$ rpki-client -vvf rpki.apnic.net/member_repository/A9192C18/9A5EEA8C3DF411ED8041F930C4F9AE02/8f4MMn555a9D4VsOb4zWbAMp0Tg.mft File: 8f4MMn555a9D4VsOb4zWbAMp0Tg.mft (raw, json) Hash identifier: U9xH/khNupGpw7YDm6yMhU2DKcYx2lwUTq6NgECT8gY= Subject key identifier: DA:AA:9A:D3:BB:E4:7C:CA:10:E9:F3:19:A7:9D:96:80:47:7F:86:59 Authority key identifier: F1:FE:0C:32:7E:79:E5:AF:43:E1:5B:0E:6F:8C:D6:6C:03:29:D1:38 Certificate issuer: /CN=A9192C18/serialNumber=F1FE0C327E79E5AF43E15B0E6F8CD66C0329D138 Certificate serial: 036E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8f4MMn555a9D4VsOb4zWbAMp0Tg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9192C18/9A5EEA8C3DF411ED8041F930C4F9AE02/8f4MMn555a9D4VsOb4zWbAMp0Tg.mft Manifest number: 02CC Signing time: Sat 31 May 2025 02:13:07 +0000 Manifest this update: Sat 31 May 2025 02:13:06 +0000 Manifest next update: Sat 07 Jun 2025 02:13:06 +0000 Files and hashes: 1: 8f4MMn555a9D4VsOb4zWbAMp0Tg.crl (hash: p2+WLNBLhQXfdqPo4uTlg7A1wkSbEkCZLUUFRMAMpLc=) 2: 4F10ED76D3B311EFA7B56234C4F9AE02.roa (hash: lSHPz/Z+uxa8tArC1Mc4CZ0YnIqrOvRe7SHXj7pf8js=) 3: D8E46162CC3911EF8444417FC4F9AE02.roa (hash: l8Sh6c2GmuBO8DvBcjU2VitbtNGnp/aJmnTgKTcfJ4s=) 4: 1B740C443DF811ED8EA29234C4F9AE02.roa (hash: d46c6mP8yQKtCL1j50wpNIYdrEG7vH8Gk0XwB/6np30=) 5: 3CF11BEA163211F0B2BBF073C4F9AE02.roa (hash: 0Baffcoz59/s0nqwLMYDCddrKXlDa2U1bXRWD6Hw/Jw=) 6: BA7491AAE0FE11EF9196F463C4F9AE02.roa (hash: Ir4i9nJYMLN6SF2hTwXjlm9gkjvDcx0KEIJUDLVPVCI=) 7: 014D4C442FBE11F0A6052D6EC4F9AE02.roa (hash: HvfmNqxFmcfKHCyNzxieUSHoMXYQTPtDcK7VdWvtNBU=) 8: 1C4A530AF56411EFB29F7142C4F9AE02.roa (hash: pDwghoW83KCoFGr00Ci1Qzg5/mmJKBiQBABjiPxXDg8=) 9: BEF9E93E3E6A11EDB58A2B41C4F9AE02.roa (hash: HkYj/TVr1XhK2vRP+l6p5iXFD51evS0AgC8WhbDTuxM=) 10: 029EC746D47711EF9C73DD7FC4F9AE02.roa (hash: cB/HAlQoM6VmcEnIGu6+bJRsobTJnhQw0F2fE38cd0E=) 11: 9C664578361C11F0B8B66C82C4F9AE02.roa (hash: X2QX6P0Cr3LlXios1qGIbeJe19DFui+duZmmUxpqG5U=) 12: C6537C4AAC5B11EDA8C03215C4F9AE02.roa (hash: 6wMf0Z8//cJMxItVuyAGd2usHOPGjQivwJ76VTi1wpM=) 13: ECFCBBA4D8D711EF91AD5538C4F9AE02.roa (hash: gZn16tC5XIxJq5Bd2o3GIG75y7iJRL5vU83vOQ97xII=) 14: D914CB84361C11F0BE87D482C4F9AE02.roa (hash: Ptlzh95kJLrV63FxxdY7DXHwibR6IjRz2pnvAJKm6uM=) 15: 784481D01B3E11F08B1A3029C4F9AE02.roa (hash: hpLF+1WPRM/+lgp1ccfs7QOxSrFnUTZF7Opf3dhOqCg=) 16: C58950F4CC3A11EF80AC530BC4F9AE02.roa (hash: eORqf3Oz2AeqEvrYAYLcmW4DWddEbC2alvo0muIChbk=) 17: F2CEE3CEBE7711EFB34D6959C4F9AE02.roa (hash: c/zVI3V70E1Wu6EQXw+rtLMreURhxjP1Lrx+c37+kQM=) 18: A88A0ED8FC7511EF92B63B46C4F9AE02.roa (hash: 9VCbcJprVhVD5YlwxMs2GmYF5PQFLfWW66YkA9K3Z1s=) 19: 820501DE3D3211F09AB6A617C4F9AE02.roa (hash: jht3HdodOgoncNFwncwkNlHoLA2wX0Zsnfp0O9NyG+8=) 20: 84757A9A030B11F099FC1410C4F9AE02.roa (hash: EBxLaXLba3ybeQ1SlmH7GzP8NlDiABfKS2zIQpf4Zlg=) 21: C68EA896D18011EFA738B84AC4F9AE02.roa (hash: Ei4OQatIUZk/6HLsZAw7psHDglNB9wf4zzt2OcQnNKY=) 22: 9DB30BB83D5211F09B7D046AC4F9AE02.roa (hash: 51UwrK2zVWawDJW92P4GaRPgYxN3TeytmTl5MPS/MGI=) 23: 1AEC708A26EA11F0A1989F5AC4F9AE02.roa (hash: YepBoK1X+8vge+zixjpOIA9QTQNP/O9sE+tD/cL5L0I=) 24: 85FDA91A3D5211F0A916DF69C4F9AE02.roa (hash: MVyU7lQaYws3xPOzNhUhDJobQkZ3U90265xH+f8BLLQ=) 25: 6520648CCC3A11EF97B13E83C4F9AE02.roa (hash: cioPSnvxCV9MlKk+N+OKdKIZIjZxwbeh0ez1/CK80l4=) 26: 74F68796303711EFB68DF613C4F9AE02.roa (hash: n4CrL4KlT84Nr/DgP33rUbZGXQ7GFSx45QbOVg+Obd8=) 27: 90B05B70D31511EF9F94561DC4F9AE02.roa (hash: DP1BeOxUOR7jmhspwxnCeHXQU42Y5xHAq5vFp/2k/XY=) 28: 53E3F02CF88511EFAF4C196EC4F9AE02.roa (hash: wYWX73wDqg9YYxoFfUJfz2bbrCEn4lzzQ8CGOEGcvBA=) 29: C0CFC696198E11F0A5D20B52C4F9AE02.roa (hash: /RPs6fIwfg3JSaBCKBhKN8nQ/4D++JTTsmoi0XVvwmE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9192C18/9A5EEA8C3DF411ED8041F930C4F9AE02/8f4MMn555a9D4VsOb4zWbAMp0Tg.crl rsync://rpki.apnic.net/member_repository/A9192C18/9A5EEA8C3DF411ED8041F930C4F9AE02/8f4MMn555a9D4VsOb4zWbAMp0Tg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8f4MMn555a9D4VsOb4zWbAMp0Tg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 02:13:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 878 (0x36e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9192C18, serialNumber=F1FE0C327E79E5AF43E15B0E6F8CD66C0329D138 Validity Not Before: May 31 02:13:06 2025 GMT Not After : Jun 7 02:13:06 2025 GMT Subject: CN=683a65b2-b7d2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:09:64:f6:3d:23:f0:5b:39:c2:45:e8:bd:3b: e1:29:94:2f:cd:de:45:1e:50:4b:93:95:10:6c:d1: 4c:8a:3b:52:a8:dd:6c:ff:d0:f3:51:fc:fd:bf:30: 4a:f2:b5:3d:11:46:bf:88:e0:00:e9:24:73:4b:f9: 56:bf:08:b5:a2:80:4d:51:2d:78:3e:25:a7:a6:69: ec:7f:4f:fd:87:dc:b2:d2:89:06:70:a8:aa:5d:86: 79:84:24:4f:6f:ee:61:9a:3c:d6:0d:78:6d:8b:7a: a3:6a:12:79:f4:40:c2:67:26:dd:04:a1:dd:47:25: 61:89:10:ed:99:94:30:30:65:28:bb:46:c5:56:6e: e8:cb:9d:71:8e:15:13:98:b0:08:24:f5:b6:07:ce: 22:24:c1:4d:57:d0:95:b7:80:c9:a1:3a:a1:cc:99: 44:b8:fd:01:90:eb:de:cd:cd:80:c2:1e:73:db:6d: 47:b6:cd:1f:2f:2c:74:b3:5f:57:c6:1f:a3:f9:91: c8:af:77:ac:40:1a:ad:28:cb:3f:9b:1f:59:6b:62: cd:35:1e:25:4e:90:b1:88:5a:ba:19:1d:9c:35:7c: 10:fe:38:7c:0f:22:69:97:9a:bd:b6:5b:12:fe:52: 1e:d1:25:2b:92:21:cc:c5:83:4f:d0:bd:e4:4c:62: 0a:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:AA:9A:D3:BB:E4:7C:CA:10:E9:F3:19:A7:9D:96:80:47:7F:86:59 X509v3 Authority Key Identifier: keyid:F1:FE:0C:32:7E:79:E5:AF:43:E1:5B:0E:6F:8C:D6:6C:03:29:D1:38 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9192C18/9A5EEA8C3DF411ED8041F930C4F9AE02/8f4MMn555a9D4VsOb4zWbAMp0Tg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8f4MMn555a9D4VsOb4zWbAMp0Tg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9192C18/9A5EEA8C3DF411ED8041F930C4F9AE02/8f4MMn555a9D4VsOb4zWbAMp0Tg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 19:c8:a1:8e:87:14:52:1a:05:d5:dc:12:81:86:3c:03:58:09: 7f:36:58:35:4c:08:16:11:b9:85:6b:9d:9b:e9:f4:64:98:9e: 88:f7:3c:7b:94:0c:6a:8a:8f:83:1e:15:78:ca:a6:f2:b2:43: 01:81:19:53:9c:d8:b4:2d:31:29:ee:35:e9:af:31:b1:69:ad: 84:df:b8:b9:c8:68:18:9e:76:9a:32:96:4d:68:25:63:bc:d0: 06:00:d2:fc:56:d2:4f:9e:61:ac:15:26:4f:82:ff:3d:7c:25: 2c:d4:76:31:b0:e6:4e:c9:97:01:09:aa:56:2f:fc:4c:81:20: ae:f2:88:d8:88:50:9e:9f:c0:ee:1e:cb:6b:76:a9:7e:e6:c1: bb:d9:21:87:7d:7f:7e:52:e1:13:e1:dc:27:79:20:f1:c1:cf: cc:64:32:14:2a:1e:51:f7:4b:b0:72:a2:4d:4b:29:49:97:7e: 61:cc:f2:3b:a1:54:ae:eb:0b:dc:16:00:81:32:83:55:53:20: 13:92:b3:35:7d:d1:33:58:5e:21:3b:3f:53:ad:a5:cf:7f:e6: f1:b5:f0:51:a4:7c:cf:01:8c:6a:c4:b9:7c:d8:35:03:5b:3f: f0:fb:98:c1:90:86:38:d3:ae:22:3f:09:65:81:53:6f:61:74: 1e:0e:d5:ed -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA24wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTJDMTgxMTAvBgNVBAUTKEYxRkUwQzMyN0U3OUU1QUY0M0UxNUIwRTZGOENENjZD MDMyOUQxMzgwHhcNMjUwNTMxMDIxMzA2WhcNMjUwNjA3MDIxMzA2WjAYMRYwFAYD VQQDEw02ODNhNjViMi1iN2QyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwQlk9j0j8Fs5wkXovTvhKZQvzd5FHlBLk5UQbNFMijtSqN1s/9DzUfz9vzBK 8rU9EUa/iOAA6SRzS/lWvwi1ooBNUS14PiWnpmnsf0/9h9yy0okGcKiqXYZ5hCRP b+5hmjzWDXhti3qjahJ59EDCZybdBKHdRyVhiRDtmZQwMGUou0bFVm7oy51xjhUT mLAIJPW2B84iJMFNV9CVt4DJoTqhzJlEuP0BkOvezc2Awh5z221Hts0fLyx0s19X xh+j+ZHIr3esQBqtKMs/mx9Za2LNNR4lTpCxiFq6GR2cNXwQ/jh8DyJpl5q9tlsS /lIe0SUrkiHMxYNP0L3kTGIKXQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNqqmtO7 5HzKEOnzGaedloBHf4ZZMB8GA1UdIwQYMBaAFPH+DDJ+eeWvQ+FbDm+M1mwDKdE4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MkMxOC85QTVFRUE4QzNE RjQxMUVEODA0MUY5MzBDNEY5QUUwMi84ZjRNTW41NTVhOUQ0VnNPYjR6V2JBTXAw VGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhmNE1NbjU1NWE5RDRWc09iNHpXYkFNcDBUZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 MkMxOC85QTVFRUE4QzNERjQxMUVEODA0MUY5MzBDNEY5QUUwMi84ZjRNTW41NTVh OUQ0VnNPYjR6V2JBTXAwVGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAZyKGOhxRSGgXV3BKBhjwDWAl/Nlg1TAgWEbmFa52b6fRkmJ6I9zx7 lAxqio+DHhV4yqbyskMBgRlTnNi0LTEp7jXprzGxaa2E37i5yGgYnnaaMpZNaCVj vNAGANL8VtJPnmGsFSZPgv89fCUs1HYxsOZOyZcBCapWL/xMgSCu8ojYiFCen8Du Hstrdql+5sG72SGHfX9+UuET4dwneSDxwc/MZDIUKh5R90uwcqJNSylJl35hzPI7 oVSu6wvcFgCBMoNVUyATkrM1fdEzWF4hOz9TraXPf+bxtfBRpHzPAYxqxLl82DUD Wz/w+5jBkIY4064iPwllgVNvYXQeDtXt -----END CERTIFICATE-----Generated at Sat May 31 16:25:57 2025 by rpki-client