$ rpki-client -vvf rpki.apnic.net/member_repository/A916A983/16730D20CD0F11E89D9FF165C4F9AE02/cVZfLXuSTNcrRVtotmcZQBC7Gp8.mft File: cVZfLXuSTNcrRVtotmcZQBC7Gp8.mft (raw, json) Hash identifier: PrwLgtxoImM6BshRU3+AYunhjzUmqRFxd21X92tG3CA= Subject key identifier: BF:D4:C4:92:90:2D:FA:2F:10:A0:85:67:4F:5C:54:D0:83:D9:5A:CF Authority key identifier: 71:56:5F:2D:7B:92:4C:D7:2B:45:5B:68:B6:67:19:40:10:BB:1A:9F Certificate issuer: /CN=A916A983/serialNumber=71565F2D7B924CD72B455B68B667194010BB1A9F Certificate serial: 1347 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cVZfLXuSTNcrRVtotmcZQBC7Gp8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916A983/16730D20CD0F11E89D9FF165C4F9AE02/cVZfLXuSTNcrRVtotmcZQBC7Gp8.mft Manifest number: 12ED Signing time: Fri 08 Aug 2025 17:16:01 +0000 Manifest this update: Fri 08 Aug 2025 17:16:01 +0000 Manifest next update: Fri 15 Aug 2025 17:16:01 +0000 Files and hashes: 1: cVZfLXuSTNcrRVtotmcZQBC7Gp8.crl (hash: jW1tzZehUQ8Qe29IT/ktauF6upL99Uu8krw324Ro4wM=) 2: 3B38CB22BA7011EA80520A63C4F9AE02.roa (hash: pmGjv9e4kJuui8gahJeniJTVkFZxLqAkqBkutIyaUmM=) 3: 2227B66CF97B11EFA2B83631C4F9AE02.roa (hash: x6GId7866GEm2yx9Alj41gMxCnlfSK7cwtQgE9xlFPo=) 4: 75522B0A002B11EA855CA925C4F9AE02.roa (hash: JtAyYvcjsSIbHjMavRbf74w0IIhNg4IBABZJn0wcwzQ=) 5: 6E0B5938066711EFA1505F46C4F9AE02.roa (hash: vz1JkowcSPPocIJM8LY5Tc1J1IEwQwHTAm7ad6CcM1k=) 6: 8C163A62FD4611EE8FAE061EC4F9AE02.roa (hash: 3fdnPO7nIXug6dYvzk2siFXVuDYGDIdJas3DCvUTWPA=) 7: EB429364CA3811EE99BEB838C4F9AE02.roa (hash: DOUd4Ct4uA10KaiPoOZjeWOyNrfXwTZYgvv/v0X/i0Y=) 8: DEF977A6E53611EB81682769C4F9AE02.roa (hash: SO0gHlbHvBD1Qdf3mOeX+9pYdaFRkZquUMH00OZSNZ4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916A983/16730D20CD0F11E89D9FF165C4F9AE02/cVZfLXuSTNcrRVtotmcZQBC7Gp8.crl rsync://rpki.apnic.net/member_repository/A916A983/16730D20CD0F11E89D9FF165C4F9AE02/cVZfLXuSTNcrRVtotmcZQBC7Gp8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cVZfLXuSTNcrRVtotmcZQBC7Gp8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4935 (0x1347) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916A983, serialNumber=71565F2D7B924CD72B455B68B667194010BB1A9F Validity Not Before: Aug 8 17:16:01 2025 GMT Not After : Aug 15 17:16:01 2025 GMT Subject: CN=689630d1-3a3e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:73:b7:2d:9f:49:b0:35:c7:a2:73:45:a1:53: 14:3f:82:18:15:8d:45:1a:e4:77:a6:37:b5:1d:db: cd:df:c1:f9:e1:53:5c:2f:98:27:8e:ef:8f:52:6d: 87:0b:6f:1e:b2:78:b8:54:2f:2d:4d:54:9f:b6:c3: dc:6a:48:ab:df:17:e9:5e:4a:73:07:1d:25:60:af: 16:4a:bf:c5:25:f5:89:82:5b:10:94:0e:c7:07:a2: 1c:f6:fb:84:9e:63:da:d3:11:fc:d1:9e:d1:76:d4: 1b:3a:06:f7:49:5c:29:2f:c0:1a:f8:8e:0e:f9:8b: 7f:e2:29:62:a9:ad:5e:6f:6f:94:e9:e9:c3:35:4b: ed:11:b8:c6:ef:ea:0a:b9:b2:0b:89:e8:af:de:8c: 27:b4:94:ec:63:eb:ae:58:64:59:c1:b9:7b:ea:4c: d4:43:f8:17:08:53:8f:0b:e7:6d:cb:e8:0b:22:49: 6b:4b:2e:42:7c:37:b6:e7:2b:33:94:17:d8:2f:e7: 09:7a:a8:d9:89:12:96:05:d3:f9:0a:ce:cd:c7:09: ce:34:60:e6:30:01:f2:4d:f9:c3:4e:82:dc:9c:94: e5:90:43:b9:86:75:03:86:0b:f4:2a:86:b9:eb:26: 49:5f:af:95:45:eb:c8:a5:fc:01:dd:ed:e0:bc:6c: a0:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:D4:C4:92:90:2D:FA:2F:10:A0:85:67:4F:5C:54:D0:83:D9:5A:CF X509v3 Authority Key Identifier: keyid:71:56:5F:2D:7B:92:4C:D7:2B:45:5B:68:B6:67:19:40:10:BB:1A:9F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916A983/16730D20CD0F11E89D9FF165C4F9AE02/cVZfLXuSTNcrRVtotmcZQBC7Gp8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cVZfLXuSTNcrRVtotmcZQBC7Gp8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916A983/16730D20CD0F11E89D9FF165C4F9AE02/cVZfLXuSTNcrRVtotmcZQBC7Gp8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 11:c8:5c:2b:ae:5b:80:87:85:25:af:cd:fa:2d:0a:3d:6a:85: f3:21:60:11:cf:d6:a5:ef:db:19:6b:bf:69:d3:0d:f4:ef:4a: e8:d7:64:29:68:f8:57:51:16:23:85:55:96:81:94:e6:62:18: c7:38:19:57:3f:25:ff:f4:c6:98:1b:8a:1c:3f:5e:07:68:de: 80:03:47:08:5d:b1:b8:c2:a7:fc:a1:29:4a:71:6d:12:55:c0: fc:68:a1:41:d5:ef:72:20:d2:b4:22:c2:b4:f0:d5:43:69:06: fd:17:79:00:3d:cd:06:4c:d7:a4:a7:28:95:d9:49:89:d2:58: 3b:cb:ba:dd:93:bf:d1:49:32:be:2f:e5:88:de:6d:88:ef:be: 6e:17:28:27:00:ec:76:9a:55:2f:53:82:c8:c9:03:54:6a:e1: 6d:fd:f5:de:65:10:d0:46:9a:ee:6d:aa:6b:5e:50:44:ad:b5: 23:cd:c6:78:fe:3d:26:11:e9:ab:e2:22:8a:7b:4a:cf:46:95: b5:75:d1:50:d7:84:85:49:7b:96:46:d7:9c:78:95:e3:80:5f: 8f:21:09:88:a1:8d:28:87:cb:9f:e8:e3:7f:0e:2e:43:68:80: a3:d1:84:1f:7f:46:e0:c2:36:5f:1e:96:64:89:ab:85:e0:dc: d4:36:5c:e1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICE0cwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkE5ODMxMTAvBgNVBAUTKDcxNTY1RjJEN0I5MjRDRDcyQjQ1NUI2OEI2NjcxOTQw MTBCQjFBOUYwHhcNMjUwODA4MTcxNjAxWhcNMjUwODE1MTcxNjAxWjAYMRYwFAYD VQQDEw02ODk2MzBkMS0zYTNlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwHO3LZ9JsDXHonNFoVMUP4IYFY1FGuR3pje1HdvN38H54VNcL5gnju+PUm2H C28esni4VC8tTVSftsPcakir3xfpXkpzBx0lYK8WSr/FJfWJglsQlA7HB6Ic9vuE nmPa0xH80Z7RdtQbOgb3SVwpL8Aa+I4O+Yt/4iliqa1eb2+U6enDNUvtEbjG7+oK ubILieiv3owntJTsY+uuWGRZwbl76kzUQ/gXCFOPC+dty+gLIklrSy5CfDe25ysz lBfYL+cJeqjZiRKWBdP5Cs7NxwnONGDmMAHyTfnDToLcnJTlkEO5hnUDhgv0Koa5 6yZJX6+VRevIpfwB3e3gvGyglwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFL/UxJKQ LfovEKCFZ09cVNCD2VrPMB8GA1UdIwQYMBaAFHFWXy17kkzXK0VbaLZnGUAQuxqf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QTk4My8xNjczMEQyMENE MEYxMUU4OUQ5RkYxNjVDNEY5QUUwMi9jVlpmTFh1U1ROY3JSVnRvdG1jWlFCQzdH cDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NWWmZMWHVTVE5jclJWdG90bWNaUUJDN0dwOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 QTk4My8xNjczMEQyMENEMEYxMUU4OUQ5RkYxNjVDNEY5QUUwMi9jVlpmTFh1U1RO Y3JSVnRvdG1jWlFCQzdHcDgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQARyFwrrluAh4Ulr836LQo9aoXzIWARz9al79sZa79p0w3070ro12Qp aPhXURYjhVWWgZTmYhjHOBlXPyX/9MaYG4ocP14HaN6AA0cIXbG4wqf8oSlKcW0S VcD8aKFB1e9yINK0IsK08NVDaQb9F3kAPc0GTNekpyiV2UmJ0lg7y7rdk7/RSTK+ L+WI3m2I775uFygnAOx2mlUvU4LIyQNUauFt/fXeZRDQRprubaprXlBErbUjzcZ4 /j0mEemr4iKKe0rPRpW1ddFQ14SFSXuWRteceJXjgF+PIQmIoY0oh8uf6ON/Di5D aICj0YQff0bgwjZfHpZkiauF4NzUNlzh -----END CERTIFICATE-----Generated at Sun Aug 10 04:59:52 2025 by rpki-client