$ rpki-client -vvf rpki.apnic.net/member_repository/A919F207/12F2CC0AC26111EA986EEF41C4F9AE02/5zp5RARE_jTDEPeEiUxKsh6sqgQ.mft File: 5zp5RARE_jTDEPeEiUxKsh6sqgQ.mft (raw, json) Hash identifier: LtWbWlbF/462c1BmUGzVNq0u04LSp3qBFU+db/ReSH0= Subject key identifier: 56:C7:70:0A:5D:94:34:56:BE:FD:72:EC:6F:62:DD:BD:99:42:59:D2 Authority key identifier: E7:3A:79:44:04:44:FE:34:C3:10:F7:84:89:4C:4A:B2:1E:AC:AA:04 Certificate issuer: /CN=A919F207/serialNumber=E73A79440444FE34C310F784894C4AB21EACAA04 Certificate serial: 08E2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5zp5RARE_jTDEPeEiUxKsh6sqgQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919F207/12F2CC0AC26111EA986EEF41C4F9AE02/5zp5RARE_jTDEPeEiUxKsh6sqgQ.mft Manifest number: 08C1 Signing time: Sat 18 Oct 2025 21:36:14 +0000 Manifest this update: Sat 18 Oct 2025 21:36:13 +0000 Manifest next update: Sat 25 Oct 2025 21:36:13 +0000 Files and hashes: 1: 5zp5RARE_jTDEPeEiUxKsh6sqgQ.crl (hash: atGXRUbMuuWGSjqudGzEYvZ1SmWRN/mc+u9Ky69DSjQ=) 2: FE5523767A4111EB9E76B867C4F9AE02.roa (hash: CVJgpgajxXp0nfuwvvTtpQWL1YkwrnLOPz0dX0Da2i8=) 3: 9F95B0B4232811EBB98A6C1AC4F9AE02.roa (hash: GSjiN54ewIGr1b61gD43aUHOWLJAe+Bq3TA3yh28IwU=) 4: 0A88715AC2A711EAB8D9B426C4F9AE02.roa (hash: 0NHrksBzZ1sw6KKMUlk4z1DIMariid2PsdJfHN0oQM8=) 5: 0A00EE7EC2A711EAB8D9B426C4F9AE02.roa (hash: GmMG2dURnElUOnQiq0F5h7Z6METNWOktXhEJ+2ZzA/g=) 6: D661BF1821E111EB85E9C824C4F9AE02.roa (hash: XkWTXb6PHytvZUY7EAUhHe4Q0yrK6oVBVW0wC1ENUcY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919F207/12F2CC0AC26111EA986EEF41C4F9AE02/5zp5RARE_jTDEPeEiUxKsh6sqgQ.crl rsync://rpki.apnic.net/member_repository/A919F207/12F2CC0AC26111EA986EEF41C4F9AE02/5zp5RARE_jTDEPeEiUxKsh6sqgQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5zp5RARE_jTDEPeEiUxKsh6sqgQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 21:36:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2274 (0x8e2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919F207, serialNumber=E73A79440444FE34C310F784894C4AB21EACAA04 Validity Not Before: Oct 18 21:36:13 2025 GMT Not After : Oct 25 21:36:13 2025 GMT Subject: CN=68f4084d-a394 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:fd:cf:ed:5d:2f:6a:69:1d:60:4d:a0:a4:ab: 7f:56:a1:61:32:1b:22:68:92:a1:84:2f:71:91:61: c6:ca:9b:46:a0:0f:ca:b7:1e:cc:b6:8c:2b:f7:b1: 22:fc:4b:f6:69:c9:08:e1:1e:0f:c3:1b:72:39:c8: 23:2f:ed:ae:11:db:cd:52:56:9c:f3:24:c0:36:75: 1b:33:d2:49:04:10:0f:5e:84:a5:32:b4:83:5c:53: 80:0f:4d:9c:b6:53:65:7d:9e:20:53:8c:f0:f9:f8: 1a:54:bb:de:30:fc:58:77:7e:be:6e:65:4d:b4:47: 0d:f8:57:90:11:70:66:90:32:bc:9b:3a:d7:39:a6: 67:69:6c:75:25:71:27:19:f4:b5:b4:32:40:33:25: 60:4b:de:b3:8b:ae:85:d6:bd:84:4c:49:d3:38:7a: 92:98:32:5f:13:3c:c6:5f:45:9f:a8:2d:e6:5c:42: a1:e4:14:38:08:93:fb:09:3d:9f:a2:98:06:7f:30: 63:a2:c6:b6:44:b4:22:81:25:b5:c8:91:b3:72:d4: d5:a2:8b:bd:a0:d0:43:f8:da:76:bd:e8:4a:ea:ef: c1:f9:58:a8:77:ce:f4:53:7b:20:88:d8:e8:89:38: b7:b1:77:5e:56:81:b4:be:11:73:dc:6c:22:58:b5: 4c:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:C7:70:0A:5D:94:34:56:BE:FD:72:EC:6F:62:DD:BD:99:42:59:D2 X509v3 Authority Key Identifier: keyid:E7:3A:79:44:04:44:FE:34:C3:10:F7:84:89:4C:4A:B2:1E:AC:AA:04 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919F207/12F2CC0AC26111EA986EEF41C4F9AE02/5zp5RARE_jTDEPeEiUxKsh6sqgQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5zp5RARE_jTDEPeEiUxKsh6sqgQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919F207/12F2CC0AC26111EA986EEF41C4F9AE02/5zp5RARE_jTDEPeEiUxKsh6sqgQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2c:e1:4e:60:3b:2f:03:ed:e3:fa:ef:39:a3:9d:b2:62:a6:86: 61:ac:9c:7f:48:61:c7:ef:59:9a:a5:9b:63:98:bd:51:7f:52: 4f:78:d1:8e:0a:de:26:e9:73:54:d6:7b:64:ed:bc:ee:c8:17: a9:40:78:33:da:06:7a:35:86:e1:41:9d:00:25:82:81:23:96: a4:c3:4a:f1:e1:35:95:9b:40:74:56:82:39:f6:a2:d8:73:ce: 4a:f3:de:f7:53:e9:1c:67:34:0b:7e:98:dd:24:86:33:73:84: 34:8d:74:69:64:c8:4c:b6:61:54:24:b7:4e:35:dc:3f:e5:b2: c0:52:1f:e0:af:40:ee:82:97:70:52:e1:dd:a6:dd:ea:fe:5b: 6c:52:b5:c3:09:14:8f:1c:e8:46:00:bb:d6:18:5e:ed:e5:2e: f4:93:c7:48:77:0a:72:41:40:5b:6c:ca:8f:45:0b:8a:f4:92: 42:43:f8:2e:03:2e:db:4b:e6:49:44:fd:c4:74:a2:6b:7b:58: 28:ef:64:9c:8e:90:aa:f8:50:5a:d6:22:68:29:d4:aa:50:cb: a6:e9:b2:dc:89:fe:f7:7e:a7:c7:5a:e2:ad:20:98:a4:ed:5d: b5:1e:01:e5:b7:ab:12:ca:37:06:59:0d:1d:82:5f:6e:de:3c: a1:b9:7c:eb -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCOIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUYyMDcxMTAvBgNVBAUTKEU3M0E3OTQ0MDQ0NEZFMzRDMzEwRjc4NDg5NEM0QUIy MUVBQ0FBMDQwHhcNMjUxMDE4MjEzNjEzWhcNMjUxMDI1MjEzNjEzWjAYMRYwFAYD VQQDEw02OGY0MDg0ZC1hMzk0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu/3P7V0vamkdYE2gpKt/VqFhMhsiaJKhhC9xkWHGyptGoA/Ktx7Mtowr97Ei /Ev2ackI4R4PwxtyOcgjL+2uEdvNUlac8yTANnUbM9JJBBAPXoSlMrSDXFOAD02c tlNlfZ4gU4zw+fgaVLveMPxYd36+bmVNtEcN+FeQEXBmkDK8mzrXOaZnaWx1JXEn GfS1tDJAMyVgS96zi66F1r2ETEnTOHqSmDJfEzzGX0WfqC3mXEKh5BQ4CJP7CT2f opgGfzBjosa2RLQigSW1yJGzctTVoou9oNBD+Np2vehK6u/B+Viod870U3sgiNjo iTi3sXdeVoG0vhFz3GwiWLVMvwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFbHcApd lDRWvv1y7G9i3b2ZQlnSMB8GA1UdIwQYMBaAFOc6eUQERP40wxD3hIlMSrIerKoE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RjIwNy8xMkYyQ0MwQUMy NjExMUVBOTg2RUVGNDFDNEY5QUUwMi81enA1UkFSRV9qVERFUGVFaVV4S3NoNnNx Z1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzV6cDVSQVJFX2pUREVQZUVpVXhLc2g2c3FnUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 RjIwNy8xMkYyQ0MwQUMyNjExMUVBOTg2RUVGNDFDNEY5QUUwMi81enA1UkFSRV9q VERFUGVFaVV4S3NoNnNxZ1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAs4U5gOy8D7eP67zmjnbJipoZhrJx/SGHH71mapZtjmL1Rf1JPeNGO Ct4m6XNU1ntk7bzuyBepQHgz2gZ6NYbhQZ0AJYKBI5akw0rx4TWVm0B0VoI59qLY c85K8973U+kcZzQLfpjdJIYzc4Q0jXRpZMhMtmFUJLdONdw/5bLAUh/gr0Dugpdw UuHdpt3q/ltsUrXDCRSPHOhGALvWGF7t5S70k8dIdwpyQUBbbMqPRQuK9JJCQ/gu Ay7bS+ZJRP3EdKJre1go72ScjpCq+FBa1iJoKdSqUMum6bLcif73fqfHWuKtIJik 7V21HgHlt6sSyjcGWQ0dgl9u3jyhuXzr -----END CERTIFICATE-----Generated at Mon Oct 20 14:10:19 2025 by rpki-client