$ rpki-client -vvf rpki.apnic.net/member_repository/A916807A/0263AB483E8811EDA61A9B2AC4F9AE02/cp4vnB2HwhRzUHjP0hxjjgcVe10.mft File: cp4vnB2HwhRzUHjP0hxjjgcVe10.mft (raw, json) Hash identifier: XIECYRdXbJr6IYSWnybS3skfNcDuUMsBk/GfYUgOcmE= Subject key identifier: A5:0F:F6:0A:82:8E:26:7E:91:94:79:12:80:24:47:97:F1:CB:A2:34 Authority key identifier: 72:9E:2F:9C:1D:87:C2:14:73:50:78:CF:D2:1C:63:8E:07:15:7B:5D Certificate issuer: /CN=A916807A/serialNumber=729E2F9C1D87C214735078CFD21C638E07157B5D Certificate serial: 0285 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cp4vnB2HwhRzUHjP0hxjjgcVe10.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916807A/0263AB483E8811EDA61A9B2AC4F9AE02/cp4vnB2HwhRzUHjP0hxjjgcVe10.mft Manifest number: 0254 Signing time: Mon 11 Aug 2025 02:11:59 +0000 Manifest this update: Mon 11 Aug 2025 02:11:59 +0000 Manifest next update: Mon 18 Aug 2025 02:11:59 +0000 Files and hashes: 1: cp4vnB2HwhRzUHjP0hxjjgcVe10.crl (hash: RVDgMXpd6ghk+zVgiIAcW6delQxdzrqKAype7QYEX84=) 2: CD8401DE725011F0A3F05A4DC4F9AE02.roa (hash: 7OKGLN0AquslhR2wq6kbUot4euzlUMkruJOrwY6VWnc=) 3: 40257FE64D0E11F082837352C4F9AE02.roa (hash: HkcxWcOcJQ97ESWS97WCCLspE00RKugs+s6nj0HZv3Q=) 4: 0711ABAE36D311F091108A4EC4F9AE02.roa (hash: 597OuPOYgkyZPJzuTMHmEhUJoLCC1JeifLTzP6wE3yI=) 5: 2E2847223DB311EE9375493EC4F9AE02.roa (hash: fpl1QeLbfvQuhkR1/wuQiPy5mkE26myDKA7Pu9M6C4M=) 6: 6CCFFC8472E211F0BECE9829C4F9AE02.roa (hash: 3x2onOcmlisqxEsrVQYH0ABCKmKsnujUFfI2LRjkokk=) 7: 0634745A36D311F091108A4EC4F9AE02.roa (hash: H4l27JSq8qMJJA6As00fhxpue9Mo/O0NE/Rm9knT++Q=) 8: 05E0CD8A56D311F0B46F9787C4F9AE02.roa (hash: GDiEG/pNTXLg5Vlv3aqbkShCJX0NKJUVFvGIXmMT/Uo=) 9: 853DCAEA341111F0A5CD2B20C4F9AE02.roa (hash: 3124udjGGKcS1/Wy1zJaOsZltJyh/OcbojpCAI+dINM=) 10: 056F9FEA36D311F091108A4EC4F9AE02.roa (hash: O2RZXjtjRUpqBA2nisDZS/Q57A0u3AEfmSz1wetsXTQ=) 11: 359EA23662B311F081881A48C4F9AE02.roa (hash: ml90CHJI6hM9cwuuAL9Y+OP72xTNZ1gM1O6bqm1RFPE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916807A/0263AB483E8811EDA61A9B2AC4F9AE02/cp4vnB2HwhRzUHjP0hxjjgcVe10.crl rsync://rpki.apnic.net/member_repository/A916807A/0263AB483E8811EDA61A9B2AC4F9AE02/cp4vnB2HwhRzUHjP0hxjjgcVe10.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cp4vnB2HwhRzUHjP0hxjjgcVe10.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 645 (0x285) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916807A, serialNumber=729E2F9C1D87C214735078CFD21C638E07157B5D Validity Not Before: Aug 11 02:11:59 2025 GMT Not After : Aug 18 02:11:59 2025 GMT Subject: CN=6899516f-c663 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:55:a5:c8:0f:ba:c0:0a:69:49:ee:46:77:17: 33:4c:ba:34:a9:1b:19:ca:f5:54:33:a4:e5:64:d1: a2:1a:ad:a4:fd:0a:91:21:b7:2e:d0:5b:c7:67:5d: 3a:4e:42:78:6f:c5:c9:1d:f8:db:5c:6a:1e:6b:f0: e8:85:28:3e:78:1c:63:39:0f:c0:95:4f:93:92:33: 4d:56:03:23:9d:ef:10:ec:4f:d1:6e:ca:e9:1a:94: 30:3f:d1:be:3a:e4:dd:d7:6e:1e:49:40:1f:a2:e4: 4b:b7:b4:7d:ba:96:ce:80:23:c0:df:38:37:1f:9d: ba:1f:25:1c:72:b3:f6:00:c3:d3:03:0c:04:3f:4c: 83:86:15:82:6b:42:e3:bd:f2:9a:30:75:62:7e:61: a3:e6:0f:f7:a4:72:69:44:3e:20:8b:fc:e3:38:bb: 9e:cc:82:02:4e:8b:ab:b0:ee:7e:1a:3c:78:ad:e7: e0:3c:f0:4b:f5:fd:e1:12:91:dd:a2:ad:5d:9c:26: 99:a5:de:84:56:87:fd:e9:fc:ff:6e:6d:7a:5c:42: cc:3d:75:13:cc:87:47:0a:9b:6a:21:7b:73:0f:32: 12:e5:d6:6e:b1:6d:5c:5d:d6:f0:2c:6b:ac:d7:08: be:9f:9a:13:73:08:e4:db:17:c7:84:6e:25:12:fd: 05:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:0F:F6:0A:82:8E:26:7E:91:94:79:12:80:24:47:97:F1:CB:A2:34 X509v3 Authority Key Identifier: keyid:72:9E:2F:9C:1D:87:C2:14:73:50:78:CF:D2:1C:63:8E:07:15:7B:5D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916807A/0263AB483E8811EDA61A9B2AC4F9AE02/cp4vnB2HwhRzUHjP0hxjjgcVe10.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cp4vnB2HwhRzUHjP0hxjjgcVe10.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916807A/0263AB483E8811EDA61A9B2AC4F9AE02/cp4vnB2HwhRzUHjP0hxjjgcVe10.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 91:fc:08:de:59:49:c3:2b:cc:23:03:27:96:16:7d:63:56:72: 67:80:b1:9c:cc:82:f8:cb:33:55:58:1d:fa:01:75:94:33:c3: 8b:5a:f7:b7:cf:c0:9b:d9:52:eb:a1:3a:12:a1:7f:da:e6:4a: b4:b1:ac:6a:21:9f:91:a9:18:12:4a:1f:94:a7:c9:cd:1a:60: 4a:83:69:a1:85:53:0c:fe:1b:63:10:7b:07:74:1d:d0:b8:ab: 68:cc:6c:2d:17:04:d1:7b:6a:e5:75:58:f5:7d:79:43:a8:a0: a9:b5:e0:fc:08:12:91:09:76:f5:de:7e:17:86:bc:75:76:18: 81:25:17:e3:5b:ab:3c:0c:ad:06:14:48:6c:96:b5:b7:07:e8: 81:23:53:6d:72:1a:77:8e:ea:8d:e4:80:00:71:78:a1:4a:13: 06:5f:f5:b6:c0:af:04:3d:55:12:e7:bf:fb:db:2c:5a:ba:3d: 8b:4a:65:40:18:d7:18:0d:96:59:a4:67:ff:08:15:55:73:5f: 22:b8:81:31:eb:f0:3a:32:50:c9:f9:15:fd:b1:d1:02:6c:42: cd:c4:12:b5:3e:4d:35:7c:00:e3:23:b6:25:4b:2e:3d:ce:c8: 39:c8:ea:72:65:34:c7:5c:a9:ae:a5:ba:7d:21:18:44:7a:8e: 77:40:5e:04 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAoUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjgwN0ExMTAvBgNVBAUTKDcyOUUyRjlDMUQ4N0MyMTQ3MzUwNzhDRkQyMUM2MzhF MDcxNTdCNUQwHhcNMjUwODExMDIxMTU5WhcNMjUwODE4MDIxMTU5WjAYMRYwFAYD VQQDEw02ODk5NTE2Zi1jNjYzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzlWlyA+6wAppSe5GdxczTLo0qRsZyvVUM6TlZNGiGq2k/QqRIbcu0FvHZ106 TkJ4b8XJHfjbXGoea/DohSg+eBxjOQ/AlU+TkjNNVgMjne8Q7E/RbsrpGpQwP9G+ OuTd124eSUAfouRLt7R9upbOgCPA3zg3H526HyUccrP2AMPTAwwEP0yDhhWCa0Lj vfKaMHVifmGj5g/3pHJpRD4gi/zjOLuezIICToursO5+Gjx4refgPPBL9f3hEpHd oq1dnCaZpd6EVof96fz/bm16XELMPXUTzIdHCptqIXtzDzIS5dZusW1cXdbwLGus 1wi+n5oTcwjk2xfHhG4lEv0FSQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKUP9gqC jiZ+kZR5EoAkR5fxy6I0MB8GA1UdIwQYMBaAFHKeL5wdh8IUc1B4z9IcY44HFXtd MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2ODA3QS8wMjYzQUI0ODNF ODgxMUVEQTYxQTlCMkFDNEY5QUUwMi9jcDR2bkIySHdoUnpVSGpQMGh4ampnY1Zl MTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NwNHZuQjJId2hSelVIalAwaHhqamdjVmUxMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 ODA3QS8wMjYzQUI0ODNFODgxMUVEQTYxQTlCMkFDNEY5QUUwMi9jcDR2bkIySHdo UnpVSGpQMGh4ampnY1ZlMTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCR/AjeWUnDK8wjAyeWFn1jVnJngLGczIL4yzNVWB36AXWUM8OLWve3 z8Cb2VLroToSoX/a5kq0saxqIZ+RqRgSSh+Up8nNGmBKg2mhhVMM/htjEHsHdB3Q uKtozGwtFwTRe2rldVj1fXlDqKCpteD8CBKRCXb13n4Xhrx1dhiBJRfjW6s8DK0G FEhslrW3B+iBI1Ntchp3juqN5IAAcXihShMGX/W2wK8EPVUS57/72yxauj2LSmVA GNcYDZZZpGf/CBVVc18iuIEx6/A6MlDJ+RX9sdECbELNxBK1Pk01fADjI7YlSy49 zsg5yOpyZTTHXKmupbp9IRhEeo53QF4E -----END CERTIFICATE-----Generated at Mon Aug 11 07:36:57 2025 by rpki-client