$ rpki-client -vvf rpki.apnic.net/member_repository/A9126A3C/7BFB4CACC6A011EF928B7960C4F9AE02/7oGaSbjIqEQT7o_oMm7xN_UYXGY.mft File: 7oGaSbjIqEQT7o_oMm7xN_UYXGY.mft (raw, json) Hash identifier: Y1NdNDmCH4tgn3MeTA9O6esgYIhlb2t6roZfMmovgGQ= Subject key identifier: ED:9D:3A:7F:22:59:AF:A0:42:9F:D8:DA:7F:D9:DB:99:6F:EB:86:EA Authority key identifier: EE:81:9A:49:B8:C8:A8:44:13:EE:8F:E8:32:6E:F1:37:F5:18:5C:66 Certificate issuer: /CN=A9126A3C/serialNumber=EE819A49B8C8A84413EE8FE8326EF137F5185C66 Certificate serial: 6F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7oGaSbjIqEQT7o_oMm7xN_UYXGY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9126A3C/7BFB4CACC6A011EF928B7960C4F9AE02/7oGaSbjIqEQT7o_oMm7xN_UYXGY.mft Manifest number: 6C Signing time: Wed 23 Jul 2025 07:17:05 +0000 Manifest this update: Wed 23 Jul 2025 07:17:04 +0000 Manifest next update: Wed 30 Jul 2025 07:17:04 +0000 Files and hashes: 1: 7oGaSbjIqEQT7o_oMm7xN_UYXGY.crl (hash: HJW2nxTKV9peG1NxZPV/ntTUt/pXVrMEE+aNdU7LbL8=) 2: 16E1C8ECC6DB11EFBDDB8A0AC4F9AE02.roa (hash: NFkplWmsMA3dKF672WmukIl9RpnNjHUYN1V/j7l+GN0=) 3: E11BD76CC6D911EF8CC3C849C4F9AE02.roa (hash: FPrJ8rYYz3zXm+ulxONvcKZWR1V8127XQSJ/4rwqktA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9126A3C/7BFB4CACC6A011EF928B7960C4F9AE02/7oGaSbjIqEQT7o_oMm7xN_UYXGY.crl rsync://rpki.apnic.net/member_repository/A9126A3C/7BFB4CACC6A011EF928B7960C4F9AE02/7oGaSbjIqEQT7o_oMm7xN_UYXGY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7oGaSbjIqEQT7o_oMm7xN_UYXGY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 30 Jul 2025 07:17:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 111 (0x6f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9126A3C, serialNumber=EE819A49B8C8A84413EE8FE8326EF137F5185C66 Validity Not Before: Jul 23 07:17:04 2025 GMT Not After : Jul 30 07:17:04 2025 GMT Subject: CN=68808c70-1211 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:cf:f0:4d:64:7c:8c:df:4d:a1:fa:15:cd:97: 61:5d:ec:04:4c:76:46:76:db:24:93:4d:65:61:7a: 91:ce:3b:d1:18:70:f9:a8:17:7c:7e:0d:13:80:a9: 5f:68:00:47:44:11:82:5a:c6:6a:cd:4e:41:63:c2: ac:07:c9:90:a7:75:d4:71:91:aa:94:55:04:66:1c: 8b:3b:12:52:ce:38:a7:1b:9e:e5:ce:76:77:ba:f9: a6:61:e9:1c:dd:a5:3a:a7:c3:d0:85:66:9c:ef:fa: ae:b5:a2:79:82:76:48:a4:3d:ee:e5:de:7e:6c:90: ad:2a:c6:99:f1:63:0e:b1:82:78:47:1a:8e:ac:4f: d6:28:df:05:4f:0d:26:a4:c4:cb:f2:8e:46:21:b5: e1:35:cc:03:47:d5:2e:3b:59:96:f6:67:74:59:9f: 5c:09:91:08:e1:f0:2f:24:56:28:d2:65:2f:84:a3: c3:02:ee:1a:b8:9a:bc:37:67:10:9a:c1:0e:a6:da: 88:f6:83:e8:16:9f:c2:27:05:61:9c:cb:74:b8:52: a6:66:12:cc:4c:90:3b:d3:cd:4e:36:75:d0:0b:f8: 94:bc:03:37:9f:e5:f3:42:53:9b:32:91:ae:4c:f9: 28:1f:2b:e1:b7:de:72:b9:b7:ba:79:f2:7f:7a:71: eb:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:9D:3A:7F:22:59:AF:A0:42:9F:D8:DA:7F:D9:DB:99:6F:EB:86:EA X509v3 Authority Key Identifier: keyid:EE:81:9A:49:B8:C8:A8:44:13:EE:8F:E8:32:6E:F1:37:F5:18:5C:66 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9126A3C/7BFB4CACC6A011EF928B7960C4F9AE02/7oGaSbjIqEQT7o_oMm7xN_UYXGY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7oGaSbjIqEQT7o_oMm7xN_UYXGY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9126A3C/7BFB4CACC6A011EF928B7960C4F9AE02/7oGaSbjIqEQT7o_oMm7xN_UYXGY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 47:73:3b:96:50:c1:20:78:c5:52:0e:cf:76:bd:fd:b7:db:f9: 84:43:f7:e2:8e:c8:54:1b:ac:80:0d:92:f7:40:f7:4e:80:26: a1:76:9b:a7:b1:63:57:3a:33:79:fb:f3:2b:00:7d:07:fc:66: a0:c6:89:0f:23:15:64:c1:53:21:27:2c:61:b2:98:e0:74:2c: 4d:21:c8:29:d8:cb:f8:db:be:b7:d5:78:14:1d:6a:b5:93:26: 71:d7:9c:68:7f:9c:ab:e4:5e:0c:a1:d3:3f:60:84:ce:9b:40: d2:16:f4:b6:d6:7e:d9:9f:46:6d:82:f7:bb:e6:1d:fb:fd:ba: a8:fc:60:bb:b7:95:48:5b:63:90:d3:a6:1c:c3:4c:a3:6c:2e: 24:dc:b8:fb:1b:24:6d:62:2e:cc:bb:34:6a:6f:93:4a:87:a6: e4:cc:5e:4b:ba:d0:a7:08:c1:e3:9e:b0:bb:b1:d2:99:8e:cb: 91:6e:00:47:ca:a0:dc:55:24:1a:cd:f7:79:be:78:7a:d2:69: 06:30:67:31:84:69:5c:22:80:b7:70:f3:46:4e:28:76:b2:1b: 81:68:d5:b7:e2:44:18:08:17:41:39:61:6b:02:9c:71:86:c0: f1:45:70:13:af:d5:08:48:bc:02:c1:10:6a:e3:be:b8:87:df: 10:a4:c5:bd -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBbzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEy NkEzQzExMC8GA1UEBRMoRUU4MTlBNDlCOEM4QTg0NDEzRUU4RkU4MzI2RUYxMzdG NTE4NUM2NjAeFw0yNTA3MjMwNzE3MDRaFw0yNTA3MzAwNzE3MDRaMBgxFjAUBgNV BAMTDTY4ODA4YzcwLTEyMTEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDDz/BNZHyM302h+hXNl2Fd7ARMdkZ22ySTTWVhepHOO9EYcPmoF3x+DROAqV9o AEdEEYJaxmrNTkFjwqwHyZCnddRxkaqUVQRmHIs7ElLOOKcbnuXOdne6+aZh6Rzd pTqnw9CFZpzv+q61onmCdkikPe7l3n5skK0qxpnxYw6xgnhHGo6sT9Yo3wVPDSak xMvyjkYhteE1zANH1S47WZb2Z3RZn1wJkQjh8C8kVijSZS+Eo8MC7hq4mrw3ZxCa wQ6m2oj2g+gWn8InBWGcy3S4UqZmEsxMkDvTzU42ddAL+JS8Azef5fNCU5syka5M +SgfK+G33nK5t7p58n96cevtAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU7Z06fyJZ r6BCn9jaf9nbmW/rhuowHwYDVR0jBBgwFoAU7oGaSbjIqEQT7o/oMm7xN/UYXGYw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTI2QTNDLzdCRkI0Q0FDQzZB MDExRUY5MjhCNzk2MEM0RjlBRTAyLzdvR2FTYmpJcUVRVDdvX29NbTd4Tl9VWVhH WS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvN29HYVNiaklxRVFUN29fb01tN3hOX1VZWEdZLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTI2 QTNDLzdCRkI0Q0FDQzZBMDExRUY5MjhCNzk2MEM0RjlBRTAyLzdvR2FTYmpJcUVR VDdvX29NbTd4Tl9VWVhHWS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAEdzO5ZQwSB4xVIOz3a9/bfb+YRD9+KOyFQbrIANkvdA906AJqF2m6ex Y1c6M3n78ysAfQf8ZqDGiQ8jFWTBUyEnLGGymOB0LE0hyCnYy/jbvrfVeBQdarWT JnHXnGh/nKvkXgyh0z9ghM6bQNIW9LbWftmfRm2C97vmHfv9uqj8YLu3lUhbY5DT phzDTKNsLiTcuPsbJG1iLsy7NGpvk0qHpuTMXku60KcIweOesLux0pmOy5FuAEfK oNxVJBrN93m+eHrSaQYwZzGEaVwigLdw80ZOKHayG4Fo1bfiRBgIF0E5YWsCnHGG wPFFcBOv1QhIvALBEGrjvriH3xCkxb0= -----END CERTIFICATE-----Generated at Wed Jul 23 18:12:44 2025 by rpki-client