$ rpki-client -vvf rpki.apnic.net/member_repository/A9146944/43BD1C6E8E9511EAA9D73A2EC4F9AE02/7R-VjLYEtXboIhS0zzzA_mIO-fQ.mft File: 7R-VjLYEtXboIhS0zzzA_mIO-fQ.mft (raw, json) Hash identifier: RR7PZgr3tmwbVUuD4kacs1HVEJ2gqNsBNxGb2Fu7sJk= Subject key identifier: BF:5A:EF:7C:71:28:73:BE:30:38:1D:3C:F6:C7:74:F8:C6:5A:F1:4F Authority key identifier: ED:1F:95:8C:B6:04:B5:76:E8:22:14:B4:CF:3C:C0:FE:62:0E:F9:F4 Certificate issuer: /CN=A9146944/serialNumber=ED1F958CB604B576E82214B4CF3CC0FE620EF9F4 Certificate serial: 0A15 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7R-VjLYEtXboIhS0zzzA_mIO-fQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9146944/43BD1C6E8E9511EAA9D73A2EC4F9AE02/7R-VjLYEtXboIhS0zzzA_mIO-fQ.mft Manifest number: 09DA Signing time: Fri 18 Jul 2025 20:18:05 +0000 Manifest this update: Fri 18 Jul 2025 20:18:04 +0000 Manifest next update: Fri 25 Jul 2025 20:18:04 +0000 Files and hashes: 1: 7R-VjLYEtXboIhS0zzzA_mIO-fQ.crl (hash: 2YEbPVE7GM1NSvBB8fOz9Ihmjhgst+Cc4LvbqL+nxqA=) 2: D411F96C532E11EFB0B63E60C4F9AE02.roa (hash: jzzWgD3HRpvAEJBXK/vfne+ihxsbOdjQU7WB0KMRVgw=) 3: 0A627D5653AD11EF94BC7F0BC4F9AE02.roa (hash: ZT22vRI1IQ1BmtH9ALydP3ilyhXOSnuc69Bf2IwyKlI=) 4: A2120E06FD7F11EFA8C89755C4F9AE02.roa (hash: 2Hvw21rvCVCh8S0/7oApM9oB0Qgb7ulGPIHYlQU89cU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9146944/43BD1C6E8E9511EAA9D73A2EC4F9AE02/7R-VjLYEtXboIhS0zzzA_mIO-fQ.crl rsync://rpki.apnic.net/member_repository/A9146944/43BD1C6E8E9511EAA9D73A2EC4F9AE02/7R-VjLYEtXboIhS0zzzA_mIO-fQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7R-VjLYEtXboIhS0zzzA_mIO-fQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Jul 2025 20:18:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2581 (0xa15) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9146944, serialNumber=ED1F958CB604B576E82214B4CF3CC0FE620EF9F4 Validity Not Before: Jul 18 20:18:04 2025 GMT Not After : Jul 25 20:18:04 2025 GMT Subject: CN=687aabfd-5b2e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:ed:fd:3f:91:4a:d8:57:37:a5:7d:83:73:ab: 85:ec:31:df:9a:85:26:1d:95:92:f9:67:2b:94:c0: 58:38:5f:29:b4:42:6a:62:e8:5d:e3:29:ca:39:1c: 07:c2:f8:0c:77:eb:64:5d:c3:5d:25:c9:3a:5d:2a: 62:cc:3d:36:38:ee:a4:14:53:7d:59:3f:e3:60:7a: a7:e0:f5:a9:f6:f2:df:d9:e5:11:f1:a8:e8:e0:c4: cd:f4:7f:7d:a2:77:1d:5a:07:87:d3:d3:98:b5:14: 0b:3b:60:1d:be:ed:90:cb:65:75:06:95:29:dd:25: 17:44:31:91:9f:f9:37:8a:16:5b:5a:f3:af:fd:1c: 4f:d1:17:ba:c3:d2:cd:05:b1:07:6e:08:db:8c:b3: ce:4b:75:0c:27:8f:a2:a0:f6:a2:66:45:17:d1:e5: 7c:56:8c:43:4f:e6:c8:eb:16:3c:93:4b:e9:fd:81: 1d:56:df:3e:09:43:29:58:e6:e9:75:3f:b9:6a:06: 57:73:a2:dc:b9:c1:bb:85:bd:c6:1e:1a:bb:c7:a3: 91:af:90:87:7a:72:4f:16:a2:42:86:b3:5e:7e:cb: 9d:54:05:43:83:fc:f6:85:ad:26:c0:cd:41:1d:2c: 1e:76:0b:25:2a:eb:5e:d5:94:77:76:3b:f3:bd:04: b5:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:5A:EF:7C:71:28:73:BE:30:38:1D:3C:F6:C7:74:F8:C6:5A:F1:4F X509v3 Authority Key Identifier: keyid:ED:1F:95:8C:B6:04:B5:76:E8:22:14:B4:CF:3C:C0:FE:62:0E:F9:F4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9146944/43BD1C6E8E9511EAA9D73A2EC4F9AE02/7R-VjLYEtXboIhS0zzzA_mIO-fQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7R-VjLYEtXboIhS0zzzA_mIO-fQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9146944/43BD1C6E8E9511EAA9D73A2EC4F9AE02/7R-VjLYEtXboIhS0zzzA_mIO-fQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 26:e2:28:33:86:5f:7f:99:71:b8:ba:5b:6d:b3:f6:a3:eb:e8: be:19:21:02:61:72:61:15:b7:7e:47:f9:a2:5b:d6:0c:af:9c: 29:c2:68:a8:77:f2:da:52:0e:2e:90:ac:8b:bb:a8:1d:1e:79: 16:54:e8:db:51:9c:60:46:cf:67:ca:2b:c4:e6:36:48:63:a4: 7a:fb:79:9b:c6:fd:2f:a3:4d:6b:93:7f:be:e6:06:bc:73:24: 7f:78:56:e7:09:ae:88:f3:b2:f7:d2:4d:82:55:8a:be:c1:28: 38:95:d4:3e:a6:a8:57:72:6b:26:3d:3d:33:65:e3:74:54:52: ce:93:55:8c:87:20:e1:4e:5b:dc:c2:1e:31:aa:cb:0c:11:37: 77:ee:d2:61:cc:a9:67:c4:89:dd:4e:c5:cf:94:e3:31:60:05: 96:e4:c4:71:0b:d8:33:6b:23:c7:2b:2e:ca:6d:23:a9:ef:2b: 99:5f:ca:1c:ce:95:42:f4:df:9c:d6:e9:d2:9e:bc:b3:5e:f5: 94:fa:00:52:35:ce:a1:2f:59:36:51:b6:38:73:f3:9b:fd:f3: 3e:50:ee:0f:57:70:97:06:47:a1:14:07:f7:69:33:1b:0e:4e: d9:1e:17:3b:c3:b6:94:30:4f:17:38:ff:a3:78:08:b1:68:ca: 6c:7b:28:f3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICChUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDY5NDQxMTAvBgNVBAUTKEVEMUY5NThDQjYwNEI1NzZFODIyMTRCNENGM0NDMEZF NjIwRUY5RjQwHhcNMjUwNzE4MjAxODA0WhcNMjUwNzI1MjAxODA0WjAYMRYwFAYD VQQDEw02ODdhYWJmZC01YjJlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvO39P5FK2Fc3pX2Dc6uF7DHfmoUmHZWS+WcrlMBYOF8ptEJqYuhd4ynKORwH wvgMd+tkXcNdJck6XSpizD02OO6kFFN9WT/jYHqn4PWp9vLf2eUR8ajo4MTN9H99 oncdWgeH09OYtRQLO2Advu2Qy2V1BpUp3SUXRDGRn/k3ihZbWvOv/RxP0Re6w9LN BbEHbgjbjLPOS3UMJ4+ioPaiZkUX0eV8VoxDT+bI6xY8k0vp/YEdVt8+CUMpWObp dT+5agZXc6LcucG7hb3GHhq7x6ORr5CHenJPFqJChrNefsudVAVDg/z2ha0mwM1B HSwedgslKute1ZR3djvzvQS1bwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFL9a73xx KHO+MDgdPPbHdPjGWvFPMB8GA1UdIwQYMBaAFO0flYy2BLV26CIUtM88wP5iDvn0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0Njk0NC80M0JEMUM2RThF OTUxMUVBQTlENzNBMkVDNEY5QUUwMi83Ui1WakxZRXRYYm9JaFMwenp6QV9tSU8t ZlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzdSLVZqTFlFdFhib0loUzB6enpBX21JTy1mUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 Njk0NC80M0JEMUM2RThFOTUxMUVBQTlENzNBMkVDNEY5QUUwMi83Ui1WakxZRXRY Ym9JaFMwenp6QV9tSU8tZlEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAm4igzhl9/mXG4ultts/aj6+i+GSECYXJhFbd+R/miW9YMr5wpwmio d/LaUg4ukKyLu6gdHnkWVOjbUZxgRs9nyivE5jZIY6R6+3mbxv0vo01rk3++5ga8 cyR/eFbnCa6I87L30k2CVYq+wSg4ldQ+pqhXcmsmPT0zZeN0VFLOk1WMhyDhTlvc wh4xqssMETd37tJhzKlnxIndTsXPlOMxYAWW5MRxC9gzayPHKy7KbSOp7yuZX8oc zpVC9N+c1unSnryzXvWU+gBSNc6hL1k2UbY4c/Ob/fM+UO4PV3CXBkehFAf3aTMb Dk7ZHhc7w7aUME8XOP+jeAixaMpseyjz -----END CERTIFICATE-----Generated at Sun Jul 20 19:07:53 2025 by rpki-client