$ rpki-client -vvf rpki.apnic.net/member_repository/A9146944/43BD1C6E8E9511EAA9D73A2EC4F9AE02/7R-VjLYEtXboIhS0zzzA_mIO-fQ.mft File: 7R-VjLYEtXboIhS0zzzA_mIO-fQ.mft (raw, json) Hash identifier: e2NMFoG1aQK1/UQ7fkSVLqAnhMF6BnfYl37QQuR8Xl8= Subject key identifier: 95:9A:AB:E7:0E:62:5F:2C:6B:BE:69:49:6F:0C:B3:4E:99:91:97:71 Authority key identifier: ED:1F:95:8C:B6:04:B5:76:E8:22:14:B4:CF:3C:C0:FE:62:0E:F9:F4 Certificate issuer: /CN=A9146944/serialNumber=ED1F958CB604B576E82214B4CF3CC0FE620EF9F4 Certificate serial: 0A27 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7R-VjLYEtXboIhS0zzzA_mIO-fQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9146944/43BD1C6E8E9511EAA9D73A2EC4F9AE02/7R-VjLYEtXboIhS0zzzA_mIO-fQ.mft Manifest number: 09EC Signing time: Fri 22 Aug 2025 20:09:55 +0000 Manifest this update: Fri 22 Aug 2025 20:09:55 +0000 Manifest next update: Fri 29 Aug 2025 20:09:55 +0000 Files and hashes: 1: 7R-VjLYEtXboIhS0zzzA_mIO-fQ.crl (hash: ab+b9gKPkKgsKfxSzO6TYAXmIadWU0NtMxnIrCLewKQ=) 2: D411F96C532E11EFB0B63E60C4F9AE02.roa (hash: jzzWgD3HRpvAEJBXK/vfne+ihxsbOdjQU7WB0KMRVgw=) 3: 0A627D5653AD11EF94BC7F0BC4F9AE02.roa (hash: ZT22vRI1IQ1BmtH9ALydP3ilyhXOSnuc69Bf2IwyKlI=) 4: A2120E06FD7F11EFA8C89755C4F9AE02.roa (hash: 2Hvw21rvCVCh8S0/7oApM9oB0Qgb7ulGPIHYlQU89cU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9146944/43BD1C6E8E9511EAA9D73A2EC4F9AE02/7R-VjLYEtXboIhS0zzzA_mIO-fQ.crl rsync://rpki.apnic.net/member_repository/A9146944/43BD1C6E8E9511EAA9D73A2EC4F9AE02/7R-VjLYEtXboIhS0zzzA_mIO-fQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7R-VjLYEtXboIhS0zzzA_mIO-fQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 20:09:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2599 (0xa27) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9146944, serialNumber=ED1F958CB604B576E82214B4CF3CC0FE620EF9F4 Validity Not Before: Aug 22 20:09:55 2025 GMT Not After : Aug 29 20:09:55 2025 GMT Subject: CN=68a8ce93-394e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:2f:74:6f:50:49:b0:58:c4:2f:54:05:68:d4: 38:c8:4c:6b:09:b8:2b:22:7f:4b:7d:4d:55:a9:ef: 73:d1:6c:e3:81:51:62:d9:cc:48:01:87:32:2f:e0: d7:21:b1:ce:ea:cc:78:c5:25:a1:96:39:46:9f:37: da:07:1f:59:9a:88:eb:2b:dd:79:9b:b4:47:53:6b: c3:b1:7b:97:76:b7:81:5a:21:7d:1a:29:ee:fc:12: a6:4c:07:ab:4c:e5:35:f3:a0:44:82:e9:19:57:e8: 6b:af:3e:76:43:e5:5c:eb:b0:ef:4d:92:97:7e:fe: cc:f9:a7:d1:f6:3e:1f:b1:6e:a7:d7:c8:40:c7:05: 62:eb:34:57:01:17:ab:08:3b:9f:80:e7:e5:8a:b2: 8f:ce:eb:22:c3:3c:1d:c5:93:99:7b:2b:0f:f5:b1: ab:3e:9b:91:b3:e4:17:b2:5c:28:c8:97:ef:1e:6a: 42:81:50:0a:80:96:f4:9e:fe:8b:d1:2f:37:02:b3: a3:0e:52:15:bd:ad:07:f9:c9:89:c3:b3:61:90:3a: 30:e3:75:96:f4:cb:3a:de:13:fc:49:23:47:ed:d7: ee:f5:0b:55:cb:c0:d1:3b:c3:83:81:51:e8:0b:ac: cd:b6:59:e2:f1:7b:78:98:b4:94:50:aa:38:12:06: 68:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:9A:AB:E7:0E:62:5F:2C:6B:BE:69:49:6F:0C:B3:4E:99:91:97:71 X509v3 Authority Key Identifier: keyid:ED:1F:95:8C:B6:04:B5:76:E8:22:14:B4:CF:3C:C0:FE:62:0E:F9:F4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9146944/43BD1C6E8E9511EAA9D73A2EC4F9AE02/7R-VjLYEtXboIhS0zzzA_mIO-fQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7R-VjLYEtXboIhS0zzzA_mIO-fQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9146944/43BD1C6E8E9511EAA9D73A2EC4F9AE02/7R-VjLYEtXboIhS0zzzA_mIO-fQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8d:75:f6:c9:a3:3f:d0:d1:4a:8d:0d:a9:01:96:05:79:94:17: 7d:33:88:52:f3:75:da:a6:24:a8:6b:22:d3:09:64:85:88:7b: 3b:17:62:2d:82:35:94:34:54:41:e4:5d:50:59:25:9b:8b:0b: 89:34:49:09:8c:61:a1:18:5c:83:85:f0:5d:c9:86:2e:63:e4: 0b:a8:45:36:e9:7b:77:97:59:52:2d:34:19:f6:22:fa:85:24: b6:05:17:c2:48:24:78:34:3c:38:38:0e:5a:91:36:71:52:3a: 86:59:6f:88:74:ca:59:69:86:5f:dc:0a:9a:be:2a:ca:56:05: 2b:02:e0:b8:50:e0:89:a0:cf:d9:8b:da:c7:8b:88:04:6d:e8: ba:fb:79:1c:b4:1f:b6:f1:5a:cb:9f:6d:79:61:e1:b0:71:58: 5d:56:47:ff:8f:bd:ba:2c:fa:cb:35:da:05:93:77:46:cd:60: f1:f5:ac:c0:fb:e5:6e:0f:8d:af:91:58:15:3b:d3:4a:9d:ac: 62:fd:0a:2c:bd:48:a1:27:82:65:1e:b8:42:b2:f4:f5:e6:b0: de:89:a4:fe:e9:02:c6:82:37:2c:a1:df:2b:7a:e7:aa:92:ad: 29:b5:00:14:16:ce:35:ef:c1:d1:e4:9e:78:68:33:5c:d1:b0: 4c:59:81:33 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCicwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDY5NDQxMTAvBgNVBAUTKEVEMUY5NThDQjYwNEI1NzZFODIyMTRCNENGM0NDMEZF NjIwRUY5RjQwHhcNMjUwODIyMjAwOTU1WhcNMjUwODI5MjAwOTU1WjAYMRYwFAYD VQQDEw02OGE4Y2U5My0zOTRlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsy90b1BJsFjEL1QFaNQ4yExrCbgrIn9LfU1Vqe9z0WzjgVFi2cxIAYcyL+DX IbHO6sx4xSWhljlGnzfaBx9ZmojrK915m7RHU2vDsXuXdreBWiF9Ginu/BKmTAer TOU186BEgukZV+hrrz52Q+Vc67DvTZKXfv7M+afR9j4fsW6n18hAxwVi6zRXARer CDufgOflirKPzusiwzwdxZOZeysP9bGrPpuRs+QXslwoyJfvHmpCgVAKgJb0nv6L 0S83ArOjDlIVva0H+cmJw7NhkDow43WW9Ms63hP8SSNH7dfu9QtVy8DRO8ODgVHo C6zNtlni8Xt4mLSUUKo4EgZoPQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJWaq+cO Yl8sa75pSW8Ms06ZkZdxMB8GA1UdIwQYMBaAFO0flYy2BLV26CIUtM88wP5iDvn0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0Njk0NC80M0JEMUM2RThF OTUxMUVBQTlENzNBMkVDNEY5QUUwMi83Ui1WakxZRXRYYm9JaFMwenp6QV9tSU8t ZlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzdSLVZqTFlFdFhib0loUzB6enpBX21JTy1mUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 Njk0NC80M0JEMUM2RThFOTUxMUVBQTlENzNBMkVDNEY5QUUwMi83Ui1WakxZRXRY Ym9JaFMwenp6QV9tSU8tZlEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCNdfbJoz/Q0UqNDakBlgV5lBd9M4hS83XapiSoayLTCWSFiHs7F2It gjWUNFRB5F1QWSWbiwuJNEkJjGGhGFyDhfBdyYYuY+QLqEU26Xt3l1lSLTQZ9iL6 hSS2BRfCSCR4NDw4OA5akTZxUjqGWW+IdMpZaYZf3AqavirKVgUrAuC4UOCJoM/Z i9rHi4gEbei6+3kctB+28VrLn215YeGwcVhdVkf/j726LPrLNdoFk3dGzWDx9azA ++VuD42vkVgVO9NKnaxi/QosvUihJ4JlHrhCsvT15rDeiaT+6QLGgjcsod8reueq kq0ptQAUFs4178HR5J54aDNc0bBMWYEz -----END CERTIFICATE-----Generated at Sat Aug 23 20:44:49 2025 by rpki-client