$ rpki-client -vvf rpki.apnic.net/member_repository/A916807A/0263AB483E8811EDA61A9B2AC4F9AE02/cp4vnB2HwhRzUHjP0hxjjgcVe10.mft File: cp4vnB2HwhRzUHjP0hxjjgcVe10.mft (raw, json) Hash identifier: cwGtTdDP72qaKZE2rTo71g3EJ3xmZBl4aG8Ng9pPUX8= Subject key identifier: B1:3E:22:AD:25:7A:FD:E3:BA:0F:1F:EB:C7:AD:C2:D0:05:3D:AC:57 Authority key identifier: 72:9E:2F:9C:1D:87:C2:14:73:50:78:CF:D2:1C:63:8E:07:15:7B:5D Certificate issuer: /CN=A916807A/serialNumber=729E2F9C1D87C214735078CFD21C638E07157B5D Certificate serial: 02C7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cp4vnB2HwhRzUHjP0hxjjgcVe10.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916807A/0263AB483E8811EDA61A9B2AC4F9AE02/cp4vnB2HwhRzUHjP0hxjjgcVe10.mft Manifest number: 0280 Signing time: Wed 22 Oct 2025 02:46:22 +0000 Manifest this update: Wed 22 Oct 2025 02:46:20 +0000 Manifest next update: Wed 29 Oct 2025 02:46:20 +0000 Files and hashes: 1: cp4vnB2HwhRzUHjP0hxjjgcVe10.crl (hash: KR4GiVgXgJ2xIN1clLgmHzm1p9/yzKn8HNokcOnrIA4=) 2: A6A5DF628AEF11F08634D486C4F9AE02.roa (hash: LC8wceWAXKoHozEbz1+x7Kz1y+OGe/mag6fLZz/IJeQ=) 3: CD8401DE725011F0A3F05A4DC4F9AE02.roa (hash: ayEokobuKAzbqvCaAoaCylFKkvK+sjY0F0KFlKTTFc4=) 4: 40257FE64D0E11F082837352C4F9AE02.roa (hash: t+W+PRfrQYrbh7XQx2IvYqeiIe6MUWIZrFxO4Nad7Z4=) 5: 0711ABAE36D311F091108A4EC4F9AE02.roa (hash: E3zZxUdrUmOYhriWMVCPLH1bYJD2HjLpAdPaY2SX7v8=) 6: E88B9F0C778511F0A4E72535C4F9AE02.roa (hash: 6RR8hojN4BYLC4ewJR9unFkzvRqXihDkv5aevV0kEr0=) 7: 2E2847223DB311EE9375493EC4F9AE02.roa (hash: 6fQ9RtJZkeAm2/Mx6K4V4QJpuiRsWx//JNYH/Hg0zIQ=) 8: EDD791BCA80611F09091490CC4F9AE02.roa (hash: 7EwYWHS6dsCKAPZjwARxzZsBgs3/85v8z/ckbLHErGs=) 9: 0634745A36D311F091108A4EC4F9AE02.roa (hash: 3yh/68gpCyEqCQ/Ky45g+z98d0F72oYMNRhmKFBodog=) 10: 05E0CD8A56D311F0B46F9787C4F9AE02.roa (hash: jL8RSSnxlTI7zp7fpF6wAekdhf9q+8pPVD5T20++cfg=) 11: 853DCAEA341111F0A5CD2B20C4F9AE02.roa (hash: XxMv8nZKNJPUu/BjW+vTrxZ9Rq/HgNwFNQXlSa81xhI=) 12: 056F9FEA36D311F091108A4EC4F9AE02.roa (hash: bN4NSjvaPpduKJ8hFPdH1/hqPY1KwXaEg5DnN2E/UzQ=) 13: 82FE8E1C90B511F0B55D6F53C4F9AE02.roa (hash: CYzwqEoc6/SMC0B/IJXP6m4h+1RezXtW9hoKBP1iVW8=) 14: 359EA23662B311F081881A48C4F9AE02.roa (hash: 6h9T2b+C3NcCtzKQC4faAFGmqG/D044Q3+VCE/pFz5s=) 15: E7BB6878778511F0A4E72535C4F9AE02.roa (hash: 2Evya7hywKuNJFdgTG2e4swVW1ljlMY4FziED4YUKX0=) 16: EE5D27BEA80611F09091490CC4F9AE02.roa (hash: pHfxUt8K0OrHVzjUPOPoVf9o2SIlt12ArsG85I0HnP4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916807A/0263AB483E8811EDA61A9B2AC4F9AE02/cp4vnB2HwhRzUHjP0hxjjgcVe10.crl rsync://rpki.apnic.net/member_repository/A916807A/0263AB483E8811EDA61A9B2AC4F9AE02/cp4vnB2HwhRzUHjP0hxjjgcVe10.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cp4vnB2HwhRzUHjP0hxjjgcVe10.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Oct 2025 02:46:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 711 (0x2c7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916807A, serialNumber=729E2F9C1D87C214735078CFD21C638E07157B5D Validity Not Before: Oct 22 02:46:20 2025 GMT Not After : Oct 29 02:46:20 2025 GMT Subject: CN=68f8457e-3b27 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:42:78:f1:fd:2b:40:1a:f8:b8:45:3e:e9:9e: 7a:e4:d4:39:f1:a7:a6:e0:0c:37:6a:52:2b:46:33: af:a1:6b:92:3f:d3:5b:98:30:7a:7a:d6:fc:2c:c6: ae:09:65:56:64:af:b5:64:06:9e:7e:cf:81:21:b3: 0c:95:c8:cc:dd:73:c4:6b:2d:93:ec:07:62:bd:11: e5:2d:b6:63:e9:bf:95:8c:f7:d4:c1:d1:24:27:96: 8c:ac:27:3a:66:8e:53:50:9a:0f:cc:99:72:58:b8: 70:ad:c1:70:f8:59:be:03:2e:de:6c:b7:97:5b:73: 35:b9:60:ab:91:86:f9:73:5c:bd:9d:78:00:69:34: c6:da:00:6d:c4:f8:60:b8:00:ff:ce:80:92:a7:9b: 47:2d:cf:cf:7a:79:a2:c4:38:64:15:e1:eb:aa:78: 84:f6:f8:4c:c1:a1:14:55:cc:ef:44:20:23:87:0b: d7:5b:22:fa:f5:dc:5a:db:da:6f:b8:21:0f:a8:00: 40:10:e7:68:91:33:0e:d5:16:c3:91:38:85:c5:41: 1b:77:e4:5a:8a:98:74:ed:62:53:df:b5:71:a0:bb: f9:fc:43:03:f8:79:73:f4:bb:f7:b6:19:06:80:0b: 04:9f:a4:88:d2:62:e3:d9:86:b3:6c:89:9d:5f:df: 22:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:3E:22:AD:25:7A:FD:E3:BA:0F:1F:EB:C7:AD:C2:D0:05:3D:AC:57 X509v3 Authority Key Identifier: keyid:72:9E:2F:9C:1D:87:C2:14:73:50:78:CF:D2:1C:63:8E:07:15:7B:5D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916807A/0263AB483E8811EDA61A9B2AC4F9AE02/cp4vnB2HwhRzUHjP0hxjjgcVe10.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cp4vnB2HwhRzUHjP0hxjjgcVe10.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916807A/0263AB483E8811EDA61A9B2AC4F9AE02/cp4vnB2HwhRzUHjP0hxjjgcVe10.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7f:e6:ed:88:59:e3:a7:4a:35:1f:ed:73:2c:e8:13:f0:1d:da: d2:69:4c:0d:c7:bc:2a:ac:1e:ad:cc:5c:66:56:92:15:e1:33: 97:47:8f:b1:e9:e1:67:b7:13:bd:42:97:50:55:e5:71:56:9b: d9:ee:bf:e3:7d:73:09:3d:11:2d:c9:15:ca:ff:e3:7f:fb:cf: 80:4d:7d:07:15:e4:79:25:6a:97:f3:e9:9a:80:2b:e4:31:14: ab:90:b7:1e:27:d1:18:0c:76:56:b9:10:a5:3b:a8:49:9c:d7: 60:54:8b:37:58:bd:e6:93:02:6c:35:ba:1e:25:b0:57:98:b2: d5:94:51:6f:4c:8e:75:e0:93:86:4d:0f:70:f4:66:5a:08:61: b4:a5:5e:24:be:da:fd:46:43:e6:a0:45:f9:34:04:a3:61:f7: 21:d5:02:36:7c:ab:0c:53:78:aa:5a:bc:0d:3b:da:3b:cb:a9: 87:36:8d:80:5d:45:1e:9d:11:82:6c:e7:6c:56:7f:97:73:f1: fa:8a:e9:77:03:8d:81:15:cd:a8:b2:16:4e:12:24:0a:b7:67: e5:af:fa:fe:dc:f6:1b:58:52:2e:12:79:d1:03:66:da:ab:63: 7a:4d:13:bd:cc:cd:40:3f:95:96:d8:34:cb:da:dc:04:5e:e9: e2:30:3d:c3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAscwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjgwN0ExMTAvBgNVBAUTKDcyOUUyRjlDMUQ4N0MyMTQ3MzUwNzhDRkQyMUM2MzhF MDcxNTdCNUQwHhcNMjUxMDIyMDI0NjIwWhcNMjUxMDI5MDI0NjIwWjAYMRYwFAYD VQQDEw02OGY4NDU3ZS0zYjI3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwUJ48f0rQBr4uEU+6Z565NQ58aem4Aw3alIrRjOvoWuSP9NbmDB6etb8LMau CWVWZK+1ZAaefs+BIbMMlcjM3XPEay2T7AdivRHlLbZj6b+VjPfUwdEkJ5aMrCc6 Zo5TUJoPzJlyWLhwrcFw+Fm+Ay7ebLeXW3M1uWCrkYb5c1y9nXgAaTTG2gBtxPhg uAD/zoCSp5tHLc/PenmixDhkFeHrqniE9vhMwaEUVczvRCAjhwvXWyL69dxa29pv uCEPqABAEOdokTMO1RbDkTiFxUEbd+Raiph07WJT37VxoLv5/EMD+Hlz9Lv3thkG gAsEn6SI0mLj2YazbImdX98iCQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLE+Iq0l ev3jug8f68etwtAFPaxXMB8GA1UdIwQYMBaAFHKeL5wdh8IUc1B4z9IcY44HFXtd MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2ODA3QS8wMjYzQUI0ODNF ODgxMUVEQTYxQTlCMkFDNEY5QUUwMi9jcDR2bkIySHdoUnpVSGpQMGh4ampnY1Zl MTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NwNHZuQjJId2hSelVIalAwaHhqamdjVmUxMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 ODA3QS8wMjYzQUI0ODNFODgxMUVEQTYxQTlCMkFDNEY5QUUwMi9jcDR2bkIySHdo UnpVSGpQMGh4ampnY1ZlMTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB/5u2IWeOnSjUf7XMs6BPwHdrSaUwNx7wqrB6tzFxmVpIV4TOXR4+x 6eFntxO9QpdQVeVxVpvZ7r/jfXMJPREtyRXK/+N/+8+ATX0HFeR5JWqX8+magCvk MRSrkLceJ9EYDHZWuRClO6hJnNdgVIs3WL3mkwJsNboeJbBXmLLVlFFvTI514JOG TQ9w9GZaCGG0pV4kvtr9RkPmoEX5NASjYfch1QI2fKsMU3iqWrwNO9o7y6mHNo2A XUUenRGCbOdsVn+Xc/H6iul3A42BFc2oshZOEiQKt2flr/r+3PYbWFIuEnnRA2ba q2N6TRO9zM1AP5WW2DTL2twEXuniMD3D -----END CERTIFICATE-----Generated at Wed Oct 22 12:13:33 2025 by rpki-client