$ rpki-client -vvf rpki.apnic.net/member_repository/A9127FC2/5E30BF70BBA611ECBAF43156C4F9AE02/c7ohvjbd39WGkBFtbux73H7--yg.mft File: c7ohvjbd39WGkBFtbux73H7--yg.mft (raw, json) Hash identifier: YK7aR8hHbCjrCzvkd9qtJ+cfHPoJN7cFfqfDVKYBhuE= Subject key identifier: 13:B2:8C:DB:FD:4F:1A:A6:FB:C8:D5:4E:8D:A4:9A:27:3D:FC:6E:58 Authority key identifier: 73:BA:21:BE:36:DD:DF:D5:86:90:11:6D:6E:EC:7B:DC:7E:FE:FB:28 Certificate issuer: /CN=A9127FC2/serialNumber=73BA21BE36DDDFD58690116D6EEC7BDC7EFEFB28 Certificate serial: 03AA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c7ohvjbd39WGkBFtbux73H7--yg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9127FC2/5E30BF70BBA611ECBAF43156C4F9AE02/c7ohvjbd39WGkBFtbux73H7--yg.mft Manifest number: 0382 Signing time: Sun 15 Jun 2025 00:42:04 +0000 Manifest this update: Sun 15 Jun 2025 00:42:04 +0000 Manifest next update: Sun 22 Jun 2025 00:42:04 +0000 Files and hashes: 1: c7ohvjbd39WGkBFtbux73H7--yg.crl (hash: 5d692O2QlmfCA7wSOzSkT/0hoi2y6xds4LAJ880GiRQ=) 2: 3143DEC26C8811EEBAB7F227C4F9AE02.roa (hash: DiuzbA0Eyu2SFjBtadVHxxhq9EQIpll9WL5oTCeuzso=) 3: AA730ACCBCFA11EDAD328D3AC4F9AE02.roa (hash: JIgqJZp1UxmLPN/QpABfqnpOQUWAjrpqyosKFp6OS4Q=) 4: 63F359F0620711EE8BBCFF68C4F9AE02.roa (hash: Keth2970vjYbkSSDZ7cyyc004SjVLXN/KW/3yleZzSU=) 5: 1ABD64C4FC4B11EC9E374483C4F9AE02.roa (hash: sxadIBziqD0gGHzlLgMeF3y6MatZTVAVquFeXL0wHHA=) 6: AB95EEC4BCFA11EDAD328D3AC4F9AE02.roa (hash: yTZcvgK0CeflFtKCV7bhb3NpxPPVFQseYnOGqpYevgk=) 7: 9B39DA4A17B611F0949B3513C4F9AE02.roa (hash: JIzx72Iu5kXzy1zuPq6JcTLGHOjrjN0dOL1PQPVedEI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9127FC2/5E30BF70BBA611ECBAF43156C4F9AE02/c7ohvjbd39WGkBFtbux73H7--yg.crl rsync://rpki.apnic.net/member_repository/A9127FC2/5E30BF70BBA611ECBAF43156C4F9AE02/c7ohvjbd39WGkBFtbux73H7--yg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c7ohvjbd39WGkBFtbux73H7--yg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 22 Jun 2025 00:42:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 938 (0x3aa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9127FC2, serialNumber=73BA21BE36DDDFD58690116D6EEC7BDC7EFEFB28 Validity Not Before: Jun 15 00:42:04 2025 GMT Not After : Jun 22 00:42:04 2025 GMT Subject: CN=684e16dc-904c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:12:44:0b:2e:25:77:cd:4d:e6:2a:1f:14:bc: bb:94:9c:ad:e7:43:3c:f4:29:bf:75:78:c9:fa:14: 06:61:ee:b8:34:a9:10:31:a3:b1:1b:b3:87:87:f6: 46:6e:e2:1a:8e:fd:ff:1a:85:91:e3:25:49:27:61: 4f:c9:31:24:9a:31:03:1d:55:99:b6:a3:5a:8a:48: a1:5c:93:2b:84:e6:fa:b9:5c:02:5c:9d:a3:b0:1e: fc:b6:b3:d9:2e:92:d7:04:8f:ec:14:32:02:a3:32: ed:79:ca:1d:43:78:2c:68:3d:ce:d2:5d:d2:5d:0a: a6:3c:50:2b:32:1e:8c:bc:65:bd:8d:16:b5:b7:ba: 1c:19:8f:16:65:0c:ef:01:a6:01:c3:c5:ce:4f:8b: 78:23:0c:28:57:a9:cf:5d:13:ae:cf:be:e0:ad:52: 5a:f8:43:43:cc:8c:77:b1:f8:31:30:d4:ba:a8:69: bd:10:b0:dd:b3:65:55:7e:21:06:66:f1:ea:cf:2c: 62:ae:f2:6b:c5:68:42:ea:8f:e7:56:05:f9:be:63: 9a:68:fa:d1:0d:53:17:af:b6:ed:c6:fd:c6:0b:ca: d3:89:d2:eb:80:cf:33:33:2e:ca:d6:06:cb:fe:e0: 1c:b2:69:29:35:2e:bd:da:bc:58:61:7b:8d:dc:7c: 1a:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:B2:8C:DB:FD:4F:1A:A6:FB:C8:D5:4E:8D:A4:9A:27:3D:FC:6E:58 X509v3 Authority Key Identifier: keyid:73:BA:21:BE:36:DD:DF:D5:86:90:11:6D:6E:EC:7B:DC:7E:FE:FB:28 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9127FC2/5E30BF70BBA611ECBAF43156C4F9AE02/c7ohvjbd39WGkBFtbux73H7--yg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c7ohvjbd39WGkBFtbux73H7--yg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9127FC2/5E30BF70BBA611ECBAF43156C4F9AE02/c7ohvjbd39WGkBFtbux73H7--yg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8c:38:32:49:ae:26:41:55:8a:a0:f8:1c:fe:a1:3e:82:10:69: c7:32:b0:18:f2:ba:ab:a2:b9:c1:2c:18:61:d1:de:92:b2:d6: 2e:22:b7:3e:be:86:4d:15:b2:56:c2:00:f9:47:03:aa:c1:fe: e4:f9:be:1e:0c:c3:57:8c:bf:65:e8:69:64:e9:3d:a5:6d:fc: 34:80:ef:76:c4:ac:19:c4:a7:aa:06:93:6b:5e:e3:19:35:18: 0b:c4:16:7f:b7:1f:b1:a0:14:bd:66:dd:9e:3c:b9:6c:a5:12: 83:b4:0f:90:94:a1:00:9b:c2:2f:0b:84:7e:4d:d4:6d:3f:cb: f4:29:35:97:75:e2:c7:22:31:2a:6f:93:32:c1:72:2d:ae:89: 1a:99:67:14:6f:88:99:0d:63:61:8e:75:9f:93:1c:40:b4:f7: 5a:2d:f4:4b:2a:03:85:30:24:8c:2a:7e:4a:69:f1:10:c7:f4: 05:31:13:3f:97:e8:13:23:9b:be:52:51:a9:e0:16:2e:09:39: ee:12:53:35:1d:ec:11:97:4c:fa:02:03:a3:2f:ec:43:2c:e7: cc:08:5e:f4:9e:35:2d:52:6f:6c:03:7e:d1:5d:05:2f:51:28: 6b:b4:3c:bd:04:a1:25:cd:d9:b0:cf:af:de:5d:22:0b:7e:50: c3:cd:73:dd -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA6owDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjdGQzIxMTAvBgNVBAUTKDczQkEyMUJFMzZERERGRDU4NjkwMTE2RDZFRUM3QkRD N0VGRUZCMjgwHhcNMjUwNjE1MDA0MjA0WhcNMjUwNjIyMDA0MjA0WjAYMRYwFAYD VQQDEw02ODRlMTZkYy05MDRjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApBJECy4ld81N5iofFLy7lJyt50M89Cm/dXjJ+hQGYe64NKkQMaOxG7OHh/ZG buIajv3/GoWR4yVJJ2FPyTEkmjEDHVWZtqNaikihXJMrhOb6uVwCXJ2jsB78trPZ LpLXBI/sFDICozLtecodQ3gsaD3O0l3SXQqmPFArMh6MvGW9jRa1t7ocGY8WZQzv AaYBw8XOT4t4IwwoV6nPXROuz77grVJa+ENDzIx3sfgxMNS6qGm9ELDds2VVfiEG ZvHqzyxirvJrxWhC6o/nVgX5vmOaaPrRDVMXr7btxv3GC8rTidLrgM8zMy7K1gbL /uAcsmkpNS692rxYYXuN3HwajwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBOyjNv9 Txqm+8jVTo2kmic9/G5YMB8GA1UdIwQYMBaAFHO6Ib423d/VhpARbW7se9x+/vso MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyN0ZDMi81RTMwQkY3MEJC QTYxMUVDQkFGNDMxNTZDNEY5QUUwMi9jN29odmpiZDM5V0drQkZ0YnV4NzNINy0t eWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2M3b2h2amJkMzlXR2tCRnRidXg3M0g3LS15Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy N0ZDMi81RTMwQkY3MEJCQTYxMUVDQkFGNDMxNTZDNEY5QUUwMi9jN29odmpiZDM5 V0drQkZ0YnV4NzNINy0teWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCMODJJriZBVYqg+Bz+oT6CEGnHMrAY8rqrornBLBhh0d6SstYuIrc+ voZNFbJWwgD5RwOqwf7k+b4eDMNXjL9l6Glk6T2lbfw0gO92xKwZxKeqBpNrXuMZ NRgLxBZ/tx+xoBS9Zt2ePLlspRKDtA+QlKEAm8IvC4R+TdRtP8v0KTWXdeLHIjEq b5MywXItrokamWcUb4iZDWNhjnWfkxxAtPdaLfRLKgOFMCSMKn5KafEQx/QFMRM/ l+gTI5u+UlGp4BYuCTnuElM1HewRl0z6AgOjL+xDLOfMCF70njUtUm9sA37RXQUv UShrtDy9BKElzdmwz6/eXSILflDDzXPd -----END CERTIFICATE-----Generated at Sun Jun 15 08:40:19 2025 by rpki-client