$ rpki-client -vvf rpki.apnic.net/member_repository/A914F349/C6F5001AEDB111ECAF435C5DC4F9AE02/TZRPMLjG5pGYjTAvumwvnFdMBLA.mft File: TZRPMLjG5pGYjTAvumwvnFdMBLA.mft (raw, json) Hash identifier: Fae/gmfBcMGgn+mudH2hV5TAhwBxCn/o9/wH0OS5f6o= Subject key identifier: 56:5C:01:5C:ED:B5:F0:20:0E:35:CA:8E:89:7B:4E:73:9B:62:14:82 Authority key identifier: 4D:94:4F:30:B8:C6:E6:91:98:8D:30:2F:BA:6C:2F:9C:57:4C:04:B0 Certificate issuer: /CN=A914F349/serialNumber=4D944F30B8C6E691988D302FBA6C2F9C574C04B0 Certificate serial: 02BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TZRPMLjG5pGYjTAvumwvnFdMBLA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914F349/C6F5001AEDB111ECAF435C5DC4F9AE02/TZRPMLjG5pGYjTAvumwvnFdMBLA.mft Manifest number: 02B7 Signing time: Fri 25 Apr 2025 01:12:42 +0000 Manifest this update: Fri 25 Apr 2025 01:12:41 +0000 Manifest next update: Fri 02 May 2025 01:12:41 +0000 Files and hashes: 1: TZRPMLjG5pGYjTAvumwvnFdMBLA.crl (hash: lMVP6EC91HtLkR0wESz8g6+uy8JS+zw0NizJ2BNH1xs=) 2: E5A22A7CEDB811ECB7BDFF0AC4F9AE02.roa (hash: iYkVHc+gEz+KBoaY/orgybHRRbhE8SWTurly5q5QifM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914F349/C6F5001AEDB111ECAF435C5DC4F9AE02/TZRPMLjG5pGYjTAvumwvnFdMBLA.crl rsync://rpki.apnic.net/member_repository/A914F349/C6F5001AEDB111ECAF435C5DC4F9AE02/TZRPMLjG5pGYjTAvumwvnFdMBLA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TZRPMLjG5pGYjTAvumwvnFdMBLA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 01:12:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 698 (0x2ba) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914F349, serialNumber=4D944F30B8C6E691988D302FBA6C2F9C574C04B0 Validity Not Before: Apr 25 01:12:41 2025 GMT Not After : May 2 01:12:41 2025 GMT Subject: CN=680ae18a-422f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:fb:3f:fa:15:58:c9:35:6c:8c:39:11:35:e9: b0:bf:c1:81:c3:da:a4:02:16:da:78:5a:90:71:40: c3:25:f5:15:b7:de:91:53:45:38:37:86:06:fb:5f: 97:66:e2:d3:d8:bf:a7:a4:05:26:50:7e:ae:16:53: 77:1f:0b:9f:f8:f0:16:3c:7f:75:78:b3:72:91:06: 54:02:a7:4f:54:b1:27:e3:33:a4:24:b0:fa:1b:45: 25:48:ec:3f:df:7a:70:e3:0e:80:ab:95:8b:55:1b: 1c:ac:d5:b2:65:e0:6e:d1:89:56:b1:c5:b2:0a:8b: c7:65:64:e9:65:39:ce:d5:66:cd:35:43:3d:74:00: fc:1d:5f:87:f1:83:f8:ea:f3:50:b6:48:48:4c:6c: df:20:92:64:f8:a5:d6:a8:ef:c9:68:42:a7:04:58: 0c:e2:fb:c2:04:5f:73:e0:af:66:5d:c7:fb:3b:f4: 06:f9:58:a8:5d:2d:5f:b8:ac:99:4b:75:37:67:52: 9b:f7:ea:07:59:d9:c1:52:cc:83:48:a6:92:76:75: b1:54:38:0b:bf:54:bc:5b:36:6a:96:ea:2b:22:73: 92:95:21:bc:76:dc:f3:bc:38:e4:a4:22:52:39:02: e1:d6:03:dc:58:4e:8e:b7:9f:7a:66:a3:2c:f3:9e: 48:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:5C:01:5C:ED:B5:F0:20:0E:35:CA:8E:89:7B:4E:73:9B:62:14:82 X509v3 Authority Key Identifier: keyid:4D:94:4F:30:B8:C6:E6:91:98:8D:30:2F:BA:6C:2F:9C:57:4C:04:B0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914F349/C6F5001AEDB111ECAF435C5DC4F9AE02/TZRPMLjG5pGYjTAvumwvnFdMBLA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TZRPMLjG5pGYjTAvumwvnFdMBLA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914F349/C6F5001AEDB111ECAF435C5DC4F9AE02/TZRPMLjG5pGYjTAvumwvnFdMBLA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2b:56:4c:6f:d0:d9:1a:a8:f8:29:e6:82:0d:ff:15:6e:01:78: de:77:c5:10:86:28:fb:96:07:4c:c7:c0:4b:d9:a3:7d:9f:f6: fd:88:8f:7a:1b:3f:a3:42:68:0a:fb:e5:a2:e6:54:06:43:e2: 49:81:0b:39:55:a1:f9:17:7a:22:73:86:89:98:66:2d:2d:06: 0f:8d:ef:0d:e0:db:3e:24:9d:75:81:db:a3:f7:d4:80:56:ed: d0:fc:49:f0:65:a3:e2:77:46:37:bc:fd:3c:4c:53:4b:8b:33: e7:1a:d3:fb:3c:fe:22:70:c4:8f:e5:df:49:6a:5a:10:9a:8e: a3:bc:bb:ff:b0:b7:71:05:cf:d0:1c:35:02:13:65:bb:62:ca: ce:c0:5a:f4:23:b5:79:33:3f:9c:bb:50:d9:41:59:91:15:79: 1b:02:b2:38:97:f4:0b:11:73:4d:cf:b1:ba:a9:4b:a0:c6:9f: d1:44:54:cb:f3:f9:55:4a:cf:aa:fa:59:c5:c9:37:9b:fd:9d: bf:b2:b4:9d:ff:f6:b1:03:9b:9c:42:66:4e:ce:50:4c:1a:c1: 01:27:02:df:27:f7:d1:56:f5:dc:e2:1f:f6:c1:d2:60:14:2e: d9:da:32:c7:23:2d:af:4d:06:73:45:9e:41:69:18:a3:85:5c: 4c:62:fb:96 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICArowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEYzNDkxMTAvBgNVBAUTKDREOTQ0RjMwQjhDNkU2OTE5ODhEMzAyRkJBNkMyRjlD NTc0QzA0QjAwHhcNMjUwNDI1MDExMjQxWhcNMjUwNTAyMDExMjQxWjAYMRYwFAYD VQQDEw02ODBhZTE4YS00MjJmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyfs/+hVYyTVsjDkRNemwv8GBw9qkAhbaeFqQcUDDJfUVt96RU0U4N4YG+1+X ZuLT2L+npAUmUH6uFlN3Hwuf+PAWPH91eLNykQZUAqdPVLEn4zOkJLD6G0UlSOw/ 33pw4w6Aq5WLVRscrNWyZeBu0YlWscWyCovHZWTpZTnO1WbNNUM9dAD8HV+H8YP4 6vNQtkhITGzfIJJk+KXWqO/JaEKnBFgM4vvCBF9z4K9mXcf7O/QG+VioXS1fuKyZ S3U3Z1Kb9+oHWdnBUsyDSKaSdnWxVDgLv1S8WzZqluorInOSlSG8dtzzvDjkpCJS OQLh1gPcWE6Ot596ZqMs855IhwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFZcAVzt tfAgDjXKjol7TnObYhSCMB8GA1UdIwQYMBaAFE2UTzC4xuaRmI0wL7psL5xXTASw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RjM0OS9DNkY1MDAxQUVE QjExMUVDQUY0MzVDNURDNEY5QUUwMi9UWlJQTUxqRzVwR1lqVEF2dW13dm5GZE1C TEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1RaUlBNTGpHNXBHWWpUQXZ1bXd2bkZkTUJMQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 RjM0OS9DNkY1MDAxQUVEQjExMUVDQUY0MzVDNURDNEY5QUUwMi9UWlJQTUxqRzVw R1lqVEF2dW13dm5GZE1CTEEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQArVkxv0NkaqPgp5oIN/xVuAXjed8UQhij7lgdMx8BL2aN9n/b9iI96 Gz+jQmgK++Wi5lQGQ+JJgQs5VaH5F3oic4aJmGYtLQYPje8N4Ns+JJ11gduj99SA Vu3Q/EnwZaPid0Y3vP08TFNLizPnGtP7PP4icMSP5d9JaloQmo6jvLv/sLdxBc/Q HDUCE2W7YsrOwFr0I7V5Mz+cu1DZQVmRFXkbArI4l/QLEXNNz7G6qUugxp/RRFTL 8/lVSs+q+lnFyTeb/Z2/srSd//axA5ucQmZOzlBMGsEBJwLfJ/fRVvXc4h/2wdJg FC7Z2jLHIy2vTQZzRZ5BaRijhVxMYvuW -----END CERTIFICATE-----Generated at Sat Apr 26 14:16:04 2025 by rpki-client