$ rpki-client -vvf rpki.apnic.net/member_repository/A916CCFF/9A5EC16C46FE11EC94E3D24AC4F9AE02/CANmLFcTJXKPJPqtjLGl8ZAHFe0.mft File: CANmLFcTJXKPJPqtjLGl8ZAHFe0.mft (raw, json) Hash identifier: ls9WRYUETbVOWEIAd4GEv+c9p48BV6gM6G3QaoL/hPA= Subject key identifier: 39:39:9B:50:EC:D1:4C:93:1C:25:6B:B0:C8:64:66:B4:85:37:3C:29 Authority key identifier: 08:03:66:2C:57:13:25:72:8F:24:FA:AD:8C:B1:A5:F1:90:07:15:ED Certificate issuer: /CN=A916CCFF/serialNumber=0803662C571325728F24FAAD8CB1A5F1900715ED Certificate serial: 04B4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CANmLFcTJXKPJPqtjLGl8ZAHFe0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916CCFF/9A5EC16C46FE11EC94E3D24AC4F9AE02/CANmLFcTJXKPJPqtjLGl8ZAHFe0.mft Manifest number: 049A Signing time: Mon 21 Jul 2025 00:14:40 +0000 Manifest this update: Mon 21 Jul 2025 00:14:40 +0000 Manifest next update: Mon 28 Jul 2025 00:14:40 +0000 Files and hashes: 1: CANmLFcTJXKPJPqtjLGl8ZAHFe0.crl (hash: QHmMPSZZMayb2lVVnN5HxMR5DTsV359S3fQ8vDf5pDk=) 2: 02F57BD252E711EC931DB95CC4F9AE02.roa (hash: TGHGZPpqAj2jmtX8lTQMi8kBaI8ojiWWIFj1IWycEgs=) 3: 413AD9F852E411EC9E19AA2FC4F9AE02.roa (hash: Y2Z1jehKepnssjRVP8joGvXLmK9adM98wErhHrOtaeg=) 4: 41E32C9852E411EC9E19AA2FC4F9AE02.roa (hash: i1mD+r6XwMu6On3/bUlN+PaLdP6khHenZ0Z0HUab9AI=) 5: 0517C4F0470311EC9E6FA71DC4F9AE02.roa (hash: o+VIx3yy8oMDW/C3RImP2D9X9JrFefZYlsNOIecQzAE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916CCFF/9A5EC16C46FE11EC94E3D24AC4F9AE02/CANmLFcTJXKPJPqtjLGl8ZAHFe0.crl rsync://rpki.apnic.net/member_repository/A916CCFF/9A5EC16C46FE11EC94E3D24AC4F9AE02/CANmLFcTJXKPJPqtjLGl8ZAHFe0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CANmLFcTJXKPJPqtjLGl8ZAHFe0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Jul 2025 00:14:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1204 (0x4b4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916CCFF, serialNumber=0803662C571325728F24FAAD8CB1A5F1900715ED Validity Not Before: Jul 21 00:14:40 2025 GMT Not After : Jul 28 00:14:40 2025 GMT Subject: CN=687d8670-90b2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:14:d1:a9:01:e6:38:bc:20:46:07:eb:95:21: 4e:25:37:02:10:ac:9b:a6:b3:98:be:61:c6:16:2e: 4c:34:a3:89:7d:0e:96:40:53:6c:a3:06:0e:e1:0f: 36:52:ac:39:dc:91:ad:d2:f9:0a:67:30:6e:40:45: 8f:4a:a5:1a:20:ef:be:04:b8:50:5c:eb:0c:cc:a8: 25:e2:45:5c:1e:bd:6a:e6:3c:67:17:9e:9d:db:1e: 76:5c:e4:6e:2a:e2:3e:bb:b8:43:7c:fb:a9:9c:4e: 21:ea:34:61:3c:94:86:42:9a:43:42:47:b5:96:9c: 96:6a:eb:36:5a:e2:35:00:8d:3b:1f:1f:b4:36:17: 04:6a:71:73:31:0a:9d:f0:ad:68:8f:39:70:b0:9a: 6b:f9:7d:6a:a4:48:17:6b:12:5e:22:3d:56:91:e2: 20:67:a7:e3:23:9f:a3:04:60:f3:57:a5:c8:4f:8a: 88:70:04:1b:8d:d7:74:c3:ae:b6:27:38:44:28:87: a6:c3:65:08:df:af:b3:26:c8:f5:96:42:46:04:66: 00:02:41:aa:34:af:5c:e9:ea:ba:da:2e:51:fa:6f: ff:8c:d2:c7:f0:31:e9:93:b4:22:05:0e:31:4f:3c: 8c:f3:9c:bc:06:a5:9a:64:82:98:8e:cd:9d:8f:30: d6:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:39:9B:50:EC:D1:4C:93:1C:25:6B:B0:C8:64:66:B4:85:37:3C:29 X509v3 Authority Key Identifier: keyid:08:03:66:2C:57:13:25:72:8F:24:FA:AD:8C:B1:A5:F1:90:07:15:ED X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916CCFF/9A5EC16C46FE11EC94E3D24AC4F9AE02/CANmLFcTJXKPJPqtjLGl8ZAHFe0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CANmLFcTJXKPJPqtjLGl8ZAHFe0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916CCFF/9A5EC16C46FE11EC94E3D24AC4F9AE02/CANmLFcTJXKPJPqtjLGl8ZAHFe0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 66:2b:1b:d9:f6:a2:13:f6:68:24:0a:e4:44:e5:c0:1a:63:13: d9:31:a0:26:d2:5a:b4:60:3d:e9:25:19:72:c0:e2:e9:f8:8a: c3:c4:23:b0:f4:57:87:ae:62:37:95:dc:f6:be:a1:00:a6:1d: 43:9b:51:61:55:23:f0:58:8e:3a:4d:a4:6f:65:53:fb:d7:49: 96:d3:18:ba:4c:18:b5:f9:65:56:4e:91:47:39:0d:a0:e7:58: 66:ea:de:a6:af:69:e5:4a:ed:32:31:2a:5b:ed:0e:29:7d:df: a9:dd:28:24:ea:ec:70:e0:0a:bb:29:ce:c0:6c:29:68:d9:54: 5a:ec:12:6c:11:1d:0c:64:bd:13:d0:01:d4:3f:0a:6d:b6:92: 1d:11:9e:da:4c:dc:87:6a:fb:a0:ba:f4:dd:29:55:28:4e:8d: 50:f9:41:b8:6b:d2:c9:b0:af:00:94:58:00:e9:c6:d0:12:1c: 55:4d:57:e4:a4:32:b5:c4:c5:74:24:86:12:2f:3e:fd:af:5e: 25:f1:4f:ed:62:71:95:b2:3c:74:41:5d:4b:07:61:db:9f:1b: 95:cb:f3:61:25:28:73:1b:b7:88:de:1c:69:4c:18:c7:e4:09: a0:23:72:6f:e7:73:4a:02:5e:86:4a:89:11:d1:84:c2:e5:71: 74:71:b7:ac -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBLQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkNDRkYxMTAvBgNVBAUTKDA4MDM2NjJDNTcxMzI1NzI4RjI0RkFBRDhDQjFBNUYx OTAwNzE1RUQwHhcNMjUwNzIxMDAxNDQwWhcNMjUwNzI4MDAxNDQwWjAYMRYwFAYD VQQDEw02ODdkODY3MC05MGIyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1xTRqQHmOLwgRgfrlSFOJTcCEKybprOYvmHGFi5MNKOJfQ6WQFNsowYO4Q82 Uqw53JGt0vkKZzBuQEWPSqUaIO++BLhQXOsMzKgl4kVcHr1q5jxnF56d2x52XORu KuI+u7hDfPupnE4h6jRhPJSGQppDQke1lpyWaus2WuI1AI07Hx+0NhcEanFzMQqd 8K1ojzlwsJpr+X1qpEgXaxJeIj1WkeIgZ6fjI5+jBGDzV6XIT4qIcAQbjdd0w662 JzhEKIemw2UI36+zJsj1lkJGBGYAAkGqNK9c6eq62i5R+m//jNLH8DHpk7QiBQ4x TzyM85y8BqWaZIKYjs2djzDWkwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDk5m1Ds 0UyTHCVrsMhkZrSFNzwpMB8GA1UdIwQYMBaAFAgDZixXEyVyjyT6rYyxpfGQBxXt MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2Q0NGRi85QTVFQzE2QzQ2 RkUxMUVDOTRFM0QyNEFDNEY5QUUwMi9DQU5tTEZjVEpYS1BKUHF0akxHbDhaQUhG ZTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NBTm1MRmNUSlhLUEpQcXRqTEdsOFpBSEZlMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 Q0NGRi85QTVFQzE2QzQ2RkUxMUVDOTRFM0QyNEFDNEY5QUUwMi9DQU5tTEZjVEpY S1BKUHF0akxHbDhaQUhGZTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBmKxvZ9qIT9mgkCuRE5cAaYxPZMaAm0lq0YD3pJRlywOLp+IrDxCOw 9FeHrmI3ldz2vqEAph1Dm1FhVSPwWI46TaRvZVP710mW0xi6TBi1+WVWTpFHOQ2g 51hm6t6mr2nlSu0yMSpb7Q4pfd+p3Sgk6uxw4Aq7Kc7AbClo2VRa7BJsER0MZL0T 0AHUPwpttpIdEZ7aTNyHavuguvTdKVUoTo1Q+UG4a9LJsK8AlFgA6cbQEhxVTVfk pDK1xMV0JIYSLz79r14l8U/tYnGVsjx0QV1LB2HbnxuVy/NhJShzG7eI3hxpTBjH 5AmgI3Jv53NKAl6GSokR0YTC5XF0cbes -----END CERTIFICATE-----Generated at Mon Jul 21 12:40:54 2025 by rpki-client