$ rpki-client -vvf rpki.apnic.net/member_repository/A914F349/C6F5001AEDB111ECAF435C5DC4F9AE02/TZRPMLjG5pGYjTAvumwvnFdMBLA.mft File: TZRPMLjG5pGYjTAvumwvnFdMBLA.mft (raw, json) Hash identifier: Ug054C3gzvpFwc5a2CcU+wJmQ1Kt9xA7B0pXyQVuBas= Subject key identifier: 70:0D:21:64:56:F3:B9:EB:B7:A7:3B:67:44:7E:1F:E6:58:31:9A:E1 Authority key identifier: 4D:94:4F:30:B8:C6:E6:91:98:8D:30:2F:BA:6C:2F:9C:57:4C:04:B0 Certificate issuer: /CN=A914F349/serialNumber=4D944F30B8C6E691988D302FBA6C2F9C574C04B0 Certificate serial: 02D3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TZRPMLjG5pGYjTAvumwvnFdMBLA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914F349/C6F5001AEDB111ECAF435C5DC4F9AE02/TZRPMLjG5pGYjTAvumwvnFdMBLA.mft Manifest number: 02D0 Signing time: Sun 15 Jun 2025 01:04:51 +0000 Manifest this update: Sun 15 Jun 2025 01:04:50 +0000 Manifest next update: Sun 22 Jun 2025 01:04:50 +0000 Files and hashes: 1: TZRPMLjG5pGYjTAvumwvnFdMBLA.crl (hash: qB6t2FlXUjYc/I0CMY/9f8MX6MiSpQQYAriYScgBknE=) 2: E5A22A7CEDB811ECB7BDFF0AC4F9AE02.roa (hash: iYkVHc+gEz+KBoaY/orgybHRRbhE8SWTurly5q5QifM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914F349/C6F5001AEDB111ECAF435C5DC4F9AE02/TZRPMLjG5pGYjTAvumwvnFdMBLA.crl rsync://rpki.apnic.net/member_repository/A914F349/C6F5001AEDB111ECAF435C5DC4F9AE02/TZRPMLjG5pGYjTAvumwvnFdMBLA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TZRPMLjG5pGYjTAvumwvnFdMBLA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 22 Jun 2025 01:04:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 723 (0x2d3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914F349, serialNumber=4D944F30B8C6E691988D302FBA6C2F9C574C04B0 Validity Not Before: Jun 15 01:04:50 2025 GMT Not After : Jun 22 01:04:50 2025 GMT Subject: CN=684e1c33-c852 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:17:96:f4:62:61:fe:22:ef:23:3c:8f:f3:c4: d3:74:75:1f:26:c1:d9:dd:80:bb:c3:d2:58:48:f0: 3a:4d:2c:5b:9f:4d:fd:88:d7:39:64:d6:ae:1f:93: 2c:e8:1e:d8:66:fc:7a:e1:5e:24:cb:65:db:87:12: c0:04:ba:ca:66:d0:88:c5:87:6b:14:5b:32:12:c5: 5b:a2:c5:a8:12:90:fa:8b:3d:2f:4f:db:d0:d2:eb: 57:07:ca:48:dc:71:e6:68:d3:6a:4b:54:55:12:e8: 75:09:ae:2a:c5:b4:34:ce:30:d3:50:99:3c:7d:4d: e5:ab:64:83:fc:ed:1c:e0:7d:6a:8e:31:07:48:51: 9a:6a:0c:b5:e8:a9:21:ee:46:d3:93:39:d8:0c:dd: 19:f7:38:e8:16:59:ff:17:7b:6d:ab:6d:1d:8a:59: 81:7a:fc:cf:ce:9d:6f:e9:59:63:f5:af:4f:3e:0c: ef:6c:a1:83:36:37:40:e3:c5:76:26:dd:c8:cb:8f: b3:23:67:03:ce:8d:ab:90:8d:8d:a2:80:61:0c:63: eb:eb:76:9e:14:bd:3e:84:8f:82:ae:a8:3e:fc:c4: bb:f2:d6:56:9d:ad:80:42:c8:98:b7:52:bf:c0:bc: 42:7b:2d:7e:f0:06:09:19:77:4e:e2:ac:cc:c4:d2: e2:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:0D:21:64:56:F3:B9:EB:B7:A7:3B:67:44:7E:1F:E6:58:31:9A:E1 X509v3 Authority Key Identifier: keyid:4D:94:4F:30:B8:C6:E6:91:98:8D:30:2F:BA:6C:2F:9C:57:4C:04:B0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914F349/C6F5001AEDB111ECAF435C5DC4F9AE02/TZRPMLjG5pGYjTAvumwvnFdMBLA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TZRPMLjG5pGYjTAvumwvnFdMBLA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914F349/C6F5001AEDB111ECAF435C5DC4F9AE02/TZRPMLjG5pGYjTAvumwvnFdMBLA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2d:82:2f:94:2b:04:f2:a7:e1:52:4e:3b:58:c3:8c:af:9d:65: a5:b7:6d:ad:16:75:5d:e0:9a:fd:6f:e4:c5:57:d7:a9:2e:4b: a7:a7:a5:86:46:6d:c3:a3:24:df:74:2e:d4:4f:de:34:07:70: 97:ec:1d:84:ab:31:f9:84:25:49:45:a6:f9:1d:ea:a7:5a:58: 86:b0:c3:ed:0b:b7:bb:1a:c6:32:b0:43:bd:e1:0b:e3:69:cd: 4f:b8:7e:80:e2:59:02:dd:98:3f:6a:e7:64:b9:f0:69:73:d9: bc:04:d1:3c:ef:7d:e1:d7:1b:65:fd:b2:bb:23:7a:b2:3f:30: 57:a0:1f:58:a6:ce:f3:2b:48:83:68:bc:50:39:5e:57:eb:3a: 2b:e7:35:f4:2b:54:6b:0c:aa:5b:e7:3a:52:96:06:d5:20:6c: 9b:34:19:b2:8a:2e:4e:72:95:6e:75:2d:75:72:98:f9:0f:fb: d0:66:a5:24:32:f2:ce:0b:54:75:c2:22:84:2e:9d:50:b1:ff: 0b:43:f5:9c:f3:31:60:9e:90:c1:9d:f2:ce:67:a8:3f:8d:88: 12:73:3e:ad:5d:8e:66:29:68:b1:46:a9:34:bb:13:83:a2:e2: 6d:a3:c1:09:bc:7d:cb:2b:fc:e9:c1:15:b0:c3:cd:26:7e:3f: 5a:5a:4b:22 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAtMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEYzNDkxMTAvBgNVBAUTKDREOTQ0RjMwQjhDNkU2OTE5ODhEMzAyRkJBNkMyRjlD NTc0QzA0QjAwHhcNMjUwNjE1MDEwNDUwWhcNMjUwNjIyMDEwNDUwWjAYMRYwFAYD VQQDEw02ODRlMWMzMy1jODUyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3heW9GJh/iLvIzyP88TTdHUfJsHZ3YC7w9JYSPA6TSxbn039iNc5ZNauH5Ms 6B7YZvx64V4ky2XbhxLABLrKZtCIxYdrFFsyEsVbosWoEpD6iz0vT9vQ0utXB8pI 3HHmaNNqS1RVEuh1Ca4qxbQ0zjDTUJk8fU3lq2SD/O0c4H1qjjEHSFGaagy16Kkh 7kbTkznYDN0Z9zjoFln/F3ttq20dilmBevzPzp1v6Vlj9a9PPgzvbKGDNjdA48V2 Jt3Iy4+zI2cDzo2rkI2NooBhDGPr63aeFL0+hI+Crqg+/MS78tZWna2AQsiYt1K/ wLxCey1+8AYJGXdO4qzMxNLiYwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHANIWRW 87nrt6c7Z0R+H+ZYMZrhMB8GA1UdIwQYMBaAFE2UTzC4xuaRmI0wL7psL5xXTASw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RjM0OS9DNkY1MDAxQUVE QjExMUVDQUY0MzVDNURDNEY5QUUwMi9UWlJQTUxqRzVwR1lqVEF2dW13dm5GZE1C TEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1RaUlBNTGpHNXBHWWpUQXZ1bXd2bkZkTUJMQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 RjM0OS9DNkY1MDAxQUVEQjExMUVDQUY0MzVDNURDNEY5QUUwMi9UWlJQTUxqRzVw R1lqVEF2dW13dm5GZE1CTEEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAtgi+UKwTyp+FSTjtYw4yvnWWlt22tFnVd4Jr9b+TFV9epLkunp6WG Rm3DoyTfdC7UT940B3CX7B2EqzH5hCVJRab5HeqnWliGsMPtC7e7GsYysEO94Qvj ac1PuH6A4lkC3Zg/audkufBpc9m8BNE8733h1xtl/bK7I3qyPzBXoB9Yps7zK0iD aLxQOV5X6zor5zX0K1RrDKpb5zpSlgbVIGybNBmyii5OcpVudS11cpj5D/vQZqUk MvLOC1R1wiKELp1Qsf8LQ/Wc8zFgnpDBnfLOZ6g/jYgScz6tXY5mKWixRqk0uxOD ouJto8EJvH3LK/zpwRWww80mfj9aWksi -----END CERTIFICATE-----Generated at Sun Jun 15 09:40:34 2025 by rpki-client