$ rpki-client -vvf rpki.apnic.net/member_repository/A9182502/DA16C63A73CC11EAA3995326C4F9AE02/jDzLT_uJGJxu9bNN_aq-GAalIYo.mft File: jDzLT_uJGJxu9bNN_aq-GAalIYo.mft (raw, json) Hash identifier: AZAfUFXEnhSDCAYBTlFn0YgYvjE0WRcX52v/VBtusQM= Subject key identifier: D4:85:79:ED:FC:83:F3:CF:92:48:0A:39:3D:77:D1:88:38:E1:B1:2B Authority key identifier: 8C:3C:CB:4F:FB:89:18:9C:6E:F5:B3:4D:FD:AA:BE:18:06:A5:21:8A Certificate issuer: /CN=A9182502/serialNumber=8C3CCB4FFB89189C6EF5B34DFDAABE1806A5218A Certificate serial: 0AC0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jDzLT_uJGJxu9bNN_aq-GAalIYo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9182502/DA16C63A73CC11EAA3995326C4F9AE02/jDzLT_uJGJxu9bNN_aq-GAalIYo.mft Manifest number: 0A6D Signing time: Mon 04 Aug 2025 20:01:18 +0000 Manifest this update: Mon 04 Aug 2025 20:01:18 +0000 Manifest next update: Mon 11 Aug 2025 20:01:18 +0000 Files and hashes: 1: jDzLT_uJGJxu9bNN_aq-GAalIYo.crl (hash: Vll5FKhhg4u91/uV8yG16tucShk4vpuejIB3rG9eCPk=) 2: AAB43BD6247F11EE9CEA495CC4F9AE02.roa (hash: 9yUs2nKXPHCpJS0mrHo2Ggq8ympf47XQx/Xh9xer3UE=) 3: 0D8C94BAAB2811ECB3CF9363C4F9AE02.roa (hash: Yqq1lSs0wPeM1q20JA/ItyHg0apHcnbKTMncp1/GYDE=) 4: F3ABC6EAE91A11EF877A535AC4F9AE02.roa (hash: 068N8IEWl9KU9macKHjuazaF7bz9gnL8QBjCVoEygRE=) 5: 0A5773F6BBBC11ECB2E7FF46C4F9AE02.roa (hash: kpR0s/alzHJxJv4b8Y4mih9UUNQwPIfKSjlw3hDfeWQ=) 6: F4FCC41E648311EC88370386C4F9AE02.roa (hash: b4ZFTEPGE9Eys204eUqpF+7p489cvPKvRjplNeXr+vk=) 7: F7B8727E41CA11EC9262BD80C4F9AE02.roa (hash: 33Lt9iacdoAJt5PFtlWSBj+z9HbFVVUjpu5jsfW7jp4=) 8: 0CB23E10AB4F11EC85BF147CC4F9AE02.roa (hash: 3CHVCYcA7uR6YYnaviE1S/TMYRhsJjcvlmAm4mTQrmQ=) 9: DC512D0473CD11EA8BE69127C4F9AE02.roa (hash: ICd6VVGw9xVz+wcPqJ3UVJmdStRmzwwWVF/J8p4R2lY=) 10: 0044F6405A4211EBA729CB56C4F9AE02.roa (hash: 5cDMbBqP2e/j21s9fqpqtIuoXCOWr6gs9WfTIXKzVRM=) 11: 26400C8EC97611EFB28BD766C4F9AE02.roa (hash: UrtD2u9UWUKzFTykNRG+n6MNvw96LFxtDU8P+JeQejM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9182502/DA16C63A73CC11EAA3995326C4F9AE02/jDzLT_uJGJxu9bNN_aq-GAalIYo.crl rsync://rpki.apnic.net/member_repository/A9182502/DA16C63A73CC11EAA3995326C4F9AE02/jDzLT_uJGJxu9bNN_aq-GAalIYo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jDzLT_uJGJxu9bNN_aq-GAalIYo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 11 Aug 2025 20:01:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2752 (0xac0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9182502, serialNumber=8C3CCB4FFB89189C6EF5B34DFDAABE1806A5218A Validity Not Before: Aug 4 20:01:18 2025 GMT Not After : Aug 11 20:01:18 2025 GMT Subject: CN=6891118e-bad7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:d7:09:3e:6b:36:85:e4:78:90:7c:49:76:2e: b6:b7:73:4d:f1:ea:50:1e:c0:00:81:a9:71:ec:93: 55:eb:fd:75:9b:8e:35:c3:e1:4e:dc:0c:07:c8:21: 64:00:70:12:1c:99:f9:7b:af:d3:2c:06:b9:2e:18: 04:bd:22:b7:32:d3:19:77:b1:48:53:54:db:85:78: 70:ea:02:d1:ee:82:3d:78:c1:7a:d5:5d:79:8c:17: 0c:c1:e4:44:43:5a:f7:35:91:5f:e4:bb:5a:da:14: 17:1a:de:a3:af:c9:07:cf:e2:ba:c3:96:b4:d6:1a: 18:ca:5b:b2:34:7b:60:57:de:4e:df:80:f1:c9:b4: 52:3d:80:43:d4:5e:82:51:fa:22:6b:3c:43:f2:02: 6c:13:34:b5:69:e3:6e:42:ee:11:6e:e8:ef:eb:da: d4:e1:d2:ef:42:52:09:d0:5e:58:62:31:ae:6b:05: 64:fc:b7:35:bb:f4:0e:ab:e7:6c:ad:ff:0e:d7:24: 5b:c9:49:28:81:68:fe:99:be:4a:dc:8d:1c:64:6a: f9:a0:ff:8e:f0:ed:54:67:e1:a2:44:9e:8c:2a:35: e5:58:94:65:3d:41:73:37:7d:97:a3:9e:f3:54:15: 3c:51:c9:82:e1:98:b6:87:cb:f4:eb:9d:d2:bb:b2: f5:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:85:79:ED:FC:83:F3:CF:92:48:0A:39:3D:77:D1:88:38:E1:B1:2B X509v3 Authority Key Identifier: keyid:8C:3C:CB:4F:FB:89:18:9C:6E:F5:B3:4D:FD:AA:BE:18:06:A5:21:8A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9182502/DA16C63A73CC11EAA3995326C4F9AE02/jDzLT_uJGJxu9bNN_aq-GAalIYo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jDzLT_uJGJxu9bNN_aq-GAalIYo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9182502/DA16C63A73CC11EAA3995326C4F9AE02/jDzLT_uJGJxu9bNN_aq-GAalIYo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 43:8d:ef:03:ff:61:4a:07:d0:6f:19:2a:2f:64:f8:fa:04:08: fc:91:95:0a:59:6d:75:4a:6c:fb:ec:e8:11:0b:58:9d:d3:c4: 9b:ba:50:02:97:5f:38:fb:4c:d8:b9:f3:02:b8:25:f3:25:31: b3:86:54:5d:c0:7a:0b:88:5b:ba:6d:8e:b4:c8:81:49:95:ef: e6:ff:a6:00:04:a1:02:ef:9d:cb:3d:2f:00:df:4e:9c:11:8d: 0e:ca:ae:27:2e:c8:9b:b0:6e:85:ad:7d:54:d6:12:af:ac:62: 19:d3:b2:62:ca:df:31:f9:3a:54:91:e8:b8:92:dc:3c:7f:93: 72:f5:57:bb:01:a7:32:39:14:35:55:09:80:83:8e:36:74:ea: e3:9e:25:8d:e6:8a:29:51:0c:07:28:c5:07:02:2d:13:22:4d: b1:3e:4c:e0:cd:18:10:29:4d:7a:ac:19:6a:69:c2:a3:78:8f: 54:8c:ce:bf:3f:25:de:1c:c3:af:3b:b6:46:48:00:cf:5c:a2: cf:4f:04:3f:ed:67:f7:86:8a:26:1d:dc:be:22:83:14:e2:c5: aa:7e:4d:23:f0:62:b9:f4:71:e1:5a:10:e1:5e:65:79:de:9f: ce:fb:71:ce:a3:f1:52:34:e6:7c:b4:20:45:a3:e3:18:3a:e4: e6:f9:70:bb -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCsAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODI1MDIxMTAvBgNVBAUTKDhDM0NDQjRGRkI4OTE4OUM2RUY1QjM0REZEQUFCRTE4 MDZBNTIxOEEwHhcNMjUwODA0MjAwMTE4WhcNMjUwODExMjAwMTE4WjAYMRYwFAYD VQQDEw02ODkxMTE4ZS1iYWQ3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtdcJPms2heR4kHxJdi62t3NN8epQHsAAgalx7JNV6/11m441w+FO3AwHyCFk AHASHJn5e6/TLAa5LhgEvSK3MtMZd7FIU1TbhXhw6gLR7oI9eMF61V15jBcMweRE Q1r3NZFf5Lta2hQXGt6jr8kHz+K6w5a01hoYyluyNHtgV95O34DxybRSPYBD1F6C UfoiazxD8gJsEzS1aeNuQu4Rbujv69rU4dLvQlIJ0F5YYjGuawVk/Lc1u/QOq+ds rf8O1yRbyUkogWj+mb5K3I0cZGr5oP+O8O1UZ+GiRJ6MKjXlWJRlPUFzN32Xo57z VBU8UcmC4Zi2h8v0653Su7L1FwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNSFee38 g/PPkkgKOT130Yg44bErMB8GA1UdIwQYMBaAFIw8y0/7iRicbvWzTf2qvhgGpSGK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MjUwMi9EQTE2QzYzQTcz Q0MxMUVBQTM5OTUzMjZDNEY5QUUwMi9qRHpMVF91SkdKeHU5Yk5OX2FxLUdBYWxJ WW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2pEekxUX3VKR0p4dTliTk5fYXEtR0FhbElZby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 MjUwMi9EQTE2QzYzQTczQ0MxMUVBQTM5OTUzMjZDNEY5QUUwMi9qRHpMVF91SkdK eHU5Yk5OX2FxLUdBYWxJWW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBDje8D/2FKB9BvGSovZPj6BAj8kZUKWW11Smz77OgRC1id08SbulAC l184+0zYufMCuCXzJTGzhlRdwHoLiFu6bY60yIFJle/m/6YABKEC753LPS8A306c EY0Oyq4nLsibsG6FrX1U1hKvrGIZ07Jiyt8x+TpUkei4ktw8f5Ny9Ve7AacyORQ1 VQmAg442dOrjniWN5oopUQwHKMUHAi0TIk2xPkzgzRgQKU16rBlqacKjeI9UjM6/ PyXeHMOvO7ZGSADPXKLPTwQ/7Wf3hoomHdy+IoMU4sWqfk0j8GK59HHhWhDhXmV5 3p/O+3HOo/FSNOZ8tCBFo+MYOuTm+XC7 -----END CERTIFICATE-----Generated at Wed Aug 6 05:25:19 2025 by rpki-client