$ rpki-client -vvf rpki.apnic.net/member_repository/A919F207/12F2CC0AC26111EA986EEF41C4F9AE02/5zp5RARE_jTDEPeEiUxKsh6sqgQ.mft File: 5zp5RARE_jTDEPeEiUxKsh6sqgQ.mft (raw, json) Hash identifier: CLvPTw5Gi201azrlbOHPJWaqjAog1ecg2Sy9as0uSH0= Subject key identifier: F3:D1:B6:02:16:24:1B:28:28:17:16:7C:10:19:0B:41:7E:49:44:07 Authority key identifier: E7:3A:79:44:04:44:FE:34:C3:10:F7:84:89:4C:4A:B2:1E:AC:AA:04 Certificate issuer: /CN=A919F207/serialNumber=E73A79440444FE34C310F784894C4AB21EACAA04 Certificate serial: 08BE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5zp5RARE_jTDEPeEiUxKsh6sqgQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919F207/12F2CC0AC26111EA986EEF41C4F9AE02/5zp5RARE_jTDEPeEiUxKsh6sqgQ.mft Manifest number: 08A2 Signing time: Fri 22 Aug 2025 20:40:43 +0000 Manifest this update: Fri 22 Aug 2025 20:40:43 +0000 Manifest next update: Fri 29 Aug 2025 20:40:42 +0000 Files and hashes: 1: 5zp5RARE_jTDEPeEiUxKsh6sqgQ.crl (hash: 93bq1iaUdQxOtD1ocS6BBsCT4U5+hmQyJefDICoHv/k=) 2: FE5523767A4111EB9E76B867C4F9AE02.roa (hash: AFaeu2oL4cNNHYlnGZfZQpi+3m9ltpqYBL3jC9MdwyA=) 3: 9F95B0B4232811EBB98A6C1AC4F9AE02.roa (hash: 0po2YnmF7LUsQv1OhpceWfM4UKdi7rr2HPXL/pTpDy0=) 4: 0A88715AC2A711EAB8D9B426C4F9AE02.roa (hash: hEtTiUQOvKMaXnGzhNc1AksaZZBPn4CMUgbwNqIqaYM=) 5: 0A00EE7EC2A711EAB8D9B426C4F9AE02.roa (hash: t8BmeMehn227H8dOJrIEHLoPLZBtqxvvD/eMG/7UDR8=) 6: D661BF1821E111EB85E9C824C4F9AE02.roa (hash: VaYW5XVqy5zl5lpqnEYWS9FtMV51Bf/m8xOkw2cjG0Y=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919F207/12F2CC0AC26111EA986EEF41C4F9AE02/5zp5RARE_jTDEPeEiUxKsh6sqgQ.crl rsync://rpki.apnic.net/member_repository/A919F207/12F2CC0AC26111EA986EEF41C4F9AE02/5zp5RARE_jTDEPeEiUxKsh6sqgQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5zp5RARE_jTDEPeEiUxKsh6sqgQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 20:40:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2238 (0x8be) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919F207, serialNumber=E73A79440444FE34C310F784894C4AB21EACAA04 Validity Not Before: Aug 22 20:40:43 2025 GMT Not After : Aug 29 20:40:42 2025 GMT Subject: CN=68a8d5cb-153a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:6d:95:41:2b:5e:3c:9e:14:73:d5:f6:44:1f: 46:63:95:12:4a:98:af:15:4f:21:da:72:09:db:75: a0:30:09:8e:d4:0b:f3:50:86:7b:a9:d6:6b:ff:6b: 4a:6d:3e:6b:cf:14:e0:aa:51:37:cc:ad:49:9b:8d: f8:4d:57:a2:33:d2:0d:db:9e:b5:22:87:aa:e5:44: 47:b6:5a:91:eb:88:85:d0:1d:13:c9:c7:f9:3a:9b: 4f:d6:57:62:9f:64:37:c3:4a:e1:41:a3:24:91:7c: fb:ab:59:96:56:c1:f8:48:d6:ce:6f:2f:6d:42:19: 6b:09:de:a7:06:ac:24:63:3e:87:f9:81:bf:a9:d3: 22:e2:56:2d:b3:5d:d0:d4:a3:27:3a:26:76:4f:46: 0a:4e:5a:1b:e6:a5:e4:47:c1:9c:54:fd:c7:43:a1: d1:87:16:42:ce:62:77:ce:f9:5d:98:46:6b:09:ed: 00:c6:da:f9:13:d7:36:58:dc:49:75:a9:ca:8d:32: 7a:51:5a:4b:b6:64:a6:f0:59:63:13:53:a2:b4:45: a5:35:bd:0c:8c:75:a4:da:30:72:43:5e:ee:77:0a: d3:f4:12:01:95:90:02:4f:97:43:d1:56:2e:bd:f2: c4:b9:c0:f5:ab:d4:8d:1e:bf:17:5f:4d:16:e1:28: a5:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:D1:B6:02:16:24:1B:28:28:17:16:7C:10:19:0B:41:7E:49:44:07 X509v3 Authority Key Identifier: keyid:E7:3A:79:44:04:44:FE:34:C3:10:F7:84:89:4C:4A:B2:1E:AC:AA:04 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919F207/12F2CC0AC26111EA986EEF41C4F9AE02/5zp5RARE_jTDEPeEiUxKsh6sqgQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5zp5RARE_jTDEPeEiUxKsh6sqgQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919F207/12F2CC0AC26111EA986EEF41C4F9AE02/5zp5RARE_jTDEPeEiUxKsh6sqgQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 60:f3:4c:bf:e4:7d:50:2c:ac:17:aa:b2:c4:07:d4:74:fe:01: 1f:c7:b2:4e:0b:4b:f7:83:25:e4:32:dc:9e:81:f6:43:86:13: 3b:37:31:d4:66:fa:0d:58:85:ca:e8:b8:ac:bb:52:64:1c:43: fa:ea:c6:6f:b0:c9:b8:74:0d:0f:37:d5:9f:00:4a:15:bc:47: 45:e6:d1:a1:98:55:fd:3e:d4:19:7a:b4:68:b2:46:fc:35:19: 5a:ed:02:c5:71:0c:23:ac:bf:65:3b:96:1e:bb:cf:f2:b6:7d: 87:92:4c:dd:73:82:40:00:ca:88:ae:fd:d8:f1:97:ee:df:31: b1:8b:1a:a5:d3:f9:53:a2:ef:b3:30:92:fa:23:7f:b2:8c:79: 22:ef:dd:67:37:80:02:4a:d6:5b:fd:25:8b:29:2a:17:50:cb: 33:9e:0c:fa:d6:48:27:a0:88:16:7c:17:73:d2:7a:00:6f:25: eb:87:74:d4:5c:5a:9f:40:cc:58:6d:55:e4:0a:43:9e:a9:d7: 28:f1:96:a2:c8:f9:47:f4:9d:80:93:7d:e5:91:ae:2c:aa:55: 01:ff:a1:d6:5e:37:d5:f1:82:18:7d:f2:13:fd:e2:23:59:31: bc:a7:23:76:7e:45:63:95:1f:f7:71:49:84:9c:d8:55:e1:7b: 16:94:cb:45 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCL4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUYyMDcxMTAvBgNVBAUTKEU3M0E3OTQ0MDQ0NEZFMzRDMzEwRjc4NDg5NEM0QUIy MUVBQ0FBMDQwHhcNMjUwODIyMjA0MDQzWhcNMjUwODI5MjA0MDQyWjAYMRYwFAYD VQQDEw02OGE4ZDVjYi0xNTNhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7m2VQStePJ4Uc9X2RB9GY5USSpivFU8h2nIJ23WgMAmO1AvzUIZ7qdZr/2tK bT5rzxTgqlE3zK1Jm434TVeiM9IN2561Ioeq5URHtlqR64iF0B0Tycf5OptP1ldi n2Q3w0rhQaMkkXz7q1mWVsH4SNbOby9tQhlrCd6nBqwkYz6H+YG/qdMi4lYts13Q 1KMnOiZ2T0YKTlob5qXkR8GcVP3HQ6HRhxZCzmJ3zvldmEZrCe0Axtr5E9c2WNxJ danKjTJ6UVpLtmSm8FljE1OitEWlNb0MjHWk2jByQ17udwrT9BIBlZACT5dD0VYu vfLEucD1q9SNHr8XX00W4SiluwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPPRtgIW JBsoKBcWfBAZC0F+SUQHMB8GA1UdIwQYMBaAFOc6eUQERP40wxD3hIlMSrIerKoE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RjIwNy8xMkYyQ0MwQUMy NjExMUVBOTg2RUVGNDFDNEY5QUUwMi81enA1UkFSRV9qVERFUGVFaVV4S3NoNnNx Z1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzV6cDVSQVJFX2pUREVQZUVpVXhLc2g2c3FnUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 RjIwNy8xMkYyQ0MwQUMyNjExMUVBOTg2RUVGNDFDNEY5QUUwMi81enA1UkFSRV9q VERFUGVFaVV4S3NoNnNxZ1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBg80y/5H1QLKwXqrLEB9R0/gEfx7JOC0v3gyXkMtyegfZDhhM7NzHU ZvoNWIXK6Lisu1JkHEP66sZvsMm4dA0PN9WfAEoVvEdF5tGhmFX9PtQZerRoskb8 NRla7QLFcQwjrL9lO5Yeu8/ytn2Hkkzdc4JAAMqIrv3Y8Zfu3zGxixql0/lTou+z MJL6I3+yjHki791nN4ACStZb/SWLKSoXUMszngz61kgnoIgWfBdz0noAbyXrh3TU XFqfQMxYbVXkCkOeqdco8ZaiyPlH9J2Ak33lka4sqlUB/6HWXjfV8YIYffIT/eIj WTG8pyN2fkVjlR/3cUmEnNhV4XsWlMtF -----END CERTIFICATE-----Generated at Sun Aug 24 00:58:44 2025 by rpki-client