$ rpki-client -vvf rpki.apnic.net/member_repository/A9142DBC/69FA25680AA411EA8C5A831BC4F9AE02/tUMZgoesmRJSAHhil7k2l_jySK4.mft File: tUMZgoesmRJSAHhil7k2l_jySK4.mft (raw, json) Hash identifier: Auc/mio6U5Chn9lRmYYeSFQpY6CRrjw9w03oSnwx4N8= Subject key identifier: 37:1F:AC:1A:EE:35:3A:86:0F:68:5C:29:CB:7E:A7:4A:C3:96:46:BF Authority key identifier: B5:43:19:82:87:AC:99:12:52:00:78:62:97:B9:36:97:F8:F2:48:AE Certificate issuer: /CN=A9142DBC/serialNumber=B543198287AC99125200786297B93697F8F248AE Certificate serial: 0C5F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tUMZgoesmRJSAHhil7k2l_jySK4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9142DBC/69FA25680AA411EA8C5A831BC4F9AE02/tUMZgoesmRJSAHhil7k2l_jySK4.mft Manifest number: 0C52 Signing time: Fri 08 Aug 2025 18:46:31 +0000 Manifest this update: Fri 08 Aug 2025 18:46:31 +0000 Manifest next update: Fri 15 Aug 2025 18:46:31 +0000 Files and hashes: 1: tUMZgoesmRJSAHhil7k2l_jySK4.crl (hash: nFwzx5hD/DuaY6ahNgnAIYw6scsbTKtbkRh63YkkpqE=) 2: DBE709060AA511EA86C8E31DC4F9AE02.roa (hash: YQqO3/GsQMAf9ewsQANIfWPP9RflccXF2o5PRECWCc4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9142DBC/69FA25680AA411EA8C5A831BC4F9AE02/tUMZgoesmRJSAHhil7k2l_jySK4.crl rsync://rpki.apnic.net/member_repository/A9142DBC/69FA25680AA411EA8C5A831BC4F9AE02/tUMZgoesmRJSAHhil7k2l_jySK4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tUMZgoesmRJSAHhil7k2l_jySK4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3167 (0xc5f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9142DBC, serialNumber=B543198287AC99125200786297B93697F8F248AE Validity Not Before: Aug 8 18:46:31 2025 GMT Not After : Aug 15 18:46:31 2025 GMT Subject: CN=68964607-0ef0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:78:69:e0:7e:94:fc:7b:33:dd:2b:b0:6d:bc: 37:d2:5b:ab:2d:ca:29:f0:af:d7:dc:54:78:fb:db: ee:4a:75:69:96:8b:3d:36:c3:3d:35:68:58:6e:8a: 7a:f8:b4:01:97:b4:6d:b9:c6:80:da:1b:19:43:76: 7f:90:0b:47:f1:f2:c8:b8:6f:2c:c5:3e:51:b1:27: 6f:fc:6e:52:79:cd:ed:08:f1:bb:0e:c2:5b:09:85: 60:d3:d1:ba:4a:20:71:85:03:f3:d6:8d:07:f2:42: 66:38:5a:f3:ac:36:8c:ce:3f:e1:bb:dc:07:6b:e9: ea:58:b1:86:7f:f8:5d:10:e1:67:db:60:74:e4:5b: db:57:f9:c1:4c:0a:57:fe:82:1d:5a:32:cd:b7:61: 2b:f8:6f:5c:f9:22:4f:16:b4:2f:09:e3:03:4b:09: a9:53:8b:55:e2:41:41:da:89:de:f9:8f:1e:5a:97: ab:83:d0:66:56:42:28:85:6b:f2:16:ec:27:01:58: 15:03:96:f5:71:01:ca:36:c8:4b:41:90:93:b0:f1: 56:3a:bf:37:98:cb:0c:0c:d2:bb:0d:f3:40:26:20: b2:ee:13:1e:c8:c3:f1:67:44:b3:47:81:f3:cb:76: 9f:bd:c2:a4:14:4c:7b:98:3f:8c:5a:43:a4:d5:48: 14:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:1F:AC:1A:EE:35:3A:86:0F:68:5C:29:CB:7E:A7:4A:C3:96:46:BF X509v3 Authority Key Identifier: keyid:B5:43:19:82:87:AC:99:12:52:00:78:62:97:B9:36:97:F8:F2:48:AE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9142DBC/69FA25680AA411EA8C5A831BC4F9AE02/tUMZgoesmRJSAHhil7k2l_jySK4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tUMZgoesmRJSAHhil7k2l_jySK4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9142DBC/69FA25680AA411EA8C5A831BC4F9AE02/tUMZgoesmRJSAHhil7k2l_jySK4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 26:73:ff:9e:39:f1:bd:75:4d:41:e6:77:ee:96:11:18:af:1e: e1:93:6c:ea:08:49:32:ad:1a:6f:f9:16:d4:80:ce:5d:84:10: 13:d9:8e:35:8a:da:bb:fb:19:80:9e:e4:b6:58:93:79:9b:3b: cf:df:a8:ae:51:97:02:af:89:a3:7c:46:1d:27:7f:76:b2:a3: 7a:62:bb:90:02:7f:18:31:b1:bf:d1:d3:3b:d9:4f:d9:ed:5f: 74:c9:6a:5a:8c:af:75:ec:94:4f:f8:c1:38:ee:d9:76:ae:61: 13:de:d2:24:65:76:49:1e:46:19:90:85:a9:ae:f7:65:74:53: 64:47:26:7c:15:cd:0c:25:92:74:99:09:99:aa:af:cf:b1:20: 41:72:84:2c:04:f5:6a:b8:35:8a:c9:b0:75:ca:b4:6f:9a:92: 72:df:c5:58:6f:77:dc:e6:88:2e:a7:1f:1b:f5:d1:7f:43:31: a6:a4:5c:62:ac:5d:27:0b:68:b3:38:69:7a:b3:ef:32:a2:7d: 58:04:69:84:00:88:a1:91:e2:1f:00:aa:25:78:98:9a:80:8d: c2:1d:b3:39:dc:4a:c4:dd:77:cb:0b:27:b3:a6:d5:e7:2e:49: 1d:b1:b9:c0:26:72:95:00:dd:3f:2b:18:74:2f:4e:09:3e:da: 45:88:73:e9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDF8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDJEQkMxMTAvBgNVBAUTKEI1NDMxOTgyODdBQzk5MTI1MjAwNzg2Mjk3QjkzNjk3 RjhGMjQ4QUUwHhcNMjUwODA4MTg0NjMxWhcNMjUwODE1MTg0NjMxWjAYMRYwFAYD VQQDEw02ODk2NDYwNy0wZWYwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2nhp4H6U/Hsz3Suwbbw30lurLcop8K/X3FR4+9vuSnVplos9NsM9NWhYbop6 +LQBl7RtucaA2hsZQ3Z/kAtH8fLIuG8sxT5RsSdv/G5Sec3tCPG7DsJbCYVg09G6 SiBxhQPz1o0H8kJmOFrzrDaMzj/hu9wHa+nqWLGGf/hdEOFn22B05FvbV/nBTApX /oIdWjLNt2Er+G9c+SJPFrQvCeMDSwmpU4tV4kFB2one+Y8eWperg9BmVkIohWvy FuwnAVgVA5b1cQHKNshLQZCTsPFWOr83mMsMDNK7DfNAJiCy7hMeyMPxZ0SzR4Hz y3afvcKkFEx7mD+MWkOk1UgUeQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDcfrBru NTqGD2hcKct+p0rDlka/MB8GA1UdIwQYMBaAFLVDGYKHrJkSUgB4Ype5Npf48kiu MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MkRCQy82OUZBMjU2ODBB QTQxMUVBOEM1QTgzMUJDNEY5QUUwMi90VU1aZ29lc21SSlNBSGhpbDdrMmxfanlT SzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RVTVpnb2VzbVJKU0FIaGlsN2sybF9qeVNLNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MkRCQy82OUZBMjU2ODBBQTQxMUVBOEM1QTgzMUJDNEY5QUUwMi90VU1aZ29lc21S SlNBSGhpbDdrMmxfanlTSzQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAmc/+eOfG9dU1B5nfulhEYrx7hk2zqCEkyrRpv+RbUgM5dhBAT2Y41 itq7+xmAnuS2WJN5mzvP36iuUZcCr4mjfEYdJ392sqN6YruQAn8YMbG/0dM72U/Z 7V90yWpajK917JRP+ME47tl2rmET3tIkZXZJHkYZkIWprvdldFNkRyZ8Fc0MJZJ0 mQmZqq/PsSBBcoQsBPVquDWKybB1yrRvmpJy38VYb3fc5ogupx8b9dF/QzGmpFxi rF0nC2izOGl6s+8yon1YBGmEAIihkeIfAKoleJiagI3CHbM53ErE3XfLCyezptXn LkkdsbnAJnKVAN0/Kxh0L04JPtpFiHPp -----END CERTIFICATE-----Generated at Sun Aug 10 18:21:42 2025 by rpki-client