$ rpki-client -vvf rpki.apnic.net/member_repository/A919F207/12F2CC0AC26111EA986EEF41C4F9AE02/5zp5RARE_jTDEPeEiUxKsh6sqgQ.mft File: 5zp5RARE_jTDEPeEiUxKsh6sqgQ.mft (raw, json) Hash identifier: K9PysonDqouaZs5hyJqZgkz0yo96IKBYKSD63h0gfRc= Subject key identifier: A1:AB:0F:F9:1E:88:C2:03:1A:A2:EA:10:C6:DE:4D:84:3A:C8:50:C2 Authority key identifier: E7:3A:79:44:04:44:FE:34:C3:10:F7:84:89:4C:4A:B2:1E:AC:AA:04 Certificate issuer: /CN=A919F207/serialNumber=E73A79440444FE34C310F784894C4AB21EACAA04 Certificate serial: 08AC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5zp5RARE_jTDEPeEiUxKsh6sqgQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919F207/12F2CC0AC26111EA986EEF41C4F9AE02/5zp5RARE_jTDEPeEiUxKsh6sqgQ.mft Manifest number: 0890 Signing time: Fri 18 Jul 2025 20:49:41 +0000 Manifest this update: Fri 18 Jul 2025 20:49:41 +0000 Manifest next update: Fri 25 Jul 2025 20:49:41 +0000 Files and hashes: 1: 5zp5RARE_jTDEPeEiUxKsh6sqgQ.crl (hash: zoXk09Subls7/I4xp8fDQmlCodRT+ml2xcqb0BkzcUE=) 2: FE5523767A4111EB9E76B867C4F9AE02.roa (hash: AFaeu2oL4cNNHYlnGZfZQpi+3m9ltpqYBL3jC9MdwyA=) 3: 9F95B0B4232811EBB98A6C1AC4F9AE02.roa (hash: 0po2YnmF7LUsQv1OhpceWfM4UKdi7rr2HPXL/pTpDy0=) 4: 0A88715AC2A711EAB8D9B426C4F9AE02.roa (hash: hEtTiUQOvKMaXnGzhNc1AksaZZBPn4CMUgbwNqIqaYM=) 5: 0A00EE7EC2A711EAB8D9B426C4F9AE02.roa (hash: t8BmeMehn227H8dOJrIEHLoPLZBtqxvvD/eMG/7UDR8=) 6: D661BF1821E111EB85E9C824C4F9AE02.roa (hash: VaYW5XVqy5zl5lpqnEYWS9FtMV51Bf/m8xOkw2cjG0Y=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919F207/12F2CC0AC26111EA986EEF41C4F9AE02/5zp5RARE_jTDEPeEiUxKsh6sqgQ.crl rsync://rpki.apnic.net/member_repository/A919F207/12F2CC0AC26111EA986EEF41C4F9AE02/5zp5RARE_jTDEPeEiUxKsh6sqgQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5zp5RARE_jTDEPeEiUxKsh6sqgQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Jul 2025 20:49:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2220 (0x8ac) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919F207, serialNumber=E73A79440444FE34C310F784894C4AB21EACAA04 Validity Not Before: Jul 18 20:49:41 2025 GMT Not After : Jul 25 20:49:41 2025 GMT Subject: CN=687ab365-29b7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:11:9c:68:1f:f7:80:2a:bc:f3:dc:b3:86:41: f8:7f:4c:a4:b7:1c:9b:40:7c:50:bb:25:73:1e:22: 81:6e:4b:23:ce:5c:4d:31:9c:a6:b8:fa:62:55:b0: 6d:52:1e:7f:70:95:1a:b9:d2:99:89:47:fc:b1:36: 91:72:f2:58:eb:bf:fd:54:fd:06:3d:42:42:4d:22: 58:43:4a:be:17:5b:48:47:fb:ee:ac:92:e6:ac:51: ad:d2:25:20:83:9e:81:47:01:0e:08:d1:04:00:27: af:32:06:f0:86:1f:72:61:e2:21:eb:b8:ee:75:8f: 8b:0c:aa:c9:d8:2e:00:70:b0:00:d4:3e:bd:15:64: 4d:4b:fa:d1:c9:d4:b0:86:14:86:be:fa:94:28:8d: a8:cf:34:de:7c:f5:38:0e:12:de:4a:5c:36:fc:ea: 79:49:1e:66:fd:fb:04:82:76:e7:d8:b3:c7:8f:23: d6:ec:81:2a:cb:6c:5c:2c:a6:d6:c0:dd:2d:d6:e2: 8e:c2:2f:2d:77:22:99:52:5c:24:77:a2:62:95:2b: 6e:75:23:44:5b:db:e7:cc:08:4f:0a:0c:05:57:1b: 87:fc:02:79:6e:23:b2:e7:39:80:99:01:6a:ef:f1: 55:41:91:bd:44:0c:70:3b:a2:40:74:98:4e:3c:e8: 6e:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:AB:0F:F9:1E:88:C2:03:1A:A2:EA:10:C6:DE:4D:84:3A:C8:50:C2 X509v3 Authority Key Identifier: keyid:E7:3A:79:44:04:44:FE:34:C3:10:F7:84:89:4C:4A:B2:1E:AC:AA:04 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919F207/12F2CC0AC26111EA986EEF41C4F9AE02/5zp5RARE_jTDEPeEiUxKsh6sqgQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5zp5RARE_jTDEPeEiUxKsh6sqgQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919F207/12F2CC0AC26111EA986EEF41C4F9AE02/5zp5RARE_jTDEPeEiUxKsh6sqgQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a5:f8:50:a2:58:86:dd:e6:4e:c4:43:a4:db:67:ad:c4:96:ac: 51:4c:4d:c5:1b:6d:8a:05:d1:71:3e:c2:e6:3a:39:03:5b:dc: 04:50:c6:94:3b:43:16:0f:02:fb:ab:87:44:0e:0f:79:13:66: a6:22:5a:8b:1c:1c:7a:b7:52:4a:5e:84:a1:8e:a4:5c:37:f8: 04:fd:63:73:07:ed:da:75:fb:2c:b3:4b:f9:48:fe:d4:d2:8f: ae:17:18:3b:ee:f6:fd:cd:8e:1d:93:10:70:6d:a9:8f:2a:55: c7:b2:05:b4:dd:62:43:94:31:57:92:f8:e3:ac:9e:d6:5d:66: 44:b9:89:5a:74:bc:d5:51:05:41:30:fe:70:a9:15:71:e0:0b: 4b:12:03:f4:53:3a:b2:61:f8:c4:a9:41:13:f7:fa:59:da:3a: 71:e2:9c:85:51:15:9e:0e:94:5d:9a:a5:e4:f9:77:41:dd:fe: a8:fd:7f:29:98:cd:a6:48:db:df:44:ae:8d:e5:74:d1:32:b5: c0:e7:33:bb:11:57:bd:ab:28:54:a4:1c:fb:84:b1:a6:92:fe: be:ff:db:29:26:06:40:05:61:7b:a6:f9:e0:9f:2f:6a:7c:cb: 29:2a:c1:17:10:cf:ba:e9:e5:52:94:70:1f:4e:6a:e3:c1:98: dc:9b:13:85 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCKwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUYyMDcxMTAvBgNVBAUTKEU3M0E3OTQ0MDQ0NEZFMzRDMzEwRjc4NDg5NEM0QUIy MUVBQ0FBMDQwHhcNMjUwNzE4MjA0OTQxWhcNMjUwNzI1MjA0OTQxWjAYMRYwFAYD VQQDEw02ODdhYjM2NS0yOWI3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnxGcaB/3gCq889yzhkH4f0yktxybQHxQuyVzHiKBbksjzlxNMZymuPpiVbBt Uh5/cJUaudKZiUf8sTaRcvJY67/9VP0GPUJCTSJYQ0q+F1tIR/vurJLmrFGt0iUg g56BRwEOCNEEACevMgbwhh9yYeIh67judY+LDKrJ2C4AcLAA1D69FWRNS/rRydSw hhSGvvqUKI2ozzTefPU4DhLeSlw2/Op5SR5m/fsEgnbn2LPHjyPW7IEqy2xcLKbW wN0t1uKOwi8tdyKZUlwkd6JilStudSNEW9vnzAhPCgwFVxuH/AJ5biOy5zmAmQFq 7/FVQZG9RAxwO6JAdJhOPOhu3wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKGrD/ke iMIDGqLqEMbeTYQ6yFDCMB8GA1UdIwQYMBaAFOc6eUQERP40wxD3hIlMSrIerKoE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RjIwNy8xMkYyQ0MwQUMy NjExMUVBOTg2RUVGNDFDNEY5QUUwMi81enA1UkFSRV9qVERFUGVFaVV4S3NoNnNx Z1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzV6cDVSQVJFX2pUREVQZUVpVXhLc2g2c3FnUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 RjIwNy8xMkYyQ0MwQUMyNjExMUVBOTg2RUVGNDFDNEY5QUUwMi81enA1UkFSRV9q VERFUGVFaVV4S3NoNnNxZ1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCl+FCiWIbd5k7EQ6TbZ63ElqxRTE3FG22KBdFxPsLmOjkDW9wEUMaU O0MWDwL7q4dEDg95E2amIlqLHBx6t1JKXoShjqRcN/gE/WNzB+3adfsss0v5SP7U 0o+uFxg77vb9zY4dkxBwbamPKlXHsgW03WJDlDFXkvjjrJ7WXWZEuYladLzVUQVB MP5wqRVx4AtLEgP0UzqyYfjEqUET9/pZ2jpx4pyFURWeDpRdmqXk+XdB3f6o/X8p mM2mSNvfRK6N5XTRMrXA5zO7EVe9qyhUpBz7hLGmkv6+/9spJgZABWF7pvngny9q fMspKsEXEM+66eVSlHAfTmrjwZjcmxOF -----END CERTIFICATE-----Generated at Sun Jul 20 16:43:35 2025 by rpki-client