$ rpki-client -vvf rpki.apnic.net/member_repository/A9142DBC/69FA25680AA411EA8C5A831BC4F9AE02/tUMZgoesmRJSAHhil7k2l_jySK4.mft File: tUMZgoesmRJSAHhil7k2l_jySK4.mft (raw, json) Hash identifier: z7E+qo9mTRLIaGtgLerEhyGXlT0zXLM5msPCfB9nlGs= Subject key identifier: 56:A7:8D:6D:89:ED:FA:FF:13:DC:1D:90:82:77:AB:D0:E2:12:97:62 Authority key identifier: B5:43:19:82:87:AC:99:12:52:00:78:62:97:B9:36:97:F8:F2:48:AE Certificate issuer: /CN=A9142DBC/serialNumber=B543198287AC99125200786297B93697F8F248AE Certificate serial: 0C8C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tUMZgoesmRJSAHhil7k2l_jySK4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9142DBC/69FA25680AA411EA8C5A831BC4F9AE02/tUMZgoesmRJSAHhil7k2l_jySK4.mft Manifest number: 0C7F Signing time: Tue 04 Nov 2025 18:33:58 +0000 Manifest this update: Tue 04 Nov 2025 18:33:58 +0000 Manifest next update: Tue 11 Nov 2025 18:33:58 +0000 Files and hashes: 1: tUMZgoesmRJSAHhil7k2l_jySK4.crl (hash: 7dk9y/w/Kdpw8aYEkyPxZRr8lh4cgYexeMjuyPMMHAE=) 2: DBE709060AA511EA86C8E31DC4F9AE02.roa (hash: YQqO3/GsQMAf9ewsQANIfWPP9RflccXF2o5PRECWCc4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9142DBC/69FA25680AA411EA8C5A831BC4F9AE02/tUMZgoesmRJSAHhil7k2l_jySK4.crl rsync://rpki.apnic.net/member_repository/A9142DBC/69FA25680AA411EA8C5A831BC4F9AE02/tUMZgoesmRJSAHhil7k2l_jySK4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tUMZgoesmRJSAHhil7k2l_jySK4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 18:33:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3212 (0xc8c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9142DBC, serialNumber=B543198287AC99125200786297B93697F8F248AE Validity Not Before: Nov 4 18:33:58 2025 GMT Not After : Nov 11 18:33:58 2025 GMT Subject: CN=690a4716-4f20 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:45:66:6f:24:d2:72:e4:86:86:00:46:92:57: ab:dc:6e:0c:38:9f:67:48:a5:82:ad:79:61:d5:a9: 69:71:db:40:94:a5:2f:c9:d9:10:1e:78:13:bf:0d: 47:b4:f1:93:f1:6f:67:5b:4b:53:f1:16:e9:d5:dc: eb:4c:86:fd:b7:40:34:63:78:29:b0:d6:2d:6b:f1: c4:a6:42:47:e3:5b:1f:dd:82:2f:10:e0:69:45:96: e1:53:70:36:92:36:d4:11:c4:fd:88:c9:38:57:7f: 6d:2d:87:44:2f:65:04:49:07:a7:46:c7:ff:7a:f8: 31:7e:37:0f:04:f4:66:df:df:2c:7c:64:69:48:b1: 4e:a0:01:dc:e8:ca:8a:ef:db:49:a8:12:8a:fb:e6: b1:dc:ac:98:79:6d:80:94:1c:42:3c:4d:6f:fb:30: 6e:8e:ee:33:3c:fb:73:e3:87:9a:6d:cc:54:88:14: c5:95:2b:74:59:31:f6:de:c0:3c:25:39:3f:40:56: 48:24:f5:95:43:3c:67:f3:5c:c5:e6:c6:5f:ba:97: f9:4d:5d:4f:ed:16:8a:4e:17:de:8f:a6:d9:48:b6: de:99:1d:c5:a4:44:ba:66:53:7d:ea:02:3f:10:92: 13:6b:ae:79:21:75:05:60:16:4c:47:b0:5f:24:97: 09:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:A7:8D:6D:89:ED:FA:FF:13:DC:1D:90:82:77:AB:D0:E2:12:97:62 X509v3 Authority Key Identifier: keyid:B5:43:19:82:87:AC:99:12:52:00:78:62:97:B9:36:97:F8:F2:48:AE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9142DBC/69FA25680AA411EA8C5A831BC4F9AE02/tUMZgoesmRJSAHhil7k2l_jySK4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tUMZgoesmRJSAHhil7k2l_jySK4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9142DBC/69FA25680AA411EA8C5A831BC4F9AE02/tUMZgoesmRJSAHhil7k2l_jySK4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9c:35:b3:db:0e:3d:b0:d9:12:5c:21:3c:79:68:46:7b:e3:9b: 5b:ad:59:e3:8d:66:1c:74:5e:d5:c7:9d:9d:20:d7:2c:2d:c5: ad:12:d6:eb:e1:8e:80:51:08:04:fe:cd:57:e7:45:15:3a:01: 83:55:7a:cb:eb:d5:c2:cb:a3:5d:be:92:0a:31:5f:37:76:e1: 74:2b:4f:9c:54:60:9a:5c:38:a1:20:af:c6:b4:95:81:65:08: 19:65:1e:ab:e4:69:85:08:db:93:3b:1f:cc:01:10:9e:bf:8b: 70:38:76:3e:c5:af:c6:1e:3c:45:9a:ff:e2:54:84:1c:51:25: 0f:14:38:d6:0a:8c:00:0f:17:96:75:91:46:c7:6c:28:2e:71: ce:84:d6:56:bb:6b:e7:6d:53:1c:78:db:3b:59:5b:8b:b1:81: 59:e6:81:ba:93:b9:6a:b3:32:b3:bb:ea:26:72:8a:b5:44:ad: 2e:92:09:63:01:50:7a:8c:f1:80:9f:c3:43:e1:9a:be:8c:76: 65:8b:22:6f:84:fc:4e:37:b4:cf:92:29:e9:4b:1b:69:67:73: 7d:6a:58:cc:fb:0e:0c:f6:9f:af:da:3b:bb:a2:6f:2b:fe:61: 7f:49:4f:cf:e1:2f:16:86:77:f5:5f:66:41:cd:cc:1a:a4:92: 79:62:ea:2c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDIwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDJEQkMxMTAvBgNVBAUTKEI1NDMxOTgyODdBQzk5MTI1MjAwNzg2Mjk3QjkzNjk3 RjhGMjQ4QUUwHhcNMjUxMTA0MTgzMzU4WhcNMjUxMTExMTgzMzU4WjAYMRYwFAYD VQQDEw02OTBhNDcxNi00ZjIwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4UVmbyTScuSGhgBGkler3G4MOJ9nSKWCrXlh1alpcdtAlKUvydkQHngTvw1H tPGT8W9nW0tT8Rbp1dzrTIb9t0A0Y3gpsNYta/HEpkJH41sf3YIvEOBpRZbhU3A2 kjbUEcT9iMk4V39tLYdEL2UESQenRsf/evgxfjcPBPRm398sfGRpSLFOoAHc6MqK 79tJqBKK++ax3KyYeW2AlBxCPE1v+zBuju4zPPtz44eabcxUiBTFlSt0WTH23sA8 JTk/QFZIJPWVQzxn81zF5sZfupf5TV1P7RaKThfej6bZSLbemR3FpES6ZlN96gI/ EJITa655IXUFYBZMR7BfJJcJfwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFanjW2J 7fr/E9wdkIJ3q9DiEpdiMB8GA1UdIwQYMBaAFLVDGYKHrJkSUgB4Ype5Npf48kiu MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MkRCQy82OUZBMjU2ODBB QTQxMUVBOEM1QTgzMUJDNEY5QUUwMi90VU1aZ29lc21SSlNBSGhpbDdrMmxfanlT SzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RVTVpnb2VzbVJKU0FIaGlsN2sybF9qeVNLNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MkRCQy82OUZBMjU2ODBBQTQxMUVBOEM1QTgzMUJDNEY5QUUwMi90VU1aZ29lc21S SlNBSGhpbDdrMmxfanlTSzQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCcNbPbDj2w2RJcITx5aEZ745tbrVnjjWYcdF7Vx52dINcsLcWtEtbr 4Y6AUQgE/s1X50UVOgGDVXrL69XCy6NdvpIKMV83duF0K0+cVGCaXDihIK/GtJWB ZQgZZR6r5GmFCNuTOx/MARCev4twOHY+xa/GHjxFmv/iVIQcUSUPFDjWCowADxeW dZFGx2woLnHOhNZWu2vnbVMceNs7WVuLsYFZ5oG6k7lqszKzu+omcoq1RK0ukglj AVB6jPGAn8ND4Zq+jHZliyJvhPxON7TPkinpSxtpZ3N9aljM+w4M9p+v2ju7om8r /mF/SU/P4S8Whnf1X2ZBzcwapJJ5Yuos -----END CERTIFICATE-----Generated at Wed Nov 5 20:58:18 2025 by rpki-client