$ rpki-client -vvf rpki.apnic.net/member_repository/A9126A3C/7390B34AC6A011EF928B7960C4F9AE02/l7A9ovtF9W4_WCFj33vZUGk5mUQ.mft File: l7A9ovtF9W4_WCFj33vZUGk5mUQ.mft (raw, json) Hash identifier: NWTSdmgc80EbzjNf/atW6q5Qjq9Iw2ENouD//20f1p8= Subject key identifier: FA:CB:09:86:F0:90:F5:C6:D8:5D:5E:7B:2F:7A:EA:4A:F5:02:C8:D5 Authority key identifier: 97:B0:3D:A2:FB:45:F5:6E:3F:58:21:63:DF:7B:D9:50:69:39:99:44 Certificate issuer: /CN=A9126A3C/serialNumber=97B03DA2FB45F56E3F582163DF7BD95069399944 Certificate serial: 86 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/l7A9ovtF9W4_WCFj33vZUGk5mUQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9126A3C/7390B34AC6A011EF928B7960C4F9AE02/l7A9ovtF9W4_WCFj33vZUGk5mUQ.mft Manifest number: 83 Signing time: Fri 05 Sep 2025 07:07:46 +0000 Manifest this update: Fri 05 Sep 2025 07:07:45 +0000 Manifest next update: Fri 12 Sep 2025 07:07:45 +0000 Files and hashes: 1: l7A9ovtF9W4_WCFj33vZUGk5mUQ.crl (hash: uK7uknNbmwPHcVv3hc8sGaA6qSEZJRl7HOAeeyWXOWY=) 2: F120EB84C6D911EFA447E849C4F9AE02.roa (hash: mo70D3RkkFpkqu5IGLksT/J6Tz0OUu7ujkEgshBAI8o=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9126A3C/7390B34AC6A011EF928B7960C4F9AE02/l7A9ovtF9W4_WCFj33vZUGk5mUQ.crl rsync://rpki.apnic.net/member_repository/A9126A3C/7390B34AC6A011EF928B7960C4F9AE02/l7A9ovtF9W4_WCFj33vZUGk5mUQ.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/l7A9ovtF9W4_WCFj33vZUGk5mUQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Sep 2025 07:07:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 134 (0x86) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9126A3C, serialNumber=97B03DA2FB45F56E3F582163DF7BD95069399944 Validity Not Before: Sep 5 07:07:45 2025 GMT Not After : Sep 12 07:07:45 2025 GMT Subject: CN=68ba8c42-615d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:25:ed:09:81:cf:e2:8c:03:72:90:35:45:c0: 21:ab:dd:22:56:d5:84:86:87:19:0e:bb:db:38:ff: 81:d9:a8:d6:13:66:c3:67:c0:6d:1c:c5:3f:98:f2: 1b:60:6a:74:12:b7:07:38:dd:c4:4d:11:aa:38:c7: 14:33:b5:46:c7:0f:8b:d1:be:06:e7:50:1b:52:bd: 6b:51:b5:2b:91:d9:54:f2:22:24:da:ca:64:fe:00: 10:6e:a1:f6:32:bf:a7:75:d9:f8:23:ca:90:60:37: 3e:94:18:37:f3:a4:0f:c7:54:f4:f8:d0:94:ce:97: b0:7a:a8:79:1e:52:30:0b:6d:48:c2:e0:f6:fc:98: 64:77:12:7d:d9:17:67:2f:1b:43:1f:9b:9a:9f:eb: 4f:3b:7a:a1:98:20:9b:52:e1:f0:e1:db:cd:08:e2: a0:f4:20:98:85:fc:05:61:97:d7:b1:fb:1a:1c:ce: 9b:e2:15:92:ba:b4:20:01:fc:59:1d:a8:66:17:69: f7:bd:08:dd:55:72:2a:8f:82:32:d1:4a:81:fa:96: e5:e5:3b:5b:18:5b:c5:43:cf:73:0b:96:10:41:1d: 7c:f4:e5:24:b6:76:33:71:60:10:2c:b8:38:f4:12: c3:94:fb:4e:89:2f:48:99:23:cf:7f:d7:f0:bb:aa: be:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:CB:09:86:F0:90:F5:C6:D8:5D:5E:7B:2F:7A:EA:4A:F5:02:C8:D5 X509v3 Authority Key Identifier: keyid:97:B0:3D:A2:FB:45:F5:6E:3F:58:21:63:DF:7B:D9:50:69:39:99:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9126A3C/7390B34AC6A011EF928B7960C4F9AE02/l7A9ovtF9W4_WCFj33vZUGk5mUQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/l7A9ovtF9W4_WCFj33vZUGk5mUQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9126A3C/7390B34AC6A011EF928B7960C4F9AE02/l7A9ovtF9W4_WCFj33vZUGk5mUQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c0:39:c1:63:58:7d:1d:c5:55:b9:0e:3e:46:1c:59:71:04:c5: f4:dc:31:e2:7c:c0:95:d5:05:fa:35:a2:2f:66:7f:e7:f5:cd: e0:d0:bd:ee:a1:46:a5:28:63:05:1b:d6:67:25:88:4e:c8:14: 95:95:23:6c:4f:d8:ab:b3:e0:e5:1f:65:e1:46:41:8d:9a:78: 1b:b5:7e:de:1c:4c:e2:aa:51:97:9b:9c:f6:24:55:8e:14:a1: c5:89:53:fe:79:7c:7b:d6:5c:7a:77:5c:a0:09:f7:1c:72:46: 49:60:69:5a:98:38:d7:5b:1f:34:4d:52:35:d7:79:e7:2d:25: 66:cb:41:76:93:db:31:9d:bf:7c:f3:e6:5d:58:63:8f:ab:b3: 90:9a:a3:8f:f7:aa:ba:1d:1c:c8:1a:5a:14:5d:18:2c:c7:5c: 23:2d:d2:79:51:f0:c6:07:3f:fb:38:67:71:13:be:42:87:9d: 0a:b8:bb:a4:9e:9c:bc:ff:3c:a1:bc:6e:a0:1e:25:34:4b:03: 49:6b:99:13:7b:76:ec:40:0c:87:7c:c2:27:92:02:d0:71:bf: a7:70:05:08:a6:aa:de:13:4d:95:76:7d:24:ce:55:8c:22:5e: 31:df:40:7a:9f:f7:5b:7a:2b:64:0b:c0:fc:a3:3b:11:90:7a: aa:64:32:53 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAIYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjZBM0MxMTAvBgNVBAUTKDk3QjAzREEyRkI0NUY1NkUzRjU4MjE2M0RGN0JEOTUw NjkzOTk5NDQwHhcNMjUwOTA1MDcwNzQ1WhcNMjUwOTEyMDcwNzQ1WjAYMRYwFAYD VQQDEw02OGJhOGM0Mi02MTVkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuyXtCYHP4owDcpA1RcAhq90iVtWEhocZDrvbOP+B2ajWE2bDZ8BtHMU/mPIb YGp0ErcHON3ETRGqOMcUM7VGxw+L0b4G51AbUr1rUbUrkdlU8iIk2spk/gAQbqH2 Mr+nddn4I8qQYDc+lBg386QPx1T0+NCUzpeweqh5HlIwC21IwuD2/JhkdxJ92Rdn LxtDH5uan+tPO3qhmCCbUuHw4dvNCOKg9CCYhfwFYZfXsfsaHM6b4hWSurQgAfxZ HahmF2n3vQjdVXIqj4Iy0UqB+pbl5TtbGFvFQ89zC5YQQR189OUktnYzcWAQLLg4 9BLDlPtOiS9ImSPPf9fwu6q+0wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPrLCYbw kPXG2F1eey966kr1AsjVMB8GA1UdIwQYMBaAFJewPaL7RfVuP1ghY9972VBpOZlE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNkEzQy83MzkwQjM0QUM2 QTAxMUVGOTI4Qjc5NjBDNEY5QUUwMi9sN0E5b3Z0RjlXNF9XQ0ZqMzN2WlVHazVt VVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2w3QTlvdnRGOVc0X1dDRmozM3ZaVUdrNW1VUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NkEzQy83MzkwQjM0QUM2QTAxMUVGOTI4Qjc5NjBDNEY5QUUwMi9sN0E5b3Z0RjlX NF9XQ0ZqMzN2WlVHazVtVVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDAOcFjWH0dxVW5Dj5GHFlxBMX03DHifMCV1QX6NaIvZn/n9c3g0L3u oUalKGMFG9ZnJYhOyBSVlSNsT9irs+DlH2XhRkGNmngbtX7eHEziqlGXm5z2JFWO FKHFiVP+eXx71lx6d1ygCfccckZJYGlamDjXWx80TVI113nnLSVmy0F2k9sxnb98 8+ZdWGOPq7OQmqOP96q6HRzIGloUXRgsx1wjLdJ5UfDGBz/7OGdxE75Ch50KuLuk npy8/zyhvG6gHiU0SwNJa5kTe3bsQAyHfMInkgLQcb+ncAUIpqreE02Vdn0kzlWM Il4x30B6n/dbeitkC8D8ozsRkHqqZDJT -----END CERTIFICATE-----Generated at Sat Sep 6 21:06:07 2025 by rpki-client