$ rpki-client -vvf rpki.apnic.net/member_repository/A919F207/12F2CC0AC26111EA986EEF41C4F9AE02/5zp5RARE_jTDEPeEiUxKsh6sqgQ.mft File: 5zp5RARE_jTDEPeEiUxKsh6sqgQ.mft (raw, json) Hash identifier: /4j+asnHjcHlapPlSxuvWQ3sbxZvWDrgpL/eXcVHQ78= Subject key identifier: 59:F2:DA:54:1C:E7:6E:6D:A6:66:E9:68:49:C7:FE:A6:57:41:09:CC Authority key identifier: E7:3A:79:44:04:44:FE:34:C3:10:F7:84:89:4C:4A:B2:1E:AC:AA:04 Certificate issuer: /CN=A919F207/serialNumber=E73A79440444FE34C310F784894C4AB21EACAA04 Certificate serial: 08A4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5zp5RARE_jTDEPeEiUxKsh6sqgQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919F207/12F2CC0AC26111EA986EEF41C4F9AE02/5zp5RARE_jTDEPeEiUxKsh6sqgQ.mft Manifest number: 0888 Signing time: Wed 02 Jul 2025 20:52:57 +0000 Manifest this update: Wed 02 Jul 2025 20:52:56 +0000 Manifest next update: Wed 09 Jul 2025 20:52:56 +0000 Files and hashes: 1: 5zp5RARE_jTDEPeEiUxKsh6sqgQ.crl (hash: q6D/CzWKnlDwa0FcHqrrJDKuwPiErChkdhbRJmY5aew=) 2: FE5523767A4111EB9E76B867C4F9AE02.roa (hash: AFaeu2oL4cNNHYlnGZfZQpi+3m9ltpqYBL3jC9MdwyA=) 3: 9F95B0B4232811EBB98A6C1AC4F9AE02.roa (hash: 0po2YnmF7LUsQv1OhpceWfM4UKdi7rr2HPXL/pTpDy0=) 4: 0A88715AC2A711EAB8D9B426C4F9AE02.roa (hash: hEtTiUQOvKMaXnGzhNc1AksaZZBPn4CMUgbwNqIqaYM=) 5: 0A00EE7EC2A711EAB8D9B426C4F9AE02.roa (hash: t8BmeMehn227H8dOJrIEHLoPLZBtqxvvD/eMG/7UDR8=) 6: D661BF1821E111EB85E9C824C4F9AE02.roa (hash: VaYW5XVqy5zl5lpqnEYWS9FtMV51Bf/m8xOkw2cjG0Y=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919F207/12F2CC0AC26111EA986EEF41C4F9AE02/5zp5RARE_jTDEPeEiUxKsh6sqgQ.crl rsync://rpki.apnic.net/member_repository/A919F207/12F2CC0AC26111EA986EEF41C4F9AE02/5zp5RARE_jTDEPeEiUxKsh6sqgQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5zp5RARE_jTDEPeEiUxKsh6sqgQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 20:52:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2212 (0x8a4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919F207, serialNumber=E73A79440444FE34C310F784894C4AB21EACAA04 Validity Not Before: Jul 2 20:52:56 2025 GMT Not After : Jul 9 20:52:56 2025 GMT Subject: CN=68659c28-fdc7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:04:00:5b:87:6c:d6:e0:6b:31:f1:48:95:80: e2:ae:7f:cc:30:bd:1b:5b:c1:95:89:b5:ef:8e:b2: 88:66:a4:6a:54:5e:e5:09:95:31:f4:fc:6c:24:07: f9:d3:69:59:20:36:50:9e:f4:ec:42:31:ee:97:73: 0f:6a:e6:30:b1:45:80:ca:3b:ba:3e:da:9b:37:5b: 69:c1:ac:e9:b6:b8:9b:98:7b:86:26:aa:a9:9a:d9: 01:8f:f6:de:54:b1:11:50:8c:9e:ab:ab:d2:31:72: fe:ea:05:2d:85:f6:5a:12:c9:3f:03:44:d6:01:80: e9:56:b8:e4:87:0b:58:3e:f8:0a:5c:c2:93:df:f3: e7:3e:af:ea:0f:40:84:e4:1b:0c:a7:be:64:f6:67: 0b:72:c0:6e:6e:e3:ae:e4:0a:79:c2:95:2c:80:0a: c5:ff:53:f6:24:e2:43:b7:b2:69:d5:9a:f8:4a:79: 1f:60:e4:20:b7:37:ce:f1:e5:25:f0:46:05:49:d9: 1d:c2:9a:fe:6a:29:5d:04:87:bf:ea:f8:15:4f:b0: 19:c7:64:46:07:40:e4:6b:ab:81:9a:1a:a5:7e:03: cd:ba:10:e7:ca:62:50:c9:d0:33:9d:37:cc:b8:fd: 5c:15:ee:3f:b1:4a:fe:41:d7:3f:ce:e6:38:1d:fb: 3d:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:F2:DA:54:1C:E7:6E:6D:A6:66:E9:68:49:C7:FE:A6:57:41:09:CC X509v3 Authority Key Identifier: keyid:E7:3A:79:44:04:44:FE:34:C3:10:F7:84:89:4C:4A:B2:1E:AC:AA:04 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919F207/12F2CC0AC26111EA986EEF41C4F9AE02/5zp5RARE_jTDEPeEiUxKsh6sqgQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5zp5RARE_jTDEPeEiUxKsh6sqgQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919F207/12F2CC0AC26111EA986EEF41C4F9AE02/5zp5RARE_jTDEPeEiUxKsh6sqgQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7a:31:bc:0b:b8:5a:c2:d6:4f:78:b5:7b:8a:ba:41:4a:e3:52: 8f:e1:9c:e8:7a:9d:39:d7:85:1b:7a:5e:09:99:88:43:9a:70: 41:27:eb:57:a8:ea:34:58:d8:32:01:93:f1:5f:51:9f:ee:df: c9:70:57:c3:a3:9f:bc:45:1e:40:44:e4:22:9f:07:8c:f1:d3: 8d:e5:5e:06:fb:3b:b0:dc:84:a0:14:16:51:56:14:6b:7d:12: 45:35:a6:c4:e3:60:2f:f3:e1:f8:8c:cc:5f:d2:f9:51:c1:93: 38:c6:3d:b2:5e:d3:ca:c0:97:16:f0:79:9a:ec:17:cc:a1:41: 1d:39:0c:09:28:0b:a2:8a:0b:8d:19:94:84:5c:b3:0b:2d:bb: 47:53:a3:94:4c:cc:23:8b:06:a3:d1:21:56:da:6b:62:52:12: 4a:0b:89:ff:b8:c6:81:a4:32:b9:bd:f9:ab:93:d9:13:2b:5d: 66:2f:34:57:59:a5:bd:b9:6f:be:43:dc:7d:eb:3f:ec:0f:c8: 4d:29:6d:b7:a8:45:d4:03:64:96:33:ab:31:96:d9:24:46:3b: 50:9e:37:ef:d1:75:58:21:b0:d6:73:e0:5e:58:9e:91:b1:31: 0c:4c:67:78:31:16:31:14:cf:b6:ec:ea:d5:bb:75:e9:b7:da: 24:0b:0a:81 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCKQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUYyMDcxMTAvBgNVBAUTKEU3M0E3OTQ0MDQ0NEZFMzRDMzEwRjc4NDg5NEM0QUIy MUVBQ0FBMDQwHhcNMjUwNzAyMjA1MjU2WhcNMjUwNzA5MjA1MjU2WjAYMRYwFAYD VQQDEw02ODY1OWMyOC1mZGM3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7gQAW4ds1uBrMfFIlYDirn/MML0bW8GVibXvjrKIZqRqVF7lCZUx9PxsJAf5 02lZIDZQnvTsQjHul3MPauYwsUWAyju6PtqbN1tpwazptribmHuGJqqpmtkBj/be VLERUIyeq6vSMXL+6gUthfZaEsk/A0TWAYDpVrjkhwtYPvgKXMKT3/PnPq/qD0CE 5BsMp75k9mcLcsBubuOu5Ap5wpUsgArF/1P2JOJDt7Jp1Zr4SnkfYOQgtzfO8eUl 8EYFSdkdwpr+aildBIe/6vgVT7AZx2RGB0Dka6uBmhqlfgPNuhDnymJQydAznTfM uP1cFe4/sUr+Qdc/zuY4Hfs9/QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFny2lQc 525tpmbpaEnH/qZXQQnMMB8GA1UdIwQYMBaAFOc6eUQERP40wxD3hIlMSrIerKoE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RjIwNy8xMkYyQ0MwQUMy NjExMUVBOTg2RUVGNDFDNEY5QUUwMi81enA1UkFSRV9qVERFUGVFaVV4S3NoNnNx Z1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzV6cDVSQVJFX2pUREVQZUVpVXhLc2g2c3FnUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 RjIwNy8xMkYyQ0MwQUMyNjExMUVBOTg2RUVGNDFDNEY5QUUwMi81enA1UkFSRV9q VERFUGVFaVV4S3NoNnNxZ1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB6MbwLuFrC1k94tXuKukFK41KP4Zzoep0514Ubel4JmYhDmnBBJ+tX qOo0WNgyAZPxX1Gf7t/JcFfDo5+8RR5AROQinweM8dON5V4G+zuw3ISgFBZRVhRr fRJFNabE42Av8+H4jMxf0vlRwZM4xj2yXtPKwJcW8Hma7BfMoUEdOQwJKAuiiguN GZSEXLMLLbtHU6OUTMwjiwaj0SFW2mtiUhJKC4n/uMaBpDK5vfmrk9kTK11mLzRX WaW9uW++Q9x96z/sD8hNKW23qEXUA2SWM6sxltkkRjtQnjfv0XVYIbDWc+BeWJ6R sTEMTGd4MRYxFM+27OrVu3Xpt9okCwqB -----END CERTIFICATE-----Generated at Thu Jul 3 22:14:34 2025 by rpki-client