$ rpki-client -vvf rpki.apnic.net/member_repository/A9142DBC/69FA25680AA411EA8C5A831BC4F9AE02/tUMZgoesmRJSAHhil7k2l_jySK4.mft File: tUMZgoesmRJSAHhil7k2l_jySK4.mft (raw, json) Hash identifier: wHSGm/jjAZwYY+4MHesMrb9EDrq8+22IQ/df2ux50Jo= Subject key identifier: 2A:3A:36:3B:A2:E6:43:D7:38:3E:02:6E:87:2B:DA:BA:5A:AE:1D:25 Authority key identifier: B5:43:19:82:87:AC:99:12:52:00:78:62:97:B9:36:97:F8:F2:48:AE Certificate issuer: /CN=A9142DBC/serialNumber=B543198287AC99125200786297B93697F8F248AE Certificate serial: 0C83 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tUMZgoesmRJSAHhil7k2l_jySK4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9142DBC/69FA25680AA411EA8C5A831BC4F9AE02/tUMZgoesmRJSAHhil7k2l_jySK4.mft Manifest number: 0C76 Signing time: Sat 18 Oct 2025 19:15:18 +0000 Manifest this update: Sat 18 Oct 2025 19:15:17 +0000 Manifest next update: Sat 25 Oct 2025 19:15:17 +0000 Files and hashes: 1: tUMZgoesmRJSAHhil7k2l_jySK4.crl (hash: RniPAhY7DEbF7EQ+cwmBAFlZt3e0M7vSqrRKpi+hgDU=) 2: DBE709060AA511EA86C8E31DC4F9AE02.roa (hash: YQqO3/GsQMAf9ewsQANIfWPP9RflccXF2o5PRECWCc4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9142DBC/69FA25680AA411EA8C5A831BC4F9AE02/tUMZgoesmRJSAHhil7k2l_jySK4.crl rsync://rpki.apnic.net/member_repository/A9142DBC/69FA25680AA411EA8C5A831BC4F9AE02/tUMZgoesmRJSAHhil7k2l_jySK4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tUMZgoesmRJSAHhil7k2l_jySK4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 19:15:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3203 (0xc83) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9142DBC, serialNumber=B543198287AC99125200786297B93697F8F248AE Validity Not Before: Oct 18 19:15:17 2025 GMT Not After : Oct 25 19:15:17 2025 GMT Subject: CN=68f3e746-06d6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:90:94:c6:6d:61:1f:be:ed:c5:04:dc:6c:d0: 22:45:58:0a:06:57:82:7b:55:f4:6d:f1:8b:e3:b7: c4:6d:5b:5b:63:64:e1:15:b5:9a:ad:85:00:fa:30: be:01:ba:ec:c9:d5:88:24:28:5f:be:ed:d8:fe:e8: 83:e6:ce:ce:b0:6b:76:bb:76:d6:1f:ad:5e:8e:b0: 5f:ae:fa:82:c0:95:bd:76:39:76:99:02:28:fe:f8: e2:76:75:0f:39:73:26:99:a5:bc:67:3f:67:7a:e0: 52:3e:cc:4a:25:59:ba:49:eb:2b:bd:33:09:db:b4: 6e:a3:c8:87:6c:de:6a:0b:4c:b2:bf:de:75:d9:68: 4e:ee:6c:41:24:1a:dc:07:94:ce:9c:3b:c4:d1:63: 08:e1:9b:9a:94:87:63:84:10:35:c9:5f:07:8b:6d: c5:d0:3b:3e:18:ce:25:d6:d3:77:ad:65:2c:3b:66: 09:4c:f2:45:0d:de:c5:bb:3a:82:79:65:9b:08:d2: 54:86:4b:1f:6c:fe:10:e3:6a:dd:b1:6e:09:fa:31: 6c:d5:a1:ff:34:24:9b:fe:46:3d:b4:90:b4:c8:81: 40:99:61:25:28:00:09:11:7d:aa:83:03:81:7a:9a: 09:50:35:55:a0:6c:27:47:10:ab:a7:a4:55:d1:22: 9b:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:3A:36:3B:A2:E6:43:D7:38:3E:02:6E:87:2B:DA:BA:5A:AE:1D:25 X509v3 Authority Key Identifier: keyid:B5:43:19:82:87:AC:99:12:52:00:78:62:97:B9:36:97:F8:F2:48:AE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9142DBC/69FA25680AA411EA8C5A831BC4F9AE02/tUMZgoesmRJSAHhil7k2l_jySK4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tUMZgoesmRJSAHhil7k2l_jySK4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9142DBC/69FA25680AA411EA8C5A831BC4F9AE02/tUMZgoesmRJSAHhil7k2l_jySK4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1f:44:b3:66:95:0b:c0:b8:42:8d:f9:ce:86:8d:28:8f:bf:1e: 5d:1d:8b:6d:a2:68:9d:9c:2f:39:2c:ba:b6:e1:fb:44:72:c9: b4:da:aa:4f:08:d2:3d:06:56:95:52:85:70:5a:c0:a7:98:cc: b7:e2:a1:91:7a:2a:f3:87:e5:b7:83:e9:6e:7e:1a:e7:1c:dc: 4f:4f:7f:73:25:83:1c:00:06:62:71:30:62:f2:5b:f7:81:ea: db:8d:43:fc:85:27:08:c3:c2:65:ad:63:eb:89:5e:0a:63:29: cc:09:8b:1d:52:11:8b:1d:48:73:b8:0e:7d:bd:0c:74:1a:22: 37:46:0f:4f:f2:e3:10:80:17:3f:d0:b9:35:f4:05:9d:81:11: d2:d3:0e:0c:de:11:0b:df:92:92:bf:fe:36:19:73:40:2f:2a: 40:ce:2f:87:49:2b:4f:8a:6d:05:22:c2:3e:59:54:1c:f9:14: 18:a4:1e:9f:56:10:05:e5:ac:a6:c0:f4:6a:78:98:ca:52:e2: 3d:cb:d7:b5:98:70:30:19:95:ca:a9:d4:e3:bd:bd:de:47:f4: d6:c6:59:1f:f8:9d:db:2d:5d:58:7e:e1:2f:4f:a2:42:9d:ea: 44:d3:dc:11:57:b5:06:9a:dc:69:f5:69:18:e2:05:16:11:c4: 3d:5f:2b:22 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDIMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDJEQkMxMTAvBgNVBAUTKEI1NDMxOTgyODdBQzk5MTI1MjAwNzg2Mjk3QjkzNjk3 RjhGMjQ4QUUwHhcNMjUxMDE4MTkxNTE3WhcNMjUxMDI1MTkxNTE3WjAYMRYwFAYD VQQDEw02OGYzZTc0Ni0wNmQ2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAm5CUxm1hH77txQTcbNAiRVgKBleCe1X0bfGL47fEbVtbY2ThFbWarYUA+jC+ AbrsydWIJChfvu3Y/uiD5s7OsGt2u3bWH61ejrBfrvqCwJW9djl2mQIo/vjidnUP OXMmmaW8Zz9neuBSPsxKJVm6SesrvTMJ27Ruo8iHbN5qC0yyv9512WhO7mxBJBrc B5TOnDvE0WMI4ZualIdjhBA1yV8Hi23F0Ds+GM4l1tN3rWUsO2YJTPJFDd7FuzqC eWWbCNJUhksfbP4Q42rdsW4J+jFs1aH/NCSb/kY9tJC0yIFAmWElKAAJEX2qgwOB epoJUDVVoGwnRxCrp6RV0SKbzwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCo6Njui 5kPXOD4Cbocr2rparh0lMB8GA1UdIwQYMBaAFLVDGYKHrJkSUgB4Ype5Npf48kiu MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MkRCQy82OUZBMjU2ODBB QTQxMUVBOEM1QTgzMUJDNEY5QUUwMi90VU1aZ29lc21SSlNBSGhpbDdrMmxfanlT SzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RVTVpnb2VzbVJKU0FIaGlsN2sybF9qeVNLNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MkRCQy82OUZBMjU2ODBBQTQxMUVBOEM1QTgzMUJDNEY5QUUwMi90VU1aZ29lc21S SlNBSGhpbDdrMmxfanlTSzQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAfRLNmlQvAuEKN+c6GjSiPvx5dHYttomidnC85LLq24ftEcsm02qpP CNI9BlaVUoVwWsCnmMy34qGReirzh+W3g+lufhrnHNxPT39zJYMcAAZicTBi8lv3 gerbjUP8hScIw8JlrWPriV4KYynMCYsdUhGLHUhzuA59vQx0GiI3Rg9P8uMQgBc/ 0Lk19AWdgRHS0w4M3hEL35KSv/42GXNALypAzi+HSStPim0FIsI+WVQc+RQYpB6f VhAF5aymwPRqeJjKUuI9y9e1mHAwGZXKqdTjvb3eR/TWxlkf+J3bLV1YfuEvT6JC nepE09wRV7UGmtxp9WkY4gUWEcQ9Xysi -----END CERTIFICATE-----Generated at Mon Oct 20 17:08:30 2025 by rpki-client