$ rpki-client -vvf rpki.apnic.net/member_repository/A9132C14/22DAECC8F47A11EB93CEFF2FC4F9AE02/TG0zuIPIM699cikDd67c0LWjzdA.mft File: TG0zuIPIM699cikDd67c0LWjzdA.mft (raw, json) Hash identifier: LVEf2fdxdFmYaVh59FasABKPgQWBB5eca4LELDowZ54= Subject key identifier: 97:55:F7:41:CF:E7:BF:F1:DF:D9:DE:9B:5B:15:9A:96:48:A2:DE:A9 Authority key identifier: 4C:6D:33:B8:83:C8:33:AF:7D:72:29:03:77:AE:DC:D0:B5:A3:CD:D0 Certificate issuer: /CN=A9132C14/serialNumber=4C6D33B883C833AF7D72290377AEDCD0B5A3CDD0 Certificate serial: 0573 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TG0zuIPIM699cikDd67c0LWjzdA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9132C14/22DAECC8F47A11EB93CEFF2FC4F9AE02/TG0zuIPIM699cikDd67c0LWjzdA.mft Manifest number: 0569 Signing time: Fri 22 Aug 2025 23:30:18 +0000 Manifest this update: Fri 22 Aug 2025 23:30:17 +0000 Manifest next update: Fri 29 Aug 2025 23:30:17 +0000 Files and hashes: 1: TG0zuIPIM699cikDd67c0LWjzdA.crl (hash: UadLI2utC4jKIcQV12r/282/Zc6cnxLLnbOOSvJg0YQ=) 2: 58BB655AF47C11EBB34AB831C4F9AE02.roa (hash: fKjF+BnPFzCKYzy2S18hHZ7OEvWxZXVLzbMEcVWg2es=) 3: 595C959CF47C11EBB34AB831C4F9AE02.roa (hash: 5kzrcQyFidPv5zApR8jOVucTTuhj9FEkXhDKiJJ7pxM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9132C14/22DAECC8F47A11EB93CEFF2FC4F9AE02/TG0zuIPIM699cikDd67c0LWjzdA.crl rsync://rpki.apnic.net/member_repository/A9132C14/22DAECC8F47A11EB93CEFF2FC4F9AE02/TG0zuIPIM699cikDd67c0LWjzdA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TG0zuIPIM699cikDd67c0LWjzdA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 23:30:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1395 (0x573) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9132C14, serialNumber=4C6D33B883C833AF7D72290377AEDCD0B5A3CDD0 Validity Not Before: Aug 22 23:30:17 2025 GMT Not After : Aug 29 23:30:17 2025 GMT Subject: CN=68a8fd89-6373 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:39:d5:80:19:91:7b:88:e0:6e:97:6a:4d:5e: 2a:58:2b:37:70:6f:59:ea:72:64:1a:c7:81:77:e2: d2:b2:99:5e:d0:db:30:45:10:1b:ae:47:18:1a:f2: 2b:73:97:da:17:9c:69:2c:ab:ab:4e:8c:ed:d6:39: 71:de:25:f8:da:9b:6a:82:e7:d4:15:ca:51:87:1b: d6:20:a0:69:1f:39:aa:5d:3b:c9:32:c1:e6:76:9e: 48:6c:44:7c:e1:56:ed:9a:fe:7d:b6:bf:95:0c:f7: d8:24:0e:43:ca:31:0d:d5:49:45:37:99:d3:12:6e: 66:b0:15:9c:c2:bb:44:d5:74:a8:0a:bf:c5:9a:9b: 41:8f:13:82:3c:21:47:87:77:c1:87:c7:9b:df:b2: 12:60:f0:f7:34:92:cc:c2:f2:2d:ee:cd:74:5c:c3: dd:98:35:c9:88:03:45:bc:a0:44:4d:4a:7e:21:90: e3:6d:41:39:b4:a6:be:ee:f0:f4:dd:76:a1:21:23: 5b:43:1a:0d:92:54:2b:af:cf:b6:1c:70:32:27:2c: 55:22:f1:6f:ad:2c:a1:34:74:fc:a2:cd:bc:19:e8: fa:0d:e7:88:77:28:28:23:27:a2:90:c1:fe:6d:c7: cd:2e:1f:00:6c:f5:96:c4:7b:1c:97:e1:99:6a:a5: 01:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:55:F7:41:CF:E7:BF:F1:DF:D9:DE:9B:5B:15:9A:96:48:A2:DE:A9 X509v3 Authority Key Identifier: keyid:4C:6D:33:B8:83:C8:33:AF:7D:72:29:03:77:AE:DC:D0:B5:A3:CD:D0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9132C14/22DAECC8F47A11EB93CEFF2FC4F9AE02/TG0zuIPIM699cikDd67c0LWjzdA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TG0zuIPIM699cikDd67c0LWjzdA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9132C14/22DAECC8F47A11EB93CEFF2FC4F9AE02/TG0zuIPIM699cikDd67c0LWjzdA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 60:a5:78:14:8a:75:3a:3e:ca:66:11:4e:88:c7:9d:43:2b:04: 33:79:7c:74:cf:8d:7e:26:ae:bd:14:73:1b:15:4c:c3:4c:76: 86:b3:03:4a:6c:f3:ce:f2:25:6a:73:c6:dd:fe:cb:9b:b8:9f: 80:27:75:44:a8:55:7b:b2:37:56:d8:b4:af:8f:08:81:92:c6: 66:30:a5:fd:fe:b1:15:92:6a:f6:6b:69:8a:85:b5:65:2a:d1: 12:2c:e0:31:18:a4:c9:fe:98:5f:2e:8a:68:44:4e:30:a4:4c: e2:53:03:49:da:4e:66:c2:0b:38:f3:8f:e7:5c:62:22:99:4f: 6c:7f:ec:06:52:67:37:d2:d5:2d:ef:e0:fb:91:46:09:4d:33: d3:90:08:7c:a6:11:83:85:7c:f2:59:99:9a:73:61:e0:92:d7: 5f:57:e4:29:52:ae:b5:44:23:2a:26:96:0d:5b:a7:81:b8:37: a5:d3:8e:99:29:91:83:e0:13:9d:7e:dd:b5:cc:59:f4:37:93: 28:a8:94:9b:dc:ee:cb:12:e7:7f:02:db:b2:f3:1f:a9:c7:24: 7e:94:eb:4f:fb:32:80:e6:d5:10:36:a2:75:b6:69:da:67:7c: fc:14:f5:24:37:68:03:b3:0d:ef:6a:2f:ca:61:c7:b3:e2:c1: d9:82:9b:19 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBXMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzJDMTQxMTAvBgNVBAUTKDRDNkQzM0I4ODNDODMzQUY3RDcyMjkwMzc3QUVEQ0Qw QjVBM0NERDAwHhcNMjUwODIyMjMzMDE3WhcNMjUwODI5MjMzMDE3WjAYMRYwFAYD VQQDEw02OGE4ZmQ4OS02MzczMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1DnVgBmRe4jgbpdqTV4qWCs3cG9Z6nJkGseBd+LSsple0NswRRAbrkcYGvIr c5faF5xpLKurTozt1jlx3iX42ptqgufUFcpRhxvWIKBpHzmqXTvJMsHmdp5IbER8 4Vbtmv59tr+VDPfYJA5DyjEN1UlFN5nTEm5msBWcwrtE1XSoCr/FmptBjxOCPCFH h3fBh8eb37ISYPD3NJLMwvIt7s10XMPdmDXJiANFvKBETUp+IZDjbUE5tKa+7vD0 3XahISNbQxoNklQrr8+2HHAyJyxVIvFvrSyhNHT8os28Gej6DeeIdygoIyeikMH+ bcfNLh8AbPWWxHscl+GZaqUBvQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJdV90HP 57/x39nem1sVmpZIot6pMB8GA1UdIwQYMBaAFExtM7iDyDOvfXIpA3eu3NC1o83Q MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMkMxNC8yMkRBRUNDOEY0 N0ExMUVCOTNDRUZGMkZDNEY5QUUwMi9URzB6dUlQSU02OTljaWtEZDY3YzBMV2p6 ZEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1RHMHp1SVBJTTY5OWNpa0RkNjdjMExXanpkQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MkMxNC8yMkRBRUNDOEY0N0ExMUVCOTNDRUZGMkZDNEY5QUUwMi9URzB6dUlQSU02 OTljaWtEZDY3YzBMV2p6ZEEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBgpXgUinU6PspmEU6Ix51DKwQzeXx0z41+Jq69FHMbFUzDTHaGswNK bPPO8iVqc8bd/subuJ+AJ3VEqFV7sjdW2LSvjwiBksZmMKX9/rEVkmr2a2mKhbVl KtESLOAxGKTJ/phfLopoRE4wpEziUwNJ2k5mwgs484/nXGIimU9sf+wGUmc30tUt 7+D7kUYJTTPTkAh8phGDhXzyWZmac2HgktdfV+QpUq61RCMqJpYNW6eBuDel046Z KZGD4BOdft21zFn0N5MoqJSb3O7LEud/Atuy8x+pxyR+lOtP+zKA5tUQNqJ1tmna Z3z8FPUkN2gDsw3vai/KYcez4sHZgpsZ -----END CERTIFICATE-----Generated at Sat Aug 23 13:30:16 2025 by rpki-client