$ rpki-client -vvf rpki.apnic.net/member_repository/A914DC5D/39E7146C2A3311EB929DC07CC4F9AE02/IPJTGnuoIS0rsJANV2Ny0z-EaSg.mft File: IPJTGnuoIS0rsJANV2Ny0z-EaSg.mft (raw, json) Hash identifier: qBcBCP0UPzWXUgE0mIZT7jP/OE88IFsKPHFb0V/NzzA= Subject key identifier: C9:0E:AB:E1:80:CB:BC:98:25:13:2C:16:60:27:58:83:4E:FB:90:11 Authority key identifier: 20:F2:53:1A:7B:A8:21:2D:2B:B0:90:0D:57:63:72:D3:3F:84:69:28 Certificate issuer: /CN=A914DC5D/serialNumber=20F2531A7BA8212D2BB0900D576372D33F846928 Certificate serial: 08A1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IPJTGnuoIS0rsJANV2Ny0z-EaSg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914DC5D/39E7146C2A3311EB929DC07CC4F9AE02/IPJTGnuoIS0rsJANV2Ny0z-EaSg.mft Manifest number: 07C2 Signing time: Fri 30 May 2025 21:55:38 +0000 Manifest this update: Fri 30 May 2025 21:55:37 +0000 Manifest next update: Fri 06 Jun 2025 21:55:37 +0000 Files and hashes: 1: IPJTGnuoIS0rsJANV2Ny0z-EaSg.crl (hash: vKiafgoD0fh+ZTwaxLrtZifEF8Fpvn2k6WvgGEPXlT0=) 2: AF96D07C2A4111EBA1B1BB3DC4F9AE02.roa (hash: OUr5YhEI5I46t9dp5HHmzabUoP4eaFJHW5ko53IBkdo=) 3: AC0C25102A4111EBA1B1BB3DC4F9AE02.roa (hash: 5y6r5SgE+1dulXmKZWvDkPSlG//7DJyCV8Qy0mpz3H8=) 4: AEF56D7C2A4111EBA1B1BB3DC4F9AE02.roa (hash: ru4CDY9kB7xpZ7Gn5BJCqXlyrSix5gXPE9YTTMWfsno=) 5: 6A0673EE2A4311EBBD69BE46C4F9AE02.roa (hash: pljZ5ks8zWLJ41xwtC7HEEzJ6OzoY7GJ/ohRRrP+jLs=) 6: CC4A3EAC0EDF11F0915E3563C4F9AE02.roa (hash: ZOEl/EUL9Kcp7Oe2ySY5gCeqAoMs/cWZLqeYM9bpOY4=) 7: 55493366013C11ED9864F33CC4F9AE02.roa (hash: Zz0XV9+8+vmeI0zGikQ8f9l71NMdTwf/sbSc3+uKywY=) 8: AE58A49C2A4111EBA1B1BB3DC4F9AE02.roa (hash: DxsPcmRyMvqxvilkvhZcPekY1GWFfShT1K4h6XO4HIU=) 9: 689E513E2A4311EBBD69BE46C4F9AE02.roa (hash: FezbKF9kO0jDnIHasf+ZGAxTpu3bLao4gPSsw3YsObk=) 10: B0177DBC2A4111EBA1B1BB3DC4F9AE02.roa (hash: GoONDGq2mntV4VCH8ruKRLPZW7gF389h40xYTQMS4WY=) 11: AD3146462A4111EBA1B1BB3DC4F9AE02.roa (hash: 5ouufnP7Ctej4xce5TMz+xAplrLrKCKTZMwQ7r/Y7pY=) 12: 5F0436A08AAF11EE93D5E566C4F9AE02.roa (hash: eYqTvYLPgNnCsX8XZsOGNBvCb+uxIeIiPxmKdWTMhWU=) 13: B18D8C2C2A4111EBA1B1BB3DC4F9AE02.roa (hash: lBS8kvbF9qc+MDE0imJFbA2HjjKTcdMHa+qxsQV+XxU=) 14: 682125602A4311EBBD69BE46C4F9AE02.roa (hash: YyMxfaGjaUTR1RTEiaJ/8xWo+/v0LKLkSrPTK2mFwLE=) 15: AB656EC82A4111EBA1B1BB3DC4F9AE02.roa (hash: lktIkPl22eqSwsqChqGX/PiBITeHZ0j0XKVggRutMPM=) 16: 6B40A6762A4311EBBD69BE46C4F9AE02.roa (hash: cu/hrl9QOHrjIrKvHn9h0AfjeVMiF3XF5XO5n2p3i90=) 17: ADB367482A4111EBA1B1BB3DC4F9AE02.roa (hash: /NbIlZMNBHck/exxSqKy2xdIIBSuAAci2V/DM520lf4=) 18: B223E3C02A4111EBA1B1BB3DC4F9AE02.roa (hash: X4XJ5Vg4GOFvVKCrXpY0V9iGok/qikvYBC+EwepyjvQ=) 19: B1B2A55C0EDF11F083641863C4F9AE02.roa (hash: SCOM1skjWNDYner/w/QKr+iOaIp+41T/6jBMJxouDa8=) 20: AAD2DA9A2A4111EBA1B1BB3DC4F9AE02.roa (hash: o3tJcryC81c5rX1xhCkHjKVGZCjhtaRQoK8u6zdAIkI=) 21: B374E3E62A4111EBA1B1BB3DC4F9AE02.roa (hash: 2eG1w6WyySFQyTBuUnlx+QPyjc5U3cUmwkkEHL8GJmA=) 22: EBDB1D16FD7A11EF9979942FC4F9AE02.roa (hash: NNAqDSA6qZkwyXwW5LJm0ax1QL7uOfCZD/otvzKqxLc=) 23: 696CCB682A4311EBBD69BE46C4F9AE02.roa (hash: S9g/XqrkQ3EKwy6SH+loLjPtlBRwhe3c36A/g6yjOOI=) 24: 6AB096D02A4311EBBD69BE46C4F9AE02.roa (hash: ANMNSNrxUbzfsYrPHlGwfWZQPT20tqofz6iu/oLsKk4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914DC5D/39E7146C2A3311EB929DC07CC4F9AE02/IPJTGnuoIS0rsJANV2Ny0z-EaSg.crl rsync://rpki.apnic.net/member_repository/A914DC5D/39E7146C2A3311EB929DC07CC4F9AE02/IPJTGnuoIS0rsJANV2Ny0z-EaSg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IPJTGnuoIS0rsJANV2Ny0z-EaSg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 21:55:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2209 (0x8a1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914DC5D, serialNumber=20F2531A7BA8212D2BB0900D576372D33F846928 Validity Not Before: May 30 21:55:37 2025 GMT Not After : Jun 6 21:55:37 2025 GMT Subject: CN=683a2959-74f5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:2e:17:56:91:73:ab:0b:87:43:53:9c:7c:9b: 00:2b:fb:4d:d6:2b:46:2c:73:b3:a9:dc:01:78:07: 04:95:9a:51:4c:1c:89:ec:39:0f:9b:59:fe:8c:bc: a0:c5:c2:98:f3:a6:42:c8:d7:8a:8d:7d:41:03:ae: 29:ab:55:f7:e9:a5:39:68:4d:fb:5f:a4:2a:15:3a: f0:76:76:54:6b:56:c2:f2:48:74:49:1f:e2:fb:8a: af:dd:88:34:6d:b4:28:f3:a4:cc:be:00:07:9f:f3: 99:c7:fa:de:2d:bc:92:d3:22:03:f9:bc:ec:0d:f8: c6:62:48:86:2e:05:2a:bc:b0:7d:0c:a9:da:ed:57: 88:ef:19:9b:bb:91:95:26:44:98:8c:64:cb:b9:63: ac:f3:3f:d6:73:43:53:3b:5e:ba:10:c6:82:d5:88: 8b:ec:74:a1:06:e9:78:15:40:1c:35:a0:66:59:47: fb:46:f3:b8:b9:ef:d7:57:74:08:16:8c:24:41:c7: a2:cc:97:92:3b:d5:0a:05:8c:84:08:ed:bf:fc:15: 3b:46:cc:30:ee:19:91:db:29:4c:f7:7f:95:7d:0a: 1c:f2:3f:6f:44:3c:ff:01:f0:89:a2:71:56:ee:21: ff:d8:fe:07:17:2c:8b:f8:b6:93:f8:74:05:cf:7d: 4c:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:0E:AB:E1:80:CB:BC:98:25:13:2C:16:60:27:58:83:4E:FB:90:11 X509v3 Authority Key Identifier: keyid:20:F2:53:1A:7B:A8:21:2D:2B:B0:90:0D:57:63:72:D3:3F:84:69:28 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914DC5D/39E7146C2A3311EB929DC07CC4F9AE02/IPJTGnuoIS0rsJANV2Ny0z-EaSg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IPJTGnuoIS0rsJANV2Ny0z-EaSg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914DC5D/39E7146C2A3311EB929DC07CC4F9AE02/IPJTGnuoIS0rsJANV2Ny0z-EaSg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 58:8f:e5:42:32:a9:6f:b7:64:33:fc:36:b8:df:a4:a0:da:d2: 39:da:11:a5:5f:f2:52:20:29:bc:07:48:dc:ca:29:64:e3:ba: eb:96:4e:37:50:ee:32:64:ed:0f:79:7c:16:83:88:27:94:17: f7:49:d7:f8:6b:b4:62:b0:ae:5e:64:ae:4c:cf:9a:2f:17:12: e1:28:f6:96:76:e2:d9:51:dc:59:8b:e7:d1:1a:fb:3b:27:e0: aa:78:64:8b:f6:ee:98:ec:de:9f:0e:8d:05:60:c4:b8:ba:9f: 27:47:5f:83:01:87:f9:79:30:40:61:90:b5:8e:6b:94:84:25: 4e:e6:43:90:13:f4:df:58:ce:67:0d:5d:5c:6c:a4:18:b1:8e: 9e:cb:dd:d0:a9:36:2b:aa:43:71:24:10:b6:85:c5:3d:73:8f: dd:e2:73:d9:23:26:25:30:b4:e1:a6:b7:5b:56:a3:e8:ff:a1: ad:da:78:c8:ac:03:5f:07:bd:13:67:4d:24:b5:d7:eb:21:32: ca:30:5d:77:1a:5f:95:e0:d1:5c:16:06:1a:22:56:1a:78:15: 39:c9:33:c5:19:09:ee:22:a7:80:e8:86:6f:18:17:92:e9:cf: a6:73:1e:34:8b:99:54:79:97:fa:65:20:aa:35:15:c5:4e:40: 04:da:8e:4a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCKEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NERDNUQxMTAvBgNVBAUTKDIwRjI1MzFBN0JBODIxMkQyQkIwOTAwRDU3NjM3MkQz M0Y4NDY5MjgwHhcNMjUwNTMwMjE1NTM3WhcNMjUwNjA2MjE1NTM3WjAYMRYwFAYD VQQDEw02ODNhMjk1OS03NGY1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvC4XVpFzqwuHQ1OcfJsAK/tN1itGLHOzqdwBeAcElZpRTByJ7DkPm1n+jLyg xcKY86ZCyNeKjX1BA64pq1X36aU5aE37X6QqFTrwdnZUa1bC8kh0SR/i+4qv3Yg0 bbQo86TMvgAHn/OZx/reLbyS0yID+bzsDfjGYkiGLgUqvLB9DKna7VeI7xmbu5GV JkSYjGTLuWOs8z/Wc0NTO166EMaC1YiL7HShBul4FUAcNaBmWUf7RvO4ue/XV3QI FowkQceizJeSO9UKBYyECO2//BU7Rsww7hmR2ylM93+VfQoc8j9vRDz/AfCJonFW 7iH/2P4HFyyL+LaT+HQFz31MkwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMkOq+GA y7yYJRMsFmAnWINO+5ARMB8GA1UdIwQYMBaAFCDyUxp7qCEtK7CQDVdjctM/hGko MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0REM1RC8zOUU3MTQ2QzJB MzMxMUVCOTI5REMwN0NDNEY5QUUwMi9JUEpUR251b0lTMHJzSkFOVjJOeTB6LUVh U2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0lQSlRHbnVvSVMwcnNKQU5WMk55MHotRWFTZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 REM1RC8zOUU3MTQ2QzJBMzMxMUVCOTI5REMwN0NDNEY5QUUwMi9JUEpUR251b0lT MHJzSkFOVjJOeTB6LUVhU2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBYj+VCMqlvt2Qz/Da436Sg2tI52hGlX/JSICm8B0jcyilk47rrlk43 UO4yZO0PeXwWg4gnlBf3Sdf4a7RisK5eZK5Mz5ovFxLhKPaWduLZUdxZi+fRGvs7 J+CqeGSL9u6Y7N6fDo0FYMS4up8nR1+DAYf5eTBAYZC1jmuUhCVO5kOQE/TfWM5n DV1cbKQYsY6ey93QqTYrqkNxJBC2hcU9c4/d4nPZIyYlMLThprdbVqPo/6Gt2njI rANfB70TZ00ktdfrITLKMF13Gl+V4NFcFgYaIlYaeBU5yTPFGQnuIqeA6IZvGBeS 6c+mcx40i5lUeZf6ZSCqNRXFTkAE2o5K -----END CERTIFICATE-----Generated at Sat May 31 16:45:45 2025 by rpki-client