$ rpki-client -vvf rpki.apnic.net/member_repository/A914F349/C6F5001AEDB111ECAF435C5DC4F9AE02/TZRPMLjG5pGYjTAvumwvnFdMBLA.mft File: TZRPMLjG5pGYjTAvumwvnFdMBLA.mft (raw, json) Hash identifier: UfA12jf5kxYYaQ+lktCYh9RepEYBUA+b9M3dIWwQZmQ= Subject key identifier: CE:70:EC:15:2D:FD:60:AB:5C:1C:98:83:7B:B3:5C:14:7E:D7:61:D4 Authority key identifier: 4D:94:4F:30:B8:C6:E6:91:98:8D:30:2F:BA:6C:2F:9C:57:4C:04:B0 Certificate issuer: /CN=A914F349/serialNumber=4D944F30B8C6E691988D302FBA6C2F9C574C04B0 Certificate serial: 0321 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TZRPMLjG5pGYjTAvumwvnFdMBLA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914F349/C6F5001AEDB111ECAF435C5DC4F9AE02/TZRPMLjG5pGYjTAvumwvnFdMBLA.mft Manifest number: 031C Signing time: Wed 05 Nov 2025 01:12:30 +0000 Manifest this update: Wed 05 Nov 2025 01:12:30 +0000 Manifest next update: Wed 12 Nov 2025 01:12:30 +0000 Files and hashes: 1: TZRPMLjG5pGYjTAvumwvnFdMBLA.crl (hash: wQuQ5SQNzYCxAJA85dicEu6ZiyPf1hTZ46sCCYe98BA=) 2: E5A22A7CEDB811ECB7BDFF0AC4F9AE02.roa (hash: pBwxys1yivtkEToGBFIFFmXXN52OvE5FFgRhewDkeko=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914F349/C6F5001AEDB111ECAF435C5DC4F9AE02/TZRPMLjG5pGYjTAvumwvnFdMBLA.crl rsync://rpki.apnic.net/member_repository/A914F349/C6F5001AEDB111ECAF435C5DC4F9AE02/TZRPMLjG5pGYjTAvumwvnFdMBLA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TZRPMLjG5pGYjTAvumwvnFdMBLA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 01:12:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 801 (0x321) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914F349, serialNumber=4D944F30B8C6E691988D302FBA6C2F9C574C04B0 Validity Not Before: Nov 5 01:12:30 2025 GMT Not After : Nov 12 01:12:30 2025 GMT Subject: CN=690aa47e-fe9c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:aa:05:82:22:8a:7f:fb:33:53:50:17:5c:b1: dd:43:07:17:fd:2b:82:8c:87:d2:75:bb:15:a9:c6: e3:4f:a8:c9:27:f8:7d:2e:da:87:e4:7e:ad:dc:6d: 81:dc:33:72:8e:25:06:1c:68:ae:aa:c2:9a:d4:db: dc:a6:b6:38:2b:09:e2:98:d9:f3:2f:a5:a9:81:74: dc:60:5b:89:6f:15:da:54:5f:32:ca:d7:2f:e9:db: d5:f3:d7:27:70:52:58:36:a8:61:33:42:99:7f:dd: 2b:bf:bb:23:0a:d4:49:85:b7:19:cb:14:9b:ab:ff: 04:3c:68:57:6c:dc:3e:04:d5:d5:d8:08:45:0b:25: cd:56:d1:62:c0:0e:06:a3:7e:be:8c:40:03:9b:d8: 54:90:60:be:dd:d3:7d:46:d3:ea:90:84:bd:ff:b5: 8c:55:67:68:05:e7:ae:e6:73:89:91:b1:6a:69:ec: 79:7a:94:27:20:45:02:e1:eb:ce:ba:4f:77:5a:92: c1:2d:95:a1:09:a9:9b:bc:27:20:a7:35:b2:3e:f1: e5:98:44:b0:ba:39:e4:28:8b:a5:21:6b:82:03:cf: ed:47:08:b6:e3:bf:90:be:1d:52:79:85:fc:64:07: 51:c2:c6:96:09:aa:e1:d0:db:a1:54:84:27:a1:27: b9:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:70:EC:15:2D:FD:60:AB:5C:1C:98:83:7B:B3:5C:14:7E:D7:61:D4 X509v3 Authority Key Identifier: keyid:4D:94:4F:30:B8:C6:E6:91:98:8D:30:2F:BA:6C:2F:9C:57:4C:04:B0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914F349/C6F5001AEDB111ECAF435C5DC4F9AE02/TZRPMLjG5pGYjTAvumwvnFdMBLA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TZRPMLjG5pGYjTAvumwvnFdMBLA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914F349/C6F5001AEDB111ECAF435C5DC4F9AE02/TZRPMLjG5pGYjTAvumwvnFdMBLA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption d4:36:3e:13:c1:71:50:53:c2:76:fb:5d:a1:f0:d5:2a:e1:ea: 6d:8d:7e:a5:b2:fa:42:f1:a8:7f:05:6b:8b:7d:d9:50:7f:1e: b8:fe:db:ba:c1:7a:9f:a0:df:4c:46:0d:bd:d6:e2:f3:ce:6d: ec:6d:1f:91:04:8a:83:18:12:3d:a4:5f:18:99:a8:34:be:f4: 85:12:df:a1:8d:c5:d7:e5:89:cf:49:72:ab:0d:dc:02:3a:77: 88:d4:ba:48:ae:cc:b2:fc:a0:20:b5:c6:d9:60:0a:15:78:76: af:65:8c:ac:3c:4f:bd:41:c8:83:12:8d:41:9a:db:db:39:e3: 6c:53:3d:26:a5:cd:da:55:9d:c3:85:4b:4a:d8:d5:1a:3d:4b: da:a1:43:fc:bb:2c:90:bb:a2:de:2c:bb:d1:31:2e:1c:34:70: 5b:38:d9:6b:a2:3b:62:c3:6f:a1:59:40:ca:5f:4d:d1:47:a1: 1e:57:e4:17:9f:8d:89:b4:6a:a6:3b:5b:3b:f7:f7:71:ef:7e: 98:d9:8a:7a:fc:a5:ab:51:2f:ef:af:7a:33:90:2f:59:04:d7: 51:c0:5c:a4:4c:69:aa:6c:a6:29:ea:6a:ea:89:6e:1f:32:f5: b7:12:68:8e:cc:c4:5c:4c:dd:f7:67:16:7e:23:be:da:4f:0b: 6f:47:f2:0f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAyEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEYzNDkxMTAvBgNVBAUTKDREOTQ0RjMwQjhDNkU2OTE5ODhEMzAyRkJBNkMyRjlD NTc0QzA0QjAwHhcNMjUxMTA1MDExMjMwWhcNMjUxMTEyMDExMjMwWjAYMRYwFAYD VQQDEw02OTBhYTQ3ZS1mZTljMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAs6oFgiKKf/szU1AXXLHdQwcX/SuCjIfSdbsVqcbjT6jJJ/h9LtqH5H6t3G2B 3DNyjiUGHGiuqsKa1NvcprY4KwnimNnzL6WpgXTcYFuJbxXaVF8yytcv6dvV89cn cFJYNqhhM0KZf90rv7sjCtRJhbcZyxSbq/8EPGhXbNw+BNXV2AhFCyXNVtFiwA4G o36+jEADm9hUkGC+3dN9RtPqkIS9/7WMVWdoBeeu5nOJkbFqaex5epQnIEUC4evO uk93WpLBLZWhCambvCcgpzWyPvHlmESwujnkKIulIWuCA8/tRwi247+Qvh1SeYX8 ZAdRwsaWCarh0NuhVIQnoSe5qwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFM5w7BUt /WCrXByYg3uzXBR+12HUMB8GA1UdIwQYMBaAFE2UTzC4xuaRmI0wL7psL5xXTASw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RjM0OS9DNkY1MDAxQUVE QjExMUVDQUY0MzVDNURDNEY5QUUwMi9UWlJQTUxqRzVwR1lqVEF2dW13dm5GZE1C TEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1RaUlBNTGpHNXBHWWpUQXZ1bXd2bkZkTUJMQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 RjM0OS9DNkY1MDAxQUVEQjExMUVDQUY0MzVDNURDNEY5QUUwMi9UWlJQTUxqRzVw R1lqVEF2dW13dm5GZE1CTEEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDUNj4TwXFQU8J2+12h8NUq4eptjX6lsvpC8ah/BWuLfdlQfx64/tu6 wXqfoN9MRg291uLzzm3sbR+RBIqDGBI9pF8Ymag0vvSFEt+hjcXX5YnPSXKrDdwC OneI1LpIrsyy/KAgtcbZYAoVeHavZYysPE+9QciDEo1BmtvbOeNsUz0mpc3aVZ3D hUtK2NUaPUvaoUP8uyyQu6LeLLvRMS4cNHBbONlrojtiw2+hWUDKX03RR6EeV+QX n42JtGqmO1s79/dx736Y2Yp6/KWrUS/vr3ozkC9ZBNdRwFykTGmqbKYp6mrqiW4f MvW3EmiOzMRcTN33ZxZ+I77aTwtvR/IP -----END CERTIFICATE-----Generated at Wed Nov 5 04:49:48 2025 by rpki-client