$ rpki-client -vvf rpki.apnic.net/member_repository/A916807A/0263AB483E8811EDA61A9B2AC4F9AE02/cp4vnB2HwhRzUHjP0hxjjgcVe10.mft File: cp4vnB2HwhRzUHjP0hxjjgcVe10.mft (raw, json) Hash identifier: EB24Ohap2fS1bcY14mXqH6Krp3CXhz13IL99+7Rzs74= Subject key identifier: 03:67:A5:B5:DF:97:56:44:12:7B:68:E6:11:FE:64:51:AF:45:81:B8 Authority key identifier: 72:9E:2F:9C:1D:87:C2:14:73:50:78:CF:D2:1C:63:8E:07:15:7B:5D Certificate issuer: /CN=A916807A/serialNumber=729E2F9C1D87C214735078CFD21C638E07157B5D Certificate serial: 0234 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cp4vnB2HwhRzUHjP0hxjjgcVe10.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916807A/0263AB483E8811EDA61A9B2AC4F9AE02/cp4vnB2HwhRzUHjP0hxjjgcVe10.mft Manifest number: 0215 Signing time: Sat 31 May 2025 02:13:36 +0000 Manifest this update: Sat 31 May 2025 02:13:35 +0000 Manifest next update: Sat 07 Jun 2025 02:13:35 +0000 Files and hashes: 1: cp4vnB2HwhRzUHjP0hxjjgcVe10.crl (hash: 0mldTYOSt5Z80LLGmktRUqCr/lRXh89jBi4OGuZqZxE=) 2: 0711ABAE36D311F091108A4EC4F9AE02.roa (hash: 597OuPOYgkyZPJzuTMHmEhUJoLCC1JeifLTzP6wE3yI=) 3: 2E2847223DB311EE9375493EC4F9AE02.roa (hash: fpl1QeLbfvQuhkR1/wuQiPy5mkE26myDKA7Pu9M6C4M=) 4: 54AABA183DB011EE9F747386C4F9AE02.roa (hash: ONapLZvUqu3mpJkB9dcSlu94PIbPVn9cCFsHZdZqgAM=) 5: 0634745A36D311F091108A4EC4F9AE02.roa (hash: OK7qXV40Ga+/DqfoMasVZ40xTPBivsoEX362FFQWgvA=) 6: 853DCAEA341111F0A5CD2B20C4F9AE02.roa (hash: 3124udjGGKcS1/Wy1zJaOsZltJyh/OcbojpCAI+dINM=) 7: F0B52AD6309011F0BAEB117AC4F9AE02.roa (hash: 84UH8wITVlXqLjHeXBNslYU7eygedFDJbI4Z1O9dXBk=) 8: 0424E2A2391811F0BD320332C4F9AE02.roa (hash: 3gLUj8duXZr1fAsGq8Q98uLnFAI+cAF7wiBd3NIkWDU=) 9: 056F9FEA36D311F091108A4EC4F9AE02.roa (hash: BX2kZVcRm2Lf9dXRbwFUacC3GhrTE4kMOU3pmkDVi9U=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916807A/0263AB483E8811EDA61A9B2AC4F9AE02/cp4vnB2HwhRzUHjP0hxjjgcVe10.crl rsync://rpki.apnic.net/member_repository/A916807A/0263AB483E8811EDA61A9B2AC4F9AE02/cp4vnB2HwhRzUHjP0hxjjgcVe10.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cp4vnB2HwhRzUHjP0hxjjgcVe10.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 02:13:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 564 (0x234) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916807A, serialNumber=729E2F9C1D87C214735078CFD21C638E07157B5D Validity Not Before: May 31 02:13:35 2025 GMT Not After : Jun 7 02:13:35 2025 GMT Subject: CN=683a65cf-a0e3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:6a:35:ef:d8:30:12:f8:7a:c2:ad:ca:8e:40: 1d:ab:45:3b:b9:30:5a:0f:07:bd:2c:53:4a:39:1e: c5:66:a4:98:50:90:20:79:0c:80:97:c7:03:35:34: 95:dc:e4:2e:4d:67:4d:12:9b:f9:06:0c:fb:82:e1: 3b:bc:64:37:a2:67:fa:0d:d2:f0:fd:4d:26:0b:8e: 75:c1:75:e2:5d:f0:6c:2d:5e:0f:2f:ac:ba:bf:09: d3:d0:be:40:b1:40:d6:79:2c:6e:b0:91:23:af:66: 1f:95:15:9c:3c:01:1e:68:34:b6:b8:b8:14:0b:33: f0:3c:3c:83:78:6f:58:14:7d:57:16:a1:3c:92:94: 9d:93:43:86:06:66:ef:b5:22:cc:ff:b3:e9:74:f8: 10:53:8a:b5:14:e2:63:18:cf:11:af:23:1f:e0:53: 21:94:1b:d9:58:a2:63:0f:81:0f:bd:ec:8e:4a:a8: 13:fb:fe:df:f6:c2:38:26:a0:84:d9:fe:d2:11:e3: db:52:50:73:1d:61:dc:98:c5:39:93:88:7b:8c:ab: ca:e5:67:4b:51:11:b9:80:d8:fb:14:9b:59:c7:51: b8:aa:05:90:2b:6a:8f:05:ec:09:da:de:29:17:74: a2:b3:9e:c2:1b:7c:50:3e:5e:0e:8c:d1:7e:56:7d: e2:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:67:A5:B5:DF:97:56:44:12:7B:68:E6:11:FE:64:51:AF:45:81:B8 X509v3 Authority Key Identifier: keyid:72:9E:2F:9C:1D:87:C2:14:73:50:78:CF:D2:1C:63:8E:07:15:7B:5D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916807A/0263AB483E8811EDA61A9B2AC4F9AE02/cp4vnB2HwhRzUHjP0hxjjgcVe10.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cp4vnB2HwhRzUHjP0hxjjgcVe10.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916807A/0263AB483E8811EDA61A9B2AC4F9AE02/cp4vnB2HwhRzUHjP0hxjjgcVe10.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 04:d5:f7:04:02:83:9c:5d:3e:d9:98:2f:51:02:26:7c:b5:1a: 98:19:56:ad:12:0a:5f:56:1f:49:ac:7b:04:ba:df:3a:fe:01: d2:67:ba:58:9d:db:e2:ca:f7:0c:0d:f3:1e:cd:93:b5:d1:1d: f9:9c:1d:0b:7f:30:e3:1f:6b:9c:64:de:af:d5:86:d4:35:1f: 93:da:e1:ac:71:ea:45:7c:bc:b8:f3:c9:2f:b8:ee:1b:97:87: 55:60:1e:c7:36:51:d6:8b:90:d7:1c:f2:ba:50:b5:6f:1e:40: 51:f7:7c:2e:c8:14:c3:7f:c9:f2:e3:c2:37:bb:91:f4:e4:da: 61:b0:40:37:50:63:1a:41:25:81:d5:37:f5:9b:c8:a1:ad:3e: 80:de:9c:3d:db:f3:2b:43:f9:ee:f2:c3:b5:06:0b:ea:c7:7d: 4e:9d:af:8f:a3:89:e7:6e:1b:b6:79:69:a9:30:95:bf:c1:aa: 76:bd:36:1b:32:04:1d:14:fe:33:29:11:cc:ed:4b:b0:9d:ce: bf:a5:b2:28:00:b0:57:5c:46:38:3c:7b:55:c8:6f:8b:2d:c5: 80:79:5d:5d:dd:f2:9c:37:f0:0a:bf:96:95:c8:02:0a:dc:07: 15:08:33:71:a4:31:4d:24:f5:cb:7a:78:77:ac:99:b8:2e:ff: fa:ba:90:73 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAjQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjgwN0ExMTAvBgNVBAUTKDcyOUUyRjlDMUQ4N0MyMTQ3MzUwNzhDRkQyMUM2MzhF MDcxNTdCNUQwHhcNMjUwNTMxMDIxMzM1WhcNMjUwNjA3MDIxMzM1WjAYMRYwFAYD VQQDEw02ODNhNjVjZi1hMGUzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsmo179gwEvh6wq3KjkAdq0U7uTBaDwe9LFNKOR7FZqSYUJAgeQyAl8cDNTSV 3OQuTWdNEpv5Bgz7guE7vGQ3omf6DdLw/U0mC451wXXiXfBsLV4PL6y6vwnT0L5A sUDWeSxusJEjr2YflRWcPAEeaDS2uLgUCzPwPDyDeG9YFH1XFqE8kpSdk0OGBmbv tSLM/7PpdPgQU4q1FOJjGM8RryMf4FMhlBvZWKJjD4EPveyOSqgT+/7f9sI4JqCE 2f7SEePbUlBzHWHcmMU5k4h7jKvK5WdLURG5gNj7FJtZx1G4qgWQK2qPBewJ2t4p F3Sis57CG3xQPl4OjNF+Vn3i2QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFANnpbXf l1ZEEnto5hH+ZFGvRYG4MB8GA1UdIwQYMBaAFHKeL5wdh8IUc1B4z9IcY44HFXtd MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2ODA3QS8wMjYzQUI0ODNF ODgxMUVEQTYxQTlCMkFDNEY5QUUwMi9jcDR2bkIySHdoUnpVSGpQMGh4ampnY1Zl MTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NwNHZuQjJId2hSelVIalAwaHhqamdjVmUxMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 ODA3QS8wMjYzQUI0ODNFODgxMUVEQTYxQTlCMkFDNEY5QUUwMi9jcDR2bkIySHdo UnpVSGpQMGh4ampnY1ZlMTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAE1fcEAoOcXT7ZmC9RAiZ8tRqYGVatEgpfVh9JrHsEut86/gHSZ7pY ndviyvcMDfMezZO10R35nB0LfzDjH2ucZN6v1YbUNR+T2uGscepFfLy488kvuO4b l4dVYB7HNlHWi5DXHPK6ULVvHkBR93wuyBTDf8ny48I3u5H05NphsEA3UGMaQSWB 1Tf1m8ihrT6A3pw92/MrQ/nu8sO1Bgvqx31Ona+Po4nnbhu2eWmpMJW/wap2vTYb MgQdFP4zKRHM7Uuwnc6/pbIoALBXXEY4PHtVyG+LLcWAeV1d3fKcN/AKv5aVyAIK 3AcVCDNxpDFNJPXLenh3rJm4Lv/6upBz -----END CERTIFICATE-----Generated at Sat May 31 17:56:20 2025 by rpki-client