$ rpki-client -vvf rpki.apnic.net/member_repository/A916807A/0263AB483E8811EDA61A9B2AC4F9AE02/cp4vnB2HwhRzUHjP0hxjjgcVe10.mft File: cp4vnB2HwhRzUHjP0hxjjgcVe10.mft (raw, json) Hash identifier: l+YZbZbUxr5hhyJWJqIXssvlYwNwooV2YC3kLO1skLs= Subject key identifier: 1A:4E:CC:7A:FC:37:A0:31:EB:15:00:A3:0F:52:B2:00:CE:31:2E:60 Authority key identifier: 72:9E:2F:9C:1D:87:C2:14:73:50:78:CF:D2:1C:63:8E:07:15:7B:5D Certificate issuer: /CN=A916807A/serialNumber=729E2F9C1D87C214735078CFD21C638E07157B5D Certificate serial: 0261 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cp4vnB2HwhRzUHjP0hxjjgcVe10.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916807A/0263AB483E8811EDA61A9B2AC4F9AE02/cp4vnB2HwhRzUHjP0hxjjgcVe10.mft Manifest number: 0237 Signing time: Thu 03 Jul 2025 02:23:30 +0000 Manifest this update: Thu 03 Jul 2025 02:23:29 +0000 Manifest next update: Thu 10 Jul 2025 02:23:29 +0000 Files and hashes: 1: cp4vnB2HwhRzUHjP0hxjjgcVe10.crl (hash: dlUQpV/P/6TVCXUy3ca51uWgG1iE1RKxVSCzOW/cBmU=) 2: 40257FE64D0E11F082837352C4F9AE02.roa (hash: HkcxWcOcJQ97ESWS97WCCLspE00RKugs+s6nj0HZv3Q=) 3: 5690A2AE42F211F08EF7F447C4F9AE02.roa (hash: YSTVbPDZioqtpOco7Ph6NOqKpT2t+CRy3f0/vpMDDFA=) 4: 0711ABAE36D311F091108A4EC4F9AE02.roa (hash: 597OuPOYgkyZPJzuTMHmEhUJoLCC1JeifLTzP6wE3yI=) 5: 4841ECEC51B311F0B1DF6B79C4F9AE02.roa (hash: JZr7RpDfdse4Xe8vB5lgnYHUsW8MDPG1sBv8IKth7Jg=) 6: 2E2847223DB311EE9375493EC4F9AE02.roa (hash: fpl1QeLbfvQuhkR1/wuQiPy5mkE26myDKA7Pu9M6C4M=) 7: 0634745A36D311F091108A4EC4F9AE02.roa (hash: H4l27JSq8qMJJA6As00fhxpue9Mo/O0NE/Rm9knT++Q=) 8: 05E0CD8A56D311F0B46F9787C4F9AE02.roa (hash: GDiEG/pNTXLg5Vlv3aqbkShCJX0NKJUVFvGIXmMT/Uo=) 9: 853DCAEA341111F0A5CD2B20C4F9AE02.roa (hash: 3124udjGGKcS1/Wy1zJaOsZltJyh/OcbojpCAI+dINM=) 10: 056F9FEA36D311F091108A4EC4F9AE02.roa (hash: O2RZXjtjRUpqBA2nisDZS/Q57A0u3AEfmSz1wetsXTQ=) 11: 2DE0A80251B311F0B5484379C4F9AE02.roa (hash: 65RTD6y1rAYkfh/dg3rdS7+Xv2sTjKltPtbnzB/c3wk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916807A/0263AB483E8811EDA61A9B2AC4F9AE02/cp4vnB2HwhRzUHjP0hxjjgcVe10.crl rsync://rpki.apnic.net/member_repository/A916807A/0263AB483E8811EDA61A9B2AC4F9AE02/cp4vnB2HwhRzUHjP0hxjjgcVe10.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cp4vnB2HwhRzUHjP0hxjjgcVe10.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 02:23:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 609 (0x261) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916807A, serialNumber=729E2F9C1D87C214735078CFD21C638E07157B5D Validity Not Before: Jul 3 02:23:29 2025 GMT Not After : Jul 10 02:23:29 2025 GMT Subject: CN=6865e9a1-c711 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:bc:4c:33:cb:34:59:dc:d9:48:95:1a:c3:37: 52:de:47:2e:62:19:d8:16:2e:2f:3a:c9:4c:cf:e9: a9:da:1b:4c:f5:47:7e:5b:ed:a1:9c:c1:29:c4:98: b1:3e:71:cb:9e:e0:e3:3a:82:dd:ba:8e:9a:78:dc: 0c:f3:b5:97:4d:8b:80:c2:1e:e9:93:fa:34:57:0a: 90:e6:3c:20:7f:26:b2:e0:64:c3:c7:13:6a:0e:93: cd:9b:be:ce:8f:03:f8:d2:f8:f6:99:39:37:0b:ae: d7:60:71:73:d1:c8:11:6e:d9:89:89:96:93:dd:ec: 13:b8:f3:b3:5c:27:21:d4:78:f7:84:ae:7b:d1:9d: 00:44:86:3e:5d:b7:c8:c4:bf:ba:c6:54:78:c4:55: c6:c7:af:a8:b0:e8:79:d6:47:0d:3c:73:db:60:c1: fc:12:ee:af:64:9e:0f:a7:ef:e9:a1:dc:8b:74:f3: 69:d4:33:5d:13:62:d8:93:19:19:0d:d8:a7:fa:66: 7e:22:92:b3:b9:9e:3b:96:19:94:ab:ce:b5:65:33: 46:dd:44:63:3b:25:7b:12:b8:08:29:75:97:51:63: 43:fa:f9:c7:be:c6:51:4d:59:b9:b8:64:89:dc:8e: b9:ee:a0:c6:47:6b:26:5e:d5:ae:05:3a:2b:fc:0c: c4:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:4E:CC:7A:FC:37:A0:31:EB:15:00:A3:0F:52:B2:00:CE:31:2E:60 X509v3 Authority Key Identifier: keyid:72:9E:2F:9C:1D:87:C2:14:73:50:78:CF:D2:1C:63:8E:07:15:7B:5D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916807A/0263AB483E8811EDA61A9B2AC4F9AE02/cp4vnB2HwhRzUHjP0hxjjgcVe10.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cp4vnB2HwhRzUHjP0hxjjgcVe10.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916807A/0263AB483E8811EDA61A9B2AC4F9AE02/cp4vnB2HwhRzUHjP0hxjjgcVe10.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9a:8f:28:14:68:76:5e:5f:eb:a8:1c:e3:7f:85:db:90:3a:70: 21:e1:35:6f:f0:bd:8b:62:46:bc:fb:9d:3a:5a:74:a5:df:c3: ee:28:92:10:c0:11:51:c3:b7:52:72:db:35:02:fc:bb:9c:58: ad:26:96:16:11:2e:e7:34:73:5d:dc:85:9e:b7:e3:ef:39:e0: b1:36:00:f4:07:3c:06:9f:89:88:58:e0:ed:72:72:76:40:e0: 83:a0:0d:b8:17:ef:30:c1:23:81:4d:98:70:86:1a:9e:53:92: fa:e7:ba:c6:3b:8f:65:8e:b3:72:96:73:c9:b3:83:f0:06:04: 13:96:9b:1a:31:22:1a:86:02:e5:db:a9:91:94:df:47:08:b4: a2:f9:2f:86:59:09:b5:04:f6:a9:b2:b9:ac:ad:b0:df:38:dc: 3e:b3:37:72:6b:10:67:b1:ad:3b:42:eb:c5:af:13:36:be:d9: f1:58:67:39:fe:d5:83:af:82:33:6f:76:11:f6:4a:3c:8f:5f: 12:32:33:c0:70:d8:ab:b2:b7:50:27:dc:8f:79:3e:d2:21:f1: 8d:b9:e9:5a:25:4c:3e:3b:00:ef:86:d3:17:bc:9b:95:c1:99: d4:71:d4:60:10:22:26:63:df:26:17:17:9f:39:8d:32:44:98: e5:48:af:ea -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAmEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjgwN0ExMTAvBgNVBAUTKDcyOUUyRjlDMUQ4N0MyMTQ3MzUwNzhDRkQyMUM2MzhF MDcxNTdCNUQwHhcNMjUwNzAzMDIyMzI5WhcNMjUwNzEwMDIyMzI5WjAYMRYwFAYD VQQDEw02ODY1ZTlhMS1jNzExMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAo7xMM8s0WdzZSJUawzdS3kcuYhnYFi4vOslMz+mp2htM9Ud+W+2hnMEpxJix PnHLnuDjOoLduo6aeNwM87WXTYuAwh7pk/o0VwqQ5jwgfyay4GTDxxNqDpPNm77O jwP40vj2mTk3C67XYHFz0cgRbtmJiZaT3ewTuPOzXCch1Hj3hK570Z0ARIY+XbfI xL+6xlR4xFXGx6+osOh51kcNPHPbYMH8Eu6vZJ4Pp+/podyLdPNp1DNdE2LYkxkZ Ddin+mZ+IpKzuZ47lhmUq861ZTNG3URjOyV7ErgIKXWXUWND+vnHvsZRTVm5uGSJ 3I657qDGR2smXtWuBTor/AzErQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBpOzHr8 N6Ax6xUAow9SsgDOMS5gMB8GA1UdIwQYMBaAFHKeL5wdh8IUc1B4z9IcY44HFXtd MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2ODA3QS8wMjYzQUI0ODNF ODgxMUVEQTYxQTlCMkFDNEY5QUUwMi9jcDR2bkIySHdoUnpVSGpQMGh4ampnY1Zl MTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NwNHZuQjJId2hSelVIalAwaHhqamdjVmUxMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 ODA3QS8wMjYzQUI0ODNFODgxMUVEQTYxQTlCMkFDNEY5QUUwMi9jcDR2bkIySHdo UnpVSGpQMGh4ampnY1ZlMTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCajygUaHZeX+uoHON/hduQOnAh4TVv8L2LYka8+506WnSl38PuKJIQ wBFRw7dScts1Avy7nFitJpYWES7nNHNd3IWet+PvOeCxNgD0BzwGn4mIWODtcnJ2 QOCDoA24F+8wwSOBTZhwhhqeU5L657rGO49ljrNylnPJs4PwBgQTlpsaMSIahgLl 26mRlN9HCLSi+S+GWQm1BPapsrmsrbDfONw+szdyaxBnsa07QuvFrxM2vtnxWGc5 /tWDr4Izb3YR9ko8j18SMjPAcNirsrdQJ9yPeT7SIfGNuelaJUw+OwDvhtMXvJuV wZnUcdRgECImY98mFxefOY0yRJjlSK/q -----END CERTIFICATE-----Generated at Thu Jul 3 12:18:21 2025 by rpki-client