$ rpki-client -vvf rpki.apnic.net/member_repository/A916A983/0E082E72CD0F11E89D9FF165C4F9AE02/iNh7EC9cJ3HDZwZOIEm2ipA8cbU.mft File: iNh7EC9cJ3HDZwZOIEm2ipA8cbU.mft (raw, json) Hash identifier: eXhK6nQl+CG2BtMXZXTxyMg/6Q4lrRUGwLLANCY746A= Subject key identifier: 09:A7:13:B9:DD:A6:DC:99:94:CC:89:A5:F4:AA:C6:5E:32:CC:2C:1D Authority key identifier: 88:D8:7B:10:2F:5C:27:71:C3:67:06:4E:20:49:B6:8A:90:3C:71:B5 Certificate issuer: /CN=A916A983/serialNumber=88D87B102F5C2771C367064E2049B68A903C71B5 Certificate serial: 1336 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/iNh7EC9cJ3HDZwZOIEm2ipA8cbU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916A983/0E082E72CD0F11E89D9FF165C4F9AE02/iNh7EC9cJ3HDZwZOIEm2ipA8cbU.mft Manifest number: 12DD Signing time: Wed 02 Jul 2025 17:17:08 +0000 Manifest this update: Wed 02 Jul 2025 17:17:08 +0000 Manifest next update: Wed 09 Jul 2025 17:17:08 +0000 Files and hashes: 1: iNh7EC9cJ3HDZwZOIEm2ipA8cbU.crl (hash: u2NrY3wr2t5oKAi+2mWaU7a4+UqNhAWCtU1COWk6Sxc=) 2: C6618F98BD0511EB9BB8C97CC4F9AE02.roa (hash: MpSwwr6a+AIoc+TObg4xTyGo2LybXSMxQRZJjtl6eX0=) 3: 349FE3280DA811EBB62F0126C4F9AE02.roa (hash: P8l1FNXOYT7PgZwkM5WwT5I4kFXlU2g1aMiRVrxecW0=) 4: 1BC96D8C1BA111EA8BDD6114C4F9AE02.roa (hash: fuwDNiZ3+QLVhkbit4ZnZ+4J6WBC2B0ArdJyFk12B18=) 5: 429A130C13D811EEBE72B647C4F9AE02.roa (hash: gCSPbOmfN88YObA69zovcSPPL1AYU9CNWO0gKhcOASM=) 6: 93E44A3C2E7F11ED9AA3A30AC4F9AE02.roa (hash: CQoH7dF+prokYvHDbMofZqTT8CWUOmwoH8dvQkA7+eE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916A983/0E082E72CD0F11E89D9FF165C4F9AE02/iNh7EC9cJ3HDZwZOIEm2ipA8cbU.crl rsync://rpki.apnic.net/member_repository/A916A983/0E082E72CD0F11E89D9FF165C4F9AE02/iNh7EC9cJ3HDZwZOIEm2ipA8cbU.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/iNh7EC9cJ3HDZwZOIEm2ipA8cbU.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 17:17:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4918 (0x1336) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916A983, serialNumber=88D87B102F5C2771C367064E2049B68A903C71B5 Validity Not Before: Jul 2 17:17:08 2025 GMT Not After : Jul 9 17:17:08 2025 GMT Subject: CN=68656994-f2d1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:ba:78:e4:3b:47:51:99:9d:ce:45:33:94:8a: bd:9c:fc:ab:0a:d6:fc:7b:8f:2b:4b:7c:69:c7:d6: af:18:d4:70:6a:20:f6:0f:4f:48:09:60:de:12:19: 64:84:52:49:cb:e1:c6:6e:93:8f:fd:ac:b6:9d:62: 0f:fc:c5:bd:d3:cc:3b:2b:c3:40:ea:23:fe:13:33: b9:fc:56:4c:0a:c2:99:22:1a:98:62:18:12:7a:72: 8b:05:e5:55:b1:35:26:49:a0:50:c3:1c:0e:9f:11: d9:1d:a0:58:ee:ef:00:99:cf:99:e0:d2:62:48:de: 7d:b1:01:0a:4e:01:77:3d:c1:e4:ae:34:8d:0a:c8: 62:c6:ca:3a:62:f0:11:85:9e:7c:7d:41:2b:3e:0d: 20:55:45:46:00:59:d4:bc:14:41:c8:ab:a3:71:63: 7b:86:af:06:ea:84:10:c5:87:84:dd:50:01:15:ae: a9:44:ea:da:1e:f0:28:27:00:2c:8c:01:c6:59:85: 59:8b:5a:ac:2e:70:e0:57:0c:c4:3a:9a:88:ab:21: be:de:92:b0:06:48:cc:52:8d:60:56:55:2a:91:5b: bb:ad:27:7a:f8:15:1b:b8:9f:d1:b2:eb:31:be:a8: c8:03:fe:fa:35:b1:eb:fe:be:5f:bb:90:f8:53:a1: 11:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:A7:13:B9:DD:A6:DC:99:94:CC:89:A5:F4:AA:C6:5E:32:CC:2C:1D X509v3 Authority Key Identifier: keyid:88:D8:7B:10:2F:5C:27:71:C3:67:06:4E:20:49:B6:8A:90:3C:71:B5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916A983/0E082E72CD0F11E89D9FF165C4F9AE02/iNh7EC9cJ3HDZwZOIEm2ipA8cbU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/iNh7EC9cJ3HDZwZOIEm2ipA8cbU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916A983/0E082E72CD0F11E89D9FF165C4F9AE02/iNh7EC9cJ3HDZwZOIEm2ipA8cbU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9c:f7:c3:53:24:30:4b:b7:2a:a2:7b:29:3f:c6:cc:84:0b:15: 65:58:10:55:26:be:ec:df:11:64:62:ea:2a:71:5f:f9:37:5e: 76:cc:ea:fe:a7:a1:64:86:5b:5c:c2:1b:d7:55:d7:7d:f4:12: 67:6e:35:6a:11:38:2e:75:a6:9a:4c:da:78:1d:e6:3b:7b:23: 51:4e:f9:4c:b7:b7:17:e2:d6:f3:0f:36:88:02:c7:dd:04:fb: 22:95:9e:82:13:3d:c2:49:77:b7:1c:1a:35:67:68:a2:ee:43: 21:b1:b3:69:f5:7b:03:f0:bf:f6:52:e9:91:92:06:7f:24:bc: 81:1c:56:a9:e5:27:7f:42:17:6c:66:bc:04:55:51:64:36:47: 58:22:1a:c0:67:5f:3b:88:ab:61:e7:5d:a5:53:fb:51:52:00: 2a:10:f5:c5:6a:5a:d3:d3:c0:18:7f:a5:a7:92:e7:11:20:b0: 3f:0f:4f:b6:b8:e3:d0:31:05:25:38:fd:92:5c:52:11:99:30: 99:54:71:c8:b7:ec:92:9f:94:d6:e9:af:d2:f9:36:24:f2:af: e2:37:7f:bf:a1:00:0c:77:de:d2:ec:8d:63:aa:fd:3e:05:1f: e1:08:be:c1:08:b7:34:44:a2:1c:04:7a:1b:d2:18:19:82:a2: 12:e4:81:48 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEzYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkE5ODMxMTAvBgNVBAUTKDg4RDg3QjEwMkY1QzI3NzFDMzY3MDY0RTIwNDlCNjhB OTAzQzcxQjUwHhcNMjUwNzAyMTcxNzA4WhcNMjUwNzA5MTcxNzA4WjAYMRYwFAYD VQQDEw02ODY1Njk5NC1mMmQxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw7p45DtHUZmdzkUzlIq9nPyrCtb8e48rS3xpx9avGNRwaiD2D09ICWDeEhlk hFJJy+HGbpOP/ay2nWIP/MW908w7K8NA6iP+EzO5/FZMCsKZIhqYYhgSenKLBeVV sTUmSaBQwxwOnxHZHaBY7u8Amc+Z4NJiSN59sQEKTgF3PcHkrjSNCshixso6YvAR hZ58fUErPg0gVUVGAFnUvBRByKujcWN7hq8G6oQQxYeE3VABFa6pROraHvAoJwAs jAHGWYVZi1qsLnDgVwzEOpqIqyG+3pKwBkjMUo1gVlUqkVu7rSd6+BUbuJ/Rsusx vqjIA/76NbHr/r5fu5D4U6ERRwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAmnE7nd ptyZlMyJpfSqxl4yzCwdMB8GA1UdIwQYMBaAFIjYexAvXCdxw2cGTiBJtoqQPHG1 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QTk4My8wRTA4MkU3MkNE MEYxMUU4OUQ5RkYxNjVDNEY5QUUwMi9pTmg3RUM5Y0ozSERad1pPSUVtMmlwQThj YlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2lOaDdFQzljSjNIRFp3Wk9JRW0yaXBBOGNiVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 QTk4My8wRTA4MkU3MkNEMEYxMUU4OUQ5RkYxNjVDNEY5QUUwMi9pTmg3RUM5Y0oz SERad1pPSUVtMmlwQThjYlUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCc98NTJDBLtyqieyk/xsyECxVlWBBVJr7s3xFkYuoqcV/5N152zOr+ p6FkhltcwhvXVdd99BJnbjVqETgudaaaTNp4HeY7eyNRTvlMt7cX4tbzDzaIAsfd BPsilZ6CEz3CSXe3HBo1Z2ii7kMhsbNp9XsD8L/2UumRkgZ/JLyBHFap5Sd/Qhds ZrwEVVFkNkdYIhrAZ187iKth512lU/tRUgAqEPXFalrT08AYf6WnkucRILA/D0+2 uOPQMQUlOP2SXFIRmTCZVHHIt+ySn5TW6a/S+TYk8q/iN3+/oQAMd97S7I1jqv0+ BR/hCL7BCLc0RKIcBHob0hgZgqIS5IFI -----END CERTIFICATE-----Generated at Thu Jul 3 00:53:59 2025 by rpki-client