$ rpki-client -vvf rpki.apnic.net/member_repository/A916DB72/7D99ACAC31F411EFAE91A00CC4F9AE02/7OLgFgFhtvd_x0l2-n1Gw-QjLe8.mft File: 7OLgFgFhtvd_x0l2-n1Gw-QjLe8.mft (raw, json) Hash identifier: +VEbuqhBlxVXJI5i9Qhc/0MU4vFlasqYxfawyfJgKjk= Subject key identifier: 1C:72:DA:29:6F:B7:46:F7:BD:0B:09:9D:03:97:A1:7B:3B:15:A2:5B Authority key identifier: EC:E2:E0:16:01:61:B6:F7:7F:C7:49:76:FA:7D:46:C3:E4:23:2D:EF Certificate issuer: /CN=A916DB72/serialNumber=ECE2E0160161B6F77FC74976FA7D46C3E4232DEF Certificate serial: CC Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/7OLgFgFhtvd_x0l2-n1Gw-QjLe8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916DB72/7D99ACAC31F411EFAE91A00CC4F9AE02/7OLgFgFhtvd_x0l2-n1Gw-QjLe8.mft Manifest number: C9 Signing time: Tue 15 Jul 2025 05:58:58 +0000 Manifest this update: Tue 15 Jul 2025 05:58:57 +0000 Manifest next update: Tue 22 Jul 2025 05:58:57 +0000 Files and hashes: 1: 7OLgFgFhtvd_x0l2-n1Gw-QjLe8.crl (hash: 7Z7RlSMJXV1fJKC8s0sz3lV7pyx2F284UEx65ngzsTY=) 2: 6C722C5A6C8311EF90BD1B76C4F9AE02.roa (hash: C2fRd73u6c1TtG+Y4uQ1VIRzkyl10Cv6nEiy2Ao9xH4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916DB72/7D99ACAC31F411EFAE91A00CC4F9AE02/7OLgFgFhtvd_x0l2-n1Gw-QjLe8.crl rsync://rpki.apnic.net/member_repository/A916DB72/7D99ACAC31F411EFAE91A00CC4F9AE02/7OLgFgFhtvd_x0l2-n1Gw-QjLe8.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/7OLgFgFhtvd_x0l2-n1Gw-QjLe8.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Jul 2025 05:58:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 204 (0xcc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916DB72, serialNumber=ECE2E0160161B6F77FC74976FA7D46C3E4232DEF Validity Not Before: Jul 15 05:58:57 2025 GMT Not After : Jul 22 05:58:57 2025 GMT Subject: CN=6875ee22-906d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:63:c0:c5:af:2b:e9:ba:2a:81:85:bc:e1:f1: 2d:00:08:4f:d8:ef:16:a3:f3:56:97:1d:4c:ef:b5: 05:76:9d:78:75:1b:0f:8f:f2:7f:75:62:6c:b7:0d: 23:9e:85:a4:a7:0b:e8:68:4c:d6:62:88:e6:04:ad: dd:d5:e6:77:2d:1e:ad:4b:c0:b5:e2:6c:c1:f6:58: 2b:95:b9:78:df:72:93:eb:fa:8e:f9:d9:5c:9d:99: a7:a6:8e:3e:f4:0a:c6:8b:ed:61:a7:e8:f3:2c:b7: 42:9d:77:dc:23:51:8e:64:9a:90:71:ee:f5:6e:e1: 87:b9:6b:42:ab:22:01:08:63:3a:6c:7e:f8:da:31: ea:7b:68:e5:73:96:c6:f0:53:ae:d7:d2:b5:a1:3b: 4f:4a:5b:e1:3e:fc:2f:cc:a1:f9:c9:ca:e9:26:e3: 94:e4:c2:a3:ca:7e:c6:2c:d0:62:9e:8e:95:12:38: 60:80:98:3e:b4:71:08:d6:e2:cc:a5:9a:46:aa:fa: 13:34:13:fd:68:59:86:e2:55:33:f5:7e:58:a5:4f: b4:20:53:00:20:44:62:f9:36:90:ee:bb:31:a7:2e: a2:54:08:50:85:47:3c:19:37:7e:71:95:1f:5f:ad: cd:89:21:a8:6b:31:27:12:bc:3e:f4:7a:1e:92:b0: 90:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:72:DA:29:6F:B7:46:F7:BD:0B:09:9D:03:97:A1:7B:3B:15:A2:5B X509v3 Authority Key Identifier: keyid:EC:E2:E0:16:01:61:B6:F7:7F:C7:49:76:FA:7D:46:C3:E4:23:2D:EF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916DB72/7D99ACAC31F411EFAE91A00CC4F9AE02/7OLgFgFhtvd_x0l2-n1Gw-QjLe8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/7OLgFgFhtvd_x0l2-n1Gw-QjLe8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916DB72/7D99ACAC31F411EFAE91A00CC4F9AE02/7OLgFgFhtvd_x0l2-n1Gw-QjLe8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption d3:b9:ea:75:a7:d1:d2:e1:64:b3:3a:ad:31:f9:e6:de:11:16: e1:23:0b:9c:db:38:4f:3a:9c:a7:d8:13:f1:b2:82:e9:3d:cd: f2:98:33:6c:cd:40:e8:2b:c9:8b:6b:ee:93:cc:52:bf:d1:eb: 75:c1:9e:9c:0e:ac:af:6a:89:09:18:f4:79:6c:de:b5:5e:dd: f8:74:c8:62:4e:e1:52:13:2a:89:1d:e0:b7:f8:a6:e5:0a:76: 0f:3c:fd:8a:b9:06:89:95:a9:7a:ec:e6:ee:ac:c6:1f:36:ae: e6:06:ca:a0:32:e5:40:bd:80:86:31:ed:75:20:38:8d:1d:e3: 4e:38:54:9f:07:33:7d:1b:69:11:c4:0f:c1:b6:bd:9f:52:b6: c5:10:f2:df:6f:f2:a7:88:2c:2f:10:72:24:59:91:1b:54:ca: 6e:5d:f0:05:4e:d2:1f:62:27:85:69:fd:e8:ac:f5:63:20:4d: 4e:08:ce:83:f1:e8:61:29:dd:9b:46:e0:b0:94:3f:61:25:51: da:f8:08:96:76:da:bb:26:dc:bd:be:fa:c9:f4:f7:94:9b:fd: fd:d8:b6:f6:a8:eb:1b:25:12:86:44:df:c6:4a:84:7d:57:79: ae:33:30:70:3c:cb:ae:14:51:8a:f2:c3:ed:6b:ff:33:c1:65: 54:cb:2a:1a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAMwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkRCNzIxMTAvBgNVBAUTKEVDRTJFMDE2MDE2MUI2Rjc3RkM3NDk3NkZBN0Q0NkMz RTQyMzJERUYwHhcNMjUwNzE1MDU1ODU3WhcNMjUwNzIyMDU1ODU3WjAYMRYwFAYD VQQDEw02ODc1ZWUyMi05MDZkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyWPAxa8r6boqgYW84fEtAAhP2O8Wo/NWlx1M77UFdp14dRsPj/J/dWJstw0j noWkpwvoaEzWYojmBK3d1eZ3LR6tS8C14mzB9lgrlbl433KT6/qO+dlcnZmnpo4+ 9ArGi+1hp+jzLLdCnXfcI1GOZJqQce71buGHuWtCqyIBCGM6bH742jHqe2jlc5bG 8FOu19K1oTtPSlvhPvwvzKH5ycrpJuOU5MKjyn7GLNBino6VEjhggJg+tHEI1uLM pZpGqvoTNBP9aFmG4lUz9X5YpU+0IFMAIERi+TaQ7rsxpy6iVAhQhUc8GTd+cZUf X63NiSGoazEnErw+9HoekrCQTQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBxy2ilv t0b3vQsJnQOXoXs7FaJbMB8GA1UdIwQYMBaAFOzi4BYBYbb3f8dJdvp9RsPkIy3v MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2REI3Mi83RDk5QUNBQzMx RjQxMUVGQUU5MUEwMENDNEY5QUUwMi83T0xnRmdGaHR2ZF94MGwyLW4xR3ctUWpM ZTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzdPTGdGZ0ZodHZkX3gwbDItbjFHdy1RakxlOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 REI3Mi83RDk5QUNBQzMxRjQxMUVGQUU5MUEwMENDNEY5QUUwMi83T0xnRmdGaHR2 ZF94MGwyLW4xR3ctUWpMZTgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDTuep1p9HS4WSzOq0x+ebeERbhIwuc2zhPOpyn2BPxsoLpPc3ymDNs zUDoK8mLa+6TzFK/0et1wZ6cDqyvaokJGPR5bN61Xt34dMhiTuFSEyqJHeC3+Kbl CnYPPP2KuQaJlal67OburMYfNq7mBsqgMuVAvYCGMe11IDiNHeNOOFSfBzN9G2kR xA/Btr2fUrbFEPLfb/KniCwvEHIkWZEbVMpuXfAFTtIfYieFaf3orPVjIE1OCM6D 8ehhKd2bRuCwlD9hJVHa+AiWdtq7Jty9vvrJ9PeUm/392Lb2qOsbJRKGRN/GSoR9 V3muMzBwPMuuFFGK8sPta/8zwWVUyyoa -----END CERTIFICATE-----Generated at Wed Jul 16 23:09:53 2025 by rpki-client