$ rpki-client -vvf rpki.apnic.net/member_repository/A9132C14/22DAECC8F47A11EB93CEFF2FC4F9AE02/TG0zuIPIM699cikDd67c0LWjzdA.mft File: TG0zuIPIM699cikDd67c0LWjzdA.mft (raw, json) Hash identifier: HL3g9cokFeXOmrreBUyZKiiuw2w1Pmy5m6ss8PHfySM= Subject key identifier: 42:E5:2A:9F:3F:83:94:E9:E2:D3:B6:AC:42:83:01:F5:91:87:0D:CA Authority key identifier: 4C:6D:33:B8:83:C8:33:AF:7D:72:29:03:77:AE:DC:D0:B5:A3:CD:D0 Certificate issuer: /CN=A9132C14/serialNumber=4C6D33B883C833AF7D72290377AEDCD0B5A3CDD0 Certificate serial: 0565 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TG0zuIPIM699cikDd67c0LWjzdA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9132C14/22DAECC8F47A11EB93CEFF2FC4F9AE02/TG0zuIPIM699cikDd67c0LWjzdA.mft Manifest number: 055D Signing time: Sat 02 Aug 2025 23:49:31 +0000 Manifest this update: Sat 02 Aug 2025 23:49:30 +0000 Manifest next update: Sat 09 Aug 2025 23:49:30 +0000 Files and hashes: 1: TG0zuIPIM699cikDd67c0LWjzdA.crl (hash: BpckJnvOuTYETnJ493Wz9Nf031ctU/hyHnEGeR3nWR8=) 2: 58BB655AF47C11EBB34AB831C4F9AE02.roa (hash: YGvbQnTcIdlfOTH6YnyF9Rzx2xpGEbYHp7xYeN5ch34=) 3: 595C959CF47C11EBB34AB831C4F9AE02.roa (hash: WH1se2Qhy8RI1ONvLaN4qa1WrKYL/nqvZGw9A9exjh8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9132C14/22DAECC8F47A11EB93CEFF2FC4F9AE02/TG0zuIPIM699cikDd67c0LWjzdA.crl rsync://rpki.apnic.net/member_repository/A9132C14/22DAECC8F47A11EB93CEFF2FC4F9AE02/TG0zuIPIM699cikDd67c0LWjzdA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TG0zuIPIM699cikDd67c0LWjzdA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 09 Aug 2025 23:49:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1381 (0x565) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9132C14, serialNumber=4C6D33B883C833AF7D72290377AEDCD0B5A3CDD0 Validity Not Before: Aug 2 23:49:30 2025 GMT Not After : Aug 9 23:49:30 2025 GMT Subject: CN=688ea40a-7fb7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:98:2f:83:2f:80:10:1b:3d:67:9d:fc:92:27: b0:2e:69:ce:78:c5:2a:7c:4b:17:d2:9d:9b:b4:59: fe:a0:3f:05:01:9f:1c:da:bc:a3:81:8a:11:fa:3f: dc:5c:01:2b:ef:3c:0a:1e:48:1e:5b:a5:07:4a:19: de:73:c2:81:e2:d1:35:0f:34:ce:25:c0:20:ad:6b: 06:05:d9:e1:1b:35:37:4d:5b:ae:14:73:c5:06:ea: 4c:4e:c9:b8:67:d9:19:d1:bf:bc:6b:21:67:57:5e: c9:24:3a:d2:23:7e:ef:36:b7:36:af:f0:82:5a:7d: 13:e9:80:f9:2b:3d:55:5c:94:38:42:35:fb:39:c7: cf:33:33:4e:19:01:cf:ce:80:34:3a:d6:d2:73:26: 9e:1d:1b:f3:ef:44:e0:34:71:cd:a7:fa:19:ab:66: f9:e2:b5:b2:5b:e9:6f:b2:35:03:8d:62:86:4a:b3: 3e:45:94:42:5d:4e:f7:7f:69:a0:c8:6a:f0:38:7c: 00:ca:2b:fc:5f:bf:31:bd:ea:e8:b0:5c:bc:fb:8a: ae:c1:69:6c:a9:f6:62:be:fd:79:7e:2c:69:91:43: cc:6c:9c:d0:03:0c:bd:b7:38:94:1c:55:cd:19:0d: a9:11:7c:5b:d5:17:ae:27:f0:20:da:9a:c5:3b:cb: e5:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:E5:2A:9F:3F:83:94:E9:E2:D3:B6:AC:42:83:01:F5:91:87:0D:CA X509v3 Authority Key Identifier: keyid:4C:6D:33:B8:83:C8:33:AF:7D:72:29:03:77:AE:DC:D0:B5:A3:CD:D0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9132C14/22DAECC8F47A11EB93CEFF2FC4F9AE02/TG0zuIPIM699cikDd67c0LWjzdA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TG0zuIPIM699cikDd67c0LWjzdA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9132C14/22DAECC8F47A11EB93CEFF2FC4F9AE02/TG0zuIPIM699cikDd67c0LWjzdA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 67:c3:18:44:92:47:92:20:47:d0:7b:f3:de:5f:8f:d5:e4:1d: 19:ee:9e:1c:65:ed:ab:13:73:26:2f:f5:7c:7d:04:ea:2b:98: f5:96:91:80:0f:93:43:00:22:81:55:08:ce:a7:4e:7f:25:b3: fc:36:f1:5c:2b:51:2f:e4:6a:c2:cc:9f:f0:d8:be:ce:54:8d: 55:30:a5:99:86:3b:74:ea:aa:9f:01:13:1a:44:08:d1:21:8e: b5:64:f0:71:02:71:be:24:c9:49:91:ee:a8:af:d4:e2:ab:49: a0:d7:65:a4:b1:4c:34:13:c1:88:d0:52:1d:40:6c:1d:79:e7: 8d:1f:1a:6e:bd:70:e7:49:97:c6:c2:fd:f1:23:c0:84:56:82: 9b:ab:d6:70:9e:c6:96:67:a1:08:52:7f:1d:89:32:b0:f8:cc: ab:c9:95:e6:36:7c:ba:f5:db:27:32:a3:3c:5d:48:87:9c:a2: 90:aa:76:5f:7e:c6:75:94:69:e2:b2:27:1a:8d:a6:2b:bc:1e: a8:fe:07:0b:be:a1:f5:91:9d:d2:a6:2b:ca:93:f9:d6:23:9b: 96:a9:75:a5:c3:59:a8:d8:e8:06:97:80:a9:5c:d2:98:f5:15: 25:64:14:8f:aa:9f:89:e5:5c:48:4d:f1:29:69:03:c4:3e:e1: 38:29:6f:12 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBWUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzJDMTQxMTAvBgNVBAUTKDRDNkQzM0I4ODNDODMzQUY3RDcyMjkwMzc3QUVEQ0Qw QjVBM0NERDAwHhcNMjUwODAyMjM0OTMwWhcNMjUwODA5MjM0OTMwWjAYMRYwFAYD VQQDEw02ODhlYTQwYS03ZmI3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAt5gvgy+AEBs9Z538kiewLmnOeMUqfEsX0p2btFn+oD8FAZ8c2ryjgYoR+j/c XAEr7zwKHkgeW6UHShnec8KB4tE1DzTOJcAgrWsGBdnhGzU3TVuuFHPFBupMTsm4 Z9kZ0b+8ayFnV17JJDrSI37vNrc2r/CCWn0T6YD5Kz1VXJQ4QjX7OcfPMzNOGQHP zoA0OtbScyaeHRvz70TgNHHNp/oZq2b54rWyW+lvsjUDjWKGSrM+RZRCXU73f2mg yGrwOHwAyiv8X78xverosFy8+4quwWlsqfZivv15fixpkUPMbJzQAwy9tziUHFXN GQ2pEXxb1ReuJ/Ag2prFO8vlbwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFELlKp8/ g5Tp4tO2rEKDAfWRhw3KMB8GA1UdIwQYMBaAFExtM7iDyDOvfXIpA3eu3NC1o83Q MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMkMxNC8yMkRBRUNDOEY0 N0ExMUVCOTNDRUZGMkZDNEY5QUUwMi9URzB6dUlQSU02OTljaWtEZDY3YzBMV2p6 ZEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1RHMHp1SVBJTTY5OWNpa0RkNjdjMExXanpkQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MkMxNC8yMkRBRUNDOEY0N0ExMUVCOTNDRUZGMkZDNEY5QUUwMi9URzB6dUlQSU02 OTljaWtEZDY3YzBMV2p6ZEEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBnwxhEkkeSIEfQe/PeX4/V5B0Z7p4cZe2rE3MmL/V8fQTqK5j1lpGA D5NDACKBVQjOp05/JbP8NvFcK1Ev5GrCzJ/w2L7OVI1VMKWZhjt06qqfARMaRAjR IY61ZPBxAnG+JMlJke6or9Tiq0mg12WksUw0E8GI0FIdQGwdeeeNHxpuvXDnSZfG wv3xI8CEVoKbq9ZwnsaWZ6EIUn8diTKw+MyryZXmNny69dsnMqM8XUiHnKKQqnZf fsZ1lGnisicajaYrvB6o/gcLvqH1kZ3SpivKk/nWI5uWqXWlw1mo2OgGl4CpXNKY 9RUlZBSPqp+J5VxITfEpaQPEPuE4KW8S -----END CERTIFICATE-----Generated at Mon Aug 4 11:08:54 2025 by rpki-client