$ rpki-client -vvf rpki.apnic.net/member_repository/A919DD2B/0B26BACC58BA11ECA1D91A51C4F9AE02/TZ0PaMLT_yhGBYGQy_bIySHN2mI.mft File: TZ0PaMLT_yhGBYGQy_bIySHN2mI.mft (raw, json) Hash identifier: IxanF1ABQjvAt+XLz7fyDVPk3hUA9vrlcYfevVq80lI= Subject key identifier: DD:C9:95:DF:69:2A:1C:A7:C9:90:9A:81:2C:63:FE:B5:CD:DA:AA:4B Authority key identifier: 4D:9D:0F:68:C2:D3:FF:28:46:05:81:90:CB:F6:C8:C9:21:CD:DA:62 Certificate issuer: /CN=A919DD2B/serialNumber=4D9D0F68C2D3FF2846058190CBF6C8C921CDDA62 Certificate serial: 042A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TZ0PaMLT_yhGBYGQy_bIySHN2mI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919DD2B/0B26BACC58BA11ECA1D91A51C4F9AE02/TZ0PaMLT_yhGBYGQy_bIySHN2mI.mft Manifest number: 0426 Signing time: Sat 29 Mar 2025 00:37:03 +0000 Manifest this update: Sat 29 Mar 2025 00:37:02 +0000 Manifest next update: Sat 05 Apr 2025 00:37:02 +0000 Files and hashes: 1: TZ0PaMLT_yhGBYGQy_bIySHN2mI.crl (hash: BUk+z+YzFe0bSBGskwe5zm5hfwknuZlLgCI9FaKxX+w=) 2: E1484B3658BD11ECB49A9856C4F9AE02.roa (hash: /HXDuqjyr3f0zY/02q1871VGREErBAo71F5/20UhS78=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919DD2B/0B26BACC58BA11ECA1D91A51C4F9AE02/TZ0PaMLT_yhGBYGQy_bIySHN2mI.crl rsync://rpki.apnic.net/member_repository/A919DD2B/0B26BACC58BA11ECA1D91A51C4F9AE02/TZ0PaMLT_yhGBYGQy_bIySHN2mI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TZ0PaMLT_yhGBYGQy_bIySHN2mI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 05 Apr 2025 00:37:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1066 (0x42a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919DD2B Validity Not Before: Mar 29 00:37:02 2025 GMT Not After : Apr 5 00:37:02 2025 GMT Subject: CN=67e740ae-edbc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:40:06:43:08:f5:d5:c0:15:52:94:71:a7:e2: 9a:37:01:cf:36:5d:1f:71:84:1a:ab:11:75:da:48: 77:dd:5c:35:7b:11:e8:27:ec:af:41:83:85:6f:8e: 72:f4:43:69:ee:6c:57:93:a4:55:62:0e:ca:49:c2: 49:67:ca:8f:c6:44:a7:40:ea:d5:a0:a9:18:47:47: 59:12:ce:8d:c9:44:33:ff:c6:53:46:58:67:21:94: 26:ee:00:8e:d2:1b:c6:10:a1:49:5a:76:9d:01:f9: 2e:e6:b6:69:b5:89:7c:f8:81:61:f3:11:2e:47:7b: 22:d5:70:73:3d:a4:bf:6d:35:79:5d:c0:de:ae:e4: dc:36:24:ef:0c:2b:99:0e:63:a7:27:35:bf:ad:65: 26:49:f6:ae:8e:68:ac:a8:bd:d1:30:56:4b:98:a8: 7f:1d:ab:4b:17:d7:85:52:cd:c2:77:c4:48:e0:ee: b2:e4:d9:22:ac:40:6c:f7:5f:31:16:8a:1f:ee:28: 50:41:cd:ef:9c:cb:a3:d8:93:6f:4c:12:61:55:6d: 50:03:24:5b:12:59:9b:f0:1a:9e:f2:83:b6:8f:d6: 56:22:01:3b:7d:36:8c:48:55:3f:99:ec:81:1e:27: b9:be:ad:2f:d4:25:74:fd:6b:eb:09:0b:c8:9d:0d: b4:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:C9:95:DF:69:2A:1C:A7:C9:90:9A:81:2C:63:FE:B5:CD:DA:AA:4B X509v3 Authority Key Identifier: keyid:4D:9D:0F:68:C2:D3:FF:28:46:05:81:90:CB:F6:C8:C9:21:CD:DA:62 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919DD2B/0B26BACC58BA11ECA1D91A51C4F9AE02/TZ0PaMLT_yhGBYGQy_bIySHN2mI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TZ0PaMLT_yhGBYGQy_bIySHN2mI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919DD2B/0B26BACC58BA11ECA1D91A51C4F9AE02/TZ0PaMLT_yhGBYGQy_bIySHN2mI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a4:04:4e:36:25:9a:38:32:71:f7:fd:c3:18:aa:13:97:4a:1d: 6c:13:92:bf:60:82:61:6e:8a:ae:bb:10:6b:3d:3f:67:70:ef: 53:a5:3a:00:56:b5:49:d3:3a:5d:69:04:b7:bb:59:7f:68:db: 98:01:f4:39:11:42:8a:14:1d:33:77:c3:f0:94:68:b9:71:8f: 85:6f:4d:da:ba:dc:12:83:e9:33:35:c5:3b:c3:ec:d0:6b:0b: 69:8b:6e:94:f3:f0:2e:75:14:f3:28:66:69:d8:4e:90:4d:38: 5a:86:8c:25:c6:27:64:8e:05:b2:7d:c5:0d:df:ea:79:1c:4a: ac:e0:bb:4e:c2:9f:5b:eb:db:aa:90:41:7c:7b:61:99:31:31: 88:a9:27:2f:60:b7:ba:50:4d:d3:36:6d:ed:13:c4:53:b4:ed: 05:65:e0:99:eb:84:b6:b4:00:b7:fa:f8:36:78:da:b9:c9:dc: 27:63:df:0f:cf:6b:43:b7:82:fa:1a:a3:b2:01:b1:43:dc:88: 0b:3a:6d:f3:5a:40:ab:a9:69:54:da:b0:3a:f3:74:e8:60:58: c9:cb:99:e0:a1:d8:a8:4c:d0:f7:d6:b8:47:ae:4d:fc:c1:94: 03:61:2d:24:34:fa:59:e8:8f:83:c5:57:ff:42:3d:ce:49:71: 33:11:69:65 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBCowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUREMkIxMTAvBgNVBAUTKDREOUQwRjY4QzJEM0ZGMjg0NjA1ODE5MENCRjZDOEM5 MjFDRERBNjIwHhcNMjUwMzI5MDAzNzAyWhcNMjUwNDA1MDAzNzAyWjAYMRYwFAYD VQQDEw02N2U3NDBhZS1lZGJjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApkAGQwj11cAVUpRxp+KaNwHPNl0fcYQaqxF12kh33Vw1exHoJ+yvQYOFb45y 9ENp7mxXk6RVYg7KScJJZ8qPxkSnQOrVoKkYR0dZEs6NyUQz/8ZTRlhnIZQm7gCO 0hvGEKFJWnadAfku5rZptYl8+IFh8xEuR3si1XBzPaS/bTV5XcDeruTcNiTvDCuZ DmOnJzW/rWUmSfaujmisqL3RMFZLmKh/HatLF9eFUs3Cd8RI4O6y5NkirEBs918x Foof7ihQQc3vnMuj2JNvTBJhVW1QAyRbElmb8Bqe8oO2j9ZWIgE7fTaMSFU/meyB Hie5vq0v1CV0/WvrCQvInQ20NQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFN3Jld9p KhynyZCagSxj/rXN2qpLMB8GA1UdIwQYMBaAFE2dD2jC0/8oRgWBkMv2yMkhzdpi MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5REQyQi8wQjI2QkFDQzU4 QkExMUVDQTFEOTFBNTFDNEY5QUUwMi9UWjBQYU1MVF95aEdCWUdReV9iSXlTSE4y bUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1RaMFBhTUxUX3loR0JZR1F5X2JJeVNITjJtSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 REQyQi8wQjI2QkFDQzU4QkExMUVDQTFEOTFBNTFDNEY5QUUwMi9UWjBQYU1MVF95 aEdCWUdReV9iSXlTSE4ybUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCkBE42JZo4MnH3/cMYqhOXSh1sE5K/YIJhboquuxBrPT9ncO9TpToA VrVJ0zpdaQS3u1l/aNuYAfQ5EUKKFB0zd8PwlGi5cY+Fb03autwSg+kzNcU7w+zQ awtpi26U8/AudRTzKGZp2E6QTThahowlxidkjgWyfcUN3+p5HEqs4LtOwp9b69uq kEF8e2GZMTGIqScvYLe6UE3TNm3tE8RTtO0FZeCZ64S2tAC3+vg2eNq5ydwnY98P z2tDt4L6GqOyAbFD3IgLOm3zWkCrqWlU2rA683ToYFjJy5ngodioTND31rhHrk38 wZQDYS0kNPpZ6I+DxVf/Qj3OSXEzEWll -----END CERTIFICATE-----Generated at Fri Apr 4 22:22:11 2025 by rpki-client