$ rpki-client -vvf rpki.apnic.net/member_repository/A916CCFF/9A5EC16C46FE11EC94E3D24AC4F9AE02/CANmLFcTJXKPJPqtjLGl8ZAHFe0.mft File: CANmLFcTJXKPJPqtjLGl8ZAHFe0.mft (raw, json) Hash identifier: 9b26Pnbv57tEzT72J8D2GeKX24VfwB5O5rZhKApYP8Y= Subject key identifier: DD:64:71:9A:66:7F:FA:77:4D:8C:DA:3F:D3:DF:10:C6:D2:F9:F7:AC Authority key identifier: 08:03:66:2C:57:13:25:72:8F:24:FA:AD:8C:B1:A5:F1:90:07:15:ED Certificate issuer: /CN=A916CCFF/serialNumber=0803662C571325728F24FAAD8CB1A5F1900715ED Certificate serial: 04A4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CANmLFcTJXKPJPqtjLGl8ZAHFe0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916CCFF/9A5EC16C46FE11EC94E3D24AC4F9AE02/CANmLFcTJXKPJPqtjLGl8ZAHFe0.mft Manifest number: 048E Signing time: Tue 01 Jul 2025 00:34:20 +0000 Manifest this update: Tue 01 Jul 2025 00:34:19 +0000 Manifest next update: Tue 08 Jul 2025 00:34:19 +0000 Files and hashes: 1: CANmLFcTJXKPJPqtjLGl8ZAHFe0.crl (hash: 9b1aWggBOFvJab5axeiG77FzJolmfee3a1kIkVw/ML0=) 2: 02F57BD252E711EC931DB95CC4F9AE02.roa (hash: 01FpccdP/MsW2CvA7hmJMpiDNjJ1dNkKkLEpim6H7/0=) 3: 413AD9F852E411EC9E19AA2FC4F9AE02.roa (hash: qr8b4jL6pkulS0zDMbButEnYyv8gZUas09Wk3ymII28=) 4: 41E32C9852E411EC9E19AA2FC4F9AE02.roa (hash: TI6U5DDyMx2oNjPAY1onItBRjW+RoIBeg5nOMGrAMag=) 5: 0517C4F0470311EC9E6FA71DC4F9AE02.roa (hash: hL3IFyg9Xwqq4SM4WYiBZDcso6a27q9sQZQ/dFLeUNY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916CCFF/9A5EC16C46FE11EC94E3D24AC4F9AE02/CANmLFcTJXKPJPqtjLGl8ZAHFe0.crl rsync://rpki.apnic.net/member_repository/A916CCFF/9A5EC16C46FE11EC94E3D24AC4F9AE02/CANmLFcTJXKPJPqtjLGl8ZAHFe0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CANmLFcTJXKPJPqtjLGl8ZAHFe0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 08 Jul 2025 00:34:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1188 (0x4a4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916CCFF, serialNumber=0803662C571325728F24FAAD8CB1A5F1900715ED Validity Not Before: Jul 1 00:34:19 2025 GMT Not After : Jul 8 00:34:19 2025 GMT Subject: CN=68632d0c-79f9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:a2:35:f2:dd:c2:fa:8f:98:ae:a4:77:70:1d: e4:4f:ef:8f:ae:23:9e:87:d1:d1:bb:7b:ac:d8:af: f0:b2:1e:b7:b3:95:ff:74:7b:6e:78:43:25:1a:2a: 74:43:6e:41:dc:a3:fd:9d:55:f5:a5:45:c0:89:63: 0e:97:62:83:bc:b0:9f:1d:1b:9a:52:77:fb:eb:05: bc:21:5e:59:10:ce:79:39:51:8e:6e:4f:c6:1f:88: 8b:78:67:23:cc:2a:b4:2f:22:12:48:de:73:cf:2d: 10:9c:18:3c:b5:00:13:fe:b0:71:d1:6c:05:67:ae: b8:3d:06:1c:1d:09:e1:40:47:08:d6:ae:9f:2f:ba: 25:01:65:79:f2:00:ef:0b:1a:31:07:86:2e:52:92: ca:c7:b2:08:99:a0:47:98:d9:c8:bc:8d:6a:55:9c: 1f:a1:e1:fc:8d:fa:ab:e8:65:5c:ab:eb:e3:b7:ef: 59:6e:66:39:94:4e:b3:77:57:55:87:af:f5:8d:31: d7:e0:fa:9a:a9:73:eb:eb:9a:7e:05:26:e7:4c:4b: cc:d9:ec:4c:88:fa:8e:0b:08:bd:48:19:da:48:7c: b2:61:bd:75:3d:7d:2c:be:e0:79:60:c3:ab:0b:ad: 99:00:79:f6:84:cb:db:76:09:93:05:17:92:36:4d: 86:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:64:71:9A:66:7F:FA:77:4D:8C:DA:3F:D3:DF:10:C6:D2:F9:F7:AC X509v3 Authority Key Identifier: keyid:08:03:66:2C:57:13:25:72:8F:24:FA:AD:8C:B1:A5:F1:90:07:15:ED X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916CCFF/9A5EC16C46FE11EC94E3D24AC4F9AE02/CANmLFcTJXKPJPqtjLGl8ZAHFe0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CANmLFcTJXKPJPqtjLGl8ZAHFe0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916CCFF/9A5EC16C46FE11EC94E3D24AC4F9AE02/CANmLFcTJXKPJPqtjLGl8ZAHFe0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 33:83:f8:a5:39:3d:ee:c5:39:ba:eb:e9:d3:7c:40:bc:9f:e9: af:56:1e:99:d7:fe:be:50:d0:bb:83:a7:42:8e:62:53:47:73: 23:d2:08:3f:be:f2:e6:f5:68:db:ec:26:40:c7:4b:da:80:31: be:80:de:ce:a2:57:3f:25:eb:96:be:8a:95:ff:4a:5b:df:1d: cd:7c:39:86:4b:5c:a7:5f:bf:73:93:b4:e1:7a:db:db:a8:d6: 13:1d:b8:47:25:1f:78:c0:1f:c2:09:d2:24:bc:02:a2:b4:16: 0c:ef:c2:6c:a1:00:6e:b1:46:d3:e3:d6:f9:d3:18:54:b0:ba: 2a:45:f3:45:f3:db:bc:55:67:e0:9b:5a:55:26:ec:40:83:e8: 40:26:c4:aa:ba:08:dc:b9:ec:22:4b:42:1c:34:5f:27:cb:ec: 53:0f:b5:7f:af:73:9c:de:5f:f4:5e:ad:97:90:2f:6e:f4:a0: be:f6:56:60:5e:fc:93:a1:6b:ae:b6:cc:12:d3:bc:c1:e1:af: 1a:4f:ed:5d:44:40:0e:ee:4e:ae:97:bc:55:49:31:6a:ab:47: 2e:6e:b5:94:74:fc:70:ee:97:da:fa:39:a2:a1:16:41:18:46: 87:34:63:cc:0e:f9:38:54:93:b4:1c:85:25:b2:c0:df:9a:4b: 5c:0d:6d:4b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBKQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkNDRkYxMTAvBgNVBAUTKDA4MDM2NjJDNTcxMzI1NzI4RjI0RkFBRDhDQjFBNUYx OTAwNzE1RUQwHhcNMjUwNzAxMDAzNDE5WhcNMjUwNzA4MDAzNDE5WjAYMRYwFAYD VQQDEw02ODYzMmQwYy03OWY5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqaI18t3C+o+YrqR3cB3kT++PriOeh9HRu3us2K/wsh63s5X/dHtueEMlGip0 Q25B3KP9nVX1pUXAiWMOl2KDvLCfHRuaUnf76wW8IV5ZEM55OVGObk/GH4iLeGcj zCq0LyISSN5zzy0QnBg8tQAT/rBx0WwFZ664PQYcHQnhQEcI1q6fL7olAWV58gDv CxoxB4YuUpLKx7IImaBHmNnIvI1qVZwfoeH8jfqr6GVcq+vjt+9ZbmY5lE6zd1dV h6/1jTHX4PqaqXPr65p+BSbnTEvM2exMiPqOCwi9SBnaSHyyYb11PX0svuB5YMOr C62ZAHn2hMvbdgmTBReSNk2GowIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFN1kcZpm f/p3TYzaP9PfEMbS+fesMB8GA1UdIwQYMBaAFAgDZixXEyVyjyT6rYyxpfGQBxXt MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2Q0NGRi85QTVFQzE2QzQ2 RkUxMUVDOTRFM0QyNEFDNEY5QUUwMi9DQU5tTEZjVEpYS1BKUHF0akxHbDhaQUhG ZTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NBTm1MRmNUSlhLUEpQcXRqTEdsOFpBSEZlMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 Q0NGRi85QTVFQzE2QzQ2RkUxMUVDOTRFM0QyNEFDNEY5QUUwMi9DQU5tTEZjVEpY S1BKUHF0akxHbDhaQUhGZTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAzg/ilOT3uxTm66+nTfEC8n+mvVh6Z1/6+UNC7g6dCjmJTR3Mj0gg/ vvLm9Wjb7CZAx0vagDG+gN7Oolc/JeuWvoqV/0pb3x3NfDmGS1ynX79zk7Thetvb qNYTHbhHJR94wB/CCdIkvAKitBYM78JsoQBusUbT49b50xhUsLoqRfNF89u8VWfg m1pVJuxAg+hAJsSqugjcuewiS0IcNF8ny+xTD7V/r3Oc3l/0Xq2XkC9u9KC+9lZg XvyToWuutswS07zB4a8aT+1dREAO7k6ul7xVSTFqq0cubrWUdPxw7pfa+jmioRZB GEaHNGPMDvk4VJO0HIUlssDfmktcDW1L -----END CERTIFICATE-----Generated at Wed Jul 2 13:37:42 2025 by rpki-client