$ rpki-client -vvf rpki.apnic.net/member_repository/A91E4042/EFC98DE6E53611EB9926556BC4F9AE02/TzMtwIyXR6ybyBxUfRujRWQ_drc.mft File: TzMtwIyXR6ybyBxUfRujRWQ_drc.mft (raw, json) Hash identifier: a0ZSoaEGAbXy8eAChBA+zvXntgDT9bWxezHlCaG7Ch0= Subject key identifier: 8E:BC:32:77:2D:F2:CD:CC:59:69:45:96:37:25:E9:BF:7B:1A:83:7F Authority key identifier: 4F:33:2D:C0:8C:97:47:AC:9B:C8:1C:54:7D:1B:A3:45:64:3F:76:B7 Certificate issuer: /CN=A91E4042/serialNumber=4F332DC08C9747AC9BC81C547D1BA345643F76B7 Certificate serial: 0569 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TzMtwIyXR6ybyBxUfRujRWQ_drc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E4042/EFC98DE6E53611EB9926556BC4F9AE02/TzMtwIyXR6ybyBxUfRujRWQ_drc.mft Manifest number: 0564 Signing time: Fri 30 May 2025 23:34:13 +0000 Manifest this update: Fri 30 May 2025 23:34:13 +0000 Manifest next update: Fri 06 Jun 2025 23:34:13 +0000 Files and hashes: 1: TzMtwIyXR6ybyBxUfRujRWQ_drc.crl (hash: 8fEb66jjxYmF7fGeATh+CbJnqRctGDl9z91Z1HwnUvk=) 2: 26F1B59437A511ECB73C9852C4F9AE02.roa (hash: qsrO8yS/1EvYraDqXGU2ot/FTw/eeb+gKYOfP/J5WaU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E4042/EFC98DE6E53611EB9926556BC4F9AE02/TzMtwIyXR6ybyBxUfRujRWQ_drc.crl rsync://rpki.apnic.net/member_repository/A91E4042/EFC98DE6E53611EB9926556BC4F9AE02/TzMtwIyXR6ybyBxUfRujRWQ_drc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TzMtwIyXR6ybyBxUfRujRWQ_drc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 23:34:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1385 (0x569) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E4042, serialNumber=4F332DC08C9747AC9BC81C547D1BA345643F76B7 Validity Not Before: May 30 23:34:13 2025 GMT Not After : Jun 6 23:34:13 2025 GMT Subject: CN=683a4075-05e5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:64:a9:c4:38:bb:c7:6b:99:d5:a6:9a:6b:47: 5d:ea:c8:33:32:83:4e:35:6d:20:8c:69:88:ed:15: e7:41:30:8d:21:ae:5d:2c:ea:fd:48:c5:8e:c8:78: c1:c0:79:1f:ea:b2:5d:f5:50:15:61:f3:32:31:4d: 20:79:85:eb:14:3a:da:df:a8:9e:c9:0d:91:89:1c: 84:a9:8f:5d:1c:4b:67:07:c2:c2:bd:ce:f8:a7:a4: 0c:9b:67:8e:5f:c4:42:40:e7:f9:7c:d3:27:9c:f4: a5:5d:17:90:44:b1:34:b6:81:f1:4f:2b:35:9e:e2: 91:c7:3d:2c:e2:26:e5:4b:92:0e:14:46:f9:d1:cd: fa:fa:c1:6d:b9:d9:e1:2e:95:0f:86:30:ac:ca:35: 55:f9:c1:64:a5:54:5a:24:02:e6:94:6b:3e:c2:f1: 92:a3:e6:15:db:fe:75:ea:e4:f0:79:fc:99:a7:38: b7:a8:77:d3:b9:13:10:52:c4:c0:3a:5a:14:92:9d: e3:ab:65:9a:48:ba:93:c6:28:61:bb:4c:16:f4:11: f9:2b:28:01:c2:9b:50:cd:e3:a0:60:6b:7b:81:cb: ba:21:86:17:f0:86:97:b9:50:98:ae:c7:e4:4c:bb: a3:35:57:74:ab:14:95:71:19:f9:be:30:84:3b:93: 23:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:BC:32:77:2D:F2:CD:CC:59:69:45:96:37:25:E9:BF:7B:1A:83:7F X509v3 Authority Key Identifier: keyid:4F:33:2D:C0:8C:97:47:AC:9B:C8:1C:54:7D:1B:A3:45:64:3F:76:B7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E4042/EFC98DE6E53611EB9926556BC4F9AE02/TzMtwIyXR6ybyBxUfRujRWQ_drc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TzMtwIyXR6ybyBxUfRujRWQ_drc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E4042/EFC98DE6E53611EB9926556BC4F9AE02/TzMtwIyXR6ybyBxUfRujRWQ_drc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5c:89:e8:51:64:d2:43:f7:c3:cf:15:83:51:9a:4b:e2:4c:7e: 58:91:98:f8:bc:b1:3a:f3:eb:f3:23:32:af:67:d2:4b:28:c8: 4e:14:ec:71:b8:b0:f0:3b:00:1c:9d:c0:0f:a3:5a:c3:84:af: bd:eb:35:95:0c:a7:2a:5d:48:76:b7:5e:f6:fd:a2:69:2c:dc: 2b:fa:1c:96:7f:e5:aa:7c:9c:04:56:ba:1c:81:75:23:20:37: eb:0f:cd:30:e2:43:52:99:19:dd:e3:08:36:d6:9f:41:65:97: 92:84:99:ef:47:ed:f1:b3:0d:f0:61:28:3e:b5:06:68:c2:37: 5c:4a:32:8a:76:38:90:6c:71:5e:9c:34:d9:66:3c:61:0a:5c: bd:ab:34:c5:80:28:c4:89:43:05:c5:3c:1b:95:d6:59:ef:2c: 43:45:a7:be:07:11:51:00:97:d0:be:e4:ff:27:66:54:c7:d6: fc:85:51:8f:fd:5a:ec:b9:7f:b5:3e:a2:35:35:b1:88:5c:74: e5:ae:f7:cd:c0:a5:1e:a0:28:18:64:75:56:ec:98:0a:73:1c: 56:75:96:7e:ff:93:3f:6a:26:88:c4:33:3b:42:e4:e3:a2:87: 99:b8:38:93:2b:3b:81:e8:98:dd:ba:26:cb:49:52:a2:da:e7: 10:a0:d7:41 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBWkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTQwNDIxMTAvBgNVBAUTKDRGMzMyREMwOEM5NzQ3QUM5QkM4MUM1NDdEMUJBMzQ1 NjQzRjc2QjcwHhcNMjUwNTMwMjMzNDEzWhcNMjUwNjA2MjMzNDEzWjAYMRYwFAYD VQQDEw02ODNhNDA3NS0wNWU1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtmSpxDi7x2uZ1aaaa0dd6sgzMoNONW0gjGmI7RXnQTCNIa5dLOr9SMWOyHjB wHkf6rJd9VAVYfMyMU0geYXrFDra36ieyQ2RiRyEqY9dHEtnB8LCvc74p6QMm2eO X8RCQOf5fNMnnPSlXReQRLE0toHxTys1nuKRxz0s4iblS5IOFEb50c36+sFtudnh LpUPhjCsyjVV+cFkpVRaJALmlGs+wvGSo+YV2/516uTwefyZpzi3qHfTuRMQUsTA OloUkp3jq2WaSLqTxihhu0wW9BH5KygBwptQzeOgYGt7gcu6IYYX8IaXuVCYrsfk TLujNVd0qxSVcRn5vjCEO5MjEQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFI68Mnct 8s3MWWlFljcl6b97GoN/MB8GA1UdIwQYMBaAFE8zLcCMl0esm8gcVH0bo0VkP3a3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNDA0Mi9FRkM5OERFNkU1 MzYxMUVCOTkyNjU1NkJDNEY5QUUwMi9Uek10d0l5WFI2eWJ5QnhVZlJ1alJXUV9k cmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1R6TXR3SXlYUjZ5YnlCeFVmUnVqUldRX2RyYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NDA0Mi9FRkM5OERFNkU1MzYxMUVCOTkyNjU1NkJDNEY5QUUwMi9Uek10d0l5WFI2 eWJ5QnhVZlJ1alJXUV9kcmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBciehRZNJD98PPFYNRmkviTH5YkZj4vLE68+vzIzKvZ9JLKMhOFOxx uLDwOwAcncAPo1rDhK+96zWVDKcqXUh2t172/aJpLNwr+hyWf+WqfJwEVrocgXUj IDfrD80w4kNSmRnd4wg21p9BZZeShJnvR+3xsw3wYSg+tQZowjdcSjKKdjiQbHFe nDTZZjxhCly9qzTFgCjEiUMFxTwbldZZ7yxDRae+BxFRAJfQvuT/J2ZUx9b8hVGP /VrsuX+1PqI1NbGIXHTlrvfNwKUeoCgYZHVW7JgKcxxWdZZ+/5M/aiaIxDM7QuTj ooeZuDiTKzuB6JjduibLSVKi2ucQoNdB -----END CERTIFICATE-----Generated at Sat May 31 17:51:37 2025 by rpki-client