$ rpki-client -vvf rpki.apnic.net/member_repository/A916807A/0263AB483E8811EDA61A9B2AC4F9AE02/cp4vnB2HwhRzUHjP0hxjjgcVe10.mft File: cp4vnB2HwhRzUHjP0hxjjgcVe10.mft (raw, json) Hash identifier: R8yVkq9Fxdk0mxkNrmhDIKWhXpgYF8mKzyE/6OEypQc= Subject key identifier: 09:EA:A3:0D:26:32:16:65:51:C4:BE:E3:5B:2F:E4:AF:3F:6C:E7:40 Authority key identifier: 72:9E:2F:9C:1D:87:C2:14:73:50:78:CF:D2:1C:63:8E:07:15:7B:5D Certificate issuer: /CN=A916807A/serialNumber=729E2F9C1D87C214735078CFD21C638E07157B5D Certificate serial: 0251 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cp4vnB2HwhRzUHjP0hxjjgcVe10.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916807A/0263AB483E8811EDA61A9B2AC4F9AE02/cp4vnB2HwhRzUHjP0hxjjgcVe10.mft Manifest number: 022B Signing time: Sat 21 Jun 2025 01:40:56 +0000 Manifest this update: Sat 21 Jun 2025 01:40:56 +0000 Manifest next update: Sat 28 Jun 2025 01:40:56 +0000 Files and hashes: 1: cp4vnB2HwhRzUHjP0hxjjgcVe10.crl (hash: H7TB0Ui/hkwyB92YuPOUFL3KN4vVO7/VeWC7anjgydE=) 2: 40257FE64D0E11F082837352C4F9AE02.roa (hash: HkcxWcOcJQ97ESWS97WCCLspE00RKugs+s6nj0HZv3Q=) 3: 5690A2AE42F211F08EF7F447C4F9AE02.roa (hash: YSTVbPDZioqtpOco7Ph6NOqKpT2t+CRy3f0/vpMDDFA=) 4: 0711ABAE36D311F091108A4EC4F9AE02.roa (hash: 597OuPOYgkyZPJzuTMHmEhUJoLCC1JeifLTzP6wE3yI=) 5: 2E2847223DB311EE9375493EC4F9AE02.roa (hash: fpl1QeLbfvQuhkR1/wuQiPy5mkE26myDKA7Pu9M6C4M=) 6: 54AABA183DB011EE9F747386C4F9AE02.roa (hash: Qcox8/U+vkNMX0C6DDq4X5jjq6q2XVkrWQ3ifQW6Yvk=) 7: 0634745A36D311F091108A4EC4F9AE02.roa (hash: H4l27JSq8qMJJA6As00fhxpue9Mo/O0NE/Rm9knT++Q=) 8: 853DCAEA341111F0A5CD2B20C4F9AE02.roa (hash: 3124udjGGKcS1/Wy1zJaOsZltJyh/OcbojpCAI+dINM=) 9: 056F9FEA36D311F091108A4EC4F9AE02.roa (hash: O2RZXjtjRUpqBA2nisDZS/Q57A0u3AEfmSz1wetsXTQ=) 10: 0424E2A2391811F0BD320332C4F9AE02.roa (hash: 3gLUj8duXZr1fAsGq8Q98uLnFAI+cAF7wiBd3NIkWDU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916807A/0263AB483E8811EDA61A9B2AC4F9AE02/cp4vnB2HwhRzUHjP0hxjjgcVe10.crl rsync://rpki.apnic.net/member_repository/A916807A/0263AB483E8811EDA61A9B2AC4F9AE02/cp4vnB2HwhRzUHjP0hxjjgcVe10.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cp4vnB2HwhRzUHjP0hxjjgcVe10.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Jun 2025 01:40:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 593 (0x251) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916807A, serialNumber=729E2F9C1D87C214735078CFD21C638E07157B5D Validity Not Before: Jun 21 01:40:56 2025 GMT Not After : Jun 28 01:40:56 2025 GMT Subject: CN=68560da8-a3d7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:e0:bb:b9:14:8a:30:73:44:9b:25:01:fc:3c: d1:d1:9e:70:a5:70:9f:97:c3:be:27:c9:dc:f1:51: 84:45:22:c5:cc:c6:73:c8:25:3b:b2:c8:a7:71:31: 87:59:08:85:e0:dc:b5:64:25:fa:00:d7:04:54:0a: 35:e8:4f:07:62:28:2a:c7:e8:43:94:1f:54:d3:2c: e3:1f:15:f8:0e:06:ab:c5:96:83:9b:2f:aa:c5:47: b2:b5:58:7c:90:53:26:a1:1b:2d:8e:18:37:5b:ad: 52:57:21:86:ab:6e:2c:80:29:06:21:7a:3a:9b:b0: 7f:ac:da:07:5f:07:9f:b6:24:51:2b:fc:55:f1:39: bd:61:21:4a:bb:e1:41:a7:a8:ed:1c:09:47:62:20: 29:c5:86:68:60:ab:bf:cd:db:fd:ae:1d:73:fc:b3: 15:09:85:3c:7e:50:54:a5:0a:a3:1e:c7:71:31:f2: c1:57:ea:b3:6a:88:1c:f1:1d:ac:d1:68:b8:63:d1: 62:32:c1:8e:bf:0d:a6:72:8b:d4:fd:7f:d2:ff:d9: f8:d2:18:95:ad:f8:90:77:31:eb:90:81:e5:8a:59: 23:d4:b0:ab:93:03:df:92:41:92:61:d3:5a:99:97: 97:5f:50:fd:3b:0d:46:5c:53:44:49:97:25:07:18: 41:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:EA:A3:0D:26:32:16:65:51:C4:BE:E3:5B:2F:E4:AF:3F:6C:E7:40 X509v3 Authority Key Identifier: keyid:72:9E:2F:9C:1D:87:C2:14:73:50:78:CF:D2:1C:63:8E:07:15:7B:5D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916807A/0263AB483E8811EDA61A9B2AC4F9AE02/cp4vnB2HwhRzUHjP0hxjjgcVe10.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cp4vnB2HwhRzUHjP0hxjjgcVe10.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916807A/0263AB483E8811EDA61A9B2AC4F9AE02/cp4vnB2HwhRzUHjP0hxjjgcVe10.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7b:22:cd:b1:68:2d:7b:a6:83:78:62:47:26:b4:43:e6:c6:d1: c6:6d:d7:c7:da:b2:b5:38:9b:1f:c0:76:69:17:ea:03:ba:d3: ed:52:cf:8e:f6:c4:17:1f:04:b2:5b:53:ab:c4:84:e2:e6:f3: 11:06:a4:b4:f1:c1:14:b7:ef:7a:ae:9d:0d:2f:9b:5d:4f:16: 16:5a:41:c8:60:31:50:40:fc:9a:2d:a1:64:23:27:21:88:28: bb:e2:0e:e6:d6:ad:f4:90:82:10:ab:c5:0e:c1:51:25:97:9b: a4:2d:a5:08:11:b5:69:8c:32:fd:a0:62:8b:a8:8f:51:c8:7c: 7f:d6:4c:08:ce:e0:70:6e:8b:15:7e:fd:c0:01:ce:12:e8:bb: b2:45:ea:af:aa:75:bd:04:b0:0d:88:29:80:13:8d:2b:db:65: c4:d2:67:72:48:74:28:a1:d5:dc:18:16:bf:42:b2:d3:99:a7: 5a:50:a6:29:4d:b6:c5:63:bb:81:13:9d:0c:0c:03:d9:02:20: 66:b1:78:70:62:04:b8:9a:0b:94:55:75:77:89:f9:af:72:3a: 0e:1a:5b:89:8d:c2:33:c6:29:03:da:3e:2f:47:6e:f2:8f:46: b5:aa:6d:cf:48:45:34:dc:6e:c8:dc:da:23:d5:20:4d:38:8a: 90:3c:1d:41 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAlEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjgwN0ExMTAvBgNVBAUTKDcyOUUyRjlDMUQ4N0MyMTQ3MzUwNzhDRkQyMUM2MzhF MDcxNTdCNUQwHhcNMjUwNjIxMDE0MDU2WhcNMjUwNjI4MDE0MDU2WjAYMRYwFAYD VQQDEw02ODU2MGRhOC1hM2Q3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA8eC7uRSKMHNEmyUB/DzR0Z5wpXCfl8O+J8nc8VGERSLFzMZzyCU7ssincTGH WQiF4Ny1ZCX6ANcEVAo16E8HYigqx+hDlB9U0yzjHxX4DgarxZaDmy+qxUeytVh8 kFMmoRstjhg3W61SVyGGq24sgCkGIXo6m7B/rNoHXweftiRRK/xV8Tm9YSFKu+FB p6jtHAlHYiApxYZoYKu/zdv9rh1z/LMVCYU8flBUpQqjHsdxMfLBV+qzaogc8R2s 0Wi4Y9FiMsGOvw2mcovU/X/S/9n40hiVrfiQdzHrkIHlilkj1LCrkwPfkkGSYdNa mZeXX1D9Ow1GXFNESZclBxhBRwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAnqow0m MhZlUcS+41sv5K8/bOdAMB8GA1UdIwQYMBaAFHKeL5wdh8IUc1B4z9IcY44HFXtd MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2ODA3QS8wMjYzQUI0ODNF ODgxMUVEQTYxQTlCMkFDNEY5QUUwMi9jcDR2bkIySHdoUnpVSGpQMGh4ampnY1Zl MTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NwNHZuQjJId2hSelVIalAwaHhqamdjVmUxMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 ODA3QS8wMjYzQUI0ODNFODgxMUVEQTYxQTlCMkFDNEY5QUUwMi9jcDR2bkIySHdo UnpVSGpQMGh4ampnY1ZlMTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB7Is2xaC17poN4YkcmtEPmxtHGbdfH2rK1OJsfwHZpF+oDutPtUs+O 9sQXHwSyW1OrxITi5vMRBqS08cEUt+96rp0NL5tdTxYWWkHIYDFQQPyaLaFkIych iCi74g7m1q30kIIQq8UOwVEll5ukLaUIEbVpjDL9oGKLqI9RyHx/1kwIzuBwbosV fv3AAc4S6LuyReqvqnW9BLANiCmAE40r22XE0mdySHQoodXcGBa/QrLTmadaUKYp TbbFY7uBE50MDAPZAiBmsXhwYgS4mguUVXV3ifmvcjoOGluJjcIzxikD2j4vR27y j0a1qm3PSEU03G7I3Noj1SBNOIqQPB1B -----END CERTIFICATE-----Generated at Sun Jun 22 05:01:26 2025 by rpki-client