$ rpki-client -vvf rpki.apnic.net/member_repository/A9132B7A/06A19602644D11EE84D4034FC4F9AE02/h7_uyP-fsmiAINtZpiLBOhXlryA.mft File: h7_uyP-fsmiAINtZpiLBOhXlryA.mft (raw, json) Hash identifier: n5Hqo85dTJcnDuKjttuXg6q7/e5Amnf19+X+aAzB1Og= Subject key identifier: 7E:7E:53:D8:54:B0:CB:4F:E8:BF:25:C5:73:68:01:6D:DD:D0:42:BC Authority key identifier: 87:BF:EE:C8:FF:9F:B2:68:80:20:DB:59:A6:22:C1:3A:15:E5:AF:20 Certificate issuer: /CN=A9132B7A/serialNumber=87BFEEC8FF9FB2688020DB59A622C13A15E5AF20 Certificate serial: 0168 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h7_uyP-fsmiAINtZpiLBOhXlryA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9132B7A/06A19602644D11EE84D4034FC4F9AE02/h7_uyP-fsmiAINtZpiLBOhXlryA.mft Manifest number: 0161 Signing time: Sat 09 Aug 2025 04:27:35 +0000 Manifest this update: Sat 09 Aug 2025 04:27:34 +0000 Manifest next update: Sat 16 Aug 2025 04:27:34 +0000 Files and hashes: 1: h7_uyP-fsmiAINtZpiLBOhXlryA.crl (hash: lamH8BdpsDo8tk1KZ7TMi4boC1kxfp2yYWSf4/OrdQU=) 2: 28382F96644E11EEA1DCB653C4F9AE02.roa (hash: tkC94LIcazFbktBOOWxjViOTNkAmC8Zs4gf9iesOvuI=) 3: 81D3CB186B7D11F0A482004CC4F9AE02.roa (hash: UKKopt0iwOreSp0uNtTtDqHFVLkM2EYVL8idxsWUjB0=) 4: ADB02E5C5CB411F0BE8D2465C4F9AE02.roa (hash: OcNbuxa2ZSSG1bMP1PQ4GkM3WfcX4kd/s4GUQn4/jaI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9132B7A/06A19602644D11EE84D4034FC4F9AE02/h7_uyP-fsmiAINtZpiLBOhXlryA.crl rsync://rpki.apnic.net/member_repository/A9132B7A/06A19602644D11EE84D4034FC4F9AE02/h7_uyP-fsmiAINtZpiLBOhXlryA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h7_uyP-fsmiAINtZpiLBOhXlryA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 360 (0x168) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9132B7A, serialNumber=87BFEEC8FF9FB2688020DB59A622C13A15E5AF20 Validity Not Before: Aug 9 04:27:34 2025 GMT Not After : Aug 16 04:27:34 2025 GMT Subject: CN=6896ce36-3d2a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:45:c5:31:d8:b1:76:5e:85:b9:de:6f:b4:de: 03:d6:5a:b2:10:a7:10:4b:88:5d:a1:e2:5d:90:59: c7:f2:ab:6a:ac:76:b0:03:e3:c3:a9:59:da:7d:1e: 26:a6:c5:1e:82:a3:48:a9:7c:b4:73:97:f6:e1:ea: 9c:95:d0:e9:ca:d1:38:92:d1:2a:c1:25:b7:f2:4d: 65:94:e4:12:47:0a:53:9b:91:c1:f2:24:06:9f:5b: 07:8f:b4:15:e8:69:4b:d4:24:75:75:cd:74:c4:19: 1b:9c:67:6c:73:31:68:86:db:85:e6:7a:89:e8:7f: c4:e6:42:4b:fa:59:1c:08:4b:48:7b:98:22:ad:06: 50:c1:5a:2e:85:8a:f1:99:79:c5:e4:bb:e8:bf:8d: c7:00:5d:1c:bb:cf:d2:94:47:5a:e6:ed:08:90:5c: 25:a9:78:59:5b:ce:91:26:f8:e6:e6:d2:a0:07:ff: c0:b0:c0:94:64:21:2e:10:cc:3a:1d:12:74:0b:99: a5:a5:75:f7:d5:6d:54:cd:73:22:9e:e5:e1:ac:70: 50:5b:c2:f2:58:88:1c:9b:d6:22:e9:5b:02:1e:5d: 51:d1:03:eb:9a:5f:c0:f9:cc:da:8d:7d:42:10:cf: 36:72:f7:4a:aa:70:e2:ba:5d:0e:c2:71:cc:fc:f9: 7d:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:7E:53:D8:54:B0:CB:4F:E8:BF:25:C5:73:68:01:6D:DD:D0:42:BC X509v3 Authority Key Identifier: keyid:87:BF:EE:C8:FF:9F:B2:68:80:20:DB:59:A6:22:C1:3A:15:E5:AF:20 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9132B7A/06A19602644D11EE84D4034FC4F9AE02/h7_uyP-fsmiAINtZpiLBOhXlryA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h7_uyP-fsmiAINtZpiLBOhXlryA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9132B7A/06A19602644D11EE84D4034FC4F9AE02/h7_uyP-fsmiAINtZpiLBOhXlryA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1a:fe:28:60:20:97:10:75:bd:2b:bf:69:14:62:88:04:9e:7b: 2e:f6:64:f2:66:af:28:63:e5:d1:24:18:c5:e4:80:2c:b8:0b: c3:a2:db:16:73:63:c8:df:25:32:2f:2c:5f:b5:fa:d4:c1:b7: 79:19:6c:9f:a9:98:fd:3c:c1:38:f8:7e:1d:87:21:72:ac:26: 2a:9b:f7:e1:2d:b1:f4:ee:6b:20:c5:74:a2:a5:51:4d:9a:df: 0c:eb:0f:c9:5d:4f:dd:17:f1:4f:c4:24:45:56:f7:90:53:3f: 05:98:4a:08:fe:0f:71:11:9f:43:55:db:9c:09:a8:60:3e:40: c4:77:4c:5e:b1:dd:4b:ca:15:df:49:3c:6a:b5:84:66:3f:66: e1:6a:1f:d9:f9:29:23:48:d6:a3:e7:54:08:1f:44:10:34:22: f3:e6:e5:4c:cc:cf:45:61:c7:f8:d7:fb:1b:2e:9f:9f:28:23: c2:b4:10:73:24:35:75:04:ab:2f:ed:74:6e:61:12:b2:99:e5: 99:01:55:74:1c:c9:a9:bb:9f:9c:15:12:4b:e0:2b:5c:2b:c0: 85:82:40:6d:8b:42:ed:74:e8:c4:69:79:b4:49:4b:c4:1d:66: 81:df:1e:ea:71:21:7c:1a:d6:cc:9a:b6:51:a5:bb:de:a1:ef: ae:9e:eb:38 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAWgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzJCN0ExMTAvBgNVBAUTKDg3QkZFRUM4RkY5RkIyNjg4MDIwREI1OUE2MjJDMTNB MTVFNUFGMjAwHhcNMjUwODA5MDQyNzM0WhcNMjUwODE2MDQyNzM0WjAYMRYwFAYD VQQDEw02ODk2Y2UzNi0zZDJhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA20XFMdixdl6Fud5vtN4D1lqyEKcQS4hdoeJdkFnH8qtqrHawA+PDqVnafR4m psUegqNIqXy0c5f24eqcldDpytE4ktEqwSW38k1llOQSRwpTm5HB8iQGn1sHj7QV 6GlL1CR1dc10xBkbnGdsczFohtuF5nqJ6H/E5kJL+lkcCEtIe5girQZQwVouhYrx mXnF5Lvov43HAF0cu8/SlEda5u0IkFwlqXhZW86RJvjm5tKgB//AsMCUZCEuEMw6 HRJ0C5mlpXX31W1UzXMinuXhrHBQW8LyWIgcm9Yi6VsCHl1R0QPrml/A+czajX1C EM82cvdKqnDiul0OwnHM/Pl9hwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFH5+U9hU sMtP6L8lxXNoAW3d0EK8MB8GA1UdIwQYMBaAFIe/7sj/n7JogCDbWaYiwToV5a8g MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMkI3QS8wNkExOTYwMjY0 NEQxMUVFODRENDAzNEZDNEY5QUUwMi9oN191eVAtZnNtaUFJTnRacGlMQk9oWGxy eUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2g3X3V5UC1mc21pQUlOdFpwaUxCT2hYbHJ5QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MkI3QS8wNkExOTYwMjY0NEQxMUVFODRENDAzNEZDNEY5QUUwMi9oN191eVAtZnNt aUFJTnRacGlMQk9oWGxyeUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAa/ihgIJcQdb0rv2kUYogEnnsu9mTyZq8oY+XRJBjF5IAsuAvDotsW c2PI3yUyLyxftfrUwbd5GWyfqZj9PME4+H4dhyFyrCYqm/fhLbH07msgxXSipVFN mt8M6w/JXU/dF/FPxCRFVveQUz8FmEoI/g9xEZ9DVducCahgPkDEd0xesd1LyhXf STxqtYRmP2bhah/Z+SkjSNaj51QIH0QQNCLz5uVMzM9FYcf41/sbLp+fKCPCtBBz JDV1BKsv7XRuYRKymeWZAVV0HMmpu5+cFRJL4CtcK8CFgkBti0LtdOjEaXm0SUvE HWaB3x7qcSF8GtbMmrZRpbveoe+unus4 -----END CERTIFICATE-----Generated at Sun Aug 10 05:42:17 2025 by rpki-client