$ rpki-client -vvf rpki.apnic.net/member_repository/A919BE9A/8FA1F56EB85E11ED8E6F4213C4F9AE02/p5uCiHAxRBmQsY0aBfnicefnuOY.mft File: p5uCiHAxRBmQsY0aBfnicefnuOY.mft (raw, json) Hash identifier: o6bm4t79oe0KnjvpdOhouJwuf+BF0EBUhCwcSLV5ky4= Subject key identifier: DC:7C:37:81:71:17:19:CC:7E:C0:6E:32:08:5E:9A:E5:49:9D:4C:5F Authority key identifier: A7:9B:82:88:70:31:44:19:90:B1:8D:1A:05:F9:E2:71:E7:E7:B8:E6 Certificate issuer: /CN=A919BE9A/serialNumber=A79B82887031441990B18D1A05F9E271E7E7B8E6 Certificate serial: 01F3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p5uCiHAxRBmQsY0aBfnicefnuOY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919BE9A/8FA1F56EB85E11ED8E6F4213C4F9AE02/p5uCiHAxRBmQsY0aBfnicefnuOY.mft Manifest number: 01CF Signing time: Thu 03 Jul 2025 03:10:13 +0000 Manifest this update: Thu 03 Jul 2025 03:10:13 +0000 Manifest next update: Thu 10 Jul 2025 03:10:13 +0000 Files and hashes: 1: p5uCiHAxRBmQsY0aBfnicefnuOY.crl (hash: MWHjOQBQq3IbD1GqCy8oKCrjVzS/kcupu2c5AnaBl8s=) 2: 9CA607DA3C8411F0BDA85229C4F9AE02.roa (hash: feDA48MiXXJctKT3eZvp/d1nnsUlAcYOaj9wGQ7J2ec=) 3: 0900F7CA7AE611EF8CE1F784C4F9AE02.roa (hash: qqBFkEJNiWCb2cCDSNMAUnOoY6M5apd24HqIJ4T1rMk=) 4: 4DD66E3C347F11EFB73F4074C4F9AE02.roa (hash: UdSNL+M5bhbjwAkTjKkIwiTAoopRDA15sbVDq+xd/Mo=) 5: C8E6CF687AE811EFA0337A38C4F9AE02.roa (hash: UYQj695a2OmzGWejM8q0zjVy0UfE2w5YDuGLHHyUkKE=) 6: 610B51267AE711EFACC0CA34C4F9AE02.roa (hash: 0osuZSPKtRbkTEe2rjpJx0+V/IP2FJnFJRtn1br7+ws=) 7: 5D463936C87611EDAC86AA74C4F9AE02.roa (hash: wWTFLfND3EADAPn3/677/3gOc92RXHanLyJ2ZQO9E5Y=) 8: E98F15362B3811EF926F1555C4F9AE02.roa (hash: huhcBlB6kInuEcW0eyepHJy04Qrnm/zwE5F/lbsIg4U=) 9: 34D5ED1210F511EEBCE2A81EC4F9AE02.roa (hash: K7ih6dZEP7tPsDE029yQg9J9G2EoOjYxEh23BSXqdx4=) 10: 9F4683A0B86211EDB9EDAD2CC4F9AE02.roa (hash: xEdof+9upKEPJ5nZ8zJI+L9OfNurTTcojEoj01Jch2s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919BE9A/8FA1F56EB85E11ED8E6F4213C4F9AE02/p5uCiHAxRBmQsY0aBfnicefnuOY.crl rsync://rpki.apnic.net/member_repository/A919BE9A/8FA1F56EB85E11ED8E6F4213C4F9AE02/p5uCiHAxRBmQsY0aBfnicefnuOY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p5uCiHAxRBmQsY0aBfnicefnuOY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:10:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 499 (0x1f3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919BE9A, serialNumber=A79B82887031441990B18D1A05F9E271E7E7B8E6 Validity Not Before: Jul 3 03:10:13 2025 GMT Not After : Jul 10 03:10:13 2025 GMT Subject: CN=6865f495-ae75 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:fc:1c:2f:45:ee:90:80:45:06:ff:b9:10:6c: 9a:bb:ff:12:9f:88:88:33:84:60:3f:b2:7a:bc:31: 99:56:92:b9:34:49:b4:24:98:a3:27:76:f9:dc:3a: 96:a9:30:87:55:34:f8:d2:8a:95:7b:37:33:e0:2b: ea:9c:61:02:1e:b0:17:93:0f:a0:40:09:da:2f:fe: ea:60:34:b7:01:ce:ac:59:92:a8:e6:c0:36:a0:66: 8c:7c:72:cc:42:11:42:73:46:db:33:d9:f8:b0:72: 04:cb:83:14:8c:c4:f8:d3:2d:d4:d0:33:44:72:07: 22:95:1c:98:2e:2e:94:db:4f:df:83:df:6a:2a:72: 91:41:1f:ea:36:4b:15:b5:b5:df:04:a7:24:80:ed: f6:29:5f:46:79:27:35:04:31:59:11:26:7f:b3:c2: cb:ba:65:df:60:f5:3d:cf:67:d0:fd:c0:96:13:bc: 53:c8:0d:91:09:43:3f:14:a8:cc:52:42:9c:42:9e: e7:40:02:a4:82:df:c7:b1:88:50:a4:5a:6d:60:82: e3:dd:56:6f:69:09:bc:14:9c:94:51:b5:f3:a3:6a: ff:2f:18:7e:85:4e:8b:52:a9:c2:aa:40:f0:28:7c: 88:55:93:37:93:60:72:b1:c0:22:85:22:e2:d1:52: ce:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:7C:37:81:71:17:19:CC:7E:C0:6E:32:08:5E:9A:E5:49:9D:4C:5F X509v3 Authority Key Identifier: keyid:A7:9B:82:88:70:31:44:19:90:B1:8D:1A:05:F9:E2:71:E7:E7:B8:E6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919BE9A/8FA1F56EB85E11ED8E6F4213C4F9AE02/p5uCiHAxRBmQsY0aBfnicefnuOY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p5uCiHAxRBmQsY0aBfnicefnuOY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919BE9A/8FA1F56EB85E11ED8E6F4213C4F9AE02/p5uCiHAxRBmQsY0aBfnicefnuOY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption d0:3c:40:a1:2e:d0:50:55:cf:d2:3f:c9:fe:1c:dd:4c:eb:c5: 88:b6:7e:26:5a:c3:7e:3a:14:2c:ae:4a:81:d9:2d:82:7c:87: 48:5b:85:61:a5:35:cb:75:f0:73:d8:db:05:c4:38:3d:d4:5a: b4:ee:6e:18:dc:97:c4:2a:28:f7:68:d7:bc:77:d9:28:6c:fb: 1e:f8:29:1c:8f:f7:39:b7:99:fb:e6:71:4d:1f:d7:22:d7:91: ad:55:07:ac:30:42:2c:5a:37:11:07:8c:41:7d:f3:ad:03:91: 22:f7:0a:3c:e7:25:c3:a5:bf:4f:31:46:3c:80:b2:b9:e6:4c: df:f0:81:e9:06:c0:f8:5a:2a:80:81:00:da:60:ca:d7:d7:12: 94:9f:94:0f:2a:66:10:97:3f:da:ad:7d:0e:3d:88:cb:30:7b: 16:2b:1c:91:28:29:9e:fb:c1:7b:13:cc:a6:7a:d5:8d:b9:0f: 4e:49:80:28:e7:7d:a7:7e:40:92:75:95:d4:59:be:85:df:d5: bb:c1:6c:68:0f:ee:4e:49:5d:2d:fc:50:d8:87:25:ad:2d:5a: ed:e5:44:b4:d0:e7:a7:02:12:c8:7a:2a:18:e5:cf:f9:10:32: 76:fe:74:6b:c4:25:c3:d4:3b:eb:44:08:e1:ba:f9:a6:70:a4: 0a:28:49:64 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAfMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUJFOUExMTAvBgNVBAUTKEE3OUI4Mjg4NzAzMTQ0MTk5MEIxOEQxQTA1RjlFMjcx RTdFN0I4RTYwHhcNMjUwNzAzMDMxMDEzWhcNMjUwNzEwMDMxMDEzWjAYMRYwFAYD VQQDEw02ODY1ZjQ5NS1hZTc1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApfwcL0XukIBFBv+5EGyau/8Sn4iIM4RgP7J6vDGZVpK5NEm0JJijJ3b53DqW qTCHVTT40oqVezcz4CvqnGECHrAXkw+gQAnaL/7qYDS3Ac6sWZKo5sA2oGaMfHLM QhFCc0bbM9n4sHIEy4MUjMT40y3U0DNEcgcilRyYLi6U20/fg99qKnKRQR/qNksV tbXfBKckgO32KV9GeSc1BDFZESZ/s8LLumXfYPU9z2fQ/cCWE7xTyA2RCUM/FKjM UkKcQp7nQAKkgt/HsYhQpFptYILj3VZvaQm8FJyUUbXzo2r/Lxh+hU6LUqnCqkDw KHyIVZM3k2ByscAihSLi0VLOLwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNx8N4Fx FxnMfsBuMghemuVJnUxfMB8GA1UdIwQYMBaAFKebgohwMUQZkLGNGgX54nHn57jm MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5QkU5QS84RkExRjU2RUI4 NUUxMUVEOEU2RjQyMTNDNEY5QUUwMi9wNXVDaUhBeFJCbVFzWTBhQmZuaWNlZm51 T1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3A1dUNpSEF4UkJtUXNZMGFCZm5pY2VmbnVPWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 QkU5QS84RkExRjU2RUI4NUUxMUVEOEU2RjQyMTNDNEY5QUUwMi9wNXVDaUhBeFJC bVFzWTBhQmZuaWNlZm51T1kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDQPEChLtBQVc/SP8n+HN1M68WItn4mWsN+OhQsrkqB2S2CfIdIW4Vh pTXLdfBz2NsFxDg91Fq07m4Y3JfEKij3aNe8d9kobPse+Ckcj/c5t5n75nFNH9ci 15GtVQesMEIsWjcRB4xBffOtA5Ei9wo85yXDpb9PMUY8gLK55kzf8IHpBsD4WiqA gQDaYMrX1xKUn5QPKmYQlz/arX0OPYjLMHsWKxyRKCme+8F7E8ymetWNuQ9OSYAo 532nfkCSdZXUWb6F39W7wWxoD+5OSV0t/FDYhyWtLVrt5US00OenAhLIeioY5c/5 EDJ2/nRrxCXD1DvrRAjhuvmmcKQKKElk -----END CERTIFICATE-----Generated at Thu Jul 3 06:11:59 2025 by rpki-client