$ rpki-client -vvf rpki.apnic.net/member_repository/A9135020/BE1EE504947011EC91B46C4DC4F9AE02/tjIT2OZi9FS-rux_PELjr2-JX7I.mft File: tjIT2OZi9FS-rux_PELjr2-JX7I.mft (raw, json) Hash identifier: yv5PrldMcRgHOOAHa1uNI/A7yXsn82P8sCKVQV9nuyc= Subject key identifier: B7:43:F6:A5:B7:7F:EE:21:63:8E:66:F7:6D:19:5F:0A:AE:CA:5A:8E Authority key identifier: B6:32:13:D8:E6:62:F4:54:BE:AE:EC:7F:3C:42:E3:AF:6F:89:5F:B2 Certificate issuer: /CN=A9135020/serialNumber=B63213D8E662F454BEAEEC7F3C42E3AF6F895FB2 Certificate serial: 03E5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tjIT2OZi9FS-rux_PELjr2-JX7I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9135020/BE1EE504947011EC91B46C4DC4F9AE02/tjIT2OZi9FS-rux_PELjr2-JX7I.mft Manifest number: 03D4 Signing time: Tue 05 Aug 2025 01:06:37 +0000 Manifest this update: Tue 05 Aug 2025 01:06:36 +0000 Manifest next update: Tue 12 Aug 2025 01:06:36 +0000 Files and hashes: 1: tjIT2OZi9FS-rux_PELjr2-JX7I.crl (hash: Vjc91wXS6VH5z1LKaQqbJU6gN+XWZ5Cle+FJYxB8njk=) 2: E61E258895F611EC88E42C7EC4F9AE02.roa (hash: IBhhnGT/LDWxhpFmUfJvAC1XxzhmOqtNwlJxeyVAKjs=) 3: E6B9A5DA95F611EC88E42C7EC4F9AE02.roa (hash: uty0bQMtFLX3vFRuGwVZyzSxCI+QZbbY8EJL7k1alPY=) 4: 4A7E1926947511EC9795DF56C4F9AE02.roa (hash: haDneSQGCMY7l4tq6KzMKr1NagFdvDH5g3zFSu/oH0w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9135020/BE1EE504947011EC91B46C4DC4F9AE02/tjIT2OZi9FS-rux_PELjr2-JX7I.crl rsync://rpki.apnic.net/member_repository/A9135020/BE1EE504947011EC91B46C4DC4F9AE02/tjIT2OZi9FS-rux_PELjr2-JX7I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tjIT2OZi9FS-rux_PELjr2-JX7I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 12 Aug 2025 01:06:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 997 (0x3e5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9135020, serialNumber=B63213D8E662F454BEAEEC7F3C42E3AF6F895FB2 Validity Not Before: Aug 5 01:06:36 2025 GMT Not After : Aug 12 01:06:36 2025 GMT Subject: CN=6891591c-61b3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:17:28:43:53:82:db:d4:25:dc:35:cb:94:76: 70:ac:bb:bd:39:0b:31:08:d7:9d:97:63:8e:5c:41: 2a:78:6c:bc:86:16:bd:cc:de:9c:f9:d5:4f:d7:0b: 3e:6c:7e:00:3c:0c:6e:f9:0f:24:50:64:de:61:c3: 74:d7:24:aa:53:7c:68:7e:c4:86:44:d8:ba:86:fa: 29:f1:c8:5c:ad:fa:12:56:a2:42:ba:60:82:f0:f3: 64:07:96:72:c4:ca:71:4b:18:04:c1:ac:00:3f:1e: 76:0b:3c:4b:f1:83:5c:f7:be:eb:fb:3f:12:09:35: 81:94:62:49:37:c9:13:09:ab:8f:62:8c:c0:34:09: 7a:60:1d:9b:8f:4f:25:2d:1c:d1:cc:0e:0f:23:c7: 92:49:eb:78:6c:ea:23:44:fd:be:d1:3a:79:e1:8b: 0b:0c:c6:e9:46:04:41:ee:9b:59:92:9f:ba:14:ff: 30:37:b4:72:94:d3:c3:d9:cb:1b:2c:ae:dc:4c:5d: 1a:51:b2:8a:79:69:85:e5:4b:3a:c7:65:ff:f9:a4: 99:9a:ab:d9:c8:b2:d9:51:17:85:16:a6:b8:be:46: f2:ac:4b:4f:a0:0d:26:86:a9:e8:13:65:f5:ea:ff: b5:50:9a:16:14:92:81:de:99:88:94:53:fc:5c:2c: 03:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:43:F6:A5:B7:7F:EE:21:63:8E:66:F7:6D:19:5F:0A:AE:CA:5A:8E X509v3 Authority Key Identifier: keyid:B6:32:13:D8:E6:62:F4:54:BE:AE:EC:7F:3C:42:E3:AF:6F:89:5F:B2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9135020/BE1EE504947011EC91B46C4DC4F9AE02/tjIT2OZi9FS-rux_PELjr2-JX7I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tjIT2OZi9FS-rux_PELjr2-JX7I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9135020/BE1EE504947011EC91B46C4DC4F9AE02/tjIT2OZi9FS-rux_PELjr2-JX7I.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 05:ff:f5:13:3b:8a:e4:c2:e0:57:68:70:d7:01:89:f4:0a:42: cb:56:6f:62:cc:31:e5:ce:b7:16:f2:50:11:54:4d:8f:41:6c: 95:30:3e:c1:4b:d3:11:a5:29:d1:31:72:53:0a:b0:65:dd:8e: 1e:5c:1f:5f:a2:fc:c0:7e:ec:ff:81:f1:06:73:12:dd:ab:6e: 65:58:94:b1:35:03:f2:15:29:c5:fe:ed:ed:33:eb:b5:b3:96: 2e:6f:d7:17:ad:5e:e8:30:dd:56:d8:71:8a:45:ea:14:75:81: df:cd:14:e8:d1:d5:94:cc:6b:ae:df:16:6f:55:17:06:41:ba: 5d:dc:ba:1a:58:7d:ee:1a:b4:b8:36:0d:0d:54:fd:6f:86:55: 8b:17:0e:94:85:03:89:58:4d:3a:1b:ac:20:68:e9:fb:c4:06: 98:8e:5b:38:b9:bd:3b:ec:92:58:cc:a7:e4:b9:6f:8f:f7:8b: 8d:2f:e0:a2:44:1b:08:3f:83:32:b3:c8:f6:36:43:da:22:d7: 57:7e:18:1f:bd:58:71:84:36:8c:2c:6d:56:94:7a:7b:48:ae: d5:b3:c6:39:5b:bc:09:42:60:b1:8b:81:61:a7:b5:fe:94:cb: 68:c9:16:52:21:69:91:27:b2:67:50:8f:7d:02:67:8d:72:d1: 2a:46:bc:21 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA+UwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzUwMjAxMTAvBgNVBAUTKEI2MzIxM0Q4RTY2MkY0NTRCRUFFRUM3RjNDNDJFM0FG NkY4OTVGQjIwHhcNMjUwODA1MDEwNjM2WhcNMjUwODEyMDEwNjM2WjAYMRYwFAYD VQQDEw02ODkxNTkxYy02MWIzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqRcoQ1OC29Ql3DXLlHZwrLu9OQsxCNedl2OOXEEqeGy8hha9zN6c+dVP1ws+ bH4APAxu+Q8kUGTeYcN01ySqU3xofsSGRNi6hvop8chcrfoSVqJCumCC8PNkB5Zy xMpxSxgEwawAPx52CzxL8YNc977r+z8SCTWBlGJJN8kTCauPYozANAl6YB2bj08l LRzRzA4PI8eSSet4bOojRP2+0Tp54YsLDMbpRgRB7ptZkp+6FP8wN7RylNPD2csb LK7cTF0aUbKKeWmF5Us6x2X/+aSZmqvZyLLZUReFFqa4vkbyrEtPoA0mhqnoE2X1 6v+1UJoWFJKB3pmIlFP8XCwDlQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLdD9qW3 f+4hY45m920ZXwquylqOMB8GA1UdIwQYMBaAFLYyE9jmYvRUvq7sfzxC469viV+y MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNTAyMC9CRTFFRTUwNDk0 NzAxMUVDOTFCNDZDNERDNEY5QUUwMi90aklUMk9aaTlGUy1ydXhfUEVManIyLUpY N0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RqSVQyT1ppOUZTLXJ1eF9QRUxqcjItSlg3SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz NTAyMC9CRTFFRTUwNDk0NzAxMUVDOTFCNDZDNERDNEY5QUUwMi90aklUMk9aaTlG Uy1ydXhfUEVManIyLUpYN0kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAF//UTO4rkwuBXaHDXAYn0CkLLVm9izDHlzrcW8lARVE2PQWyVMD7B S9MRpSnRMXJTCrBl3Y4eXB9fovzAfuz/gfEGcxLdq25lWJSxNQPyFSnF/u3tM+u1 s5Yub9cXrV7oMN1W2HGKReoUdYHfzRTo0dWUzGuu3xZvVRcGQbpd3LoaWH3uGrS4 Ng0NVP1vhlWLFw6UhQOJWE06G6wgaOn7xAaYjls4ub077JJYzKfkuW+P94uNL+Ci RBsIP4Mys8j2NkPaItdXfhgfvVhxhDaMLG1WlHp7SK7Vs8Y5W7wJQmCxi4Fhp7X+ lMtoyRZSIWmRJ7JnUI99AmeNctEqRrwh -----END CERTIFICATE-----Generated at Wed Aug 6 16:14:41 2025 by rpki-client