$ rpki-client -vvf rpki.apnic.net/member_repository/A91522E0/C9B90FF8468811EAACF18A28C4F9AE02/TzLs_4zUbD7AP6deEAj0qpoM-JM.mft File: TzLs_4zUbD7AP6deEAj0qpoM-JM.mft (raw, json) Hash identifier: 771Obiu3j0CzPVNdfxnaRrQZ3OgNRMximRfhupxFUN4= Subject key identifier: E5:5E:52:46:F0:A2:6E:B3:A5:F7:6F:69:C6:EA:45:BF:F0:95:93:DE Authority key identifier: 4F:32:EC:FF:8C:D4:6C:3E:C0:3F:A7:5E:10:08:F4:AA:9A:0C:F8:93 Certificate issuer: /CN=A91522E0/serialNumber=4F32ECFF8CD46C3EC03FA75E1008F4AA9A0CF893 Certificate serial: 0B14 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TzLs_4zUbD7AP6deEAj0qpoM-JM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91522E0/C9B90FF8468811EAACF18A28C4F9AE02/TzLs_4zUbD7AP6deEAj0qpoM-JM.mft Manifest number: 0B00 Signing time: Fri 30 May 2025 19:34:16 +0000 Manifest this update: Fri 30 May 2025 19:34:15 +0000 Manifest next update: Fri 06 Jun 2025 19:34:15 +0000 Files and hashes: 1: TzLs_4zUbD7AP6deEAj0qpoM-JM.crl (hash: 6RNjiZzccdo382D9S3dzEt7dcK6GZI5mryyDzb5YRrw=) 2: B34C91C4B14311EF8479AA21C4F9AE02.roa (hash: zX8SsdngBGocfr0PjyPYjkXeGxhOELPXVhgI6hsEekQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91522E0/C9B90FF8468811EAACF18A28C4F9AE02/TzLs_4zUbD7AP6deEAj0qpoM-JM.crl rsync://rpki.apnic.net/member_repository/A91522E0/C9B90FF8468811EAACF18A28C4F9AE02/TzLs_4zUbD7AP6deEAj0qpoM-JM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TzLs_4zUbD7AP6deEAj0qpoM-JM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 19:34:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2836 (0xb14) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91522E0, serialNumber=4F32ECFF8CD46C3EC03FA75E1008F4AA9A0CF893 Validity Not Before: May 30 19:34:15 2025 GMT Not After : Jun 6 19:34:15 2025 GMT Subject: CN=683a0837-1633 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:37:22:4e:be:66:9f:69:2f:bc:5f:c9:3c:f3: d1:66:e4:df:4d:04:b8:96:ea:86:5a:b4:1f:a7:2c: 93:aa:3b:77:21:18:14:d2:2d:db:89:4a:3a:35:55: c8:2c:e4:c5:a4:26:d6:fe:c4:e7:0f:81:88:40:51: 58:57:12:b7:ac:b9:24:b2:0c:4c:40:df:60:57:04: ff:14:1a:4e:80:54:44:94:86:b2:b2:76:b4:b8:2f: 5a:a1:f5:b7:a4:19:7d:94:c5:bc:e5:d6:13:e4:e5: c8:cc:95:e1:fe:f5:9a:19:25:82:6e:08:23:eb:6d: 0a:ac:6a:21:14:f6:02:e8:bb:4a:5c:0e:47:25:74: 82:e5:23:44:57:1f:7d:b7:1e:b9:d0:26:1b:d7:2b: d4:34:d8:86:37:5b:ba:5a:e9:b6:16:1d:5c:0b:1d: f1:16:c7:3c:82:a1:e3:72:af:30:a9:aa:47:5c:16: 9a:4c:9c:b3:bb:0b:21:a0:72:26:d5:12:65:b4:29: 38:ad:64:9a:6f:60:42:cc:b5:f8:2a:82:7c:22:1e: 35:9c:4c:20:39:16:85:be:00:4b:a5:c8:6f:e4:07: 44:c5:aa:6b:b9:c4:20:00:76:36:be:39:46:26:7f: fa:b0:2c:c7:d9:0b:7e:fe:5e:80:dc:7f:65:81:1f: 47:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:5E:52:46:F0:A2:6E:B3:A5:F7:6F:69:C6:EA:45:BF:F0:95:93:DE X509v3 Authority Key Identifier: keyid:4F:32:EC:FF:8C:D4:6C:3E:C0:3F:A7:5E:10:08:F4:AA:9A:0C:F8:93 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91522E0/C9B90FF8468811EAACF18A28C4F9AE02/TzLs_4zUbD7AP6deEAj0qpoM-JM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TzLs_4zUbD7AP6deEAj0qpoM-JM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91522E0/C9B90FF8468811EAACF18A28C4F9AE02/TzLs_4zUbD7AP6deEAj0qpoM-JM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4b:fc:9e:dd:86:ba:93:24:fd:72:3b:e6:74:18:56:ee:05:29: 07:b6:c7:0a:10:68:37:e2:44:22:df:c8:89:e8:b0:0f:c1:7b: 03:25:d0:5e:fe:af:e1:d0:c4:4d:51:b8:b7:72:9a:e7:1e:f2: 60:49:f9:e4:6e:27:ed:22:7c:f9:b1:b8:11:25:44:7e:d9:b7: 34:40:4c:b1:bb:5f:e6:79:b6:9a:68:de:e2:64:91:c4:ad:4d: 40:a3:ee:1e:23:47:33:9e:32:d3:4f:e7:80:09:ff:48:6b:4e: 84:76:f1:4c:4e:5d:d2:0f:ae:80:e2:3f:cc:41:71:9a:52:46: 1b:2a:66:e2:41:d6:ab:6f:d4:62:6f:61:38:23:95:85:39:9b: 0d:60:6b:d2:d9:c2:21:24:35:45:0e:26:05:2f:8a:1a:ab:77: 85:7e:42:0f:08:90:ee:c3:d6:3d:c4:84:3c:ec:b3:47:cc:1d: 15:68:91:e0:74:32:2a:b7:6f:89:16:0e:fe:47:75:8c:d7:dc: 09:e4:dd:74:ef:06:0b:f7:24:77:cd:05:07:c1:0a:e7:28:be: af:31:78:b3:03:15:14:fe:2f:b8:ef:a8:98:f1:5d:7f:1a:23: da:f0:33:76:89:39:1e:07:ed:7a:ab:67:4b:cf:0e:e3:d3:f5: ca:6b:99:9b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCxQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTIyRTAxMTAvBgNVBAUTKDRGMzJFQ0ZGOENENDZDM0VDMDNGQTc1RTEwMDhGNEFB OUEwQ0Y4OTMwHhcNMjUwNTMwMTkzNDE1WhcNMjUwNjA2MTkzNDE1WjAYMRYwFAYD VQQDEw02ODNhMDgzNy0xNjMzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxTciTr5mn2kvvF/JPPPRZuTfTQS4luqGWrQfpyyTqjt3IRgU0i3biUo6NVXI LOTFpCbW/sTnD4GIQFFYVxK3rLkksgxMQN9gVwT/FBpOgFRElIaysna0uC9aofW3 pBl9lMW85dYT5OXIzJXh/vWaGSWCbggj620KrGohFPYC6LtKXA5HJXSC5SNEVx99 tx650CYb1yvUNNiGN1u6Wum2Fh1cCx3xFsc8gqHjcq8wqapHXBaaTJyzuwshoHIm 1RJltCk4rWSab2BCzLX4KoJ8Ih41nEwgORaFvgBLpchv5AdExaprucQgAHY2vjlG Jn/6sCzH2Qt+/l6A3H9lgR9HuQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOVeUkbw om6zpfdvacbqRb/wlZPeMB8GA1UdIwQYMBaAFE8y7P+M1Gw+wD+nXhAI9KqaDPiT MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MjJFMC9DOUI5MEZGODQ2 ODgxMUVBQUNGMThBMjhDNEY5QUUwMi9UekxzXzR6VWJEN0FQNmRlRUFqMHFwb00t Sk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1R6THNfNHpVYkQ3QVA2ZGVFQWowcXBvTS1KTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MjJFMC9DOUI5MEZGODQ2ODgxMUVBQUNGMThBMjhDNEY5QUUwMi9UekxzXzR6VWJE N0FQNmRlRUFqMHFwb00tSk0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBL/J7dhrqTJP1yO+Z0GFbuBSkHtscKEGg34kQi38iJ6LAPwXsDJdBe /q/h0MRNUbi3cprnHvJgSfnkbiftInz5sbgRJUR+2bc0QEyxu1/mebaaaN7iZJHE rU1Ao+4eI0cznjLTT+eACf9Ia06EdvFMTl3SD66A4j/MQXGaUkYbKmbiQdarb9Ri b2E4I5WFOZsNYGvS2cIhJDVFDiYFL4oaq3eFfkIPCJDuw9Y9xIQ87LNHzB0VaJHg dDIqt2+JFg7+R3WM19wJ5N107wYL9yR3zQUHwQrnKL6vMXizAxUU/i+476iY8V1/ GiPa8DN2iTkeB+16q2dLzw7j0/XKa5mb -----END CERTIFICATE-----Generated at Sat May 31 16:35:49 2025 by rpki-client