$ rpki-client -vvf rpki.apnic.net/member_repository/A916B6AA/46C7F1724F1611E58D2A3327C4F9AE02/cLDwRtLzp0OW6Cx56OPazyYLOe4.mft File: cLDwRtLzp0OW6Cx56OPazyYLOe4.mft (raw, json) Hash identifier: 04FnlEEEsU3Sj0u30LV0EZaXjgQZ2oY4+pPHm98JeRA= Subject key identifier: 01:AA:08:4D:6E:81:C2:1C:00:54:F8:EE:A8:C4:5B:D1:6F:57:72:EB Authority key identifier: 70:B0:F0:46:D2:F3:A7:43:96:E8:2C:79:E8:E3:DA:CF:26:0B:39:EE Certificate issuer: /CN=A916B6AA/serialNumber=70B0F046D2F3A74396E82C79E8E3DACF260B39EE Certificate serial: 24B0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cLDwRtLzp0OW6Cx56OPazyYLOe4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916B6AA/46C7F1724F1611E58D2A3327C4F9AE02/cLDwRtLzp0OW6Cx56OPazyYLOe4.mft Manifest number: 246D Signing time: Wed 02 Jul 2025 15:54:16 +0000 Manifest this update: Wed 02 Jul 2025 15:54:16 +0000 Manifest next update: Wed 09 Jul 2025 15:54:16 +0000 Files and hashes: 1: cLDwRtLzp0OW6Cx56OPazyYLOe4.crl (hash: Ee5zN28XUHBFvzocX7lJReEf32oQR8AEk88Erd+QiBk=) 2: 83684F548DF411E7A230506DC4F9AE02.roa (hash: 7rwSXJvv/HshNFddgboHnncSidkclYa/NvGMbxx8LFA=) 3: 1A8324E28DF311E7B616ED66C4F9AE02.roa (hash: nq0Uzk8SuEDu3ZbDp3B41hYz4SbibvM9axOdjGoUmDE=) 4: E080F3508DFC11E7A7F08785C4F9AE02.roa (hash: 4MVhPeL89L4iqif2jjx8A1Zl5rTPkTTCl8RIrLHaD+o=) 5: 19C92BC88DF311E7B616ED66C4F9AE02.roa (hash: aaC6AltbMVKLhQjXZ7dpspAxhJD3m7klJ08VK8NpfEI=) 6: B2ED9AEE913311E79B98C45BC4F9AE02.roa (hash: RYNGA3H5ydUqwQnOMshPikkHHM7bQr9sFSWMotIy4S0=) 7: 5C9B073691CD11E7AD932563C4F9AE02.roa (hash: +cU9ydF4cWSQqI/mYS8fYBUIoo4803uhA7oc0s3jgaU=) 8: 027532E6385F11EAA879692AC4F9AE02.roa (hash: CM6RIxM9JHHGhZC10urcCuophC6TNcTlTYu0C+8d5wc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916B6AA/46C7F1724F1611E58D2A3327C4F9AE02/cLDwRtLzp0OW6Cx56OPazyYLOe4.crl rsync://rpki.apnic.net/member_repository/A916B6AA/46C7F1724F1611E58D2A3327C4F9AE02/cLDwRtLzp0OW6Cx56OPazyYLOe4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cLDwRtLzp0OW6Cx56OPazyYLOe4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 15:54:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9392 (0x24b0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916B6AA, serialNumber=70B0F046D2F3A74396E82C79E8E3DACF260B39EE Validity Not Before: Jul 2 15:54:16 2025 GMT Not After : Jul 9 15:54:16 2025 GMT Subject: CN=68655628-585c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:46:ad:53:c5:5e:c6:2e:66:c9:78:bf:de:da: 2d:f1:f3:15:22:4e:dd:a5:33:88:38:2e:1a:f4:61: 25:c3:b1:e1:35:32:66:e7:ed:84:d3:67:e3:92:8c: 37:70:73:9f:ae:f9:50:ad:a6:04:ea:9e:d5:94:16: 1f:5a:66:fd:97:77:84:25:c5:88:24:0c:31:60:e0: b9:aa:3b:81:24:c4:2b:29:c9:40:d6:50:c9:df:f9: 57:51:b9:fd:32:c7:99:89:3c:68:57:f9:1f:4d:7d: 35:59:8f:84:cb:a5:0f:71:02:7c:f1:90:7d:72:ae: 92:09:22:9c:ae:7f:eb:a9:20:74:22:b5:2b:63:01: e8:c6:b3:e1:fd:90:e1:ff:cd:14:7c:e1:50:35:f9: 4a:ba:15:80:ca:84:44:23:4c:cc:2f:36:1e:06:c5: ea:1d:7c:71:13:49:30:d8:df:3c:5f:8a:82:4e:da: 40:c6:29:8a:6d:d6:5a:37:89:fb:dc:bd:70:b5:5b: 11:29:81:1e:d2:68:7b:32:69:d3:62:01:86:51:a0: 39:ed:ed:99:d2:da:d5:bd:80:31:cd:8e:6e:5e:57: a9:e7:ba:1f:b8:09:89:2f:ab:c1:79:9f:99:bf:a6: 6f:be:cc:bb:d1:46:2c:9a:83:b0:5d:48:ca:ac:db: af:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:AA:08:4D:6E:81:C2:1C:00:54:F8:EE:A8:C4:5B:D1:6F:57:72:EB X509v3 Authority Key Identifier: keyid:70:B0:F0:46:D2:F3:A7:43:96:E8:2C:79:E8:E3:DA:CF:26:0B:39:EE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916B6AA/46C7F1724F1611E58D2A3327C4F9AE02/cLDwRtLzp0OW6Cx56OPazyYLOe4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cLDwRtLzp0OW6Cx56OPazyYLOe4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916B6AA/46C7F1724F1611E58D2A3327C4F9AE02/cLDwRtLzp0OW6Cx56OPazyYLOe4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 33:01:32:44:74:a6:28:e8:04:77:84:b0:88:90:8b:a5:18:d3: 35:0e:c4:bf:97:cc:a3:e8:fd:0d:f7:2d:77:54:75:41:2c:26: 71:eb:ad:90:61:37:35:f3:c0:14:2f:79:d5:d9:7a:0a:e8:67: d7:f6:b7:c4:de:e3:b8:75:7a:4c:87:bb:0c:cf:48:d2:05:c9: 8c:1e:7f:f3:0a:b9:85:86:93:29:51:6f:c1:dc:1b:e8:31:b0: 1b:57:fb:df:bc:a4:e8:d6:dd:76:65:0a:d7:fb:ae:99:66:21: 20:15:50:9b:cb:b2:fe:11:04:58:03:20:a0:92:04:ed:65:46: d2:ed:40:64:47:5e:e4:77:cb:99:6c:72:a2:cd:fe:38:4e:2d: 4c:ed:0f:7e:ab:00:b4:e2:3b:fc:72:1a:f4:2b:5d:ff:11:51: 54:c8:b0:3c:20:1e:c4:45:ee:c0:84:d8:bc:5d:22:65:e7:d2: 7e:f9:1f:e6:c1:74:dd:96:1a:bf:68:5c:17:80:08:34:1c:c5: e2:f2:a8:04:71:0e:35:a2:f9:3a:7c:69:bc:ab:f6:c1:41:80: a2:5f:ef:58:9d:45:75:95:d6:a2:8a:b7:57:35:dc:8e:db:41: c0:cb:c6:b1:45:bd:b4:71:5c:fc:7e:0a:8b:80:80:b9:f4:ba: 42:37:bc:c8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICJLAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkI2QUExMTAvBgNVBAUTKDcwQjBGMDQ2RDJGM0E3NDM5NkU4MkM3OUU4RTNEQUNG MjYwQjM5RUUwHhcNMjUwNzAyMTU1NDE2WhcNMjUwNzA5MTU1NDE2WjAYMRYwFAYD VQQDEw02ODY1NTYyOC01ODVjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAukatU8Vexi5myXi/3tot8fMVIk7dpTOIOC4a9GElw7HhNTJm5+2E02fjkow3 cHOfrvlQraYE6p7VlBYfWmb9l3eEJcWIJAwxYOC5qjuBJMQrKclA1lDJ3/lXUbn9 MseZiTxoV/kfTX01WY+Ey6UPcQJ88ZB9cq6SCSKcrn/rqSB0IrUrYwHoxrPh/ZDh /80UfOFQNflKuhWAyoREI0zMLzYeBsXqHXxxE0kw2N88X4qCTtpAximKbdZaN4n7 3L1wtVsRKYEe0mh7MmnTYgGGUaA57e2Z0trVvYAxzY5uXlep57ofuAmJL6vBeZ+Z v6Zvvsy70UYsmoOwXUjKrNuvtQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAGqCE1u gcIcAFT47qjEW9FvV3LrMB8GA1UdIwQYMBaAFHCw8EbS86dDlugseejj2s8mCznu MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QjZBQS80NkM3RjE3MjRG MTYxMUU1OEQyQTMzMjdDNEY5QUUwMi9jTER3UnRMenAwT1c2Q3g1Nk9QYXp5WUxP ZTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NMRHdSdEx6cDBPVzZDeDU2T1BhenlZTE9lNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 QjZBQS80NkM3RjE3MjRGMTYxMUU1OEQyQTMzMjdDNEY5QUUwMi9jTER3UnRMenAw T1c2Q3g1Nk9QYXp5WUxPZTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAzATJEdKYo6AR3hLCIkIulGNM1DsS/l8yj6P0N9y13VHVBLCZx662Q YTc188AUL3nV2XoK6GfX9rfE3uO4dXpMh7sMz0jSBcmMHn/zCrmFhpMpUW/B3Bvo MbAbV/vfvKTo1t12ZQrX+66ZZiEgFVCby7L+EQRYAyCgkgTtZUbS7UBkR17kd8uZ bHKizf44Ti1M7Q9+qwC04jv8chr0K13/EVFUyLA8IB7ERe7AhNi8XSJl59J++R/m wXTdlhq/aFwXgAg0HMXi8qgEcQ41ovk6fGm8q/bBQYCiX+9YnUV1ldaiirdXNdyO 20HAy8axRb20cVz8fgqLgIC59LpCN7zI -----END CERTIFICATE-----Generated at Thu Jul 3 10:35:07 2025 by rpki-client