$ rpki-client -vvf rpki.apnic.net/member_repository/A914F349/C6F5001AEDB111ECAF435C5DC4F9AE02/TZRPMLjG5pGYjTAvumwvnFdMBLA.mft File: TZRPMLjG5pGYjTAvumwvnFdMBLA.mft (raw, json) Hash identifier: 9ZPX1HQsqOK+n2gNAONPnW4SF7CsGZdsVD998vByOXM= Subject key identifier: 84:7A:F7:4F:F7:D6:80:67:22:64:BA:8F:1C:BC:E4:15:76:20:B0:78 Authority key identifier: 4D:94:4F:30:B8:C6:E6:91:98:8D:30:2F:BA:6C:2F:9C:57:4C:04:B0 Certificate issuer: /CN=A914F349/serialNumber=4D944F30B8C6E691988D302FBA6C2F9C574C04B0 Certificate serial: 02E7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TZRPMLjG5pGYjTAvumwvnFdMBLA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914F349/C6F5001AEDB111ECAF435C5DC4F9AE02/TZRPMLjG5pGYjTAvumwvnFdMBLA.mft Manifest number: 02E3 Signing time: Sat 19 Jul 2025 01:44:30 +0000 Manifest this update: Sat 19 Jul 2025 01:44:30 +0000 Manifest next update: Sat 26 Jul 2025 01:44:30 +0000 Files and hashes: 1: TZRPMLjG5pGYjTAvumwvnFdMBLA.crl (hash: drzU+PthA7knuDQX3qWn8hxMPaS2M19d+pjg6132KEw=) 2: E5A22A7CEDB811ECB7BDFF0AC4F9AE02.roa (hash: eMUIS/zzjzYQct5cXs32cWMUeQ2JvlQAolC+FTmpNC4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914F349/C6F5001AEDB111ECAF435C5DC4F9AE02/TZRPMLjG5pGYjTAvumwvnFdMBLA.crl rsync://rpki.apnic.net/member_repository/A914F349/C6F5001AEDB111ECAF435C5DC4F9AE02/TZRPMLjG5pGYjTAvumwvnFdMBLA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TZRPMLjG5pGYjTAvumwvnFdMBLA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 01:44:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 743 (0x2e7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914F349, serialNumber=4D944F30B8C6E691988D302FBA6C2F9C574C04B0 Validity Not Before: Jul 19 01:44:30 2025 GMT Not After : Jul 26 01:44:30 2025 GMT Subject: CN=687af87e-bb6f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:2f:e5:6f:6c:85:20:e2:e6:00:33:40:ed:8c: ac:33:ca:9e:a8:1d:c5:cc:60:04:d7:38:a4:0a:04: f8:5b:ad:00:31:2a:e2:90:54:e2:76:22:07:9f:bb: d7:27:8d:fc:95:e5:19:d9:8a:29:a1:54:1e:6f:38: c0:79:47:27:9a:1d:c1:1c:1b:93:5c:bd:e5:da:7d: 7c:16:3b:08:91:75:e4:c3:4c:11:5b:1f:eb:1d:e6: 9b:e9:68:11:a3:69:af:cc:79:97:8d:b1:ee:00:04: fc:71:e9:8f:9a:cc:9c:9d:ef:bf:f2:e8:3d:8f:b5: 10:23:de:2b:a6:07:3e:c3:96:83:89:ce:91:b9:8d: 90:5c:7b:60:6d:0d:43:aa:5b:6a:5a:27:05:cd:53: e1:60:9f:69:79:87:28:1d:e2:f2:7f:12:3f:f8:c5: a3:56:19:db:a6:ac:15:24:e9:1c:3e:4d:86:28:1c: d6:c1:0d:f4:5f:f2:9a:ef:96:5d:e3:ca:16:5c:e7: ff:c7:03:53:4b:d8:22:1d:85:df:ad:a9:01:5e:d3: 74:93:e8:68:9f:3d:bf:6f:02:29:16:2d:8f:9d:b3: f0:99:3a:c0:cc:df:47:ba:8d:d5:3e:bb:51:12:a5: a3:0f:90:b2:9f:6e:89:48:ce:7c:a3:85:9e:16:1f: 76:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:7A:F7:4F:F7:D6:80:67:22:64:BA:8F:1C:BC:E4:15:76:20:B0:78 X509v3 Authority Key Identifier: keyid:4D:94:4F:30:B8:C6:E6:91:98:8D:30:2F:BA:6C:2F:9C:57:4C:04:B0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914F349/C6F5001AEDB111ECAF435C5DC4F9AE02/TZRPMLjG5pGYjTAvumwvnFdMBLA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TZRPMLjG5pGYjTAvumwvnFdMBLA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914F349/C6F5001AEDB111ECAF435C5DC4F9AE02/TZRPMLjG5pGYjTAvumwvnFdMBLA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a9:50:7b:31:f6:52:ef:87:7d:2e:38:a8:bf:64:46:f0:25:f0: 3c:0c:81:dd:fa:c5:63:5c:c5:c0:c1:f3:89:bb:58:6e:3b:8b: 65:39:a5:2d:1b:1c:03:bc:eb:da:90:90:d4:ae:fc:ad:c4:ba: 05:93:9b:15:fe:c8:f0:1b:dc:8c:15:96:df:aa:4b:b8:cc:91: f3:8f:39:5a:2e:62:6f:78:a1:89:c2:e2:12:fc:50:18:f2:b9: 62:f9:76:93:27:36:97:82:03:38:85:b1:17:9d:c3:46:79:00: 67:7a:77:33:aa:24:61:72:85:23:61:a0:f6:e2:96:4e:d9:3d: 31:7b:d4:2b:80:18:33:b1:26:09:e7:d6:ce:c7:eb:6f:32:0d: bf:7c:15:02:cc:45:96:10:8a:3f:94:2f:62:7e:e5:e4:cd:1a: 2c:a6:5c:ff:62:3f:b8:23:e4:4b:c8:e7:39:5a:c5:b1:b2:96: 80:36:fe:d4:f2:01:e8:c7:86:9f:ca:97:92:b9:ae:87:f0:64: 8b:60:a0:05:7e:57:3e:a1:1e:31:7f:66:ef:f4:80:65:e3:90: 60:c1:95:34:84:5d:18:72:8f:c5:92:46:ef:87:e7:7b:87:89: a8:0b:0c:b8:bf:f8:23:4a:cf:e8:38:b3:e9:36:0e:fe:15:ed: 0d:f1:cf:3d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAucwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEYzNDkxMTAvBgNVBAUTKDREOTQ0RjMwQjhDNkU2OTE5ODhEMzAyRkJBNkMyRjlD NTc0QzA0QjAwHhcNMjUwNzE5MDE0NDMwWhcNMjUwNzI2MDE0NDMwWjAYMRYwFAYD VQQDEw02ODdhZjg3ZS1iYjZmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwi/lb2yFIOLmADNA7YysM8qeqB3FzGAE1zikCgT4W60AMSrikFTidiIHn7vX J438leUZ2YopoVQebzjAeUcnmh3BHBuTXL3l2n18FjsIkXXkw0wRWx/rHeab6WgR o2mvzHmXjbHuAAT8cemPmsycne+/8ug9j7UQI94rpgc+w5aDic6RuY2QXHtgbQ1D qltqWicFzVPhYJ9peYcoHeLyfxI/+MWjVhnbpqwVJOkcPk2GKBzWwQ30X/Ka75Zd 48oWXOf/xwNTS9giHYXfrakBXtN0k+honz2/bwIpFi2PnbPwmTrAzN9Huo3VPrtR EqWjD5Cyn26JSM58o4WeFh927QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIR690/3 1oBnImS6jxy85BV2ILB4MB8GA1UdIwQYMBaAFE2UTzC4xuaRmI0wL7psL5xXTASw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RjM0OS9DNkY1MDAxQUVE QjExMUVDQUY0MzVDNURDNEY5QUUwMi9UWlJQTUxqRzVwR1lqVEF2dW13dm5GZE1C TEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1RaUlBNTGpHNXBHWWpUQXZ1bXd2bkZkTUJMQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 RjM0OS9DNkY1MDAxQUVEQjExMUVDQUY0MzVDNURDNEY5QUUwMi9UWlJQTUxqRzVw R1lqVEF2dW13dm5GZE1CTEEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCpUHsx9lLvh30uOKi/ZEbwJfA8DIHd+sVjXMXAwfOJu1huO4tlOaUt GxwDvOvakJDUrvytxLoFk5sV/sjwG9yMFZbfqku4zJHzjzlaLmJveKGJwuIS/FAY 8rli+XaTJzaXggM4hbEXncNGeQBnenczqiRhcoUjYaD24pZO2T0xe9QrgBgzsSYJ 59bOx+tvMg2/fBUCzEWWEIo/lC9ifuXkzRosplz/Yj+4I+RLyOc5WsWxspaANv7U 8gHox4afypeSua6H8GSLYKAFflc+oR4xf2bv9IBl45BgwZU0hF0Yco/Fkkbvh+d7 h4moCwy4v/gjSs/oOLPpNg7+Fe0N8c89 -----END CERTIFICATE-----Generated at Sun Jul 20 06:38:08 2025 by rpki-client