$ rpki-client -vvf rpki.apnic.net/member_repository/A915370F/7346E8A2604911E2A307578D2979BB20/u1uBVrA35dIiY-rH9qEcBS_fYz8.mft File: u1uBVrA35dIiY-rH9qEcBS_fYz8.mft (raw, json) Hash identifier: fO4Ev1OOdN0qbVaVEHooNoSI2S0Ql6rcZo9CXlb5TzI= Subject key identifier: D2:2C:CD:FF:01:F4:85:3B:93:2D:49:B5:FA:BE:A8:61:5D:6D:90:BE Authority key identifier: BB:5B:81:56:B0:37:E5:D2:22:63:EA:C7:F6:A1:1C:05:2F:DF:63:3F Certificate issuer: /CN=A915370F/serialNumber=BB5B8156B037E5D22263EAC7F6A11C052FDF633F Certificate serial: 34E6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u1uBVrA35dIiY-rH9qEcBS_fYz8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915370F/7346E8A2604911E2A307578D2979BB20/u1uBVrA35dIiY-rH9qEcBS_fYz8.mft Manifest number: 3429 Signing time: Fri 18 Jul 2025 15:24:20 +0000 Manifest this update: Fri 18 Jul 2025 15:24:19 +0000 Manifest next update: Fri 25 Jul 2025 15:24:19 +0000 Files and hashes: 1: u1uBVrA35dIiY-rH9qEcBS_fYz8.crl (hash: gGk/DSVoWXrB9nZv2G4k4fFueHCkNe8E1aGy6wZrJDA=) 2: AA5075824F1811EFB6ECD54CC4F9AE02.roa (hash: zl75vWdRPXnP/XOghAc53jzYLr8BLgxiVkpvltTQaAc=) 3: 47E1F234B45111EEA556091EC4F9AE02.roa (hash: MUgpGvnpkewn251zM5+9m0/+F8vMSfuS6+jNZpfHvgc=) 4: 0A5276E04BB611EE8F105367C4F9AE02.roa (hash: /CXIwsodeDV6hc0P1vlVjGHFyr0hi79zRbh9IHZPKLQ=) 5: 6159E3148BEB11ED9A3CD825C4F9AE02.roa (hash: qzbXivpb0JIa597930ox0hSBuWQ7KjKDNIli1RBqDkg=) 6: 22C2A76E854811EFA776AC73C4F9AE02.roa (hash: sSX7DNQqfge4ejL0oQv0Vd+5TBaBgIDn0NKDxugYUZY=) 7: 6B016F4EB6C911EF9370FA5AC4F9AE02.roa (hash: 70B3F87XSLKvXUF998Hdc/HoObUhGZVos2Z7tXO0ymU=) 8: 60DB91E48BEB11ED9A3CD825C4F9AE02.roa (hash: cHqxUZqTQHQkS9uClycnmDqyKizAF8Nm5ODi8+cgf8M=) 9: 9826D5EEB45011EE829AF51CC4F9AE02.roa (hash: xKsyGzAN2c32GCPMOdzL9UsUOFCUvwfUwAzlRCnyX9k=) 10: B06C3C12AD6911EF9690E658C4F9AE02.roa (hash: R80o79Cf/gewMorDyo1D6ic4qzsusUsJXg7M2vOiDxY=) 11: 00E33588AD6A11EFBAD17A59C4F9AE02.roa (hash: eFmh82GukzWgT6djS8c7+wivzDuQ+NMo4zOollz6JbE=) 12: F180E2B24FD011EFBC17A55DC4F9AE02.roa (hash: a8K9VZNH2cU3Wb/3J3sb0wkiwGzXly4cMmkQuNOQcPc=) 13: 9B6837A8AD6911EFA86BAA58C4F9AE02.roa (hash: pWg9J7cYk+HXhg4hXPdqT10Vpf+1vT1PV33YnS6AG6c=) 14: 6C71053CAE2311EFAEB8B36AC4F9AE02.roa (hash: UB5jeT2vrtRpFNW5uH0buWOahHBRPdxwoEQZBy8ZiUA=) 15: FFAD463CB6C811EFAE27D256C4F9AE02.roa (hash: HocrnYD4sH7ksGOE0tlJzfX5xEpSjRMS91r9PGL/s1E=) 16: E9E37A28AD6911EFB6E53159C4F9AE02.roa (hash: z+Wb4gqIzNLeSAdA2Pq8enJbmWtWlhXLEadFxTzm+BI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915370F/7346E8A2604911E2A307578D2979BB20/u1uBVrA35dIiY-rH9qEcBS_fYz8.crl rsync://rpki.apnic.net/member_repository/A915370F/7346E8A2604911E2A307578D2979BB20/u1uBVrA35dIiY-rH9qEcBS_fYz8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u1uBVrA35dIiY-rH9qEcBS_fYz8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Jul 2025 15:24:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13542 (0x34e6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915370F, serialNumber=BB5B8156B037E5D22263EAC7F6A11C052FDF633F Validity Not Before: Jul 18 15:24:19 2025 GMT Not After : Jul 25 15:24:19 2025 GMT Subject: CN=687a6723-0325 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:2d:92:ae:13:d1:a0:f0:13:d2:96:13:3f:11: 6c:87:ab:dc:07:8c:c7:97:15:3d:ee:ca:17:26:88: 60:c9:b1:02:02:72:b2:3d:14:f4:1d:09:c4:02:9c: 74:59:de:b6:b5:37:44:d6:d0:94:de:d4:ef:be:8f: 46:ce:31:76:cf:00:02:37:8f:80:39:52:f6:0f:fc: 87:48:37:ec:d8:72:db:fe:7b:7b:ce:a3:ac:2c:10: ff:ce:59:a8:64:ab:17:db:7e:29:30:53:9e:2b:61: 68:cb:4c:db:b7:31:57:7e:46:42:01:bb:e3:91:a4: 7e:37:5f:da:44:83:01:59:19:f8:a6:a7:99:a9:f9: 07:88:15:20:0d:30:e7:a3:ba:49:eb:3f:12:76:e2: 3b:02:28:3c:b1:f1:91:ea:a3:92:43:4b:dd:e1:70: e6:68:7d:80:82:bc:b8:b7:98:1e:60:eb:32:bc:23: 96:3d:95:cd:a1:6c:6a:24:99:7f:3f:a7:66:85:4b: f7:46:65:76:b2:3d:15:bd:0e:c3:64:b6:49:e8:3d: 08:6f:ad:47:f8:4e:12:b7:71:d5:9a:10:4c:da:21: ab:d6:bb:2a:50:6e:7a:95:ae:52:3b:60:ff:6f:e0: 5f:36:be:c3:6e:c7:13:ee:e7:60:4b:32:f4:d9:69: 37:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:2C:CD:FF:01:F4:85:3B:93:2D:49:B5:FA:BE:A8:61:5D:6D:90:BE X509v3 Authority Key Identifier: keyid:BB:5B:81:56:B0:37:E5:D2:22:63:EA:C7:F6:A1:1C:05:2F:DF:63:3F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915370F/7346E8A2604911E2A307578D2979BB20/u1uBVrA35dIiY-rH9qEcBS_fYz8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u1uBVrA35dIiY-rH9qEcBS_fYz8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915370F/7346E8A2604911E2A307578D2979BB20/u1uBVrA35dIiY-rH9qEcBS_fYz8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption d4:82:76:b9:e7:78:07:6b:80:62:84:e5:45:fb:0d:5f:21:09: ee:46:f9:97:3d:f9:1d:0c:fe:0f:f3:92:9f:73:c6:29:21:ff: 51:24:de:6e:9b:2b:db:1d:0a:44:f5:9c:20:99:87:fe:e6:88: b7:76:4d:33:77:e9:8b:ea:91:98:ee:7c:79:3f:68:0c:f9:49: 1c:0a:1c:0f:bb:44:48:a8:9b:39:7e:e7:ba:c3:91:69:0f:e2: a8:83:47:18:15:94:d8:f7:c2:10:f1:d8:f0:cd:ae:1b:b9:0b: dc:0b:24:89:c2:86:17:cb:f3:69:76:6a:63:d1:75:b2:b3:1f: 1b:7d:ca:9f:c7:2f:dc:d7:3f:38:1a:f4:31:ef:cb:b3:40:db: 63:7d:e6:f1:74:1a:98:66:b8:03:f0:59:1d:57:d9:a8:97:7b: 25:81:57:14:45:58:9f:18:d3:a9:9c:7b:ca:4f:cc:08:17:f8: 25:e0:49:d7:f2:6e:e5:76:1e:f3:f6:fe:e7:d1:65:76:c4:01: 04:cf:c9:41:d0:be:85:22:90:a2:21:b0:3b:22:7a:a8:81:f2: 64:51:5f:92:06:59:0b:99:1b:74:c2:27:10:ad:cb:0d:a7:4d: 13:6e:a9:3d:9f:f0:9d:13:cd:b0:8b:bc:ae:cd:c8:f7:6d:e9: ac:2b:a9:ba -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNOYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTM3MEYxMTAvBgNVBAUTKEJCNUI4MTU2QjAzN0U1RDIyMjYzRUFDN0Y2QTExQzA1 MkZERjYzM0YwHhcNMjUwNzE4MTUyNDE5WhcNMjUwNzI1MTUyNDE5WjAYMRYwFAYD VQQDEw02ODdhNjcyMy0wMzI1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnC2SrhPRoPAT0pYTPxFsh6vcB4zHlxU97soXJohgybECAnKyPRT0HQnEApx0 Wd62tTdE1tCU3tTvvo9GzjF2zwACN4+AOVL2D/yHSDfs2HLb/nt7zqOsLBD/zlmo ZKsX234pMFOeK2Foy0zbtzFXfkZCAbvjkaR+N1/aRIMBWRn4pqeZqfkHiBUgDTDn o7pJ6z8SduI7Aig8sfGR6qOSQ0vd4XDmaH2Agry4t5geYOsyvCOWPZXNoWxqJJl/ P6dmhUv3RmV2sj0VvQ7DZLZJ6D0Ib61H+E4St3HVmhBM2iGr1rsqUG56la5SO2D/ b+BfNr7DbscT7udgSzL02Wk3WQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNIszf8B 9IU7ky1Jtfq+qGFdbZC+MB8GA1UdIwQYMBaAFLtbgVawN+XSImPqx/ahHAUv32M/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MzcwRi83MzQ2RThBMjYw NDkxMUUyQTMwNzU3OEQyOTc5QkIyMC91MXVCVnJBMzVkSWlZLXJIOXFFY0JTX2ZZ ejguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3UxdUJWckEzNWRJaVktckg5cUVjQlNfZll6OC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MzcwRi83MzQ2RThBMjYwNDkxMUUyQTMwNzU3OEQyOTc5QkIyMC91MXVCVnJBMzVk SWlZLXJIOXFFY0JTX2ZZejgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDUgna553gHa4BihOVF+w1fIQnuRvmXPfkdDP4P85Kfc8YpIf9RJN5u myvbHQpE9ZwgmYf+5oi3dk0zd+mL6pGY7nx5P2gM+UkcChwPu0RIqJs5fue6w5Fp D+Kog0cYFZTY98IQ8djwza4buQvcCySJwoYXy/Npdmpj0XWysx8bfcqfxy/c1z84 GvQx78uzQNtjfebxdBqYZrgD8FkdV9mol3slgVcURVifGNOpnHvKT8wIF/gl4EnX 8m7ldh7z9v7n0WV2xAEEz8lB0L6FIpCiIbA7InqogfJkUV+SBlkLmRt0wicQrcsN p00Tbqk9n/CdE82wi7yuzcj3bemsK6m6 -----END CERTIFICATE-----Generated at Sun Jul 20 07:59:18 2025 by rpki-client