$ rpki-client -vvf rpki.apnic.net/member_repository/A916807A/0263AB483E8811EDA61A9B2AC4F9AE02/cp4vnB2HwhRzUHjP0hxjjgcVe10.mft File: cp4vnB2HwhRzUHjP0hxjjgcVe10.mft (raw, json) Hash identifier: /h3xkiCZBvubyjem3h/H3zFmGUs/iOOg7RtZE5ZMXlk= Subject key identifier: 1B:C3:A4:D0:27:97:26:3F:E1:16:9A:12:F3:50:F3:3B:24:48:89:B1 Authority key identifier: 72:9E:2F:9C:1D:87:C2:14:73:50:78:CF:D2:1C:63:8E:07:15:7B:5D Certificate issuer: /CN=A916807A/serialNumber=729E2F9C1D87C214735078CFD21C638E07157B5D Certificate serial: 028E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cp4vnB2HwhRzUHjP0hxjjgcVe10.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916807A/0263AB483E8811EDA61A9B2AC4F9AE02/cp4vnB2HwhRzUHjP0hxjjgcVe10.mft Manifest number: 025B Signing time: Sat 23 Aug 2025 02:09:15 +0000 Manifest this update: Sat 23 Aug 2025 02:09:15 +0000 Manifest next update: Sat 30 Aug 2025 02:09:15 +0000 Files and hashes: 1: cp4vnB2HwhRzUHjP0hxjjgcVe10.crl (hash: KpSbzoGPNzcex1+ith7JamfcYKUDycp/7XZ5zQxGr2w=) 2: CD8401DE725011F0A3F05A4DC4F9AE02.roa (hash: 7OKGLN0AquslhR2wq6kbUot4euzlUMkruJOrwY6VWnc=) 3: 40257FE64D0E11F082837352C4F9AE02.roa (hash: HkcxWcOcJQ97ESWS97WCCLspE00RKugs+s6nj0HZv3Q=) 4: 0711ABAE36D311F091108A4EC4F9AE02.roa (hash: 597OuPOYgkyZPJzuTMHmEhUJoLCC1JeifLTzP6wE3yI=) 5: E88B9F0C778511F0A4E72535C4F9AE02.roa (hash: 3D9lBpJ7mteA7Bb3YQGDJry3PnMCpoVw+v32rQDtSvs=) 6: 2E2847223DB311EE9375493EC4F9AE02.roa (hash: fpl1QeLbfvQuhkR1/wuQiPy5mkE26myDKA7Pu9M6C4M=) 7: 0634745A36D311F091108A4EC4F9AE02.roa (hash: H4l27JSq8qMJJA6As00fhxpue9Mo/O0NE/Rm9knT++Q=) 8: 05E0CD8A56D311F0B46F9787C4F9AE02.roa (hash: GDiEG/pNTXLg5Vlv3aqbkShCJX0NKJUVFvGIXmMT/Uo=) 9: 853DCAEA341111F0A5CD2B20C4F9AE02.roa (hash: 3124udjGGKcS1/Wy1zJaOsZltJyh/OcbojpCAI+dINM=) 10: 056F9FEA36D311F091108A4EC4F9AE02.roa (hash: O2RZXjtjRUpqBA2nisDZS/Q57A0u3AEfmSz1wetsXTQ=) 11: 359EA23662B311F081881A48C4F9AE02.roa (hash: ml90CHJI6hM9cwuuAL9Y+OP72xTNZ1gM1O6bqm1RFPE=) 12: E7BB6878778511F0A4E72535C4F9AE02.roa (hash: q0dRuolqOgecUXb4uEgp631GRcsGQw3FBRIwFVQHVns=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916807A/0263AB483E8811EDA61A9B2AC4F9AE02/cp4vnB2HwhRzUHjP0hxjjgcVe10.crl rsync://rpki.apnic.net/member_repository/A916807A/0263AB483E8811EDA61A9B2AC4F9AE02/cp4vnB2HwhRzUHjP0hxjjgcVe10.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cp4vnB2HwhRzUHjP0hxjjgcVe10.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 02:09:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 654 (0x28e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916807A, serialNumber=729E2F9C1D87C214735078CFD21C638E07157B5D Validity Not Before: Aug 23 02:09:15 2025 GMT Not After : Aug 30 02:09:15 2025 GMT Subject: CN=68a922cb-1727 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:3f:91:f4:24:83:01:ab:38:68:59:05:0e:dc: ea:92:38:53:74:ed:f6:f6:e9:fc:25:8d:00:fb:c8: e0:32:8a:23:ef:b5:3a:fb:78:68:7f:4e:7f:dd:39: 0c:40:e1:91:68:3b:81:67:54:be:cc:66:4f:b8:e8: 72:65:f9:8e:8c:48:a7:05:0e:9a:9e:e9:61:fa:70: fa:c7:ab:cf:3f:35:3f:1e:0d:b2:4a:8a:62:50:b9: c9:cc:3b:54:82:2e:f1:bb:0f:30:78:e5:3f:76:84: f2:a8:a2:4f:07:4a:35:8e:50:c5:d8:88:3f:cb:30: a7:84:9a:87:d4:eb:ec:a5:e5:0f:c6:a1:d3:70:92: 05:93:a8:bb:5a:a6:5c:c3:ac:5b:e2:b9:3f:6e:9a: 8f:bc:a9:86:c9:ad:c9:7f:63:69:4b:03:a4:4f:4c: 2e:b1:b8:44:d0:e2:06:c4:38:44:cb:b5:e6:12:94: 76:60:9d:ea:bd:1d:93:2d:c9:a7:1e:1b:c3:6d:4d: 7f:4b:d1:04:09:14:fc:01:ba:9f:ea:9b:90:11:71: 2a:76:dd:65:6a:41:43:5b:5f:4c:f6:4a:5c:a2:92: 72:59:d1:cc:50:6b:75:57:55:a8:e3:eb:9f:09:b3: fe:54:35:37:76:cb:ec:0d:78:1f:64:ee:5a:28:67: 68:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:C3:A4:D0:27:97:26:3F:E1:16:9A:12:F3:50:F3:3B:24:48:89:B1 X509v3 Authority Key Identifier: keyid:72:9E:2F:9C:1D:87:C2:14:73:50:78:CF:D2:1C:63:8E:07:15:7B:5D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916807A/0263AB483E8811EDA61A9B2AC4F9AE02/cp4vnB2HwhRzUHjP0hxjjgcVe10.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cp4vnB2HwhRzUHjP0hxjjgcVe10.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916807A/0263AB483E8811EDA61A9B2AC4F9AE02/cp4vnB2HwhRzUHjP0hxjjgcVe10.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2e:48:f9:95:9a:d1:92:b4:d9:59:ae:c4:fa:96:8c:65:df:8e: 2d:ad:6f:dc:9d:5c:2e:dc:ed:76:6d:84:97:fa:52:78:95:90: b4:55:12:66:80:76:72:36:16:d1:76:cf:5e:6d:cf:5e:58:f0: 86:9f:85:cd:ad:58:48:c2:ed:3d:48:34:72:c3:6b:9e:cb:f9: 3f:f0:a3:1e:5c:db:8f:63:df:cc:b5:00:8e:d2:52:62:b6:f7: 9f:36:a8:01:75:a6:0b:6a:08:ae:55:1b:79:39:b7:6f:a2:ec: f2:dc:22:9a:d5:bb:65:d2:0b:30:af:b3:77:26:1c:86:e3:28: a1:05:4e:8e:c2:6a:58:0a:be:ac:00:ca:96:2a:93:05:96:c6: 21:20:d0:d5:a2:2a:b6:47:76:f5:ad:1d:19:7d:ca:ff:4b:c2: b8:ad:81:eb:f1:80:fa:95:7f:7b:a7:11:c9:05:b4:15:e9:4b: ac:4a:a2:58:46:a1:d4:66:21:19:19:6a:b0:8a:16:47:6a:59: 2d:a9:c5:fb:df:7a:ff:68:dd:4e:c3:b7:10:bf:a1:da:18:82: a2:b3:71:26:21:28:36:54:02:10:69:4b:c0:09:5a:c3:7d:20: 34:50:08:1b:2f:93:d9:82:c3:33:24:54:72:e2:93:46:a9:e4: bb:05:00:07 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAo4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjgwN0ExMTAvBgNVBAUTKDcyOUUyRjlDMUQ4N0MyMTQ3MzUwNzhDRkQyMUM2MzhF MDcxNTdCNUQwHhcNMjUwODIzMDIwOTE1WhcNMjUwODMwMDIwOTE1WjAYMRYwFAYD VQQDEw02OGE5MjJjYi0xNzI3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwD+R9CSDAas4aFkFDtzqkjhTdO329un8JY0A+8jgMooj77U6+3hof05/3TkM QOGRaDuBZ1S+zGZPuOhyZfmOjEinBQ6anulh+nD6x6vPPzU/Hg2ySopiULnJzDtU gi7xuw8weOU/doTyqKJPB0o1jlDF2Ig/yzCnhJqH1OvspeUPxqHTcJIFk6i7WqZc w6xb4rk/bpqPvKmGya3Jf2NpSwOkT0wusbhE0OIGxDhEy7XmEpR2YJ3qvR2TLcmn HhvDbU1/S9EECRT8Abqf6puQEXEqdt1lakFDW19M9kpcopJyWdHMUGt1V1Wo4+uf CbP+VDU3dsvsDXgfZO5aKGdo2wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBvDpNAn lyY/4RaaEvNQ8zskSImxMB8GA1UdIwQYMBaAFHKeL5wdh8IUc1B4z9IcY44HFXtd MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2ODA3QS8wMjYzQUI0ODNF ODgxMUVEQTYxQTlCMkFDNEY5QUUwMi9jcDR2bkIySHdoUnpVSGpQMGh4ampnY1Zl MTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NwNHZuQjJId2hSelVIalAwaHhqamdjVmUxMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 ODA3QS8wMjYzQUI0ODNFODgxMUVEQTYxQTlCMkFDNEY5QUUwMi9jcDR2bkIySHdo UnpVSGpQMGh4ampnY1ZlMTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAuSPmVmtGStNlZrsT6loxl344trW/cnVwu3O12bYSX+lJ4lZC0VRJm gHZyNhbRds9ebc9eWPCGn4XNrVhIwu09SDRyw2uey/k/8KMeXNuPY9/MtQCO0lJi tvefNqgBdaYLagiuVRt5Obdvouzy3CKa1btl0gswr7N3JhyG4yihBU6OwmpYCr6s AMqWKpMFlsYhINDVoiq2R3b1rR0Zfcr/S8K4rYHr8YD6lX97pxHJBbQV6UusSqJY RqHUZiEZGWqwihZHalktqcX733r/aN1Ow7cQv6HaGIKis3EmISg2VAIQaUvACVrD fSA0UAgbL5PZgsMzJFRy4pNGqeS7BQAH -----END CERTIFICATE-----Generated at Sat Aug 23 11:00:56 2025 by rpki-client