$ rpki-client -vvf rpki.apnic.net/member_repository/A9126A3C/7390B34AC6A011EF928B7960C4F9AE02/l7A9ovtF9W4_WCFj33vZUGk5mUQ.mft File: l7A9ovtF9W4_WCFj33vZUGk5mUQ.mft (raw, json) Hash identifier: /Zl5QyQT+XW2GxxPT4YGPoB2j/BA+jLPBmBHoJA298o= Subject key identifier: 2A:56:8E:84:20:EE:DD:43:07:19:ED:90:DB:C2:B6:37:F0:05:EF:F0 Authority key identifier: 97:B0:3D:A2:FB:45:F5:6E:3F:58:21:63:DF:7B:D9:50:69:39:99:44 Certificate issuer: /CN=A9126A3C/serialNumber=97B03DA2FB45F56E3F582163DF7BD95069399944 Certificate serial: 6D Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/l7A9ovtF9W4_WCFj33vZUGk5mUQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9126A3C/7390B34AC6A011EF928B7960C4F9AE02/l7A9ovtF9W4_WCFj33vZUGk5mUQ.mft Manifest number: 6A Signing time: Sat 19 Jul 2025 07:11:39 +0000 Manifest this update: Sat 19 Jul 2025 07:11:39 +0000 Manifest next update: Sat 26 Jul 2025 07:11:39 +0000 Files and hashes: 1: l7A9ovtF9W4_WCFj33vZUGk5mUQ.crl (hash: INHeVl5qtnn6xYGBHtlOAZ6RLskDtEJy19Ds0giH9QI=) 2: F120EB84C6D911EFA447E849C4F9AE02.roa (hash: mo70D3RkkFpkqu5IGLksT/J6Tz0OUu7ujkEgshBAI8o=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9126A3C/7390B34AC6A011EF928B7960C4F9AE02/l7A9ovtF9W4_WCFj33vZUGk5mUQ.crl rsync://rpki.apnic.net/member_repository/A9126A3C/7390B34AC6A011EF928B7960C4F9AE02/l7A9ovtF9W4_WCFj33vZUGk5mUQ.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/l7A9ovtF9W4_WCFj33vZUGk5mUQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 07:11:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 109 (0x6d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9126A3C, serialNumber=97B03DA2FB45F56E3F582163DF7BD95069399944 Validity Not Before: Jul 19 07:11:39 2025 GMT Not After : Jul 26 07:11:39 2025 GMT Subject: CN=687b452b-3d78 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:c9:e3:2d:5e:6f:ae:8a:12:af:a4:a7:a3:ce: 14:d0:82:b0:cd:7d:a3:42:74:e2:92:ac:08:c7:b9: 00:06:56:79:a5:09:fa:45:0c:5a:05:9e:66:e2:10: b3:aa:78:4d:89:0a:8e:5b:5b:21:cc:71:97:f2:9a: c3:32:f9:b4:b7:79:c7:e2:6d:c6:2d:ad:23:96:4e: 82:b0:56:a6:98:a5:eb:7d:c2:db:dd:b1:60:f3:9e: 31:25:14:ac:20:08:fb:e3:4a:ec:71:7f:19:eb:84: eb:16:bb:63:18:00:73:44:26:1e:f0:2f:b1:c8:94: 6a:1a:50:b7:19:e4:81:a5:19:9c:a9:36:ed:10:e0: c6:3f:7b:5b:72:f0:50:3b:a7:15:f6:a2:51:1b:bd: 0c:d6:e3:bb:8f:d6:db:ac:a3:30:4f:7c:85:5b:8f: a3:6b:91:d7:c7:39:81:60:29:26:81:c5:0c:ae:0e: cb:b3:e4:ff:2c:c3:86:e5:b6:cf:42:6c:98:43:f3: a2:c5:5e:fe:bd:fd:fa:a1:d1:08:5b:e5:b2:e2:16: 5a:8d:e1:24:ad:90:30:47:85:8a:3c:32:e6:37:52: 81:c1:12:3c:7f:a8:5d:de:bf:b7:ae:5e:33:a1:a0: 66:b6:14:b6:7d:91:55:07:04:6b:52:97:b9:ce:13: 40:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:56:8E:84:20:EE:DD:43:07:19:ED:90:DB:C2:B6:37:F0:05:EF:F0 X509v3 Authority Key Identifier: keyid:97:B0:3D:A2:FB:45:F5:6E:3F:58:21:63:DF:7B:D9:50:69:39:99:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9126A3C/7390B34AC6A011EF928B7960C4F9AE02/l7A9ovtF9W4_WCFj33vZUGk5mUQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/l7A9ovtF9W4_WCFj33vZUGk5mUQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9126A3C/7390B34AC6A011EF928B7960C4F9AE02/l7A9ovtF9W4_WCFj33vZUGk5mUQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 89:d4:38:cd:dc:13:5f:3e:5e:58:1d:8f:ee:b5:f3:f4:ef:52: 7e:5c:71:4a:b0:08:04:87:84:b2:e3:56:23:56:f0:96:cf:9d: 19:b6:65:2a:c1:5d:61:4b:2a:c1:0b:6c:8a:0f:57:9d:fc:1d: 56:36:92:04:a3:45:96:e4:2b:c3:16:97:ec:1e:16:f9:1b:f9: 17:8e:59:25:ea:6b:82:0a:4f:e4:5d:3c:e0:f2:4e:7d:74:fb: 10:7a:6f:62:83:56:df:49:13:f2:75:1b:a2:70:1d:85:57:16: ee:5d:d3:7a:4b:89:59:e1:46:99:11:6e:b8:77:7e:45:50:d0: 0e:e3:72:0c:7c:f5:1b:ea:cd:49:06:db:2e:6d:0f:3e:7a:6a: c5:c7:38:a6:bb:ad:5c:c9:16:04:7d:d8:05:56:67:4d:8b:59: 99:f5:7d:9b:00:27:b5:40:5a:36:97:59:07:c7:01:49:90:05: f8:47:cf:24:e5:17:46:37:21:21:ba:78:a1:c5:dc:92:73:20: a5:cb:fa:a5:7b:46:aa:ac:54:3e:a2:a9:78:9e:2d:f4:d0:31: 6b:fd:9f:a2:f4:cc:e4:0f:b5:72:1f:7b:36:c9:6d:8d:ce:4a: 0d:2b:d4:e6:03:2e:f3:6a:60:ad:a8:a0:cd:06:cd:ff:12:63: e2:ac:14:72 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBbTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEy NkEzQzExMC8GA1UEBRMoOTdCMDNEQTJGQjQ1RjU2RTNGNTgyMTYzREY3QkQ5NTA2 OTM5OTk0NDAeFw0yNTA3MTkwNzExMzlaFw0yNTA3MjYwNzExMzlaMBgxFjAUBgNV BAMTDTY4N2I0NTJiLTNkNzgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDEyeMtXm+uihKvpKejzhTQgrDNfaNCdOKSrAjHuQAGVnmlCfpFDFoFnmbiELOq eE2JCo5bWyHMcZfymsMy+bS3ecfibcYtrSOWToKwVqaYpet9wtvdsWDznjElFKwg CPvjSuxxfxnrhOsWu2MYAHNEJh7wL7HIlGoaULcZ5IGlGZypNu0Q4MY/e1ty8FA7 pxX2olEbvQzW47uP1tusozBPfIVbj6NrkdfHOYFgKSaBxQyuDsuz5P8sw4blts9C bJhD86LFXv69/fqh0Qhb5bLiFlqN4SStkDBHhYo8MuY3UoHBEjx/qF3ev7euXjOh oGa2FLZ9kVUHBGtSl7nOE0CTAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUKlaOhCDu 3UMHGe2Q28K2N/AF7/AwHwYDVR0jBBgwFoAUl7A9ovtF9W4/WCFj33vZUGk5mUQw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTI2QTNDLzczOTBCMzRBQzZB MDExRUY5MjhCNzk2MEM0RjlBRTAyL2w3QTlvdnRGOVc0X1dDRmozM3ZaVUdrNW1V US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvbDdBOW92dEY5VzRfV0NGajMzdlpVR2s1bVVRLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTI2 QTNDLzczOTBCMzRBQzZBMDExRUY5MjhCNzk2MEM0RjlBRTAyL2w3QTlvdnRGOVc0 X1dDRmozM3ZaVUdrNW1VUS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAInUOM3cE18+Xlgdj+618/TvUn5ccUqwCASHhLLjViNW8JbPnRm2ZSrB XWFLKsELbIoPV538HVY2kgSjRZbkK8MWl+weFvkb+ReOWSXqa4IKT+RdPODyTn10 +xB6b2KDVt9JE/J1G6JwHYVXFu5d03pLiVnhRpkRbrh3fkVQ0A7jcgx89RvqzUkG 2y5tDz56asXHOKa7rVzJFgR92AVWZ02LWZn1fZsAJ7VAWjaXWQfHAUmQBfhHzyTl F0Y3ISG6eKHF3JJzIKXL+qV7RqqsVD6iqXieLfTQMWv9n6L0zOQPtXIfezbJbY3O Sg0r1OYDLvNqYK2ooM0Gzf8SY+KsFHI= -----END CERTIFICATE-----Generated at Sun Jul 20 22:52:58 2025 by rpki-client