$ rpki-client -vvf rpki.apnic.net/member_repository/A9169351/31A0D182940511EEA8687547C4F9AE02/tUdigfNZTThknMz_UvWLtJtHXwk.mft File: tUdigfNZTThknMz_UvWLtJtHXwk.mft (raw, json) Hash identifier: fNl9PoEdBZFHhUVjiMZwqyyTUvQlEvlzDg9sO/9NMLM= Subject key identifier: 1B:84:DF:C8:91:29:E6:B5:6B:E3:D6:4F:C8:D0:9E:AF:18:16:BF:08 Authority key identifier: B5:47:62:81:F3:59:4D:38:64:9C:CC:FF:52:F5:8B:B4:9B:47:5F:09 Certificate issuer: /CN=A9169351/serialNumber=B5476281F3594D38649CCCFF52F58BB49B475F09 Certificate serial: 014E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tUdigfNZTThknMz_UvWLtJtHXwk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9169351/31A0D182940511EEA8687547C4F9AE02/tUdigfNZTThknMz_UvWLtJtHXwk.mft Manifest number: 0148 Signing time: Sat 23 Aug 2025 04:31:44 +0000 Manifest this update: Sat 23 Aug 2025 04:31:43 +0000 Manifest next update: Sat 30 Aug 2025 04:31:43 +0000 Files and hashes: 1: tUdigfNZTThknMz_UvWLtJtHXwk.crl (hash: WN3S6Am0t8zsErjUg0lzb2TE175vd5UGiV+ErOO9tzk=) 2: 86080D8A940511EE8A83F00DC4F9AE02.roa (hash: 6vLkVoo3xeixncmkuul2aavr7vLSk2WGgm6lp66mNlo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9169351/31A0D182940511EEA8687547C4F9AE02/tUdigfNZTThknMz_UvWLtJtHXwk.crl rsync://rpki.apnic.net/member_repository/A9169351/31A0D182940511EEA8687547C4F9AE02/tUdigfNZTThknMz_UvWLtJtHXwk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tUdigfNZTThknMz_UvWLtJtHXwk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 04:31:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 334 (0x14e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9169351, serialNumber=B5476281F3594D38649CCCFF52F58BB49B475F09 Validity Not Before: Aug 23 04:31:43 2025 GMT Not After : Aug 30 04:31:43 2025 GMT Subject: CN=68a94430-7829 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:10:9e:25:15:46:a4:fb:0a:7f:ef:04:d4:d4: de:90:5c:98:74:ea:06:6b:df:31:d8:a6:3b:40:1a: 0d:13:98:fb:29:82:a7:a3:7d:47:2d:87:74:4c:e5: 9f:e8:4a:bf:b8:20:b1:6c:1d:a4:89:4e:78:fb:52: ad:66:62:e2:e2:c2:58:c7:a8:cd:29:47:e9:83:c6: 53:5e:bc:1d:71:01:6b:10:1b:c7:bd:6e:0c:ed:8a: e9:4b:05:24:54:64:fe:b5:30:14:ca:13:e9:fa:5f: 1b:3d:8f:0d:66:45:d6:43:3e:6f:29:1b:b3:7a:c0: f2:1d:21:e1:be:84:16:26:1d:44:52:bb:2f:88:ea: 62:0b:34:32:9d:fc:64:73:5b:77:1d:eb:8a:26:51: 94:94:e7:8a:d1:be:f4:11:8b:ee:ee:15:80:c5:d0: 74:4d:e3:e7:1c:0e:9d:93:9e:10:14:84:b1:54:fc: bd:d5:ec:6d:fb:53:ea:8f:bd:c5:31:9b:df:30:b8: f8:29:f1:39:cb:2e:12:ed:b3:ea:ae:ca:fd:e4:63: 0d:91:7f:13:2f:40:27:43:38:db:bb:49:2c:bc:15: 4e:55:9e:7c:24:fd:02:82:0b:16:0a:18:f0:2f:dc: 1c:9e:7e:78:56:e4:2c:ad:bb:61:8d:7e:be:11:ee: 18:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:84:DF:C8:91:29:E6:B5:6B:E3:D6:4F:C8:D0:9E:AF:18:16:BF:08 X509v3 Authority Key Identifier: keyid:B5:47:62:81:F3:59:4D:38:64:9C:CC:FF:52:F5:8B:B4:9B:47:5F:09 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9169351/31A0D182940511EEA8687547C4F9AE02/tUdigfNZTThknMz_UvWLtJtHXwk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tUdigfNZTThknMz_UvWLtJtHXwk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9169351/31A0D182940511EEA8687547C4F9AE02/tUdigfNZTThknMz_UvWLtJtHXwk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8c:9d:88:b6:39:82:45:34:26:0c:a5:11:0a:90:a7:47:c0:60: 4f:9b:4a:19:b1:e0:8e:af:5a:c4:cc:75:e5:28:cc:99:38:58: 97:f3:c0:16:c1:3d:92:f5:e4:fd:83:75:0b:aa:b1:ff:ec:98: 49:e4:61:54:8f:c0:6e:77:4e:8c:e0:5f:cd:b3:e0:7a:04:6f: a0:df:a5:ca:83:f9:65:71:b0:e9:af:17:e7:13:37:36:6b:86: 9f:6d:88:05:65:2f:64:df:c6:d9:ed:fe:9c:51:bb:1b:72:9d: 30:a7:ed:81:f5:04:1d:22:ee:db:ac:67:24:d5:06:3c:25:ea: ff:be:6c:3f:a8:4e:40:ac:2c:15:03:90:82:73:10:54:37:38: 48:9b:fa:96:16:30:7c:7b:f5:a3:f0:0c:ca:7b:6a:d2:3f:6d: a4:c3:88:97:19:97:8c:b1:e8:ad:f8:e4:4b:f5:1b:cc:69:80: 96:28:48:1d:86:3b:33:a1:c6:b2:d8:d4:6a:7c:c3:32:e3:4b: 2b:7f:75:44:a4:d9:fe:8c:50:e0:c4:d6:3e:26:2a:a2:05:fe: 2b:70:ba:10:bc:37:3e:04:7f:a8:9d:6c:d2:d2:ef:c9:fe:f5: 72:6c:c8:44:40:59:28:31:0c:cd:ed:4d:e9:0f:8a:a4:ae:4b: ae:2e:9b:a5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAU4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjkzNTExMTAvBgNVBAUTKEI1NDc2MjgxRjM1OTREMzg2NDlDQ0NGRjUyRjU4QkI0 OUI0NzVGMDkwHhcNMjUwODIzMDQzMTQzWhcNMjUwODMwMDQzMTQzWjAYMRYwFAYD VQQDEw02OGE5NDQzMC03ODI5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxBCeJRVGpPsKf+8E1NTekFyYdOoGa98x2KY7QBoNE5j7KYKno31HLYd0TOWf 6Eq/uCCxbB2kiU54+1KtZmLi4sJYx6jNKUfpg8ZTXrwdcQFrEBvHvW4M7YrpSwUk VGT+tTAUyhPp+l8bPY8NZkXWQz5vKRuzesDyHSHhvoQWJh1EUrsviOpiCzQynfxk c1t3HeuKJlGUlOeK0b70EYvu7hWAxdB0TePnHA6dk54QFISxVPy91ext+1Pqj73F MZvfMLj4KfE5yy4S7bPqrsr95GMNkX8TL0AnQzjbu0ksvBVOVZ58JP0CggsWChjw L9wcnn54VuQsrbthjX6+Ee4YHQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBuE38iR Kea1a+PWT8jQnq8YFr8IMB8GA1UdIwQYMBaAFLVHYoHzWU04ZJzM/1L1i7SbR18J MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2OTM1MS8zMUEwRDE4Mjk0 MDUxMUVFQTg2ODc1NDdDNEY5QUUwMi90VWRpZ2ZOWlRUaGtuTXpfVXZXTHRKdEhY d2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RVZGlnZk5aVFRoa25Nel9VdldMdEp0SFh3ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 OTM1MS8zMUEwRDE4Mjk0MDUxMUVFQTg2ODc1NDdDNEY5QUUwMi90VWRpZ2ZOWlRU aGtuTXpfVXZXTHRKdEhYd2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCMnYi2OYJFNCYMpREKkKdHwGBPm0oZseCOr1rEzHXlKMyZOFiX88AW wT2S9eT9g3ULqrH/7JhJ5GFUj8Bud06M4F/Ns+B6BG+g36XKg/llcbDprxfnEzc2 a4afbYgFZS9k38bZ7f6cUbsbcp0wp+2B9QQdIu7brGck1QY8Jer/vmw/qE5ArCwV A5CCcxBUNzhIm/qWFjB8e/Wj8AzKe2rSP22kw4iXGZeMseit+ORL9RvMaYCWKEgd hjszocay2NRqfMMy40srf3VEpNn+jFDgxNY+JiqiBf4rcLoQvDc+BH+onWzS0u/J /vVybMhEQFkoMQzN7U3pD4qkrkuuLpul -----END CERTIFICATE-----Generated at Sat Aug 23 14:09:39 2025 by rpki-client