$ rpki-client -vvf rpki.apnic.net/member_repository/A918127C/E697112A06AD11EB9821057FC4F9AE02/j5QiUrfUBOM9ubHjVOCRA6rFAYQ.mft File: j5QiUrfUBOM9ubHjVOCRA6rFAYQ.mft (raw, json) Hash identifier: O4sWhgahR+GSOJ69uU4C+oUV2WqAScAZMMdgG2G1B8c= Subject key identifier: AD:2C:55:90:DD:15:15:2C:3E:9F:67:36:BF:65:6D:CE:FB:86:4D:F5 Authority key identifier: 8F:94:22:52:B7:D4:04:E3:3D:B9:B1:E3:54:E0:91:03:AA:C5:01:84 Certificate issuer: /CN=A918127C/serialNumber=8F942252B7D404E33DB9B1E354E09103AAC50184 Certificate serial: 07D8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/j5QiUrfUBOM9ubHjVOCRA6rFAYQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918127C/E697112A06AD11EB9821057FC4F9AE02/j5QiUrfUBOM9ubHjVOCRA6rFAYQ.mft Manifest number: 07CD Signing time: Wed 20 Aug 2025 21:14:28 +0000 Manifest this update: Wed 20 Aug 2025 21:14:27 +0000 Manifest next update: Wed 27 Aug 2025 21:14:27 +0000 Files and hashes: 1: j5QiUrfUBOM9ubHjVOCRA6rFAYQ.crl (hash: idkDYTVH+Z18/ofIRTt898AAXMpa/WhyrDH7BdQBe6s=) 2: 2C60C8AAE01111EEA6583A7DC4F9AE02.roa (hash: kz68xtzJ9y0s90fbiNDjg+Qqa/ttWC3I+nb0qBsOygg=) 3: 706E023CD46911EE9E90881CC4F9AE02.roa (hash: cnF49uFGlBMcP7cAW0jvKCj1KnT9PcQRWPzmGKf6pzY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918127C/E697112A06AD11EB9821057FC4F9AE02/j5QiUrfUBOM9ubHjVOCRA6rFAYQ.crl rsync://rpki.apnic.net/member_repository/A918127C/E697112A06AD11EB9821057FC4F9AE02/j5QiUrfUBOM9ubHjVOCRA6rFAYQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/j5QiUrfUBOM9ubHjVOCRA6rFAYQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 Aug 2025 21:14:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2008 (0x7d8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918127C, serialNumber=8F942252B7D404E33DB9B1E354E09103AAC50184 Validity Not Before: Aug 20 21:14:27 2025 GMT Not After : Aug 27 21:14:27 2025 GMT Subject: CN=68a63ab4-cec2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:3e:1d:2f:8f:c4:de:22:71:84:2f:c7:7a:a6: dc:e2:a9:92:fa:2f:f1:22:fb:35:59:1e:72:f4:3f: d6:42:6f:9b:a3:43:cc:0e:97:d1:39:ca:c6:d9:2f: 34:8c:e4:91:75:6e:88:26:b4:a7:7a:77:1e:21:e0: 2f:0d:4b:6a:a6:04:72:88:29:18:e7:30:da:91:7e: 2f:53:18:44:fd:23:74:46:71:0b:31:83:8a:7b:d2: 86:34:f3:e4:23:05:96:56:1e:a3:a9:fc:7c:06:d4: 4d:22:01:39:5b:b9:84:c4:ae:0e:3d:fa:db:b9:23: 84:b3:21:5c:49:46:d9:25:e4:ef:08:51:5f:57:fb: e3:ff:fa:cc:18:ad:52:f8:ca:3e:6c:dd:a1:21:2f: fd:f4:50:ec:47:1a:b4:fb:e5:19:1a:b7:8a:c3:6c: c5:89:4a:02:69:aa:21:af:e3:16:40:e4:50:5c:33: 75:65:8e:32:f3:5f:2d:69:2c:ff:f6:08:41:c9:6e: f0:d9:b5:6f:a1:e3:4e:94:1a:13:c6:c7:18:1d:43: 06:bf:e5:0e:82:4c:0c:44:54:55:99:52:41:06:84: 17:fb:ab:3d:f7:f5:2c:b6:1f:ff:a5:6c:78:70:8c: 7d:cd:8b:83:ac:8b:38:2c:93:7f:a4:0f:44:fb:d8: 14:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:2C:55:90:DD:15:15:2C:3E:9F:67:36:BF:65:6D:CE:FB:86:4D:F5 X509v3 Authority Key Identifier: keyid:8F:94:22:52:B7:D4:04:E3:3D:B9:B1:E3:54:E0:91:03:AA:C5:01:84 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918127C/E697112A06AD11EB9821057FC4F9AE02/j5QiUrfUBOM9ubHjVOCRA6rFAYQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/j5QiUrfUBOM9ubHjVOCRA6rFAYQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918127C/E697112A06AD11EB9821057FC4F9AE02/j5QiUrfUBOM9ubHjVOCRA6rFAYQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 85:f5:77:b4:29:df:68:8a:1f:3f:e3:6f:f9:08:bc:ce:6a:c8: d9:1f:80:d5:37:03:89:01:7f:28:95:4a:e8:cc:93:25:40:17: 92:b2:6a:2f:94:02:b5:b2:7c:b4:95:fe:e9:24:f2:d5:0a:63: 73:8a:d1:a7:3d:91:95:c6:8d:d4:56:5f:53:ea:ab:7f:8e:29: d0:13:57:82:eb:54:05:4d:60:60:64:67:10:eb:25:5d:32:b0: e2:8e:11:03:7b:c4:e4:fa:f8:12:8b:60:6e:32:37:f7:ba:a7: 6c:4b:33:b6:e5:80:c4:39:4f:32:22:da:0b:e3:f1:42:5d:17: 7d:88:93:22:78:06:ae:36:ee:00:e8:2a:b4:27:2f:ed:93:ff: bb:ea:78:76:8f:2c:7e:a4:eb:ca:67:35:a9:77:0f:b2:0f:e8: bc:c3:67:a0:dc:5c:42:10:12:79:9e:88:69:e0:14:d0:ab:05: af:22:2e:31:2b:83:46:62:02:2e:c9:c7:0b:e9:4c:74:2d:c7: 14:bf:71:84:09:6d:9f:2a:a5:65:36:42:0f:c9:18:a5:0d:56: 90:4e:04:63:67:82:76:49:7b:56:68:53:04:f0:5a:26:62:a1: 9a:7f:c2:f9:70:bc:00:76:07:47:4b:70:e1:73:27:ec:db:42: 37:a4:2e:ca -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB9gwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODEyN0MxMTAvBgNVBAUTKDhGOTQyMjUyQjdENDA0RTMzREI5QjFFMzU0RTA5MTAz QUFDNTAxODQwHhcNMjUwODIwMjExNDI3WhcNMjUwODI3MjExNDI3WjAYMRYwFAYD VQQDEw02OGE2M2FiNC1jZWMyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1j4dL4/E3iJxhC/Heqbc4qmS+i/xIvs1WR5y9D/WQm+bo0PMDpfROcrG2S80 jOSRdW6IJrSnenceIeAvDUtqpgRyiCkY5zDakX4vUxhE/SN0RnELMYOKe9KGNPPk IwWWVh6jqfx8BtRNIgE5W7mExK4OPfrbuSOEsyFcSUbZJeTvCFFfV/vj//rMGK1S +Mo+bN2hIS/99FDsRxq0++UZGreKw2zFiUoCaaohr+MWQORQXDN1ZY4y818taSz/ 9ghByW7w2bVvoeNOlBoTxscYHUMGv+UOgkwMRFRVmVJBBoQX+6s99/Usth//pWx4 cIx9zYuDrIs4LJN/pA9E+9gUUwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFK0sVZDd FRUsPp9nNr9lbc77hk31MB8GA1UdIwQYMBaAFI+UIlK31ATjPbmx41TgkQOqxQGE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MTI3Qy9FNjk3MTEyQTA2 QUQxMUVCOTgyMTA1N0ZDNEY5QUUwMi9qNVFpVXJmVUJPTTl1YkhqVk9DUkE2ckZB WVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2o1UWlVcmZVQk9NOXViSGpWT0NSQTZyRkFZUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 MTI3Qy9FNjk3MTEyQTA2QUQxMUVCOTgyMTA1N0ZDNEY5QUUwMi9qNVFpVXJmVUJP TTl1YkhqVk9DUkE2ckZBWVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCF9Xe0Kd9oih8/42/5CLzOasjZH4DVNwOJAX8olUrozJMlQBeSsmov lAK1sny0lf7pJPLVCmNzitGnPZGVxo3UVl9T6qt/jinQE1eC61QFTWBgZGcQ6yVd MrDijhEDe8Tk+vgSi2BuMjf3uqdsSzO25YDEOU8yItoL4/FCXRd9iJMieAauNu4A 6Cq0Jy/tk/+76nh2jyx+pOvKZzWpdw+yD+i8w2eg3FxCEBJ5nohp4BTQqwWvIi4x K4NGYgIuyccL6Ux0LccUv3GECW2fKqVlNkIPyRilDVaQTgRjZ4J2SXtWaFME8Fom YqGaf8L5cLwAdgdHS3Dhcyfs20I3pC7K -----END CERTIFICATE-----Generated at Fri Aug 22 09:10:30 2025 by rpki-client