$ rpki-client -vvf rpki.apnic.net/member_repository/A914DC55/CCBE1BA6176211EC81A0D11EC4F9AE02/84WJ-EZKpakWmfgIZJ7FNoMbAEo.mft File: 84WJ-EZKpakWmfgIZJ7FNoMbAEo.mft (raw, json) Hash identifier: eY2R88V47PbJj0lBFXLhDvdwtTGfY37SwQdG92OEY5w= Subject key identifier: BB:DE:0D:76:FE:4F:35:F6:07:E0:94:91:6F:F7:D1:5F:8D:3A:CF:72 Authority key identifier: F3:85:89:F8:46:4A:A5:A9:16:99:F8:08:64:9E:C5:36:83:1B:00:4A Certificate issuer: /CN=A914DC55/serialNumber=F38589F8464AA5A91699F808649EC536831B004A Certificate serial: 0528 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/84WJ-EZKpakWmfgIZJ7FNoMbAEo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914DC55/CCBE1BA6176211EC81A0D11EC4F9AE02/84WJ-EZKpakWmfgIZJ7FNoMbAEo.mft Manifest number: 0518 Signing time: Thu 31 Jul 2025 00:00:33 +0000 Manifest this update: Thu 31 Jul 2025 00:00:32 +0000 Manifest next update: Thu 07 Aug 2025 00:00:32 +0000 Files and hashes: 1: 84WJ-EZKpakWmfgIZJ7FNoMbAEo.crl (hash: Y38FpLfVNMbXfie3yXBsuJZF3gtryBUZvBn7SivGsdk=) 2: 4F1B63805A0A11ECAEA43C36C4F9AE02.roa (hash: u5W11dVoRw3toGEIJUHd861OTITZBp585qmJEJVveAI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914DC55/CCBE1BA6176211EC81A0D11EC4F9AE02/84WJ-EZKpakWmfgIZJ7FNoMbAEo.crl rsync://rpki.apnic.net/member_repository/A914DC55/CCBE1BA6176211EC81A0D11EC4F9AE02/84WJ-EZKpakWmfgIZJ7FNoMbAEo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/84WJ-EZKpakWmfgIZJ7FNoMbAEo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 07 Aug 2025 00:00:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1320 (0x528) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914DC55, serialNumber=F38589F8464AA5A91699F808649EC536831B004A Validity Not Before: Jul 31 00:00:32 2025 GMT Not After : Aug 7 00:00:32 2025 GMT Subject: CN=688ab220-577d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:c8:25:9c:9f:a5:3d:11:b0:50:28:c3:e6:48: 3a:cf:50:8f:b8:63:b7:7b:28:61:d2:c9:7a:d0:9b: 6c:b9:15:d8:4b:93:f6:e0:3c:b7:86:10:c2:d1:34: 06:54:48:b2:32:78:f7:c5:9d:6b:37:b9:25:c7:bf: 3a:db:b3:85:04:9e:38:08:29:f3:40:18:1d:9a:08: 89:02:2c:1e:7e:d0:60:60:aa:db:16:01:9b:e9:0a: 60:32:b2:44:fb:c1:36:80:57:f1:46:c6:d2:1d:95: 29:39:4d:2a:21:cb:cf:e8:fa:0d:03:48:5d:e4:05: ec:53:b2:cb:f2:f2:fa:87:81:dc:a6:a9:37:19:13: 99:d2:5f:f0:c3:98:a0:78:90:1f:32:c0:9c:6e:2b: b3:89:33:e6:a5:56:c8:90:af:28:5d:cd:19:da:9e: a6:c3:a5:73:98:61:1f:fc:0e:27:e2:1d:d0:80:b3: 64:01:e8:ab:81:b7:2c:96:51:58:a2:0d:17:94:e2: e1:db:27:2c:fe:b9:f6:f4:22:60:a8:14:e7:a0:f5: 7c:71:e3:85:11:c5:d8:ec:07:04:4a:c8:15:9f:8c: b5:45:77:3a:bd:6a:88:aa:a7:e9:cb:10:e6:84:a0: 74:31:7f:84:82:74:ad:b3:e6:75:e5:3b:03:55:9f: 4d:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:DE:0D:76:FE:4F:35:F6:07:E0:94:91:6F:F7:D1:5F:8D:3A:CF:72 X509v3 Authority Key Identifier: keyid:F3:85:89:F8:46:4A:A5:A9:16:99:F8:08:64:9E:C5:36:83:1B:00:4A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914DC55/CCBE1BA6176211EC81A0D11EC4F9AE02/84WJ-EZKpakWmfgIZJ7FNoMbAEo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/84WJ-EZKpakWmfgIZJ7FNoMbAEo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914DC55/CCBE1BA6176211EC81A0D11EC4F9AE02/84WJ-EZKpakWmfgIZJ7FNoMbAEo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9c:39:df:33:db:21:b3:68:6a:de:03:d3:9e:22:16:9f:73:44: 9d:b6:d8:81:b9:00:c0:5d:e7:aa:c7:7e:ad:a8:f1:53:08:12: 60:68:85:ad:01:62:a7:45:9f:32:67:a8:63:98:69:58:89:a4: dc:1d:a1:d1:ea:c2:5c:fa:11:fa:40:0b:1d:61:65:56:6e:24: fe:2b:08:63:bc:93:8a:89:4b:59:4c:e9:08:54:9f:00:3d:8d: 5c:23:c5:f0:92:a3:a1:85:90:f1:e6:dd:1a:47:ca:e9:2f:e6: 1a:f9:da:76:da:61:40:c6:3a:87:3b:28:e1:91:28:3a:47:36: 9a:b8:cb:6f:e4:79:11:66:f2:df:ce:a3:01:3c:48:ac:90:54: f3:4e:a7:14:cd:78:b5:eb:e6:c2:2e:ca:73:49:60:a1:8e:4c: 6f:4f:15:88:86:22:90:5f:06:c6:91:5f:8a:5f:00:21:e8:dd: d8:1e:56:9e:75:c9:bf:b5:3a:66:5d:40:64:10:14:52:3b:49: 12:19:94:ba:c9:0a:9c:19:9d:19:5f:5c:71:65:db:82:86:17: b8:03:c8:bc:e8:bd:98:23:71:d5:02:ee:97:6d:bd:70:90:6f: de:61:34:7d:72:e2:de:9f:f4:a8:1e:1f:63:57:c0:da:f3:fd: b1:8c:e4:3a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBSgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NERDNTUxMTAvBgNVBAUTKEYzODU4OUY4NDY0QUE1QTkxNjk5RjgwODY0OUVDNTM2 ODMxQjAwNEEwHhcNMjUwNzMxMDAwMDMyWhcNMjUwODA3MDAwMDMyWjAYMRYwFAYD VQQDEw02ODhhYjIyMC01NzdkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAncglnJ+lPRGwUCjD5kg6z1CPuGO3eyhh0sl60JtsuRXYS5P24Dy3hhDC0TQG VEiyMnj3xZ1rN7klx78627OFBJ44CCnzQBgdmgiJAiweftBgYKrbFgGb6QpgMrJE +8E2gFfxRsbSHZUpOU0qIcvP6PoNA0hd5AXsU7LL8vL6h4Hcpqk3GROZ0l/ww5ig eJAfMsCcbiuziTPmpVbIkK8oXc0Z2p6mw6VzmGEf/A4n4h3QgLNkAeirgbcsllFY og0XlOLh2ycs/rn29CJgqBTnoPV8ceOFEcXY7AcESsgVn4y1RXc6vWqIqqfpyxDm hKB0MX+EgnSts+Z15TsDVZ9N2QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLveDXb+ TzX2B+CUkW/30V+NOs9yMB8GA1UdIwQYMBaAFPOFifhGSqWpFpn4CGSexTaDGwBK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0REM1NS9DQ0JFMUJBNjE3 NjIxMUVDODFBMEQxMUVDNEY5QUUwMi84NFdKLUVaS3Bha1dtZmdJWko3Rk5vTWJB RW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzg0V0otRVpLcGFrV21mZ0laSjdGTm9NYkFFby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 REM1NS9DQ0JFMUJBNjE3NjIxMUVDODFBMEQxMUVDNEY5QUUwMi84NFdKLUVaS3Bh a1dtZmdJWko3Rk5vTWJBRW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCcOd8z2yGzaGreA9OeIhafc0SdttiBuQDAXeeqx36tqPFTCBJgaIWt AWKnRZ8yZ6hjmGlYiaTcHaHR6sJc+hH6QAsdYWVWbiT+KwhjvJOKiUtZTOkIVJ8A PY1cI8XwkqOhhZDx5t0aR8rpL+Ya+dp22mFAxjqHOyjhkSg6RzaauMtv5HkRZvLf zqMBPEiskFTzTqcUzXi16+bCLspzSWChjkxvTxWIhiKQXwbGkV+KXwAh6N3YHlae dcm/tTpmXUBkEBRSO0kSGZS6yQqcGZ0ZX1xxZduChhe4A8i86L2YI3HVAu6Xbb1w kG/eYTR9cuLen/SoHh9jV8Da8/2xjOQ6 -----END CERTIFICATE-----Generated at Thu Jul 31 03:16:55 2025 by rpki-client