$ rpki-client -vvf rpki.apnic.net/member_repository/A914F349/C6F5001AEDB111ECAF435C5DC4F9AE02/TZRPMLjG5pGYjTAvumwvnFdMBLA.mft File: TZRPMLjG5pGYjTAvumwvnFdMBLA.mft (raw, json) Hash identifier: ZKla6cZh1gfoBsWPKSIyYRTIsVZW+NX4WqaQPYdLsd0= Subject key identifier: 4D:8D:77:47:AF:63:44:2A:08:CF:EE:68:44:8E:AA:E7:C8:9B:E5:7F Authority key identifier: 4D:94:4F:30:B8:C6:E6:91:98:8D:30:2F:BA:6C:2F:9C:57:4C:04:B0 Certificate issuer: /CN=A914F349/serialNumber=4D944F30B8C6E691988D302FBA6C2F9C574C04B0 Certificate serial: 0320 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TZRPMLjG5pGYjTAvumwvnFdMBLA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914F349/C6F5001AEDB111ECAF435C5DC4F9AE02/TZRPMLjG5pGYjTAvumwvnFdMBLA.mft Manifest number: 031B Signing time: Mon 03 Nov 2025 01:04:51 +0000 Manifest this update: Mon 03 Nov 2025 01:04:50 +0000 Manifest next update: Mon 10 Nov 2025 01:04:50 +0000 Files and hashes: 1: TZRPMLjG5pGYjTAvumwvnFdMBLA.crl (hash: roTFtOHa8suv2eP7GfCJTseFIJURXEdBHBtl3biVtVc=) 2: E5A22A7CEDB811ECB7BDFF0AC4F9AE02.roa (hash: pBwxys1yivtkEToGBFIFFmXXN52OvE5FFgRhewDkeko=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914F349/C6F5001AEDB111ECAF435C5DC4F9AE02/TZRPMLjG5pGYjTAvumwvnFdMBLA.crl rsync://rpki.apnic.net/member_repository/A914F349/C6F5001AEDB111ECAF435C5DC4F9AE02/TZRPMLjG5pGYjTAvumwvnFdMBLA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TZRPMLjG5pGYjTAvumwvnFdMBLA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 01:04:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 800 (0x320) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914F349, serialNumber=4D944F30B8C6E691988D302FBA6C2F9C574C04B0 Validity Not Before: Nov 3 01:04:50 2025 GMT Not After : Nov 10 01:04:50 2025 GMT Subject: CN=6907ffb3-4cb3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:93:cd:fb:fe:a6:8a:cc:f9:04:3f:8d:af:44: c3:93:96:27:b2:6e:6a:d5:a0:b9:63:e3:4a:d3:96: 13:5d:04:b5:c8:41:38:ce:a3:e0:6e:13:66:1b:35: 0e:65:d3:96:3b:69:2b:d0:89:81:79:a3:9e:dc:61: 36:d4:51:9e:9a:19:ba:ca:0e:3c:bb:b9:4d:a8:ea: 13:31:ec:85:3d:9b:e2:6d:96:ed:76:33:ba:64:1d: 18:fe:e8:e1:c2:2c:02:22:5d:26:f8:f3:48:fa:fa: ec:51:a1:a6:bf:4e:28:42:d3:c0:8e:98:ff:09:3c: 5b:08:24:bf:12:0a:36:76:f5:97:59:c2:83:63:15: 2b:c1:1e:9a:82:66:e2:29:6c:46:be:82:30:2f:4c: a9:60:5b:cb:2a:c0:7f:27:86:74:b5:58:b2:0f:16: 32:14:1e:9b:2d:12:e8:20:98:e9:a1:6e:fc:42:ed: 2b:17:fa:96:fd:67:af:9c:12:ab:4b:10:dd:cc:7d: d3:7f:f8:25:44:3d:ab:57:e6:2e:14:2c:24:c4:5a: 7d:ec:07:98:0c:39:a6:68:f6:d8:17:7d:4a:45:59: 5d:e9:0c:c3:e1:0f:3a:a3:9f:04:14:09:29:ba:4f: 5b:9d:92:37:cf:54:d1:82:19:a9:5e:3e:8b:b9:97: 41:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:8D:77:47:AF:63:44:2A:08:CF:EE:68:44:8E:AA:E7:C8:9B:E5:7F X509v3 Authority Key Identifier: keyid:4D:94:4F:30:B8:C6:E6:91:98:8D:30:2F:BA:6C:2F:9C:57:4C:04:B0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914F349/C6F5001AEDB111ECAF435C5DC4F9AE02/TZRPMLjG5pGYjTAvumwvnFdMBLA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TZRPMLjG5pGYjTAvumwvnFdMBLA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914F349/C6F5001AEDB111ECAF435C5DC4F9AE02/TZRPMLjG5pGYjTAvumwvnFdMBLA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 25:4a:02:6d:5e:8a:0d:dd:1f:5a:3d:00:fa:1e:cb:2b:8f:b3: 6b:4b:61:0e:91:03:b0:d5:1a:8c:70:ee:1b:11:38:33:c3:52: 2e:18:fa:9f:55:1a:cd:00:77:74:8b:09:34:58:20:d1:38:e7: 43:41:bb:28:f3:38:47:cb:9f:c2:c3:11:ac:d9:85:ab:a7:3d: ef:93:e5:dd:87:4d:81:49:9c:bd:4d:4d:e5:fd:2c:fa:3d:27: 7d:cf:7b:4a:bd:f5:d2:e3:f6:c7:64:41:1e:c4:f8:56:fc:73: 56:de:67:3f:0e:8e:77:4e:09:06:25:e0:1b:8d:ca:ee:19:17: d8:c8:ec:f8:37:12:a3:42:27:70:b8:fb:e0:05:58:39:95:5b: 3d:f3:31:90:4e:bc:2a:7e:98:fe:f7:94:15:a7:7d:83:84:f4: 84:40:74:54:41:71:ce:49:ff:99:91:21:dd:0a:51:b9:a7:e5: 36:fb:50:30:52:ea:ff:4c:b5:b2:bf:83:b2:da:6f:83:1e:5c: 99:d6:4b:a6:a5:07:07:91:76:92:04:80:8b:6b:de:41:3b:1b: 65:33:8b:32:54:d3:68:f8:3e:f9:53:7f:6b:98:fd:bb:f6:85: 9c:f5:e0:62:e4:cc:62:21:24:ce:07:d9:c4:4f:f1:2f:5b:f7: b7:9a:57:93 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAyAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEYzNDkxMTAvBgNVBAUTKDREOTQ0RjMwQjhDNkU2OTE5ODhEMzAyRkJBNkMyRjlD NTc0QzA0QjAwHhcNMjUxMTAzMDEwNDUwWhcNMjUxMTEwMDEwNDUwWjAYMRYwFAYD VQQDEw02OTA3ZmZiMy00Y2IzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw5PN+/6misz5BD+Nr0TDk5Ynsm5q1aC5Y+NK05YTXQS1yEE4zqPgbhNmGzUO ZdOWO2kr0ImBeaOe3GE21FGemhm6yg48u7lNqOoTMeyFPZvibZbtdjO6ZB0Y/ujh wiwCIl0m+PNI+vrsUaGmv04oQtPAjpj/CTxbCCS/Ego2dvWXWcKDYxUrwR6agmbi KWxGvoIwL0ypYFvLKsB/J4Z0tViyDxYyFB6bLRLoIJjpoW78Qu0rF/qW/WevnBKr SxDdzH3Tf/glRD2rV+YuFCwkxFp97AeYDDmmaPbYF31KRVld6QzD4Q86o58EFAkp uk9bnZI3z1TRghmpXj6LuZdB6QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFE2Nd0ev Y0QqCM/uaESOqufIm+V/MB8GA1UdIwQYMBaAFE2UTzC4xuaRmI0wL7psL5xXTASw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RjM0OS9DNkY1MDAxQUVE QjExMUVDQUY0MzVDNURDNEY5QUUwMi9UWlJQTUxqRzVwR1lqVEF2dW13dm5GZE1C TEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1RaUlBNTGpHNXBHWWpUQXZ1bXd2bkZkTUJMQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 RjM0OS9DNkY1MDAxQUVEQjExMUVDQUY0MzVDNURDNEY5QUUwMi9UWlJQTUxqRzVw R1lqVEF2dW13dm5GZE1CTEEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAlSgJtXooN3R9aPQD6Hssrj7NrS2EOkQOw1RqMcO4bETgzw1IuGPqf VRrNAHd0iwk0WCDROOdDQbso8zhHy5/CwxGs2YWrpz3vk+Xdh02BSZy9TU3l/Sz6 PSd9z3tKvfXS4/bHZEEexPhW/HNW3mc/Do53TgkGJeAbjcruGRfYyOz4NxKjQidw uPvgBVg5lVs98zGQTrwqfpj+95QVp32DhPSEQHRUQXHOSf+ZkSHdClG5p+U2+1Aw Uur/TLWyv4Oy2m+DHlyZ1kumpQcHkXaSBICLa95BOxtlM4syVNNo+D75U39rmP27 9oWc9eBi5MxiISTOB9nET/EvW/e3mleT -----END CERTIFICATE-----Generated at Tue Nov 4 19:04:16 2025 by rpki-client