$ rpki-client -vvf rpki.apnic.net/member_repository/A914FE53/80B228F8FBDD11EE8984ED30C4F9AE02/TzGZCs_Vnb42pwwFIEtDuSlvU2w.mft File: TzGZCs_Vnb42pwwFIEtDuSlvU2w.mft (raw, json) Hash identifier: HY0Go6BoC/5V6MKZ0I1DVX1Cr+/upe6oG0u6kpVRH6k= Subject key identifier: EF:D7:93:DB:AE:94:24:79:D4:CA:E9:48:B5:6A:9A:8B:04:50:75:A3 Authority key identifier: 4F:31:99:0A:CF:D5:9D:BE:36:A7:0C:05:20:4B:43:B9:29:6F:53:6C Certificate issuer: /CN=A914FE53/serialNumber=4F31990ACFD59DBE36A70C05204B43B9296F536C Certificate serial: B6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TzGZCs_Vnb42pwwFIEtDuSlvU2w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914FE53/80B228F8FBDD11EE8984ED30C4F9AE02/TzGZCs_Vnb42pwwFIEtDuSlvU2w.mft Manifest number: B2 Signing time: Sat 29 Mar 2025 05:22:57 +0000 Manifest this update: Sat 29 Mar 2025 05:22:57 +0000 Manifest next update: Sat 05 Apr 2025 05:22:57 +0000 Files and hashes: 1: TzGZCs_Vnb42pwwFIEtDuSlvU2w.crl (hash: T8NV/zeK+8ssu1QEZQXF09VYt1YhRsMbm0YSrU9hdA8=) 2: E3F7E3DAFBDD11EE8914AD31C4F9AE02.roa (hash: DdKCynIF2QkHo2PO8684k4cU1Szr4+DYT4h1WAaKo1Y=) 3: E387F700FBDD11EE8914AD31C4F9AE02.roa (hash: oQGf8UeNLRAoFQkfiIvmUxfekUFi9chn7l63adDoD3s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914FE53/80B228F8FBDD11EE8984ED30C4F9AE02/TzGZCs_Vnb42pwwFIEtDuSlvU2w.crl rsync://rpki.apnic.net/member_repository/A914FE53/80B228F8FBDD11EE8984ED30C4F9AE02/TzGZCs_Vnb42pwwFIEtDuSlvU2w.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TzGZCs_Vnb42pwwFIEtDuSlvU2w.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 05 Apr 2025 05:08:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 182 (0xb6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914FE53 Validity Not Before: Mar 29 05:22:57 2025 GMT Not After : Apr 5 05:22:57 2025 GMT Subject: CN=67e783b1-eff4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:a0:c7:fc:69:70:c2:66:14:ac:92:85:ef:83: ff:aa:9d:2d:d0:56:8d:14:b2:68:50:24:1b:45:d3: 8c:47:7a:28:06:81:62:4d:5e:93:8d:d5:f0:76:a2: 18:4d:42:e6:20:28:06:a1:2c:f3:c9:88:d0:55:ab: e8:0e:c1:05:f1:62:ba:76:a0:fb:b6:61:db:f6:18: fc:bc:44:07:87:a9:68:5e:96:45:46:bb:ca:d4:4f: d5:3a:cc:a1:92:32:98:c0:2c:f6:06:66:11:11:76: 3e:66:30:0a:b4:b9:58:d0:d1:04:02:cb:05:10:4b: a4:d2:6a:63:da:e4:ad:ee:f9:77:e5:bb:29:b4:b3: 06:aa:e9:39:f8:7e:1e:37:14:5a:93:ec:13:e0:e3: 81:c5:32:b2:1e:67:9b:bb:d8:f5:3b:71:06:e7:85: dc:31:87:08:43:a3:30:53:a5:67:4b:48:4a:eb:32: a6:46:4d:42:22:d4:b7:c4:69:1f:34:b2:b0:83:d5: 6f:af:66:bc:70:24:df:f9:c9:05:00:d5:59:4a:bb: 67:0e:e3:95:71:01:d0:ed:ee:64:3b:92:73:73:92: ad:59:f8:72:e8:ba:aa:24:c1:1b:48:90:41:e0:ed: 38:c8:a9:a5:6f:c2:ce:a1:2d:9b:64:54:89:be:f2: 43:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:D7:93:DB:AE:94:24:79:D4:CA:E9:48:B5:6A:9A:8B:04:50:75:A3 X509v3 Authority Key Identifier: keyid:4F:31:99:0A:CF:D5:9D:BE:36:A7:0C:05:20:4B:43:B9:29:6F:53:6C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914FE53/80B228F8FBDD11EE8984ED30C4F9AE02/TzGZCs_Vnb42pwwFIEtDuSlvU2w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TzGZCs_Vnb42pwwFIEtDuSlvU2w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914FE53/80B228F8FBDD11EE8984ED30C4F9AE02/TzGZCs_Vnb42pwwFIEtDuSlvU2w.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 38:52:0d:83:55:26:4d:76:02:78:69:af:25:78:cf:76:74:24: 33:f6:6a:f5:1e:e5:b8:e0:6d:d4:f2:b0:33:35:d3:18:5c:2b: d1:29:32:6a:65:8e:33:4b:52:8d:73:bc:41:94:2d:5a:54:17: e0:ca:4b:8f:b1:00:39:b8:49:13:21:e0:b0:ba:c0:62:c1:eb: 87:19:7b:84:c8:be:a6:88:57:5a:66:35:7b:aa:02:e9:2e:81: 7e:6e:6e:2e:ef:4e:f3:6f:3c:73:cc:92:5f:01:5d:c4:0e:87: 81:8d:51:3e:55:7d:45:3c:4d:22:26:0d:c5:12:12:9d:25:cd: 67:4d:0c:fe:14:99:25:20:dd:3f:7b:21:39:4b:e5:e1:1a:be: 6e:68:cc:1c:31:3c:d8:b7:54:ce:8b:ee:8f:73:35:17:38:1b: 14:8a:d0:23:6d:f5:72:80:55:b5:55:f9:5c:d6:ea:42:2a:da: a9:0e:26:56:ba:6f:3b:58:d2:51:cd:4e:56:42:d1:e2:2f:ee: 20:93:74:d9:7b:11:cc:82:4d:06:48:ee:ba:5f:03:8f:9e:20: db:5e:80:94:f9:77:c1:9b:dc:00:95:14:02:4a:03:6f:03:fc: aa:79:16:d6:4d:6b:5f:00:74:7b:8b:a3:2c:0e:b1:81:e9:63: 0c:c6:d8:26 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICALYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEZFNTMxMTAvBgNVBAUTKDRGMzE5OTBBQ0ZENTlEQkUzNkE3MEMwNTIwNEI0M0I5 Mjk2RjUzNkMwHhcNMjUwMzI5MDUyMjU3WhcNMjUwNDA1MDUyMjU3WjAYMRYwFAYD VQQDEw02N2U3ODNiMS1lZmY0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzqDH/GlwwmYUrJKF74P/qp0t0FaNFLJoUCQbRdOMR3ooBoFiTV6TjdXwdqIY TULmICgGoSzzyYjQVavoDsEF8WK6dqD7tmHb9hj8vEQHh6loXpZFRrvK1E/VOsyh kjKYwCz2BmYREXY+ZjAKtLlY0NEEAssFEEuk0mpj2uSt7vl35bsptLMGquk5+H4e NxRak+wT4OOBxTKyHmebu9j1O3EG54XcMYcIQ6MwU6VnS0hK6zKmRk1CItS3xGkf NLKwg9Vvr2a8cCTf+ckFANVZSrtnDuOVcQHQ7e5kO5Jzc5KtWfhy6LqqJMEbSJBB 4O04yKmlb8LOoS2bZFSJvvJDWQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFO/Xk9uu lCR51MrpSLVqmosEUHWjMB8GA1UdIwQYMBaAFE8xmQrP1Z2+NqcMBSBLQ7kpb1Ns MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RkU1My84MEIyMjhGOEZC REQxMUVFODk4NEVEMzBDNEY5QUUwMi9UekdaQ3NfVm5iNDJwd3dGSUV0RHVTbHZV MncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1R6R1pDc19WbmI0MnB3d0ZJRXREdVNsdlUydy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 RkU1My84MEIyMjhGOEZCREQxMUVFODk4NEVEMzBDNEY5QUUwMi9UekdaQ3NfVm5i NDJwd3dGSUV0RHVTbHZVMncubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA4Ug2DVSZNdgJ4aa8leM92dCQz9mr1HuW44G3U8rAzNdMYXCvRKTJq ZY4zS1KNc7xBlC1aVBfgykuPsQA5uEkTIeCwusBiweuHGXuEyL6miFdaZjV7qgLp LoF+bm4u707zbzxzzJJfAV3EDoeBjVE+VX1FPE0iJg3FEhKdJc1nTQz+FJklIN0/ eyE5S+XhGr5uaMwcMTzYt1TOi+6PczUXOBsUitAjbfVygFW1Vflc1upCKtqpDiZW um87WNJRzU5WQtHiL+4gk3TZexHMgk0GSO66XwOPniDbXoCU+XfBm9wAlRQCSgNv A/yqeRbWTWtfAHR7i6MsDrGB6WMMxtgm -----END CERTIFICATE-----Generated at Fri Apr 4 22:10:47 2025 by rpki-client