$ rpki-client -vvf rpki.apnic.net/member_repository/A9127FC2/5E30BF70BBA611ECBAF43156C4F9AE02/c7ohvjbd39WGkBFtbux73H7--yg.mft File: c7ohvjbd39WGkBFtbux73H7--yg.mft (raw, json) Hash identifier: qjgoKCqqmcMWzvssoH/qLt08J0DK9qa3LcZOhQKypgY= Subject key identifier: 3E:E9:96:0C:1D:FC:D2:D6:0E:CB:AD:7E:41:4B:53:18:98:E0:7E:16 Authority key identifier: 73:BA:21:BE:36:DD:DF:D5:86:90:11:6D:6E:EC:7B:DC:7E:FE:FB:28 Certificate issuer: /CN=A9127FC2/serialNumber=73BA21BE36DDDFD58690116D6EEC7BDC7EFEFB28 Certificate serial: 03C6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c7ohvjbd39WGkBFtbux73H7--yg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9127FC2/5E30BF70BBA611ECBAF43156C4F9AE02/c7ohvjbd39WGkBFtbux73H7--yg.mft Manifest number: 039E Signing time: Sat 09 Aug 2025 01:25:53 +0000 Manifest this update: Sat 09 Aug 2025 01:25:52 +0000 Manifest next update: Sat 16 Aug 2025 01:25:52 +0000 Files and hashes: 1: c7ohvjbd39WGkBFtbux73H7--yg.crl (hash: 7tfte2lKu8fSJQy1f4kVEMHTKDJigw6BVeGtmLlqAAQ=) 2: 3143DEC26C8811EEBAB7F227C4F9AE02.roa (hash: DiuzbA0Eyu2SFjBtadVHxxhq9EQIpll9WL5oTCeuzso=) 3: AA730ACCBCFA11EDAD328D3AC4F9AE02.roa (hash: JIgqJZp1UxmLPN/QpABfqnpOQUWAjrpqyosKFp6OS4Q=) 4: 63F359F0620711EE8BBCFF68C4F9AE02.roa (hash: Keth2970vjYbkSSDZ7cyyc004SjVLXN/KW/3yleZzSU=) 5: 1ABD64C4FC4B11EC9E374483C4F9AE02.roa (hash: sxadIBziqD0gGHzlLgMeF3y6MatZTVAVquFeXL0wHHA=) 6: AB95EEC4BCFA11EDAD328D3AC4F9AE02.roa (hash: yTZcvgK0CeflFtKCV7bhb3NpxPPVFQseYnOGqpYevgk=) 7: 9B39DA4A17B611F0949B3513C4F9AE02.roa (hash: JIzx72Iu5kXzy1zuPq6JcTLGHOjrjN0dOL1PQPVedEI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9127FC2/5E30BF70BBA611ECBAF43156C4F9AE02/c7ohvjbd39WGkBFtbux73H7--yg.crl rsync://rpki.apnic.net/member_repository/A9127FC2/5E30BF70BBA611ECBAF43156C4F9AE02/c7ohvjbd39WGkBFtbux73H7--yg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c7ohvjbd39WGkBFtbux73H7--yg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 966 (0x3c6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9127FC2, serialNumber=73BA21BE36DDDFD58690116D6EEC7BDC7EFEFB28 Validity Not Before: Aug 9 01:25:52 2025 GMT Not After : Aug 16 01:25:52 2025 GMT Subject: CN=6896a3a1-3ed9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:0d:bd:cb:75:05:3e:5e:fb:b1:d8:c0:15:46: ed:cc:81:61:88:f9:a1:e0:7c:4f:6f:82:5f:54:09: bc:fb:8f:a5:a1:fc:6e:73:01:1e:21:45:c8:1f:9a: 6e:96:f7:ed:3b:ed:7b:2b:a9:8f:c8:01:17:f4:2c: 52:09:31:3d:67:1b:b1:bc:ba:d9:bd:53:1e:f0:90: db:57:03:0c:e2:16:a9:fc:76:22:20:05:be:9a:82: 68:d2:75:9e:22:1f:6c:a3:7e:98:79:0e:a2:19:c4: f1:69:89:0b:e9:94:d6:b3:64:31:c9:02:c4:0a:d8: e9:5c:a5:55:28:ef:46:38:b0:41:58:e8:04:81:45: 50:2a:ad:93:38:7c:62:70:b0:78:99:1a:7c:23:48: c1:98:72:f8:95:3c:fe:8a:34:c8:7d:4f:b4:50:14: 34:68:cc:f1:b8:58:9c:6a:a7:51:78:88:5a:9b:47: d3:b1:8f:65:f5:c5:29:55:a4:d3:5a:21:c4:7c:3f: c5:15:a3:5a:56:3d:55:a6:e5:09:6e:c1:d1:e9:a1: 8c:22:7a:b8:0f:46:8a:e3:da:46:10:7d:7a:46:31: 3c:59:14:2f:00:a9:36:0a:ef:2d:45:44:cf:19:9a: 00:05:c1:0f:9d:49:69:16:55:6e:1f:34:f8:30:66: c9:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:E9:96:0C:1D:FC:D2:D6:0E:CB:AD:7E:41:4B:53:18:98:E0:7E:16 X509v3 Authority Key Identifier: keyid:73:BA:21:BE:36:DD:DF:D5:86:90:11:6D:6E:EC:7B:DC:7E:FE:FB:28 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9127FC2/5E30BF70BBA611ECBAF43156C4F9AE02/c7ohvjbd39WGkBFtbux73H7--yg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c7ohvjbd39WGkBFtbux73H7--yg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9127FC2/5E30BF70BBA611ECBAF43156C4F9AE02/c7ohvjbd39WGkBFtbux73H7--yg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 20:41:44:7d:5a:16:1f:e5:93:89:40:57:ff:6c:46:fb:73:db: 4b:bb:b4:be:3f:63:9d:3e:a7:9f:7f:0f:e3:5c:5a:c2:f0:35: cf:d6:55:7e:9d:3d:c0:4c:74:73:9e:37:53:4e:6d:be:4c:80: 0c:19:75:1f:e8:29:d3:88:77:16:58:7a:3f:9f:30:8c:39:80: e6:41:8d:69:17:8f:6f:aa:11:91:82:9f:a5:9f:89:87:c1:d1: 41:04:cb:d9:06:91:c1:ea:3b:20:4f:4f:f5:42:0d:75:9a:21: 31:9d:f3:f8:75:6f:8f:ee:de:34:15:d8:a2:2c:81:1f:17:83: cf:f5:e0:31:70:be:dc:ef:98:8d:de:b9:dc:35:04:f8:eb:87: 75:27:6d:c2:90:6f:b8:10:f5:5b:66:24:23:5a:3c:2e:26:81: e9:a8:b2:8b:7e:6a:6b:08:54:30:f0:c4:55:88:2c:d0:a0:c7: 19:07:e1:4d:0c:84:f5:28:5d:d3:c5:31:17:37:a0:3c:95:db: cc:92:47:fa:78:33:a8:28:84:24:49:bf:b6:bb:7c:4c:b5:00: 42:3a:58:e9:3a:ed:f2:31:80:5b:98:57:19:53:61:ff:43:bb: e3:64:ba:07:0b:dd:79:c1:cc:d0:11:af:da:14:c9:f9:19:e1: 54:1e:20:b0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA8YwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjdGQzIxMTAvBgNVBAUTKDczQkEyMUJFMzZERERGRDU4NjkwMTE2RDZFRUM3QkRD N0VGRUZCMjgwHhcNMjUwODA5MDEyNTUyWhcNMjUwODE2MDEyNTUyWjAYMRYwFAYD VQQDEw02ODk2YTNhMS0zZWQ5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5g29y3UFPl77sdjAFUbtzIFhiPmh4HxPb4JfVAm8+4+lofxucwEeIUXIH5pu lvftO+17K6mPyAEX9CxSCTE9ZxuxvLrZvVMe8JDbVwMM4hap/HYiIAW+moJo0nWe Ih9so36YeQ6iGcTxaYkL6ZTWs2QxyQLECtjpXKVVKO9GOLBBWOgEgUVQKq2TOHxi cLB4mRp8I0jBmHL4lTz+ijTIfU+0UBQ0aMzxuFicaqdReIham0fTsY9l9cUpVaTT WiHEfD/FFaNaVj1VpuUJbsHR6aGMInq4D0aK49pGEH16RjE8WRQvAKk2Cu8tRUTP GZoABcEPnUlpFlVuHzT4MGbJ0wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFD7plgwd /NLWDsutfkFLUxiY4H4WMB8GA1UdIwQYMBaAFHO6Ib423d/VhpARbW7se9x+/vso MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyN0ZDMi81RTMwQkY3MEJC QTYxMUVDQkFGNDMxNTZDNEY5QUUwMi9jN29odmpiZDM5V0drQkZ0YnV4NzNINy0t eWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2M3b2h2amJkMzlXR2tCRnRidXg3M0g3LS15Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy N0ZDMi81RTMwQkY3MEJCQTYxMUVDQkFGNDMxNTZDNEY5QUUwMi9jN29odmpiZDM5 V0drQkZ0YnV4NzNINy0teWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAgQUR9WhYf5ZOJQFf/bEb7c9tLu7S+P2OdPqeffw/jXFrC8DXP1lV+ nT3ATHRznjdTTm2+TIAMGXUf6CnTiHcWWHo/nzCMOYDmQY1pF49vqhGRgp+ln4mH wdFBBMvZBpHB6jsgT0/1Qg11miExnfP4dW+P7t40FdiiLIEfF4PP9eAxcL7c75iN 3rncNQT464d1J23CkG+4EPVbZiQjWjwuJoHpqLKLfmprCFQw8MRViCzQoMcZB+FN DIT1KF3TxTEXN6A8ldvMkkf6eDOoKIQkSb+2u3xMtQBCOljpOu3yMYBbmFcZU2H/ Q7vjZLoHC915wczQEa/aFMn5GeFUHiCw -----END CERTIFICATE-----Generated at Sat Aug 9 23:09:38 2025 by rpki-client