$ rpki-client -vvf rpki.apnic.net/member_repository/A918D1A4/1EB9E3A6C6C011EC96C0DD23C4F9AE02/stutBbafR5fu9x8D1lq-rdKJLIA.mft File: stutBbafR5fu9x8D1lq-rdKJLIA.mft (raw, json) Hash identifier: ALD35p9ug3ctOx25v80A7CbTmmXZllVXebmUgUDKdjA= Subject key identifier: 38:7B:D3:34:78:F4:84:F9:FC:6C:F6:A4:43:F9:FA:BE:17:93:17:15 Authority key identifier: B2:DB:AD:05:B6:9F:47:97:EE:F7:1F:03:D6:5A:BE:AD:D2:89:2C:80 Certificate issuer: /CN=A918D1A4/serialNumber=B2DBAD05B69F4797EEF71F03D65ABEADD2892C80 Certificate serial: 0355 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/stutBbafR5fu9x8D1lq-rdKJLIA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918D1A4/1EB9E3A6C6C011EC96C0DD23C4F9AE02/stutBbafR5fu9x8D1lq-rdKJLIA.mft Manifest number: 034F Signing time: Tue 05 Aug 2025 01:35:31 +0000 Manifest this update: Tue 05 Aug 2025 01:35:30 +0000 Manifest next update: Tue 12 Aug 2025 01:35:30 +0000 Files and hashes: 1: stutBbafR5fu9x8D1lq-rdKJLIA.crl (hash: ubE6S2odt0NSc2uv6Bl+cwxYcd7Cx7Zpg8sKFCnZKfs=) 2: 73AF033CF4DA11EFA82A4918C4F9AE02.roa (hash: lFHgwGcK464NIp9pshKfZeaAiyOHIGVlEkjl7qvlWTc=) 3: 897E89B4D56B11EFBE0EB053C4F9AE02.roa (hash: Z+nT9PoRzTDCsdNOaBI1d+PkQHDUifBiuJhBYkV5ETQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918D1A4/1EB9E3A6C6C011EC96C0DD23C4F9AE02/stutBbafR5fu9x8D1lq-rdKJLIA.crl rsync://rpki.apnic.net/member_repository/A918D1A4/1EB9E3A6C6C011EC96C0DD23C4F9AE02/stutBbafR5fu9x8D1lq-rdKJLIA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/stutBbafR5fu9x8D1lq-rdKJLIA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 12 Aug 2025 01:35:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 853 (0x355) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918D1A4, serialNumber=B2DBAD05B69F4797EEF71F03D65ABEADD2892C80 Validity Not Before: Aug 5 01:35:30 2025 GMT Not After : Aug 12 01:35:30 2025 GMT Subject: CN=68915fe3-3da9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:80:ba:88:0f:d7:ad:45:05:81:12:70:c1:a6: ef:63:dc:18:9d:7d:29:8a:53:18:13:5c:99:2a:a6: 4a:86:35:53:3c:98:31:15:df:ae:d8:cc:38:f3:0e: 43:a2:08:b6:39:fa:3e:7d:39:ad:6e:5d:9a:32:fc: b0:2a:d6:f4:37:3b:fd:41:f2:62:fe:82:f9:55:95: 97:a8:5d:ac:46:dc:e9:ca:69:8e:c1:89:d5:ab:3c: cd:53:89:c6:27:95:e9:9d:19:f6:2b:fe:12:57:d8: d6:f3:d8:ef:e4:70:33:3f:87:09:0c:d0:ac:d1:21: ef:6a:5d:bd:de:6c:db:e7:af:76:da:e6:e5:db:2a: 55:5b:c6:c4:84:4a:29:3a:2c:e9:d5:e7:0d:ca:3b: af:7d:79:3a:77:69:e9:12:ca:b5:e4:ca:a1:0a:78: e0:da:b5:d9:75:b6:35:0c:93:bd:d6:3b:71:e1:a0: ce:0f:4f:9f:7a:7d:4d:51:6a:db:19:e5:dc:60:27: 5b:ec:56:01:bd:a6:75:43:78:81:4f:35:13:59:e3: 74:3b:72:2c:a8:7b:77:cd:2f:98:8d:06:bd:4d:c8: 04:fa:f1:0f:a9:d9:96:11:ed:3e:d2:5a:aa:2c:a0: 67:af:e7:32:3f:98:2e:a4:18:a4:82:da:02:f8:8d: 09:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:7B:D3:34:78:F4:84:F9:FC:6C:F6:A4:43:F9:FA:BE:17:93:17:15 X509v3 Authority Key Identifier: keyid:B2:DB:AD:05:B6:9F:47:97:EE:F7:1F:03:D6:5A:BE:AD:D2:89:2C:80 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918D1A4/1EB9E3A6C6C011EC96C0DD23C4F9AE02/stutBbafR5fu9x8D1lq-rdKJLIA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/stutBbafR5fu9x8D1lq-rdKJLIA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918D1A4/1EB9E3A6C6C011EC96C0DD23C4F9AE02/stutBbafR5fu9x8D1lq-rdKJLIA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 43:6a:22:76:17:c8:f3:13:87:04:35:3a:5d:6c:8b:30:fb:60: 1a:60:3f:ed:0d:4c:09:2e:10:b9:f1:03:5f:b1:4c:89:f7:73: 41:a5:ac:f9:f8:60:03:7c:7c:9d:c6:9a:6c:4b:4e:de:fa:80: db:63:df:35:63:99:c5:bd:10:87:24:0b:8b:41:87:20:34:4d: 35:ee:eb:1f:1b:0c:bb:0d:1d:30:ce:c7:e5:c1:84:a2:39:01: 2a:18:82:02:41:e8:5e:28:e1:b0:60:e6:5e:09:04:a5:5f:c2: b4:b1:bd:76:d0:65:a3:4d:95:a4:08:24:6c:9a:cc:eb:ba:76: b3:d3:35:e7:f5:f4:54:a1:47:96:cc:cd:8f:33:9c:ec:4d:a4: 9d:b8:1f:4f:fe:d3:33:31:67:a2:17:91:df:2d:3d:84:33:ec: 39:0d:ee:70:c7:bd:95:4b:78:2c:dd:d7:04:b7:bd:63:63:d6: 0f:91:da:35:3b:e9:4a:1c:f4:18:cf:85:cc:fa:95:64:e6:db: fe:80:e2:77:a3:c0:cd:1e:39:05:11:68:c1:5b:69:d2:cb:f1: 98:b1:f7:ba:b7:73:bb:92:0c:75:a3:79:53:93:83:74:a8:22: 8d:0b:51:1c:56:40:36:bd:42:f6:0a:9f:19:83:69:5d:52:6a: 49:93:d5:17 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA1UwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEQxQTQxMTAvBgNVBAUTKEIyREJBRDA1QjY5RjQ3OTdFRUY3MUYwM0Q2NUFCRUFE RDI4OTJDODAwHhcNMjUwODA1MDEzNTMwWhcNMjUwODEyMDEzNTMwWjAYMRYwFAYD VQQDEw02ODkxNWZlMy0zZGE5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6IC6iA/XrUUFgRJwwabvY9wYnX0pilMYE1yZKqZKhjVTPJgxFd+u2Mw48w5D ogi2Ofo+fTmtbl2aMvywKtb0Nzv9QfJi/oL5VZWXqF2sRtzpymmOwYnVqzzNU4nG J5XpnRn2K/4SV9jW89jv5HAzP4cJDNCs0SHval293mzb56922ubl2ypVW8bEhEop Oizp1ecNyjuvfXk6d2npEsq15MqhCnjg2rXZdbY1DJO91jtx4aDOD0+fen1NUWrb GeXcYCdb7FYBvaZ1Q3iBTzUTWeN0O3IsqHt3zS+YjQa9TcgE+vEPqdmWEe0+0lqq LKBnr+cyP5gupBikgtoC+I0JjwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDh70zR4 9IT5/Gz2pEP5+r4XkxcVMB8GA1UdIwQYMBaAFLLbrQW2n0eX7vcfA9Zavq3SiSyA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RDFBNC8xRUI5RTNBNkM2 QzAxMUVDOTZDMEREMjNDNEY5QUUwMi9zdHV0QmJhZlI1ZnU5eDhEMWxxLXJkS0pM SUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3N0dXRCYmFmUjVmdTl4OEQxbHEtcmRLSkxJQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 RDFBNC8xRUI5RTNBNkM2QzAxMUVDOTZDMEREMjNDNEY5QUUwMi9zdHV0QmJhZlI1 ZnU5eDhEMWxxLXJkS0pMSUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBDaiJ2F8jzE4cENTpdbIsw+2AaYD/tDUwJLhC58QNfsUyJ93NBpaz5 +GADfHydxppsS07e+oDbY981Y5nFvRCHJAuLQYcgNE017usfGwy7DR0wzsflwYSi OQEqGIICQeheKOGwYOZeCQSlX8K0sb120GWjTZWkCCRsmszrunaz0zXn9fRUoUeW zM2PM5zsTaSduB9P/tMzMWeiF5HfLT2EM+w5De5wx72VS3gs3dcEt71jY9YPkdo1 O+lKHPQYz4XM+pVk5tv+gOJ3o8DNHjkFEWjBW2nSy/GYsfe6t3O7kgx1o3lTk4N0 qCKNC1EcVkA2vUL2Cp8Zg2ldUmpJk9UX -----END CERTIFICATE-----Generated at Thu Aug 7 02:07:33 2025 by rpki-client