$ rpki-client -vvf rpki.apnic.net/member_repository/A918495F/848C857CDFEC11E7A27A2213C4F9AE02/kMIvc5OFDo7Pa18eMg0HstGs2P0.mft File: kMIvc5OFDo7Pa18eMg0HstGs2P0.mft (raw, json) Hash identifier: GVRn4UPgt/G7ySxHEcyB8axqMyHt/QKDCtpATzQqt7k= Subject key identifier: E1:40:7E:8A:18:D8:53:14:6E:BF:C6:73:62:60:16:B9:CC:E0:AD:B5 Authority key identifier: 90:C2:2F:73:93:85:0E:8E:CF:6B:5F:1E:32:0D:07:B2:D1:AC:D8:FD Certificate issuer: /CN=A918495F/serialNumber=90C22F7393850E8ECF6B5F1E320D07B2D1ACD8FD Certificate serial: 17E4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kMIvc5OFDo7Pa18eMg0HstGs2P0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918495F/848C857CDFEC11E7A27A2213C4F9AE02/kMIvc5OFDo7Pa18eMg0HstGs2P0.mft Manifest number: 1774 Signing time: Fri 30 May 2025 16:48:07 +0000 Manifest this update: Fri 30 May 2025 16:48:06 +0000 Manifest next update: Fri 06 Jun 2025 16:48:06 +0000 Files and hashes: 1: kMIvc5OFDo7Pa18eMg0HstGs2P0.crl (hash: d5ptkxSaC4eIZ6xDMVAIkPD8veLbQgw7BQ2/HlznggE=) 2: E8118BFA022C11EBAC47A831C4F9AE02.roa (hash: l9PAtv4FmfKEbsr39kSblkIdk4l36jBShaU/yhiu3EA=) 3: 7E2725DAAC7611EAB766A74CC4F9AE02.roa (hash: pRnYMFn3MsmdKZMCcupGBS8xip66wFsc4Vhu+CVQM8s=) 4: DD145D6E023A11EBBDF8B35FC4F9AE02.roa (hash: Ki+ZYv+WbFodfUBA0Z9kcHIRNA0D2B2/Fqh0gMIddSg=) 5: A2C8B57074B711EB8491BC63C4F9AE02.roa (hash: 1XIBkz1xrsmaIEUuPCKysFF+5jDC/AbJdnY6h8iCmzA=) 6: B04675FC959711EA9F290A33C4F9AE02.roa (hash: ivQeuywrXd2HV3FA6lQn6A/OFE5M8rNHrmCwXxaSoOo=) 7: 07EE827ADFEE11E7B0E71D1CC4F9AE02.roa (hash: 6dC3vmSVGgmkSh9nUR6cyWb5UZYgtCMEtbXtHWZQ+Ms=) 8: 696975861A3611EEA597E872C4F9AE02.roa (hash: oIGClTM3lHim9PRA3fKoX8EMPndg1+r8p0Zu4BUJRhA=) 9: 4C0C96C6022E11EBA920EA37C4F9AE02.roa (hash: K/ybxERnMroT+/HivxwCKoEx2WZjUMXQikxQf2o4Wtg=) 10: 694CCE66E53911EF9DD1B90DC4F9AE02.roa (hash: Q50guEdFQrac2WGNIOWOMwAPEusnnVtr+0WbjS+0Iw8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918495F/848C857CDFEC11E7A27A2213C4F9AE02/kMIvc5OFDo7Pa18eMg0HstGs2P0.crl rsync://rpki.apnic.net/member_repository/A918495F/848C857CDFEC11E7A27A2213C4F9AE02/kMIvc5OFDo7Pa18eMg0HstGs2P0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kMIvc5OFDo7Pa18eMg0HstGs2P0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 16:48:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6116 (0x17e4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918495F, serialNumber=90C22F7393850E8ECF6B5F1E320D07B2D1ACD8FD Validity Not Before: May 30 16:48:06 2025 GMT Not After : Jun 6 16:48:06 2025 GMT Subject: CN=6839e147-427b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:3d:6d:9b:24:38:2c:a4:9f:29:f7:54:0c:84: b8:a8:70:d7:2a:6f:cf:7a:fc:f0:d5:fc:75:64:69: 27:7e:3d:b8:60:c3:90:93:c2:c1:a1:b0:a5:79:0f: 2a:19:dd:55:f0:21:c0:1a:89:f9:75:d7:35:a2:91: 53:0e:19:29:da:18:c8:77:8c:85:e3:a4:68:e1:39: 80:00:e7:7c:27:fc:54:43:58:06:ed:d5:e2:e4:be: 19:03:42:57:f2:d9:a0:53:68:a0:ad:b5:89:29:1f: ec:9f:3d:67:be:16:ba:66:4a:bd:24:e7:48:0c:dd: 93:41:e3:e8:05:57:75:e2:93:41:9e:94:df:f8:09: d7:7f:23:5f:ec:d8:bf:79:14:ce:c4:62:7f:ca:bf: c9:f4:8e:82:b7:9a:08:06:0c:05:5f:bd:5b:a1:85: c2:54:ab:42:e4:92:7c:45:18:79:2f:1a:37:47:36: 23:91:c2:8b:05:21:c2:5b:87:41:00:ac:64:e8:60: b8:21:3b:19:72:16:71:3f:4a:e8:a1:8b:96:cf:e4: 29:a7:81:70:63:5e:d6:9b:ed:73:8f:f8:65:23:47: c7:dd:0a:22:89:9d:63:5d:73:19:0c:4a:b0:6c:d3: f5:65:c2:5e:1e:5a:b7:e9:37:5b:e2:61:8a:25:5b: e6:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:40:7E:8A:18:D8:53:14:6E:BF:C6:73:62:60:16:B9:CC:E0:AD:B5 X509v3 Authority Key Identifier: keyid:90:C2:2F:73:93:85:0E:8E:CF:6B:5F:1E:32:0D:07:B2:D1:AC:D8:FD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918495F/848C857CDFEC11E7A27A2213C4F9AE02/kMIvc5OFDo7Pa18eMg0HstGs2P0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kMIvc5OFDo7Pa18eMg0HstGs2P0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918495F/848C857CDFEC11E7A27A2213C4F9AE02/kMIvc5OFDo7Pa18eMg0HstGs2P0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 55:df:b3:38:cb:98:a9:11:a6:fc:4e:99:9b:2b:6a:12:51:fb: 60:4e:95:78:00:a8:53:7e:5e:93:51:e6:9e:27:54:57:81:84: 9a:dc:99:06:87:da:7e:6e:98:89:5a:88:75:a2:71:6c:c8:dd: 90:52:10:33:f1:c3:55:38:e5:c0:a2:ce:19:cf:b5:21:4b:e1: 6f:ed:08:5e:79:19:a1:89:0a:c5:47:59:60:bb:dd:a8:ad:da: 93:a1:86:6d:88:a5:5c:7a:82:15:09:f7:8f:94:9b:ed:07:2b: b4:26:57:bf:31:a7:e9:c1:54:db:1b:10:02:b0:88:4a:52:f2: a4:b0:94:18:6c:06:bd:b2:9d:54:e8:26:1c:23:85:46:5b:3f: 86:0f:14:19:7b:33:7d:f1:84:f6:16:43:6f:c8:aa:08:b7:dc: 64:89:6b:cf:2f:36:19:f4:64:00:88:fd:77:8a:4b:83:6b:23: 8f:63:72:88:ea:d2:0a:0b:fc:4f:a1:0d:bf:fe:27:fb:e3:be: 72:36:a8:88:81:14:65:20:30:c4:f1:5f:eb:b6:d1:5f:6a:10: 18:49:fe:36:64:01:2c:a5:4a:12:4f:e3:2a:dd:36:13:96:ef: aa:bc:29:f3:f6:c5:02:c1:eb:67:25:cc:d5:bf:00:8c:3c:04: f8:64:36:a8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICF+QwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODQ5NUYxMTAvBgNVBAUTKDkwQzIyRjczOTM4NTBFOEVDRjZCNUYxRTMyMEQwN0Iy RDFBQ0Q4RkQwHhcNMjUwNTMwMTY0ODA2WhcNMjUwNjA2MTY0ODA2WjAYMRYwFAYD VQQDEw02ODM5ZTE0Ny00MjdiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3D1tmyQ4LKSfKfdUDIS4qHDXKm/Pevzw1fx1ZGknfj24YMOQk8LBobCleQ8q Gd1V8CHAGon5ddc1opFTDhkp2hjId4yF46Ro4TmAAOd8J/xUQ1gG7dXi5L4ZA0JX 8tmgU2igrbWJKR/snz1nvha6Zkq9JOdIDN2TQePoBVd14pNBnpTf+AnXfyNf7Ni/ eRTOxGJ/yr/J9I6Ct5oIBgwFX71boYXCVKtC5JJ8RRh5Lxo3RzYjkcKLBSHCW4dB AKxk6GC4ITsZchZxP0rooYuWz+Qpp4FwY17Wm+1zj/hlI0fH3QoiiZ1jXXMZDEqw bNP1ZcJeHlq36Tdb4mGKJVvmmwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOFAfooY 2FMUbr/Gc2JgFrnM4K21MB8GA1UdIwQYMBaAFJDCL3OThQ6Oz2tfHjINB7LRrNj9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NDk1Ri84NDhDODU3Q0RG RUMxMUU3QTI3QTIyMTNDNEY5QUUwMi9rTUl2YzVPRkRvN1BhMThlTWcwSHN0R3My UDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2tNSXZjNU9GRG83UGExOGVNZzBIc3RHczJQMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NDk1Ri84NDhDODU3Q0RGRUMxMUU3QTI3QTIyMTNDNEY5QUUwMi9rTUl2YzVPRkRv N1BhMThlTWcwSHN0R3MyUDAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBV37M4y5ipEab8TpmbK2oSUftgTpV4AKhTfl6TUeaeJ1RXgYSa3JkG h9p+bpiJWoh1onFsyN2QUhAz8cNVOOXAos4Zz7UhS+Fv7QheeRmhiQrFR1lgu92o rdqToYZtiKVceoIVCfePlJvtByu0Jle/MafpwVTbGxACsIhKUvKksJQYbAa9sp1U 6CYcI4VGWz+GDxQZezN98YT2FkNvyKoIt9xkiWvPLzYZ9GQAiP13ikuDayOPY3KI 6tIKC/xPoQ2//if7475yNqiIgRRlIDDE8V/rttFfahAYSf42ZAEspUoST+Mq3TYT lu+qvCnz9sUCwetnJczVvwCMPAT4ZDao -----END CERTIFICATE-----Generated at Sat May 31 14:39:50 2025 by rpki-client