:8c:a0:4d: 2c:61:33:0c:0b:f5:ba:af:f3:e0:da:33:14:52:2e: f1:f1:96:61:11:47:24:b5:83:b2:14:68:e5:d0:31: 9d:fe:1e:73:91:4d:91:36:bc:a5:d7:ea:e0:da:94: a0:e1:69:76:c9:f3:23:fe:24:02:0b:10:a2:7f:19: 1f:4d:e3:da:18:48:e0:1c:13:b6:c6:19:c6:92:8a: a5:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:13:B2:B2:FD:AD:E6:D0:38:14:26:2C:B7:50:01:3D:80:A3:0C:D5 X509v3 Authority Key Identifier: keyid:73:BA:21:BE:36:DD:DF:D5:86:90:11:6D:6E:EC:7B:DC:7E:FE:FB:28 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9127FC2/5E30BF70BBA611ECBAF43156C4F9AE02/c7ohvjbd39WGkBFtbux73H7--yg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c7ohvjbd39WGkBFtbux73H7--yg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9127FC2/5E30BF70BBA611ECBAF43156C4F9AE02/c7ohvjbd39WGkBFtbux73H7--yg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 52:27:fc:2f:d7:8f:29:2b:b3:1c:b9:fb:d4:b0:96:a6:d9:64: 71:e1:5e:81:23:83:aa:96:4c:97:7f:99:c3:c0:eb:21:61:9c: e6:75:f9:ab:ea:38:d4:5a:ff:5f:a4:b8:c0:73:0d:69:a3:74: e5:4d:fa:7e:fc:f4:99:9a:9a:67:cf:f0:c7:01:11:ef:43:94: d9:a2:49:2d:b4:b5:58:7f:f4:21:98:1b:e5:9c:45:fb:75:9e: f2:25:88:4f:88:e8:b6:ce:92:08:7b:24:f8:f1:e4:28:22:df: f6:44:be:d8:3c:76:0e:41:a4:bc:f9:e3:f0:f4:d3:9b:95:fd: ed:31:bf:e5:bc:3f:f6:a2:13:7f:2e:1f:f9:fb:53:a6:2b:b7: ec:4b:85:b6:12:d3:3d:50:79:da:3c:ca:01:15:f1:02:ef:df: 5b:3f:85:cc:3c:45:34:c4:fe:be:b0:03:3f:7a:78:cf:1e:58: 37:f4:16:a3:f4:90:c9:89:ff:d7:99:c9:08:cd:e2:87:be:b0: 51:f0:3b:96:59:67:76:00:6f:ee:57:86:4c:a4:8b:2b:f9:00: 11:fa:53:89:53:65:38:4b:c4:28:71:c1:05:44:6b:7e:e1:81: 18:28:33:07:17:53:2f:70:ce:43:54:72:90:14:0a:d2:55:0c: 91:ec:89:50 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA80wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjdGQzIxMTAvBgNVBAUTKDczQkEyMUJFMzZERERGRDU4NjkwMTE2RDZFRUM3QkRD N0VGRUZCMjgwHhcNMjUwODIzMDEwNzM0WhcNMjUwODMwMDEwNzM0WjAYMRYwFAYD VQQDEw02OGE5MTQ1Ni00MDk0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0geiwhNNEIPbJQwbeRgub4Z8/G8YA/OoWbxjIv1Ur4aGGuW1cg3/1sLASNON MjIX9UQT9YpyAuiOajW/cDKL55kyuXtaahahLHeiaFR92JnnBwRIIyxt+Ocj42kN 5RQ6yqPv3jIAoRc99vSpPSQczWfU1Mn7SmUoXrBC4sjiVLg0JKeclV0VFPhuxavQ UcfZYWNgWGXh2pK9puaIh2CpPoFaMw4TJ4w3B6M0H9r+0GOMoE0sYTMMC/W6r/Pg 2jMUUi7x8ZZhEUcktYOyFGjl0DGd/h5zkU2RNryl1+rg2pSg4Wl2yfMj/iQCCxCi fxkfTePaGEjgHBO2xhnGkoqlYwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFK4TsrL9 rebQOBQmLLdQAT2AowzVMB8GA1UdIwQYMBaAFHO6Ib423d/VhpARbW7se9x+/vso MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyN0ZDMi81RTMwQkY3MEJC QTYxMUVDQkFGNDMxNTZDNEY5QUUwMi9jN29odmpiZDM5V0drQkZ0YnV4NzNINy0t eWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2M3b2h2amJkMzlXR2tCRnRidXg3M0g3LS15Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy N0ZDMi81RTMwQkY3MEJCQTYxMUVDQkFGNDMxNTZDNEY5QUUwMi9jN29odmpiZDM5 V0drQkZ0YnV4NzNINy0teWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBSJ/wv148pK7McufvUsJam2WRx4V6BI4OqlkyXf5nDwOshYZzmdfmr 6jjUWv9fpLjAcw1po3TlTfp+/PSZmppnz/DHARHvQ5TZokkttLVYf/QhmBvlnEX7 dZ7yJYhPiOi2zpIIeyT48eQoIt/2RL7YPHYOQaS8+ePw9NOblf3tMb/lvD/2ohN/ Lh/5+1OmK7fsS4W2EtM9UHnaPMoBFfEC799bP4XMPEU0xP6+sAM/enjPHlg39Baj 9JDJif/XmckIzeKHvrBR8DuWWWd2AG/uV4ZMpIsr+QAR+lOJU2U4S8QoccEFRGt+ 4YEYKDMHF1MvcM5DVHKQFArSVQyR7IlQ -----END CERTIFICATE-----Generated at Sat Aug 23 17:20:13 2025 by rpki-client