$ rpki-client -vvf rpki.apnic.net/member_repository/A91E4042/EFC98DE6E53611EB9926556BC4F9AE02/TzMtwIyXR6ybyBxUfRujRWQ_drc.mft File: TzMtwIyXR6ybyBxUfRujRWQ_drc.mft (raw, json) Hash identifier: 8FnBWqHXrmm/WSkCGoHjHT5uKXfOkZDhie2qTWcai/o= Subject key identifier: 90:01:E6:13:A4:89:3C:1B:59:5E:A8:F2:6B:F0:77:12:30:F1:42:47 Authority key identifier: 4F:33:2D:C0:8C:97:47:AC:9B:C8:1C:54:7D:1B:A3:45:64:3F:76:B7 Certificate issuer: /CN=A91E4042/serialNumber=4F332DC08C9747AC9BC81C547D1BA345643F76B7 Certificate serial: 05A0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TzMtwIyXR6ybyBxUfRujRWQ_drc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E4042/EFC98DE6E53611EB9926556BC4F9AE02/TzMtwIyXR6ybyBxUfRujRWQ_drc.mft Manifest number: 059A Signing time: Mon 08 Sep 2025 23:16:03 +0000 Manifest this update: Mon 08 Sep 2025 23:16:02 +0000 Manifest next update: Mon 15 Sep 2025 23:16:02 +0000 Files and hashes: 1: TzMtwIyXR6ybyBxUfRujRWQ_drc.crl (hash: TVorVxcxQlahdb0nkFS5SS7BqTlscaH7zVtOpufQP0Y=) 2: 26F1B59437A511ECB73C9852C4F9AE02.roa (hash: RnCdsnsA5t3rSQhlqndquIzW2+Ap7Mst87/6oAJexVI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E4042/EFC98DE6E53611EB9926556BC4F9AE02/TzMtwIyXR6ybyBxUfRujRWQ_drc.crl rsync://rpki.apnic.net/member_repository/A91E4042/EFC98DE6E53611EB9926556BC4F9AE02/TzMtwIyXR6ybyBxUfRujRWQ_drc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TzMtwIyXR6ybyBxUfRujRWQ_drc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 15 Sep 2025 23:16:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1440 (0x5a0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E4042, serialNumber=4F332DC08C9747AC9BC81C547D1BA345643F76B7 Validity Not Before: Sep 8 23:16:02 2025 GMT Not After : Sep 15 23:16:02 2025 GMT Subject: CN=68bf63b2-9fed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:e7:a8:da:75:d8:0f:61:45:99:29:20:08:36: a9:fa:d2:c0:63:b0:a8:a4:72:e7:f2:60:82:bf:cc: 50:ef:5e:e8:a7:a6:2e:86:e7:6c:bc:3d:0a:51:b0: 6c:23:d8:58:44:04:eb:e1:18:16:7f:d4:c8:e4:47: 7d:1c:2a:50:a1:b7:07:35:05:f9:e6:63:19:39:1e: f1:c2:29:8d:c1:95:2c:fa:a7:5f:05:ce:5a:ad:50: 78:f8:82:bd:8a:98:67:29:06:7d:91:58:6a:e7:0d: 93:a1:96:37:02:83:cd:90:ad:7a:b2:95:3b:c2:8e: be:7a:f0:59:3e:6a:3c:73:e1:20:c1:80:c2:7f:98: ed:05:8b:0c:ae:a2:51:5d:60:c0:63:4d:b0:a4:84: 71:c1:c2:fd:d3:a3:26:45:ef:95:21:26:67:b1:ff: 09:39:bb:29:b8:32:f8:32:36:15:e1:e9:ad:75:01: 95:c1:1d:dd:41:08:40:58:35:73:82:5c:27:cb:ba: ae:0f:ae:06:de:75:92:43:00:4a:3e:79:1c:58:45: 9d:55:37:67:18:74:d0:f5:5a:06:38:fb:ca:43:d1: 49:d9:4e:0a:fd:19:e3:62:b3:9c:37:f4:6b:dc:ea: 21:35:f9:6b:9a:f3:45:9c:93:1c:52:97:cc:3e:b8: 5a:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:01:E6:13:A4:89:3C:1B:59:5E:A8:F2:6B:F0:77:12:30:F1:42:47 X509v3 Authority Key Identifier: keyid:4F:33:2D:C0:8C:97:47:AC:9B:C8:1C:54:7D:1B:A3:45:64:3F:76:B7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E4042/EFC98DE6E53611EB9926556BC4F9AE02/TzMtwIyXR6ybyBxUfRujRWQ_drc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TzMtwIyXR6ybyBxUfRujRWQ_drc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E4042/EFC98DE6E53611EB9926556BC4F9AE02/TzMtwIyXR6ybyBxUfRujRWQ_drc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 90:3a:10:40:2e:04:53:18:d1:68:d8:f4:aa:d6:be:1e:92:c4: 4e:7c:d6:23:89:41:b4:87:a5:96:22:52:3b:07:a1:7b:94:ea: e4:4a:bb:55:cf:80:ad:e5:d8:0a:90:84:f6:74:bb:7b:e2:31: 2a:f0:54:21:e5:b8:ec:2a:20:b9:f5:dd:58:8a:f4:9d:9c:98: 16:2c:71:5b:81:8e:1b:72:56:cb:32:98:22:5c:a7:57:4b:6d: 21:ed:31:0f:e8:9c:45:66:14:9a:b0:d2:63:da:08:7e:f4:13: 4c:a3:57:88:30:85:82:fa:e7:2f:63:05:39:45:67:53:c0:51: 82:d8:73:8d:a5:f0:5d:dc:77:40:4a:62:40:4e:a2:21:e2:c0: a1:92:13:e2:62:68:70:33:4e:be:01:70:60:9d:18:0b:f7:b4: 52:1e:e4:49:15:77:8e:4b:c6:c5:c7:f3:bd:da:f7:f5:f7:19: c7:26:69:6e:6f:8d:d3:c4:50:90:de:9a:3c:a3:84:66:a4:02: c0:78:79:af:99:5e:05:30:71:07:5c:65:2e:64:f0:ac:cd:da: 35:ef:d5:91:a2:5d:48:25:04:39:f8:46:f2:6a:29:03:dc:a1: f1:46:f8:83:d7:99:54:75:9e:7a:58:34:f0:b9:6f:54:5c:36: 5e:95:c8:c8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBaAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTQwNDIxMTAvBgNVBAUTKDRGMzMyREMwOEM5NzQ3QUM5QkM4MUM1NDdEMUJBMzQ1 NjQzRjc2QjcwHhcNMjUwOTA4MjMxNjAyWhcNMjUwOTE1MjMxNjAyWjAYMRYwFAYD VQQDEw02OGJmNjNiMi05ZmVkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAreeo2nXYD2FFmSkgCDap+tLAY7CopHLn8mCCv8xQ717op6YuhudsvD0KUbBs I9hYRATr4RgWf9TI5Ed9HCpQobcHNQX55mMZOR7xwimNwZUs+qdfBc5arVB4+IK9 iphnKQZ9kVhq5w2ToZY3AoPNkK16spU7wo6+evBZPmo8c+EgwYDCf5jtBYsMrqJR XWDAY02wpIRxwcL906MmRe+VISZnsf8JObspuDL4MjYV4emtdQGVwR3dQQhAWDVz glwny7quD64G3nWSQwBKPnkcWEWdVTdnGHTQ9VoGOPvKQ9FJ2U4K/RnjYrOcN/Rr 3OohNflrmvNFnJMcUpfMPrhawwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJAB5hOk iTwbWV6o8mvwdxIw8UJHMB8GA1UdIwQYMBaAFE8zLcCMl0esm8gcVH0bo0VkP3a3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNDA0Mi9FRkM5OERFNkU1 MzYxMUVCOTkyNjU1NkJDNEY5QUUwMi9Uek10d0l5WFI2eWJ5QnhVZlJ1alJXUV9k cmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1R6TXR3SXlYUjZ5YnlCeFVmUnVqUldRX2RyYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NDA0Mi9FRkM5OERFNkU1MzYxMUVCOTkyNjU1NkJDNEY5QUUwMi9Uek10d0l5WFI2 eWJ5QnhVZlJ1alJXUV9kcmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCQOhBALgRTGNFo2PSq1r4eksROfNYjiUG0h6WWIlI7B6F7lOrkSrtV z4Ct5dgKkIT2dLt74jEq8FQh5bjsKiC59d1YivSdnJgWLHFbgY4bclbLMpgiXKdX S20h7TEP6JxFZhSasNJj2gh+9BNMo1eIMIWC+ucvYwU5RWdTwFGC2HONpfBd3HdA SmJATqIh4sChkhPiYmhwM06+AXBgnRgL97RSHuRJFXeOS8bFx/O92vf19xnHJmlu b43TxFCQ3po8o4RmpALAeHmvmV4FMHEHXGUuZPCszdo179WRol1IJQQ5+EbyaikD 3KHxRviD15lUdZ56WDTwuW9UXDZelcjI -----END CERTIFICATE-----Generated at Wed Sep 10 04:17:36 2025 by rpki-client