$ rpki-client -vvf rpki.apnic.net/member_repository/A913AF6A/8C6DAC78AE4211EEBF64DA69C4F9AE02/tUzE74aIutYKk1tS1BFWN4lOIzc.mft File: tUzE74aIutYKk1tS1BFWN4lOIzc.mft (raw, json) Hash identifier: nU4rXTW9qGTwMdn/Nd4CW1GXJVSpWUS1HG79D0SdXuk= Subject key identifier: DD:93:87:E8:DA:3C:B2:8F:5E:6C:59:56:30:4F:0D:53:64:DB:D3:82 Authority key identifier: B5:4C:C4:EF:86:88:BA:D6:0A:93:5B:52:D4:11:56:37:89:4E:23:37 Certificate issuer: /CN=A913AF6A/serialNumber=B54CC4EF8688BAD60A935B52D4115637894E2337 Certificate serial: 0139 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tUzE74aIutYKk1tS1BFWN4lOIzc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913AF6A/8C6DAC78AE4211EEBF64DA69C4F9AE02/tUzE74aIutYKk1tS1BFWN4lOIzc.mft Manifest number: 0137 Signing time: Sun 07 Sep 2025 04:51:38 +0000 Manifest this update: Sun 07 Sep 2025 04:51:37 +0000 Manifest next update: Sun 14 Sep 2025 04:51:37 +0000 Files and hashes: 1: tUzE74aIutYKk1tS1BFWN4lOIzc.crl (hash: lUfIaNEE7fzwZW07uKSi0rw8DRbffcceFMQdYXLihaQ=) 2: 66287F98AE4711EE8C130419C4F9AE02.roa (hash: h7U51gkPrh1q9p4g/lzt3FLn6dAtL2thUtjcqrJHuCY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913AF6A/8C6DAC78AE4211EEBF64DA69C4F9AE02/tUzE74aIutYKk1tS1BFWN4lOIzc.crl rsync://rpki.apnic.net/member_repository/A913AF6A/8C6DAC78AE4211EEBF64DA69C4F9AE02/tUzE74aIutYKk1tS1BFWN4lOIzc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tUzE74aIutYKk1tS1BFWN4lOIzc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Sep 2025 04:51:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 313 (0x139) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913AF6A, serialNumber=B54CC4EF8688BAD60A935B52D4115637894E2337 Validity Not Before: Sep 7 04:51:37 2025 GMT Not After : Sep 14 04:51:37 2025 GMT Subject: CN=68bd0f5a-4412 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:ba:39:fa:35:69:6a:2f:3e:c4:e0:26:91:11: 46:39:ec:e4:e7:69:1d:7c:34:db:1d:31:3e:9d:e7: 71:98:33:f4:c0:ed:81:b0:19:30:4f:e1:5a:15:2d: dc:54:03:65:57:57:92:d6:fb:83:ea:b2:be:af:33: 59:21:e7:f0:dc:d5:0c:7b:f1:2d:02:64:eb:0b:56: ba:de:af:13:81:21:cd:53:9a:7a:44:fb:71:d4:00: dd:cf:93:83:e5:c7:6a:4b:34:78:91:1d:93:a4:82: 7a:36:43:70:83:9a:6e:cf:ec:99:c5:96:d8:6f:fe: b0:b9:9e:53:7a:24:42:cb:b3:b2:7f:83:a3:46:9e: 22:e9:7a:ea:56:c1:4f:3d:36:2a:f5:41:ee:01:31: 48:8c:54:52:f1:a2:93:d8:b6:35:5f:4e:fc:40:55: a4:41:1c:71:3e:94:fd:eb:48:8a:88:64:88:99:ce: b9:2a:31:55:bd:43:ed:6c:cb:55:0b:5b:5d:e4:44: dd:bd:25:c1:15:6d:a3:21:c6:64:0d:63:6e:71:9f: 49:02:a4:95:91:c3:ee:9e:f7:b3:ba:51:a2:fc:a7: 9e:f9:38:4a:c1:c1:a5:b0:c0:40:38:66:77:c3:23: 51:51:60:a6:d8:2d:52:19:22:61:f4:d1:c8:23:bf: 47:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:93:87:E8:DA:3C:B2:8F:5E:6C:59:56:30:4F:0D:53:64:DB:D3:82 X509v3 Authority Key Identifier: keyid:B5:4C:C4:EF:86:88:BA:D6:0A:93:5B:52:D4:11:56:37:89:4E:23:37 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913AF6A/8C6DAC78AE4211EEBF64DA69C4F9AE02/tUzE74aIutYKk1tS1BFWN4lOIzc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tUzE74aIutYKk1tS1BFWN4lOIzc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913AF6A/8C6DAC78AE4211EEBF64DA69C4F9AE02/tUzE74aIutYKk1tS1BFWN4lOIzc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 07:ed:02:11:70:05:7f:a2:c1:e7:0c:52:1e:16:e5:0a:d7:c6: d8:24:14:9a:02:08:30:ad:ce:c4:38:5e:8e:01:9e:8b:25:2c: ac:f6:51:19:fe:ad:bb:70:d0:ec:91:2f:2a:3d:27:7b:84:72: f6:9b:72:18:fe:6e:a0:92:03:07:c9:99:e7:36:69:ff:8b:4b: 60:8a:01:d8:33:86:b9:78:56:09:e3:ee:0a:ae:b4:a4:85:a3: 10:29:94:2a:0a:fc:e7:15:ca:05:f3:0e:df:96:b9:18:0d:14: 87:d0:b0:6d:c5:b9:39:96:15:20:53:20:4f:bb:21:8e:48:de: cb:6f:15:ff:9e:98:8b:aa:d9:a3:64:98:e5:9f:51:8d:a2:b0: ec:76:f6:0c:38:06:32:50:b1:08:32:cf:21:49:d0:e2:de:82: 68:30:4e:b9:4e:c2:c2:47:90:c7:ca:f0:8d:bc:2b:71:9b:98: 5c:ef:48:39:7f:bb:c7:5a:a8:a5:6d:17:c4:72:3d:58:cc:fa: c4:1b:b6:52:d3:61:0a:a1:47:0d:38:f9:f0:83:79:41:64:cb: d2:78:60:1e:d3:cf:75:d2:a6:99:96:15:8d:56:23:8f:dd:bf: de:89:11:9f:e3:56:5b:71:da:e1:c3:1f:1b:44:39:48:02:5d: 2d:31:37:b7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICATkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0FGNkExMTAvBgNVBAUTKEI1NENDNEVGODY4OEJBRDYwQTkzNUI1MkQ0MTE1NjM3 ODk0RTIzMzcwHhcNMjUwOTA3MDQ1MTM3WhcNMjUwOTE0MDQ1MTM3WjAYMRYwFAYD VQQDEw02OGJkMGY1YS00NDEyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtro5+jVpai8+xOAmkRFGOezk52kdfDTbHTE+nedxmDP0wO2BsBkwT+FaFS3c VANlV1eS1vuD6rK+rzNZIefw3NUMe/EtAmTrC1a63q8TgSHNU5p6RPtx1ADdz5OD 5cdqSzR4kR2TpIJ6NkNwg5puz+yZxZbYb/6wuZ5TeiRCy7Oyf4OjRp4i6XrqVsFP PTYq9UHuATFIjFRS8aKT2LY1X078QFWkQRxxPpT960iKiGSImc65KjFVvUPtbMtV C1td5ETdvSXBFW2jIcZkDWNucZ9JAqSVkcPunvezulGi/Kee+ThKwcGlsMBAOGZ3 wyNRUWCm2C1SGSJh9NHII79HJQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFN2Th+ja PLKPXmxZVjBPDVNk29OCMB8GA1UdIwQYMBaAFLVMxO+GiLrWCpNbUtQRVjeJTiM3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzQUY2QS84QzZEQUM3OEFF NDIxMUVFQkY2NERBNjlDNEY5QUUwMi90VXpFNzRhSXV0WUtrMXRTMUJGV040bE9J emMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RVekU3NGFJdXRZS2sxdFMxQkZXTjRsT0l6Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz QUY2QS84QzZEQUM3OEFFNDIxMUVFQkY2NERBNjlDNEY5QUUwMi90VXpFNzRhSXV0 WUtrMXRTMUJGV040bE9JemMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAH7QIRcAV/osHnDFIeFuUK18bYJBSaAggwrc7EOF6OAZ6LJSys9lEZ /q27cNDskS8qPSd7hHL2m3IY/m6gkgMHyZnnNmn/i0tgigHYM4a5eFYJ4+4KrrSk haMQKZQqCvznFcoF8w7flrkYDRSH0LBtxbk5lhUgUyBPuyGOSN7LbxX/npiLqtmj ZJjln1GNorDsdvYMOAYyULEIMs8hSdDi3oJoME65TsLCR5DHyvCNvCtxm5hc70g5 f7vHWqilbRfEcj1YzPrEG7ZS02EKoUcNOPnwg3lBZMvSeGAe08910qaZlhWNViOP 3b/eiRGf41Zbcdrhwx8bRDlIAl0tMTe3 -----END CERTIFICATE-----Generated at Mon Sep 8 17:52:39 2025 by rpki-client