$ rpki-client -vvf rpki.apnic.net/member_repository/A916B6AA/46C7F1724F1611E58D2A3327C4F9AE02/cLDwRtLzp0OW6Cx56OPazyYLOe4.mft File: cLDwRtLzp0OW6Cx56OPazyYLOe4.mft (raw, json) Hash identifier: Ovr6ncmYgdKz1z+yl+S/lQItXbRFQFH7uc0VAwFYrvg= Subject key identifier: 62:CA:5A:96:CB:15:31:9F:27:A3:E4:CF:61:4F:C4:1D:88:D7:82:B2 Authority key identifier: 70:B0:F0:46:D2:F3:A7:43:96:E8:2C:79:E8:E3:DA:CF:26:0B:39:EE Certificate issuer: /CN=A916B6AA/serialNumber=70B0F046D2F3A74396E82C79E8E3DACF260B39EE Certificate serial: 249F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cLDwRtLzp0OW6Cx56OPazyYLOe4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916B6AA/46C7F1724F1611E58D2A3327C4F9AE02/cLDwRtLzp0OW6Cx56OPazyYLOe4.mft Manifest number: 245C Signing time: Fri 30 May 2025 15:58:37 +0000 Manifest this update: Fri 30 May 2025 15:58:36 +0000 Manifest next update: Fri 06 Jun 2025 15:58:36 +0000 Files and hashes: 1: cLDwRtLzp0OW6Cx56OPazyYLOe4.crl (hash: KOE3nkcIpKfJ141JG9l34Oqpzm9aE36DNN4F6A3m62Q=) 2: 83684F548DF411E7A230506DC4F9AE02.roa (hash: 7rwSXJvv/HshNFddgboHnncSidkclYa/NvGMbxx8LFA=) 3: 1A8324E28DF311E7B616ED66C4F9AE02.roa (hash: nq0Uzk8SuEDu3ZbDp3B41hYz4SbibvM9axOdjGoUmDE=) 4: E080F3508DFC11E7A7F08785C4F9AE02.roa (hash: 4MVhPeL89L4iqif2jjx8A1Zl5rTPkTTCl8RIrLHaD+o=) 5: 19C92BC88DF311E7B616ED66C4F9AE02.roa (hash: aaC6AltbMVKLhQjXZ7dpspAxhJD3m7klJ08VK8NpfEI=) 6: B2ED9AEE913311E79B98C45BC4F9AE02.roa (hash: RYNGA3H5ydUqwQnOMshPikkHHM7bQr9sFSWMotIy4S0=) 7: 5C9B073691CD11E7AD932563C4F9AE02.roa (hash: +cU9ydF4cWSQqI/mYS8fYBUIoo4803uhA7oc0s3jgaU=) 8: 027532E6385F11EAA879692AC4F9AE02.roa (hash: CM6RIxM9JHHGhZC10urcCuophC6TNcTlTYu0C+8d5wc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916B6AA/46C7F1724F1611E58D2A3327C4F9AE02/cLDwRtLzp0OW6Cx56OPazyYLOe4.crl rsync://rpki.apnic.net/member_repository/A916B6AA/46C7F1724F1611E58D2A3327C4F9AE02/cLDwRtLzp0OW6Cx56OPazyYLOe4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cLDwRtLzp0OW6Cx56OPazyYLOe4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 15:58:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9375 (0x249f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916B6AA, serialNumber=70B0F046D2F3A74396E82C79E8E3DACF260B39EE Validity Not Before: May 30 15:58:36 2025 GMT Not After : Jun 6 15:58:36 2025 GMT Subject: CN=6839d5ad-5156 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:28:bc:88:40:5d:6e:c9:57:57:48:4a:c8:7e: 9d:1a:a6:95:ce:9a:06:f8:82:b8:ab:76:a5:b1:c3: ce:df:b6:6f:5c:db:fb:ed:f4:85:9a:ff:ea:06:34: e3:e2:ac:9f:33:d9:15:dd:d7:d5:6f:d3:12:e8:20: 7d:c4:f4:ec:a7:ae:03:12:89:a6:9e:45:e2:0c:48: f3:74:34:cb:48:f6:a7:33:fa:9d:9b:9d:92:24:c3: 2b:0d:5f:e1:98:88:e5:35:b7:ea:98:26:4e:32:be: 9c:ef:5a:e9:1b:4e:e7:4c:60:a6:a5:0c:78:c8:6c: e7:57:fd:1d:13:97:90:df:18:d2:1e:6c:02:52:9d: ba:32:97:c2:0c:4d:3f:10:d3:dc:83:6a:89:5c:04: 34:0d:50:64:ab:57:c3:7d:42:1a:a2:45:88:00:31: ae:b1:c2:2b:9c:82:bb:b6:2d:ad:31:97:f7:39:af: 9a:a1:57:33:94:87:a4:df:66:f8:45:3e:d2:1a:e2: 60:f3:c9:b3:1c:be:ef:d7:fc:89:89:5b:df:81:6d: 5e:d8:d1:04:0e:4b:a5:3e:36:c5:e0:fa:44:f7:30: a8:ac:05:4e:41:09:54:f1:88:23:13:a9:56:3a:5e: 86:e0:df:05:16:2e:a5:35:3e:23:df:47:bb:36:c1: f4:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:CA:5A:96:CB:15:31:9F:27:A3:E4:CF:61:4F:C4:1D:88:D7:82:B2 X509v3 Authority Key Identifier: keyid:70:B0:F0:46:D2:F3:A7:43:96:E8:2C:79:E8:E3:DA:CF:26:0B:39:EE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916B6AA/46C7F1724F1611E58D2A3327C4F9AE02/cLDwRtLzp0OW6Cx56OPazyYLOe4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cLDwRtLzp0OW6Cx56OPazyYLOe4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916B6AA/46C7F1724F1611E58D2A3327C4F9AE02/cLDwRtLzp0OW6Cx56OPazyYLOe4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b7:b5:b8:b7:c6:9b:74:ba:cd:2d:17:44:fd:b5:7f:c2:31:f0: 94:e4:8d:aa:12:2c:8d:65:c7:38:08:eb:db:29:2b:b9:1c:77: a1:96:e6:8e:19:72:b7:fc:64:f1:85:88:49:45:09:d3:83:53: 1f:72:d7:00:c5:c9:a1:a8:f1:fd:d3:67:d4:da:91:fc:c2:f3: 1f:17:f2:22:06:70:d9:89:c8:38:63:27:5d:2c:b7:00:e6:4c: 82:0b:24:33:d5:7e:ed:33:0d:c1:99:8a:07:94:78:72:c4:a8: 10:e6:9c:be:69:2c:7f:d7:31:7a:28:60:42:d1:40:e7:6f:82: 1f:79:84:46:b9:08:11:07:ac:33:2a:fa:64:9b:12:5c:4a:92: 04:ed:60:26:e3:91:ba:e9:54:38:c9:2b:74:65:1a:eb:40:c6: d4:31:d4:09:77:05:39:ab:88:7d:9f:28:48:08:b9:41:39:37: 6a:85:bf:46:75:0d:b1:83:ef:ba:25:b5:eb:d3:6d:11:c2:d2: be:22:d3:d2:67:95:57:c7:71:f6:14:7b:12:26:c2:94:9e:7f: f9:66:17:a4:79:af:c3:95:96:4c:29:39:73:2a:92:a7:11:2f: a8:09:d1:f3:f7:aa:c0:26:ca:05:37:d3:45:bb:60:f3:db:1a: d1:10:49:4b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICJJ8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkI2QUExMTAvBgNVBAUTKDcwQjBGMDQ2RDJGM0E3NDM5NkU4MkM3OUU4RTNEQUNG MjYwQjM5RUUwHhcNMjUwNTMwMTU1ODM2WhcNMjUwNjA2MTU1ODM2WjAYMRYwFAYD VQQDEw02ODM5ZDVhZC01MTU2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2Ci8iEBdbslXV0hKyH6dGqaVzpoG+IK4q3alscPO37ZvXNv77fSFmv/qBjTj 4qyfM9kV3dfVb9MS6CB9xPTsp64DEommnkXiDEjzdDTLSPanM/qdm52SJMMrDV/h mIjlNbfqmCZOMr6c71rpG07nTGCmpQx4yGznV/0dE5eQ3xjSHmwCUp26MpfCDE0/ ENPcg2qJXAQ0DVBkq1fDfUIaokWIADGuscIrnIK7ti2tMZf3Oa+aoVczlIek32b4 RT7SGuJg88mzHL7v1/yJiVvfgW1e2NEEDkulPjbF4PpE9zCorAVOQQlU8YgjE6lW Ol6G4N8FFi6lNT4j30e7NsH0fwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGLKWpbL FTGfJ6Pkz2FPxB2I14KyMB8GA1UdIwQYMBaAFHCw8EbS86dDlugseejj2s8mCznu MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QjZBQS80NkM3RjE3MjRG MTYxMUU1OEQyQTMzMjdDNEY5QUUwMi9jTER3UnRMenAwT1c2Q3g1Nk9QYXp5WUxP ZTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NMRHdSdEx6cDBPVzZDeDU2T1BhenlZTE9lNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 QjZBQS80NkM3RjE3MjRGMTYxMUU1OEQyQTMzMjdDNEY5QUUwMi9jTER3UnRMenAw T1c2Q3g1Nk9QYXp5WUxPZTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC3tbi3xpt0us0tF0T9tX/CMfCU5I2qEiyNZcc4COvbKSu5HHehluaO GXK3/GTxhYhJRQnTg1MfctcAxcmhqPH902fU2pH8wvMfF/IiBnDZicg4YyddLLcA 5kyCCyQz1X7tMw3BmYoHlHhyxKgQ5py+aSx/1zF6KGBC0UDnb4IfeYRGuQgRB6wz KvpkmxJcSpIE7WAm45G66VQ4ySt0ZRrrQMbUMdQJdwU5q4h9nyhICLlBOTdqhb9G dQ2xg++6JbXr020RwtK+ItPSZ5VXx3H2FHsSJsKUnn/5Zhekea/DlZZMKTlzKpKn ES+oCdHz96rAJsoFN9NFu2Dz2xrREElL -----END CERTIFICATE-----Generated at Sat May 31 17:17:31 2025 by rpki-client