$ rpki-client -vvf rpki.apnic.net/member_repository/A917A66F/8FCC9D28C6F911EE97E6FB1DC4F9AE02/siw9CrzTkZSGo-YejXiJI5Ir9qU.mft File: siw9CrzTkZSGo-YejXiJI5Ir9qU.mft (raw, json) Hash identifier: 2NlRKRdRWvDfgiqZQKGy3ziZ3PQwy2WuHonWqBctw9A= Subject key identifier: EF:95:47:72:7E:CB:F8:CE:6B:C0:0F:30:EB:B5:1E:06:F8:1C:CD:A7 Authority key identifier: B2:2C:3D:0A:BC:D3:91:94:86:A3:E6:1E:8D:78:89:23:92:2B:F6:A5 Certificate issuer: /CN=A917A66F/serialNumber=B22C3D0ABCD3919486A3E61E8D788923922BF6A5 Certificate serial: 0147 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/siw9CrzTkZSGo-YejXiJI5Ir9qU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917A66F/8FCC9D28C6F911EE97E6FB1DC4F9AE02/siw9CrzTkZSGo-YejXiJI5Ir9qU.mft Manifest number: 0128 Signing time: Thu 03 Jul 2025 05:13:57 +0000 Manifest this update: Thu 03 Jul 2025 05:13:57 +0000 Manifest next update: Thu 10 Jul 2025 05:13:57 +0000 Files and hashes: 1: siw9CrzTkZSGo-YejXiJI5Ir9qU.crl (hash: 4PG8rhNcr01s3GLpKw9awUI61nk+QfUlg4EPA652GV0=) 2: A0BD00DEF5B311EFA334BB67C4F9AE02.roa (hash: VGbwSs+xYuuT82QPTEDjBRASIfWEGELF9LE6WDBK6Cw=) 3: B4B6C2B0C1AA11EF83A31D6CC4F9AE02.roa (hash: bw0f6KbJYjRey2+KDVpK9dBW3Yh7Jdgva8k4Bt7aCcM=) 4: 4C7C5ECCE1B211EE84F03918C4F9AE02.roa (hash: LTeECQk5/azIOJTf8rGaT2gWz1Gmd2inlmhftO85Egc=) 5: BB982DDC211611F08D31C34DC4F9AE02.roa (hash: FkwQRUxW28jIhJPhgvAtX7RxgLtIHLVcqsk+XhOm1NE=) 6: E26269722E3811EFA4AF2445C4F9AE02.roa (hash: stQvqSgEe9eoYY5+iLzps6D0J/Yk9AXd8PNpZXOA3CY=) 7: BB17221E211611F08D31C34DC4F9AE02.roa (hash: fycljHXNnk59uPrb51pHFnfOpO9Hxutgas1w6IAJ3gA=) 8: 555E0D90B71F11EFBBE56410C4F9AE02.roa (hash: Yun2AD2EJLYSRV9yxmCnTJUpxZFk9/O+PcxovQCtz2I=) 9: 6E1519E8E1B211EEB4706E18C4F9AE02.roa (hash: xaEZeRSS7SPLQpFTKRrqHdI+Z44FtJElJm/n+VPX6m4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917A66F/8FCC9D28C6F911EE97E6FB1DC4F9AE02/siw9CrzTkZSGo-YejXiJI5Ir9qU.crl rsync://rpki.apnic.net/member_repository/A917A66F/8FCC9D28C6F911EE97E6FB1DC4F9AE02/siw9CrzTkZSGo-YejXiJI5Ir9qU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/siw9CrzTkZSGo-YejXiJI5Ir9qU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 327 (0x147) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917A66F, serialNumber=B22C3D0ABCD3919486A3E61E8D788923922BF6A5 Validity Not Before: Jul 3 05:13:57 2025 GMT Not After : Jul 10 05:13:57 2025 GMT Subject: CN=68661195-3522 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:23:40:a8:18:3e:b1:da:b4:8c:74:4c:d0:47: c6:b5:9c:72:ff:3f:c8:63:a0:e3:a9:74:05:97:49: 03:d8:d5:58:ba:a3:92:c8:05:b6:dd:64:61:ef:4a: f3:95:c7:bc:45:83:67:fa:2a:ea:59:6f:11:2e:65: 52:2c:79:48:54:18:73:72:d3:73:30:4b:8e:23:6b: 03:93:d1:f4:af:ce:13:85:43:fc:8e:83:71:4f:d3: c3:35:0f:de:ff:de:d6:92:41:fd:51:c3:48:b8:60: 5c:92:18:95:00:74:a1:f6:8b:ae:b9:de:bf:1f:4c: 5c:7a:bf:f4:0d:b4:b8:f5:6c:95:87:b5:50:aa:39: c7:1f:ef:ac:72:09:58:ad:8e:61:40:c7:41:b9:13: f1:b3:0c:09:01:f2:e0:83:5a:e3:e0:9a:34:cc:40: 99:ff:e8:14:61:a4:96:17:03:7d:80:8a:bd:69:d3: 40:c0:c5:80:e1:89:ef:64:45:f6:c4:6b:e1:ad:52: e3:53:53:94:ec:28:77:09:ac:5b:a9:ec:fd:b3:66: 49:6f:fa:a8:b2:ff:d9:8e:34:1d:6d:2e:af:01:ad: aa:5c:a4:f1:8e:19:d6:07:76:74:e9:c3:a1:1a:99: a1:97:ac:96:ab:e9:41:ff:97:8e:68:62:0a:a9:9e: 47:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:95:47:72:7E:CB:F8:CE:6B:C0:0F:30:EB:B5:1E:06:F8:1C:CD:A7 X509v3 Authority Key Identifier: keyid:B2:2C:3D:0A:BC:D3:91:94:86:A3:E6:1E:8D:78:89:23:92:2B:F6:A5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917A66F/8FCC9D28C6F911EE97E6FB1DC4F9AE02/siw9CrzTkZSGo-YejXiJI5Ir9qU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/siw9CrzTkZSGo-YejXiJI5Ir9qU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917A66F/8FCC9D28C6F911EE97E6FB1DC4F9AE02/siw9CrzTkZSGo-YejXiJI5Ir9qU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 77:af:e6:08:60:0c:d1:95:59:5f:48:63:86:73:09:c0:d8:e7: b4:32:43:fc:f8:c0:36:e1:04:15:97:7b:88:97:4c:aa:0a:51: 96:22:9a:dc:c7:a9:2e:14:f9:dd:eb:aa:a9:a6:16:9c:4f:c5: 0c:ef:44:39:dd:67:24:48:1a:d4:c6:28:8d:ed:85:4c:3a:8a: 8e:cf:91:06:b2:30:1a:b8:b6:9c:fd:c8:d2:1c:fc:64:91:2c: a3:d9:db:d5:c2:c1:e9:90:cb:c7:c6:c0:7a:26:4d:70:b9:a6: 7c:95:62:80:eb:ca:d1:4a:45:10:2f:49:a9:05:48:cf:d2:59: 09:49:50:57:29:8a:29:00:60:1e:ac:52:44:0b:11:87:a4:95: 76:d1:21:ef:25:f2:6b:eb:16:dd:0a:d6:11:55:e2:83:23:98: 21:a0:5e:33:f2:38:35:67:fe:7a:0f:2f:43:7d:30:a0:76:f4: 86:f0:27:c7:99:31:df:b0:10:fa:58:b2:90:d8:71:a5:68:56: 95:81:b0:25:2c:26:1f:a2:c5:4e:b7:53:8d:53:5f:38:11:e0: b2:81:12:d8:04:87:6e:bd:37:aa:94:13:4f:ee:29:1a:1a:27: 76:4c:2e:a5:c1:93:f9:13:51:c6:0c:74:41:45:bc:fd:6d:13: 64:07:5a:47 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAUcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0E2NkYxMTAvBgNVBAUTKEIyMkMzRDBBQkNEMzkxOTQ4NkEzRTYxRThENzg4OTIz OTIyQkY2QTUwHhcNMjUwNzAzMDUxMzU3WhcNMjUwNzEwMDUxMzU3WjAYMRYwFAYD VQQDEw02ODY2MTE5NS0zNTIyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtCNAqBg+sdq0jHRM0EfGtZxy/z/IY6DjqXQFl0kD2NVYuqOSyAW23WRh70rz lce8RYNn+irqWW8RLmVSLHlIVBhzctNzMEuOI2sDk9H0r84ThUP8joNxT9PDNQ/e /97WkkH9UcNIuGBckhiVAHSh9ouuud6/H0xcer/0DbS49WyVh7VQqjnHH++scglY rY5hQMdBuRPxswwJAfLgg1rj4Jo0zECZ/+gUYaSWFwN9gIq9adNAwMWA4YnvZEX2 xGvhrVLjU1OU7Ch3Caxbqez9s2ZJb/qosv/ZjjQdbS6vAa2qXKTxjhnWB3Z06cOh Gpmhl6yWq+lB/5eOaGIKqZ5HXQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFO+VR3J+ y/jOa8APMOu1Hgb4HM2nMB8GA1UdIwQYMBaAFLIsPQq805GUhqPmHo14iSOSK/al MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QTY2Ri84RkNDOUQyOEM2 RjkxMUVFOTdFNkZCMURDNEY5QUUwMi9zaXc5Q3J6VGtaU0dvLVllalhpSkk1SXI5 cVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3NpdzlDcnpUa1pTR28tWWVqWGlKSTVJcjlxVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QTY2Ri84RkNDOUQyOEM2RjkxMUVFOTdFNkZCMURDNEY5QUUwMi9zaXc5Q3J6VGta U0dvLVllalhpSkk1SXI5cVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB3r+YIYAzRlVlfSGOGcwnA2Oe0MkP8+MA24QQVl3uIl0yqClGWIprc x6kuFPnd66qpphacT8UM70Q53WckSBrUxiiN7YVMOoqOz5EGsjAauLac/cjSHPxk kSyj2dvVwsHpkMvHxsB6Jk1wuaZ8lWKA68rRSkUQL0mpBUjP0lkJSVBXKYopAGAe rFJECxGHpJV20SHvJfJr6xbdCtYRVeKDI5ghoF4z8jg1Z/56Dy9DfTCgdvSG8CfH mTHfsBD6WLKQ2HGlaFaVgbAlLCYfosVOt1ONU184EeCygRLYBIduvTeqlBNP7ika Gid2TC6lwZP5E1HGDHRBRbz9bRNkB1pH -----END CERTIFICATE-----Generated at Thu Jul 3 13:35:58 2025 by rpki-client