$ rpki-client -vvf rpki.apnic.net/member_repository/A916A983/16730D20CD0F11E89D9FF165C4F9AE02/cVZfLXuSTNcrRVtotmcZQBC7Gp8.mft File: cVZfLXuSTNcrRVtotmcZQBC7Gp8.mft (raw, json) Hash identifier: /rGuZivbgig6zOg77G+DdpSLbjwmRWrOETAGM5upBIE= Subject key identifier: 3F:7A:5A:B7:4C:C8:E0:1E:4D:8D:36:0E:63:A4:D0:FD:98:32:E6:EC Authority key identifier: 71:56:5F:2D:7B:92:4C:D7:2B:45:5B:68:B6:67:19:40:10:BB:1A:9F Certificate issuer: /CN=A916A983/serialNumber=71565F2D7B924CD72B455B68B667194010BB1A9F Certificate serial: 132B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cVZfLXuSTNcrRVtotmcZQBC7Gp8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916A983/16730D20CD0F11E89D9FF165C4F9AE02/cVZfLXuSTNcrRVtotmcZQBC7Gp8.mft Manifest number: 12D8 Signing time: Wed 02 Jul 2025 17:17:11 +0000 Manifest this update: Wed 02 Jul 2025 17:17:11 +0000 Manifest next update: Wed 09 Jul 2025 17:17:11 +0000 Files and hashes: 1: cVZfLXuSTNcrRVtotmcZQBC7Gp8.crl (hash: Vnt597naNpc57jMw477hK7QNd0eqEchMeOaLyM5I0BY=) 2: 3B38CB22BA7011EA80520A63C4F9AE02.roa (hash: RkoS7hrQ2QANNm5sx/5d46X4OvIfq/xZ9DC2wpSUEMo=) 3: 2227B66CF97B11EFA2B83631C4F9AE02.roa (hash: Qmv4NznXsRfVMeI2JKAwy+QoVAJUJQXFMJng7cjxgg4=) 4: 75522B0A002B11EA855CA925C4F9AE02.roa (hash: dlzvcYSMpJJECDfUD2ttn05KUyNlgHjyRd5FKOecZPA=) 5: 6E0B5938066711EFA1505F46C4F9AE02.roa (hash: o9qMusGN5GDjUkb5guKhyMehJeu6p5DVF2ITp61z0FM=) 6: 8C163A62FD4611EE8FAE061EC4F9AE02.roa (hash: SPUciNl7sWVHesGHpuLeYdUCLi+DEMRmn3hpjUZkkzo=) 7: EB429364CA3811EE99BEB838C4F9AE02.roa (hash: CxE2LzQTUSnICEBxSLSJi2DaFZfd5DCFRNbdjbleYco=) 8: DEF977A6E53611EB81682769C4F9AE02.roa (hash: hs6gBEHf+NcXloE+gZDvY1hGrieoi7+2YWZ5lbTwNRY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916A983/16730D20CD0F11E89D9FF165C4F9AE02/cVZfLXuSTNcrRVtotmcZQBC7Gp8.crl rsync://rpki.apnic.net/member_repository/A916A983/16730D20CD0F11E89D9FF165C4F9AE02/cVZfLXuSTNcrRVtotmcZQBC7Gp8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cVZfLXuSTNcrRVtotmcZQBC7Gp8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 17:17:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4907 (0x132b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916A983, serialNumber=71565F2D7B924CD72B455B68B667194010BB1A9F Validity Not Before: Jul 2 17:17:11 2025 GMT Not After : Jul 9 17:17:11 2025 GMT Subject: CN=68656997-03a8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:aa:13:0b:80:96:3a:b1:26:03:52:cb:36:e9: 87:cd:cf:42:30:3a:80:f4:23:f8:63:f9:85:5e:34: c6:0f:d7:85:20:2d:12:65:96:fb:50:58:aa:2d:32: 6b:36:18:6c:46:93:fc:b3:f4:b0:c2:f7:bf:27:21: 6c:1b:e8:76:39:0a:ce:34:b2:e6:ca:be:fb:a1:ad: 58:05:ad:f3:18:1e:86:e0:be:6b:8a:a9:40:f9:fa: 02:db:38:3a:91:89:5f:5f:e3:a1:b6:41:3b:6b:8d: 78:80:93:03:6f:ae:4c:6c:6d:62:41:1e:40:ab:26: 33:47:c5:80:83:97:89:4c:16:8c:19:76:0e:b5:c8: c9:6c:b7:f2:31:12:7b:c7:e9:ff:f7:7d:e8:08:41: 65:24:17:cd:fc:80:25:80:7e:bc:78:58:02:71:96: 69:94:32:a1:77:6d:89:ed:24:49:82:25:73:f1:7b: e8:0f:7f:80:62:28:35:b5:4a:24:10:8f:c1:3c:34: 74:bf:8c:aa:e4:77:99:b4:4b:e1:bc:b3:6f:59:35: e5:55:d0:43:87:88:a3:25:43:5c:68:c1:c7:ab:15: 6a:1c:6a:db:d6:aa:29:26:db:15:ea:5a:6f:d6:ca: d5:4e:82:20:d1:25:6c:01:06:8c:cb:01:8c:40:28: 3c:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:7A:5A:B7:4C:C8:E0:1E:4D:8D:36:0E:63:A4:D0:FD:98:32:E6:EC X509v3 Authority Key Identifier: keyid:71:56:5F:2D:7B:92:4C:D7:2B:45:5B:68:B6:67:19:40:10:BB:1A:9F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916A983/16730D20CD0F11E89D9FF165C4F9AE02/cVZfLXuSTNcrRVtotmcZQBC7Gp8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cVZfLXuSTNcrRVtotmcZQBC7Gp8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916A983/16730D20CD0F11E89D9FF165C4F9AE02/cVZfLXuSTNcrRVtotmcZQBC7Gp8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 40:30:66:cb:47:36:cc:df:3a:77:24:a2:92:01:00:11:f9:5b: 93:d1:91:e0:fe:67:52:ca:8c:2e:3e:b7:f8:2a:c8:2d:73:8a: f9:e3:41:12:e6:89:91:e1:f6:3b:34:0b:c1:91:3b:57:03:92: 45:a6:ee:f4:f1:af:bb:cb:37:e6:97:9e:e9:6c:8d:52:54:58: c0:e9:c4:72:a0:f9:e6:d7:b6:a2:7a:d6:0e:e8:99:b5:12:bf: 67:8a:cf:2e:55:9c:41:f2:06:9d:f7:2a:9a:93:77:5d:d3:14: e3:78:22:44:2e:b7:ba:9c:d5:e9:42:99:50:ff:84:53:63:90: 88:0d:d7:69:db:99:3f:b7:5a:24:17:74:17:f8:4f:1f:6f:9d: d5:78:1d:e1:86:46:b3:21:d9:15:c5:ca:00:01:6b:24:c7:f3: 12:2f:9b:3d:69:53:76:38:9b:ab:87:b5:0a:30:19:db:d9:f4: 7f:42:3c:30:9b:9f:6a:f9:e8:af:75:93:e6:e0:44:8e:95:81: e5:7d:52:11:75:d3:ab:1e:93:73:eb:f5:6d:ec:51:23:91:76: 3d:61:f5:63:01:03:e6:7e:a4:aa:e6:d3:55:e5:fd:fb:f3:93: 93:4f:0d:d6:7e:bd:70:e2:64:a0:40:cb:7a:32:a4:d5:97:c7: 6e:db:dd:60 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEyswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkE5ODMxMTAvBgNVBAUTKDcxNTY1RjJEN0I5MjRDRDcyQjQ1NUI2OEI2NjcxOTQw MTBCQjFBOUYwHhcNMjUwNzAyMTcxNzExWhcNMjUwNzA5MTcxNzExWjAYMRYwFAYD VQQDEw02ODY1Njk5Ny0wM2E4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1qoTC4CWOrEmA1LLNumHzc9CMDqA9CP4Y/mFXjTGD9eFIC0SZZb7UFiqLTJr NhhsRpP8s/Swwve/JyFsG+h2OQrONLLmyr77oa1YBa3zGB6G4L5riqlA+foC2zg6 kYlfX+OhtkE7a414gJMDb65MbG1iQR5AqyYzR8WAg5eJTBaMGXYOtcjJbLfyMRJ7 x+n/933oCEFlJBfN/IAlgH68eFgCcZZplDKhd22J7SRJgiVz8XvoD3+AYig1tUok EI/BPDR0v4yq5HeZtEvhvLNvWTXlVdBDh4ijJUNcaMHHqxVqHGrb1qopJtsV6lpv 1srVToIg0SVsAQaMywGMQCg81wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFD96WrdM yOAeTY02DmOk0P2YMubsMB8GA1UdIwQYMBaAFHFWXy17kkzXK0VbaLZnGUAQuxqf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QTk4My8xNjczMEQyMENE MEYxMUU4OUQ5RkYxNjVDNEY5QUUwMi9jVlpmTFh1U1ROY3JSVnRvdG1jWlFCQzdH cDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NWWmZMWHVTVE5jclJWdG90bWNaUUJDN0dwOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 QTk4My8xNjczMEQyMENEMEYxMUU4OUQ5RkYxNjVDNEY5QUUwMi9jVlpmTFh1U1RO Y3JSVnRvdG1jWlFCQzdHcDgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBAMGbLRzbM3zp3JKKSAQAR+VuT0ZHg/mdSyowuPrf4Ksgtc4r540ES 5omR4fY7NAvBkTtXA5JFpu708a+7yzfml57pbI1SVFjA6cRyoPnm17aietYO6Jm1 Er9nis8uVZxB8gad9yqak3dd0xTjeCJELre6nNXpQplQ/4RTY5CIDddp25k/t1ok F3QX+E8fb53VeB3hhkazIdkVxcoAAWskx/MSL5s9aVN2OJurh7UKMBnb2fR/Qjww m59q+eivdZPm4ESOlYHlfVIRddOrHpNz6/Vt7FEjkXY9YfVjAQPmfqSq5tNV5f37 85OTTw3Wfr1w4mSgQMt6MqTVl8du291g -----END CERTIFICATE-----Generated at Thu Jul 3 10:35:10 2025 by rpki-client