$ rpki-client -vvf rpki.apnic.net/member_repository/A912442A/20F2CB00EB9C11ECA682120CC4F9AE02/hIWjnta2ISjt9PmbLCqBH1wgFXA.mft File: hIWjnta2ISjt9PmbLCqBH1wgFXA.mft (raw, json) Hash identifier: LtLfQ+GD/OVG76ZDCULbrJG7Uog/yJwBFuUQdlVKJzs= Subject key identifier: 2F:86:BB:FC:C0:F0:8C:DB:41:1F:03:50:5A:CC:48:95:C6:8E:60:0B Authority key identifier: 84:85:A3:9E:D6:B6:21:28:ED:F4:F9:9B:2C:2A:81:1F:5C:20:15:70 Certificate issuer: /CN=A912442A/serialNumber=8485A39ED6B62128EDF4F99B2C2A811F5C201570 Certificate serial: 037A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hIWjnta2ISjt9PmbLCqBH1wgFXA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912442A/20F2CB00EB9C11ECA682120CC4F9AE02/hIWjnta2ISjt9PmbLCqBH1wgFXA.mft Manifest number: 0325 Signing time: Sat 19 Jul 2025 01:42:50 +0000 Manifest this update: Sat 19 Jul 2025 01:42:49 +0000 Manifest next update: Sat 26 Jul 2025 01:42:49 +0000 Files and hashes: 1: hIWjnta2ISjt9PmbLCqBH1wgFXA.crl (hash: NMOxCdzqY25EfkFk/y3cpAPSWgnguFIB79EvKpWxeFs=) 2: DFB7A1FE68FA11EFB2CB6E60C4F9AE02.roa (hash: ZQ/fU5d1evPPnYD3iA98SPz8Kp3nQtzF91XOnGRTmko=) 3: AC9577F068F611EFBDC1C345C4F9AE02.roa (hash: c8x4WauwQnDwDqZuEAJ4h64A3YhZdzAuusRUf8JYYN8=) 4: EAEC9066690E11EF9396CC48C4F9AE02.roa (hash: itBUJ/NWTISnHVYwiSk058o8wCPmgPPTXD1wCEm1HPU=) 5: 72D237AEEBA011EC87608210C4F9AE02.roa (hash: iSdaxxqgc4SH7DXdUJ6oZreikaVBPpaQcLPWc3b7FIc=) 6: 36E3B902FE4E11EF9F12441CC4F9AE02.roa (hash: go1KQLAsWSMcDFpFZPzbcCoYXA902eWujQs5DRA5NuQ=) 7: BE4B3228691411EFB573C120C4F9AE02.roa (hash: FluzuCEVsK4WA6irM+7AYglOFW70dV1BU5TUHFD621E=) 8: 19EC493AE32111ED9B98B683C4F9AE02.roa (hash: t9M7T3kGK/bHK5ZGPmj0eAYe1o0Vh2EqcoFWaTSjMIE=) 9: 211E0AC268F911EF986C8281C4F9AE02.roa (hash: 5R/vByP+bLJ/gauluwV0ijjw0b2SOL4DSiyRAY6Etqs=) 10: EB6B9956690E11EF9396CC48C4F9AE02.roa (hash: m1fb1egRrU9+d8hQvMjnw8fgUgdDVqcZIQ0pMpm6ljc=) 11: DD84920268FA11EFB2CB6E60C4F9AE02.roa (hash: E+BZL/7QU8UpRIJdbcW9rfaR46I2sLpkyfwtpdJN/VI=) 12: DDFED4E068FA11EFB2CB6E60C4F9AE02.roa (hash: cN/u2ghL7Ty5H0rMkH3B9dtMoGNw2oNZ5rkn/Hb9xkU=) 13: F53FF9E668F411EFA1530C36C4F9AE02.roa (hash: 7Kj+4WHxVaVF82sSnOwl9LxBArA7W70r8lzjmBc5kVs=) 14: AC3A00D268F611EFBDC1C345C4F9AE02.roa (hash: H7xrZOzZPQxCuJob9N/j2hDDJP833H9T1/f50kmyI3U=) 15: 21FE5D3468F911EF986C8281C4F9AE02.roa (hash: be0pdzXjf+dpXeRPaIldstiNx4QzCRK3M1bauqjIvLs=) 16: 1F49DF36691311EF82B0FC62C4F9AE02.roa (hash: 9FLrfM7I4+bVcqyGWmEPmZO9HbNgyq3TURv3crH+HFI=) 17: DF4500C268FA11EFB2CB6E60C4F9AE02.roa (hash: zucr8aDjnFPBdo+ifl5g81+ainFQhQ/ksa8y2tjbLS4=) 18: 2A9845DE691411EF8D868864C4F9AE02.roa (hash: kogXUDWKK78CAHTJtbOeSXgRNGSuMbtJtIHaw+cqK8c=) 19: ABC651E668F611EFBDC1C345C4F9AE02.roa (hash: cAER3YKLvVpIlFa2HmbUxYe1iz95sgNYpvM/4V9O1FM=) 20: EA792108690E11EF9396CC48C4F9AE02.roa (hash: umWQN4kGqAHPIk4w+IQl09gKoDRTIfMgnHpo1DCC4Pw=) 21: 869FE0CC69B311EF9E81312BC4F9AE02.roa (hash: eF1xrltNfnruVqxNMjD44+JutJBXSUDGILKtju+n9dE=) 22: B35D540E68F611EFB785D145C4F9AE02.roa (hash: oyIjz/XYfgr26Spk6RY9XOtfUIT6X7uMOPMW03yZfAM=) 23: 1519FB12F8B611EF91DD795BC4F9AE02.roa (hash: v2vRc6B+gwZg5NOfzaQPP6ML2YBJcqr080DwDx1pUOg=) 24: 218211CA68F911EF986C8281C4F9AE02.roa (hash: pHoz/kBOmkd5VG3teXH7pPsGNOOVgbbDMsd3VhHUAEo=) 25: 2072597E691311EF82B0FC62C4F9AE02.roa (hash: Y3bQNy1ojyOB4N21qfu+0X9uUvLU+z0WanHBys0zBlU=) 26: 29C3BF9E691411EF8D868864C4F9AE02.roa (hash: HQ71fsK6HJEx6JB43+BRDscF/a1IXcYLFxyQuU5FBnw=) 27: 4A93DB1068F511EF8E131B43C4F9AE02.roa (hash: kqYwhkwqrnPwUBbzCMbRJ6+BU/s1Jp8YtMASUL3cC6Y=) 28: 200F7106691311EF82B0FC62C4F9AE02.roa (hash: d/aMw06UKvCrIDovTtwhw18Yfx0jjxX2eyRA38OLxcQ=) 29: DEA0D1E668FA11EFB2CB6E60C4F9AE02.roa (hash: +1sHzrOMqBbheGIlr1WPdNiSvR59VAOdWWIJJa+mgHk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912442A/20F2CB00EB9C11ECA682120CC4F9AE02/hIWjnta2ISjt9PmbLCqBH1wgFXA.crl rsync://rpki.apnic.net/member_repository/A912442A/20F2CB00EB9C11ECA682120CC4F9AE02/hIWjnta2ISjt9PmbLCqBH1wgFXA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hIWjnta2ISjt9PmbLCqBH1wgFXA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 01:42:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 890 (0x37a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912442A, serialNumber=8485A39ED6B62128EDF4F99B2C2A811F5C201570 Validity Not Before: Jul 19 01:42:49 2025 GMT Not After : Jul 26 01:42:49 2025 GMT Subject: CN=687af81a-d20c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:a3:7d:af:31:d5:e3:24:cf:e1:91:2d:e3:c7: ad:ba:49:f8:9c:f1:d4:3a:64:55:9d:04:03:85:2c: 8d:09:8c:ae:59:71:32:0c:66:46:e7:fe:87:ff:5f: 07:cb:01:d1:25:98:02:c1:ec:ec:fe:91:00:be:76: 69:32:33:39:df:ed:3e:35:e6:0b:e0:3d:c8:0a:95: 8f:39:80:e1:f3:ac:83:d8:b0:ed:9a:46:71:bb:26: 13:2e:cf:97:f4:9b:39:13:bd:86:eb:f2:18:d8:4f: 7a:d0:47:23:1c:3b:49:72:1a:34:1f:fa:d5:d3:8b: f3:d1:62:41:f6:70:49:4c:2d:35:be:c0:45:0a:a4: 8e:16:f8:82:87:6d:41:4b:40:80:5c:d6:67:38:87: 8a:4b:97:2d:08:90:61:ac:b1:ae:a6:c6:d9:22:03: 69:b0:4f:c9:47:fe:e5:7a:6b:17:83:48:b6:48:fe: 7b:eb:f2:0a:87:7b:c9:6f:99:02:32:25:b2:4b:58: 4a:12:52:b0:33:6f:8d:f2:56:fc:c1:1c:4e:a9:94: 2a:1b:12:c4:2e:49:c1:3f:6b:65:c5:80:1c:11:43: 8d:bf:f5:a2:a3:6c:cf:4c:2b:e2:3c:ed:c2:e1:18: 01:b7:2e:c8:3d:68:86:91:ce:5b:a9:5e:09:06:f1: 44:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:86:BB:FC:C0:F0:8C:DB:41:1F:03:50:5A:CC:48:95:C6:8E:60:0B X509v3 Authority Key Identifier: keyid:84:85:A3:9E:D6:B6:21:28:ED:F4:F9:9B:2C:2A:81:1F:5C:20:15:70 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912442A/20F2CB00EB9C11ECA682120CC4F9AE02/hIWjnta2ISjt9PmbLCqBH1wgFXA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hIWjnta2ISjt9PmbLCqBH1wgFXA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912442A/20F2CB00EB9C11ECA682120CC4F9AE02/hIWjnta2ISjt9PmbLCqBH1wgFXA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 22:de:f4:3a:35:2f:2c:ab:c6:f9:ee:2f:b5:f3:bc:67:d4:8a: 4f:cc:ed:4b:3a:53:18:c8:4a:81:4d:16:24:91:7b:c7:65:b7: 2c:2c:04:25:4a:d6:1e:a1:c8:15:15:ef:d2:7c:d8:d2:12:58: 14:f0:66:ba:5f:d2:57:ef:57:53:65:76:32:3d:02:0f:24:51: 7d:c6:71:b3:21:c4:81:be:89:ea:8f:1c:6a:48:e4:15:86:5a: e0:0e:07:28:f6:e9:ee:47:bc:db:d1:e6:af:cf:f3:dc:7e:b8: 5c:cb:c4:86:2d:c4:df:55:af:97:4e:da:e9:c8:01:42:eb:72: f8:c0:79:63:e7:4b:4c:56:f0:b8:06:66:18:29:57:b4:26:0f: 63:f0:4f:5c:71:f6:c4:8f:34:86:5c:0d:89:df:e6:1c:4c:4d: 46:25:ce:f8:54:21:c0:81:88:6c:df:60:48:49:0a:ef:0d:21: 4f:9e:99:83:06:b4:fe:56:15:c2:45:5b:59:de:bc:ce:04:45: 41:9a:23:d9:de:ff:b1:50:d6:46:a6:37:e9:df:2f:0f:73:5f: 24:95:ca:52:82:fd:eb:61:11:92:c8:74:32:99:1d:18:95:39: e7:5e:d9:11:b3:2a:cd:8c:af:9a:8b:be:1e:40:3b:05:0f:f7: b8:d7:09:5c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA3owDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjQ0MkExMTAvBgNVBAUTKDg0ODVBMzlFRDZCNjIxMjhFREY0Rjk5QjJDMkE4MTFG NUMyMDE1NzAwHhcNMjUwNzE5MDE0MjQ5WhcNMjUwNzI2MDE0MjQ5WjAYMRYwFAYD VQQDEw02ODdhZjgxYS1kMjBjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvqN9rzHV4yTP4ZEt48etukn4nPHUOmRVnQQDhSyNCYyuWXEyDGZG5/6H/18H ywHRJZgCwezs/pEAvnZpMjM53+0+NeYL4D3ICpWPOYDh86yD2LDtmkZxuyYTLs+X 9Js5E72G6/IY2E960EcjHDtJcho0H/rV04vz0WJB9nBJTC01vsBFCqSOFviCh21B S0CAXNZnOIeKS5ctCJBhrLGupsbZIgNpsE/JR/7lemsXg0i2SP576/IKh3vJb5kC MiWyS1hKElKwM2+N8lb8wRxOqZQqGxLELknBP2tlxYAcEUONv/Wio2zPTCviPO3C 4RgBty7IPWiGkc5bqV4JBvFERQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFC+Gu/zA 8IzbQR8DUFrMSJXGjmALMB8GA1UdIwQYMBaAFISFo57WtiEo7fT5mywqgR9cIBVw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNDQyQS8yMEYyQ0IwMEVC OUMxMUVDQTY4MjEyMENDNEY5QUUwMi9oSVdqbnRhMklTanQ5UG1iTENxQkgxd2dG WEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2hJV2pudGEySVNqdDlQbWJMQ3FCSDF3Z0ZYQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NDQyQS8yMEYyQ0IwMEVCOUMxMUVDQTY4MjEyMENDNEY5QUUwMi9oSVdqbnRhMklT anQ5UG1iTENxQkgxd2dGWEEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAi3vQ6NS8sq8b57i+187xn1IpPzO1LOlMYyEqBTRYkkXvHZbcsLAQl StYeocgVFe/SfNjSElgU8Ga6X9JX71dTZXYyPQIPJFF9xnGzIcSBvonqjxxqSOQV hlrgDgco9unuR7zb0eavz/Pcfrhcy8SGLcTfVa+XTtrpyAFC63L4wHlj50tMVvC4 BmYYKVe0Jg9j8E9ccfbEjzSGXA2J3+YcTE1GJc74VCHAgYhs32BISQrvDSFPnpmD BrT+VhXCRVtZ3rzOBEVBmiPZ3v+xUNZGpjfp3y8Pc18klcpSgv3rYRGSyHQymR0Y lTnnXtkRsyrNjK+ai74eQDsFD/e41wlc -----END CERTIFICATE-----Generated at Sun Jul 20 18:53:39 2025 by rpki-client