$ rpki-client -vvf rpki.apnic.net/member_repository/A9142E1E/1C7CDF68824211EFAD3D8181C4F9AE02/STXJCZ1YAoESreyiiRQ1_MWPuiw.mft File: STXJCZ1YAoESreyiiRQ1_MWPuiw.mft (raw, json) Hash identifier: I5Dk8qXhm23neVOyO/1zWkJ6bNM+ON89LQ2/WEXUb1U= Subject key identifier: 1D:33:C0:F1:6B:85:FD:C6:A0:CD:F9:AA:F5:F8:E2:8D:68:B7:3E:59 Authority key identifier: 49:35:C9:09:9D:58:02:81:12:AD:EC:A2:89:14:35:FC:C5:8F:BA:2C Certificate issuer: /CN=A9142E1E/serialNumber=4935C9099D58028112ADECA2891435FCC58FBA2C Certificate serial: A8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/STXJCZ1YAoESreyiiRQ1_MWPuiw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9142E1E/1C7CDF68824211EFAD3D8181C4F9AE02/STXJCZ1YAoESreyiiRQ1_MWPuiw.mft Manifest number: A8 Signing time: Sat 23 Aug 2025 06:24:00 +0000 Manifest this update: Sat 23 Aug 2025 06:23:59 +0000 Manifest next update: Sat 30 Aug 2025 06:23:59 +0000 Files and hashes: 1: STXJCZ1YAoESreyiiRQ1_MWPuiw.crl (hash: v+QBPev1RjjbXIp4OA9ffQj9EFlvazry3k5Pc0LDvJM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9142E1E/1C7CDF68824211EFAD3D8181C4F9AE02/STXJCZ1YAoESreyiiRQ1_MWPuiw.crl rsync://rpki.apnic.net/member_repository/A9142E1E/1C7CDF68824211EFAD3D8181C4F9AE02/STXJCZ1YAoESreyiiRQ1_MWPuiw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/STXJCZ1YAoESreyiiRQ1_MWPuiw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 06:23:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 168 (0xa8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9142E1E, serialNumber=4935C9099D58028112ADECA2891435FCC58FBA2C Validity Not Before: Aug 23 06:23:59 2025 GMT Not After : Aug 30 06:23:59 2025 GMT Subject: CN=68a95e7f-8333 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:56:18:dc:57:d0:30:16:b4:5d:d0:de:51:33: 67:bb:d2:6e:13:af:64:4e:9d:d8:54:8f:a7:77:6f: ca:c8:a9:ca:e9:ca:a3:09:a6:3e:7b:7d:a1:99:bd: 55:d7:26:ad:de:58:ae:82:f5:f8:b1:c7:c8:6d:17: 05:85:25:ea:65:bc:27:b5:2b:0f:9b:fe:ee:54:e0: 85:54:3d:fc:a5:ef:a8:01:d7:c6:98:40:8d:ee:a3: 37:98:37:ba:80:60:f1:8c:5f:8f:23:c2:db:4d:05: a7:c4:a2:20:a7:c9:fd:c6:b0:40:9f:c0:23:40:c6: 67:e6:ec:79:ef:4b:9e:63:22:ac:20:ca:f0:72:47: b4:a7:89:51:57:3d:c9:8a:bc:68:57:2e:92:81:8f: 97:88:f6:c7:4a:0b:fa:b6:c0:11:5a:6a:60:fd:14: 61:36:93:5e:b5:5b:81:9a:26:0b:06:bc:70:dd:03: 7a:44:cc:2b:26:5e:8e:d2:bb:5a:19:d6:6b:e2:17: 8c:9b:5e:72:1c:82:e9:9f:fc:98:26:65:15:43:f4: 02:0d:8a:33:a7:65:69:5f:e2:89:69:e6:2b:ef:61: 27:e5:d1:76:ed:d0:09:f9:e5:4b:63:e9:82:6b:5b: 05:55:dc:ea:42:5a:99:6e:b6:c0:e7:3f:2a:df:06: b3:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:33:C0:F1:6B:85:FD:C6:A0:CD:F9:AA:F5:F8:E2:8D:68:B7:3E:59 X509v3 Authority Key Identifier: keyid:49:35:C9:09:9D:58:02:81:12:AD:EC:A2:89:14:35:FC:C5:8F:BA:2C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9142E1E/1C7CDF68824211EFAD3D8181C4F9AE02/STXJCZ1YAoESreyiiRQ1_MWPuiw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/STXJCZ1YAoESreyiiRQ1_MWPuiw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9142E1E/1C7CDF68824211EFAD3D8181C4F9AE02/STXJCZ1YAoESreyiiRQ1_MWPuiw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4f:06:25:33:df:6a:0e:c4:f9:8f:84:e2:8a:7d:f6:8e:30:cf: 36:22:35:da:70:30:3c:15:63:ad:09:57:e2:e3:1d:cc:c2:82: 57:f9:1b:6b:d0:61:1e:35:83:57:3f:64:11:29:15:aa:1d:17: 69:4e:b3:79:bb:01:e8:b4:4d:37:5c:51:69:ba:fa:fd:d6:f9: af:e4:50:7d:d4:cf:52:61:ed:bf:c3:85:58:6d:74:75:d0:c0: 74:a6:36:b6:4f:4e:ba:c7:61:57:48:36:c2:ea:7f:37:60:1a: d6:67:4f:62:15:2e:6d:32:ac:10:c2:a5:7e:96:65:7b:52:9c: 86:4c:c3:b3:69:58:31:bd:ba:ba:53:ed:f3:b6:ac:4f:b7:3e: 1c:36:db:dc:ac:6f:b8:e3:08:0f:b1:8e:3f:9b:9e:e6:e9:e7: a2:9d:4e:f8:52:72:b8:75:33:5a:f6:98:2b:8c:95:ed:8f:a9: 8e:9e:ed:bb:f4:05:1c:aa:b5:a2:5a:b7:fe:a2:b5:f1:60:03: b0:a0:99:cf:44:af:ed:9b:a9:1a:b0:f3:b6:93:4b:69:ca:fe: 9b:35:0a:6f:c7:97:ea:79:43:ec:f2:5a:63:13:0b:60:d1:e0: 26:3e:ae:44:d6:4f:fd:8e:c2:83:5e:33:68:9b:e3:76:e6:f0: c1:36:87:e9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAKgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDJFMUUxMTAvBgNVBAUTKDQ5MzVDOTA5OUQ1ODAyODExMkFERUNBMjg5MTQzNUZD QzU4RkJBMkMwHhcNMjUwODIzMDYyMzU5WhcNMjUwODMwMDYyMzU5WjAYMRYwFAYD VQQDEw02OGE5NWU3Zi04MzMzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnlYY3FfQMBa0XdDeUTNnu9JuE69kTp3YVI+nd2/KyKnK6cqjCaY+e32hmb1V 1yat3liugvX4scfIbRcFhSXqZbwntSsPm/7uVOCFVD38pe+oAdfGmECN7qM3mDe6 gGDxjF+PI8LbTQWnxKIgp8n9xrBAn8AjQMZn5ux570ueYyKsIMrwcke0p4lRVz3J irxoVy6SgY+XiPbHSgv6tsARWmpg/RRhNpNetVuBmiYLBrxw3QN6RMwrJl6O0rta GdZr4heMm15yHILpn/yYJmUVQ/QCDYozp2VpX+KJaeYr72En5dF27dAJ+eVLY+mC a1sFVdzqQlqZbrbA5z8q3wazOwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFB0zwPFr hf3GoM35qvX44o1otz5ZMB8GA1UdIwQYMBaAFEk1yQmdWAKBEq3sookUNfzFj7os MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MkUxRS8xQzdDREY2ODgy NDIxMUVGQUQzRDgxODFDNEY5QUUwMi9TVFhKQ1oxWUFvRVNyZXlpaVJRMV9NV1B1 aXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1NUWEpDWjFZQW9FU3JleWlpUlExX01XUHVpdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MkUxRS8xQzdDREY2ODgyNDIxMUVGQUQzRDgxODFDNEY5QUUwMi9TVFhKQ1oxWUFv RVNyZXlpaVJRMV9NV1B1aXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBPBiUz32oOxPmPhOKKffaOMM82IjXacDA8FWOtCVfi4x3MwoJX+Rtr 0GEeNYNXP2QRKRWqHRdpTrN5uwHotE03XFFpuvr91vmv5FB91M9SYe2/w4VYbXR1 0MB0pja2T066x2FXSDbC6n83YBrWZ09iFS5tMqwQwqV+lmV7UpyGTMOzaVgxvbq6 U+3ztqxPtz4cNtvcrG+44wgPsY4/m57m6eeinU74UnK4dTNa9pgrjJXtj6mOnu27 9AUcqrWiWrf+orXxYAOwoJnPRK/tm6kasPO2k0tpyv6bNQpvx5fqeUPs8lpjEwtg 0eAmPq5E1k/9jsKDXjNom+N25vDBNofp -----END CERTIFICATE-----Generated at Sat Aug 23 16:45:58 2025 by rpki-client