$ rpki-client -vvf rpki.apnic.net/member_repository/A9127FC2/5E30BF70BBA611ECBAF43156C4F9AE02/c7ohvjbd39WGkBFtbux73H7--yg.mft File: c7ohvjbd39WGkBFtbux73H7--yg.mft (raw, json) Hash identifier: 4789wTF3AiYHhqFjAJkkbhvoQOXSkvAtx2E3v5s8V4o= Subject key identifier: FE:41:51:3F:EB:05:50:F9:6B:2F:56:75:E3:7C:5F:96:1E:D1:0E:69 Authority key identifier: 73:BA:21:BE:36:DD:DF:D5:86:90:11:6D:6E:EC:7B:DC:7E:FE:FB:28 Certificate issuer: /CN=A9127FC2/serialNumber=73BA21BE36DDDFD58690116D6EEC7BDC7EFEFB28 Certificate serial: 03BC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c7ohvjbd39WGkBFtbux73H7--yg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9127FC2/5E30BF70BBA611ECBAF43156C4F9AE02/c7ohvjbd39WGkBFtbux73H7--yg.mft Manifest number: 0394 Signing time: Mon 21 Jul 2025 01:12:06 +0000 Manifest this update: Mon 21 Jul 2025 01:12:05 +0000 Manifest next update: Mon 28 Jul 2025 01:12:05 +0000 Files and hashes: 1: c7ohvjbd39WGkBFtbux73H7--yg.crl (hash: 8ZJNgd2+n36x/DLVjS5vb8QmaDVMhFvMFHVSYkSF5Oo=) 2: 3143DEC26C8811EEBAB7F227C4F9AE02.roa (hash: DiuzbA0Eyu2SFjBtadVHxxhq9EQIpll9WL5oTCeuzso=) 3: AA730ACCBCFA11EDAD328D3AC4F9AE02.roa (hash: JIgqJZp1UxmLPN/QpABfqnpOQUWAjrpqyosKFp6OS4Q=) 4: 63F359F0620711EE8BBCFF68C4F9AE02.roa (hash: Keth2970vjYbkSSDZ7cyyc004SjVLXN/KW/3yleZzSU=) 5: 1ABD64C4FC4B11EC9E374483C4F9AE02.roa (hash: sxadIBziqD0gGHzlLgMeF3y6MatZTVAVquFeXL0wHHA=) 6: AB95EEC4BCFA11EDAD328D3AC4F9AE02.roa (hash: yTZcvgK0CeflFtKCV7bhb3NpxPPVFQseYnOGqpYevgk=) 7: 9B39DA4A17B611F0949B3513C4F9AE02.roa (hash: JIzx72Iu5kXzy1zuPq6JcTLGHOjrjN0dOL1PQPVedEI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9127FC2/5E30BF70BBA611ECBAF43156C4F9AE02/c7ohvjbd39WGkBFtbux73H7--yg.crl rsync://rpki.apnic.net/member_repository/A9127FC2/5E30BF70BBA611ECBAF43156C4F9AE02/c7ohvjbd39WGkBFtbux73H7--yg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c7ohvjbd39WGkBFtbux73H7--yg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Jul 2025 01:12:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 956 (0x3bc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9127FC2, serialNumber=73BA21BE36DDDFD58690116D6EEC7BDC7EFEFB28 Validity Not Before: Jul 21 01:12:05 2025 GMT Not After : Jul 28 01:12:05 2025 GMT Subject: CN=687d93e6-7a94 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:79:e7:38:89:5d:d3:2c:fc:06:a9:17:e6:53: 28:97:c2:d1:50:e6:7f:1b:1d:17:16:f8:56:df:9b: 22:5c:f7:37:b0:0c:5b:7e:04:60:5a:aa:2b:8e:a8: 17:3f:6b:3a:b7:5f:53:7d:f6:ad:45:a0:74:00:6f: 94:2e:93:43:9e:67:b1:fb:c8:b8:77:9f:95:9d:99: 27:5c:8a:a3:a9:d7:bb:28:a7:b7:81:c9:89:d0:74: e9:d9:77:e0:e9:36:e6:34:7d:71:77:a6:a9:cf:89: 07:11:4e:17:52:88:4e:47:e6:31:9d:d4:da:ea:50: 6a:dd:10:b8:b8:de:ca:4a:3f:49:40:31:09:6e:09: 2b:a4:91:85:4c:69:0c:68:0b:91:84:75:1c:1a:a0: 13:e0:f6:45:b2:40:1d:0d:84:e4:80:86:f6:69:50: 25:97:71:17:d9:9d:66:b0:af:63:e9:7f:77:11:66: ea:43:c7:5c:43:2e:f0:71:56:cc:62:e2:bc:ab:53: b5:6a:3c:53:3d:9a:20:7e:f3:ef:c6:db:1f:d8:fa: d9:d8:86:af:89:c7:e8:b2:05:49:1b:3a:59:14:7f: 2a:ae:6c:cb:66:c4:d0:69:a2:de:0e:b3:3e:0c:dd: b3:19:89:50:6f:d6:a4:eb:ca:c7:1f:e5:23:87:c1: 54:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:41:51:3F:EB:05:50:F9:6B:2F:56:75:E3:7C:5F:96:1E:D1:0E:69 X509v3 Authority Key Identifier: keyid:73:BA:21:BE:36:DD:DF:D5:86:90:11:6D:6E:EC:7B:DC:7E:FE:FB:28 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9127FC2/5E30BF70BBA611ECBAF43156C4F9AE02/c7ohvjbd39WGkBFtbux73H7--yg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c7ohvjbd39WGkBFtbux73H7--yg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9127FC2/5E30BF70BBA611ECBAF43156C4F9AE02/c7ohvjbd39WGkBFtbux73H7--yg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 97:50:d1:56:f0:f4:3d:00:73:5f:fe:57:87:f2:cb:e8:5c:81: 51:cf:c0:5b:80:dd:0d:cc:34:7f:71:51:14:28:62:e2:53:b4: 0a:af:0a:60:17:7b:a6:48:e1:a3:c6:54:2c:44:02:32:64:a9: 7a:7b:e6:9f:f6:5b:23:f6:ba:66:3d:bf:e4:fe:d9:57:f5:81: 37:83:de:91:85:e2:8e:7e:c6:7b:aa:e2:90:d0:c9:6d:c4:8e: fe:64:3e:8e:3e:a5:33:d8:a8:8c:10:d3:7d:e8:e5:ae:41:d8: e2:c1:0c:1a:5a:a5:cf:44:fc:e1:19:cc:6a:b6:4a:73:88:7c: a6:24:72:1e:85:86:ec:7d:1b:ba:69:fc:de:1f:d2:0c:92:d5: 02:93:4b:14:41:2a:fe:63:2f:95:98:ef:7e:84:8c:1d:a6:0d: cc:6e:53:0e:19:45:2d:d7:89:c4:a2:32:92:9e:f6:68:76:87: 4b:2b:63:a3:69:47:47:9e:59:02:8d:b9:ce:97:b3:9b:c9:d8: de:75:d5:23:a5:fb:ce:3f:c9:09:1d:db:ad:dc:ad:6f:c9:86: c5:cc:2c:ea:ed:d1:fc:15:62:f2:33:dc:32:87:d8:42:0c:66: 75:80:29:f8:36:ac:b9:22:59:08:01:8c:21:6b:27:59:83:23: af:b7:bb:e0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA7wwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjdGQzIxMTAvBgNVBAUTKDczQkEyMUJFMzZERERGRDU4NjkwMTE2RDZFRUM3QkRD N0VGRUZCMjgwHhcNMjUwNzIxMDExMjA1WhcNMjUwNzI4MDExMjA1WjAYMRYwFAYD VQQDEw02ODdkOTNlNi03YTk0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxHnnOIld0yz8BqkX5lMol8LRUOZ/Gx0XFvhW35siXPc3sAxbfgRgWqorjqgX P2s6t19TffatRaB0AG+ULpNDnmex+8i4d5+VnZknXIqjqde7KKe3gcmJ0HTp2Xfg 6TbmNH1xd6apz4kHEU4XUohOR+YxndTa6lBq3RC4uN7KSj9JQDEJbgkrpJGFTGkM aAuRhHUcGqAT4PZFskAdDYTkgIb2aVAll3EX2Z1msK9j6X93EWbqQ8dcQy7wcVbM YuK8q1O1ajxTPZogfvPvxtsf2PrZ2IavicfosgVJGzpZFH8qrmzLZsTQaaLeDrM+ DN2zGYlQb9ak68rHH+Ujh8FU9QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFP5BUT/r BVD5ay9WdeN8X5Ye0Q5pMB8GA1UdIwQYMBaAFHO6Ib423d/VhpARbW7se9x+/vso MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyN0ZDMi81RTMwQkY3MEJC QTYxMUVDQkFGNDMxNTZDNEY5QUUwMi9jN29odmpiZDM5V0drQkZ0YnV4NzNINy0t eWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2M3b2h2amJkMzlXR2tCRnRidXg3M0g3LS15Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy N0ZDMi81RTMwQkY3MEJCQTYxMUVDQkFGNDMxNTZDNEY5QUUwMi9jN29odmpiZDM5 V0drQkZ0YnV4NzNINy0teWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCXUNFW8PQ9AHNf/leH8svoXIFRz8BbgN0NzDR/cVEUKGLiU7QKrwpg F3umSOGjxlQsRAIyZKl6e+af9lsj9rpmPb/k/tlX9YE3g96RheKOfsZ7quKQ0Mlt xI7+ZD6OPqUz2KiMENN96OWuQdjiwQwaWqXPRPzhGcxqtkpziHymJHIehYbsfRu6 afzeH9IMktUCk0sUQSr+Yy+VmO9+hIwdpg3MblMOGUUt14nEojKSnvZododLK2Oj aUdHnlkCjbnOl7ObydjeddUjpfvOP8kJHdut3K1vyYbFzCzq7dH8FWLyM9wyh9hC DGZ1gCn4Nqy5IlkIAYwhaydZgyOvt7vg -----END CERTIFICATE-----Generated at Mon Jul 21 06:57:42 2025 by rpki-client