$ rpki-client -vvf rpki.apnic.net/member_repository/A912442A/20F2CB00EB9C11ECA682120CC4F9AE02/hIWjnta2ISjt9PmbLCqBH1wgFXA.mft File: hIWjnta2ISjt9PmbLCqBH1wgFXA.mft (raw, json) Hash identifier: QNCUIaT19c648NRHKETmFF6YTWY1uwV0wG+iixucnfw= Subject key identifier: 0F:7E:6F:DE:60:25:97:98:6C:AE:10:79:A7:CA:FB:B5:F1:26:92:E7 Authority key identifier: 84:85:A3:9E:D6:B6:21:28:ED:F4:F9:9B:2C:2A:81:1F:5C:20:15:70 Certificate issuer: /CN=A912442A/serialNumber=8485A39ED6B62128EDF4F99B2C2A811F5C201570 Certificate serial: 0385 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hIWjnta2ISjt9PmbLCqBH1wgFXA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912442A/20F2CB00EB9C11ECA682120CC4F9AE02/hIWjnta2ISjt9PmbLCqBH1wgFXA.mft Manifest number: 0330 Signing time: Sat 09 Aug 2025 01:48:01 +0000 Manifest this update: Sat 09 Aug 2025 01:48:01 +0000 Manifest next update: Sat 16 Aug 2025 01:48:01 +0000 Files and hashes: 1: hIWjnta2ISjt9PmbLCqBH1wgFXA.crl (hash: O9wqoCNOQ1L8PhVOEsl60n+ZZX8MJDuuyI4VlA6qWp8=) 2: DFB7A1FE68FA11EFB2CB6E60C4F9AE02.roa (hash: ZQ/fU5d1evPPnYD3iA98SPz8Kp3nQtzF91XOnGRTmko=) 3: AC9577F068F611EFBDC1C345C4F9AE02.roa (hash: c8x4WauwQnDwDqZuEAJ4h64A3YhZdzAuusRUf8JYYN8=) 4: EAEC9066690E11EF9396CC48C4F9AE02.roa (hash: itBUJ/NWTISnHVYwiSk058o8wCPmgPPTXD1wCEm1HPU=) 5: 72D237AEEBA011EC87608210C4F9AE02.roa (hash: iSdaxxqgc4SH7DXdUJ6oZreikaVBPpaQcLPWc3b7FIc=) 6: 36E3B902FE4E11EF9F12441CC4F9AE02.roa (hash: go1KQLAsWSMcDFpFZPzbcCoYXA902eWujQs5DRA5NuQ=) 7: BE4B3228691411EFB573C120C4F9AE02.roa (hash: FluzuCEVsK4WA6irM+7AYglOFW70dV1BU5TUHFD621E=) 8: 19EC493AE32111ED9B98B683C4F9AE02.roa (hash: t9M7T3kGK/bHK5ZGPmj0eAYe1o0Vh2EqcoFWaTSjMIE=) 9: 211E0AC268F911EF986C8281C4F9AE02.roa (hash: 5R/vByP+bLJ/gauluwV0ijjw0b2SOL4DSiyRAY6Etqs=) 10: EB6B9956690E11EF9396CC48C4F9AE02.roa (hash: m1fb1egRrU9+d8hQvMjnw8fgUgdDVqcZIQ0pMpm6ljc=) 11: DD84920268FA11EFB2CB6E60C4F9AE02.roa (hash: E+BZL/7QU8UpRIJdbcW9rfaR46I2sLpkyfwtpdJN/VI=) 12: DDFED4E068FA11EFB2CB6E60C4F9AE02.roa (hash: cN/u2ghL7Ty5H0rMkH3B9dtMoGNw2oNZ5rkn/Hb9xkU=) 13: F53FF9E668F411EFA1530C36C4F9AE02.roa (hash: 7Kj+4WHxVaVF82sSnOwl9LxBArA7W70r8lzjmBc5kVs=) 14: AC3A00D268F611EFBDC1C345C4F9AE02.roa (hash: H7xrZOzZPQxCuJob9N/j2hDDJP833H9T1/f50kmyI3U=) 15: 21FE5D3468F911EF986C8281C4F9AE02.roa (hash: be0pdzXjf+dpXeRPaIldstiNx4QzCRK3M1bauqjIvLs=) 16: 1F49DF36691311EF82B0FC62C4F9AE02.roa (hash: 9FLrfM7I4+bVcqyGWmEPmZO9HbNgyq3TURv3crH+HFI=) 17: DF4500C268FA11EFB2CB6E60C4F9AE02.roa (hash: zucr8aDjnFPBdo+ifl5g81+ainFQhQ/ksa8y2tjbLS4=) 18: 2A9845DE691411EF8D868864C4F9AE02.roa (hash: kogXUDWKK78CAHTJtbOeSXgRNGSuMbtJtIHaw+cqK8c=) 19: ABC651E668F611EFBDC1C345C4F9AE02.roa (hash: cAER3YKLvVpIlFa2HmbUxYe1iz95sgNYpvM/4V9O1FM=) 20: EA792108690E11EF9396CC48C4F9AE02.roa (hash: umWQN4kGqAHPIk4w+IQl09gKoDRTIfMgnHpo1DCC4Pw=) 21: 869FE0CC69B311EF9E81312BC4F9AE02.roa (hash: eF1xrltNfnruVqxNMjD44+JutJBXSUDGILKtju+n9dE=) 22: B35D540E68F611EFB785D145C4F9AE02.roa (hash: oyIjz/XYfgr26Spk6RY9XOtfUIT6X7uMOPMW03yZfAM=) 23: 1519FB12F8B611EF91DD795BC4F9AE02.roa (hash: v2vRc6B+gwZg5NOfzaQPP6ML2YBJcqr080DwDx1pUOg=) 24: 218211CA68F911EF986C8281C4F9AE02.roa (hash: pHoz/kBOmkd5VG3teXH7pPsGNOOVgbbDMsd3VhHUAEo=) 25: 2072597E691311EF82B0FC62C4F9AE02.roa (hash: Y3bQNy1ojyOB4N21qfu+0X9uUvLU+z0WanHBys0zBlU=) 26: 29C3BF9E691411EF8D868864C4F9AE02.roa (hash: HQ71fsK6HJEx6JB43+BRDscF/a1IXcYLFxyQuU5FBnw=) 27: 4A93DB1068F511EF8E131B43C4F9AE02.roa (hash: kqYwhkwqrnPwUBbzCMbRJ6+BU/s1Jp8YtMASUL3cC6Y=) 28: 200F7106691311EF82B0FC62C4F9AE02.roa (hash: d/aMw06UKvCrIDovTtwhw18Yfx0jjxX2eyRA38OLxcQ=) 29: DEA0D1E668FA11EFB2CB6E60C4F9AE02.roa (hash: +1sHzrOMqBbheGIlr1WPdNiSvR59VAOdWWIJJa+mgHk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912442A/20F2CB00EB9C11ECA682120CC4F9AE02/hIWjnta2ISjt9PmbLCqBH1wgFXA.crl rsync://rpki.apnic.net/member_repository/A912442A/20F2CB00EB9C11ECA682120CC4F9AE02/hIWjnta2ISjt9PmbLCqBH1wgFXA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hIWjnta2ISjt9PmbLCqBH1wgFXA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 901 (0x385) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912442A, serialNumber=8485A39ED6B62128EDF4F99B2C2A811F5C201570 Validity Not Before: Aug 9 01:48:01 2025 GMT Not After : Aug 16 01:48:01 2025 GMT Subject: CN=6896a8d1-2a2f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:0d:39:bd:50:27:1e:d3:59:48:3a:03:44:a5: 66:1d:f8:75:d0:16:69:02:a2:95:5f:f3:16:0c:40: c8:cd:f0:5b:e8:c9:69:d8:56:a0:a5:e5:90:56:59: 4f:24:64:65:53:db:7e:8d:c4:47:2e:cf:75:f8:f1: 47:5d:90:af:79:53:c0:ee:fc:52:b4:c7:89:a8:1e: 20:0d:48:97:2e:b2:33:07:aa:1e:89:2d:b3:ec:c4: 5b:ca:b4:90:91:5d:e5:80:1d:42:ff:20:31:b5:fe: d8:60:60:47:a7:ef:54:ea:48:52:39:cc:fc:f2:96: 59:9f:26:98:69:38:3e:0c:f2:88:4c:a8:d3:28:55: 75:e0:f1:2a:71:ad:06:7c:c9:d6:e3:cf:23:8a:b8: aa:6a:a9:40:ba:0f:36:a8:37:62:7d:9a:7a:9f:54: ab:d8:a6:84:db:80:89:e1:4c:b8:37:6b:ea:f4:43: 9a:14:f5:be:ec:68:22:f3:3d:3c:67:76:82:83:9b: a2:8e:15:03:a8:e9:9d:ad:f6:1d:34:3f:1d:d8:e0: dd:80:6f:ff:df:24:b8:59:f6:12:21:28:24:83:bc: f7:5f:4e:f4:34:82:22:97:ff:2b:86:36:57:80:ad: 7b:1e:cf:e8:92:ca:24:d3:14:09:76:3b:d9:26:bc: 3d:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:7E:6F:DE:60:25:97:98:6C:AE:10:79:A7:CA:FB:B5:F1:26:92:E7 X509v3 Authority Key Identifier: keyid:84:85:A3:9E:D6:B6:21:28:ED:F4:F9:9B:2C:2A:81:1F:5C:20:15:70 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912442A/20F2CB00EB9C11ECA682120CC4F9AE02/hIWjnta2ISjt9PmbLCqBH1wgFXA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hIWjnta2ISjt9PmbLCqBH1wgFXA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912442A/20F2CB00EB9C11ECA682120CC4F9AE02/hIWjnta2ISjt9PmbLCqBH1wgFXA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 49:02:67:85:43:30:75:3b:7d:da:55:ea:a7:22:06:a0:9f:72: 9e:4e:a3:aa:02:47:4b:bb:b3:8f:3a:97:8d:a3:97:46:16:33: 06:c2:07:e1:be:da:5f:4e:df:93:ad:88:3a:e6:3c:0b:6e:e1: 87:8f:a3:3d:e0:a9:cf:66:1d:f1:7f:b3:70:a0:97:a3:b6:13: 2a:37:de:9e:77:3a:9d:91:84:3b:93:20:dc:c4:ce:a6:3a:1b: 6a:90:d7:b8:3c:25:af:1a:5d:85:ec:bc:80:6c:a9:a8:fd:47: 25:92:bd:77:e3:b7:51:d5:a2:f4:68:32:5a:e3:80:11:04:72: e6:b3:65:1e:67:f0:46:d1:04:aa:df:6d:c8:a9:01:ac:e5:ca: 39:f4:27:81:d4:44:5c:e7:e2:7f:35:99:29:cd:25:00:5b:4f: 16:33:ce:4d:b4:fc:21:bd:8a:32:eb:73:a5:51:77:a3:47:6a: ca:da:02:3d:ff:f7:bc:17:e0:0d:8a:a5:28:b5:c4:52:49:cc: bb:60:f3:b9:c2:2c:49:7d:34:44:42:82:4e:e4:9a:51:29:4e: 59:e5:3d:70:5e:79:05:95:2b:4c:f5:9e:5d:76:36:51:11:c0: 37:dc:4b:13:5c:6e:fe:91:74:47:c7:86:a2:d8:c5:b0:e7:f4: 11:fb:fa:37 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA4UwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjQ0MkExMTAvBgNVBAUTKDg0ODVBMzlFRDZCNjIxMjhFREY0Rjk5QjJDMkE4MTFG NUMyMDE1NzAwHhcNMjUwODA5MDE0ODAxWhcNMjUwODE2MDE0ODAxWjAYMRYwFAYD VQQDEw02ODk2YThkMS0yYTJmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyQ05vVAnHtNZSDoDRKVmHfh10BZpAqKVX/MWDEDIzfBb6Mlp2FagpeWQVllP JGRlU9t+jcRHLs91+PFHXZCveVPA7vxStMeJqB4gDUiXLrIzB6oeiS2z7MRbyrSQ kV3lgB1C/yAxtf7YYGBHp+9U6khSOcz88pZZnyaYaTg+DPKITKjTKFV14PEqca0G fMnW488jiriqaqlAug82qDdifZp6n1Sr2KaE24CJ4Uy4N2vq9EOaFPW+7Ggi8z08 Z3aCg5uijhUDqOmdrfYdND8d2ODdgG//3yS4WfYSISgkg7z3X070NIIil/8rhjZX gK17Hs/oksok0xQJdjvZJrw9KwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFA9+b95g JZeYbK4QeafK+7XxJpLnMB8GA1UdIwQYMBaAFISFo57WtiEo7fT5mywqgR9cIBVw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNDQyQS8yMEYyQ0IwMEVC OUMxMUVDQTY4MjEyMENDNEY5QUUwMi9oSVdqbnRhMklTanQ5UG1iTENxQkgxd2dG WEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2hJV2pudGEySVNqdDlQbWJMQ3FCSDF3Z0ZYQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NDQyQS8yMEYyQ0IwMEVCOUMxMUVDQTY4MjEyMENDNEY5QUUwMi9oSVdqbnRhMklT anQ5UG1iTENxQkgxd2dGWEEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBJAmeFQzB1O33aVeqnIgagn3KeTqOqAkdLu7OPOpeNo5dGFjMGwgfh vtpfTt+TrYg65jwLbuGHj6M94KnPZh3xf7NwoJejthMqN96edzqdkYQ7kyDcxM6m OhtqkNe4PCWvGl2F7LyAbKmo/Uclkr1347dR1aL0aDJa44ARBHLms2UeZ/BG0QSq 323IqQGs5co59CeB1ERc5+J/NZkpzSUAW08WM85NtPwhvYoy63OlUXejR2rK2gI9 //e8F+ANiqUotcRSScy7YPO5wixJfTREQoJO5JpRKU5Z5T1wXnkFlStM9Z5ddjZR EcA33EsTXG7+kXRHx4ai2MWw5/QR+/o3 -----END CERTIFICATE-----Generated at Sun Aug 10 21:01:36 2025 by rpki-client