$ rpki-client -vvf rpki.apnic.net/member_repository/A919DD2B/0B26BACC58BA11ECA1D91A51C4F9AE02/TZ0PaMLT_yhGBYGQy_bIySHN2mI.mft File: TZ0PaMLT_yhGBYGQy_bIySHN2mI.mft (raw, json) Hash identifier: MhUpe1WmPelefVY9ySJE9rEav/CFDaZHw+fWRLhsYWs= Subject key identifier: 8F:4F:46:6B:C1:4A:FE:F4:A2:1E:16:21:03:1E:FA:6B:92:1C:48:14 Authority key identifier: 4D:9D:0F:68:C2:D3:FF:28:46:05:81:90:CB:F6:C8:C9:21:CD:DA:62 Certificate issuer: /CN=A919DD2B/serialNumber=4D9D0F68C2D3FF2846058190CBF6C8C921CDDA62 Certificate serial: 0449 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TZ0PaMLT_yhGBYGQy_bIySHN2mI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919DD2B/0B26BACC58BA11ECA1D91A51C4F9AE02/TZ0PaMLT_yhGBYGQy_bIySHN2mI.mft Manifest number: 0445 Signing time: Sat 31 May 2025 00:27:45 +0000 Manifest this update: Sat 31 May 2025 00:27:44 +0000 Manifest next update: Sat 07 Jun 2025 00:27:44 +0000 Files and hashes: 1: TZ0PaMLT_yhGBYGQy_bIySHN2mI.crl (hash: nJy87cCQ698j43SWdikI8Rb9hKM5FpVKgIExjJm55lQ=) 2: E1484B3658BD11ECB49A9856C4F9AE02.roa (hash: /HXDuqjyr3f0zY/02q1871VGREErBAo71F5/20UhS78=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919DD2B/0B26BACC58BA11ECA1D91A51C4F9AE02/TZ0PaMLT_yhGBYGQy_bIySHN2mI.crl rsync://rpki.apnic.net/member_repository/A919DD2B/0B26BACC58BA11ECA1D91A51C4F9AE02/TZ0PaMLT_yhGBYGQy_bIySHN2mI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TZ0PaMLT_yhGBYGQy_bIySHN2mI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 00:27:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1097 (0x449) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919DD2B, serialNumber=4D9D0F68C2D3FF2846058190CBF6C8C921CDDA62 Validity Not Before: May 31 00:27:44 2025 GMT Not After : Jun 7 00:27:44 2025 GMT Subject: CN=683a4d00-b559 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:f1:ae:e7:f4:5a:a6:f9:ba:d3:8c:ec:d6:53: fc:4a:39:09:75:84:f3:3b:ac:e3:6e:26:ec:d2:a1: d1:65:b0:79:cb:aa:65:f8:95:0c:56:c3:f4:59:f3: 63:cf:0f:93:31:20:54:33:c5:c2:70:2a:26:db:96: 0a:85:df:e6:26:fa:c8:60:06:85:0f:c1:92:04:a4: 34:df:46:64:11:68:d1:fd:cf:b9:bb:4f:7a:3c:a0: 58:46:14:f5:2c:fa:b2:04:9d:a1:cb:9f:3e:d4:b4: ea:7f:89:22:30:09:7c:90:38:06:9d:f5:ba:5e:f7: e3:a9:f3:82:02:f1:ac:88:ed:47:75:30:79:fd:9d: a9:41:53:01:ad:39:fa:38:e0:5b:b3:a0:b2:ba:98: 7f:b1:eb:8a:65:5e:a5:4c:f4:3d:b3:b5:b3:95:c0: 6e:2f:66:8c:61:a5:aa:8f:af:6c:77:7e:39:43:7a: 7a:52:62:31:30:89:6c:f5:a6:42:05:68:34:60:88: 7b:38:8d:1b:6c:8b:29:c6:62:b3:f4:4d:a8:c6:35: 8a:4a:5d:50:a1:46:40:70:5f:fc:cd:a3:5d:dd:a0: d1:89:6a:45:62:df:d2:55:64:8e:0d:fa:ed:3a:63: a1:05:55:88:c4:b2:ee:7b:80:1c:7c:5e:99:d6:08: 0c:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:4F:46:6B:C1:4A:FE:F4:A2:1E:16:21:03:1E:FA:6B:92:1C:48:14 X509v3 Authority Key Identifier: keyid:4D:9D:0F:68:C2:D3:FF:28:46:05:81:90:CB:F6:C8:C9:21:CD:DA:62 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919DD2B/0B26BACC58BA11ECA1D91A51C4F9AE02/TZ0PaMLT_yhGBYGQy_bIySHN2mI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TZ0PaMLT_yhGBYGQy_bIySHN2mI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919DD2B/0B26BACC58BA11ECA1D91A51C4F9AE02/TZ0PaMLT_yhGBYGQy_bIySHN2mI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 39:44:bd:b5:93:e9:60:13:e7:db:b5:7c:80:66:7c:0b:9c:61: 1d:3b:bf:09:14:53:46:e6:58:41:43:f8:ee:4a:f1:30:ee:b2: 04:f5:14:70:25:15:d5:09:20:ff:81:d9:29:8a:5e:7a:cf:9e: f1:27:90:0b:48:7d:e8:43:b7:1e:6f:f4:dd:55:e2:ca:d6:4c: 8e:10:33:97:23:79:a5:f0:3d:72:43:d6:6b:02:e7:4d:0b:8b: f9:95:0f:67:81:c0:b1:42:e9:16:a6:56:29:86:a8:88:ba:b0: cc:ff:94:0c:df:d4:1b:78:06:df:c5:63:01:d6:46:f6:53:14: 26:0f:9d:e7:b1:b3:e8:d7:91:68:3b:6c:95:74:31:95:8a:68: 41:47:0d:c9:57:30:e8:bf:50:f7:f2:2c:e2:05:a1:64:9a:df: 26:f1:1a:e2:29:6c:45:92:6c:a5:89:38:48:c4:d1:d6:d4:eb: 9f:49:ff:6f:4c:b5:aa:f7:55:e5:fa:d5:86:67:3d:a4:88:29: 4e:80:48:d8:fc:85:35:0e:db:33:b3:ca:c2:ef:01:3c:f8:a8: cf:01:3e:bd:74:07:06:4b:aa:b4:2c:6a:63:9b:56:8b:bf:90: 06:61:ff:48:26:84:11:14:45:db:0a:ad:12:8b:1c:c5:2c:be: 2e:00:40:d0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBEkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUREMkIxMTAvBgNVBAUTKDREOUQwRjY4QzJEM0ZGMjg0NjA1ODE5MENCRjZDOEM5 MjFDRERBNjIwHhcNMjUwNTMxMDAyNzQ0WhcNMjUwNjA3MDAyNzQ0WjAYMRYwFAYD VQQDEw02ODNhNGQwMC1iNTU5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1/Gu5/Rapvm604zs1lP8SjkJdYTzO6zjbibs0qHRZbB5y6pl+JUMVsP0WfNj zw+TMSBUM8XCcCom25YKhd/mJvrIYAaFD8GSBKQ030ZkEWjR/c+5u096PKBYRhT1 LPqyBJ2hy58+1LTqf4kiMAl8kDgGnfW6XvfjqfOCAvGsiO1HdTB5/Z2pQVMBrTn6 OOBbs6Cyuph/seuKZV6lTPQ9s7WzlcBuL2aMYaWqj69sd345Q3p6UmIxMIls9aZC BWg0YIh7OI0bbIspxmKz9E2oxjWKSl1QoUZAcF/8zaNd3aDRiWpFYt/SVWSODfrt OmOhBVWIxLLue4AcfF6Z1ggMgQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFI9PRmvB Sv70oh4WIQMe+muSHEgUMB8GA1UdIwQYMBaAFE2dD2jC0/8oRgWBkMv2yMkhzdpi MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5REQyQi8wQjI2QkFDQzU4 QkExMUVDQTFEOTFBNTFDNEY5QUUwMi9UWjBQYU1MVF95aEdCWUdReV9iSXlTSE4y bUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1RaMFBhTUxUX3loR0JZR1F5X2JJeVNITjJtSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 REQyQi8wQjI2QkFDQzU4QkExMUVDQTFEOTFBNTFDNEY5QUUwMi9UWjBQYU1MVF95 aEdCWUdReV9iSXlTSE4ybUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA5RL21k+lgE+fbtXyAZnwLnGEdO78JFFNG5lhBQ/juSvEw7rIE9RRw JRXVCSD/gdkpil56z57xJ5ALSH3oQ7ceb/TdVeLK1kyOEDOXI3ml8D1yQ9ZrAudN C4v5lQ9ngcCxQukWplYphqiIurDM/5QM39QbeAbfxWMB1kb2UxQmD53nsbPo15Fo O2yVdDGVimhBRw3JVzDov1D38iziBaFkmt8m8RriKWxFkmyliThIxNHW1OufSf9v TLWq91Xl+tWGZz2kiClOgEjY/IU1Dtszs8rC7wE8+KjPAT69dAcGS6q0LGpjm1aL v5AGYf9IJoQRFEXbCq0SixzFLL4uAEDQ -----END CERTIFICATE-----Generated at Sat May 31 17:32:50 2025 by rpki-client