$ rpki-client -vvf rpki.apnic.net/member_repository/A914FE53/80B228F8FBDD11EE8984ED30C4F9AE02/TzGZCs_Vnb42pwwFIEtDuSlvU2w.mft File: TzGZCs_Vnb42pwwFIEtDuSlvU2w.mft (raw, json) Hash identifier: gvSc9hOtVZSzklHHNXBOI6j1PIaIclOd50a8sv72uog= Subject key identifier: 26:34:59:BD:82:0C:CD:D4:3A:47:6A:53:B6:1E:B1:EB:EF:3F:C3:06 Authority key identifier: 4F:31:99:0A:CF:D5:9D:BE:36:A7:0C:05:20:4B:43:B9:29:6F:53:6C Certificate issuer: /CN=A914FE53/serialNumber=4F31990ACFD59DBE36A70C05204B43B9296F536C Certificate serial: 012D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TzGZCs_Vnb42pwwFIEtDuSlvU2w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914FE53/80B228F8FBDD11EE8984ED30C4F9AE02/TzGZCs_Vnb42pwwFIEtDuSlvU2w.mft Manifest number: 0125 Signing time: Wed 05 Nov 2025 04:51:13 +0000 Manifest this update: Wed 05 Nov 2025 04:51:12 +0000 Manifest next update: Wed 12 Nov 2025 04:51:12 +0000 Files and hashes: 1: TzGZCs_Vnb42pwwFIEtDuSlvU2w.crl (hash: YuQQepXFWT5IC/GDwuPClC4p2R5fcFJQObJLnkXV3Q8=) 2: E3F7E3DAFBDD11EE8914AD31C4F9AE02.roa (hash: t0cGE6o5V+DAycoKt/vTcF88FGiP+44zy2pi+O6YqPs=) 3: E387F700FBDD11EE8914AD31C4F9AE02.roa (hash: yuDU8bSCR8SwqqE/kRZ57Q5iqWd4txmsrIhj/fs0Dv0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914FE53/80B228F8FBDD11EE8984ED30C4F9AE02/TzGZCs_Vnb42pwwFIEtDuSlvU2w.crl rsync://rpki.apnic.net/member_repository/A914FE53/80B228F8FBDD11EE8984ED30C4F9AE02/TzGZCs_Vnb42pwwFIEtDuSlvU2w.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TzGZCs_Vnb42pwwFIEtDuSlvU2w.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 04:51:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 301 (0x12d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914FE53, serialNumber=4F31990ACFD59DBE36A70C05204B43B9296F536C Validity Not Before: Nov 5 04:51:12 2025 GMT Not After : Nov 12 04:51:12 2025 GMT Subject: CN=690ad7c0-3249 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:bc:d7:0a:9e:ea:d5:7f:7d:36:95:28:be:79: b1:f5:1d:0c:59:15:ee:52:b9:5e:bc:c2:fe:d2:35: e5:a5:26:9b:5b:ca:9a:a4:d8:82:9e:3d:69:7b:4a: 1d:41:a3:ab:7d:eb:6f:37:d9:75:12:27:b2:32:9c: 52:01:ce:bb:57:66:0b:1e:11:25:92:d5:54:83:b8: 98:d9:10:b9:dc:38:a6:ee:68:57:ec:9a:4a:3d:e3: 9f:36:c1:3c:90:ee:f4:8c:a4:41:68:0e:ab:ac:4b: d7:f5:62:f0:80:df:00:72:eb:c6:bc:6e:53:a1:87: 76:f3:ff:e9:2d:9c:b4:96:ee:ad:49:57:2b:f5:a6: 39:b8:da:53:c1:a4:50:44:2d:06:ea:f6:05:b6:9b: de:67:08:b1:22:79:06:5f:6e:ee:75:09:3f:30:a8: dc:2a:03:c2:df:a4:e0:d1:63:b2:1b:0c:56:93:7b: 31:92:ea:39:41:3d:41:86:f1:71:e8:20:db:43:ce: d1:eb:eb:61:ea:a2:50:41:13:8f:f4:c2:42:6e:78: 68:ba:a3:fb:f2:8b:56:c4:ef:95:3f:f2:f9:3d:b5: 3b:46:f1:80:f4:ec:a7:ba:38:bd:fc:90:24:8c:d4: df:6a:eb:23:57:11:91:6f:73:e6:41:42:72:5a:37: b1:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:34:59:BD:82:0C:CD:D4:3A:47:6A:53:B6:1E:B1:EB:EF:3F:C3:06 X509v3 Authority Key Identifier: keyid:4F:31:99:0A:CF:D5:9D:BE:36:A7:0C:05:20:4B:43:B9:29:6F:53:6C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914FE53/80B228F8FBDD11EE8984ED30C4F9AE02/TzGZCs_Vnb42pwwFIEtDuSlvU2w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TzGZCs_Vnb42pwwFIEtDuSlvU2w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914FE53/80B228F8FBDD11EE8984ED30C4F9AE02/TzGZCs_Vnb42pwwFIEtDuSlvU2w.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7d:45:12:5d:a9:c4:9a:67:4c:0b:5f:7c:24:72:7e:ad:d7:0f: 50:30:f8:3f:d8:33:1d:a9:e9:25:f5:55:92:db:f6:1b:2f:46: 0b:0b:c3:cc:a3:7d:4f:80:37:73:b3:61:0f:df:f6:7d:84:72: e0:cc:6a:04:e3:7b:91:81:46:c8:84:05:d6:dc:85:a0:1d:fb: c3:54:62:59:c4:38:f2:fa:73:73:f0:34:14:eb:5b:cb:91:ba: ce:53:68:ff:98:fd:90:1f:1f:8a:63:13:58:dd:c0:b3:12:bb: 0f:f0:e5:97:57:13:ef:7c:99:d7:ec:d1:f8:a7:31:c6:2a:5e: d8:9e:ad:04:9e:fd:01:e2:2d:44:52:7c:16:52:50:ad:62:bc: 9f:a5:55:8f:85:47:35:83:ac:9d:88:bd:8c:3e:5d:3f:a5:65: ba:54:8e:3c:96:1c:08:a6:8f:75:72:9a:b5:b7:e1:ba:10:9b: be:8f:c7:fa:8c:c7:17:81:bc:63:dc:3c:2c:e4:5d:87:80:02: 54:01:fa:0e:22:b5:52:80:5c:d8:7b:42:9d:b7:95:b5:05:f8: b2:d6:07:5a:12:3b:34:bd:67:9d:c5:5e:33:73:94:53:b6:6d: 6e:37:98:ed:5d:61:9e:db:73:fb:88:c1:70:3b:ac:ea:75:58: 61:f7:ee:c3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAS0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEZFNTMxMTAvBgNVBAUTKDRGMzE5OTBBQ0ZENTlEQkUzNkE3MEMwNTIwNEI0M0I5 Mjk2RjUzNkMwHhcNMjUxMTA1MDQ1MTEyWhcNMjUxMTEyMDQ1MTEyWjAYMRYwFAYD VQQDEw02OTBhZDdjMC0zMjQ5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0LzXCp7q1X99NpUovnmx9R0MWRXuUrlevML+0jXlpSabW8qapNiCnj1pe0od QaOrfetvN9l1EieyMpxSAc67V2YLHhElktVUg7iY2RC53Dim7mhX7JpKPeOfNsE8 kO70jKRBaA6rrEvX9WLwgN8AcuvGvG5ToYd28//pLZy0lu6tSVcr9aY5uNpTwaRQ RC0G6vYFtpveZwixInkGX27udQk/MKjcKgPC36Tg0WOyGwxWk3sxkuo5QT1BhvFx 6CDbQ87R6+th6qJQQROP9MJCbnhouqP78otWxO+VP/L5PbU7RvGA9Oynuji9/JAk jNTfausjVxGRb3PmQUJyWjexVQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCY0Wb2C DM3UOkdqU7YesevvP8MGMB8GA1UdIwQYMBaAFE8xmQrP1Z2+NqcMBSBLQ7kpb1Ns MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RkU1My84MEIyMjhGOEZC REQxMUVFODk4NEVEMzBDNEY5QUUwMi9UekdaQ3NfVm5iNDJwd3dGSUV0RHVTbHZV MncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1R6R1pDc19WbmI0MnB3d0ZJRXREdVNsdlUydy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 RkU1My84MEIyMjhGOEZCREQxMUVFODk4NEVEMzBDNEY5QUUwMi9UekdaQ3NfVm5i NDJwd3dGSUV0RHVTbHZVMncubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB9RRJdqcSaZ0wLX3wkcn6t1w9QMPg/2DMdqekl9VWS2/YbL0YLC8PM o31PgDdzs2EP3/Z9hHLgzGoE43uRgUbIhAXW3IWgHfvDVGJZxDjy+nNz8DQU61vL kbrOU2j/mP2QHx+KYxNY3cCzErsP8OWXVxPvfJnX7NH4pzHGKl7Ynq0Env0B4i1E UnwWUlCtYryfpVWPhUc1g6ydiL2MPl0/pWW6VI48lhwIpo91cpq1t+G6EJu+j8f6 jMcXgbxj3Dws5F2HgAJUAfoOIrVSgFzYe0Kdt5W1Bfiy1gdaEjs0vWedxV4zc5RT tm1uN5jtXWGe23P7iMFwO6zqdVhh9+7D -----END CERTIFICATE-----Generated at Wed Nov 5 11:37:52 2025 by rpki-client