$ rpki-client -vvf rpki.apnic.net/member_repository/A912442A/20F2CB00EB9C11ECA682120CC4F9AE02/hIWjnta2ISjt9PmbLCqBH1wgFXA.mft File: hIWjnta2ISjt9PmbLCqBH1wgFXA.mft (raw, json) Hash identifier: NXpj+VgzIz1a3K7bCfcW4qNBgZC07URJIGbFvS8ZDws= Subject key identifier: 49:9F:B4:0C:5B:43:08:90:7A:FF:0C:D6:1B:7F:29:C6:74:7C:78:F3 Authority key identifier: 84:85:A3:9E:D6:B6:21:28:ED:F4:F9:9B:2C:2A:81:1F:5C:20:15:70 Certificate issuer: /CN=A912442A/serialNumber=8485A39ED6B62128EDF4F99B2C2A811F5C201570 Certificate serial: 033B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hIWjnta2ISjt9PmbLCqBH1wgFXA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912442A/20F2CB00EB9C11ECA682120CC4F9AE02/hIWjnta2ISjt9PmbLCqBH1wgFXA.mft Manifest number: 02E8 Signing time: Sat 05 Apr 2025 01:35:45 +0000 Manifest this update: Sat 05 Apr 2025 01:35:44 +0000 Manifest next update: Sat 12 Apr 2025 01:35:44 +0000 Files and hashes: 1: hIWjnta2ISjt9PmbLCqBH1wgFXA.crl (hash: B96yEurcmNxrD/Oz8N98mn0Bf61ttIrktSzk5MgPSdw=) 2: DFB7A1FE68FA11EFB2CB6E60C4F9AE02.roa (hash: ZQ/fU5d1evPPnYD3iA98SPz8Kp3nQtzF91XOnGRTmko=) 3: AC9577F068F611EFBDC1C345C4F9AE02.roa (hash: c8x4WauwQnDwDqZuEAJ4h64A3YhZdzAuusRUf8JYYN8=) 4: EAEC9066690E11EF9396CC48C4F9AE02.roa (hash: itBUJ/NWTISnHVYwiSk058o8wCPmgPPTXD1wCEm1HPU=) 5: 36E3B902FE4E11EF9F12441CC4F9AE02.roa (hash: go1KQLAsWSMcDFpFZPzbcCoYXA902eWujQs5DRA5NuQ=) 6: 72D237AEEBA011EC87608210C4F9AE02.roa (hash: /6/vPtizZYxr5v7ORtDfd8JRwZk7T9USDbBUeYwxyPg=) 7: BE4B3228691411EFB573C120C4F9AE02.roa (hash: FluzuCEVsK4WA6irM+7AYglOFW70dV1BU5TUHFD621E=) 8: 19EC493AE32111ED9B98B683C4F9AE02.roa (hash: t9M7T3kGK/bHK5ZGPmj0eAYe1o0Vh2EqcoFWaTSjMIE=) 9: 211E0AC268F911EF986C8281C4F9AE02.roa (hash: 5R/vByP+bLJ/gauluwV0ijjw0b2SOL4DSiyRAY6Etqs=) 10: EB6B9956690E11EF9396CC48C4F9AE02.roa (hash: m1fb1egRrU9+d8hQvMjnw8fgUgdDVqcZIQ0pMpm6ljc=) 11: DD84920268FA11EFB2CB6E60C4F9AE02.roa (hash: E+BZL/7QU8UpRIJdbcW9rfaR46I2sLpkyfwtpdJN/VI=) 12: DDFED4E068FA11EFB2CB6E60C4F9AE02.roa (hash: cN/u2ghL7Ty5H0rMkH3B9dtMoGNw2oNZ5rkn/Hb9xkU=) 13: F53FF9E668F411EFA1530C36C4F9AE02.roa (hash: 7Kj+4WHxVaVF82sSnOwl9LxBArA7W70r8lzjmBc5kVs=) 14: AC3A00D268F611EFBDC1C345C4F9AE02.roa (hash: H7xrZOzZPQxCuJob9N/j2hDDJP833H9T1/f50kmyI3U=) 15: 21FE5D3468F911EF986C8281C4F9AE02.roa (hash: be0pdzXjf+dpXeRPaIldstiNx4QzCRK3M1bauqjIvLs=) 16: 1F49DF36691311EF82B0FC62C4F9AE02.roa (hash: 9FLrfM7I4+bVcqyGWmEPmZO9HbNgyq3TURv3crH+HFI=) 17: DF4500C268FA11EFB2CB6E60C4F9AE02.roa (hash: 3IXJ2kT9nZjjXNHHgzGLrJIGKkUtdsBH6PxdM1Y97ec=) 18: 2A9845DE691411EF8D868864C4F9AE02.roa (hash: kogXUDWKK78CAHTJtbOeSXgRNGSuMbtJtIHaw+cqK8c=) 19: ABC651E668F611EFBDC1C345C4F9AE02.roa (hash: cAER3YKLvVpIlFa2HmbUxYe1iz95sgNYpvM/4V9O1FM=) 20: EA792108690E11EF9396CC48C4F9AE02.roa (hash: umWQN4kGqAHPIk4w+IQl09gKoDRTIfMgnHpo1DCC4Pw=) 21: 869FE0CC69B311EF9E81312BC4F9AE02.roa (hash: eF1xrltNfnruVqxNMjD44+JutJBXSUDGILKtju+n9dE=) 22: B35D540E68F611EFB785D145C4F9AE02.roa (hash: oyIjz/XYfgr26Spk6RY9XOtfUIT6X7uMOPMW03yZfAM=) 23: 1519FB12F8B611EF91DD795BC4F9AE02.roa (hash: v2vRc6B+gwZg5NOfzaQPP6ML2YBJcqr080DwDx1pUOg=) 24: 218211CA68F911EF986C8281C4F9AE02.roa (hash: pHoz/kBOmkd5VG3teXH7pPsGNOOVgbbDMsd3VhHUAEo=) 25: 2072597E691311EF82B0FC62C4F9AE02.roa (hash: Y3bQNy1ojyOB4N21qfu+0X9uUvLU+z0WanHBys0zBlU=) 26: 29C3BF9E691411EF8D868864C4F9AE02.roa (hash: HQ71fsK6HJEx6JB43+BRDscF/a1IXcYLFxyQuU5FBnw=) 27: 4A93DB1068F511EF8E131B43C4F9AE02.roa (hash: kqYwhkwqrnPwUBbzCMbRJ6+BU/s1Jp8YtMASUL3cC6Y=) 28: 200F7106691311EF82B0FC62C4F9AE02.roa (hash: d/aMw06UKvCrIDovTtwhw18Yfx0jjxX2eyRA38OLxcQ=) 29: DEA0D1E668FA11EFB2CB6E60C4F9AE02.roa (hash: +1sHzrOMqBbheGIlr1WPdNiSvR59VAOdWWIJJa+mgHk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912442A/20F2CB00EB9C11ECA682120CC4F9AE02/hIWjnta2ISjt9PmbLCqBH1wgFXA.crl rsync://rpki.apnic.net/member_repository/A912442A/20F2CB00EB9C11ECA682120CC4F9AE02/hIWjnta2ISjt9PmbLCqBH1wgFXA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hIWjnta2ISjt9PmbLCqBH1wgFXA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 12 Apr 2025 01:35:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 827 (0x33b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912442A Validity Not Before: Apr 5 01:35:44 2025 GMT Not After : Apr 12 01:35:44 2025 GMT Subject: CN=67f088f1-4f97 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:c6:11:32:bb:0c:ac:90:79:53:1b:54:8d:1d: 33:ca:d7:22:84:f0:cf:d5:35:98:fc:df:e3:91:16: 5e:31:da:d7:59:dd:75:94:52:1f:1b:9c:2d:b7:f8: ca:51:16:30:63:01:80:23:41:1e:7e:b4:d8:36:97: d0:b9:09:48:42:73:94:00:b2:b2:ab:81:8b:1f:f3: 1e:c6:25:30:81:58:b5:fb:38:a2:ec:df:9e:30:bf: 67:7f:eb:a9:0f:db:99:45:72:1d:06:56:a3:24:b5: 94:71:c4:a7:c4:3e:ef:89:d6:e0:eb:5d:13:55:45: ac:11:8c:8c:33:c7:d5:57:66:8b:f9:96:2c:18:eb: 10:07:77:84:7a:2c:9b:3e:cf:dc:0b:0b:1c:57:f3: 0c:4b:2d:09:0e:0b:5d:86:02:1d:8b:02:83:09:49: 98:c2:5d:58:c6:21:14:af:57:97:a0:94:b7:55:12: be:8d:be:42:3a:6f:ef:70:c1:dc:a9:3f:17:45:20: 6b:80:c4:4e:35:09:37:00:47:d2:74:9a:3b:1c:f2: 6e:05:a9:dd:49:d2:6d:57:74:8a:f5:89:61:c6:49: e3:93:2e:2c:6e:a4:66:ec:b6:38:5f:87:59:05:76: 4a:28:18:85:af:ce:0f:be:e1:9c:a2:b5:81:04:7c: 9f:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:9F:B4:0C:5B:43:08:90:7A:FF:0C:D6:1B:7F:29:C6:74:7C:78:F3 X509v3 Authority Key Identifier: keyid:84:85:A3:9E:D6:B6:21:28:ED:F4:F9:9B:2C:2A:81:1F:5C:20:15:70 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912442A/20F2CB00EB9C11ECA682120CC4F9AE02/hIWjnta2ISjt9PmbLCqBH1wgFXA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hIWjnta2ISjt9PmbLCqBH1wgFXA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912442A/20F2CB00EB9C11ECA682120CC4F9AE02/hIWjnta2ISjt9PmbLCqBH1wgFXA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9a:08:6c:de:a8:e5:31:92:db:9c:b6:eb:1a:c8:d2:a9:24:6b: c8:a1:0f:07:cc:8f:74:2d:0a:1d:f9:a2:c8:a0:28:d8:55:67: 56:8a:db:21:57:0d:1e:bc:19:ad:9f:23:d7:0c:3c:04:23:44: f8:10:b4:ce:10:47:c2:ee:33:37:9c:a2:fb:aa:c6:aa:88:a4: 1b:42:60:58:ff:c9:46:3e:f0:39:c1:54:12:d8:19:03:f3:d8: 51:c0:0c:aa:67:90:c4:b3:91:72:3f:5e:04:64:f2:e9:06:f3: a2:2d:8e:c4:ad:17:ae:b6:a8:da:dd:73:ad:af:17:dc:a9:61: 6d:73:f6:41:ce:56:a1:8f:d4:25:ad:15:0f:09:cb:be:ac:a3: 4d:f0:da:ae:6a:25:7f:eb:35:e7:5a:52:92:e8:ae:dd:e2:25: 74:ae:55:21:85:02:7d:1b:58:aa:c2:c1:42:e0:62:49:76:38: 2b:49:09:d0:34:ee:2b:99:30:86:b1:06:b1:ac:c6:fe:59:11: 41:ce:2f:a0:8a:9e:e0:28:2f:91:b9:39:89:a5:9d:36:18:b3: c7:f8:ff:31:65:46:b3:d0:63:3e:b2:5c:d5:a1:95:74:30:ac: b8:07:c1:b8:bb:02:30:b5:5e:80:77:7c:f7:89:0f:29:81:0c: 2a:21:1a:ca -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAzswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjQ0MkExMTAvBgNVBAUTKDg0ODVBMzlFRDZCNjIxMjhFREY0Rjk5QjJDMkE4MTFG NUMyMDE1NzAwHhcNMjUwNDA1MDEzNTQ0WhcNMjUwNDEyMDEzNTQ0WjAYMRYwFAYD VQQDEw02N2YwODhmMS00Zjk3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAscYRMrsMrJB5UxtUjR0zytcihPDP1TWY/N/jkRZeMdrXWd11lFIfG5wtt/jK URYwYwGAI0EefrTYNpfQuQlIQnOUALKyq4GLH/MexiUwgVi1+zii7N+eML9nf+up D9uZRXIdBlajJLWUccSnxD7vidbg610TVUWsEYyMM8fVV2aL+ZYsGOsQB3eEeiyb Ps/cCwscV/MMSy0JDgtdhgIdiwKDCUmYwl1YxiEUr1eXoJS3VRK+jb5COm/vcMHc qT8XRSBrgMRONQk3AEfSdJo7HPJuBandSdJtV3SK9Ylhxknjky4sbqRm7LY4X4dZ BXZKKBiFr84PvuGcorWBBHyf3wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEmftAxb QwiQev8M1ht/KcZ0fHjzMB8GA1UdIwQYMBaAFISFo57WtiEo7fT5mywqgR9cIBVw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNDQyQS8yMEYyQ0IwMEVC OUMxMUVDQTY4MjEyMENDNEY5QUUwMi9oSVdqbnRhMklTanQ5UG1iTENxQkgxd2dG WEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2hJV2pudGEySVNqdDlQbWJMQ3FCSDF3Z0ZYQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NDQyQS8yMEYyQ0IwMEVCOUMxMUVDQTY4MjEyMENDNEY5QUUwMi9oSVdqbnRhMklT anQ5UG1iTENxQkgxd2dGWEEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCaCGzeqOUxktuctusayNKpJGvIoQ8HzI90LQod+aLIoCjYVWdWitsh Vw0evBmtnyPXDDwEI0T4ELTOEEfC7jM3nKL7qsaqiKQbQmBY/8lGPvA5wVQS2BkD 89hRwAyqZ5DEs5FyP14EZPLpBvOiLY7ErReutqja3XOtrxfcqWFtc/ZBzlahj9Ql rRUPCcu+rKNN8NquaiV/6zXnWlKS6K7d4iV0rlUhhQJ9G1iqwsFC4GJJdjgrSQnQ NO4rmTCGsQaxrMb+WRFBzi+gip7gKC+RuTmJpZ02GLPH+P8xZUaz0GM+slzVoZV0 MKy4B8G4uwIwtV6Ad3z3iQ8pgQwqIRrK -----END CERTIFICATE-----Generated at Sun Apr 6 02:47:44 2025 by rpki-client