$ rpki-client -vvf rpki.apnic.net/member_repository/A9195AA2/1FE357D406C511EA888ED919C4F9AE02/c7-jegclQ-L9dR5OBQw603ABDFk.mft File: c7-jegclQ-L9dR5OBQw603ABDFk.mft (raw, json) Hash identifier: 1ElHRTQWd+zJQH460gIo4+FZmYVtOxXooSS1soxm2Bs= Subject key identifier: 3E:53:86:CC:96:56:18:86:38:3B:59:48:DC:3D:1B:82:71:FB:53:01 Authority key identifier: 73:BF:A3:7A:07:25:43:E2:FD:75:1E:4E:05:0C:3A:D3:70:01:0C:59 Certificate issuer: /CN=A9195AA2/serialNumber=73BFA37A072543E2FD751E4E050C3AD370010C59 Certificate serial: 0803 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c7-jegclQ-L9dR5OBQw603ABDFk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9195AA2/1FE357D406C511EA888ED919C4F9AE02/c7-jegclQ-L9dR5OBQw603ABDFk.mft Manifest number: 144A Signing time: Sat 26 Jul 2025 18:34:07 +0000 Manifest this update: Sat 26 Jul 2025 18:34:07 +0000 Manifest next update: Sat 02 Aug 2025 18:34:07 +0000 Files and hashes: 1: c7-jegclQ-L9dR5OBQw603ABDFk.crl (hash: eq30p1dYfKnAEPLVmPEDLaFhl6MnwFwrEz00RYdEIwQ=) 2: 9839F630765111EDA744AE3AC4F9AE02.roa (hash: Wy656K9y8HRrMZ3s/WXbZct5wLSLzkShWRKdtdLgnAI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9195AA2/1FE357D406C511EA888ED919C4F9AE02/c7-jegclQ-L9dR5OBQw603ABDFk.crl rsync://rpki.apnic.net/member_repository/A9195AA2/1FE357D406C511EA888ED919C4F9AE02/c7-jegclQ-L9dR5OBQw603ABDFk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c7-jegclQ-L9dR5OBQw603ABDFk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 02 Aug 2025 18:34:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2051 (0x803) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9195AA2, serialNumber=73BFA37A072543E2FD751E4E050C3AD370010C59 Validity Not Before: Jul 26 18:34:07 2025 GMT Not After : Aug 2 18:34:07 2025 GMT Subject: CN=68851f9f-3bec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:02:2e:8d:af:80:e9:a9:2e:9a:78:55:2f:87: d1:53:fd:99:49:cb:8d:80:9c:ce:4a:04:c4:14:05: d7:88:3d:21:0b:79:d0:49:41:d0:88:86:6c:5c:a8: f2:12:da:e5:ff:89:ec:e2:83:2a:00:8d:8e:cf:28: de:bf:e8:a9:78:54:bc:a9:07:51:d9:83:d9:a9:6a: 7b:4a:f7:33:29:b1:29:0a:89:ed:3b:1c:26:e3:ef: 4a:a8:6f:48:60:2a:0d:6c:2d:d6:bc:4d:6b:5b:69: 24:83:4b:b2:6c:fe:62:58:fd:45:43:16:f1:11:2a: c9:6a:fb:b7:9d:66:f5:9a:4e:2f:b6:fe:df:aa:e6: e9:dc:94:53:08:5f:95:b4:be:1f:11:c0:c8:b3:6e: 95:cd:19:80:11:77:76:28:d7:07:35:1a:86:b2:4e: b5:99:c5:ff:8c:10:8f:c7:07:53:2d:8b:63:ac:5a: df:f9:8a:ed:35:47:ab:ed:89:56:c8:62:dd:55:8c: d3:fa:6a:16:83:66:20:c7:87:1d:99:05:ad:6a:21: be:31:cd:d9:7f:5e:a8:62:2c:12:fe:51:28:41:8b: 9b:6c:a2:79:f8:3e:f9:4d:dd:ac:51:72:e6:ac:b7: 35:cb:78:93:7e:af:a6:15:b1:8f:4e:f7:39:4f:b8: 3f:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:53:86:CC:96:56:18:86:38:3B:59:48:DC:3D:1B:82:71:FB:53:01 X509v3 Authority Key Identifier: keyid:73:BF:A3:7A:07:25:43:E2:FD:75:1E:4E:05:0C:3A:D3:70:01:0C:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9195AA2/1FE357D406C511EA888ED919C4F9AE02/c7-jegclQ-L9dR5OBQw603ABDFk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c7-jegclQ-L9dR5OBQw603ABDFk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9195AA2/1FE357D406C511EA888ED919C4F9AE02/c7-jegclQ-L9dR5OBQw603ABDFk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 51:11:f8:7b:ef:74:59:17:38:98:82:04:6f:08:90:d8:21:31: 23:36:54:47:d3:7a:1a:b2:13:5e:57:a6:7b:18:ab:b8:96:18: 46:fe:e0:77:a8:f1:07:27:01:cc:dc:aa:04:df:b6:41:13:6a: e4:74:9d:f4:7e:2e:b0:90:ac:1d:8b:1e:39:47:77:54:08:9a: 2f:67:d8:50:b4:9a:ee:f5:37:c3:76:18:57:94:7f:03:43:7d: 7a:1e:b8:f7:fb:53:b3:6e:b2:fe:04:ff:a1:84:f0:4c:4a:95: bb:2c:c4:8d:f6:9d:71:82:06:38:35:bf:1d:6f:5f:91:50:56: 93:92:db:00:36:d0:d3:ba:42:9f:3c:70:74:59:f5:60:ca:7b: 87:54:f3:86:66:c5:d1:bc:c1:c7:7d:03:a6:46:8c:01:b2:fa: b4:75:89:91:f4:a6:d6:45:a7:bd:df:e5:36:c8:20:dc:cf:af: f7:0f:3f:c1:48:e1:2f:96:fd:f2:bf:82:f2:1e:f7:56:5e:47: 44:12:f7:f2:c2:9f:dd:a3:fa:7f:f4:45:36:20:b9:3a:90:74: d2:fa:70:04:4a:6f:36:9b:26:5f:24:ee:f1:80:9b:90:32:65: 74:8d:61:a4:af:e2:2b:42:eb:1e:72:9a:bd:16:af:b0:81:6c: b9:67:89:12 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCAMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTVBQTIxMTAvBgNVBAUTKDczQkZBMzdBMDcyNTQzRTJGRDc1MUU0RTA1MEMzQUQz NzAwMTBDNTkwHhcNMjUwNzI2MTgzNDA3WhcNMjUwODAyMTgzNDA3WjAYMRYwFAYD VQQDEw02ODg1MWY5Zi0zYmVjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzAIuja+A6akumnhVL4fRU/2ZScuNgJzOSgTEFAXXiD0hC3nQSUHQiIZsXKjy Etrl/4ns4oMqAI2Ozyjev+ipeFS8qQdR2YPZqWp7SvczKbEpContOxwm4+9KqG9I YCoNbC3WvE1rW2kkg0uybP5iWP1FQxbxESrJavu3nWb1mk4vtv7fqubp3JRTCF+V tL4fEcDIs26VzRmAEXd2KNcHNRqGsk61mcX/jBCPxwdTLYtjrFrf+YrtNUer7YlW yGLdVYzT+moWg2Ygx4cdmQWtaiG+Mc3Zf16oYiwS/lEoQYubbKJ5+D75Td2sUXLm rLc1y3iTfq+mFbGPTvc5T7g/FwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFD5ThsyW VhiGODtZSNw9G4Jx+1MBMB8GA1UdIwQYMBaAFHO/o3oHJUPi/XUeTgUMOtNwAQxZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NUFBMi8xRkUzNTdENDA2 QzUxMUVBODg4RUQ5MTlDNEY5QUUwMi9jNy1qZWdjbFEtTDlkUjVPQlF3NjAzQUJE RmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2M3LWplZ2NsUS1MOWRSNU9CUXc2MDNBQkRGay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NUFBMi8xRkUzNTdENDA2QzUxMUVBODg4RUQ5MTlDNEY5QUUwMi9jNy1qZWdjbFEt TDlkUjVPQlF3NjAzQUJERmsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBREfh773RZFziYggRvCJDYITEjNlRH03oashNeV6Z7GKu4lhhG/uB3 qPEHJwHM3KoE37ZBE2rkdJ30fi6wkKwdix45R3dUCJovZ9hQtJru9TfDdhhXlH8D Q316Hrj3+1OzbrL+BP+hhPBMSpW7LMSN9p1xggY4Nb8db1+RUFaTktsANtDTukKf PHB0WfVgynuHVPOGZsXRvMHHfQOmRowBsvq0dYmR9KbWRae93+U2yCDcz6/3Dz/B SOEvlv3yv4LyHvdWXkdEEvfywp/do/p/9EU2ILk6kHTS+nAESm82myZfJO7xgJuQ MmV0jWGkr+IrQusecpq9Fq+wgWy5Z4kS -----END CERTIFICATE-----Generated at Sun Jul 27 02:31:39 2025 by rpki-client