$ rpki-client -vvf rpki.apnic.net/member_repository/A916B6AA/46C7F1724F1611E58D2A3327C4F9AE02/cLDwRtLzp0OW6Cx56OPazyYLOe4.mft File: cLDwRtLzp0OW6Cx56OPazyYLOe4.mft (raw, json) Hash identifier: rJavr3jgDuKwTYOhM/wtylSjKtjfF9cRPrPrVjHZ2hI= Subject key identifier: CC:04:04:BF:8C:D6:4D:82:BA:10:94:1E:3C:6E:3F:92:8A:65:2D:17 Authority key identifier: 70:B0:F0:46:D2:F3:A7:43:96:E8:2C:79:E8:E3:DA:CF:26:0B:39:EE Certificate issuer: /CN=A916B6AA/serialNumber=70B0F046D2F3A74396E82C79E8E3DACF260B39EE Certificate serial: 24B8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cLDwRtLzp0OW6Cx56OPazyYLOe4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916B6AA/46C7F1724F1611E58D2A3327C4F9AE02/cLDwRtLzp0OW6Cx56OPazyYLOe4.mft Manifest number: 2475 Signing time: Fri 18 Jul 2025 15:53:37 +0000 Manifest this update: Fri 18 Jul 2025 15:53:36 +0000 Manifest next update: Fri 25 Jul 2025 15:53:36 +0000 Files and hashes: 1: cLDwRtLzp0OW6Cx56OPazyYLOe4.crl (hash: swy0aC+0obiLlssmqjPO+vRJ3NzDY4skze7oBsNz8KU=) 2: 83684F548DF411E7A230506DC4F9AE02.roa (hash: 7rwSXJvv/HshNFddgboHnncSidkclYa/NvGMbxx8LFA=) 3: 1A8324E28DF311E7B616ED66C4F9AE02.roa (hash: nq0Uzk8SuEDu3ZbDp3B41hYz4SbibvM9axOdjGoUmDE=) 4: E080F3508DFC11E7A7F08785C4F9AE02.roa (hash: 4MVhPeL89L4iqif2jjx8A1Zl5rTPkTTCl8RIrLHaD+o=) 5: 19C92BC88DF311E7B616ED66C4F9AE02.roa (hash: aaC6AltbMVKLhQjXZ7dpspAxhJD3m7klJ08VK8NpfEI=) 6: B2ED9AEE913311E79B98C45BC4F9AE02.roa (hash: RYNGA3H5ydUqwQnOMshPikkHHM7bQr9sFSWMotIy4S0=) 7: 5C9B073691CD11E7AD932563C4F9AE02.roa (hash: +cU9ydF4cWSQqI/mYS8fYBUIoo4803uhA7oc0s3jgaU=) 8: 027532E6385F11EAA879692AC4F9AE02.roa (hash: CM6RIxM9JHHGhZC10urcCuophC6TNcTlTYu0C+8d5wc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916B6AA/46C7F1724F1611E58D2A3327C4F9AE02/cLDwRtLzp0OW6Cx56OPazyYLOe4.crl rsync://rpki.apnic.net/member_repository/A916B6AA/46C7F1724F1611E58D2A3327C4F9AE02/cLDwRtLzp0OW6Cx56OPazyYLOe4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cLDwRtLzp0OW6Cx56OPazyYLOe4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Jul 2025 15:53:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9400 (0x24b8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916B6AA, serialNumber=70B0F046D2F3A74396E82C79E8E3DACF260B39EE Validity Not Before: Jul 18 15:53:36 2025 GMT Not After : Jul 25 15:53:36 2025 GMT Subject: CN=687a6e01-a296 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:47:79:d4:0e:c1:18:7f:a8:b5:47:43:e0:31: f7:09:1b:5f:f6:ea:94:f9:85:7d:de:90:10:c8:c7: 71:1e:56:7d:3c:5e:67:eb:fa:5a:36:4c:4c:e3:93: 0e:b6:34:bc:26:4e:02:f6:a3:79:40:e3:14:48:42: 14:32:29:3c:7f:3f:b1:aa:52:5c:cd:d1:c9:44:b1: cc:32:84:40:8b:a0:de:d5:b6:33:f3:a4:be:c7:f5: fb:98:ef:c9:c2:bb:b8:14:b6:2a:4f:31:49:e0:d5: 73:b9:cb:65:ac:da:c1:9c:30:7c:e3:5e:70:2d:d2: 52:e6:3e:68:dd:6e:84:6c:f7:9e:05:83:d6:f5:b7: f7:c9:4c:99:ee:61:44:ae:d2:bd:f1:1a:43:53:6e: 28:d1:a4:56:8e:42:1a:73:66:df:84:cf:52:7a:e9: d8:9f:4d:89:f8:b4:26:10:58:97:ef:04:f0:5b:2c: 45:85:48:fe:31:db:d2:57:41:db:7c:7b:00:cb:41: df:be:1b:24:83:f5:b3:e4:ae:74:fd:2a:8d:73:ca: 87:c0:a0:33:83:b9:ac:79:4f:ad:97:e8:84:a2:5f: 46:0e:ae:18:9c:40:06:65:f5:f5:db:2b:0a:0e:39: 97:2b:43:3d:41:87:21:08:24:bf:c2:c0:76:77:2b: 33:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:04:04:BF:8C:D6:4D:82:BA:10:94:1E:3C:6E:3F:92:8A:65:2D:17 X509v3 Authority Key Identifier: keyid:70:B0:F0:46:D2:F3:A7:43:96:E8:2C:79:E8:E3:DA:CF:26:0B:39:EE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916B6AA/46C7F1724F1611E58D2A3327C4F9AE02/cLDwRtLzp0OW6Cx56OPazyYLOe4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cLDwRtLzp0OW6Cx56OPazyYLOe4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916B6AA/46C7F1724F1611E58D2A3327C4F9AE02/cLDwRtLzp0OW6Cx56OPazyYLOe4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 68:06:f3:c9:59:b3:e3:d0:42:b0:82:6a:c8:1e:b0:a1:d4:29: 77:06:57:c7:6a:c2:b5:db:6c:76:1a:73:b5:f1:ab:ad:54:7a: 75:24:dd:c7:e3:66:b3:ce:45:1a:80:ab:33:3e:e7:5b:2a:08: 41:c3:e7:70:07:35:89:96:25:2c:9b:e6:22:b8:4d:27:87:18: 48:ec:ab:ee:cb:68:16:d0:58:fd:0f:c0:61:5a:8f:de:cd:45: 86:22:7a:d5:5c:c3:91:8c:bc:4f:1b:d9:fa:da:08:ce:77:ab: c2:be:86:f0:a5:04:7c:03:b9:cf:4b:c0:ff:1c:1b:08:db:58: 71:10:dc:65:3e:e6:27:16:1c:2f:c1:c4:ac:7f:c5:e5:1b:83: 6c:47:b1:6b:03:3f:27:80:7a:52:f9:99:17:28:8f:65:a8:91: 77:1f:09:4d:3c:4e:17:fd:95:c3:4b:ab:1b:f6:3b:2f:84:48: a1:d3:5b:71:db:d7:29:64:af:d7:e3:79:50:2c:c4:37:77:1c: 1c:36:17:af:07:bb:e9:85:d3:e2:8f:fa:4c:24:b6:05:88:96: 4e:8a:e0:57:24:ba:f9:77:39:22:e1:91:09:e4:d0:0d:99:fe: 4a:ed:e9:d7:47:a1:bd:09:62:a7:c6:41:1b:3c:28:23:2a:07: 4e:41:16:d8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICJLgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkI2QUExMTAvBgNVBAUTKDcwQjBGMDQ2RDJGM0E3NDM5NkU4MkM3OUU4RTNEQUNG MjYwQjM5RUUwHhcNMjUwNzE4MTU1MzM2WhcNMjUwNzI1MTU1MzM2WjAYMRYwFAYD VQQDEw02ODdhNmUwMS1hMjk2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwUd51A7BGH+otUdD4DH3CRtf9uqU+YV93pAQyMdxHlZ9PF5n6/paNkxM45MO tjS8Jk4C9qN5QOMUSEIUMik8fz+xqlJczdHJRLHMMoRAi6De1bYz86S+x/X7mO/J wru4FLYqTzFJ4NVzuctlrNrBnDB8415wLdJS5j5o3W6EbPeeBYPW9bf3yUyZ7mFE rtK98RpDU24o0aRWjkIac2bfhM9SeunYn02J+LQmEFiX7wTwWyxFhUj+MdvSV0Hb fHsAy0Hfvhskg/Wz5K50/SqNc8qHwKAzg7mseU+tl+iEol9GDq4YnEAGZfX12ysK DjmXK0M9QYchCCS/wsB2dysz1QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMwEBL+M 1k2CuhCUHjxuP5KKZS0XMB8GA1UdIwQYMBaAFHCw8EbS86dDlugseejj2s8mCznu MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QjZBQS80NkM3RjE3MjRG MTYxMUU1OEQyQTMzMjdDNEY5QUUwMi9jTER3UnRMenAwT1c2Q3g1Nk9QYXp5WUxP ZTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NMRHdSdEx6cDBPVzZDeDU2T1BhenlZTE9lNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 QjZBQS80NkM3RjE3MjRGMTYxMUU1OEQyQTMzMjdDNEY5QUUwMi9jTER3UnRMenAw T1c2Q3g1Nk9QYXp5WUxPZTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBoBvPJWbPj0EKwgmrIHrCh1Cl3BlfHasK122x2GnO18autVHp1JN3H 42azzkUagKszPudbKghBw+dwBzWJliUsm+YiuE0nhxhI7Kvuy2gW0Fj9D8BhWo/e zUWGInrVXMORjLxPG9n62gjOd6vCvobwpQR8A7nPS8D/HBsI21hxENxlPuYnFhwv wcSsf8XlG4NsR7FrAz8ngHpS+ZkXKI9lqJF3HwlNPE4X/ZXDS6sb9jsvhEih01tx 29cpZK/X43lQLMQ3dxwcNhevB7vphdPij/pMJLYFiJZOiuBXJLr5dzki4ZEJ5NAN mf5K7enXR6G9CWKnxkEbPCgjKgdOQRbY -----END CERTIFICATE-----Generated at Sun Jul 20 03:30:56 2025 by rpki-client