$ rpki-client -vvf rpki.apnic.net/member_repository/A916A983/16730D20CD0F11E89D9FF165C4F9AE02/cVZfLXuSTNcrRVtotmcZQBC7Gp8.mft File: cVZfLXuSTNcrRVtotmcZQBC7Gp8.mft (raw, json) Hash identifier: LM+eX2TDqmbT6X/1uBp/Q+BCbi6dIDWFMywmdmxxY/s= Subject key identifier: 07:CC:28:C5:A1:6B:40:21:18:C0:8C:93:EB:2F:9C:AE:A6:38:36:8D Authority key identifier: 71:56:5F:2D:7B:92:4C:D7:2B:45:5B:68:B6:67:19:40:10:BB:1A:9F Certificate issuer: /CN=A916A983/serialNumber=71565F2D7B924CD72B455B68B667194010BB1A9F Certificate serial: 1322 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cVZfLXuSTNcrRVtotmcZQBC7Gp8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916A983/16730D20CD0F11E89D9FF165C4F9AE02/cVZfLXuSTNcrRVtotmcZQBC7Gp8.mft Manifest number: 12CF Signing time: Sat 14 Jun 2025 17:02:46 +0000 Manifest this update: Sat 14 Jun 2025 17:02:45 +0000 Manifest next update: Sat 21 Jun 2025 17:02:45 +0000 Files and hashes: 1: cVZfLXuSTNcrRVtotmcZQBC7Gp8.crl (hash: rqi1AYvIc1YhqQ42w7QCyhkxZwL3k3/xyoyF8Y+dRt0=) 2: 3B38CB22BA7011EA80520A63C4F9AE02.roa (hash: RkoS7hrQ2QANNm5sx/5d46X4OvIfq/xZ9DC2wpSUEMo=) 3: 2227B66CF97B11EFA2B83631C4F9AE02.roa (hash: Qmv4NznXsRfVMeI2JKAwy+QoVAJUJQXFMJng7cjxgg4=) 4: 75522B0A002B11EA855CA925C4F9AE02.roa (hash: dlzvcYSMpJJECDfUD2ttn05KUyNlgHjyRd5FKOecZPA=) 5: 6E0B5938066711EFA1505F46C4F9AE02.roa (hash: o9qMusGN5GDjUkb5guKhyMehJeu6p5DVF2ITp61z0FM=) 6: 8C163A62FD4611EE8FAE061EC4F9AE02.roa (hash: SPUciNl7sWVHesGHpuLeYdUCLi+DEMRmn3hpjUZkkzo=) 7: EB429364CA3811EE99BEB838C4F9AE02.roa (hash: CxE2LzQTUSnICEBxSLSJi2DaFZfd5DCFRNbdjbleYco=) 8: DEF977A6E53611EB81682769C4F9AE02.roa (hash: hs6gBEHf+NcXloE+gZDvY1hGrieoi7+2YWZ5lbTwNRY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916A983/16730D20CD0F11E89D9FF165C4F9AE02/cVZfLXuSTNcrRVtotmcZQBC7Gp8.crl rsync://rpki.apnic.net/member_repository/A916A983/16730D20CD0F11E89D9FF165C4F9AE02/cVZfLXuSTNcrRVtotmcZQBC7Gp8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cVZfLXuSTNcrRVtotmcZQBC7Gp8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Jun 2025 17:02:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4898 (0x1322) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916A983, serialNumber=71565F2D7B924CD72B455B68B667194010BB1A9F Validity Not Before: Jun 14 17:02:45 2025 GMT Not After : Jun 21 17:02:45 2025 GMT Subject: CN=684dab35-7345 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:fa:69:95:55:e1:ae:68:a8:50:98:d6:f2:77: f0:f5:6b:f2:2d:48:8b:73:98:b9:fa:ec:11:a9:91: 3b:da:0e:65:3b:df:c1:f1:76:c2:c9:3d:58:aa:ad: c1:77:cf:62:8d:eb:d6:64:14:43:6f:06:76:e0:5a: 96:60:b1:21:8d:a8:ca:fc:25:5a:f9:35:9e:0f:19: b3:95:75:7b:9d:6a:f3:a6:a1:f3:31:91:87:79:3d: ea:4c:b9:1f:e5:2b:85:01:b7:cb:5c:f9:fc:4f:6f: f9:68:a0:3f:48:cc:09:20:98:7d:22:b4:46:1f:00: 2a:ff:4f:73:d9:dd:c9:b1:3b:cf:48:cc:37:04:7c: 5f:23:27:20:d1:56:3d:aa:3a:82:88:0c:13:80:7f: bb:d2:7d:42:b5:98:63:23:9a:a6:e8:4a:9a:f1:a4: 98:9c:5e:90:fa:cf:e7:40:2a:20:30:74:60:a2:a9: 37:83:ac:3f:c3:a5:bf:05:12:8d:f3:1c:38:cb:54: 02:ce:a8:99:1a:4f:ca:82:09:7e:9c:a9:0d:22:72: fd:d5:aa:75:b0:64:ab:26:81:5a:9d:eb:7d:8c:9d: 76:09:a0:f9:c6:f8:15:ef:1a:7d:5e:67:84:5c:d7: 81:5d:28:bf:ef:64:fa:4c:6d:53:2d:3c:07:2a:cf: 34:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:CC:28:C5:A1:6B:40:21:18:C0:8C:93:EB:2F:9C:AE:A6:38:36:8D X509v3 Authority Key Identifier: keyid:71:56:5F:2D:7B:92:4C:D7:2B:45:5B:68:B6:67:19:40:10:BB:1A:9F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916A983/16730D20CD0F11E89D9FF165C4F9AE02/cVZfLXuSTNcrRVtotmcZQBC7Gp8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cVZfLXuSTNcrRVtotmcZQBC7Gp8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916A983/16730D20CD0F11E89D9FF165C4F9AE02/cVZfLXuSTNcrRVtotmcZQBC7Gp8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 40:a6:74:e0:a8:7d:71:df:17:fa:e6:f1:f6:d7:2c:b9:1c:34: 57:56:29:7a:87:f9:18:c1:27:00:cd:c6:80:83:ac:a2:dd:1e: 32:7a:f7:87:49:12:48:f5:ce:c2:49:84:ec:62:cd:84:43:3b: dd:43:24:a5:5a:17:fc:ed:fa:70:99:c1:ff:d3:b5:26:f6:93: 70:6b:9b:ec:26:43:9a:78:6f:0c:cd:cd:23:2e:bc:03:8c:6f: 42:0d:ee:4d:30:2e:09:c6:b4:e1:69:00:d4:c0:f8:d7:a6:b7: 33:6f:d9:c2:35:ef:84:88:ea:30:ab:f6:42:a1:9b:fd:2b:50: 2d:8f:8f:cc:19:be:46:e6:b8:ec:18:7c:e9:ec:58:54:ea:da: 31:89:91:fb:8c:59:0e:f9:5e:5c:36:10:96:07:69:2b:5d:7a: 7a:16:ba:16:54:be:97:81:3e:3e:03:dc:eb:bd:e0:9b:62:e6: 2b:c8:96:23:77:0e:97:f8:26:86:91:b5:60:5a:7e:e3:fc:dc: 16:d3:1e:ad:44:08:2e:3e:db:84:5c:36:14:0b:3c:80:60:e0: 37:7f:03:0f:a4:36:7d:57:d6:d3:93:36:95:70:c9:4d:67:35: 81:97:d7:33:a8:0d:dd:f2:34:67:6f:31:ee:65:42:78:7d:5e: 64:2c:f4:b2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEyIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkE5ODMxMTAvBgNVBAUTKDcxNTY1RjJEN0I5MjRDRDcyQjQ1NUI2OEI2NjcxOTQw MTBCQjFBOUYwHhcNMjUwNjE0MTcwMjQ1WhcNMjUwNjIxMTcwMjQ1WjAYMRYwFAYD VQQDEw02ODRkYWIzNS03MzQ1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAx/pplVXhrmioUJjW8nfw9WvyLUiLc5i5+uwRqZE72g5lO9/B8XbCyT1Yqq3B d89ijevWZBRDbwZ24FqWYLEhjajK/CVa+TWeDxmzlXV7nWrzpqHzMZGHeT3qTLkf 5SuFAbfLXPn8T2/5aKA/SMwJIJh9IrRGHwAq/09z2d3JsTvPSMw3BHxfIycg0VY9 qjqCiAwTgH+70n1CtZhjI5qm6Eqa8aSYnF6Q+s/nQCogMHRgoqk3g6w/w6W/BRKN 8xw4y1QCzqiZGk/Kggl+nKkNInL91ap1sGSrJoFanet9jJ12CaD5xvgV7xp9XmeE XNeBXSi/72T6TG1TLTwHKs80LwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAfMKMWh a0AhGMCMk+svnK6mODaNMB8GA1UdIwQYMBaAFHFWXy17kkzXK0VbaLZnGUAQuxqf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QTk4My8xNjczMEQyMENE MEYxMUU4OUQ5RkYxNjVDNEY5QUUwMi9jVlpmTFh1U1ROY3JSVnRvdG1jWlFCQzdH cDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NWWmZMWHVTVE5jclJWdG90bWNaUUJDN0dwOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 QTk4My8xNjczMEQyMENEMEYxMUU4OUQ5RkYxNjVDNEY5QUUwMi9jVlpmTFh1U1RO Y3JSVnRvdG1jWlFCQzdHcDgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBApnTgqH1x3xf65vH21yy5HDRXVil6h/kYwScAzcaAg6yi3R4yeveH SRJI9c7CSYTsYs2EQzvdQySlWhf87fpwmcH/07Um9pNwa5vsJkOaeG8Mzc0jLrwD jG9CDe5NMC4JxrThaQDUwPjXprczb9nCNe+EiOowq/ZCoZv9K1Atj4/MGb5G5rjs GHzp7FhU6toxiZH7jFkO+V5cNhCWB2krXXp6FroWVL6XgT4+A9zrveCbYuYryJYj dw6X+CaGkbVgWn7j/NwW0x6tRAguPtuEXDYUCzyAYOA3fwMPpDZ9V9bTkzaVcMlN ZzWBl9czqA3d8jRnbzHuZUJ4fV5kLPSy -----END CERTIFICATE-----Generated at Sun Jun 15 09:41:39 2025 by rpki-client