$ rpki-client -vvf rpki.apnic.net/member_repository/A9169351/31A0D182940511EEA8687547C4F9AE02/tUdigfNZTThknMz_UvWLtJtHXwk.mft File: tUdigfNZTThknMz_UvWLtJtHXwk.mft (raw, json) Hash identifier: O46KGnOQBM/iFAOAEloFEiJfnLCWAlkRSZ3XU8X4rb0= Subject key identifier: 3B:25:25:15:F5:75:8D:60:41:16:B1:DD:77:07:DA:31:4C:21:16:C5 Authority key identifier: B5:47:62:81:F3:59:4D:38:64:9C:CC:FF:52:F5:8B:B4:9B:47:5F:09 Certificate issuer: /CN=A9169351/serialNumber=B5476281F3594D38649CCCFF52F58BB49B475F09 Certificate serial: 0145 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tUdigfNZTThknMz_UvWLtJtHXwk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9169351/31A0D182940511EEA8687547C4F9AE02/tUdigfNZTThknMz_UvWLtJtHXwk.mft Manifest number: 013F Signing time: Tue 05 Aug 2025 04:55:53 +0000 Manifest this update: Tue 05 Aug 2025 04:55:53 +0000 Manifest next update: Tue 12 Aug 2025 04:55:53 +0000 Files and hashes: 1: tUdigfNZTThknMz_UvWLtJtHXwk.crl (hash: e32HMek153PhBEHGYjP+pOoCR6463TBdMsHxqK1pzxw=) 2: 86080D8A940511EE8A83F00DC4F9AE02.roa (hash: 6vLkVoo3xeixncmkuul2aavr7vLSk2WGgm6lp66mNlo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9169351/31A0D182940511EEA8687547C4F9AE02/tUdigfNZTThknMz_UvWLtJtHXwk.crl rsync://rpki.apnic.net/member_repository/A9169351/31A0D182940511EEA8687547C4F9AE02/tUdigfNZTThknMz_UvWLtJtHXwk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tUdigfNZTThknMz_UvWLtJtHXwk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 12 Aug 2025 04:55:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 325 (0x145) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9169351, serialNumber=B5476281F3594D38649CCCFF52F58BB49B475F09 Validity Not Before: Aug 5 04:55:53 2025 GMT Not After : Aug 12 04:55:53 2025 GMT Subject: CN=68918ed9-052b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:94:2d:27:42:6d:c6:92:ca:06:88:47:5a:6d: a1:83:46:76:11:af:f9:50:ae:af:1f:b5:c0:a5:c4: b5:ae:ed:11:87:52:2d:bb:f1:d8:b0:f5:4e:76:19: e3:96:66:96:b6:3e:5f:b7:c5:de:ce:13:c0:f7:5c: af:c7:c9:5f:96:bd:0f:90:0c:4c:5e:52:28:67:03: 94:63:46:8f:6b:93:9d:1b:72:0c:70:f2:27:2e:c7: c2:75:b7:53:45:e8:77:41:b3:c1:ad:15:1d:91:8e: c2:c5:e2:47:42:d5:13:a8:53:0d:45:43:43:c2:1e: 9c:97:f9:66:12:83:f5:47:bc:45:dc:19:3b:a7:90: 48:0f:4a:7c:9f:f3:c5:9b:07:a7:65:5e:c5:71:f7: 60:52:31:a6:95:54:b9:14:be:b6:89:38:81:ea:2d: b5:19:92:9e:f7:97:ad:45:3d:6c:b3:ba:5e:db:b5: 1f:79:aa:60:f5:0e:5b:48:44:b9:72:2d:84:a2:e2: 8a:de:35:53:a8:5b:cf:50:b9:a9:70:5b:bb:f4:b3: 2c:a7:42:20:3e:43:50:c3:e2:fd:92:c0:15:4f:9d: 17:b9:0c:6b:a2:f3:b0:83:a1:92:da:4c:5a:91:70: b8:60:14:07:f1:2e:dc:7d:27:93:c3:09:56:05:1c: 61:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:25:25:15:F5:75:8D:60:41:16:B1:DD:77:07:DA:31:4C:21:16:C5 X509v3 Authority Key Identifier: keyid:B5:47:62:81:F3:59:4D:38:64:9C:CC:FF:52:F5:8B:B4:9B:47:5F:09 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9169351/31A0D182940511EEA8687547C4F9AE02/tUdigfNZTThknMz_UvWLtJtHXwk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tUdigfNZTThknMz_UvWLtJtHXwk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9169351/31A0D182940511EEA8687547C4F9AE02/tUdigfNZTThknMz_UvWLtJtHXwk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b4:fe:f3:14:f5:07:91:e6:bd:c8:53:d0:b3:1a:df:53:b2:05: 7f:5f:6f:81:43:5b:46:9a:33:ba:8d:53:fa:9d:6c:d4:87:60: ce:d3:7d:53:0f:23:ac:f2:1c:fd:ce:cd:e3:c7:e3:4a:f2:c7: b1:b0:68:94:21:10:6b:fd:5f:d5:7a:0d:5e:c5:dc:f2:6f:ef: 36:c1:47:e9:54:26:c9:64:04:9a:5c:79:dd:0a:ab:cc:6b:52: 4f:c9:ff:0a:94:bf:da:61:97:5d:0f:d7:0a:f7:64:e6:11:90: 16:ab:ea:f0:2f:0a:b6:36:1c:a3:45:cb:c9:a3:67:ec:9f:9a: 85:67:8b:e9:bd:b6:fe:bf:a9:d1:71:38:4f:04:ac:7e:b4:15: 57:0f:73:3c:e5:d8:c3:cd:91:75:e0:73:98:e3:d9:bf:ee:7e: 0f:69:80:51:5e:01:07:b1:0f:10:be:6a:86:ac:84:07:31:5c: 82:c3:d8:aa:ff:4e:25:77:8e:91:33:a0:06:07:b3:12:2f:c8: b5:d8:7c:28:3b:70:13:2d:b7:be:3f:e8:19:fd:4b:33:f9:f4: 3b:56:20:f9:91:52:46:b5:10:dd:b6:19:aa:91:4e:b3:a0:8d: b4:37:5c:d1:2d:0f:f0:02:32:d7:20:eb:08:36:21:2c:b1:b1: 89:73:f5:28 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAUUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjkzNTExMTAvBgNVBAUTKEI1NDc2MjgxRjM1OTREMzg2NDlDQ0NGRjUyRjU4QkI0 OUI0NzVGMDkwHhcNMjUwODA1MDQ1NTUzWhcNMjUwODEyMDQ1NTUzWjAYMRYwFAYD VQQDEw02ODkxOGVkOS0wNTJiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6JQtJ0JtxpLKBohHWm2hg0Z2Ea/5UK6vH7XApcS1ru0Rh1Itu/HYsPVOdhnj lmaWtj5ft8XezhPA91yvx8lflr0PkAxMXlIoZwOUY0aPa5OdG3IMcPInLsfCdbdT Reh3QbPBrRUdkY7CxeJHQtUTqFMNRUNDwh6cl/lmEoP1R7xF3Bk7p5BID0p8n/PF mwenZV7FcfdgUjGmlVS5FL62iTiB6i21GZKe95etRT1ss7pe27Ufeapg9Q5bSES5 ci2EouKK3jVTqFvPULmpcFu79LMsp0IgPkNQw+L9ksAVT50XuQxrovOwg6GS2kxa kXC4YBQH8S7cfSeTwwlWBRxhMQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDslJRX1 dY1gQRax3XcH2jFMIRbFMB8GA1UdIwQYMBaAFLVHYoHzWU04ZJzM/1L1i7SbR18J MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2OTM1MS8zMUEwRDE4Mjk0 MDUxMUVFQTg2ODc1NDdDNEY5QUUwMi90VWRpZ2ZOWlRUaGtuTXpfVXZXTHRKdEhY d2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RVZGlnZk5aVFRoa25Nel9VdldMdEp0SFh3ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 OTM1MS8zMUEwRDE4Mjk0MDUxMUVFQTg2ODc1NDdDNEY5QUUwMi90VWRpZ2ZOWlRU aGtuTXpfVXZXTHRKdEhYd2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC0/vMU9QeR5r3IU9CzGt9TsgV/X2+BQ1tGmjO6jVP6nWzUh2DO031T DyOs8hz9zs3jx+NK8sexsGiUIRBr/V/Veg1exdzyb+82wUfpVCbJZASaXHndCqvM a1JPyf8KlL/aYZddD9cK92TmEZAWq+rwLwq2NhyjRcvJo2fsn5qFZ4vpvbb+v6nR cThPBKx+tBVXD3M85djDzZF14HOY49m/7n4PaYBRXgEHsQ8QvmqGrIQHMVyCw9iq /04ld46RM6AGB7MSL8i12HwoO3ATLbe+P+gZ/Usz+fQ7ViD5kVJGtRDdthmqkU6z oI20N1zRLQ/wAjLXIOsINiEssbGJc/Uo -----END CERTIFICATE-----Generated at Wed Aug 6 14:23:16 2025 by rpki-client