$ rpki-client -vvf rpki.apnic.net/member_repository/A914F349/C6F5001AEDB111ECAF435C5DC4F9AE02/TZRPMLjG5pGYjTAvumwvnFdMBLA.mft File: TZRPMLjG5pGYjTAvumwvnFdMBLA.mft (raw, json) Hash identifier: qi5FY3RQtsw9NDZ3Y66oTE2E0QvyKUlkRf2kuA5PJqU= Subject key identifier: 66:97:E1:8B:C1:A7:62:3E:B5:BE:35:9A:F1:5E:EB:B4:82:77:DE:BC Authority key identifier: 4D:94:4F:30:B8:C6:E6:91:98:8D:30:2F:BA:6C:2F:9C:57:4C:04:B0 Certificate issuer: /CN=A914F349/serialNumber=4D944F30B8C6E691988D302FBA6C2F9C574C04B0 Certificate serial: 02CB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TZRPMLjG5pGYjTAvumwvnFdMBLA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914F349/C6F5001AEDB111ECAF435C5DC4F9AE02/TZRPMLjG5pGYjTAvumwvnFdMBLA.mft Manifest number: 02C8 Signing time: Sat 31 May 2025 01:35:28 +0000 Manifest this update: Sat 31 May 2025 01:35:27 +0000 Manifest next update: Sat 07 Jun 2025 01:35:27 +0000 Files and hashes: 1: TZRPMLjG5pGYjTAvumwvnFdMBLA.crl (hash: iKqGF05npyuAkKzUpmFpzYAqTEJR8KogQlR2xfD+p4k=) 2: E5A22A7CEDB811ECB7BDFF0AC4F9AE02.roa (hash: iYkVHc+gEz+KBoaY/orgybHRRbhE8SWTurly5q5QifM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914F349/C6F5001AEDB111ECAF435C5DC4F9AE02/TZRPMLjG5pGYjTAvumwvnFdMBLA.crl rsync://rpki.apnic.net/member_repository/A914F349/C6F5001AEDB111ECAF435C5DC4F9AE02/TZRPMLjG5pGYjTAvumwvnFdMBLA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TZRPMLjG5pGYjTAvumwvnFdMBLA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 01:35:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 715 (0x2cb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914F349, serialNumber=4D944F30B8C6E691988D302FBA6C2F9C574C04B0 Validity Not Before: May 31 01:35:27 2025 GMT Not After : Jun 7 01:35:27 2025 GMT Subject: CN=683a5cdf-0e23 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:7a:e5:0e:9d:b0:12:1f:91:81:0b:b8:54:ea: 5c:0d:19:49:d2:63:5a:65:16:25:00:25:95:5b:29: a3:f1:ae:84:db:d2:c8:86:67:fb:47:43:fd:fd:ce: 40:5e:6d:c3:96:be:04:ed:66:64:47:cb:36:eb:ac: 23:3a:4c:89:90:50:69:2a:4f:c6:f6:7d:77:bc:59: dc:e9:53:af:45:27:9d:2f:33:1c:35:79:39:53:14: 0f:96:4c:ee:1d:51:45:8a:fa:e7:d6:f8:53:5f:4f: 54:f5:d6:2f:95:40:53:8c:ee:7a:3f:70:93:71:da: 7f:13:86:1f:b7:ed:8a:96:6f:ad:4e:1c:bf:e2:36: f8:9f:79:8f:59:9e:08:2c:d3:77:ee:bb:2d:cf:3a: 75:79:ef:de:5d:70:c7:ea:92:75:47:9d:b0:7b:52: f8:33:a0:f7:60:4f:e6:70:d4:08:2a:94:2c:47:f7: 47:33:49:e3:fa:da:3f:8a:57:b0:e1:f3:d7:05:54: e8:15:d7:26:c2:2f:52:b1:c1:2d:47:be:49:19:24: cf:6a:30:ee:78:4b:81:2f:31:f1:cc:50:28:4c:05: d5:05:a6:4d:40:6c:51:2b:50:bf:25:b1:ed:03:42: d7:ae:36:0a:be:bc:bd:90:6c:be:26:af:43:77:e6: 0a:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:97:E1:8B:C1:A7:62:3E:B5:BE:35:9A:F1:5E:EB:B4:82:77:DE:BC X509v3 Authority Key Identifier: keyid:4D:94:4F:30:B8:C6:E6:91:98:8D:30:2F:BA:6C:2F:9C:57:4C:04:B0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914F349/C6F5001AEDB111ECAF435C5DC4F9AE02/TZRPMLjG5pGYjTAvumwvnFdMBLA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TZRPMLjG5pGYjTAvumwvnFdMBLA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914F349/C6F5001AEDB111ECAF435C5DC4F9AE02/TZRPMLjG5pGYjTAvumwvnFdMBLA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption be:fd:93:b5:67:e1:99:16:d4:9e:71:8c:21:fa:1c:77:4c:d5: 24:5c:04:b1:c9:e4:1b:26:fb:5c:d4:0d:b4:04:1f:bc:b4:db: e2:38:cc:ac:02:ea:a8:4e:12:aa:9d:22:73:a9:75:98:eb:9a: 64:9d:ce:6f:04:32:0b:56:8d:d7:12:47:53:3c:4e:00:77:84: 8f:80:40:d3:19:e0:73:6a:6d:1c:9b:e3:b6:00:d8:91:96:47: e9:8d:9e:36:17:37:ee:e5:f6:5b:88:32:2e:dd:06:38:21:ea: b0:64:b4:e5:18:94:cd:03:1d:6a:e5:8c:55:34:90:db:8b:d0: 79:46:8c:61:13:80:2b:99:11:34:9f:dc:6c:ec:bf:97:2c:96: 56:ab:b0:5c:c3:38:d5:5c:01:19:cf:08:e5:99:02:4e:8e:fc: c2:d7:08:28:83:17:38:d3:02:b2:cb:16:0d:96:d3:d2:37:cf: e2:17:40:3a:fa:11:f9:8f:f6:3f:6f:57:75:1f:9f:fb:27:08: a6:14:fa:db:7a:f4:ee:7f:0d:88:a4:c7:77:34:c7:6c:66:cd: 9c:dc:16:34:cf:c0:ac:db:dd:84:31:b9:09:ca:11:61:2d:8e: 97:8c:69:52:8f:ce:d9:4a:80:95:20:3a:22:54:3c:11:e5:c4: ba:04:81:0d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAsswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEYzNDkxMTAvBgNVBAUTKDREOTQ0RjMwQjhDNkU2OTE5ODhEMzAyRkJBNkMyRjlD NTc0QzA0QjAwHhcNMjUwNTMxMDEzNTI3WhcNMjUwNjA3MDEzNTI3WjAYMRYwFAYD VQQDEw02ODNhNWNkZi0wZTIzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1HrlDp2wEh+RgQu4VOpcDRlJ0mNaZRYlACWVWymj8a6E29LIhmf7R0P9/c5A Xm3Dlr4E7WZkR8s266wjOkyJkFBpKk/G9n13vFnc6VOvRSedLzMcNXk5UxQPlkzu HVFFivrn1vhTX09U9dYvlUBTjO56P3CTcdp/E4Yft+2Klm+tThy/4jb4n3mPWZ4I LNN37rstzzp1ee/eXXDH6pJ1R52we1L4M6D3YE/mcNQIKpQsR/dHM0nj+to/ilew 4fPXBVToFdcmwi9SscEtR75JGSTPajDueEuBLzHxzFAoTAXVBaZNQGxRK1C/JbHt A0LXrjYKvry9kGy+Jq9Dd+YKSwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGaX4YvB p2I+tb41mvFe67SCd968MB8GA1UdIwQYMBaAFE2UTzC4xuaRmI0wL7psL5xXTASw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RjM0OS9DNkY1MDAxQUVE QjExMUVDQUY0MzVDNURDNEY5QUUwMi9UWlJQTUxqRzVwR1lqVEF2dW13dm5GZE1C TEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1RaUlBNTGpHNXBHWWpUQXZ1bXd2bkZkTUJMQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 RjM0OS9DNkY1MDAxQUVEQjExMUVDQUY0MzVDNURDNEY5QUUwMi9UWlJQTUxqRzVw R1lqVEF2dW13dm5GZE1CTEEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC+/ZO1Z+GZFtSecYwh+hx3TNUkXASxyeQbJvtc1A20BB+8tNviOMys AuqoThKqnSJzqXWY65pknc5vBDILVo3XEkdTPE4Ad4SPgEDTGeBzam0cm+O2ANiR lkfpjZ42Fzfu5fZbiDIu3QY4IeqwZLTlGJTNAx1q5YxVNJDbi9B5RoxhE4ArmRE0 n9xs7L+XLJZWq7BcwzjVXAEZzwjlmQJOjvzC1wgogxc40wKyyxYNltPSN8/iF0A6 +hH5j/Y/b1d1H5/7JwimFPrbevTufw2IpMd3NMdsZs2c3BY0z8Cs292EMbkJyhFh LY6XjGlSj87ZSoCVIDoiVDwR5cS6BIEN -----END CERTIFICATE-----Generated at Sat May 31 17:20:42 2025 by rpki-client