$ rpki-client -vvf rpki.apnic.net/member_repository/A914F349/C6F5001AEDB111ECAF435C5DC4F9AE02/TZRPMLjG5pGYjTAvumwvnFdMBLA.mft File: TZRPMLjG5pGYjTAvumwvnFdMBLA.mft (raw, json) Hash identifier: yo+UTX1xOFYfOePaycude3oPGyr4R2nsyiLylPtCA+s= Subject key identifier: C9:52:C8:CC:06:F5:37:86:34:3D:97:2C:4B:A5:EC:02:07:67:46:77 Authority key identifier: 4D:94:4F:30:B8:C6:E6:91:98:8D:30:2F:BA:6C:2F:9C:57:4C:04:B0 Certificate issuer: /CN=A914F349/serialNumber=4D944F30B8C6E691988D302FBA6C2F9C574C04B0 Certificate serial: 02AF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TZRPMLjG5pGYjTAvumwvnFdMBLA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914F349/C6F5001AEDB111ECAF435C5DC4F9AE02/TZRPMLjG5pGYjTAvumwvnFdMBLA.mft Manifest number: 02AC Signing time: Thu 03 Apr 2025 01:29:14 +0000 Manifest this update: Thu 03 Apr 2025 01:29:13 +0000 Manifest next update: Thu 10 Apr 2025 01:29:13 +0000 Files and hashes: 1: TZRPMLjG5pGYjTAvumwvnFdMBLA.crl (hash: 2T60Trl7AFALNt8AopY0U40RY/b2gD+VzSc9BFy85X8=) 2: E5A22A7CEDB811ECB7BDFF0AC4F9AE02.roa (hash: iYkVHc+gEz+KBoaY/orgybHRRbhE8SWTurly5q5QifM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914F349/C6F5001AEDB111ECAF435C5DC4F9AE02/TZRPMLjG5pGYjTAvumwvnFdMBLA.crl rsync://rpki.apnic.net/member_repository/A914F349/C6F5001AEDB111ECAF435C5DC4F9AE02/TZRPMLjG5pGYjTAvumwvnFdMBLA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TZRPMLjG5pGYjTAvumwvnFdMBLA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Apr 2025 01:29:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 687 (0x2af) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914F349 Validity Not Before: Apr 3 01:29:13 2025 GMT Not After : Apr 10 01:29:13 2025 GMT Subject: CN=67ede46a-341f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:1c:38:7d:ef:8a:3a:6b:c2:a2:a6:0d:17:c4: f9:a2:11:d2:66:db:74:d0:ab:a6:18:3d:d2:03:4a: 3b:6c:4d:6d:b7:df:ee:48:c8:66:3f:98:62:6c:26: 41:f9:43:e0:44:5a:39:e4:43:46:3b:94:13:e1:e5: cd:91:95:2c:d8:b0:d4:16:c0:7e:0c:4b:a7:eb:ec: 7c:a2:e6:e7:83:10:55:7e:71:3a:fd:91:40:5b:27: b6:56:8e:42:e2:39:2e:0e:7a:cf:a6:85:c2:04:1b: 39:3b:47:22:61:97:96:f6:fa:13:85:51:97:65:c1: f7:c7:b1:12:6b:ac:ef:15:24:0a:f9:cc:33:18:41: 76:d0:ff:d2:43:cb:db:c9:7d:29:fb:24:71:40:d7: 56:76:b9:b3:52:80:86:ae:66:a6:57:04:83:e1:a8: 56:b0:c7:d5:0b:7f:bd:cf:f7:76:99:aa:b1:0d:91: fd:4d:a4:08:64:be:18:91:e2:ec:3f:a5:94:e9:c1: 22:71:97:12:9a:39:26:8f:13:95:7c:33:d6:aa:b7: 59:d0:87:5d:6f:d2:f8:73:24:f8:78:5a:bc:92:5f: 5d:66:da:4a:97:ea:7a:89:f9:15:e1:bc:c8:30:46: 88:8f:a5:10:a9:81:33:3a:28:d7:6d:06:cf:11:58: 30:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:52:C8:CC:06:F5:37:86:34:3D:97:2C:4B:A5:EC:02:07:67:46:77 X509v3 Authority Key Identifier: keyid:4D:94:4F:30:B8:C6:E6:91:98:8D:30:2F:BA:6C:2F:9C:57:4C:04:B0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914F349/C6F5001AEDB111ECAF435C5DC4F9AE02/TZRPMLjG5pGYjTAvumwvnFdMBLA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TZRPMLjG5pGYjTAvumwvnFdMBLA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914F349/C6F5001AEDB111ECAF435C5DC4F9AE02/TZRPMLjG5pGYjTAvumwvnFdMBLA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 52:bd:a8:a4:8e:ce:54:88:ba:1a:17:da:ee:c9:d6:4f:07:7f: d9:ed:c9:02:4b:a9:df:bd:57:02:bf:b1:36:8f:d5:4d:f0:68: b7:ca:06:fa:95:ba:45:3a:33:9d:42:07:60:9a:52:0a:1c:06: a7:49:be:76:32:04:75:dd:d6:0b:92:f5:35:a0:4f:1a:92:7d: cb:c0:95:57:36:75:77:6a:57:0f:45:00:c6:98:60:d4:62:83: a6:7f:81:c9:74:f8:f8:d1:d2:62:10:83:cf:a0:57:0a:60:b6: 47:d9:01:31:fc:7e:47:40:a3:0c:51:dd:84:ec:c9:fe:01:45: f4:d2:2f:21:24:51:b2:09:bd:92:97:c0:b0:88:55:86:75:3a: 8a:11:fa:84:99:0b:41:dc:cf:51:05:49:75:03:77:25:f0:20: 15:b3:ef:b7:90:b7:fa:81:b0:d6:34:a4:cf:8d:de:bc:f3:6f: 58:15:0d:7c:0e:11:a5:01:a6:ef:73:8d:ba:b4:cc:0f:96:65: e9:fc:1e:79:43:21:cd:f0:01:fe:9a:a0:3b:2f:25:57:38:bb: f4:ce:7a:09:18:08:40:1f:5d:2c:4a:37:d8:91:99:16:e3:08: 4a:88:07:28:0b:4c:d3:34:51:64:53:ed:ab:5e:7d:ce:ed:0d: 36:fb:98:5b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAq8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEYzNDkxMTAvBgNVBAUTKDREOTQ0RjMwQjhDNkU2OTE5ODhEMzAyRkJBNkMyRjlD NTc0QzA0QjAwHhcNMjUwNDAzMDEyOTEzWhcNMjUwNDEwMDEyOTEzWjAYMRYwFAYD VQQDEw02N2VkZTQ2YS0zNDFmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzxw4fe+KOmvCoqYNF8T5ohHSZtt00KumGD3SA0o7bE1tt9/uSMhmP5hibCZB +UPgRFo55ENGO5QT4eXNkZUs2LDUFsB+DEun6+x8oubngxBVfnE6/ZFAWye2Vo5C 4jkuDnrPpoXCBBs5O0ciYZeW9voThVGXZcH3x7ESa6zvFSQK+cwzGEF20P/SQ8vb yX0p+yRxQNdWdrmzUoCGrmamVwSD4ahWsMfVC3+9z/d2maqxDZH9TaQIZL4YkeLs P6WU6cEicZcSmjkmjxOVfDPWqrdZ0Iddb9L4cyT4eFq8kl9dZtpKl+p6ifkV4bzI MEaIj6UQqYEzOijXbQbPEVgwKQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMlSyMwG 9TeGND2XLEul7AIHZ0Z3MB8GA1UdIwQYMBaAFE2UTzC4xuaRmI0wL7psL5xXTASw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RjM0OS9DNkY1MDAxQUVE QjExMUVDQUY0MzVDNURDNEY5QUUwMi9UWlJQTUxqRzVwR1lqVEF2dW13dm5GZE1C TEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1RaUlBNTGpHNXBHWWpUQXZ1bXd2bkZkTUJMQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 RjM0OS9DNkY1MDAxQUVEQjExMUVDQUY0MzVDNURDNEY5QUUwMi9UWlJQTUxqRzVw R1lqVEF2dW13dm5GZE1CTEEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBSvaikjs5UiLoaF9ruydZPB3/Z7ckCS6nfvVcCv7E2j9VN8Gi3ygb6 lbpFOjOdQgdgmlIKHAanSb52MgR13dYLkvU1oE8akn3LwJVXNnV3alcPRQDGmGDU YoOmf4HJdPj40dJiEIPPoFcKYLZH2QEx/H5HQKMMUd2E7Mn+AUX00i8hJFGyCb2S l8CwiFWGdTqKEfqEmQtB3M9RBUl1A3cl8CAVs++3kLf6gbDWNKTPjd68829YFQ18 DhGlAabvc426tMwPlmXp/B55QyHN8AH+mqA7LyVXOLv0znoJGAhAH10sSjfYkZkW 4whKiAcoC0zTNFFkU+2rXn3O7Q02+5hb -----END CERTIFICATE-----Generated at Fri Apr 4 22:13:41 2025 by rpki-client