$ rpki-client -vvf rpki.apnic.net/member_repository/A914F349/C6F5001AEDB111ECAF435C5DC4F9AE02/TZRPMLjG5pGYjTAvumwvnFdMBLA.mft File: TZRPMLjG5pGYjTAvumwvnFdMBLA.mft (raw, json) Hash identifier: btSI2OG1b9Y7dWpq0UND1z/4QvgctBc9A91ajG8tUak= Subject key identifier: FC:59:2E:30:61:4C:3F:22:84:6F:67:62:E4:D4:4A:E5:A1:DD:BF:44 Authority key identifier: 4D:94:4F:30:B8:C6:E6:91:98:8D:30:2F:BA:6C:2F:9C:57:4C:04:B0 Certificate issuer: /CN=A914F349/serialNumber=4D944F30B8C6E691988D302FBA6C2F9C574C04B0 Certificate serial: 02F5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TZRPMLjG5pGYjTAvumwvnFdMBLA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914F349/C6F5001AEDB111ECAF435C5DC4F9AE02/TZRPMLjG5pGYjTAvumwvnFdMBLA.mft Manifest number: 02F0 Signing time: Sat 09 Aug 2025 01:49:41 +0000 Manifest this update: Sat 09 Aug 2025 01:49:41 +0000 Manifest next update: Sat 16 Aug 2025 01:49:41 +0000 Files and hashes: 1: TZRPMLjG5pGYjTAvumwvnFdMBLA.crl (hash: 8+rt8nkHnFC359DjyOU33yaIlgBgEdJf38Xur+HEB9U=) 2: E5A22A7CEDB811ECB7BDFF0AC4F9AE02.roa (hash: pBwxys1yivtkEToGBFIFFmXXN52OvE5FFgRhewDkeko=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914F349/C6F5001AEDB111ECAF435C5DC4F9AE02/TZRPMLjG5pGYjTAvumwvnFdMBLA.crl rsync://rpki.apnic.net/member_repository/A914F349/C6F5001AEDB111ECAF435C5DC4F9AE02/TZRPMLjG5pGYjTAvumwvnFdMBLA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TZRPMLjG5pGYjTAvumwvnFdMBLA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 757 (0x2f5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914F349, serialNumber=4D944F30B8C6E691988D302FBA6C2F9C574C04B0 Validity Not Before: Aug 9 01:49:41 2025 GMT Not After : Aug 16 01:49:41 2025 GMT Subject: CN=6896a935-2a38 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:f5:31:c0:2d:d3:24:1c:de:46:51:60:fb:8c: b3:f9:f7:1e:d2:ac:1c:82:b2:d0:c3:cf:56:70:91: 71:6f:f0:71:8b:97:c9:de:31:58:a5:19:0d:c7:30: d1:17:34:72:5d:32:a3:e4:85:ba:8d:e2:c6:d4:b6: 73:56:6b:3e:12:5f:97:da:88:03:b3:ef:3d:59:c7: cc:c9:57:f8:fc:8c:23:61:c4:bd:87:6e:e5:f9:ae: 87:0a:99:cd:74:0b:bb:da:f1:19:91:ee:b4:50:37: 33:03:d5:62:ec:24:be:d0:02:cf:94:8c:71:a9:ee: ba:ea:50:f8:ec:42:b8:22:f5:bd:30:f9:9e:e2:70: 6d:8f:3a:97:fe:2c:65:56:e2:e6:09:6f:88:33:e5: d2:6a:52:6b:53:5f:a1:51:3d:99:ba:bf:66:74:d3: a7:99:c7:71:35:98:b2:bf:31:2a:3b:06:f0:57:7a: 23:12:c1:c1:e4:58:77:00:52:e2:5a:ec:ca:91:2a: 4e:ee:6c:ff:4b:37:be:50:c5:d6:8a:2d:af:2f:e5: 81:60:74:c8:3d:39:d1:6a:d3:0c:d1:36:7c:ca:2f: fb:58:1c:b9:e1:3d:a0:a6:e4:65:0f:bf:21:04:8a: 8f:69:2a:d5:d0:8b:52:26:96:68:11:1c:0b:ea:84: 46:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:59:2E:30:61:4C:3F:22:84:6F:67:62:E4:D4:4A:E5:A1:DD:BF:44 X509v3 Authority Key Identifier: keyid:4D:94:4F:30:B8:C6:E6:91:98:8D:30:2F:BA:6C:2F:9C:57:4C:04:B0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914F349/C6F5001AEDB111ECAF435C5DC4F9AE02/TZRPMLjG5pGYjTAvumwvnFdMBLA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TZRPMLjG5pGYjTAvumwvnFdMBLA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914F349/C6F5001AEDB111ECAF435C5DC4F9AE02/TZRPMLjG5pGYjTAvumwvnFdMBLA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 18:a1:f2:a8:41:d2:38:4a:a1:cb:44:87:86:df:61:8b:6a:d3: a3:0d:97:bb:d0:e6:ee:0a:ea:05:85:53:a2:04:34:96:a4:74: f6:ef:ff:43:de:61:95:20:f9:7e:b6:a2:3c:b0:1d:8f:f0:48: 9b:4f:77:29:0c:3e:58:6d:17:b7:f9:e2:24:24:57:a5:f2:34: 08:bf:f3:4c:36:27:25:d4:e5:23:d4:30:71:08:24:91:6d:fa: c5:1e:ac:d0:e1:63:40:8e:e0:92:28:5d:ac:fd:25:2d:96:4c: 85:07:7e:f1:f4:90:d1:99:8f:90:98:49:e3:9b:2a:be:6f:6b: f3:87:ee:19:0b:79:f0:31:82:42:cd:fe:85:ac:c8:e8:ff:c2: 7d:ab:64:32:a2:92:e5:d7:03:e9:1d:8a:a6:77:c1:a4:57:bc: 1c:41:32:5d:a6:35:c4:7e:b8:e1:73:4c:b3:a1:31:83:de:22: 15:e9:b6:f3:8b:4c:ff:b6:12:c5:79:36:39:3b:c2:e6:bc:71: 4d:fa:61:c1:54:60:7e:97:bf:96:9e:26:c8:71:b7:0e:a1:33: d3:eb:6d:d7:24:1c:94:9c:4f:c2:79:b2:55:c4:d9:60:f9:9f: 76:48:ca:16:82:f7:97:7c:51:3f:3e:68:c5:44:6c:03:bb:48: cf:9b:37:d5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAvUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEYzNDkxMTAvBgNVBAUTKDREOTQ0RjMwQjhDNkU2OTE5ODhEMzAyRkJBNkMyRjlD NTc0QzA0QjAwHhcNMjUwODA5MDE0OTQxWhcNMjUwODE2MDE0OTQxWjAYMRYwFAYD VQQDEw02ODk2YTkzNS0yYTM4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvfUxwC3TJBzeRlFg+4yz+fce0qwcgrLQw89WcJFxb/Bxi5fJ3jFYpRkNxzDR FzRyXTKj5IW6jeLG1LZzVms+El+X2ogDs+89WcfMyVf4/IwjYcS9h27l+a6HCpnN dAu72vEZke60UDczA9Vi7CS+0ALPlIxxqe666lD47EK4IvW9MPme4nBtjzqX/ixl VuLmCW+IM+XSalJrU1+hUT2Zur9mdNOnmcdxNZiyvzEqOwbwV3ojEsHB5Fh3AFLi WuzKkSpO7mz/Sze+UMXWii2vL+WBYHTIPTnRatMM0TZ8yi/7WBy54T2gpuRlD78h BIqPaSrV0ItSJpZoERwL6oRGPwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPxZLjBh TD8ihG9nYuTUSuWh3b9EMB8GA1UdIwQYMBaAFE2UTzC4xuaRmI0wL7psL5xXTASw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RjM0OS9DNkY1MDAxQUVE QjExMUVDQUY0MzVDNURDNEY5QUUwMi9UWlJQTUxqRzVwR1lqVEF2dW13dm5GZE1C TEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1RaUlBNTGpHNXBHWWpUQXZ1bXd2bkZkTUJMQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 RjM0OS9DNkY1MDAxQUVEQjExMUVDQUY0MzVDNURDNEY5QUUwMi9UWlJQTUxqRzVw R1lqVEF2dW13dm5GZE1CTEEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAYofKoQdI4SqHLRIeG32GLatOjDZe70ObuCuoFhVOiBDSWpHT27/9D 3mGVIPl+tqI8sB2P8EibT3cpDD5YbRe3+eIkJFel8jQIv/NMNicl1OUj1DBxCCSR bfrFHqzQ4WNAjuCSKF2s/SUtlkyFB37x9JDRmY+QmEnjmyq+b2vzh+4ZC3nwMYJC zf6FrMjo/8J9q2QyopLl1wPpHYqmd8GkV7wcQTJdpjXEfrjhc0yzoTGD3iIV6bbz i0z/thLFeTY5O8LmvHFN+mHBVGB+l7+WnibIcbcOoTPT623XJByUnE/CebJVxNlg +Z92SMoWgveXfFE/PmjFRGwDu0jPmzfV -----END CERTIFICATE-----Generated at Sun Aug 10 16:01:36 2025 by rpki-client