$ rpki-client -vvf rpki.apnic.net/member_repository/A918FC75/3AA5DEE0DD5811EC870FC20DC4F9AE02/SC5abgiWomapGkBmwG9LTtmEZJ0.mft File: SC5abgiWomapGkBmwG9LTtmEZJ0.mft (raw, json) Hash identifier: VQKKyej77Vo8Xu1e0RliOK/qvb80jzWvaqNWzy6H1og= Subject key identifier: 21:D6:65:F1:2E:E0:C2:09:DC:EE:4A:91:CE:BA:B7:5C:0D:4C:8E:F0 Authority key identifier: 48:2E:5A:6E:08:96:A2:66:A9:1A:40:66:C0:6F:4B:4E:D9:84:64:9D Certificate issuer: /CN=A918FC75/serialNumber=482E5A6E0896A266A91A4066C06F4B4ED984649D Certificate serial: 04CA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SC5abgiWomapGkBmwG9LTtmEZJ0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918FC75/3AA5DEE0DD5811EC870FC20DC4F9AE02/SC5abgiWomapGkBmwG9LTtmEZJ0.mft Manifest number: 03FF Signing time: Thu 21 Aug 2025 01:19:54 +0000 Manifest this update: Thu 21 Aug 2025 01:19:54 +0000 Manifest next update: Thu 28 Aug 2025 01:19:54 +0000 Files and hashes: 1: SC5abgiWomapGkBmwG9LTtmEZJ0.crl (hash: UQLgx7mxta6d5nlklJnwFcTZ/9b0prILeg1Q28jiPDY=) 2: 1465D252621C11F0AAE4E551C4F9AE02.roa (hash: pE0TeYdIKCgc/QwPZRV1/6gtn2PDxZWuZWypXfqUCBk=) 3: FC458FFABD2F11EFACAEDF48C4F9AE02.roa (hash: zB6o1ufSPR15qZaXVJkiDWkGqSq/IwuqWXWe0bUcf1Y=) 4: 340E5DD0141B11F0922B6344C4F9AE02.roa (hash: 3+hYQrTmF+e7jJciHHC9Syz1XLKiAuOCDuMHFEIoOO8=) 5: 212DD5DEEFCB11EFBA51D367C4F9AE02.roa (hash: yoHxToNdVsEl2/mlXGoTSTZxsnICbltZ8OX7V22JdbQ=) 6: 70970B107C9811EEA876DA2DC4F9AE02.roa (hash: xMiHMYItwXrD425Qd67NbjvjX4HrJ3EnpnA8c/QF/4k=) 7: D97AC950ABDD11EDAE837666C4F9AE02.roa (hash: SilbnDSMyvFBaNxXZnHVsn7YIdcJKbT+9vzuxU+MumM=) 8: 15E5E344239111EF96EC1C11C4F9AE02.roa (hash: A8LP0mnaTBBKppNqPSMaDhPFCk6GGBkjSaBDc8dCjBI=) 9: CF6343DE295D11F0B3C33614C4F9AE02.roa (hash: GEOmMPHt+G2/MbW4UDY6/tPaY4MdJDx+hT+IJOD6OI0=) 10: B97703967D5211F0A441E970C4F9AE02.roa (hash: GaALGIK/a9p5lApP+qC0JDNjMvW/jhDMhJJ0jOA0Itw=) 11: 423DBDA2BD3011EFBEFB5F49C4F9AE02.roa (hash: 9J2iOFdXW0WTaVQoSkjTpRubYQV1uYwslH5WX54SWS8=) 12: B6E083D46E2F11EEB9C12A34C4F9AE02.roa (hash: cEUErhxJhRs9Ayd1OjEDxa3aUEaS/H1Cn1wGLQy/Hdo=) 13: A8B7D7567D5211F09C93DD70C4F9AE02.roa (hash: FbjN4dnguZO3w4higjYMr5q5ehUNU/NaKQb8NUscA34=) 14: EE88C2F6580711F09A56942DC4F9AE02.roa (hash: OKC561ca7ASLfOkgXrHgKbplp4PP/4v4yOXE3sio9JA=) 15: DD12F48AEC2611EF94F85F09C4F9AE02.roa (hash: 5x3hwbD6OKSIDNRFPjnTH18AkwSHTg00pMz0FKOos+E=) 16: D3A8EA649F0911EE98065E23C4F9AE02.roa (hash: R2/WUKzxoHuFFd/QsgqeEUvYq+HCK78+7w9Z8fUIsWc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918FC75/3AA5DEE0DD5811EC870FC20DC4F9AE02/SC5abgiWomapGkBmwG9LTtmEZJ0.crl rsync://rpki.apnic.net/member_repository/A918FC75/3AA5DEE0DD5811EC870FC20DC4F9AE02/SC5abgiWomapGkBmwG9LTtmEZJ0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SC5abgiWomapGkBmwG9LTtmEZJ0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 Aug 2025 01:19:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1226 (0x4ca) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918FC75, serialNumber=482E5A6E0896A266A91A4066C06F4B4ED984649D Validity Not Before: Aug 21 01:19:54 2025 GMT Not After : Aug 28 01:19:54 2025 GMT Subject: CN=68a6743a-a715 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:51:d4:d9:07:53:ce:75:2d:7a:e8:ef:e4:4e: 76:d5:f0:56:71:d5:d6:b7:d9:b2:6e:39:54:c4:cb: 20:5c:ec:30:9a:3e:d9:b8:12:02:71:50:58:0d:1e: 6c:62:4e:c7:50:5b:6e:22:89:c0:ab:7e:80:26:59: 6e:31:a3:92:6e:09:cc:a3:47:15:6e:6b:0a:2a:fb: a9:f0:16:3b:a5:37:61:4d:bb:0d:3f:78:fb:65:19: 3e:51:c6:87:93:24:36:9c:6e:47:6f:c2:72:22:4e: 3c:b9:33:8d:22:8e:1e:51:8a:86:23:88:06:09:57: 60:05:18:ac:2e:70:fc:69:ef:32:2d:0b:1b:42:ed: d9:54:50:df:01:97:59:f5:f4:56:bb:68:72:a9:0b: ec:1c:ba:0d:9c:68:a5:b9:06:08:ee:a9:bd:fc:a7: 13:fc:2a:48:87:0e:4d:23:ad:90:6a:37:e1:44:79: 2e:ce:0f:d6:8c:7a:97:2c:85:c7:48:4e:c4:9c:d0: 7b:95:0a:c1:87:d4:f2:26:6c:41:0a:51:d5:1b:e5: b0:d1:ab:8d:9a:19:b3:97:18:ef:06:6a:e2:bc:65: 4e:00:5f:4a:7f:ba:26:f0:f7:13:2b:71:73:48:1d: 86:7e:a6:17:de:4b:c0:2d:de:72:f2:ff:9e:78:60: 3f:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:D6:65:F1:2E:E0:C2:09:DC:EE:4A:91:CE:BA:B7:5C:0D:4C:8E:F0 X509v3 Authority Key Identifier: keyid:48:2E:5A:6E:08:96:A2:66:A9:1A:40:66:C0:6F:4B:4E:D9:84:64:9D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918FC75/3AA5DEE0DD5811EC870FC20DC4F9AE02/SC5abgiWomapGkBmwG9LTtmEZJ0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SC5abgiWomapGkBmwG9LTtmEZJ0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918FC75/3AA5DEE0DD5811EC870FC20DC4F9AE02/SC5abgiWomapGkBmwG9LTtmEZJ0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 78:35:be:31:03:30:e0:99:f2:5a:be:0e:62:a4:86:25:24:8e: d0:ac:de:cc:b2:af:64:98:f5:c9:6d:ce:a8:bb:31:39:69:32: 5d:f5:62:cf:e4:73:a8:83:57:86:7b:60:99:fa:20:53:c5:3c: 17:55:4e:2d:91:f8:c2:fe:98:6e:8b:74:7c:c9:d9:c7:36:2f: f7:07:00:68:d9:29:c2:a2:63:cb:e3:ca:92:04:3c:c4:ac:41: 2d:9d:b2:70:2f:43:20:37:9a:db:71:33:8f:5e:87:1b:01:52: eb:3e:ec:12:3d:64:49:17:cb:07:ce:13:52:69:49:ee:b2:69: 2d:58:04:7d:3a:24:32:48:31:a8:cf:53:b9:1c:f9:47:e0:78: e4:38:d6:26:45:de:6d:bd:b4:9e:a9:68:b2:57:27:18:05:a7: c0:c4:22:55:26:6e:6f:1c:da:08:14:40:5d:dd:15:b0:d1:ab: 2e:b9:74:c5:21:04:78:7e:62:3a:79:91:5c:3a:70:8c:d6:f0: 70:4a:53:75:cc:63:71:6b:1f:32:41:53:63:f1:67:f2:c7:ff: 1b:82:56:a4:6a:29:83:f7:1a:a4:cd:b3:a3:da:25:96:fe:76: 10:f2:20:b6:c7:71:bc:39:51:f7:bf:c4:ff:7d:0e:db:bd:4e: d7:12:75:d4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBMowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEZDNzUxMTAvBgNVBAUTKDQ4MkU1QTZFMDg5NkEyNjZBOTFBNDA2NkMwNkY0QjRF RDk4NDY0OUQwHhcNMjUwODIxMDExOTU0WhcNMjUwODI4MDExOTU0WjAYMRYwFAYD VQQDEw02OGE2NzQzYS1hNzE1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA81HU2QdTznUteujv5E521fBWcdXWt9mybjlUxMsgXOwwmj7ZuBICcVBYDR5s Yk7HUFtuIonAq36AJlluMaOSbgnMo0cVbmsKKvup8BY7pTdhTbsNP3j7ZRk+UcaH kyQ2nG5Hb8JyIk48uTONIo4eUYqGI4gGCVdgBRisLnD8ae8yLQsbQu3ZVFDfAZdZ 9fRWu2hyqQvsHLoNnGiluQYI7qm9/KcT/CpIhw5NI62QajfhRHkuzg/WjHqXLIXH SE7EnNB7lQrBh9TyJmxBClHVG+Ww0auNmhmzlxjvBmrivGVOAF9Kf7om8PcTK3Fz SB2GfqYX3kvALd5y8v+eeGA/qwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCHWZfEu 4MIJ3O5Kkc66t1wNTI7wMB8GA1UdIwQYMBaAFEguWm4IlqJmqRpAZsBvS07ZhGSd MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RkM3NS8zQUE1REVFMERE NTgxMUVDODcwRkMyMERDNEY5QUUwMi9TQzVhYmdpV29tYXBHa0Jtd0c5TFR0bUVa SjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1NDNWFiZ2lXb21hcEdrQm13RzlMVHRtRVpKMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 RkM3NS8zQUE1REVFMERENTgxMUVDODcwRkMyMERDNEY5QUUwMi9TQzVhYmdpV29t YXBHa0Jtd0c5TFR0bUVaSjAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB4Nb4xAzDgmfJavg5ipIYlJI7QrN7Msq9kmPXJbc6ouzE5aTJd9WLP 5HOog1eGe2CZ+iBTxTwXVU4tkfjC/phui3R8ydnHNi/3BwBo2SnComPL48qSBDzE rEEtnbJwL0MgN5rbcTOPXocbAVLrPuwSPWRJF8sHzhNSaUnusmktWAR9OiQySDGo z1O5HPlH4HjkONYmRd5tvbSeqWiyVycYBafAxCJVJm5vHNoIFEBd3RWw0asuuXTF IQR4fmI6eZFcOnCM1vBwSlN1zGNxax8yQVNj8Wfyx/8bglakaimD9xqkzbOj2iWW /nYQ8iC2x3G8OVH3v8T/fQ7bvU7XEnXU -----END CERTIFICATE-----Generated at Thu Aug 21 06:57:03 2025 by rpki-client