$ rpki-client -vvf rpki.apnic.net/member_repository/A91E4042/EFC98DE6E53611EB9926556BC4F9AE02/TzMtwIyXR6ybyBxUfRujRWQ_drc.mft File: TzMtwIyXR6ybyBxUfRujRWQ_drc.mft (raw, json) Hash identifier: ieY+ff/McZGGucdA5UD4JbNS7budxYKqzQB15qPfG/Y= Subject key identifier: A2:16:B2:96:C8:5E:B6:8B:96:9B:EE:85:17:CC:91:73:E4:C4:55:8C Authority key identifier: 4F:33:2D:C0:8C:97:47:AC:9B:C8:1C:54:7D:1B:A3:45:64:3F:76:B7 Certificate issuer: /CN=A91E4042/serialNumber=4F332DC08C9747AC9BC81C547D1BA345643F76B7 Certificate serial: 054A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TzMtwIyXR6ybyBxUfRujRWQ_drc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E4042/EFC98DE6E53611EB9926556BC4F9AE02/TzMtwIyXR6ybyBxUfRujRWQ_drc.mft Manifest number: 0545 Signing time: Fri 28 Mar 2025 23:43:39 +0000 Manifest this update: Fri 28 Mar 2025 23:43:38 +0000 Manifest next update: Fri 04 Apr 2025 23:43:38 +0000 Files and hashes: 1: TzMtwIyXR6ybyBxUfRujRWQ_drc.crl (hash: t6+OBTRYLpVLCgffaMSBB0haZzOWYsVYJHwDTCVenPA=) 2: 26F1B59437A511ECB73C9852C4F9AE02.roa (hash: qsrO8yS/1EvYraDqXGU2ot/FTw/eeb+gKYOfP/J5WaU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E4042/EFC98DE6E53611EB9926556BC4F9AE02/TzMtwIyXR6ybyBxUfRujRWQ_drc.crl rsync://rpki.apnic.net/member_repository/A91E4042/EFC98DE6E53611EB9926556BC4F9AE02/TzMtwIyXR6ybyBxUfRujRWQ_drc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TzMtwIyXR6ybyBxUfRujRWQ_drc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 04 Apr 2025 23:43:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1354 (0x54a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E4042 Validity Not Before: Mar 28 23:43:38 2025 GMT Not After : Apr 4 23:43:38 2025 GMT Subject: CN=67e7342b-fde7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:35:1d:16:1b:26:c9:bb:d8:58:5c:f8:b9:19: bf:0b:33:c1:d6:dd:9e:98:21:5b:49:5a:cb:4e:86: b1:51:be:70:bf:10:da:01:fd:ce:01:e8:dd:18:1c: 30:66:69:de:9c:7f:bf:56:90:ea:50:ed:8a:cb:19: 8f:be:e9:fc:7c:1e:b3:7a:26:06:07:64:e0:a7:3e: fb:7e:0f:90:40:51:15:f6:f8:6c:0c:46:de:37:ec: 89:db:4c:fe:5a:fd:0d:7e:95:d1:97:04:f9:66:c5: f9:13:e4:4a:94:f1:f6:c4:d5:7a:9d:1e:fa:00:b6: 33:3f:7a:5b:8f:8a:20:4c:e6:bf:18:b0:ed:4b:b8: 90:f5:39:87:d1:91:e6:e0:85:12:06:7f:60:93:27: ae:0c:ed:e9:f2:55:ab:91:e8:ec:41:79:a6:6c:00: d0:4f:6c:f2:8e:00:8b:53:b8:2e:c4:10:3d:44:11: d0:51:e4:b7:4c:be:02:8e:ac:4c:e6:14:02:a4:7f: f1:83:d7:c6:41:20:2f:95:c4:9f:d8:b3:53:44:02: 1f:33:a0:79:a7:99:6c:c1:51:ea:9f:f9:27:36:2f: 81:54:bf:a2:66:59:ac:6b:df:07:c3:5e:a0:36:ec: 70:33:6f:1b:50:18:23:38:bc:26:41:53:bf:a1:07: eb:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:16:B2:96:C8:5E:B6:8B:96:9B:EE:85:17:CC:91:73:E4:C4:55:8C X509v3 Authority Key Identifier: keyid:4F:33:2D:C0:8C:97:47:AC:9B:C8:1C:54:7D:1B:A3:45:64:3F:76:B7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E4042/EFC98DE6E53611EB9926556BC4F9AE02/TzMtwIyXR6ybyBxUfRujRWQ_drc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TzMtwIyXR6ybyBxUfRujRWQ_drc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E4042/EFC98DE6E53611EB9926556BC4F9AE02/TzMtwIyXR6ybyBxUfRujRWQ_drc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 51:0b:84:80:cb:2b:74:3c:f1:0d:b6:30:dc:bf:17:03:d6:cf: 8f:3b:dc:3c:c9:d4:6d:a3:26:ec:cd:b3:ce:19:90:b4:78:19: 2a:db:d1:6d:58:62:79:f8:9f:41:0e:91:89:c0:c8:67:df:33: 32:c7:ec:9f:8a:90:e6:61:02:a7:ee:f6:61:a5:5d:0e:9f:23: 34:b9:86:05:91:bc:dc:86:8e:a9:7e:e9:6f:8e:ab:d5:a8:60: 1f:34:d2:b8:07:b1:7d:6c:e0:31:07:eb:ac:64:49:a3:8d:31: de:2f:34:18:b4:62:80:15:8e:f0:28:54:c1:89:bd:53:e4:58: 32:1c:f4:4d:d2:77:c6:15:4c:53:51:b1:43:55:c0:3d:e2:c3: 18:2b:44:b7:39:af:a4:87:b8:0e:04:39:cd:43:2d:0a:61:a2: bd:f1:8f:69:b8:47:eb:c7:1a:6b:8c:66:a0:c8:1c:45:0c:e4: 19:f6:41:b2:5b:5a:71:b4:a0:53:82:93:d7:5f:d4:74:43:03: ed:d5:82:ae:ed:e5:29:a2:c1:bf:16:cc:ce:2d:75:d2:aa:ae: a5:e6:39:d8:6e:ad:cb:0c:9b:66:8b:e3:3a:22:c7:f2:4f:bd: 9d:25:7a:07:9e:86:de:01:c4:5c:3c:00:a4:24:4b:c4:44:11: fb:7c:64:db -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBUowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTQwNDIxMTAvBgNVBAUTKDRGMzMyREMwOEM5NzQ3QUM5QkM4MUM1NDdEMUJBMzQ1 NjQzRjc2QjcwHhcNMjUwMzI4MjM0MzM4WhcNMjUwNDA0MjM0MzM4WjAYMRYwFAYD VQQDEw02N2U3MzQyYi1mZGU3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0DUdFhsmybvYWFz4uRm/CzPB1t2emCFbSVrLToaxUb5wvxDaAf3OAejdGBww ZmnenH+/VpDqUO2KyxmPvun8fB6zeiYGB2Tgpz77fg+QQFEV9vhsDEbeN+yJ20z+ Wv0NfpXRlwT5ZsX5E+RKlPH2xNV6nR76ALYzP3pbj4ogTOa/GLDtS7iQ9TmH0ZHm 4IUSBn9gkyeuDO3p8lWrkejsQXmmbADQT2zyjgCLU7guxBA9RBHQUeS3TL4CjqxM 5hQCpH/xg9fGQSAvlcSf2LNTRAIfM6B5p5lswVHqn/knNi+BVL+iZlmsa98Hw16g NuxwM28bUBgjOLwmQVO/oQfrCwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKIWspbI XraLlpvuhRfMkXPkxFWMMB8GA1UdIwQYMBaAFE8zLcCMl0esm8gcVH0bo0VkP3a3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNDA0Mi9FRkM5OERFNkU1 MzYxMUVCOTkyNjU1NkJDNEY5QUUwMi9Uek10d0l5WFI2eWJ5QnhVZlJ1alJXUV9k cmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1R6TXR3SXlYUjZ5YnlCeFVmUnVqUldRX2RyYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NDA0Mi9FRkM5OERFNkU1MzYxMUVCOTkyNjU1NkJDNEY5QUUwMi9Uek10d0l5WFI2 eWJ5QnhVZlJ1alJXUV9kcmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBRC4SAyyt0PPENtjDcvxcD1s+PO9w8ydRtoybszbPOGZC0eBkq29Ft WGJ5+J9BDpGJwMhn3zMyx+yfipDmYQKn7vZhpV0OnyM0uYYFkbzcho6pfulvjqvV qGAfNNK4B7F9bOAxB+usZEmjjTHeLzQYtGKAFY7wKFTBib1T5FgyHPRN0nfGFUxT UbFDVcA94sMYK0S3Oa+kh7gOBDnNQy0KYaK98Y9puEfrxxprjGagyBxFDOQZ9kGy W1pxtKBTgpPXX9R0QwPt1YKu7eUposG/FszOLXXSqq6l5jnYbq3LDJtmi+M6Isfy T72dJXoHnobeAcRcPACkJEvERBH7fGTb -----END CERTIFICATE-----Generated at Fri Apr 4 18:36:00 2025 by rpki-client