$ rpki-client -vvf rpki.apnic.net/member_repository/A9135020/BE1EE504947011EC91B46C4DC4F9AE02/tjIT2OZi9FS-rux_PELjr2-JX7I.mft File: tjIT2OZi9FS-rux_PELjr2-JX7I.mft (raw, json) Hash identifier: 3SHo7yW2DaYKPDbMYfFuAI9M+vLsNLhYFTXgMibftoM= Subject key identifier: 8A:D6:CA:19:D1:51:38:75:A2:DD:E2:97:19:C1:0C:66:50:0E:36:61 Authority key identifier: B6:32:13:D8:E6:62:F4:54:BE:AE:EC:7F:3C:42:E3:AF:6F:89:5F:B2 Certificate issuer: /CN=A9135020/serialNumber=B63213D8E662F454BEAEEC7F3C42E3AF6F895FB2 Certificate serial: 03F5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tjIT2OZi9FS-rux_PELjr2-JX7I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9135020/BE1EE504947011EC91B46C4DC4F9AE02/tjIT2OZi9FS-rux_PELjr2-JX7I.mft Manifest number: 03E4 Signing time: Fri 05 Sep 2025 00:51:57 +0000 Manifest this update: Fri 05 Sep 2025 00:51:57 +0000 Manifest next update: Fri 12 Sep 2025 00:51:57 +0000 Files and hashes: 1: tjIT2OZi9FS-rux_PELjr2-JX7I.crl (hash: 5qVctevEv6Pj0JhjNpYdF9pzQmWBM5VQESPIgfKAdAc=) 2: E61E258895F611EC88E42C7EC4F9AE02.roa (hash: IBhhnGT/LDWxhpFmUfJvAC1XxzhmOqtNwlJxeyVAKjs=) 3: E6B9A5DA95F611EC88E42C7EC4F9AE02.roa (hash: uty0bQMtFLX3vFRuGwVZyzSxCI+QZbbY8EJL7k1alPY=) 4: 4A7E1926947511EC9795DF56C4F9AE02.roa (hash: haDneSQGCMY7l4tq6KzMKr1NagFdvDH5g3zFSu/oH0w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9135020/BE1EE504947011EC91B46C4DC4F9AE02/tjIT2OZi9FS-rux_PELjr2-JX7I.crl rsync://rpki.apnic.net/member_repository/A9135020/BE1EE504947011EC91B46C4DC4F9AE02/tjIT2OZi9FS-rux_PELjr2-JX7I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tjIT2OZi9FS-rux_PELjr2-JX7I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Sep 2025 00:51:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1013 (0x3f5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9135020, serialNumber=B63213D8E662F454BEAEEC7F3C42E3AF6F895FB2 Validity Not Before: Sep 5 00:51:57 2025 GMT Not After : Sep 12 00:51:57 2025 GMT Subject: CN=68ba342d-0641 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:83:f6:f0:3c:b5:0c:4f:95:94:18:5a:a5:83: 7e:1f:f1:e9:f3:20:fe:21:0f:3e:75:2f:ee:c3:c6: 70:c9:e1:e7:85:b1:2c:73:6e:70:0f:6e:68:0c:ca: 43:04:84:44:84:11:02:d1:ce:df:7f:ef:c0:25:09: e5:0e:19:7e:36:f7:a7:8a:fc:c3:9f:2c:e6:a9:41: f7:66:4d:05:ae:f2:20:34:df:ac:7a:06:a0:53:88: 01:37:dc:2d:81:35:71:5c:72:33:ca:51:0b:5d:fd: 37:bc:93:da:99:af:60:df:27:69:1c:f0:1b:8d:dc: f7:18:da:22:5d:a1:85:d4:4f:72:30:38:2a:e3:5c: 63:79:3b:de:15:b1:60:63:8b:73:b5:08:43:fa:de: 0a:d7:b4:5b:08:a8:d7:3e:1f:b6:98:43:46:9e:b8: fb:ca:16:d9:1a:65:9f:2d:2a:43:03:23:76:67:7e: c7:be:9d:aa:48:a7:78:34:08:a6:e8:c5:6c:1d:10: 7e:14:95:55:2d:17:bc:0a:3c:d6:9b:55:17:ae:9d: f2:1e:ef:8f:f7:54:86:7a:63:b1:ff:6a:df:13:bf: ab:55:99:c1:09:26:dc:63:d7:b0:04:71:34:4e:37: 14:98:be:f6:1b:7d:ec:75:5a:02:9d:f9:96:be:f7: 6b:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:D6:CA:19:D1:51:38:75:A2:DD:E2:97:19:C1:0C:66:50:0E:36:61 X509v3 Authority Key Identifier: keyid:B6:32:13:D8:E6:62:F4:54:BE:AE:EC:7F:3C:42:E3:AF:6F:89:5F:B2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9135020/BE1EE504947011EC91B46C4DC4F9AE02/tjIT2OZi9FS-rux_PELjr2-JX7I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tjIT2OZi9FS-rux_PELjr2-JX7I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9135020/BE1EE504947011EC91B46C4DC4F9AE02/tjIT2OZi9FS-rux_PELjr2-JX7I.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 00:2a:42:27:f8:5e:e8:cc:8a:5b:01:88:96:44:f1:5a:ab:e3: 3f:76:c2:b4:5b:1e:c9:22:64:fa:77:7f:f2:d0:c9:c4:d7:20: c8:3f:bd:a0:e7:db:a0:b1:bc:b6:21:39:45:c7:bb:6f:4e:80: e1:42:34:0a:79:42:a7:ff:56:95:66:25:73:53:4b:b4:8e:fa: 70:f2:c5:73:ad:80:3a:bb:a2:e0:16:5c:ba:97:1f:0e:fc:2c: 7d:f7:3f:ea:3f:dc:ce:b8:c1:35:17:71:cf:bd:b4:30:b8:3c: 86:df:27:7c:0b:a8:e4:cb:c8:d8:e8:1a:fd:e0:1c:b8:56:cc: fe:95:ce:de:3a:25:60:8b:b0:c1:b5:62:a9:2c:d7:31:c7:a2: d2:9f:83:f7:2e:e2:ee:f9:65:61:4f:3c:24:5e:f8:8e:59:65: aa:27:d8:ad:56:6f:d6:80:88:42:d8:99:73:8b:6b:55:b9:6c: b4:4e:00:5f:e0:dc:66:ec:a6:67:ee:8a:a8:27:54:94:13:f0: 4d:f9:45:91:89:7a:ae:59:63:9e:0c:f2:d2:72:9e:ca:73:d3: dc:ad:68:84:53:e8:05:59:df:a2:56:fa:79:9a:24:05:59:da: b9:5e:b7:2c:dd:a0:0b:89:cb:4c:1f:ec:80:2c:42:3a:ab:e4: f4:0e:9e:1a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA/UwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzUwMjAxMTAvBgNVBAUTKEI2MzIxM0Q4RTY2MkY0NTRCRUFFRUM3RjNDNDJFM0FG NkY4OTVGQjIwHhcNMjUwOTA1MDA1MTU3WhcNMjUwOTEyMDA1MTU3WjAYMRYwFAYD VQQDEw02OGJhMzQyZC0wNjQxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7oP28Dy1DE+VlBhapYN+H/Hp8yD+IQ8+dS/uw8ZwyeHnhbEsc25wD25oDMpD BIREhBEC0c7ff+/AJQnlDhl+NvenivzDnyzmqUH3Zk0FrvIgNN+segagU4gBN9wt gTVxXHIzylELXf03vJPama9g3ydpHPAbjdz3GNoiXaGF1E9yMDgq41xjeTveFbFg Y4tztQhD+t4K17RbCKjXPh+2mENGnrj7yhbZGmWfLSpDAyN2Z37Hvp2qSKd4NAim 6MVsHRB+FJVVLRe8CjzWm1UXrp3yHu+P91SGemOx/2rfE7+rVZnBCSbcY9ewBHE0 TjcUmL72G33sdVoCnfmWvvdrDwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIrWyhnR UTh1ot3ilxnBDGZQDjZhMB8GA1UdIwQYMBaAFLYyE9jmYvRUvq7sfzxC469viV+y MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNTAyMC9CRTFFRTUwNDk0 NzAxMUVDOTFCNDZDNERDNEY5QUUwMi90aklUMk9aaTlGUy1ydXhfUEVManIyLUpY N0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RqSVQyT1ppOUZTLXJ1eF9QRUxqcjItSlg3SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz NTAyMC9CRTFFRTUwNDk0NzAxMUVDOTFCNDZDNERDNEY5QUUwMi90aklUMk9aaTlG Uy1ydXhfUEVManIyLUpYN0kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAAKkIn+F7ozIpbAYiWRPFaq+M/dsK0Wx7JImT6d3/y0MnE1yDIP72g 59ugsby2ITlFx7tvToDhQjQKeUKn/1aVZiVzU0u0jvpw8sVzrYA6u6LgFly6lx8O /Cx99z/qP9zOuME1F3HPvbQwuDyG3yd8C6jky8jY6Br94By4Vsz+lc7eOiVgi7DB tWKpLNcxx6LSn4P3LuLu+WVhTzwkXviOWWWqJ9itVm/WgIhC2Jlzi2tVuWy0TgBf 4Nxm7KZn7oqoJ1SUE/BN+UWRiXquWWOeDPLScp7Kc9PcrWiEU+gFWd+iVvp5miQF Wdq5Xrcs3aALictMH+yALEI6q+T0Dp4a -----END CERTIFICATE-----Generated at Sat Sep 6 11:47:17 2025 by rpki-client