$ rpki-client -vvf rpki.apnic.net/member_repository/A919F207/12F2CC0AC26111EA986EEF41C4F9AE02/5zp5RARE_jTDEPeEiUxKsh6sqgQ.mft File: 5zp5RARE_jTDEPeEiUxKsh6sqgQ.mft (raw, json) Hash identifier: 9CTP7ozLT0uTjK5FIcCBD7G1U0URlBfhhMAQhcC4fRM= Subject key identifier: DF:07:2E:CC:8A:6F:66:84:29:D1:BC:DB:B6:6B:A5:27:5F:5A:F0:74 Authority key identifier: E7:3A:79:44:04:44:FE:34:C3:10:F7:84:89:4C:4A:B2:1E:AC:AA:04 Certificate issuer: /CN=A919F207/serialNumber=E73A79440444FE34C310F784894C4AB21EACAA04 Certificate serial: 08CD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5zp5RARE_jTDEPeEiUxKsh6sqgQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919F207/12F2CC0AC26111EA986EEF41C4F9AE02/5zp5RARE_jTDEPeEiUxKsh6sqgQ.mft Manifest number: 08AC Signing time: Sat 06 Sep 2025 20:44:15 +0000 Manifest this update: Sat 06 Sep 2025 20:44:15 +0000 Manifest next update: Sat 13 Sep 2025 20:44:15 +0000 Files and hashes: 1: 5zp5RARE_jTDEPeEiUxKsh6sqgQ.crl (hash: /j/5IQ7GEWA2ah1bR9WKaIKGibdiLI8t3RG9K8wsyxw=) 2: FE5523767A4111EB9E76B867C4F9AE02.roa (hash: CVJgpgajxXp0nfuwvvTtpQWL1YkwrnLOPz0dX0Da2i8=) 3: 9F95B0B4232811EBB98A6C1AC4F9AE02.roa (hash: GSjiN54ewIGr1b61gD43aUHOWLJAe+Bq3TA3yh28IwU=) 4: 0A88715AC2A711EAB8D9B426C4F9AE02.roa (hash: 0NHrksBzZ1sw6KKMUlk4z1DIMariid2PsdJfHN0oQM8=) 5: 0A00EE7EC2A711EAB8D9B426C4F9AE02.roa (hash: GmMG2dURnElUOnQiq0F5h7Z6METNWOktXhEJ+2ZzA/g=) 6: D661BF1821E111EB85E9C824C4F9AE02.roa (hash: XkWTXb6PHytvZUY7EAUhHe4Q0yrK6oVBVW0wC1ENUcY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919F207/12F2CC0AC26111EA986EEF41C4F9AE02/5zp5RARE_jTDEPeEiUxKsh6sqgQ.crl rsync://rpki.apnic.net/member_repository/A919F207/12F2CC0AC26111EA986EEF41C4F9AE02/5zp5RARE_jTDEPeEiUxKsh6sqgQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5zp5RARE_jTDEPeEiUxKsh6sqgQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Sep 2025 20:44:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2253 (0x8cd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919F207, serialNumber=E73A79440444FE34C310F784894C4AB21EACAA04 Validity Not Before: Sep 6 20:44:15 2025 GMT Not After : Sep 13 20:44:15 2025 GMT Subject: CN=68bc9d1f-1b6a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:5f:75:87:f3:65:65:52:b4:b2:2b:a3:e2:35: bd:2d:19:56:99:98:ef:8c:3e:12:70:96:c3:8f:c2: 94:e7:9d:b4:27:6f:e4:b4:2e:3f:94:9a:af:54:95: 8e:e0:1b:8b:db:56:3e:ae:9c:6b:32:0d:20:8a:ea: b6:4b:3f:e2:d7:f1:d4:42:0f:5c:93:60:d1:3d:e6: 91:7c:ac:7a:31:62:0a:1c:c1:a7:57:eb:96:80:19: 4e:e8:80:07:04:c5:e6:51:55:49:be:10:df:21:ba: cc:ab:ea:d5:fe:1d:50:a8:c3:36:11:4f:01:ac:26: a8:eb:4c:0a:fb:bf:ad:10:5f:f3:86:7c:2a:b7:e3: 44:e3:65:40:86:2b:76:c5:2f:e4:f1:5d:89:95:18: 79:0c:91:64:3a:07:2b:ea:a7:e3:4d:13:a0:22:36: 35:e1:73:4c:55:b2:4e:4c:49:48:fa:8c:f4:d4:48: ab:5e:19:c8:23:4c:3f:b5:3a:f8:db:b6:61:a3:b0: 81:b7:0d:59:46:72:e4:1f:b8:2b:b8:34:07:42:36: 70:c1:33:ca:e3:db:5b:82:f7:10:c2:cc:70:0e:b6: 39:69:af:91:2e:fb:e2:f4:0d:68:85:46:c6:5f:01: dc:b7:f1:92:89:de:af:82:aa:a1:df:4a:62:3a:71: 0c:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:07:2E:CC:8A:6F:66:84:29:D1:BC:DB:B6:6B:A5:27:5F:5A:F0:74 X509v3 Authority Key Identifier: keyid:E7:3A:79:44:04:44:FE:34:C3:10:F7:84:89:4C:4A:B2:1E:AC:AA:04 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919F207/12F2CC0AC26111EA986EEF41C4F9AE02/5zp5RARE_jTDEPeEiUxKsh6sqgQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5zp5RARE_jTDEPeEiUxKsh6sqgQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919F207/12F2CC0AC26111EA986EEF41C4F9AE02/5zp5RARE_jTDEPeEiUxKsh6sqgQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 92:1c:54:c2:8f:e2:b2:8b:a3:86:06:de:71:5b:ad:05:6b:53: 06:77:6f:28:40:c4:41:82:55:c2:38:66:cc:cf:73:a3:73:bd: 3b:dc:fa:e8:f1:17:17:7a:93:79:36:e7:5e:b1:ea:9c:a4:28: d0:6b:b2:42:de:61:7e:0a:38:11:c0:4b:a1:01:43:85:b9:5f: bc:69:bd:c2:6f:bd:a2:d7:a0:bb:22:5d:94:49:0a:2a:0e:34: e4:45:7c:9b:18:fe:21:2d:dc:75:52:65:88:e8:0c:41:f0:2c: 08:1f:9f:8c:62:af:0c:58:4d:3f:49:62:77:ea:98:0d:e5:a8: 81:f7:fe:5a:92:11:f8:f9:0d:1b:6c:d5:a0:fa:d1:c5:52:56: 00:e8:f0:0b:64:3d:17:36:d2:52:54:ae:f7:db:ec:31:b4:fb: c5:01:e6:c5:13:fe:10:c7:12:95:19:b7:32:9b:fd:e8:a1:b0: fb:bb:c3:28:82:40:22:23:b6:b2:de:75:57:69:17:56:22:36: 67:a7:1e:75:55:98:13:d4:3e:ba:22:37:24:ae:68:36:77:5e: 5e:16:aa:8f:b3:46:b1:bd:e9:45:12:3c:27:7d:1b:e2:f7:08: b7:70:98:80:29:06:8c:79:57:c5:27:b1:f6:12:97:37:2a:1f: 4f:fd:cd:b6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCM0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUYyMDcxMTAvBgNVBAUTKEU3M0E3OTQ0MDQ0NEZFMzRDMzEwRjc4NDg5NEM0QUIy MUVBQ0FBMDQwHhcNMjUwOTA2MjA0NDE1WhcNMjUwOTEzMjA0NDE1WjAYMRYwFAYD VQQDEw02OGJjOWQxZi0xYjZhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwV91h/NlZVK0siuj4jW9LRlWmZjvjD4ScJbDj8KU5520J2/ktC4/lJqvVJWO 4BuL21Y+rpxrMg0giuq2Sz/i1/HUQg9ck2DRPeaRfKx6MWIKHMGnV+uWgBlO6IAH BMXmUVVJvhDfIbrMq+rV/h1QqMM2EU8BrCao60wK+7+tEF/zhnwqt+NE42VAhit2 xS/k8V2JlRh5DJFkOgcr6qfjTROgIjY14XNMVbJOTElI+oz01EirXhnII0w/tTr4 27Zho7CBtw1ZRnLkH7gruDQHQjZwwTPK49tbgvcQwsxwDrY5aa+RLvvi9A1ohUbG XwHct/GSid6vgqqh30piOnEMMwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFN8HLsyK b2aEKdG827ZrpSdfWvB0MB8GA1UdIwQYMBaAFOc6eUQERP40wxD3hIlMSrIerKoE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RjIwNy8xMkYyQ0MwQUMy NjExMUVBOTg2RUVGNDFDNEY5QUUwMi81enA1UkFSRV9qVERFUGVFaVV4S3NoNnNx Z1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzV6cDVSQVJFX2pUREVQZUVpVXhLc2g2c3FnUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 RjIwNy8xMkYyQ0MwQUMyNjExMUVBOTg2RUVGNDFDNEY5QUUwMi81enA1UkFSRV9q VERFUGVFaVV4S3NoNnNxZ1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCSHFTCj+Kyi6OGBt5xW60Fa1MGd28oQMRBglXCOGbMz3Ojc7073Pro 8RcXepN5NudeseqcpCjQa7JC3mF+CjgRwEuhAUOFuV+8ab3Cb72i16C7Il2USQoq DjTkRXybGP4hLdx1UmWI6AxB8CwIH5+MYq8MWE0/SWJ36pgN5aiB9/5akhH4+Q0b bNWg+tHFUlYA6PALZD0XNtJSVK732+wxtPvFAebFE/4QxxKVGbcym/3oobD7u8Mo gkAiI7ay3nVXaRdWIjZnpx51VZgT1D66Ijckrmg2d15eFqqPs0axvelFEjwnfRvi 9wi3cJiAKQaMeVfFJ7H2Epc3Kh9P/c22 -----END CERTIFICATE-----Generated at Mon Sep 8 08:39:57 2025 by rpki-client