$ rpki-client -vvf rpki.apnic.net/member_repository/A9132C14/22DAECC8F47A11EB93CEFF2FC4F9AE02/TG0zuIPIM699cikDd67c0LWjzdA.mft File: TG0zuIPIM699cikDd67c0LWjzdA.mft (raw, json) Hash identifier: 9xHSfemwM/PnO6OpcXCbFnlWRt6/scWTn50R16+ZqWw= Subject key identifier: 9F:72:A5:78:63:17:1C:CD:79:E4:6F:2D:A9:FE:EA:D7:90:28:AB:03 Authority key identifier: 4C:6D:33:B8:83:C8:33:AF:7D:72:29:03:77:AE:DC:D0:B5:A3:CD:D0 Certificate issuer: /CN=A9132C14/serialNumber=4C6D33B883C833AF7D72290377AEDCD0B5A3CDD0 Certificate serial: 0553 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TG0zuIPIM699cikDd67c0LWjzdA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9132C14/22DAECC8F47A11EB93CEFF2FC4F9AE02/TG0zuIPIM699cikDd67c0LWjzdA.mft Manifest number: 054B Signing time: Sat 28 Jun 2025 22:59:27 +0000 Manifest this update: Sat 28 Jun 2025 22:59:27 +0000 Manifest next update: Sat 05 Jul 2025 22:59:27 +0000 Files and hashes: 1: TG0zuIPIM699cikDd67c0LWjzdA.crl (hash: jKdGOToJPy9EDNSYpV0PyMxX8iwGbtHACy5gEgMwtgo=) 2: 58BB655AF47C11EBB34AB831C4F9AE02.roa (hash: YGvbQnTcIdlfOTH6YnyF9Rzx2xpGEbYHp7xYeN5ch34=) 3: 595C959CF47C11EBB34AB831C4F9AE02.roa (hash: WH1se2Qhy8RI1ONvLaN4qa1WrKYL/nqvZGw9A9exjh8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9132C14/22DAECC8F47A11EB93CEFF2FC4F9AE02/TG0zuIPIM699cikDd67c0LWjzdA.crl rsync://rpki.apnic.net/member_repository/A9132C14/22DAECC8F47A11EB93CEFF2FC4F9AE02/TG0zuIPIM699cikDd67c0LWjzdA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TG0zuIPIM699cikDd67c0LWjzdA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 05 Jul 2025 22:59:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1363 (0x553) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9132C14, serialNumber=4C6D33B883C833AF7D72290377AEDCD0B5A3CDD0 Validity Not Before: Jun 28 22:59:27 2025 GMT Not After : Jul 5 22:59:27 2025 GMT Subject: CN=686073cf-d510 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:60:86:cc:bd:48:69:65:0e:52:f3:14:6a:e4: b4:c9:02:0b:84:5d:38:6f:2a:7a:ef:7d:1e:46:a7: 6a:74:6e:de:5d:ac:dc:97:d4:17:27:0b:d3:ba:3c: ea:ce:f5:33:79:5a:ea:ce:bd:47:a6:ea:c1:60:bc: bc:bf:1f:4c:2b:c3:fa:f7:f3:ae:56:ab:4e:67:58: a2:f5:6f:6b:ed:69:84:24:62:2e:4c:63:c4:03:18: f9:91:2a:a7:da:22:79:84:24:19:6b:08:b6:63:c1: 4e:89:57:b0:2e:f9:5c:e9:ec:12:ee:45:b6:88:42: a7:a8:d7:e7:3e:d3:2a:7c:e1:05:ed:d3:1c:98:ad: e1:a1:39:3b:dd:82:99:3b:27:72:1e:32:c7:d1:82: b6:0d:d2:49:b5:b4:83:60:2d:68:97:41:b4:dc:8f: 2a:86:cd:d3:eb:36:c0:f0:69:d7:e3:95:5c:3b:05: cf:1e:21:26:e2:72:88:79:83:7a:ad:02:be:4a:f7: be:9d:f9:27:60:13:83:ce:6c:9f:ac:fc:d4:c1:87: a5:b6:80:64:28:3f:ea:2e:15:66:7d:02:41:03:75: 22:c7:e5:17:b5:05:e8:9b:e6:47:28:9b:90:29:62: 54:c6:d9:7c:a4:11:28:3c:1c:27:de:0f:e2:09:d2: 2a:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:72:A5:78:63:17:1C:CD:79:E4:6F:2D:A9:FE:EA:D7:90:28:AB:03 X509v3 Authority Key Identifier: keyid:4C:6D:33:B8:83:C8:33:AF:7D:72:29:03:77:AE:DC:D0:B5:A3:CD:D0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9132C14/22DAECC8F47A11EB93CEFF2FC4F9AE02/TG0zuIPIM699cikDd67c0LWjzdA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TG0zuIPIM699cikDd67c0LWjzdA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9132C14/22DAECC8F47A11EB93CEFF2FC4F9AE02/TG0zuIPIM699cikDd67c0LWjzdA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 84:bd:ff:05:72:3f:49:3a:a1:26:f5:a4:7d:7e:0e:cb:90:c5: 53:fe:43:1f:9e:52:bc:4a:7a:0f:08:3c:5f:82:f2:e9:da:c0: 16:9d:c6:ab:7d:d7:04:e9:d0:56:17:27:9c:6e:e7:72:5b:0f: 3f:c3:67:e5:a6:0b:75:c5:be:d8:60:bb:f4:5f:d6:c1:2c:dc: 55:36:0a:f7:b4:45:8f:4d:8b:91:bb:5c:39:10:76:85:a3:25: 47:84:cb:b6:cc:dc:6c:ed:7a:c0:d9:62:70:ab:63:9b:2e:22: 04:51:36:09:61:6b:bd:ba:ff:1b:bc:9c:6d:14:14:94:9d:72: d9:ce:16:1e:73:ad:19:e6:60:2b:3d:29:83:86:ac:6f:3e:6d: b0:09:67:dc:be:82:8c:fa:ed:30:e3:ac:9c:a2:9e:26:16:95: a8:d1:3c:35:44:ac:17:22:ad:34:68:dc:07:d1:0b:78:36:85: d6:e2:13:d7:b1:51:69:b9:54:bb:6b:e0:08:37:31:70:1c:26: c3:0e:0b:b0:51:24:f3:7a:75:0a:a8:ae:07:c7:42:0b:f4:29: f3:b3:d9:36:ec:64:08:a1:5a:09:b1:95:db:8d:62:0f:d4:7a: b6:31:05:a8:00:43:e7:0f:80:73:90:f9:66:1e:d3:7c:b1:f9: a0:ed:2a:9b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBVMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzJDMTQxMTAvBgNVBAUTKDRDNkQzM0I4ODNDODMzQUY3RDcyMjkwMzc3QUVEQ0Qw QjVBM0NERDAwHhcNMjUwNjI4MjI1OTI3WhcNMjUwNzA1MjI1OTI3WjAYMRYwFAYD VQQDEw02ODYwNzNjZi1kNTEwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnWCGzL1IaWUOUvMUauS0yQILhF04byp6730eRqdqdG7eXazcl9QXJwvTujzq zvUzeVrqzr1HpurBYLy8vx9MK8P69/OuVqtOZ1ii9W9r7WmEJGIuTGPEAxj5kSqn 2iJ5hCQZawi2Y8FOiVewLvlc6ewS7kW2iEKnqNfnPtMqfOEF7dMcmK3hoTk73YKZ OydyHjLH0YK2DdJJtbSDYC1ol0G03I8qhs3T6zbA8GnX45VcOwXPHiEm4nKIeYN6 rQK+Sve+nfknYBODzmyfrPzUwYeltoBkKD/qLhVmfQJBA3Uix+UXtQXom+ZHKJuQ KWJUxtl8pBEoPBwn3g/iCdIqtwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJ9ypXhj FxzNeeRvLan+6teQKKsDMB8GA1UdIwQYMBaAFExtM7iDyDOvfXIpA3eu3NC1o83Q MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMkMxNC8yMkRBRUNDOEY0 N0ExMUVCOTNDRUZGMkZDNEY5QUUwMi9URzB6dUlQSU02OTljaWtEZDY3YzBMV2p6 ZEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1RHMHp1SVBJTTY5OWNpa0RkNjdjMExXanpkQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MkMxNC8yMkRBRUNDOEY0N0ExMUVCOTNDRUZGMkZDNEY5QUUwMi9URzB6dUlQSU02 OTljaWtEZDY3YzBMV2p6ZEEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCEvf8Fcj9JOqEm9aR9fg7LkMVT/kMfnlK8SnoPCDxfgvLp2sAWncar fdcE6dBWFyecbudyWw8/w2flpgt1xb7YYLv0X9bBLNxVNgr3tEWPTYuRu1w5EHaF oyVHhMu2zNxs7XrA2WJwq2ObLiIEUTYJYWu9uv8bvJxtFBSUnXLZzhYec60Z5mAr PSmDhqxvPm2wCWfcvoKM+u0w46ycop4mFpWo0Tw1RKwXIq00aNwH0Qt4NoXW4hPX sVFpuVS7a+AINzFwHCbDDguwUSTzenUKqK4Hx0IL9Cnzs9k27GQIoVoJsZXbjWIP 1Hq2MQWoAEPnD4BzkPlmHtN8sfmg7Sqb -----END CERTIFICATE-----Generated at Sun Jun 29 12:27:44 2025 by rpki-client