$ rpki-client -vvf rpki.apnic.net/member_repository/A913AF6A/8C6DAC78AE4211EEBF64DA69C4F9AE02/tUzE74aIutYKk1tS1BFWN4lOIzc.mft File: tUzE74aIutYKk1tS1BFWN4lOIzc.mft (raw, json) Hash identifier: WlwSG9SE5Oz2rrRSK7uZfzjDhSxiy2zzdC/QgIAKFSc= Subject key identifier: BA:9F:FB:48:FA:A3:DD:21:EB:FB:49:28:5A:90:02:00:9B:BC:87:49 Authority key identifier: B5:4C:C4:EF:86:88:BA:D6:0A:93:5B:52:D4:11:56:37:89:4E:23:37 Certificate issuer: /CN=A913AF6A/serialNumber=B54CC4EF8688BAD60A935B52D4115637894E2337 Certificate serial: 0128 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tUzE74aIutYKk1tS1BFWN4lOIzc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913AF6A/8C6DAC78AE4211EEBF64DA69C4F9AE02/tUzE74aIutYKk1tS1BFWN4lOIzc.mft Manifest number: 0126 Signing time: Tue 05 Aug 2025 05:04:42 +0000 Manifest this update: Tue 05 Aug 2025 05:04:42 +0000 Manifest next update: Tue 12 Aug 2025 05:04:42 +0000 Files and hashes: 1: tUzE74aIutYKk1tS1BFWN4lOIzc.crl (hash: QIo9KXM9551zc0q01ieo6h381Wkxv0LYSc8/eDKGdrs=) 2: 66287F98AE4711EE8C130419C4F9AE02.roa (hash: h7U51gkPrh1q9p4g/lzt3FLn6dAtL2thUtjcqrJHuCY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913AF6A/8C6DAC78AE4211EEBF64DA69C4F9AE02/tUzE74aIutYKk1tS1BFWN4lOIzc.crl rsync://rpki.apnic.net/member_repository/A913AF6A/8C6DAC78AE4211EEBF64DA69C4F9AE02/tUzE74aIutYKk1tS1BFWN4lOIzc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tUzE74aIutYKk1tS1BFWN4lOIzc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 12 Aug 2025 05:04:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 296 (0x128) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913AF6A, serialNumber=B54CC4EF8688BAD60A935B52D4115637894E2337 Validity Not Before: Aug 5 05:04:42 2025 GMT Not After : Aug 12 05:04:42 2025 GMT Subject: CN=689190ea-a108 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:90:d7:42:0f:3a:02:40:fb:ed:b8:92:06:0d: 5b:65:c7:a8:4a:69:c2:4f:09:c0:94:83:1d:eb:fd: c4:ff:cc:9c:c0:8c:8e:a4:54:ae:64:c7:9e:45:3a: 87:f9:89:ae:ef:85:03:da:75:06:94:6d:dd:45:ef: 95:e5:fc:b3:d4:00:07:51:6d:6d:09:f4:0d:39:2b: 9f:fb:60:12:8b:8e:0e:de:e6:0d:68:07:50:a6:26: 7c:dd:98:ff:e3:bd:de:db:48:cb:57:2f:3a:e6:69: a4:28:b4:ae:3d:45:30:db:2e:c7:54:05:c3:8b:14: 2a:60:31:b5:4c:fd:6e:d4:18:3d:64:ca:06:24:16: 54:69:9f:0b:01:a2:ce:69:65:32:95:1d:81:be:d2: e0:d5:1c:de:11:8b:3c:97:a4:c4:1c:85:c1:3b:22: fa:ec:a1:44:c8:2d:f1:67:02:6a:df:a8:ae:5c:9c: ae:0f:29:66:85:b6:d7:6a:93:11:b3:e3:38:bd:e4: f3:0d:15:da:7c:0f:10:4d:64:3e:58:da:5d:20:30: a9:87:44:5c:a2:e7:0d:64:76:fa:37:1d:a4:0d:2c: b1:05:02:b1:e6:b9:0e:cf:d4:60:bb:63:f4:3c:bd: b0:8a:3f:15:bd:e3:c9:61:d5:9b:02:38:c7:fb:6f: ab:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:9F:FB:48:FA:A3:DD:21:EB:FB:49:28:5A:90:02:00:9B:BC:87:49 X509v3 Authority Key Identifier: keyid:B5:4C:C4:EF:86:88:BA:D6:0A:93:5B:52:D4:11:56:37:89:4E:23:37 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913AF6A/8C6DAC78AE4211EEBF64DA69C4F9AE02/tUzE74aIutYKk1tS1BFWN4lOIzc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tUzE74aIutYKk1tS1BFWN4lOIzc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913AF6A/8C6DAC78AE4211EEBF64DA69C4F9AE02/tUzE74aIutYKk1tS1BFWN4lOIzc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption bb:1a:aa:fe:0a:06:a0:65:f0:11:b7:8a:41:63:f6:9b:11:95: 54:79:b2:bb:e6:81:9d:fe:a5:2f:cc:24:88:17:2a:42:38:63: 12:94:eb:4a:c7:9d:db:64:57:6e:e9:57:51:cd:cb:89:41:97: aa:b3:56:c7:c7:fb:2d:9a:e4:59:0b:02:88:e1:dc:e4:60:54: e0:82:4e:0b:a4:96:cf:34:e2:4d:63:f9:cf:fd:78:6d:c3:93: 60:4a:f1:01:be:6d:84:3e:ff:ef:7f:b6:fe:70:42:a7:39:ec: 34:b6:bc:00:78:d0:80:bb:7f:2f:49:76:27:ab:c1:e7:e3:02: 4e:1d:3a:9f:58:96:f8:21:32:aa:30:fd:ef:bd:b8:9d:e4:d9: 51:e8:af:4a:59:97:07:22:ed:aa:f0:39:d7:84:d7:ed:79:50: 31:43:c3:93:4a:81:d8:ee:36:e5:ce:5c:f1:2e:12:c8:66:91: de:15:cc:ba:8c:e7:43:f8:2d:a8:7b:99:aa:c0:96:ac:ef:d5: db:9c:6c:64:4c:7d:d5:53:c7:d3:ff:de:57:c2:87:49:f0:fc: 1f:80:9c:2a:90:2d:3e:30:75:16:b8:26:b3:fb:fb:63:65:ed: 75:da:e9:e5:14:5f:d4:75:b9:4e:57:7c:e3:2f:33:a7:c2:a5: 70:0f:d1:85 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICASgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0FGNkExMTAvBgNVBAUTKEI1NENDNEVGODY4OEJBRDYwQTkzNUI1MkQ0MTE1NjM3 ODk0RTIzMzcwHhcNMjUwODA1MDUwNDQyWhcNMjUwODEyMDUwNDQyWjAYMRYwFAYD VQQDEw02ODkxOTBlYS1hMTA4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsZDXQg86AkD77biSBg1bZceoSmnCTwnAlIMd6/3E/8ycwIyOpFSuZMeeRTqH +Ymu74UD2nUGlG3dRe+V5fyz1AAHUW1tCfQNOSuf+2ASi44O3uYNaAdQpiZ83Zj/ 473e20jLVy865mmkKLSuPUUw2y7HVAXDixQqYDG1TP1u1Bg9ZMoGJBZUaZ8LAaLO aWUylR2BvtLg1RzeEYs8l6TEHIXBOyL67KFEyC3xZwJq36iuXJyuDylmhbbXapMR s+M4veTzDRXafA8QTWQ+WNpdIDCph0RcoucNZHb6Nx2kDSyxBQKx5rkOz9Rgu2P0 PL2wij8VvePJYdWbAjjH+2+rgwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLqf+0j6 o90h6/tJKFqQAgCbvIdJMB8GA1UdIwQYMBaAFLVMxO+GiLrWCpNbUtQRVjeJTiM3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzQUY2QS84QzZEQUM3OEFF NDIxMUVFQkY2NERBNjlDNEY5QUUwMi90VXpFNzRhSXV0WUtrMXRTMUJGV040bE9J emMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RVekU3NGFJdXRZS2sxdFMxQkZXTjRsT0l6Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz QUY2QS84QzZEQUM3OEFFNDIxMUVFQkY2NERBNjlDNEY5QUUwMi90VXpFNzRhSXV0 WUtrMXRTMUJGV040bE9JemMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC7Gqr+CgagZfARt4pBY/abEZVUebK75oGd/qUvzCSIFypCOGMSlOtK x53bZFdu6VdRzcuJQZeqs1bHx/stmuRZCwKI4dzkYFTggk4LpJbPNOJNY/nP/Xht w5NgSvEBvm2EPv/vf7b+cEKnOew0trwAeNCAu38vSXYnq8Hn4wJOHTqfWJb4ITKq MP3vvbid5NlR6K9KWZcHIu2q8DnXhNfteVAxQ8OTSoHY7jblzlzxLhLIZpHeFcy6 jOdD+C2oe5mqwJas79XbnGxkTH3VU8fT/95XwodJ8PwfgJwqkC0+MHUWuCaz+/tj Ze112unlFF/UdblOV3zjLzOnwqVwD9GF -----END CERTIFICATE-----Generated at Thu Aug 7 01:56:05 2025 by rpki-client