$ rpki-client -vvf rpki.apnic.net/member_repository/A9195AA2/1FE357D406C511EA888ED919C4F9AE02/c7-jegclQ-L9dR5OBQw603ABDFk.mft File: c7-jegclQ-L9dR5OBQw603ABDFk.mft (raw, json) Hash identifier: rULNBdyyaWTTBjlDZzbkGLvyKiPICGpoT+MXpcJfYSo= Subject key identifier: A4:F0:7C:55:FA:A1:7E:12:E6:3B:05:A7:48:20:EA:FB:5A:5D:7B:5B Authority key identifier: 73:BF:A3:7A:07:25:43:E2:FD:75:1E:4E:05:0C:3A:D3:70:01:0C:59 Certificate issuer: /CN=A9195AA2/serialNumber=73BFA37A072543E2FD751E4E050C3AD370010C59 Certificate serial: 0809 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c7-jegclQ-L9dR5OBQw603ABDFk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9195AA2/1FE357D406C511EA888ED919C4F9AE02/c7-jegclQ-L9dR5OBQw603ABDFk.mft Manifest number: 1456 Signing time: Wed 06 Aug 2025 18:37:39 +0000 Manifest this update: Wed 06 Aug 2025 18:37:38 +0000 Manifest next update: Wed 13 Aug 2025 18:37:38 +0000 Files and hashes: 1: c7-jegclQ-L9dR5OBQw603ABDFk.crl (hash: 40Q5DUMFbXgM+ZUcpBk8T8AfEbZ8kuJi+eslXdkISwg=) 2: 9839F630765111EDA744AE3AC4F9AE02.roa (hash: Wy656K9y8HRrMZ3s/WXbZct5wLSLzkShWRKdtdLgnAI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9195AA2/1FE357D406C511EA888ED919C4F9AE02/c7-jegclQ-L9dR5OBQw603ABDFk.crl rsync://rpki.apnic.net/member_repository/A9195AA2/1FE357D406C511EA888ED919C4F9AE02/c7-jegclQ-L9dR5OBQw603ABDFk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c7-jegclQ-L9dR5OBQw603ABDFk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 Aug 2025 18:37:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2057 (0x809) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9195AA2, serialNumber=73BFA37A072543E2FD751E4E050C3AD370010C59 Validity Not Before: Aug 6 18:37:38 2025 GMT Not After : Aug 13 18:37:38 2025 GMT Subject: CN=6893a0f2-504a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:1b:ce:f5:fd:54:3e:23:e2:c2:f3:1e:61:8a: 58:9b:22:80:e6:7c:e6:ef:97:58:d2:12:d3:52:e5: 49:97:14:50:54:12:7b:bd:6a:e3:7e:b2:6c:8f:03: 50:0d:05:cd:4f:ad:8e:a4:51:54:f3:8b:05:e5:87: 30:bb:c4:7b:26:51:5b:13:35:6a:93:8d:e0:df:3e: 6c:bd:7e:b4:96:b7:9d:92:7d:58:5c:7e:cd:60:cd: d6:37:e8:be:ae:2e:b0:79:a6:b0:b0:05:ab:c2:cc: 87:dd:4c:10:6a:e1:65:33:fc:4b:1c:3b:37:3e:54: 71:9a:55:9d:7b:c6:64:1b:cf:1f:61:9d:98:5e:25: f4:20:74:71:2b:8e:46:00:f4:db:9a:1f:45:46:b6: 29:2c:66:49:9b:24:a5:80:56:ed:af:54:62:75:ce: 07:55:be:06:04:bd:b4:4e:2d:46:91:f7:87:48:a9: 49:62:11:c3:ec:4b:97:5f:01:24:8c:63:c1:9e:32: 1a:7c:fe:3a:ef:ef:50:77:77:4b:94:dc:de:51:9e: 7c:db:9d:9f:87:fe:46:98:62:a4:03:44:02:3d:86: 52:a4:c2:ac:24:16:1a:34:fb:6b:7d:c8:04:96:9a: be:13:1f:50:48:c3:5d:db:8e:8b:c3:16:e3:a7:1d: cc:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:F0:7C:55:FA:A1:7E:12:E6:3B:05:A7:48:20:EA:FB:5A:5D:7B:5B X509v3 Authority Key Identifier: keyid:73:BF:A3:7A:07:25:43:E2:FD:75:1E:4E:05:0C:3A:D3:70:01:0C:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9195AA2/1FE357D406C511EA888ED919C4F9AE02/c7-jegclQ-L9dR5OBQw603ABDFk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c7-jegclQ-L9dR5OBQw603ABDFk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9195AA2/1FE357D406C511EA888ED919C4F9AE02/c7-jegclQ-L9dR5OBQw603ABDFk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 30:e5:01:57:3b:f2:fe:b4:37:c5:c7:99:63:59:c6:ed:1b:d3: 02:0d:63:de:3d:c8:b8:a6:fc:31:99:64:8d:4d:84:37:35:d6: ea:1f:69:ec:7f:04:9e:26:b0:fa:bd:26:1f:69:b4:4b:6a:ef: 58:ee:b5:2a:05:87:59:2b:eb:ae:93:11:54:b4:72:af:bb:36: 3c:d8:97:d2:be:f2:31:db:65:51:71:3c:15:98:b1:3b:cd:bc: 8b:02:b2:fd:77:f3:a1:1a:37:a2:13:4a:f9:3a:1c:6d:62:78: 48:76:53:38:25:dd:aa:16:24:a2:20:98:55:a8:d9:55:73:a0: b8:d0:8f:93:c3:08:cd:e4:4c:e9:ef:5e:fc:17:d2:12:72:77: 58:22:78:11:26:2e:0a:c4:a4:0f:9b:1a:c1:71:9f:24:89:09: f6:e9:12:c0:16:3b:76:81:cb:40:00:e4:dc:dd:34:2b:52:98: 25:65:ab:29:f4:b2:46:db:03:45:4d:d9:e6:2e:c8:f2:72:d6: 41:1b:0c:3b:34:91:62:b7:70:80:2a:5e:b9:16:25:d0:cb:d0: fa:ba:60:03:55:16:cf:1e:1a:d6:38:d1:15:be:99:85:42:83: 57:a8:48:f3:2b:2c:c2:a3:d0:e1:67:95:1a:c4:99:30:32:a7: f0:47:23:93 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCAkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTVBQTIxMTAvBgNVBAUTKDczQkZBMzdBMDcyNTQzRTJGRDc1MUU0RTA1MEMzQUQz NzAwMTBDNTkwHhcNMjUwODA2MTgzNzM4WhcNMjUwODEzMTgzNzM4WjAYMRYwFAYD VQQDEw02ODkzYTBmMi01MDRhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtRvO9f1UPiPiwvMeYYpYmyKA5nzm75dY0hLTUuVJlxRQVBJ7vWrjfrJsjwNQ DQXNT62OpFFU84sF5Ycwu8R7JlFbEzVqk43g3z5svX60lredkn1YXH7NYM3WN+i+ ri6weaawsAWrwsyH3UwQauFlM/xLHDs3PlRxmlWde8ZkG88fYZ2YXiX0IHRxK45G APTbmh9FRrYpLGZJmySlgFbtr1Ridc4HVb4GBL20Ti1GkfeHSKlJYhHD7EuXXwEk jGPBnjIafP467+9Qd3dLlNzeUZ58252fh/5GmGKkA0QCPYZSpMKsJBYaNPtrfcgE lpq+Ex9QSMNd246Lwxbjpx3MEQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKTwfFX6 oX4S5jsFp0gg6vtaXXtbMB8GA1UdIwQYMBaAFHO/o3oHJUPi/XUeTgUMOtNwAQxZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NUFBMi8xRkUzNTdENDA2 QzUxMUVBODg4RUQ5MTlDNEY5QUUwMi9jNy1qZWdjbFEtTDlkUjVPQlF3NjAzQUJE RmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2M3LWplZ2NsUS1MOWRSNU9CUXc2MDNBQkRGay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NUFBMi8xRkUzNTdENDA2QzUxMUVBODg4RUQ5MTlDNEY5QUUwMi9jNy1qZWdjbFEt TDlkUjVPQlF3NjAzQUJERmsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAw5QFXO/L+tDfFx5ljWcbtG9MCDWPePci4pvwxmWSNTYQ3NdbqH2ns fwSeJrD6vSYfabRLau9Y7rUqBYdZK+uukxFUtHKvuzY82JfSvvIx22VRcTwVmLE7 zbyLArL9d/OhGjeiE0r5OhxtYnhIdlM4Jd2qFiSiIJhVqNlVc6C40I+TwwjN5Ezp 7178F9IScndYIngRJi4KxKQPmxrBcZ8kiQn26RLAFjt2gctAAOTc3TQrUpglZasp 9LJG2wNFTdnmLsjyctZBGww7NJFit3CAKl65FiXQy9D6umADVRbPHhrWONEVvpmF QoNXqEjzKyzCo9DhZ5UaxJkwMqfwRyOT -----END CERTIFICATE-----Generated at Fri Aug 8 19:24:37 2025 by rpki-client