$ rpki-client -vvf rpki.apnic.net/member_repository/A912442A/20F2CB00EB9C11ECA682120CC4F9AE02/hIWjnta2ISjt9PmbLCqBH1wgFXA.mft File: hIWjnta2ISjt9PmbLCqBH1wgFXA.mft (raw, json) Hash identifier: UiqMhbL0F12L+9sy0WYSrntllzH6wL8InopIbL1/bwM= Subject key identifier: 5D:53:95:B1:56:08:A6:53:51:CA:F0:E0:C2:57:A1:B2:7A:33:69:7F Authority key identifier: 84:85:A3:9E:D6:B6:21:28:ED:F4:F9:9B:2C:2A:81:1F:5C:20:15:70 Certificate issuer: /CN=A912442A/serialNumber=8485A39ED6B62128EDF4F99B2C2A811F5C201570 Certificate serial: 0371 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hIWjnta2ISjt9PmbLCqBH1wgFXA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912442A/20F2CB00EB9C11ECA682120CC4F9AE02/hIWjnta2ISjt9PmbLCqBH1wgFXA.mft Manifest number: 031C Signing time: Tue 01 Jul 2025 01:57:56 +0000 Manifest this update: Tue 01 Jul 2025 01:57:55 +0000 Manifest next update: Tue 08 Jul 2025 01:57:55 +0000 Files and hashes: 1: hIWjnta2ISjt9PmbLCqBH1wgFXA.crl (hash: aOGFd0APMty1AYYyfW4whl53Y7c7MLb7ykJoo0rbXxw=) 2: DFB7A1FE68FA11EFB2CB6E60C4F9AE02.roa (hash: ZQ/fU5d1evPPnYD3iA98SPz8Kp3nQtzF91XOnGRTmko=) 3: AC9577F068F611EFBDC1C345C4F9AE02.roa (hash: c8x4WauwQnDwDqZuEAJ4h64A3YhZdzAuusRUf8JYYN8=) 4: EAEC9066690E11EF9396CC48C4F9AE02.roa (hash: itBUJ/NWTISnHVYwiSk058o8wCPmgPPTXD1wCEm1HPU=) 5: 72D237AEEBA011EC87608210C4F9AE02.roa (hash: iSdaxxqgc4SH7DXdUJ6oZreikaVBPpaQcLPWc3b7FIc=) 6: 36E3B902FE4E11EF9F12441CC4F9AE02.roa (hash: go1KQLAsWSMcDFpFZPzbcCoYXA902eWujQs5DRA5NuQ=) 7: BE4B3228691411EFB573C120C4F9AE02.roa (hash: FluzuCEVsK4WA6irM+7AYglOFW70dV1BU5TUHFD621E=) 8: 19EC493AE32111ED9B98B683C4F9AE02.roa (hash: t9M7T3kGK/bHK5ZGPmj0eAYe1o0Vh2EqcoFWaTSjMIE=) 9: 211E0AC268F911EF986C8281C4F9AE02.roa (hash: 5R/vByP+bLJ/gauluwV0ijjw0b2SOL4DSiyRAY6Etqs=) 10: EB6B9956690E11EF9396CC48C4F9AE02.roa (hash: m1fb1egRrU9+d8hQvMjnw8fgUgdDVqcZIQ0pMpm6ljc=) 11: DD84920268FA11EFB2CB6E60C4F9AE02.roa (hash: E+BZL/7QU8UpRIJdbcW9rfaR46I2sLpkyfwtpdJN/VI=) 12: DDFED4E068FA11EFB2CB6E60C4F9AE02.roa (hash: cN/u2ghL7Ty5H0rMkH3B9dtMoGNw2oNZ5rkn/Hb9xkU=) 13: F53FF9E668F411EFA1530C36C4F9AE02.roa (hash: 7Kj+4WHxVaVF82sSnOwl9LxBArA7W70r8lzjmBc5kVs=) 14: AC3A00D268F611EFBDC1C345C4F9AE02.roa (hash: H7xrZOzZPQxCuJob9N/j2hDDJP833H9T1/f50kmyI3U=) 15: 21FE5D3468F911EF986C8281C4F9AE02.roa (hash: be0pdzXjf+dpXeRPaIldstiNx4QzCRK3M1bauqjIvLs=) 16: 1F49DF36691311EF82B0FC62C4F9AE02.roa (hash: 9FLrfM7I4+bVcqyGWmEPmZO9HbNgyq3TURv3crH+HFI=) 17: DF4500C268FA11EFB2CB6E60C4F9AE02.roa (hash: zucr8aDjnFPBdo+ifl5g81+ainFQhQ/ksa8y2tjbLS4=) 18: 2A9845DE691411EF8D868864C4F9AE02.roa (hash: kogXUDWKK78CAHTJtbOeSXgRNGSuMbtJtIHaw+cqK8c=) 19: ABC651E668F611EFBDC1C345C4F9AE02.roa (hash: cAER3YKLvVpIlFa2HmbUxYe1iz95sgNYpvM/4V9O1FM=) 20: EA792108690E11EF9396CC48C4F9AE02.roa (hash: umWQN4kGqAHPIk4w+IQl09gKoDRTIfMgnHpo1DCC4Pw=) 21: 869FE0CC69B311EF9E81312BC4F9AE02.roa (hash: eF1xrltNfnruVqxNMjD44+JutJBXSUDGILKtju+n9dE=) 22: B35D540E68F611EFB785D145C4F9AE02.roa (hash: oyIjz/XYfgr26Spk6RY9XOtfUIT6X7uMOPMW03yZfAM=) 23: 1519FB12F8B611EF91DD795BC4F9AE02.roa (hash: v2vRc6B+gwZg5NOfzaQPP6ML2YBJcqr080DwDx1pUOg=) 24: 218211CA68F911EF986C8281C4F9AE02.roa (hash: pHoz/kBOmkd5VG3teXH7pPsGNOOVgbbDMsd3VhHUAEo=) 25: 2072597E691311EF82B0FC62C4F9AE02.roa (hash: Y3bQNy1ojyOB4N21qfu+0X9uUvLU+z0WanHBys0zBlU=) 26: 29C3BF9E691411EF8D868864C4F9AE02.roa (hash: HQ71fsK6HJEx6JB43+BRDscF/a1IXcYLFxyQuU5FBnw=) 27: 4A93DB1068F511EF8E131B43C4F9AE02.roa (hash: kqYwhkwqrnPwUBbzCMbRJ6+BU/s1Jp8YtMASUL3cC6Y=) 28: 200F7106691311EF82B0FC62C4F9AE02.roa (hash: d/aMw06UKvCrIDovTtwhw18Yfx0jjxX2eyRA38OLxcQ=) 29: DEA0D1E668FA11EFB2CB6E60C4F9AE02.roa (hash: +1sHzrOMqBbheGIlr1WPdNiSvR59VAOdWWIJJa+mgHk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912442A/20F2CB00EB9C11ECA682120CC4F9AE02/hIWjnta2ISjt9PmbLCqBH1wgFXA.crl rsync://rpki.apnic.net/member_repository/A912442A/20F2CB00EB9C11ECA682120CC4F9AE02/hIWjnta2ISjt9PmbLCqBH1wgFXA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hIWjnta2ISjt9PmbLCqBH1wgFXA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 08 Jul 2025 01:57:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 881 (0x371) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912442A, serialNumber=8485A39ED6B62128EDF4F99B2C2A811F5C201570 Validity Not Before: Jul 1 01:57:55 2025 GMT Not After : Jul 8 01:57:55 2025 GMT Subject: CN=686340a4-3f71 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:97:1e:65:a4:30:8f:b4:f6:14:ef:74:24:40: 75:dc:d6:5f:b9:c6:c4:c0:8b:ed:bf:0e:fa:7c:8a: 4a:e1:b1:86:f4:9c:8a:db:18:74:b2:c6:0b:9c:31: 0a:e6:ee:a6:16:78:33:ba:6f:9a:10:c1:fd:0f:50: 81:5a:02:d9:26:9b:9e:6c:f4:ee:bb:f5:47:0a:28: 18:b2:6b:6a:b1:b1:9e:f1:ad:f5:0f:26:e4:75:ca: 30:02:c2:57:2b:40:f6:50:84:b4:c4:f0:52:11:bf: 13:67:3a:88:ab:69:0e:60:90:26:1f:41:67:8e:95: c4:6e:52:67:3a:01:2a:97:c0:6e:f3:08:31:9a:3a: 01:e5:0a:d7:df:00:f9:ed:95:5e:12:c3:2a:da:4e: 3f:b7:41:55:ab:d2:09:1e:dc:b2:7e:0c:c7:3d:b4: bb:6e:ee:3f:1a:45:11:94:a3:e7:90:96:e4:d7:69: 39:cc:5b:96:1f:71:2e:34:f8:fe:d1:c5:cd:22:da: 41:8b:8b:21:6c:91:af:3a:51:67:a8:08:c9:bf:8b: 20:37:d6:04:88:26:0c:53:da:e0:7c:ab:06:81:78: 86:24:8a:df:f0:da:82:b9:f3:2e:c2:f8:ea:3f:a7: 7f:eb:af:6e:88:71:f6:0e:96:d2:19:35:8d:cd:22: 89:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:53:95:B1:56:08:A6:53:51:CA:F0:E0:C2:57:A1:B2:7A:33:69:7F X509v3 Authority Key Identifier: keyid:84:85:A3:9E:D6:B6:21:28:ED:F4:F9:9B:2C:2A:81:1F:5C:20:15:70 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912442A/20F2CB00EB9C11ECA682120CC4F9AE02/hIWjnta2ISjt9PmbLCqBH1wgFXA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hIWjnta2ISjt9PmbLCqBH1wgFXA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912442A/20F2CB00EB9C11ECA682120CC4F9AE02/hIWjnta2ISjt9PmbLCqBH1wgFXA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 40:d5:cc:6b:fd:31:ec:e7:55:df:c6:85:6b:f5:8b:6d:e4:39: fb:32:99:c0:90:b9:14:44:5b:f5:5c:63:09:ca:cd:b9:ef:54: 38:73:93:e3:4e:18:ce:38:5e:1e:56:77:5d:64:f8:60:d8:f2: 87:45:2b:e6:81:54:2d:43:c1:0a:c8:70:24:d0:07:4e:40:b1: 22:dc:21:fd:14:fe:1b:16:ab:bf:9f:17:37:6c:79:ac:b1:6b: dc:f1:ba:ee:b7:9b:d2:73:a3:42:a0:08:b2:35:2e:0e:84:f6: 57:64:7e:e4:cf:de:36:cf:4b:3e:2f:56:a4:ff:2a:03:f0:89: 4e:58:af:0d:8f:d0:94:2e:70:d0:dc:bd:6a:12:cf:56:20:8e: ea:9f:fe:8d:63:b1:20:09:e9:b6:e7:01:bb:ef:93:96:c2:09: 2e:3f:b3:cf:76:6e:f2:84:3c:6f:16:84:97:b2:5b:a8:0f:47: ad:bb:1b:66:bf:c1:4f:2b:53:64:44:ce:38:a3:d3:c5:a6:7f: 6b:f2:2a:20:7f:2e:d4:af:06:fc:e0:be:27:c8:22:d9:80:ea: 2e:20:58:f2:c4:d1:32:3f:f4:c9:9b:21:68:ef:1e:e5:36:46: 28:e8:23:ac:4c:de:e3:a8:93:0f:b8:ec:83:c0:29:d8:36:2d: 6e:00:00:d8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA3EwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjQ0MkExMTAvBgNVBAUTKDg0ODVBMzlFRDZCNjIxMjhFREY0Rjk5QjJDMkE4MTFG NUMyMDE1NzAwHhcNMjUwNzAxMDE1NzU1WhcNMjUwNzA4MDE1NzU1WjAYMRYwFAYD VQQDEw02ODYzNDBhNC0zZjcxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAy5ceZaQwj7T2FO90JEB13NZfucbEwIvtvw76fIpK4bGG9JyK2xh0ssYLnDEK 5u6mFngzum+aEMH9D1CBWgLZJpuebPTuu/VHCigYsmtqsbGe8a31DybkdcowAsJX K0D2UIS0xPBSEb8TZzqIq2kOYJAmH0FnjpXEblJnOgEql8Bu8wgxmjoB5QrX3wD5 7ZVeEsMq2k4/t0FVq9IJHtyyfgzHPbS7bu4/GkURlKPnkJbk12k5zFuWH3EuNPj+ 0cXNItpBi4shbJGvOlFnqAjJv4sgN9YEiCYMU9rgfKsGgXiGJIrf8NqCufMuwvjq P6d/669uiHH2DpbSGTWNzSKJwQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFF1TlbFW CKZTUcrw4MJXobJ6M2l/MB8GA1UdIwQYMBaAFISFo57WtiEo7fT5mywqgR9cIBVw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNDQyQS8yMEYyQ0IwMEVC OUMxMUVDQTY4MjEyMENDNEY5QUUwMi9oSVdqbnRhMklTanQ5UG1iTENxQkgxd2dG WEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2hJV2pudGEySVNqdDlQbWJMQ3FCSDF3Z0ZYQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NDQyQS8yMEYyQ0IwMEVCOUMxMUVDQTY4MjEyMENDNEY5QUUwMi9oSVdqbnRhMklT anQ5UG1iTENxQkgxd2dGWEEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBA1cxr/THs51XfxoVr9Ytt5Dn7MpnAkLkURFv1XGMJys2571Q4c5Pj ThjOOF4eVnddZPhg2PKHRSvmgVQtQ8EKyHAk0AdOQLEi3CH9FP4bFqu/nxc3bHms sWvc8brut5vSc6NCoAiyNS4OhPZXZH7kz942z0s+L1ak/yoD8IlOWK8Nj9CULnDQ 3L1qEs9WII7qn/6NY7EgCem25wG775OWwgkuP7PPdm7yhDxvFoSXsluoD0etuxtm v8FPK1NkRM44o9PFpn9r8iogfy7Urwb84L4nyCLZgOouIFjyxNEyP/TJmyFo7x7l NkYo6COsTN7jqJMPuOyDwCnYNi1uAADY -----END CERTIFICATE-----Generated at Wed Jul 2 22:36:58 2025 by rpki-client