$ rpki-client -vvf rpki.apnic.net/member_repository/A914E1F1/4FEBF24A09DA11EDA03C9817C4F9AE02/8_Jz8-_OVR7jPIRNRAqjDtoIfiw.mft File: 8_Jz8-_OVR7jPIRNRAqjDtoIfiw.mft (raw, json) Hash identifier: cxpcgkwHNsla88piGQLRelNy6HOyBrC1JOO0HYe5rK0= Subject key identifier: 19:87:7D:F5:E2:A6:02:75:FD:E2:76:05:FD:D9:A8:9C:8B:F4:8C:FA Authority key identifier: F3:F2:73:F3:EF:CE:55:1E:E3:3C:84:4D:44:0A:A3:0E:DA:08:7E:2C Certificate issuer: /CN=A914E1F1/serialNumber=F3F273F3EFCE551EE33C844D440AA30EDA087E2C Certificate serial: 02AE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8_Jz8-_OVR7jPIRNRAqjDtoIfiw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914E1F1/4FEBF24A09DA11EDA03C9817C4F9AE02/8_Jz8-_OVR7jPIRNRAqjDtoIfiw.mft Manifest number: 02A2 Signing time: Sat 19 Jul 2025 02:00:13 +0000 Manifest this update: Sat 19 Jul 2025 02:00:12 +0000 Manifest next update: Sat 26 Jul 2025 02:00:12 +0000 Files and hashes: 1: 8_Jz8-_OVR7jPIRNRAqjDtoIfiw.crl (hash: ad1TjqHo6dS9DkUO/0JfhcQM5lg/Si7WtMsdsniEFPs=) 2: 1E00C58C145C11F094FADD38C4F9AE02.roa (hash: XjpAhwEE1pSxcomjAf7JGmGOWyetZlZpCZkZjy+8eHs=) 3: 33074190145C11F0B91D7C47C4F9AE02.roa (hash: W+0s4kjB+OuXJgXiiXNsuYivZOGCT1if/fS87MXGYI0=) 4: 4192339AF6A311EFBACC274CC4F9AE02.roa (hash: iecsMWv0SpxgWtsHLyW8Kxy2wH4QvRHyfn9HSIK1Az4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914E1F1/4FEBF24A09DA11EDA03C9817C4F9AE02/8_Jz8-_OVR7jPIRNRAqjDtoIfiw.crl rsync://rpki.apnic.net/member_repository/A914E1F1/4FEBF24A09DA11EDA03C9817C4F9AE02/8_Jz8-_OVR7jPIRNRAqjDtoIfiw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8_Jz8-_OVR7jPIRNRAqjDtoIfiw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 02:00:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 686 (0x2ae) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914E1F1, serialNumber=F3F273F3EFCE551EE33C844D440AA30EDA087E2C Validity Not Before: Jul 19 02:00:12 2025 GMT Not After : Jul 26 02:00:12 2025 GMT Subject: CN=687afc2c-e271 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:98:74:cb:54:03:7f:5d:97:59:09:26:19:68: 38:8f:53:5d:53:c8:6d:77:50:52:31:01:41:d3:ea: bb:0f:7c:96:25:2d:5b:36:94:6a:f7:5e:43:aa:24: 9e:44:f0:f6:ac:70:3a:28:8f:77:35:08:bd:04:0e: 0a:2d:87:ee:50:40:d8:ff:bf:10:14:64:83:44:1a: 44:84:32:b6:e5:ed:95:39:ef:b7:65:7c:dc:ef:71: 51:61:dc:cc:af:f0:1d:05:fa:c8:0f:c9:af:31:ea: 67:c5:bb:a4:64:26:2e:88:59:65:31:fd:ee:9b:b5: e2:b6:a3:4f:cf:bf:fd:be:4e:19:d5:fa:b2:d3:64: 94:1b:09:20:32:45:22:92:7b:97:88:d0:31:a5:77: 48:ca:d3:2e:58:e5:ec:1e:df:f0:54:fe:02:d8:37: 97:21:c8:0a:36:43:8e:8e:1c:e0:c6:8c:da:bd:82: eb:c5:75:67:39:08:ad:23:d1:bf:0d:5f:9a:41:71: 47:b0:9f:79:26:61:3b:d4:68:35:b4:ed:39:a5:1c: 30:84:93:44:79:83:f2:30:68:43:ae:3f:1d:8d:3a: cd:57:2c:d2:bf:f3:7f:e3:df:31:f2:be:ee:7a:31: 8a:d0:0a:6d:19:83:76:f2:cc:ba:d2:77:57:8b:11: 74:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:87:7D:F5:E2:A6:02:75:FD:E2:76:05:FD:D9:A8:9C:8B:F4:8C:FA X509v3 Authority Key Identifier: keyid:F3:F2:73:F3:EF:CE:55:1E:E3:3C:84:4D:44:0A:A3:0E:DA:08:7E:2C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914E1F1/4FEBF24A09DA11EDA03C9817C4F9AE02/8_Jz8-_OVR7jPIRNRAqjDtoIfiw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8_Jz8-_OVR7jPIRNRAqjDtoIfiw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914E1F1/4FEBF24A09DA11EDA03C9817C4F9AE02/8_Jz8-_OVR7jPIRNRAqjDtoIfiw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7a:7c:12:1d:42:c5:80:c5:04:cc:b0:02:ac:68:c5:96:07:31: ca:5b:2a:15:0a:dd:20:8a:03:7c:70:22:f9:23:ca:e1:2e:93: 92:e2:02:7c:76:d6:d7:7b:e4:71:5f:7b:e9:e2:89:f2:c6:38: ff:e5:4f:53:de:53:d7:13:92:33:7f:05:35:d2:e2:24:52:92: 6f:14:b1:5b:68:70:6c:57:55:41:72:52:18:e6:5b:7c:d9:15: 2c:3e:98:9a:31:f6:13:c7:96:71:41:10:1d:58:be:62:20:7d: dc:ec:93:38:b5:81:8f:ba:12:7b:23:b1:65:9d:8f:c2:a4:04: 54:e6:6d:7e:d4:c3:14:36:c7:40:4a:c9:03:5e:c4:a9:71:dc: a1:fe:ab:a7:06:9d:29:86:a7:ba:f6:75:f3:1c:c1:e9:56:63: 46:56:56:57:50:a9:8f:95:dc:99:bf:31:51:86:9b:9f:a1:74: e5:6d:a8:39:d1:1d:21:e5:26:63:1d:bf:90:ec:45:88:37:02: e4:3f:37:7c:95:50:fc:63:50:03:08:e1:5e:27:7b:ac:9e:3c: 1a:bf:48:2e:2b:77:ae:4e:3b:7e:9d:2b:0f:a0:be:54:ce:4c: 0f:5d:12:0e:40:5c:66:af:3a:20:81:2a:c3:cd:33:d4:67:12: bb:80:fa:16 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAq4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEUxRjExMTAvBgNVBAUTKEYzRjI3M0YzRUZDRTU1MUVFMzNDODQ0RDQ0MEFBMzBF REEwODdFMkMwHhcNMjUwNzE5MDIwMDEyWhcNMjUwNzI2MDIwMDEyWjAYMRYwFAYD VQQDEw02ODdhZmMyYy1lMjcxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA45h0y1QDf12XWQkmGWg4j1NdU8htd1BSMQFB0+q7D3yWJS1bNpRq915DqiSe RPD2rHA6KI93NQi9BA4KLYfuUEDY/78QFGSDRBpEhDK25e2VOe+3ZXzc73FRYdzM r/AdBfrID8mvMepnxbukZCYuiFllMf3um7XitqNPz7/9vk4Z1fqy02SUGwkgMkUi knuXiNAxpXdIytMuWOXsHt/wVP4C2DeXIcgKNkOOjhzgxozavYLrxXVnOQitI9G/ DV+aQXFHsJ95JmE71Gg1tO05pRwwhJNEeYPyMGhDrj8djTrNVyzSv/N/498x8r7u ejGK0AptGYN28sy60ndXixF0CwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBmHffXi pgJ1/eJ2Bf3ZqJyL9Iz6MB8GA1UdIwQYMBaAFPPyc/PvzlUe4zyETUQKow7aCH4s MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RTFGMS80RkVCRjI0QTA5 REExMUVEQTAzQzk4MTdDNEY5QUUwMi84X0p6OC1fT1ZSN2pQSVJOUkFxakR0b0lm aXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhfSno4LV9PVlI3alBJUk5SQXFqRHRvSWZpdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 RTFGMS80RkVCRjI0QTA5REExMUVEQTAzQzk4MTdDNEY5QUUwMi84X0p6OC1fT1ZS N2pQSVJOUkFxakR0b0lmaXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB6fBIdQsWAxQTMsAKsaMWWBzHKWyoVCt0gigN8cCL5I8rhLpOS4gJ8 dtbXe+RxX3vp4onyxjj/5U9T3lPXE5IzfwU10uIkUpJvFLFbaHBsV1VBclIY5lt8 2RUsPpiaMfYTx5ZxQRAdWL5iIH3c7JM4tYGPuhJ7I7FlnY/CpARU5m1+1MMUNsdA SskDXsSpcdyh/qunBp0phqe69nXzHMHpVmNGVlZXUKmPldyZvzFRhpufoXTlbag5 0R0h5SZjHb+Q7EWINwLkPzd8lVD8Y1ADCOFeJ3usnjwav0guK3euTjt+nSsPoL5U zkwPXRIOQFxmrzoggSrDzTPUZxK7gPoW -----END CERTIFICATE-----Generated at Sun Jul 20 07:56:48 2025 by rpki-client