$ rpki-client -vvf rpki.apnic.net/member_repository/A916A983/16730D20CD0F11E89D9FF165C4F9AE02/cVZfLXuSTNcrRVtotmcZQBC7Gp8.mft File: cVZfLXuSTNcrRVtotmcZQBC7Gp8.mft (raw, json) Hash identifier: 6ptbmqtdVVHrE8+XFwvm3NxFBxaTwGg9NRDuvAbJ6+k= Subject key identifier: 1C:F1:6B:86:A0:4F:9D:F0:57:24:40:5D:CF:00:5C:06:58:12:48:2C Authority key identifier: 71:56:5F:2D:7B:92:4C:D7:2B:45:5B:68:B6:67:19:40:10:BB:1A:9F Certificate issuer: /CN=A916A983/serialNumber=71565F2D7B924CD72B455B68B667194010BB1A9F Certificate serial: 131A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cVZfLXuSTNcrRVtotmcZQBC7Gp8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916A983/16730D20CD0F11E89D9FF165C4F9AE02/cVZfLXuSTNcrRVtotmcZQBC7Gp8.mft Manifest number: 12C7 Signing time: Fri 30 May 2025 17:17:09 +0000 Manifest this update: Fri 30 May 2025 17:17:08 +0000 Manifest next update: Fri 06 Jun 2025 17:17:08 +0000 Files and hashes: 1: cVZfLXuSTNcrRVtotmcZQBC7Gp8.crl (hash: xhK0OG5jVjVrF6ETtsOiZaQctfK6o3SRs32TWCgrVJE=) 2: 3B38CB22BA7011EA80520A63C4F9AE02.roa (hash: RkoS7hrQ2QANNm5sx/5d46X4OvIfq/xZ9DC2wpSUEMo=) 3: 2227B66CF97B11EFA2B83631C4F9AE02.roa (hash: Qmv4NznXsRfVMeI2JKAwy+QoVAJUJQXFMJng7cjxgg4=) 4: 75522B0A002B11EA855CA925C4F9AE02.roa (hash: dlzvcYSMpJJECDfUD2ttn05KUyNlgHjyRd5FKOecZPA=) 5: 6E0B5938066711EFA1505F46C4F9AE02.roa (hash: o9qMusGN5GDjUkb5guKhyMehJeu6p5DVF2ITp61z0FM=) 6: 8C163A62FD4611EE8FAE061EC4F9AE02.roa (hash: SPUciNl7sWVHesGHpuLeYdUCLi+DEMRmn3hpjUZkkzo=) 7: EB429364CA3811EE99BEB838C4F9AE02.roa (hash: CxE2LzQTUSnICEBxSLSJi2DaFZfd5DCFRNbdjbleYco=) 8: DEF977A6E53611EB81682769C4F9AE02.roa (hash: hs6gBEHf+NcXloE+gZDvY1hGrieoi7+2YWZ5lbTwNRY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916A983/16730D20CD0F11E89D9FF165C4F9AE02/cVZfLXuSTNcrRVtotmcZQBC7Gp8.crl rsync://rpki.apnic.net/member_repository/A916A983/16730D20CD0F11E89D9FF165C4F9AE02/cVZfLXuSTNcrRVtotmcZQBC7Gp8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cVZfLXuSTNcrRVtotmcZQBC7Gp8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 17:17:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4890 (0x131a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916A983, serialNumber=71565F2D7B924CD72B455B68B667194010BB1A9F Validity Not Before: May 30 17:17:08 2025 GMT Not After : Jun 6 17:17:08 2025 GMT Subject: CN=6839e814-f29b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:6e:3c:1c:68:de:5e:e2:0d:cb:e1:f2:0b:a6: af:45:b7:4d:e2:ab:77:d5:82:32:7e:47:68:5f:1a: 0d:8d:e6:5e:11:93:ed:9b:fc:86:fa:0e:8d:40:39: 41:35:7f:a9:03:4c:3b:89:74:0a:8b:3d:32:48:29: 5d:07:c0:ec:5e:0e:89:2e:af:ba:e4:f2:88:bb:64: d5:e4:cb:eb:2a:d6:59:ea:5c:3a:a7:cb:b2:ad:97: 0c:f4:60:6e:9a:40:c6:40:c2:b8:a9:a3:2c:47:e5: 83:fe:87:8f:ea:30:91:f2:cd:e5:25:e5:d6:e3:3f: a6:81:b5:8a:58:1d:8f:10:93:ea:22:34:8d:b3:ae: 64:7e:5e:ff:76:62:43:84:58:22:e1:2a:32:e7:33: b2:a2:b1:cf:f3:d1:b6:4e:ce:3a:c1:27:24:be:66: 79:0e:81:91:52:e5:af:30:33:ef:85:aa:24:29:0a: 90:e1:43:a3:33:74:3f:b1:e5:6a:9f:34:01:8c:18: c6:68:ca:88:bb:07:ad:0d:69:a6:62:11:64:f1:e2: 1f:51:2a:46:be:8f:98:2d:fe:be:0a:59:ad:09:54: f4:bd:71:48:06:68:98:0f:a8:2a:87:57:3f:12:b4: 9f:95:e4:ec:2c:fd:d6:7a:4c:42:4a:28:35:b4:97: 0b:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:F1:6B:86:A0:4F:9D:F0:57:24:40:5D:CF:00:5C:06:58:12:48:2C X509v3 Authority Key Identifier: keyid:71:56:5F:2D:7B:92:4C:D7:2B:45:5B:68:B6:67:19:40:10:BB:1A:9F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916A983/16730D20CD0F11E89D9FF165C4F9AE02/cVZfLXuSTNcrRVtotmcZQBC7Gp8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cVZfLXuSTNcrRVtotmcZQBC7Gp8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916A983/16730D20CD0F11E89D9FF165C4F9AE02/cVZfLXuSTNcrRVtotmcZQBC7Gp8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 19:e1:f0:79:7a:8b:9d:9a:cc:df:1f:2b:d7:39:9f:5e:6d:1e: 28:e6:fd:4c:56:f5:4b:39:6e:56:51:af:9c:ab:21:31:ec:34: 45:1c:1a:d9:72:c4:c5:4c:75:19:50:e8:b0:ea:0a:90:e5:26: a1:f4:bb:2e:fe:b9:bc:72:c4:c7:a6:f9:50:83:59:c7:17:61: a6:53:61:66:b7:f9:8b:84:80:0a:38:81:c1:d4:2f:5f:e2:f4: b9:9c:12:87:66:eb:0a:8d:fa:7a:ca:20:48:48:ff:38:c3:a7: 79:50:e6:03:40:b8:ee:7f:91:5d:1d:8a:3e:9c:00:6f:62:48: e8:d8:fd:2a:fd:72:e1:36:02:8d:50:7e:8b:a8:bc:ae:75:07: 74:3c:c2:1a:c9:b0:98:ad:cf:66:c1:03:b7:bb:ad:71:3c:fa: dd:e7:b3:4a:5c:bf:46:68:ef:ad:0c:51:ce:11:c3:fa:2f:53: 37:8f:74:86:05:f3:72:03:3a:e2:29:38:2e:fc:ed:66:15:47: c9:7a:3a:22:32:a3:2e:da:58:31:8f:dc:fc:7e:0f:72:36:21: 5e:e2:60:65:6e:d9:98:5d:e9:97:32:04:b4:97:bf:2f:c8:9e: 87:7c:54:11:99:b3:4e:fe:53:47:40:47:d9:bf:42:1a:8a:80: 94:c6:9c:3f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICExowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkE5ODMxMTAvBgNVBAUTKDcxNTY1RjJEN0I5MjRDRDcyQjQ1NUI2OEI2NjcxOTQw MTBCQjFBOUYwHhcNMjUwNTMwMTcxNzA4WhcNMjUwNjA2MTcxNzA4WjAYMRYwFAYD VQQDEw02ODM5ZTgxNC1mMjliMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5W48HGjeXuINy+HyC6avRbdN4qt31YIyfkdoXxoNjeZeEZPtm/yG+g6NQDlB NX+pA0w7iXQKiz0ySCldB8DsXg6JLq+65PKIu2TV5MvrKtZZ6lw6p8uyrZcM9GBu mkDGQMK4qaMsR+WD/oeP6jCR8s3lJeXW4z+mgbWKWB2PEJPqIjSNs65kfl7/dmJD hFgi4Soy5zOyorHP89G2Ts46wSckvmZ5DoGRUuWvMDPvhaokKQqQ4UOjM3Q/seVq nzQBjBjGaMqIuwetDWmmYhFk8eIfUSpGvo+YLf6+ClmtCVT0vXFIBmiYD6gqh1c/ ErSfleTsLP3WekxCSig1tJcLJQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBzxa4ag T53wVyRAXc8AXAZYEkgsMB8GA1UdIwQYMBaAFHFWXy17kkzXK0VbaLZnGUAQuxqf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QTk4My8xNjczMEQyMENE MEYxMUU4OUQ5RkYxNjVDNEY5QUUwMi9jVlpmTFh1U1ROY3JSVnRvdG1jWlFCQzdH cDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NWWmZMWHVTVE5jclJWdG90bWNaUUJDN0dwOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 QTk4My8xNjczMEQyMENEMEYxMUU4OUQ5RkYxNjVDNEY5QUUwMi9jVlpmTFh1U1RO Y3JSVnRvdG1jWlFCQzdHcDgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAZ4fB5eoudmszfHyvXOZ9ebR4o5v1MVvVLOW5WUa+cqyEx7DRFHBrZ csTFTHUZUOiw6gqQ5Sah9Lsu/rm8csTHpvlQg1nHF2GmU2Fmt/mLhIAKOIHB1C9f 4vS5nBKHZusKjfp6yiBISP84w6d5UOYDQLjuf5FdHYo+nABvYkjo2P0q/XLhNgKN UH6LqLyudQd0PMIaybCYrc9mwQO3u61xPPrd57NKXL9GaO+tDFHOEcP6L1M3j3SG BfNyAzriKTgu/O1mFUfJejoiMqMu2lgxj9z8fg9yNiFe4mBlbtmYXemXMgS0l78v yJ6HfFQRmbNO/lNHQEfZv0IaioCUxpw/ -----END CERTIFICATE-----Generated at Sat May 31 17:18:56 2025 by rpki-client