$ rpki-client -vvf rpki.apnic.net/member_repository/A912442A/20F2CB00EB9C11ECA682120CC4F9AE02/hIWjnta2ISjt9PmbLCqBH1wgFXA.mft File: hIWjnta2ISjt9PmbLCqBH1wgFXA.mft (raw, json) Hash identifier: XuEp+xuQ1P2vJXSKTxUYh3UH98OG81Bo9rpnp7Ta11I= Subject key identifier: 67:2B:8B:F7:FE:D1:3A:39:F7:73:0C:C6:86:29:E1:66:A4:65:48:EC Authority key identifier: 84:85:A3:9E:D6:B6:21:28:ED:F4:F9:9B:2C:2A:81:1F:5C:20:15:70 Certificate issuer: /CN=A912442A/serialNumber=8485A39ED6B62128EDF4F99B2C2A811F5C201570 Certificate serial: 0348 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hIWjnta2ISjt9PmbLCqBH1wgFXA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912442A/20F2CB00EB9C11ECA682120CC4F9AE02/hIWjnta2ISjt9PmbLCqBH1wgFXA.mft Manifest number: 02F4 Signing time: Fri 25 Apr 2025 01:11:03 +0000 Manifest this update: Fri 25 Apr 2025 01:11:03 +0000 Manifest next update: Fri 02 May 2025 01:11:03 +0000 Files and hashes: 1: hIWjnta2ISjt9PmbLCqBH1wgFXA.crl (hash: ESLwRga/DZbStsulT6lpMcmGUvP2M/eyK7Skaq56CiQ=) 2: DFB7A1FE68FA11EFB2CB6E60C4F9AE02.roa (hash: ZQ/fU5d1evPPnYD3iA98SPz8Kp3nQtzF91XOnGRTmko=) 3: AC9577F068F611EFBDC1C345C4F9AE02.roa (hash: c8x4WauwQnDwDqZuEAJ4h64A3YhZdzAuusRUf8JYYN8=) 4: EAEC9066690E11EF9396CC48C4F9AE02.roa (hash: itBUJ/NWTISnHVYwiSk058o8wCPmgPPTXD1wCEm1HPU=) 5: 36E3B902FE4E11EF9F12441CC4F9AE02.roa (hash: go1KQLAsWSMcDFpFZPzbcCoYXA902eWujQs5DRA5NuQ=) 6: 72D237AEEBA011EC87608210C4F9AE02.roa (hash: /6/vPtizZYxr5v7ORtDfd8JRwZk7T9USDbBUeYwxyPg=) 7: BE4B3228691411EFB573C120C4F9AE02.roa (hash: FluzuCEVsK4WA6irM+7AYglOFW70dV1BU5TUHFD621E=) 8: 19EC493AE32111ED9B98B683C4F9AE02.roa (hash: t9M7T3kGK/bHK5ZGPmj0eAYe1o0Vh2EqcoFWaTSjMIE=) 9: 211E0AC268F911EF986C8281C4F9AE02.roa (hash: 5R/vByP+bLJ/gauluwV0ijjw0b2SOL4DSiyRAY6Etqs=) 10: EB6B9956690E11EF9396CC48C4F9AE02.roa (hash: m1fb1egRrU9+d8hQvMjnw8fgUgdDVqcZIQ0pMpm6ljc=) 11: DD84920268FA11EFB2CB6E60C4F9AE02.roa (hash: E+BZL/7QU8UpRIJdbcW9rfaR46I2sLpkyfwtpdJN/VI=) 12: DDFED4E068FA11EFB2CB6E60C4F9AE02.roa (hash: cN/u2ghL7Ty5H0rMkH3B9dtMoGNw2oNZ5rkn/Hb9xkU=) 13: F53FF9E668F411EFA1530C36C4F9AE02.roa (hash: 7Kj+4WHxVaVF82sSnOwl9LxBArA7W70r8lzjmBc5kVs=) 14: AC3A00D268F611EFBDC1C345C4F9AE02.roa (hash: H7xrZOzZPQxCuJob9N/j2hDDJP833H9T1/f50kmyI3U=) 15: 21FE5D3468F911EF986C8281C4F9AE02.roa (hash: be0pdzXjf+dpXeRPaIldstiNx4QzCRK3M1bauqjIvLs=) 16: 1F49DF36691311EF82B0FC62C4F9AE02.roa (hash: 9FLrfM7I4+bVcqyGWmEPmZO9HbNgyq3TURv3crH+HFI=) 17: DF4500C268FA11EFB2CB6E60C4F9AE02.roa (hash: zucr8aDjnFPBdo+ifl5g81+ainFQhQ/ksa8y2tjbLS4=) 18: 2A9845DE691411EF8D868864C4F9AE02.roa (hash: kogXUDWKK78CAHTJtbOeSXgRNGSuMbtJtIHaw+cqK8c=) 19: ABC651E668F611EFBDC1C345C4F9AE02.roa (hash: cAER3YKLvVpIlFa2HmbUxYe1iz95sgNYpvM/4V9O1FM=) 20: EA792108690E11EF9396CC48C4F9AE02.roa (hash: umWQN4kGqAHPIk4w+IQl09gKoDRTIfMgnHpo1DCC4Pw=) 21: 869FE0CC69B311EF9E81312BC4F9AE02.roa (hash: eF1xrltNfnruVqxNMjD44+JutJBXSUDGILKtju+n9dE=) 22: B35D540E68F611EFB785D145C4F9AE02.roa (hash: oyIjz/XYfgr26Spk6RY9XOtfUIT6X7uMOPMW03yZfAM=) 23: 1519FB12F8B611EF91DD795BC4F9AE02.roa (hash: v2vRc6B+gwZg5NOfzaQPP6ML2YBJcqr080DwDx1pUOg=) 24: 218211CA68F911EF986C8281C4F9AE02.roa (hash: pHoz/kBOmkd5VG3teXH7pPsGNOOVgbbDMsd3VhHUAEo=) 25: 2072597E691311EF82B0FC62C4F9AE02.roa (hash: Y3bQNy1ojyOB4N21qfu+0X9uUvLU+z0WanHBys0zBlU=) 26: 29C3BF9E691411EF8D868864C4F9AE02.roa (hash: HQ71fsK6HJEx6JB43+BRDscF/a1IXcYLFxyQuU5FBnw=) 27: 4A93DB1068F511EF8E131B43C4F9AE02.roa (hash: kqYwhkwqrnPwUBbzCMbRJ6+BU/s1Jp8YtMASUL3cC6Y=) 28: 200F7106691311EF82B0FC62C4F9AE02.roa (hash: d/aMw06UKvCrIDovTtwhw18Yfx0jjxX2eyRA38OLxcQ=) 29: DEA0D1E668FA11EFB2CB6E60C4F9AE02.roa (hash: +1sHzrOMqBbheGIlr1WPdNiSvR59VAOdWWIJJa+mgHk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912442A/20F2CB00EB9C11ECA682120CC4F9AE02/hIWjnta2ISjt9PmbLCqBH1wgFXA.crl rsync://rpki.apnic.net/member_repository/A912442A/20F2CB00EB9C11ECA682120CC4F9AE02/hIWjnta2ISjt9PmbLCqBH1wgFXA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hIWjnta2ISjt9PmbLCqBH1wgFXA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 01:11:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 840 (0x348) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912442A, serialNumber=8485A39ED6B62128EDF4F99B2C2A811F5C201570 Validity Not Before: Apr 25 01:11:03 2025 GMT Not After : May 2 01:11:03 2025 GMT Subject: CN=680ae127-1f5d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:62:86:f5:53:0e:d8:a0:85:a7:8d:16:1c:be: 5d:e0:4f:85:ad:62:c3:84:05:e7:ae:10:4c:c4:d9: e5:70:27:31:14:f0:0e:46:79:69:fd:59:a5:ba:4e: 99:86:9f:f9:71:0c:6f:26:0d:72:6d:c1:22:5e:93: 89:d6:c2:a8:97:9e:99:45:80:b1:49:47:f5:bf:2c: 22:75:c2:3a:e0:5a:fe:cf:9a:18:d9:85:6c:6a:a7: f2:da:0f:f6:a6:5e:0b:c5:6e:96:a8:1f:5f:d2:5b: bf:f6:4d:a0:82:5a:2a:04:f3:c5:08:f2:e1:07:90: dc:90:64:48:78:72:ad:c4:05:75:ad:f9:bb:36:19: 7f:34:07:38:db:c4:1e:cd:ba:34:16:b4:27:4c:c5: a4:f0:52:a3:91:b1:f9:6a:56:03:02:f8:c1:20:a5: ef:f3:7e:83:40:51:fe:9c:c4:1f:68:ea:cd:0f:e1: 4e:8f:64:dd:33:e1:95:05:5d:61:c2:21:d8:d1:0c: 3f:d3:f8:95:bf:91:b5:26:a8:8d:ac:43:14:51:e5: 9c:66:e6:a5:e8:02:64:6e:74:18:f3:b5:eb:cc:68: b2:56:57:8b:66:70:a9:53:57:45:3f:58:9b:2b:2a: 02:f7:8c:85:2e:ab:0f:f5:d1:cb:07:a9:3c:a0:93: 96:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:2B:8B:F7:FE:D1:3A:39:F7:73:0C:C6:86:29:E1:66:A4:65:48:EC X509v3 Authority Key Identifier: keyid:84:85:A3:9E:D6:B6:21:28:ED:F4:F9:9B:2C:2A:81:1F:5C:20:15:70 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912442A/20F2CB00EB9C11ECA682120CC4F9AE02/hIWjnta2ISjt9PmbLCqBH1wgFXA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hIWjnta2ISjt9PmbLCqBH1wgFXA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912442A/20F2CB00EB9C11ECA682120CC4F9AE02/hIWjnta2ISjt9PmbLCqBH1wgFXA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 83:c2:0f:55:de:2b:ce:b6:59:c1:9a:26:6d:5b:64:4d:ee:31: 1b:44:a2:2b:7a:1d:9b:50:a3:06:55:b7:8a:0b:d0:0b:34:bd: 29:a9:a3:8c:67:7d:1d:33:2a:5e:d7:3c:98:b3:c9:9b:d2:0a: aa:59:98:fb:b0:d8:84:0d:78:3a:25:25:06:e1:95:54:39:ea: 09:25:83:fb:2f:b3:d0:8d:82:96:82:5f:56:d0:6e:f8:fb:57: e8:01:0e:06:c9:5f:fb:1b:be:58:e8:03:02:67:dc:16:22:78: e8:ac:66:1e:a7:0e:b3:70:2a:c4:8b:cb:5a:c5:1e:c7:fc:dd: 42:a3:f9:f9:48:b6:52:ba:3e:9f:3f:cd:ab:d0:39:b5:b2:ff: 77:d2:18:a6:e4:69:e4:c8:b6:da:82:dd:d3:31:44:f9:1d:e5: 2e:5d:2c:79:64:34:3e:c0:95:69:43:88:3b:b1:f6:00:41:f2: 1f:d0:23:2a:72:c7:7f:17:55:80:79:52:2d:43:db:f3:69:94: 6a:43:a2:a7:57:07:9e:97:a2:1d:87:9b:3d:13:77:6b:94:d7: d0:5b:b5:76:7b:b1:5c:b1:88:9e:9f:70:d8:33:0f:1e:01:04: d8:de:88:1d:94:8d:38:98:7f:2c:52:70:cf:bb:00:9f:be:ee: 5a:93:97:1e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA0gwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjQ0MkExMTAvBgNVBAUTKDg0ODVBMzlFRDZCNjIxMjhFREY0Rjk5QjJDMkE4MTFG NUMyMDE1NzAwHhcNMjUwNDI1MDExMTAzWhcNMjUwNTAyMDExMTAzWjAYMRYwFAYD VQQDEw02ODBhZTEyNy0xZjVkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyGKG9VMO2KCFp40WHL5d4E+FrWLDhAXnrhBMxNnlcCcxFPAORnlp/Vmluk6Z hp/5cQxvJg1ybcEiXpOJ1sKol56ZRYCxSUf1vywidcI64Fr+z5oY2YVsaqfy2g/2 pl4LxW6WqB9f0lu/9k2ggloqBPPFCPLhB5DckGRIeHKtxAV1rfm7Nhl/NAc428Qe zbo0FrQnTMWk8FKjkbH5alYDAvjBIKXv836DQFH+nMQfaOrND+FOj2TdM+GVBV1h wiHY0Qw/0/iVv5G1JqiNrEMUUeWcZual6AJkbnQY87XrzGiyVleLZnCpU1dFP1ib KyoC94yFLqsP9dHLB6k8oJOWdQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGcri/f+ 0To593MMxoYp4WakZUjsMB8GA1UdIwQYMBaAFISFo57WtiEo7fT5mywqgR9cIBVw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNDQyQS8yMEYyQ0IwMEVC OUMxMUVDQTY4MjEyMENDNEY5QUUwMi9oSVdqbnRhMklTanQ5UG1iTENxQkgxd2dG WEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2hJV2pudGEySVNqdDlQbWJMQ3FCSDF3Z0ZYQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NDQyQS8yMEYyQ0IwMEVCOUMxMUVDQTY4MjEyMENDNEY5QUUwMi9oSVdqbnRhMklT anQ5UG1iTENxQkgxd2dGWEEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCDwg9V3ivOtlnBmiZtW2RN7jEbRKIreh2bUKMGVbeKC9ALNL0pqaOM Z30dMype1zyYs8mb0gqqWZj7sNiEDXg6JSUG4ZVUOeoJJYP7L7PQjYKWgl9W0G74 +1foAQ4GyV/7G75Y6AMCZ9wWInjorGYepw6zcCrEi8taxR7H/N1Co/n5SLZSuj6f P82r0Dm1sv930him5GnkyLbagt3TMUT5HeUuXSx5ZDQ+wJVpQ4g7sfYAQfIf0CMq csd/F1WAeVItQ9vzaZRqQ6KnVweel6Idh5s9E3drlNfQW7V2e7FcsYien3DYMw8e AQTY3ogdlI04mH8sUnDPuwCfvu5ak5ce -----END CERTIFICATE-----Generated at Sat Apr 26 05:07:01 2025 by rpki-client