$ rpki-client -vvf rpki.apnic.net/member_repository/A9152B13/DC483F301EC011EF9629427DC4F9AE02/p878FwCk4YRmJQjHgV9-sdASnr4.mft File: p878FwCk4YRmJQjHgV9-sdASnr4.mft (raw, json) Hash identifier: b36I5NLyO/RyJYEJjDPvxJAGy7tDwR87eRBxeBfjFms= Subject key identifier: F9:0D:2D:27:29:AA:E6:9F:D9:F8:BB:F9:B7:3B:E7:A6:AF:E6:C4:F8 Authority key identifier: A7:CE:FC:17:00:A4:E1:84:66:25:08:C7:81:5F:7E:B1:D0:12:9E:BE Certificate issuer: /CN=A9152B13/serialNumber=A7CEFC1700A4E184662508C7815F7EB1D0129EBE Certificate serial: DC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p878FwCk4YRmJQjHgV9-sdASnr4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9152B13/DC483F301EC011EF9629427DC4F9AE02/p878FwCk4YRmJQjHgV9-sdASnr4.mft Manifest number: D7 Signing time: Sat 19 Jul 2025 05:47:18 +0000 Manifest this update: Sat 19 Jul 2025 05:47:18 +0000 Manifest next update: Sat 26 Jul 2025 05:47:18 +0000 Files and hashes: 1: p878FwCk4YRmJQjHgV9-sdASnr4.crl (hash: QSmfB/P3HjPkDy9bfLpzCusTeOqCC3mWMYfoGl91y7o=) 2: 0BBF212E1EC211EF82A61739C4F9AE02.roa (hash: Jf2arvBq83FoSm5BKtxRrGvm4pEMUSYC+oIeuz2JcN8=) 3: 479B58B21EC111EF9258717EC4F9AE02.roa (hash: QIMDScliq15LdkPQsPXmCzkeCzTbM6NI7el8bqF5qD8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9152B13/DC483F301EC011EF9629427DC4F9AE02/p878FwCk4YRmJQjHgV9-sdASnr4.crl rsync://rpki.apnic.net/member_repository/A9152B13/DC483F301EC011EF9629427DC4F9AE02/p878FwCk4YRmJQjHgV9-sdASnr4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p878FwCk4YRmJQjHgV9-sdASnr4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 05:47:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 220 (0xdc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9152B13, serialNumber=A7CEFC1700A4E184662508C7815F7EB1D0129EBE Validity Not Before: Jul 19 05:47:18 2025 GMT Not After : Jul 26 05:47:18 2025 GMT Subject: CN=687b3166-c7a3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:47:0b:ae:f3:d9:a6:25:d1:6c:1c:5a:b6:6d: 5b:e4:48:87:5d:9b:74:0e:04:8a:44:5a:65:5b:25: 36:be:da:dd:bd:dd:8d:51:61:99:0a:17:41:95:e8: 98:f7:be:ed:18:7a:16:2a:f1:4d:fe:a4:39:aa:68: d3:8a:1f:b2:a4:92:49:99:d3:37:9c:7b:4c:86:ab: 93:71:34:d0:26:c2:0e:1b:04:8d:d5:c8:68:71:2d: 9d:fd:e8:db:53:41:f1:8e:ab:da:cb:0f:19:b5:ff: b4:ac:f8:51:35:25:f3:f9:b2:2d:c2:ac:61:15:2d: 03:28:b8:f8:a0:30:12:b7:30:f4:f7:69:21:3d:0c: 5a:33:7f:e4:57:0b:9a:dd:1b:a4:ab:15:05:a7:5f: 3a:ce:8a:19:75:43:f3:ad:30:c8:df:10:8e:bf:1d: 2c:74:82:a2:97:4f:b7:0f:e5:e8:02:a6:ab:87:15: a7:1f:47:7f:11:db:ee:36:d8:7c:9c:5c:e5:1e:59: 89:7a:9e:eb:78:b5:38:29:89:63:5c:58:b0:ca:b0: 32:3d:db:bb:d9:08:a9:3f:33:04:b0:a6:62:ce:e5: 63:60:80:32:38:09:04:fa:01:bf:f4:23:a3:fd:c1: aa:7f:dd:22:ac:97:8d:44:3d:12:dc:ad:f7:cf:fe: 2a:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:0D:2D:27:29:AA:E6:9F:D9:F8:BB:F9:B7:3B:E7:A6:AF:E6:C4:F8 X509v3 Authority Key Identifier: keyid:A7:CE:FC:17:00:A4:E1:84:66:25:08:C7:81:5F:7E:B1:D0:12:9E:BE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9152B13/DC483F301EC011EF9629427DC4F9AE02/p878FwCk4YRmJQjHgV9-sdASnr4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p878FwCk4YRmJQjHgV9-sdASnr4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9152B13/DC483F301EC011EF9629427DC4F9AE02/p878FwCk4YRmJQjHgV9-sdASnr4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a9:bb:d2:e8:d0:94:8a:ee:a2:c2:26:33:64:5e:2c:6e:0a:7a: 67:93:33:47:4a:3b:92:bb:47:83:62:6a:a5:fd:a2:24:4f:6b: 2c:e4:ca:6f:b2:a1:95:e3:e8:a9:71:6b:97:f3:a8:54:1b:be: 3c:b1:7f:e5:eb:e4:fc:e0:a2:9a:cf:69:9f:99:b1:7f:da:af: c1:2a:5e:4e:7b:2e:36:de:a7:5f:cf:34:ab:11:12:cf:66:9f: 34:4b:6b:87:92:17:18:fd:04:f2:fa:ef:50:d4:a0:34:08:9b: 9e:47:6e:ca:62:32:12:67:63:89:4f:ad:8b:5d:39:b0:8f:e1: 3e:49:f9:ba:52:b2:be:08:83:63:67:65:19:ae:68:bf:26:20: e5:f5:62:6e:56:16:cd:36:20:d4:8c:93:42:a3:93:a0:8e:08: e4:fd:12:b6:0e:41:8a:f9:29:2b:f7:41:6e:2d:de:d7:5b:05: 95:6e:bf:d0:b7:14:e8:24:5c:67:42:f6:2e:6c:21:a9:e2:77: 0a:e3:9c:9d:2e:92:2a:b8:13:f9:8b:cf:48:54:d4:d1:c2:b6: c0:dc:dc:c2:53:82:4e:1c:8d:16:f4:85:2c:c7:a3:1b:65:34: 65:02:81:d1:b2:40:65:de:0f:7a:e2:be:e0:82:a0:70:6f:4b: e1:ed:d8:bd -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICANwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTJCMTMxMTAvBgNVBAUTKEE3Q0VGQzE3MDBBNEUxODQ2NjI1MDhDNzgxNUY3RUIx RDAxMjlFQkUwHhcNMjUwNzE5MDU0NzE4WhcNMjUwNzI2MDU0NzE4WjAYMRYwFAYD VQQDEw02ODdiMzE2Ni1jN2EzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAx0cLrvPZpiXRbBxatm1b5EiHXZt0DgSKRFplWyU2vtrdvd2NUWGZChdBleiY 977tGHoWKvFN/qQ5qmjTih+ypJJJmdM3nHtMhquTcTTQJsIOGwSN1chocS2d/ejb U0Hxjqvayw8Ztf+0rPhRNSXz+bItwqxhFS0DKLj4oDAStzD092khPQxaM3/kVwua 3RukqxUFp186zooZdUPzrTDI3xCOvx0sdIKil0+3D+XoAqarhxWnH0d/EdvuNth8 nFzlHlmJep7reLU4KYljXFiwyrAyPdu72QipPzMEsKZizuVjYIAyOAkE+gG/9COj /cGqf90irJeNRD0S3K33z/4qkwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPkNLScp quaf2fi7+bc756av5sT4MB8GA1UdIwQYMBaAFKfO/BcApOGEZiUIx4FffrHQEp6+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MkIxMy9EQzQ4M0YzMDFF QzAxMUVGOTYyOTQyN0RDNEY5QUUwMi9wODc4RndDazRZUm1KUWpIZ1Y5LXNkQVNu cjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3A4NzhGd0NrNFlSbUpRakhnVjktc2RBU25yNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MkIxMy9EQzQ4M0YzMDFFQzAxMUVGOTYyOTQyN0RDNEY5QUUwMi9wODc4RndDazRZ Um1KUWpIZ1Y5LXNkQVNucjQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCpu9Lo0JSK7qLCJjNkXixuCnpnkzNHSjuSu0eDYmql/aIkT2ss5Mpv sqGV4+ipcWuX86hUG748sX/l6+T84KKaz2mfmbF/2q/BKl5Oey423qdfzzSrERLP Zp80S2uHkhcY/QTy+u9Q1KA0CJueR27KYjISZ2OJT62LXTmwj+E+Sfm6UrK+CINj Z2UZrmi/JiDl9WJuVhbNNiDUjJNCo5Ogjgjk/RK2DkGK+Skr90FuLd7XWwWVbr/Q txToJFxnQvYubCGp4ncK45ydLpIquBP5i89IVNTRwrbA3NzCU4JOHI0W9IUsx6Mb ZTRlAoHRskBl3g964r7ggqBwb0vh7di9 -----END CERTIFICATE-----Generated at Sun Jul 20 06:59:50 2025 by rpki-client