$ rpki-client -vvf rpki.apnic.net/member_repository/A914F349/C6F5001AEDB111ECAF435C5DC4F9AE02/TZRPMLjG5pGYjTAvumwvnFdMBLA.mft File: TZRPMLjG5pGYjTAvumwvnFdMBLA.mft (raw, json) Hash identifier: p9FOy1WkCaxB/00dxm51sT1hTxp+HLvTU/nv4YT9g2k= Subject key identifier: B9:60:8B:98:9C:1C:36:39:6F:09:E1:02:CD:F3:A7:9B:76:BE:8A:40 Authority key identifier: 4D:94:4F:30:B8:C6:E6:91:98:8D:30:2F:BA:6C:2F:9C:57:4C:04:B0 Certificate issuer: /CN=A914F349/serialNumber=4D944F30B8C6E691988D302FBA6C2F9C574C04B0 Certificate serial: 0305 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TZRPMLjG5pGYjTAvumwvnFdMBLA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914F349/C6F5001AEDB111ECAF435C5DC4F9AE02/TZRPMLjG5pGYjTAvumwvnFdMBLA.mft Manifest number: 0300 Signing time: Tue 09 Sep 2025 01:19:34 +0000 Manifest this update: Tue 09 Sep 2025 01:19:34 +0000 Manifest next update: Tue 16 Sep 2025 01:19:34 +0000 Files and hashes: 1: TZRPMLjG5pGYjTAvumwvnFdMBLA.crl (hash: PGRAVXqjRO9fu3rlXeSooYeYim0EuFS1bLTEUmRZ5gA=) 2: E5A22A7CEDB811ECB7BDFF0AC4F9AE02.roa (hash: pBwxys1yivtkEToGBFIFFmXXN52OvE5FFgRhewDkeko=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914F349/C6F5001AEDB111ECAF435C5DC4F9AE02/TZRPMLjG5pGYjTAvumwvnFdMBLA.crl rsync://rpki.apnic.net/member_repository/A914F349/C6F5001AEDB111ECAF435C5DC4F9AE02/TZRPMLjG5pGYjTAvumwvnFdMBLA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TZRPMLjG5pGYjTAvumwvnFdMBLA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 16 Sep 2025 01:19:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 773 (0x305) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914F349, serialNumber=4D944F30B8C6E691988D302FBA6C2F9C574C04B0 Validity Not Before: Sep 9 01:19:34 2025 GMT Not After : Sep 16 01:19:34 2025 GMT Subject: CN=68bf80a6-fa93 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:73:0c:f1:ab:b7:f9:9a:54:6b:86:e1:11:cd: fd:02:d3:75:c8:62:2c:d0:8b:66:57:5c:98:12:80: 48:34:50:90:19:87:ed:4c:6d:68:cb:62:ef:80:a9: a1:f2:21:6b:b7:68:43:ca:15:38:45:ce:f7:87:88: e8:b8:7a:20:c4:c0:cc:0a:08:47:39:3b:a8:f4:57: b2:c1:c7:3e:ae:ef:8c:be:6e:08:8c:7d:bf:8d:15: b5:34:88:66:75:c7:62:dd:8e:fb:fa:48:a4:88:08: b9:f2:bb:23:e6:2e:20:72:82:49:1c:b2:1b:26:f9: ce:c7:1e:91:47:dc:b5:0d:2a:96:70:dd:7e:f1:f6: 93:9a:e7:fc:81:d1:fb:51:ea:0c:8b:24:94:c4:99: 55:16:9c:06:48:5d:e7:44:f7:19:f6:f7:75:a3:28: 7c:97:bb:3a:a3:44:23:bd:0a:fd:2b:b2:4f:bc:eb: 85:c8:a1:4a:c8:a7:78:8d:d6:db:38:88:40:36:5e: da:ab:b3:5d:76:2a:5d:36:9d:5e:07:e3:bb:45:89: 32:ac:0a:55:ca:34:67:08:ea:3c:e2:8a:3a:4f:b9: ec:e2:2d:eb:95:31:0d:a3:02:3f:76:15:f7:ce:4a: a8:ad:51:5b:84:f2:44:48:f3:e3:47:40:bc:4b:ea: c6:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:60:8B:98:9C:1C:36:39:6F:09:E1:02:CD:F3:A7:9B:76:BE:8A:40 X509v3 Authority Key Identifier: keyid:4D:94:4F:30:B8:C6:E6:91:98:8D:30:2F:BA:6C:2F:9C:57:4C:04:B0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914F349/C6F5001AEDB111ECAF435C5DC4F9AE02/TZRPMLjG5pGYjTAvumwvnFdMBLA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TZRPMLjG5pGYjTAvumwvnFdMBLA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914F349/C6F5001AEDB111ECAF435C5DC4F9AE02/TZRPMLjG5pGYjTAvumwvnFdMBLA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4c:db:f9:0c:9a:40:8e:f9:67:c8:11:7b:bc:f7:27:d7:d9:17: b6:97:79:df:99:3d:09:c2:82:e3:c8:5f:32:19:3e:8a:4e:a7: 5d:ef:e1:59:1b:b8:06:e6:ba:0e:d1:ad:08:07:aa:97:a8:8a: 34:ee:dd:61:4e:4d:84:a6:6b:ae:e2:ee:ce:80:1a:39:08:51: de:dc:e1:2f:c7:f0:18:0f:15:c9:5b:dd:f3:22:2a:1f:d7:02: 26:75:ab:be:62:52:61:79:99:02:53:95:b7:a5:b9:da:96:7a: 09:9d:df:09:3b:7f:28:ee:7c:cb:6d:d6:fd:c1:b3:ff:ff:16: 33:1d:89:19:3e:8b:57:da:60:28:87:dd:bd:c6:7b:62:e9:2a: 71:72:82:b6:7f:1a:53:3b:21:be:5a:ce:52:de:a5:3d:39:c2: 88:91:bc:d4:52:b9:49:0b:3f:41:bd:8d:c5:ac:98:b2:af:9f: 62:25:a5:36:ed:84:af:3b:a8:79:c4:ab:0a:1f:0c:30:f9:d0: 46:00:da:d8:b4:f8:82:a4:58:22:a1:4b:06:cc:75:b4:46:5e: 95:20:5a:46:98:13:43:c6:6f:01:ff:ab:81:7d:5a:cd:54:39: 7a:1e:9b:6a:ef:fc:dc:ce:97:0c:4f:2c:7b:6e:c8:f2:f4:e5: 94:7b:0b:54 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAwUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEYzNDkxMTAvBgNVBAUTKDREOTQ0RjMwQjhDNkU2OTE5ODhEMzAyRkJBNkMyRjlD NTc0QzA0QjAwHhcNMjUwOTA5MDExOTM0WhcNMjUwOTE2MDExOTM0WjAYMRYwFAYD VQQDEw02OGJmODBhNi1mYTkzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0XMM8au3+ZpUa4bhEc39AtN1yGIs0ItmV1yYEoBINFCQGYftTG1oy2LvgKmh 8iFrt2hDyhU4Rc73h4jouHogxMDMCghHOTuo9Feywcc+ru+Mvm4IjH2/jRW1NIhm dcdi3Y77+kikiAi58rsj5i4gcoJJHLIbJvnOxx6RR9y1DSqWcN1+8faTmuf8gdH7 UeoMiySUxJlVFpwGSF3nRPcZ9vd1oyh8l7s6o0QjvQr9K7JPvOuFyKFKyKd4jdbb OIhANl7aq7NddipdNp1eB+O7RYkyrApVyjRnCOo84oo6T7ns4i3rlTENowI/dhX3 zkqorVFbhPJESPPjR0C8S+rGwwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLlgi5ic HDY5bwnhAs3zp5t2vopAMB8GA1UdIwQYMBaAFE2UTzC4xuaRmI0wL7psL5xXTASw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RjM0OS9DNkY1MDAxQUVE QjExMUVDQUY0MzVDNURDNEY5QUUwMi9UWlJQTUxqRzVwR1lqVEF2dW13dm5GZE1C TEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1RaUlBNTGpHNXBHWWpUQXZ1bXd2bkZkTUJMQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 RjM0OS9DNkY1MDAxQUVEQjExMUVDQUY0MzVDNURDNEY5QUUwMi9UWlJQTUxqRzVw R1lqVEF2dW13dm5GZE1CTEEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBM2/kMmkCO+WfIEXu89yfX2Re2l3nfmT0JwoLjyF8yGT6KTqdd7+FZ G7gG5roO0a0IB6qXqIo07t1hTk2Epmuu4u7OgBo5CFHe3OEvx/AYDxXJW93zIiof 1wImdau+YlJheZkCU5W3pbnalnoJnd8JO38o7nzLbdb9wbP//xYzHYkZPotX2mAo h929xnti6SpxcoK2fxpTOyG+Ws5S3qU9OcKIkbzUUrlJCz9BvY3FrJiyr59iJaU2 7YSvO6h5xKsKHwww+dBGANrYtPiCpFgioUsGzHW0Rl6VIFpGmBNDxm8B/6uBfVrN VDl6Hptq7/zczpcMTyx7bsjy9OWUewtU -----END CERTIFICATE-----Generated at Wed Sep 10 00:03:46 2025 by rpki-client