$ rpki-client -vvf rpki.apnic.net/member_repository/A9126A3C/7390B34AC6A011EF928B7960C4F9AE02/l7A9ovtF9W4_WCFj33vZUGk5mUQ.mft File: l7A9ovtF9W4_WCFj33vZUGk5mUQ.mft (raw, json) Hash identifier: C7J0q+3bCnAzSE4G/cKD9Gs5QFEREjrwWvhBCnO/fKw= Subject key identifier: 0D:3F:CF:B6:D6:4C:31:2A:CE:F0:9D:B5:5C:B3:2D:72:7E:94:05:06 Authority key identifier: 97:B0:3D:A2:FB:45:F5:6E:3F:58:21:63:DF:7B:D9:50:69:39:99:44 Certificate issuer: /CN=A9126A3C/serialNumber=97B03DA2FB45F56E3F582163DF7BD95069399944 Certificate serial: 78 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/l7A9ovtF9W4_WCFj33vZUGk5mUQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9126A3C/7390B34AC6A011EF928B7960C4F9AE02/l7A9ovtF9W4_WCFj33vZUGk5mUQ.mft Manifest number: 75 Signing time: Sat 09 Aug 2025 07:17:57 +0000 Manifest this update: Sat 09 Aug 2025 07:17:56 +0000 Manifest next update: Sat 16 Aug 2025 07:17:56 +0000 Files and hashes: 1: l7A9ovtF9W4_WCFj33vZUGk5mUQ.crl (hash: UfnqNJDBa6UA7nNXk1mNm3QO8rZ5Eklo1KLpAGh/YRI=) 2: F120EB84C6D911EFA447E849C4F9AE02.roa (hash: mo70D3RkkFpkqu5IGLksT/J6Tz0OUu7ujkEgshBAI8o=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9126A3C/7390B34AC6A011EF928B7960C4F9AE02/l7A9ovtF9W4_WCFj33vZUGk5mUQ.crl rsync://rpki.apnic.net/member_repository/A9126A3C/7390B34AC6A011EF928B7960C4F9AE02/l7A9ovtF9W4_WCFj33vZUGk5mUQ.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/l7A9ovtF9W4_WCFj33vZUGk5mUQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 120 (0x78) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9126A3C, serialNumber=97B03DA2FB45F56E3F582163DF7BD95069399944 Validity Not Before: Aug 9 07:17:56 2025 GMT Not After : Aug 16 07:17:56 2025 GMT Subject: CN=6896f624-89ad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:56:f9:77:ef:29:fc:68:8c:fd:36:0c:da:32: 10:cd:d3:3b:f5:2c:00:c8:e2:28:1d:3c:f6:8d:36: b8:8f:d6:20:cb:c9:49:73:c9:2e:4f:cd:9f:39:70: fe:73:69:da:c3:bc:55:fb:bf:bd:62:05:46:a8:e0: 7d:4e:0f:c3:c3:49:59:6d:ad:a2:c1:e7:96:b8:69: 72:9b:97:03:25:7f:34:ca:33:c5:79:25:95:49:d4: b6:15:71:cd:84:b4:6b:90:6f:02:55:ea:4e:0e:b4: d5:6d:69:b1:f5:14:da:41:b4:5f:72:f2:d5:22:64: b7:cc:f8:d9:97:03:cd:10:bd:f7:8f:03:0d:b3:21: 0f:12:eb:7a:75:cc:1b:a3:14:c6:0d:e6:b4:1d:d7: 11:db:2c:21:be:0f:a9:ff:00:36:de:2f:3e:ce:c6: 37:f6:a4:ec:a7:8b:cf:5f:4d:1f:f3:24:fb:13:86: 47:1e:4a:0f:74:c9:20:be:a8:f8:26:3c:0f:2c:30: c7:43:38:72:a6:e2:9a:e3:cf:4f:dc:e3:83:5b:8c: ae:01:58:1b:1d:2f:46:8f:f7:2e:a3:e3:75:1f:ad: 40:5c:46:66:dc:03:c4:8b:47:aa:c3:90:b0:be:c9: ae:56:d6:96:7c:fb:68:fb:b6:e9:74:41:2c:32:b9: 1e:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:3F:CF:B6:D6:4C:31:2A:CE:F0:9D:B5:5C:B3:2D:72:7E:94:05:06 X509v3 Authority Key Identifier: keyid:97:B0:3D:A2:FB:45:F5:6E:3F:58:21:63:DF:7B:D9:50:69:39:99:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9126A3C/7390B34AC6A011EF928B7960C4F9AE02/l7A9ovtF9W4_WCFj33vZUGk5mUQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/l7A9ovtF9W4_WCFj33vZUGk5mUQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9126A3C/7390B34AC6A011EF928B7960C4F9AE02/l7A9ovtF9W4_WCFj33vZUGk5mUQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption d9:1d:62:dc:32:a9:89:4f:b9:29:d6:cf:2c:0d:35:0d:ac:cc: da:86:c0:33:49:b7:00:af:2b:8d:f5:6c:d1:e2:a5:5f:6b:24: d7:f1:de:ad:db:46:be:fa:64:ff:24:c9:d7:c8:ec:54:21:63: 9b:c1:05:df:c5:03:89:89:01:ff:62:44:b8:4e:e4:8a:7c:c4: df:ce:34:8e:dc:50:28:fb:5a:c9:5d:c5:91:5d:c8:05:ef:99: cc:ba:65:4a:c0:c7:21:05:98:45:f5:85:82:5f:b6:6d:c2:5a: 21:7d:6c:f4:c1:c0:78:30:73:5e:79:d8:5d:a8:b3:88:43:b1: bc:f1:f6:53:89:15:97:cd:ba:57:f9:0d:a1:c9:45:88:59:e0: 60:32:13:ae:07:6c:7a:e6:b5:8d:34:f9:33:d8:8a:57:53:26: e9:cc:f6:c2:ff:08:25:98:bb:60:a9:6f:2e:9b:e7:3c:92:2f: 36:b4:b9:6f:83:2b:5b:74:60:f7:5f:8c:02:6a:bf:e7:fb:31: 42:30:bf:3f:2e:6e:7d:5b:c0:6d:88:c6:87:d9:72:36:68:89: 62:2b:73:0f:f0:81:25:0f:4f:ea:bf:de:1f:ea:51:2f:94:7c: c3:c5:92:0c:71:9d:0b:ae:b5:43:c1:05:41:2f:c6:09:3a:51: 4d:ed:d5:f5 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBeDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEy NkEzQzExMC8GA1UEBRMoOTdCMDNEQTJGQjQ1RjU2RTNGNTgyMTYzREY3QkQ5NTA2 OTM5OTk0NDAeFw0yNTA4MDkwNzE3NTZaFw0yNTA4MTYwNzE3NTZaMBgxFjAUBgNV BAMTDTY4OTZmNjI0LTg5YWQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDCVvl37yn8aIz9NgzaMhDN0zv1LADI4igdPPaNNriP1iDLyUlzyS5PzZ85cP5z adrDvFX7v71iBUao4H1OD8PDSVltraLB55a4aXKblwMlfzTKM8V5JZVJ1LYVcc2E tGuQbwJV6k4OtNVtabH1FNpBtF9y8tUiZLfM+NmXA80QvfePAw2zIQ8S63p1zBuj FMYN5rQd1xHbLCG+D6n/ADbeLz7Oxjf2pOyni89fTR/zJPsThkceSg90ySC+qPgm PA8sMMdDOHKm4prjz0/c44NbjK4BWBsdL0aP9y6j43UfrUBcRmbcA8SLR6rDkLC+ ya5W1pZ8+2j7tul0QSwyuR5HAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUDT/PttZM MSrO8J21XLMtcn6UBQYwHwYDVR0jBBgwFoAUl7A9ovtF9W4/WCFj33vZUGk5mUQw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTI2QTNDLzczOTBCMzRBQzZB MDExRUY5MjhCNzk2MEM0RjlBRTAyL2w3QTlvdnRGOVc0X1dDRmozM3ZaVUdrNW1V US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvbDdBOW92dEY5VzRfV0NGajMzdlpVR2s1bVVRLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTI2 QTNDLzczOTBCMzRBQzZBMDExRUY5MjhCNzk2MEM0RjlBRTAyL2w3QTlvdnRGOVc0 X1dDRmozM3ZaVUdrNW1VUS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBANkdYtwyqYlPuSnWzywNNQ2szNqGwDNJtwCvK431bNHipV9rJNfx3q3b Rr76ZP8kydfI7FQhY5vBBd/FA4mJAf9iRLhO5Ip8xN/ONI7cUCj7WsldxZFdyAXv mcy6ZUrAxyEFmEX1hYJftm3CWiF9bPTBwHgwc1552F2os4hDsbzx9lOJFZfNulf5 DaHJRYhZ4GAyE64HbHrmtY00+TPYildTJunM9sL/CCWYu2Cpby6b5zySLza0uW+D K1t0YPdfjAJqv+f7MUIwvz8ubn1bwG2IxofZcjZoiWIrcw/wgSUPT+q/3h/qUS+U fMPFkgxxnQuutUPBBUEvxgk6UU3t1fU= -----END CERTIFICATE-----Generated at Sun Aug 10 18:21:44 2025 by rpki-client