$ rpki-client -vvf rpki.apnic.net/member_repository/A9142DBC/69FA25680AA411EA8C5A831BC4F9AE02/tUMZgoesmRJSAHhil7k2l_jySK4.mft File: tUMZgoesmRJSAHhil7k2l_jySK4.mft (raw, json) Hash identifier: OAYL/l5iMmN0WsnWkT9pclVxuJ9/fdl9LCUBegqf9wU= Subject key identifier: 32:98:37:0B:D4:E2:7F:68:01:C4:7F:7B:36:B7:68:AC:DB:62:8E:28 Authority key identifier: B5:43:19:82:87:AC:99:12:52:00:78:62:97:B9:36:97:F8:F2:48:AE Certificate issuer: /CN=A9142DBC/serialNumber=B543198287AC99125200786297B93697F8F248AE Certificate serial: 0C27 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tUMZgoesmRJSAHhil7k2l_jySK4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9142DBC/69FA25680AA411EA8C5A831BC4F9AE02/tUMZgoesmRJSAHhil7k2l_jySK4.mft Manifest number: 0C1B Signing time: Thu 24 Apr 2025 18:32:58 +0000 Manifest this update: Thu 24 Apr 2025 18:32:58 +0000 Manifest next update: Thu 01 May 2025 18:32:58 +0000 Files and hashes: 1: tUMZgoesmRJSAHhil7k2l_jySK4.crl (hash: N38Xt/qgqqG++gsLCiWbJR4/r8GvtK8QzNyafB2uhWU=) 2: DBE709060AA511EA86C8E31DC4F9AE02.roa (hash: zgjsHos2MHOxvntym+ulSXBT66zLuQ8zyiMRNeqJYvE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9142DBC/69FA25680AA411EA8C5A831BC4F9AE02/tUMZgoesmRJSAHhil7k2l_jySK4.crl rsync://rpki.apnic.net/member_repository/A9142DBC/69FA25680AA411EA8C5A831BC4F9AE02/tUMZgoesmRJSAHhil7k2l_jySK4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tUMZgoesmRJSAHhil7k2l_jySK4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 18:32:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3111 (0xc27) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9142DBC, serialNumber=B543198287AC99125200786297B93697F8F248AE Validity Not Before: Apr 24 18:32:58 2025 GMT Not After : May 1 18:32:58 2025 GMT Subject: CN=680a83da-22c7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:bf:36:41:b2:20:ca:c3:64:f1:9f:48:92:ed: 64:41:29:95:a3:b0:5e:96:99:2f:43:9d:83:e4:44: 59:b1:57:bf:1c:9b:a1:d2:6d:6e:73:b3:55:cf:65: 49:ba:9f:67:a1:bc:dc:b7:f3:33:d1:95:65:96:b5: 74:2d:03:aa:ba:30:a5:92:eb:ce:63:64:de:2d:46: 24:37:fc:6e:43:6b:f3:6b:bc:94:92:cc:60:42:1a: 6a:a4:60:6c:f1:2f:5e:22:58:76:8e:71:a6:cb:6b: e7:d1:a1:ea:32:22:e6:ba:eb:89:be:36:ef:5c:89: 91:9d:1d:71:48:f2:7b:02:05:9e:98:5e:e0:b5:bb: aa:0c:8b:f3:9f:9d:d3:df:49:f0:b0:fb:6e:96:be: d6:0b:8f:b7:81:73:3d:b5:39:03:16:be:c1:9e:81: b5:56:b4:4c:4d:a6:b3:98:62:8d:17:cd:d2:69:09: d6:35:51:b1:6a:f4:98:7f:86:fc:b7:6a:68:bc:76: c9:bf:f4:5f:0e:21:0f:5d:a5:fd:af:a6:e1:02:e2: 47:5d:fd:ed:2b:d0:0c:2f:82:c3:d7:5c:0b:bf:6f: 65:64:a1:9e:b1:b3:a9:29:28:9c:85:33:27:96:dd: fb:b2:39:f3:00:10:66:ad:0a:95:94:13:10:7d:9e: 3b:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:98:37:0B:D4:E2:7F:68:01:C4:7F:7B:36:B7:68:AC:DB:62:8E:28 X509v3 Authority Key Identifier: keyid:B5:43:19:82:87:AC:99:12:52:00:78:62:97:B9:36:97:F8:F2:48:AE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9142DBC/69FA25680AA411EA8C5A831BC4F9AE02/tUMZgoesmRJSAHhil7k2l_jySK4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tUMZgoesmRJSAHhil7k2l_jySK4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9142DBC/69FA25680AA411EA8C5A831BC4F9AE02/tUMZgoesmRJSAHhil7k2l_jySK4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 07:24:64:f1:95:d8:61:5e:6a:80:33:38:2e:3e:09:a2:0e:d4: b5:e3:d6:32:fc:aa:ce:c5:f0:68:2a:b0:85:3c:5d:52:49:a2: 8c:e2:7b:e5:ba:e6:08:ec:49:89:c5:00:5f:2c:2c:e8:e0:1f: a7:5f:b3:38:44:3b:64:18:9e:f2:c8:93:5d:12:4c:8f:ad:1c: 31:41:79:6d:f2:3d:5e:f7:19:86:60:e3:74:88:64:aa:6f:b7: c8:78:e5:cf:59:53:e1:0a:aa:74:3f:c1:1a:1d:1d:0c:81:44: 9a:75:28:4b:da:31:b8:08:9e:e7:60:d7:c4:79:9a:32:fe:47: c2:c9:e7:fc:a6:39:46:e3:d4:5f:09:e6:ee:c8:76:56:81:21: 90:b9:0d:9c:58:c1:61:fc:bf:20:31:79:3f:5a:ad:b2:ca:1f: 83:bd:c1:71:b5:40:dd:60:e9:de:93:34:33:c2:6b:e5:ea:a1: 0f:98:8e:09:d3:57:ff:fd:fd:88:ca:7c:b2:97:73:6f:e6:37: c7:a9:c2:60:6f:8f:a2:bd:9d:7f:d1:c8:00:81:4f:46:fb:82: 10:37:58:58:36:43:d0:45:99:83:8b:b3:26:56:88:2b:bc:9b: 08:3d:98:25:b1:5d:c1:60:a7:34:96:aa:89:fc:ea:98:fa:07: 6d:04:2d:b3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDCcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDJEQkMxMTAvBgNVBAUTKEI1NDMxOTgyODdBQzk5MTI1MjAwNzg2Mjk3QjkzNjk3 RjhGMjQ4QUUwHhcNMjUwNDI0MTgzMjU4WhcNMjUwNTAxMTgzMjU4WjAYMRYwFAYD VQQDEw02ODBhODNkYS0yMmM3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsr82QbIgysNk8Z9Iku1kQSmVo7BelpkvQ52D5ERZsVe/HJuh0m1uc7NVz2VJ up9nobzct/Mz0ZVllrV0LQOqujClkuvOY2TeLUYkN/xuQ2vza7yUksxgQhpqpGBs 8S9eIlh2jnGmy2vn0aHqMiLmuuuJvjbvXImRnR1xSPJ7AgWemF7gtbuqDIvzn53T 30nwsPtulr7WC4+3gXM9tTkDFr7BnoG1VrRMTaazmGKNF83SaQnWNVGxavSYf4b8 t2povHbJv/RfDiEPXaX9r6bhAuJHXf3tK9AML4LD11wLv29lZKGesbOpKSichTMn lt37sjnzABBmrQqVlBMQfZ47/QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDKYNwvU 4n9oAcR/eza3aKzbYo4oMB8GA1UdIwQYMBaAFLVDGYKHrJkSUgB4Ype5Npf48kiu MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MkRCQy82OUZBMjU2ODBB QTQxMUVBOEM1QTgzMUJDNEY5QUUwMi90VU1aZ29lc21SSlNBSGhpbDdrMmxfanlT SzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RVTVpnb2VzbVJKU0FIaGlsN2sybF9qeVNLNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MkRCQy82OUZBMjU2ODBBQTQxMUVBOEM1QTgzMUJDNEY5QUUwMi90VU1aZ29lc21S SlNBSGhpbDdrMmxfanlTSzQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAHJGTxldhhXmqAMzguPgmiDtS149Yy/KrOxfBoKrCFPF1SSaKM4nvl uuYI7EmJxQBfLCzo4B+nX7M4RDtkGJ7yyJNdEkyPrRwxQXlt8j1e9xmGYON0iGSq b7fIeOXPWVPhCqp0P8EaHR0MgUSadShL2jG4CJ7nYNfEeZoy/kfCyef8pjlG49Rf CebuyHZWgSGQuQ2cWMFh/L8gMXk/Wq2yyh+DvcFxtUDdYOnekzQzwmvl6qEPmI4J 01f//f2Iynyyl3Nv5jfHqcJgb4+ivZ1/0cgAgU9G+4IQN1hYNkPQRZmDi7MmVogr vJsIPZglsV3BYKc0lqqJ/OqY+gdtBC2z -----END CERTIFICATE-----Generated at Sat Apr 26 15:04:51 2025 by rpki-client