$ rpki-client -vvf rpki.apnic.net/member_repository/A91847A4/F29EB20A07E011F0B6185162C4F9AE02/TN-Z5wf5AjOOFNUQJJqWJbyg_50.mft File: TN-Z5wf5AjOOFNUQJJqWJbyg_50.mft (raw, json) Hash identifier: 7Murda/HLuFqnPwHjPJSbEMN1oG2LWB9/JdkwObZrqY= Subject key identifier: 01:59:1B:77:C7:40:6E:82:9C:A9:30:3D:3D:79:7A:CF:26:B6:3D:0C Authority key identifier: 4C:DF:99:E7:07:F9:02:33:8E:14:D5:10:24:9A:96:25:BC:A0:FF:9D Certificate issuer: /CN=A91847A4/serialNumber=4CDF99E707F902338E14D510249A9625BCA0FF9D Certificate serial: 45 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/TN-Z5wf5AjOOFNUQJJqWJbyg_50.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91847A4/F29EB20A07E011F0B6185162C4F9AE02/TN-Z5wf5AjOOFNUQJJqWJbyg_50.mft Manifest number: 43 Signing time: Fri 25 Jul 2025 07:51:58 +0000 Manifest this update: Fri 25 Jul 2025 07:51:57 +0000 Manifest next update: Fri 01 Aug 2025 07:51:57 +0000 Files and hashes: 1: TN-Z5wf5AjOOFNUQJJqWJbyg_50.crl (hash: qwLG1SBb6q+JrHQ7olGYCP395pG6NpqzW5nZppLNQ9A=) 2: 1201EAF6083911F0B43D9172C4F9AE02.roa (hash: uAnBgSZhSmrvFmkynr5ZDyN/xYOEHNfe2WWeRhfO1A8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91847A4/F29EB20A07E011F0B6185162C4F9AE02/TN-Z5wf5AjOOFNUQJJqWJbyg_50.crl rsync://rpki.apnic.net/member_repository/A91847A4/F29EB20A07E011F0B6185162C4F9AE02/TN-Z5wf5AjOOFNUQJJqWJbyg_50.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/TN-Z5wf5AjOOFNUQJJqWJbyg_50.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 01 Aug 2025 07:51:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 69 (0x45) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91847A4, serialNumber=4CDF99E707F902338E14D510249A9625BCA0FF9D Validity Not Before: Jul 25 07:51:57 2025 GMT Not After : Aug 1 07:51:57 2025 GMT Subject: CN=6883379d-2836 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:9d:69:3d:b0:62:cf:7e:29:70:61:aa:20:75: 3f:00:ac:5f:8b:fa:3f:8c:b8:5d:d8:c1:30:e5:70: a1:f9:4d:9a:f8:41:77:33:17:b2:0f:10:0d:fd:ab: 76:61:16:76:05:e9:67:84:3a:c8:d1:0a:89:e3:2d: 74:63:a0:3d:f9:c6:c7:f7:04:e7:e3:e0:4c:3f:0f: 76:5e:9d:ae:1b:cb:00:86:f8:76:9a:f2:a2:ef:62: f5:d9:a0:07:23:8f:2d:20:3c:68:cc:65:0f:3a:4e: 6e:6a:47:61:f0:30:c4:ca:1b:cb:d3:23:d5:b4:df: 50:84:17:eb:60:84:b7:93:6d:9e:cd:41:98:a1:eb: a8:8c:55:52:c0:b2:8c:9f:0b:ad:59:ef:2a:4c:a7: 9d:f3:d6:63:5d:ce:59:f1:dd:d8:0c:f5:49:66:38: 36:f0:6f:04:32:6e:39:5b:87:77:1b:d0:7d:33:b2: 8f:32:9b:0a:db:c3:4d:99:35:d3:a3:51:7f:8e:2d: be:f2:af:df:c6:56:c5:58:e4:a3:a4:34:ca:3c:20: 1a:d4:4b:1f:c6:ba:91:0f:47:84:31:65:74:65:29: 17:f0:26:95:58:d0:7d:a4:3c:82:ef:b6:35:eb:fe: b6:2c:e8:7c:60:89:7b:39:e1:2d:0e:a8:e3:10:f0: a6:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:59:1B:77:C7:40:6E:82:9C:A9:30:3D:3D:79:7A:CF:26:B6:3D:0C X509v3 Authority Key Identifier: keyid:4C:DF:99:E7:07:F9:02:33:8E:14:D5:10:24:9A:96:25:BC:A0:FF:9D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91847A4/F29EB20A07E011F0B6185162C4F9AE02/TN-Z5wf5AjOOFNUQJJqWJbyg_50.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/TN-Z5wf5AjOOFNUQJJqWJbyg_50.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91847A4/F29EB20A07E011F0B6185162C4F9AE02/TN-Z5wf5AjOOFNUQJJqWJbyg_50.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 64:24:97:20:fe:3a:af:4c:3c:c2:82:8f:69:f4:60:e6:29:f7: c3:70:09:60:bb:db:fb:94:96:b4:e3:35:82:99:41:93:b5:5e: 07:cc:6a:7c:79:66:f8:4b:53:26:c0:dc:70:96:bf:1d:21:e9: 8f:4c:ce:b0:4e:61:e6:ba:6e:c2:29:b0:2b:1c:92:c1:17:0a: 38:87:a9:15:01:1f:5c:fb:84:e2:e8:f7:b1:81:c6:26:3c:06: 9a:a4:fc:2c:4e:af:3a:91:53:ba:8f:66:6c:b9:69:52:89:aa: 7f:15:50:51:77:7d:a3:f2:70:21:58:1c:c3:83:7d:16:48:8a: a5:08:0e:1b:0b:c2:6c:1e:2b:de:50:75:bd:6d:61:55:05:14: 2d:bd:2f:86:a5:93:72:ec:4f:89:1f:ac:2c:4f:37:4c:0b:37: 18:43:a7:13:3b:fc:2c:8d:16:1d:e4:0a:c1:c4:f4:75:25:83: 1f:b7:d5:98:41:b1:40:a9:3a:e0:61:2d:86:76:b2:3f:49:45: 03:38:51:63:00:f2:ee:67:3d:65:2f:c5:c3:b0:4e:3a:11:19: 79:61:31:29:02:72:41:3b:3f:e6:a4:2a:c5:72:52:b6:de:1a: 58:42:13:8c:32:56:17:ef:29:f7:ed:f8:a5:08:14:46:5c:5a: 04:f9:a6:81 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBRTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE4 NDdBNDExMC8GA1UEBRMoNENERjk5RTcwN0Y5MDIzMzhFMTRENTEwMjQ5QTk2MjVC Q0EwRkY5RDAeFw0yNTA3MjUwNzUxNTdaFw0yNTA4MDEwNzUxNTdaMBgxFjAUBgNV BAMTDTY4ODMzNzlkLTI4MzYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCynWk9sGLPfilwYaogdT8ArF+L+j+MuF3YwTDlcKH5TZr4QXczF7IPEA39q3Zh FnYF6WeEOsjRConjLXRjoD35xsf3BOfj4Ew/D3Zena4bywCG+Haa8qLvYvXZoAcj jy0gPGjMZQ86Tm5qR2HwMMTKG8vTI9W031CEF+tghLeTbZ7NQZih66iMVVLAsoyf C61Z7ypMp53z1mNdzlnx3dgM9UlmODbwbwQybjlbh3cb0H0zso8ymwrbw02ZNdOj UX+OLb7yr9/GVsVY5KOkNMo8IBrUSx/GupEPR4QxZXRlKRfwJpVY0H2kPILvtjXr /rYs6HxgiXs54S0OqOMQ8KYLAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUAVkbd8dA boKcqTA9PXl6zya2PQwwHwYDVR0jBBgwFoAUTN+Z5wf5AjOOFNUQJJqWJbyg/50w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTg0N0E0L0YyOUVCMjBBMDdF MDExRjBCNjE4NTE2MkM0RjlBRTAyL1ROLVo1d2Y1QWpPT0ZOVVFKSnFXSmJ5Z181 MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvVE4tWjV3ZjVBak9PRk5VUUpKcVdKYnlnXzUwLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTg0 N0E0L0YyOUVCMjBBMDdFMDExRjBCNjE4NTE2MkM0RjlBRTAyL1ROLVo1d2Y1QWpP T0ZOVVFKSnFXSmJ5Z181MC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAGQklyD+Oq9MPMKCj2n0YOYp98NwCWC72/uUlrTjNYKZQZO1XgfManx5 ZvhLUybA3HCWvx0h6Y9MzrBOYea6bsIpsCscksEXCjiHqRUBH1z7hOLo97GBxiY8 Bpqk/CxOrzqRU7qPZmy5aVKJqn8VUFF3faPycCFYHMODfRZIiqUIDhsLwmweK95Q db1tYVUFFC29L4alk3LsT4kfrCxPN0wLNxhDpxM7/CyNFh3kCsHE9HUlgx+31ZhB sUCpOuBhLYZ2sj9JRQM4UWMA8u5nPWUvxcOwTjoRGXlhMSkCckE7P+akKsVyUrbe GlhCE4wyVhfvKfft+KUIFEZcWgT5poE= -----END CERTIFICATE-----Generated at Sat Jul 26 00:56:45 2025 by rpki-client