$ rpki-client -vvf rpki.apnic.net/member_repository/A9146944/43BD1C6E8E9511EAA9D73A2EC4F9AE02/7R-VjLYEtXboIhS0zzzA_mIO-fQ.mft File: 7R-VjLYEtXboIhS0zzzA_mIO-fQ.mft (raw, json) Hash identifier: Q7fPrGDh2zK267JTOha4ls17S2lGftHQ76xQnbpIarw= Subject key identifier: A7:DD:01:FB:89:63:7D:7E:AF:49:C9:A9:9A:F4:A6:21:5E:D0:BA:7D Authority key identifier: ED:1F:95:8C:B6:04:B5:76:E8:22:14:B4:CF:3C:C0:FE:62:0E:F9:F4 Certificate issuer: /CN=A9146944/serialNumber=ED1F958CB604B576E82214B4CF3CC0FE620EF9F4 Certificate serial: 0A21 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7R-VjLYEtXboIhS0zzzA_mIO-fQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9146944/43BD1C6E8E9511EAA9D73A2EC4F9AE02/7R-VjLYEtXboIhS0zzzA_mIO-fQ.mft Manifest number: 09E6 Signing time: Sun 10 Aug 2025 20:03:15 +0000 Manifest this update: Sun 10 Aug 2025 20:03:14 +0000 Manifest next update: Sun 17 Aug 2025 20:03:14 +0000 Files and hashes: 1: 7R-VjLYEtXboIhS0zzzA_mIO-fQ.crl (hash: G+DDNoc9vdjJSR7AbdmZ83TZrMpwoEkssM4tOnPCCro=) 2: D411F96C532E11EFB0B63E60C4F9AE02.roa (hash: jzzWgD3HRpvAEJBXK/vfne+ihxsbOdjQU7WB0KMRVgw=) 3: 0A627D5653AD11EF94BC7F0BC4F9AE02.roa (hash: ZT22vRI1IQ1BmtH9ALydP3ilyhXOSnuc69Bf2IwyKlI=) 4: A2120E06FD7F11EFA8C89755C4F9AE02.roa (hash: 2Hvw21rvCVCh8S0/7oApM9oB0Qgb7ulGPIHYlQU89cU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9146944/43BD1C6E8E9511EAA9D73A2EC4F9AE02/7R-VjLYEtXboIhS0zzzA_mIO-fQ.crl rsync://rpki.apnic.net/member_repository/A9146944/43BD1C6E8E9511EAA9D73A2EC4F9AE02/7R-VjLYEtXboIhS0zzzA_mIO-fQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7R-VjLYEtXboIhS0zzzA_mIO-fQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2593 (0xa21) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9146944, serialNumber=ED1F958CB604B576E82214B4CF3CC0FE620EF9F4 Validity Not Before: Aug 10 20:03:14 2025 GMT Not After : Aug 17 20:03:14 2025 GMT Subject: CN=6898fb03-44ec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:d2:26:fc:4c:42:8f:8b:5d:61:4d:23:4e:6d: d8:96:d0:9f:53:0e:ed:91:49:cf:4c:3f:71:fa:1a: d5:88:65:2e:3e:10:4e:08:34:46:bb:a7:8b:7f:a9: c5:80:94:95:70:80:5f:3a:a6:c8:d3:87:11:8d:f2: d2:2e:b7:12:9e:22:53:a4:06:4a:e8:f4:0e:c6:da: cf:f3:be:9f:48:5e:31:5c:71:b7:6a:f0:c7:87:64: f9:44:f9:89:fc:ab:0f:39:4a:0e:76:8b:ab:5a:ab: d2:c7:e3:0e:fe:0d:7a:1e:a5:99:5d:b1:29:02:a7: c9:a2:21:db:db:12:d2:2c:24:75:8b:83:cc:f0:6e: d7:21:76:a9:00:67:2e:ad:9d:e7:d6:56:79:17:0c: 59:9e:59:20:55:e0:fa:ec:67:7a:37:6c:d0:44:99: 46:9d:b9:ee:93:4d:e5:af:15:7e:62:d7:02:58:b1: 4a:7a:77:4d:e0:75:6e:7a:b5:e8:35:4c:d5:69:0e: 8e:22:4c:0b:58:4c:75:b2:cf:41:e0:9b:d6:2f:63: c0:a9:51:89:ee:97:5f:8c:dc:9b:bb:48:f1:9c:49: 07:45:8e:93:fd:6f:8f:f8:be:e6:68:7b:12:e2:fe: fb:7e:e9:fd:0b:4b:5a:40:32:70:21:07:d7:b8:f1: c1:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:DD:01:FB:89:63:7D:7E:AF:49:C9:A9:9A:F4:A6:21:5E:D0:BA:7D X509v3 Authority Key Identifier: keyid:ED:1F:95:8C:B6:04:B5:76:E8:22:14:B4:CF:3C:C0:FE:62:0E:F9:F4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9146944/43BD1C6E8E9511EAA9D73A2EC4F9AE02/7R-VjLYEtXboIhS0zzzA_mIO-fQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7R-VjLYEtXboIhS0zzzA_mIO-fQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9146944/43BD1C6E8E9511EAA9D73A2EC4F9AE02/7R-VjLYEtXboIhS0zzzA_mIO-fQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3a:96:cb:67:bb:56:11:65:1b:85:8e:d9:6f:37:19:61:5a:f8: 61:c7:a2:90:dd:f1:f3:56:37:52:74:23:7b:ac:e9:32:e1:b3: 14:2c:b2:58:7a:76:49:77:d1:82:5a:2f:af:b1:7a:a2:3d:c6: 59:64:89:a0:bb:5e:cc:f9:10:af:c6:3f:bf:81:85:42:4a:2e: 18:28:77:3a:64:42:87:c6:e5:6b:76:9a:7f:5f:79:d1:4a:f7: e6:df:4a:a2:f7:e2:9b:dd:13:bb:b5:e9:c5:f8:16:06:eb:a3: f1:10:30:75:f6:fc:70:c4:d0:f6:2a:33:50:c3:ca:4d:8f:96: 7f:d3:f6:cc:0e:8b:65:e9:4e:5e:e3:4e:7e:68:23:a8:e4:b3: 53:f2:98:2f:1e:22:bd:58:fb:d5:a1:5c:d5:1c:6b:20:af:68: 2b:9b:67:70:95:ae:65:21:e6:da:93:95:f4:cb:5c:63:d6:a4: 2f:f0:35:e1:fd:06:5d:07:39:c1:07:81:24:6c:60:9c:e5:81: 94:96:47:af:21:8c:7e:7d:42:8c:83:38:d5:b1:fc:8b:da:cc: 67:9c:0b:5e:6c:9c:4c:e8:de:bc:00:93:ba:9a:3a:3e:c6:aa: 1f:b3:cc:1f:94:04:fa:ea:24:c3:bd:6c:f6:24:f8:54:f6:bb: de:4d:cc:e2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCiEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDY5NDQxMTAvBgNVBAUTKEVEMUY5NThDQjYwNEI1NzZFODIyMTRCNENGM0NDMEZF NjIwRUY5RjQwHhcNMjUwODEwMjAwMzE0WhcNMjUwODE3MjAwMzE0WjAYMRYwFAYD VQQDEw02ODk4ZmIwMy00NGVjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAo9Im/ExCj4tdYU0jTm3YltCfUw7tkUnPTD9x+hrViGUuPhBOCDRGu6eLf6nF gJSVcIBfOqbI04cRjfLSLrcSniJTpAZK6PQOxtrP876fSF4xXHG3avDHh2T5RPmJ /KsPOUoOdourWqvSx+MO/g16HqWZXbEpAqfJoiHb2xLSLCR1i4PM8G7XIXapAGcu rZ3n1lZ5FwxZnlkgVeD67Gd6N2zQRJlGnbnuk03lrxV+YtcCWLFKendN4HVuerXo NUzVaQ6OIkwLWEx1ss9B4JvWL2PAqVGJ7pdfjNybu0jxnEkHRY6T/W+P+L7maHsS 4v77fun9C0taQDJwIQfXuPHBywIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKfdAfuJ Y31+r0nJqZr0piFe0Lp9MB8GA1UdIwQYMBaAFO0flYy2BLV26CIUtM88wP5iDvn0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0Njk0NC80M0JEMUM2RThF OTUxMUVBQTlENzNBMkVDNEY5QUUwMi83Ui1WakxZRXRYYm9JaFMwenp6QV9tSU8t ZlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzdSLVZqTFlFdFhib0loUzB6enpBX21JTy1mUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 Njk0NC80M0JEMUM2RThFOTUxMUVBQTlENzNBMkVDNEY5QUUwMi83Ui1WakxZRXRY Ym9JaFMwenp6QV9tSU8tZlEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA6lstnu1YRZRuFjtlvNxlhWvhhx6KQ3fHzVjdSdCN7rOky4bMULLJY enZJd9GCWi+vsXqiPcZZZImgu17M+RCvxj+/gYVCSi4YKHc6ZEKHxuVrdpp/X3nR Svfm30qi9+Kb3RO7tenF+BYG66PxEDB19vxwxND2KjNQw8pNj5Z/0/bMDotl6U5e 405+aCOo5LNT8pgvHiK9WPvVoVzVHGsgr2grm2dwla5lIebak5X0y1xj1qQv8DXh /QZdBznBB4EkbGCc5YGUlkevIYx+fUKMgzjVsfyL2sxnnAtebJxM6N68AJO6mjo+ xqofs8wflAT66iTDvWz2JPhU9rveTczi -----END CERTIFICATE-----Generated at Mon Aug 11 10:45:24 2025 by rpki-client