$ rpki-client -vvf rpki.apnic.net/member_repository/A9156CFE/B39031708AB211EAB022193CC4F9AE02/A8f_7gyvSSWEnihuwO-7DIsqjk8.mft File: A8f_7gyvSSWEnihuwO-7DIsqjk8.mft (raw, json) Hash identifier: rjTAKDjW66xsgGEuONHdT9SNqZ7r/TSOAoi86YpeIt4= Subject key identifier: 7F:8B:A1:C9:9C:92:20:B5:6F:C4:B9:2F:96:4F:19:07:77:98:DE:6E Authority key identifier: 03:C7:FF:EE:0C:AF:49:25:84:9E:28:6E:C0:EF:BB:0C:8B:2A:8E:4F Certificate issuer: /CN=A9156CFE/serialNumber=03C7FFEE0CAF4925849E286EC0EFBB0C8B2A8E4F Certificate serial: 09E3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A8f_7gyvSSWEnihuwO-7DIsqjk8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9156CFE/B39031708AB211EAB022193CC4F9AE02/A8f_7gyvSSWEnihuwO-7DIsqjk8.mft Manifest number: 09C7 Signing time: Fri 18 Jul 2025 20:15:56 +0000 Manifest this update: Fri 18 Jul 2025 20:15:55 +0000 Manifest next update: Fri 25 Jul 2025 20:15:55 +0000 Files and hashes: 1: A8f_7gyvSSWEnihuwO-7DIsqjk8.crl (hash: Yd/65KGKH+iNM/1roR47gmod2aXbJ4K9//jM/qw2Zw4=) 2: E00620C0267C11EE803B2155C4F9AE02.roa (hash: 5Gk4b25F0uq7efelkFmxT/VKGia42LkwXqnCVKORjVY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9156CFE/B39031708AB211EAB022193CC4F9AE02/A8f_7gyvSSWEnihuwO-7DIsqjk8.crl rsync://rpki.apnic.net/member_repository/A9156CFE/B39031708AB211EAB022193CC4F9AE02/A8f_7gyvSSWEnihuwO-7DIsqjk8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A8f_7gyvSSWEnihuwO-7DIsqjk8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Jul 2025 20:15:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2531 (0x9e3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9156CFE, serialNumber=03C7FFEE0CAF4925849E286EC0EFBB0C8B2A8E4F Validity Not Before: Jul 18 20:15:55 2025 GMT Not After : Jul 25 20:15:55 2025 GMT Subject: CN=687aab7b-02f3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:d5:4f:37:5b:a3:49:3a:56:e8:3e:7b:7b:a8: 45:61:3e:06:d7:87:9b:09:96:43:e6:a9:9e:fd:6c: f7:7b:95:c1:a9:51:18:d7:e8:69:52:26:02:8f:81: 61:a9:bd:d8:5a:d1:d2:48:ec:51:a2:c1:7c:ba:f9: 7d:76:59:b8:a3:9a:67:e8:7e:b4:26:84:0e:88:22: 7c:95:0a:f1:d5:95:25:c9:3f:8b:34:16:f3:30:ee: 42:95:f6:a2:01:b7:10:cf:81:50:f9:e6:dd:ac:c2: 85:10:d2:b4:c3:3a:ee:51:13:eb:ad:90:0b:0b:e9: 66:4e:2c:0a:9a:6d:a9:ba:d0:1f:13:fd:c9:eb:de: 56:53:94:33:1e:4b:b3:34:9f:b4:4c:12:38:7d:84: f3:f9:04:5c:55:61:e1:24:52:fc:f0:49:7f:e1:bc: 4d:32:2b:60:cf:ba:f9:87:71:f8:dc:b6:6f:e3:d8: 76:58:7d:20:fc:d7:32:2b:a4:91:ac:fb:46:ee:05: cf:81:85:95:ad:db:48:9c:3e:e3:36:e3:9e:89:14: 00:2c:78:45:d3:27:ea:45:75:23:27:f5:e9:6e:20: 8b:04:64:e5:b4:4d:e8:a3:3e:48:2b:6f:09:19:0f: 3a:45:58:13:23:2f:8f:b2:b8:be:78:82:7e:55:ab: e3:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:8B:A1:C9:9C:92:20:B5:6F:C4:B9:2F:96:4F:19:07:77:98:DE:6E X509v3 Authority Key Identifier: keyid:03:C7:FF:EE:0C:AF:49:25:84:9E:28:6E:C0:EF:BB:0C:8B:2A:8E:4F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9156CFE/B39031708AB211EAB022193CC4F9AE02/A8f_7gyvSSWEnihuwO-7DIsqjk8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A8f_7gyvSSWEnihuwO-7DIsqjk8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9156CFE/B39031708AB211EAB022193CC4F9AE02/A8f_7gyvSSWEnihuwO-7DIsqjk8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3b:19:d4:58:8f:b5:79:f8:0c:5a:10:28:17:ab:ce:45:33:11: b5:77:cd:44:ef:94:d7:f9:69:0d:2a:e2:5d:29:06:c4:09:dc: 9d:cb:82:40:42:ac:70:08:8d:3c:ad:e5:33:a6:be:9f:08:57: bf:bd:05:72:61:08:c2:d6:40:e4:18:d2:a8:dc:93:90:4c:ac: cf:e5:d0:6e:5e:80:f7:93:20:48:67:b5:d1:63:fc:4a:fd:85: 28:c2:60:69:52:70:aa:3d:f2:bd:86:6b:b2:d7:cf:cc:5d:a9: d6:f1:eb:4d:63:c7:65:8b:51:0a:fe:1c:c9:20:79:5b:80:9d: a0:44:ad:1e:e9:c0:2e:71:7b:6a:5b:98:94:12:06:49:7d:99: 32:cd:f1:e1:97:fb:e4:33:8b:41:00:3f:e7:bd:5c:bf:8e:32: b1:29:26:9b:b7:21:97:24:c2:54:36:27:99:80:14:ce:2c:c4: d7:33:48:84:0f:ab:90:f7:f5:ee:e4:db:22:7a:52:06:56:ee: ab:16:5b:c6:3b:fd:c4:6b:b3:26:3b:39:dc:dd:cd:55:28:6f: f2:ae:53:f3:2c:60:1b:de:ee:34:84:49:25:9b:bb:b6:26:b4: b0:9f:01:cc:3d:09:ba:aa:28:eb:2f:fe:fe:a9:70:63:e4:66: d3:a4:dc:17 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCeMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTZDRkUxMTAvBgNVBAUTKDAzQzdGRkVFMENBRjQ5MjU4NDlFMjg2RUMwRUZCQjBD OEIyQThFNEYwHhcNMjUwNzE4MjAxNTU1WhcNMjUwNzI1MjAxNTU1WjAYMRYwFAYD VQQDEw02ODdhYWI3Yi0wMmYzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA09VPN1ujSTpW6D57e6hFYT4G14ebCZZD5qme/Wz3e5XBqVEY1+hpUiYCj4Fh qb3YWtHSSOxRosF8uvl9dlm4o5pn6H60JoQOiCJ8lQrx1ZUlyT+LNBbzMO5Clfai AbcQz4FQ+ebdrMKFENK0wzruURPrrZALC+lmTiwKmm2putAfE/3J695WU5QzHkuz NJ+0TBI4fYTz+QRcVWHhJFL88El/4bxNMitgz7r5h3H43LZv49h2WH0g/NcyK6SR rPtG7gXPgYWVrdtInD7jNuOeiRQALHhF0yfqRXUjJ/XpbiCLBGTltE3ooz5IK28J GQ86RVgTIy+Psri+eIJ+VavjQwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFH+Locmc kiC1b8S5L5ZPGQd3mN5uMB8GA1UdIwQYMBaAFAPH/+4Mr0klhJ4obsDvuwyLKo5P MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NkNGRS9CMzkwMzE3MDhB QjIxMUVBQjAyMjE5M0NDNEY5QUUwMi9BOGZfN2d5dlNTV0VuaWh1d08tN0RJc3Fq azguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0E4Zl83Z3l2U1NXRW5paHV3Ty03RElzcWprOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NkNGRS9CMzkwMzE3MDhBQjIxMUVBQjAyMjE5M0NDNEY5QUUwMi9BOGZfN2d5dlNT V0VuaWh1d08tN0RJc3FqazgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA7GdRYj7V5+AxaECgXq85FMxG1d81E75TX+WkNKuJdKQbECdydy4JA QqxwCI08reUzpr6fCFe/vQVyYQjC1kDkGNKo3JOQTKzP5dBuXoD3kyBIZ7XRY/xK /YUowmBpUnCqPfK9hmuy18/MXanW8etNY8dli1EK/hzJIHlbgJ2gRK0e6cAucXtq W5iUEgZJfZkyzfHhl/vkM4tBAD/nvVy/jjKxKSabtyGXJMJUNieZgBTOLMTXM0iE D6uQ9/Xu5NsielIGVu6rFlvGO/3Ea7MmOznc3c1VKG/yrlPzLGAb3u40hEklm7u2 JrSwnwHMPQm6qijrL/7+qXBj5GbTpNwX -----END CERTIFICATE-----Generated at Sun Jul 20 18:56:08 2025 by rpki-client