$ rpki-client -vvf rpki.apnic.net/member_repository/A9142DBC/69FA25680AA411EA8C5A831BC4F9AE02/tUMZgoesmRJSAHhil7k2l_jySK4.mft File: tUMZgoesmRJSAHhil7k2l_jySK4.mft (raw, json) Hash identifier: LdqohcBCAa/EvrHr+djmJCbahCZp/M5OONzuCvoQBkc= Subject key identifier: A7:B1:37:5B:E3:25:BB:E6:1D:D0:5B:93:C7:6B:65:A0:A1:A9:2D:6B Authority key identifier: B5:43:19:82:87:AC:99:12:52:00:78:62:97:B9:36:97:F8:F2:48:AE Certificate issuer: /CN=A9142DBC/serialNumber=B543198287AC99125200786297B93697F8F248AE Certificate serial: 0C4C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tUMZgoesmRJSAHhil7k2l_jySK4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9142DBC/69FA25680AA411EA8C5A831BC4F9AE02/tUMZgoesmRJSAHhil7k2l_jySK4.mft Manifest number: 0C3F Signing time: Wed 02 Jul 2025 18:47:46 +0000 Manifest this update: Wed 02 Jul 2025 18:47:46 +0000 Manifest next update: Wed 09 Jul 2025 18:47:46 +0000 Files and hashes: 1: tUMZgoesmRJSAHhil7k2l_jySK4.crl (hash: AZ06EoRQN3ou7jtfHGkT2iesydiYvfZgVZPWpQ01kCM=) 2: DBE709060AA511EA86C8E31DC4F9AE02.roa (hash: YQqO3/GsQMAf9ewsQANIfWPP9RflccXF2o5PRECWCc4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9142DBC/69FA25680AA411EA8C5A831BC4F9AE02/tUMZgoesmRJSAHhil7k2l_jySK4.crl rsync://rpki.apnic.net/member_repository/A9142DBC/69FA25680AA411EA8C5A831BC4F9AE02/tUMZgoesmRJSAHhil7k2l_jySK4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tUMZgoesmRJSAHhil7k2l_jySK4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 18:47:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3148 (0xc4c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9142DBC, serialNumber=B543198287AC99125200786297B93697F8F248AE Validity Not Before: Jul 2 18:47:46 2025 GMT Not After : Jul 9 18:47:46 2025 GMT Subject: CN=68657ed2-d43a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:7f:e5:f9:a4:24:63:cb:0c:63:08:17:72:74: 0f:e0:bd:ed:84:1e:e1:77:bb:ce:97:97:27:bd:8c: eb:2f:b3:cc:6e:ac:1b:84:3e:0d:fb:c4:52:dc:af: 75:df:57:7f:84:eb:29:1f:cd:8d:9a:09:35:18:ad: 13:f1:92:29:3e:85:b4:a8:7e:07:15:b2:42:a6:89: 21:8a:02:ae:3a:fb:8f:fa:82:85:b0:06:e3:aa:4b: 9d:e0:e7:cc:ba:0e:cc:1c:12:04:c4:8c:60:6f:75: d9:9e:0e:16:c3:3c:ca:ae:7f:e7:e7:73:05:13:b6: b4:9e:22:67:e1:89:28:99:ef:c6:8d:3b:89:43:62: cf:fa:01:a0:d7:87:5d:11:e8:ab:c3:0a:4b:73:ed: d1:fa:f0:62:6c:31:e8:86:0d:db:d1:f8:13:71:f6: 3d:4f:6e:13:41:1c:da:f7:bf:3e:68:05:46:71:48: 51:ae:f7:21:5d:a5:4e:4b:aa:f0:0f:61:77:c0:04: 5a:da:a5:03:69:81:d6:ae:45:23:ca:ab:f3:68:ce: 2d:1b:74:21:27:02:26:d6:47:a5:22:c6:f5:19:0a: 57:70:8e:85:68:84:fb:d8:20:ab:cb:8d:87:81:f3: 75:71:c2:8c:3f:fe:b7:4d:1b:c0:fc:9e:19:19:55: 8e:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:B1:37:5B:E3:25:BB:E6:1D:D0:5B:93:C7:6B:65:A0:A1:A9:2D:6B X509v3 Authority Key Identifier: keyid:B5:43:19:82:87:AC:99:12:52:00:78:62:97:B9:36:97:F8:F2:48:AE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9142DBC/69FA25680AA411EA8C5A831BC4F9AE02/tUMZgoesmRJSAHhil7k2l_jySK4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tUMZgoesmRJSAHhil7k2l_jySK4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9142DBC/69FA25680AA411EA8C5A831BC4F9AE02/tUMZgoesmRJSAHhil7k2l_jySK4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c4:6b:15:12:b2:18:3b:cc:65:00:1a:ea:12:b4:8c:61:e7:16: 29:8e:99:89:c1:7a:fb:c3:67:13:ae:7d:d3:2b:ca:58:a0:c7: 22:ec:4d:d5:ef:f1:97:59:38:04:8a:64:7f:6a:d7:9a:91:6e: b8:bf:d1:c9:bf:ef:ff:38:f2:71:db:d6:79:77:93:33:b8:ea: b1:61:8c:31:ca:0a:fe:54:ea:20:c8:b0:d0:fb:98:2e:7f:06: 4d:cd:6b:93:7f:8b:09:c4:df:ff:cd:06:dc:5f:9a:c0:e1:51: ee:ae:5f:17:89:b9:d5:25:f1:77:d5:88:0d:d3:cb:09:bb:be: 16:45:0b:90:38:2c:1d:3f:bc:9d:3b:ef:eb:d6:cf:7e:e2:c2: 47:3c:85:76:70:12:35:25:17:a0:f7:44:21:a7:cd:70:b7:76: 3b:8b:c1:4d:43:1c:61:29:ea:6b:c7:b2:16:b8:ac:86:f7:65: b9:ce:d3:73:0d:6a:6d:a1:a4:a4:a5:3d:34:d1:2a:8d:d2:cf: 75:60:4c:af:93:ac:d1:01:c1:e2:9f:8b:86:c9:d9:b9:74:f6: 5d:c7:73:dd:e4:c4:ad:d3:92:0c:3e:26:b0:e3:79:2f:ba:03: df:54:25:31:fe:30:37:79:83:cf:74:a1:a1:b8:e2:3a:d6:2b: 26:8c:17:4c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDEwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDJEQkMxMTAvBgNVBAUTKEI1NDMxOTgyODdBQzk5MTI1MjAwNzg2Mjk3QjkzNjk3 RjhGMjQ4QUUwHhcNMjUwNzAyMTg0NzQ2WhcNMjUwNzA5MTg0NzQ2WjAYMRYwFAYD VQQDEw02ODY1N2VkMi1kNDNhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArH/l+aQkY8sMYwgXcnQP4L3thB7hd7vOl5cnvYzrL7PMbqwbhD4N+8RS3K91 31d/hOspH82Nmgk1GK0T8ZIpPoW0qH4HFbJCpokhigKuOvuP+oKFsAbjqkud4OfM ug7MHBIExIxgb3XZng4WwzzKrn/n53MFE7a0niJn4Ykome/GjTuJQ2LP+gGg14dd EeirwwpLc+3R+vBibDHohg3b0fgTcfY9T24TQRza978+aAVGcUhRrvchXaVOS6rw D2F3wARa2qUDaYHWrkUjyqvzaM4tG3QhJwIm1kelIsb1GQpXcI6FaIT72CCry42H gfN1ccKMP/63TRvA/J4ZGVWOZQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKexN1vj JbvmHdBbk8drZaChqS1rMB8GA1UdIwQYMBaAFLVDGYKHrJkSUgB4Ype5Npf48kiu MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MkRCQy82OUZBMjU2ODBB QTQxMUVBOEM1QTgzMUJDNEY5QUUwMi90VU1aZ29lc21SSlNBSGhpbDdrMmxfanlT SzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RVTVpnb2VzbVJKU0FIaGlsN2sybF9qeVNLNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MkRCQy82OUZBMjU2ODBBQTQxMUVBOEM1QTgzMUJDNEY5QUUwMi90VU1aZ29lc21S SlNBSGhpbDdrMmxfanlTSzQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDEaxUSshg7zGUAGuoStIxh5xYpjpmJwXr7w2cTrn3TK8pYoMci7E3V 7/GXWTgEimR/ateakW64v9HJv+//OPJx29Z5d5MzuOqxYYwxygr+VOogyLDQ+5gu fwZNzWuTf4sJxN//zQbcX5rA4VHurl8XibnVJfF31YgN08sJu74WRQuQOCwdP7yd O+/r1s9+4sJHPIV2cBI1JReg90Qhp81wt3Y7i8FNQxxhKeprx7IWuKyG92W5ztNz DWptoaSkpT000SqN0s91YEyvk6zRAcHin4uGydm5dPZdx3Pd5MSt05IMPiaw43kv ugPfVCUx/jA3eYPPdKGhuOI61ismjBdM -----END CERTIFICATE-----Generated at Thu Jul 3 06:04:31 2025 by rpki-client