$ rpki-client -vvf rpki.apnic.net/member_repository/A91957C9/C359E75EAC1911E983F2FC62C4F9AE02/TzFe71rLLtp6NynnnhNZkMAecHQ.mft File: TzFe71rLLtp6NynnnhNZkMAecHQ.mft (raw, json) Hash identifier: PLT3S9oYiwLIFBXzc4Wli7LFDYUKAEDFhz0lc0qHaC8= Subject key identifier: CC:63:91:E3:4B:A3:DF:54:DF:E4:28:9E:F9:CA:9A:E7:D5:66:53:6E Authority key identifier: 4F:31:5E:EF:5A:CB:2E:DA:7A:37:29:E7:9E:13:59:90:C0:1E:70:74 Certificate issuer: /CN=A91957C9/serialNumber=4F315EEF5ACB2EDA7A3729E79E135990C01E7074 Certificate serial: 0E2F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TzFe71rLLtp6NynnnhNZkMAecHQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91957C9/C359E75EAC1911E983F2FC62C4F9AE02/TzFe71rLLtp6NynnnhNZkMAecHQ.mft Manifest number: 0E23 Signing time: Fri 18 Jul 2025 17:57:53 +0000 Manifest this update: Fri 18 Jul 2025 17:57:53 +0000 Manifest next update: Fri 25 Jul 2025 17:57:53 +0000 Files and hashes: 1: TzFe71rLLtp6NynnnhNZkMAecHQ.crl (hash: goyZn8w9cjgtepErcuREvzyh4APH2v71zaNtnFvqZKo=) 2: B55EC19EAC2B11E996F6E511C4F9AE02.roa (hash: Kmbnqjt+FsbQjmxP1orKor9zYnpCPWPxfhoKQqbWYu0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91957C9/C359E75EAC1911E983F2FC62C4F9AE02/TzFe71rLLtp6NynnnhNZkMAecHQ.crl rsync://rpki.apnic.net/member_repository/A91957C9/C359E75EAC1911E983F2FC62C4F9AE02/TzFe71rLLtp6NynnnhNZkMAecHQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TzFe71rLLtp6NynnnhNZkMAecHQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Jul 2025 17:57:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3631 (0xe2f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91957C9, serialNumber=4F315EEF5ACB2EDA7A3729E79E135990C01E7074 Validity Not Before: Jul 18 17:57:53 2025 GMT Not After : Jul 25 17:57:53 2025 GMT Subject: CN=687a8b21-5f61 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:13:4f:9b:a8:8a:00:4f:5c:e3:10:b9:a8:a4: 02:60:86:c4:ec:29:ff:d4:d3:11:20:02:c0:7d:0a: 16:a0:8d:ad:b8:78:d0:0c:35:29:5b:77:e4:f3:a3: f0:ac:98:c6:85:ba:33:fd:6a:00:41:af:c3:8e:c6: 93:c4:37:4d:2b:3e:f9:ae:87:3c:be:4b:b5:67:c1: d6:0d:c4:56:eb:95:58:fd:3d:9c:31:de:4c:8a:27: cf:a3:46:bc:5c:81:82:93:51:85:d6:4f:33:e4:19: c5:dd:54:41:37:33:09:88:2c:5d:f7:c1:f4:ae:90: 76:93:5d:f0:a0:b3:78:a6:34:09:9e:d4:6c:f2:7d: a4:7b:ec:01:b0:e1:5b:3b:e3:9e:f7:49:3f:29:08: f1:8e:f4:49:ef:ce:97:00:72:0d:d2:80:50:08:9b: 7c:be:95:85:fb:ce:ef:50:0e:50:55:01:77:a0:a5: a4:43:54:2f:45:7c:58:0f:ab:ab:86:03:c0:f6:06: df:bf:54:7a:c2:dc:fa:a8:ec:ca:3c:d4:5f:97:b2: ee:43:d8:0b:0a:7f:a6:ad:fa:c7:ef:aa:14:05:4e: 6d:a8:51:8e:9f:b7:71:c1:a2:81:dd:16:ef:11:c1: 47:b5:b2:9f:69:9a:16:0d:ed:cf:b3:e8:0e:d8:d2: bb:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:63:91:E3:4B:A3:DF:54:DF:E4:28:9E:F9:CA:9A:E7:D5:66:53:6E X509v3 Authority Key Identifier: keyid:4F:31:5E:EF:5A:CB:2E:DA:7A:37:29:E7:9E:13:59:90:C0:1E:70:74 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91957C9/C359E75EAC1911E983F2FC62C4F9AE02/TzFe71rLLtp6NynnnhNZkMAecHQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TzFe71rLLtp6NynnnhNZkMAecHQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91957C9/C359E75EAC1911E983F2FC62C4F9AE02/TzFe71rLLtp6NynnnhNZkMAecHQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 99:90:ee:72:b8:8a:ea:d8:fe:2f:5a:78:63:d3:69:84:3d:82: fa:0c:bc:74:c7:d7:73:5f:93:f3:da:ef:09:44:47:dd:f0:48: 1d:90:b6:21:5b:01:2d:54:42:2e:c9:c4:dc:4b:d5:a8:ad:73: 99:90:66:9b:b9:e8:fb:2c:66:35:d5:24:51:91:14:b7:56:b3: 48:6d:9e:5a:1d:68:37:42:f3:6b:5b:d3:71:20:93:81:c8:d3: b3:7a:16:bf:01:78:6a:34:7f:c0:49:4f:a7:c2:11:91:38:71: 00:2b:14:48:0a:61:70:76:25:70:8d:64:70:30:df:19:6b:c1: d3:34:a5:55:99:d0:fb:61:fd:c4:c4:d9:75:c7:e0:06:e9:62: 58:19:0f:39:1d:72:02:a3:9e:fb:d2:ce:ed:98:96:44:46:bf: 9e:57:fa:96:ba:b1:58:6c:af:82:f2:d4:0b:3b:32:33:dd:36: 34:43:23:47:b1:3e:57:e8:52:3b:36:e6:97:b7:c6:2e:02:90: d1:75:83:68:00:93:35:df:45:4b:72:55:c5:84:07:4e:0d:d7: 1a:62:be:a5:b1:a7:2d:d3:20:92:80:ef:f5:6d:87:a0:ac:10: 4b:23:4c:fb:f0:c6:dc:43:60:28:e6:dd:61:98:31:24:1f:34: 08:d1:35:e2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDi8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTU3QzkxMTAvBgNVBAUTKDRGMzE1RUVGNUFDQjJFREE3QTM3MjlFNzlFMTM1OTkw QzAxRTcwNzQwHhcNMjUwNzE4MTc1NzUzWhcNMjUwNzI1MTc1NzUzWjAYMRYwFAYD VQQDEw02ODdhOGIyMS01ZjYxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4xNPm6iKAE9c4xC5qKQCYIbE7Cn/1NMRIALAfQoWoI2tuHjQDDUpW3fk86Pw rJjGhboz/WoAQa/DjsaTxDdNKz75roc8vku1Z8HWDcRW65VY/T2cMd5MiifPo0a8 XIGCk1GF1k8z5BnF3VRBNzMJiCxd98H0rpB2k13woLN4pjQJntRs8n2ke+wBsOFb O+Oe90k/KQjxjvRJ786XAHIN0oBQCJt8vpWF+87vUA5QVQF3oKWkQ1QvRXxYD6ur hgPA9gbfv1R6wtz6qOzKPNRfl7LuQ9gLCn+mrfrH76oUBU5tqFGOn7dxwaKB3Rbv EcFHtbKfaZoWDe3Ps+gO2NK7KwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMxjkeNL o99U3+QonvnKmufVZlNuMB8GA1UdIwQYMBaAFE8xXu9ayy7aejcp554TWZDAHnB0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NTdDOS9DMzU5RTc1RUFD MTkxMUU5ODNGMkZDNjJDNEY5QUUwMi9UekZlNzFyTEx0cDZOeW5ubmhOWmtNQWVj SFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1R6RmU3MXJMTHRwNk55bm5uaE5aa01BZWNIUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NTdDOS9DMzU5RTc1RUFDMTkxMUU5ODNGMkZDNjJDNEY5QUUwMi9UekZlNzFyTEx0 cDZOeW5ubmhOWmtNQWVjSFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCZkO5yuIrq2P4vWnhj02mEPYL6DLx0x9dzX5Pz2u8JREfd8EgdkLYh WwEtVEIuycTcS9WorXOZkGabuej7LGY11SRRkRS3VrNIbZ5aHWg3QvNrW9NxIJOB yNOzeha/AXhqNH/ASU+nwhGROHEAKxRICmFwdiVwjWRwMN8Za8HTNKVVmdD7Yf3E xNl1x+AG6WJYGQ85HXICo5770s7tmJZERr+eV/qWurFYbK+C8tQLOzIz3TY0QyNH sT5X6FI7NuaXt8YuApDRdYNoAJM130VLclXFhAdODdcaYr6lsact0yCSgO/1bYeg rBBLI0z78MbcQ2Ao5t1hmDEkHzQI0TXi -----END CERTIFICATE-----Generated at Sun Jul 20 11:30:27 2025 by rpki-client