$ rpki-client -vvf rpki.apnic.net/member_repository/A9137627/E7D25786A89111EF92688B2BC4F9AE02/CA7BSgASXZFMfmKF3pxWaJxYcqQ.mft File: CA7BSgASXZFMfmKF3pxWaJxYcqQ.mft (raw, json) Hash identifier: PFzqT6jOm05qql3NQ4Ckg3cchpk8uGa76PNcJcmRaOM= Subject key identifier: 6F:98:92:B9:1F:C5:F3:9A:56:91:F1:D2:82:28:6D:B9:73:FA:35:52 Authority key identifier: 08:0E:C1:4A:00:12:5D:91:4C:7E:62:85:DE:9C:56:68:9C:58:72:A4 Certificate issuer: /CN=A9137627/serialNumber=080EC14A00125D914C7E6285DE9C56689C5872A4 Certificate serial: 7C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CA7BSgASXZFMfmKF3pxWaJxYcqQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9137627/E7D25786A89111EF92688B2BC4F9AE02/CA7BSgASXZFMfmKF3pxWaJxYcqQ.mft Manifest number: 7B Signing time: Sat 19 Jul 2025 06:58:44 +0000 Manifest this update: Sat 19 Jul 2025 06:58:43 +0000 Manifest next update: Sat 26 Jul 2025 06:58:43 +0000 Files and hashes: 1: CA7BSgASXZFMfmKF3pxWaJxYcqQ.crl (hash: 7ikiZ2YMjT6qceLQ/FDE9REa9XUqSoSXYvHbpBkZeM0=) 2: 4F148EC8A89211EFBE18B52EC4F9AE02.roa (hash: Ac/uc/BnLL5OC5L/oElWDyPEyaU4HTEnF9nDubVxykg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9137627/E7D25786A89111EF92688B2BC4F9AE02/CA7BSgASXZFMfmKF3pxWaJxYcqQ.crl rsync://rpki.apnic.net/member_repository/A9137627/E7D25786A89111EF92688B2BC4F9AE02/CA7BSgASXZFMfmKF3pxWaJxYcqQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CA7BSgASXZFMfmKF3pxWaJxYcqQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 06:58:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 124 (0x7c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9137627, serialNumber=080EC14A00125D914C7E6285DE9C56689C5872A4 Validity Not Before: Jul 19 06:58:43 2025 GMT Not After : Jul 26 06:58:43 2025 GMT Subject: CN=687b4224-ac77 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:81:4d:3b:79:f0:15:9c:b8:ca:78:02:21:b7: c8:c4:1f:d1:85:3c:70:db:b5:8b:2f:47:d4:bd:4b: 2a:ad:2d:31:ba:2a:cc:25:47:88:4c:87:ce:ca:10: 53:85:38:90:a6:86:7a:5d:87:db:38:16:bb:36:f5: 7e:af:72:e0:0f:7b:b8:76:07:6a:7d:ab:30:43:bf: b3:5c:fd:46:d9:ab:b5:a3:94:eb:41:76:77:c7:24: 2d:ee:11:82:23:f8:66:4a:06:43:f2:c9:b5:a4:c4: 6d:48:bb:b8:75:0b:bd:eb:77:a6:db:a7:a1:94:95: 3d:9f:8b:8a:76:2d:88:c3:e4:38:3b:57:22:dd:8e: 76:63:f9:72:13:b3:44:c4:6b:ac:30:12:93:53:07: 9d:e5:74:60:b1:c5:fa:59:be:b6:81:35:a4:32:2e: 97:3b:09:77:26:80:3a:a6:1f:08:94:55:f5:09:ef: 9a:44:a1:48:63:61:53:f3:ed:a9:e9:84:04:ea:2f: 9b:e6:21:38:ea:96:da:f8:43:3d:a6:0b:d4:28:eb: 46:cc:3a:ae:21:32:09:f4:f6:df:f5:fa:5f:87:1f: 13:2a:47:ae:69:ba:e0:f6:64:64:d6:e5:5d:af:15: a8:82:0e:bc:97:44:89:48:64:0a:f8:8e:2e:5f:f0: 6b:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:98:92:B9:1F:C5:F3:9A:56:91:F1:D2:82:28:6D:B9:73:FA:35:52 X509v3 Authority Key Identifier: keyid:08:0E:C1:4A:00:12:5D:91:4C:7E:62:85:DE:9C:56:68:9C:58:72:A4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9137627/E7D25786A89111EF92688B2BC4F9AE02/CA7BSgASXZFMfmKF3pxWaJxYcqQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CA7BSgASXZFMfmKF3pxWaJxYcqQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9137627/E7D25786A89111EF92688B2BC4F9AE02/CA7BSgASXZFMfmKF3pxWaJxYcqQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7a:5a:46:af:5b:91:64:a2:77:b4:dc:34:47:55:77:e2:3a:a1: 1a:d6:1f:6d:ae:4e:74:45:47:89:1e:71:95:e0:f9:0b:a1:5b: fa:9a:36:5b:39:a2:6d:74:e0:26:85:cf:ac:78:a5:8e:2c:cb: 03:a4:6b:00:8a:73:e1:6d:7b:76:3c:f1:ca:d2:ac:e0:12:4a: a9:9a:b1:f6:27:96:1c:e1:24:a8:02:32:58:9b:1e:97:27:8e: 59:ac:fb:6a:15:37:40:68:52:32:e2:e0:c7:26:67:e4:2c:13: 1d:07:29:5e:82:51:cc:a5:b6:61:57:cc:6d:24:ce:cf:be:3c: 7a:3e:8b:e9:cb:f7:a9:ff:08:63:ac:f4:55:53:34:90:f4:93: da:44:29:b8:3b:6f:ff:40:6b:25:96:fd:21:08:85:94:4c:09: 3a:37:a1:45:81:24:dc:54:42:16:d9:0c:62:7f:ce:7f:1a:ed: ba:1b:9a:4a:69:41:f6:6c:2a:de:ba:6f:6f:87:15:9d:2d:72: e4:36:47:5c:b6:68:1d:44:46:60:f5:95:e6:66:d7:09:61:88: 21:eb:0e:dd:d3:9b:5b:b5:83:d9:48:c5:1f:ba:f8:ff:84:c1: e2:39:5a:79:59:32:62:40:65:c6:c9:42:98:56:e9:97:7c:d3: cf:55:d8:d1 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBfDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEz NzYyNzExMC8GA1UEBRMoMDgwRUMxNEEwMDEyNUQ5MTRDN0U2Mjg1REU5QzU2Njg5 QzU4NzJBNDAeFw0yNTA3MTkwNjU4NDNaFw0yNTA3MjYwNjU4NDNaMBgxFjAUBgNV BAMTDTY4N2I0MjI0LWFjNzcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCjgU07efAVnLjKeAIht8jEH9GFPHDbtYsvR9S9SyqtLTG6KswlR4hMh87KEFOF OJCmhnpdh9s4Frs29X6vcuAPe7h2B2p9qzBDv7Nc/UbZq7WjlOtBdnfHJC3uEYIj +GZKBkPyybWkxG1Iu7h1C73rd6bbp6GUlT2fi4p2LYjD5Dg7VyLdjnZj+XITs0TE a6wwEpNTB53ldGCxxfpZvraBNaQyLpc7CXcmgDqmHwiUVfUJ75pEoUhjYVPz7anp hATqL5vmITjqltr4Qz2mC9Qo60bMOq4hMgn09t/1+l+HHxMqR65puuD2ZGTW5V2v FaiCDryXRIlIZAr4ji5f8GvfAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUb5iSuR/F 85pWkfHSgihtuXP6NVIwHwYDVR0jBBgwFoAUCA7BSgASXZFMfmKF3pxWaJxYcqQw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTM3NjI3L0U3RDI1Nzg2QTg5 MTExRUY5MjY4OEIyQkM0RjlBRTAyL0NBN0JTZ0FTWFpGTWZtS0YzcHhXYUp4WWNx US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvQ0E3QlNnQVNYWkZNZm1LRjNweFdhSnhZY3FRLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTM3 NjI3L0U3RDI1Nzg2QTg5MTExRUY5MjY4OEIyQkM0RjlBRTAyL0NBN0JTZ0FTWFpG TWZtS0YzcHhXYUp4WWNxUS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAHpaRq9bkWSid7TcNEdVd+I6oRrWH22uTnRFR4kecZXg+QuhW/qaNls5 om104CaFz6x4pY4sywOkawCKc+Fte3Y88crSrOASSqmasfYnlhzhJKgCMlibHpcn jlms+2oVN0BoUjLi4McmZ+QsEx0HKV6CUcyltmFXzG0kzs++PHo+i+nL96n/CGOs 9FVTNJD0k9pEKbg7b/9AayWW/SEIhZRMCTo3oUWBJNxUQhbZDGJ/zn8a7bobmkpp QfZsKt66b2+HFZ0tcuQ2R1y2aB1ERmD1leZm1wlhiCHrDt3Tm1u1g9lIxR+6+P+E weI5WnlZMmJAZcbJQphW6Zd8089V2NE= -----END CERTIFICATE-----Generated at Sun Jul 20 07:47:13 2025 by rpki-client