$ rpki-client -vvf rpki.apnic.net/member_repository/A9142DBC/69FA25680AA411EA8C5A831BC4F9AE02/tUMZgoesmRJSAHhil7k2l_jySK4.mft File: tUMZgoesmRJSAHhil7k2l_jySK4.mft (raw, json) Hash identifier: gj2cCrRLV+KtHP+f/YFL5+hhGz/JhWJmHa/JDKtHYq4= Subject key identifier: A4:FF:99:49:BB:01:59:4B:A3:00:24:67:C5:D9:0A:2F:75:0F:87:FE Authority key identifier: B5:43:19:82:87:AC:99:12:52:00:78:62:97:B9:36:97:F8:F2:48:AE Certificate issuer: /CN=A9142DBC/serialNumber=B543198287AC99125200786297B93697F8F248AE Certificate serial: 0C31 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tUMZgoesmRJSAHhil7k2l_jySK4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9142DBC/69FA25680AA411EA8C5A831BC4F9AE02/tUMZgoesmRJSAHhil7k2l_jySK4.mft Manifest number: 0C25 Signing time: Wed 14 May 2025 18:44:42 +0000 Manifest this update: Wed 14 May 2025 18:44:41 +0000 Manifest next update: Wed 21 May 2025 18:44:41 +0000 Files and hashes: 1: tUMZgoesmRJSAHhil7k2l_jySK4.crl (hash: q45tjTXPyqO0VUgCwNuR+CjZz8srmL9p4kPepC+ZB+o=) 2: DBE709060AA511EA86C8E31DC4F9AE02.roa (hash: zgjsHos2MHOxvntym+ulSXBT66zLuQ8zyiMRNeqJYvE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9142DBC/69FA25680AA411EA8C5A831BC4F9AE02/tUMZgoesmRJSAHhil7k2l_jySK4.crl rsync://rpki.apnic.net/member_repository/A9142DBC/69FA25680AA411EA8C5A831BC4F9AE02/tUMZgoesmRJSAHhil7k2l_jySK4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tUMZgoesmRJSAHhil7k2l_jySK4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 21 May 2025 18:44:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3121 (0xc31) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9142DBC, serialNumber=B543198287AC99125200786297B93697F8F248AE Validity Not Before: May 14 18:44:41 2025 GMT Not After : May 21 18:44:41 2025 GMT Subject: CN=6824e499-1001 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:aa:89:e9:c1:ce:9c:de:84:1b:66:eb:92:2f: a3:19:2e:48:7e:2b:0b:42:36:78:97:39:12:9f:9e: 9a:b6:13:c7:b6:a2:24:bd:7c:29:52:e3:e0:75:fa: 0f:e9:30:26:d9:6c:a5:2a:78:cc:b0:d7:f3:bd:3a: 0c:a9:17:5c:8f:4f:00:a2:57:0d:82:6b:3d:d4:b3: 07:f7:85:da:27:b6:aa:d1:44:e6:da:6d:21:09:7d: bf:24:cf:1b:43:84:d1:8a:2d:45:c7:75:34:1b:c1: b6:d2:f0:bf:6e:cf:72:b6:c3:57:94:a9:07:f2:f6: bb:10:7e:89:2a:c0:59:c8:54:de:c7:45:30:95:79: fe:f8:3a:65:0a:d4:bc:c8:b3:f7:f1:0b:28:e8:15: 7d:7e:c8:16:12:10:2a:70:56:f3:a5:9a:0a:fe:32: 04:23:0c:b5:d8:c9:34:7e:1b:f5:1c:f9:c0:f9:5b: 51:f5:8d:6e:a9:53:8b:08:bd:1d:23:45:3d:a8:a8: 41:f0:ed:c6:80:33:9f:3a:84:a1:fb:0d:9b:83:29: c9:05:3e:0b:bb:59:ac:9a:2e:b8:ca:ff:d8:0a:fd: 6b:d4:0e:94:37:4c:9b:60:c9:4f:c0:e5:bb:c1:63: f6:7b:d6:c8:3d:16:de:24:0a:fa:7b:fd:7f:9e:39: 42:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:FF:99:49:BB:01:59:4B:A3:00:24:67:C5:D9:0A:2F:75:0F:87:FE X509v3 Authority Key Identifier: keyid:B5:43:19:82:87:AC:99:12:52:00:78:62:97:B9:36:97:F8:F2:48:AE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9142DBC/69FA25680AA411EA8C5A831BC4F9AE02/tUMZgoesmRJSAHhil7k2l_jySK4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tUMZgoesmRJSAHhil7k2l_jySK4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9142DBC/69FA25680AA411EA8C5A831BC4F9AE02/tUMZgoesmRJSAHhil7k2l_jySK4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 60:13:68:2d:54:cf:f6:b6:ae:06:3e:71:fb:d1:08:4f:3e:69: d6:d1:d0:f6:d7:7c:c2:27:70:14:50:20:c9:84:a3:03:0b:64: a0:03:b0:bf:7f:dc:7d:a4:3e:36:e5:46:ef:6d:91:4a:80:8a: ca:1f:41:af:0a:ec:8d:57:2a:43:f9:65:fb:2c:b3:93:3e:05: 6e:f7:35:43:68:e6:d8:0d:2b:36:00:4e:b4:8e:10:7f:e0:74: d8:11:b9:91:a8:93:1f:9f:b3:fb:3d:37:bf:b0:8a:0f:52:70: 8d:00:ef:43:9b:6f:ae:4a:3a:cd:a9:70:86:19:dc:80:c1:36: fe:8a:ac:f5:60:56:83:29:d7:a5:6e:3a:ef:b8:c1:14:51:46: 44:39:f2:68:6a:e9:dd:21:61:6e:94:29:c7:ea:0c:7e:e3:ff: 94:ca:b0:c4:fd:7f:f4:8a:a0:a3:87:d4:70:96:dd:f1:80:d8: 75:7c:bc:37:49:84:3a:68:40:28:d6:33:5c:a4:b7:40:d9:57: 61:f0:50:94:06:7a:af:26:6b:26:c4:89:92:f7:70:3e:0f:b7: 62:d4:74:ea:f5:a1:50:13:81:61:19:e9:7a:7d:f1:35:46:14: 32:75:74:6a:56:f9:01:0d:17:9c:b9:6d:e4:22:26:5a:4f:97: 06:9c:19:47 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDDEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDJEQkMxMTAvBgNVBAUTKEI1NDMxOTgyODdBQzk5MTI1MjAwNzg2Mjk3QjkzNjk3 RjhGMjQ4QUUwHhcNMjUwNTE0MTg0NDQxWhcNMjUwNTIxMTg0NDQxWjAYMRYwFAYD VQQDEw02ODI0ZTQ5OS0xMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAraqJ6cHOnN6EG2brki+jGS5IfisLQjZ4lzkSn56athPHtqIkvXwpUuPgdfoP 6TAm2WylKnjMsNfzvToMqRdcj08AolcNgms91LMH94XaJ7aq0UTm2m0hCX2/JM8b Q4TRii1Fx3U0G8G20vC/bs9ytsNXlKkH8va7EH6JKsBZyFTex0UwlXn++DplCtS8 yLP38Qso6BV9fsgWEhAqcFbzpZoK/jIEIwy12Mk0fhv1HPnA+VtR9Y1uqVOLCL0d I0U9qKhB8O3GgDOfOoSh+w2bgynJBT4Lu1msmi64yv/YCv1r1A6UN0ybYMlPwOW7 wWP2e9bIPRbeJAr6e/1/njlCNwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKT/mUm7 AVlLowAkZ8XZCi91D4f+MB8GA1UdIwQYMBaAFLVDGYKHrJkSUgB4Ype5Npf48kiu MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MkRCQy82OUZBMjU2ODBB QTQxMUVBOEM1QTgzMUJDNEY5QUUwMi90VU1aZ29lc21SSlNBSGhpbDdrMmxfanlT SzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RVTVpnb2VzbVJKU0FIaGlsN2sybF9qeVNLNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MkRCQy82OUZBMjU2ODBBQTQxMUVBOEM1QTgzMUJDNEY5QUUwMi90VU1aZ29lc21S SlNBSGhpbDdrMmxfanlTSzQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBgE2gtVM/2tq4GPnH70QhPPmnW0dD213zCJ3AUUCDJhKMDC2SgA7C/ f9x9pD425UbvbZFKgIrKH0GvCuyNVypD+WX7LLOTPgVu9zVDaObYDSs2AE60jhB/ 4HTYEbmRqJMfn7P7PTe/sIoPUnCNAO9Dm2+uSjrNqXCGGdyAwTb+iqz1YFaDKdel bjrvuMEUUUZEOfJoaundIWFulCnH6gx+4/+UyrDE/X/0iqCjh9Rwlt3xgNh1fLw3 SYQ6aEAo1jNcpLdA2Vdh8FCUBnqvJmsmxImS93A+D7di1HTq9aFQE4FhGel6ffE1 RhQydXRqVvkBDRecuW3kIiZaT5cGnBlH -----END CERTIFICATE-----Generated at Thu May 15 06:42:11 2025 by rpki-client