$ rpki-client -vvf rpki.apnic.net/member_repository/A914FE53/80B228F8FBDD11EE8984ED30C4F9AE02/TzGZCs_Vnb42pwwFIEtDuSlvU2w.mft File: TzGZCs_Vnb42pwwFIEtDuSlvU2w.mft (raw, json) Hash identifier: OF/7xXjQl5I0hgnpF3ROtDgG1/2iMWGbD/6httxXbEA= Subject key identifier: 2B:90:09:13:06:C1:D8:B7:E7:62:7F:4A:DA:71:2D:1E:DF:E7:9D:59 Authority key identifier: 4F:31:99:0A:CF:D5:9D:BE:36:A7:0C:05:20:4B:43:B9:29:6F:53:6C Certificate issuer: /CN=A914FE53/serialNumber=4F31990ACFD59DBE36A70C05204B43B9296F536C Certificate serial: C4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TzGZCs_Vnb42pwwFIEtDuSlvU2w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914FE53/80B228F8FBDD11EE8984ED30C4F9AE02/TzGZCs_Vnb42pwwFIEtDuSlvU2w.mft Manifest number: C0 Signing time: Fri 25 Apr 2025 04:52:41 +0000 Manifest this update: Fri 25 Apr 2025 04:52:40 +0000 Manifest next update: Fri 02 May 2025 04:52:40 +0000 Files and hashes: 1: TzGZCs_Vnb42pwwFIEtDuSlvU2w.crl (hash: SRJ644k63U3b2p3+tTudpUySHE1EqJnLkMvmqk2FzSw=) 2: E3F7E3DAFBDD11EE8914AD31C4F9AE02.roa (hash: DdKCynIF2QkHo2PO8684k4cU1Szr4+DYT4h1WAaKo1Y=) 3: E387F700FBDD11EE8914AD31C4F9AE02.roa (hash: oQGf8UeNLRAoFQkfiIvmUxfekUFi9chn7l63adDoD3s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914FE53/80B228F8FBDD11EE8984ED30C4F9AE02/TzGZCs_Vnb42pwwFIEtDuSlvU2w.crl rsync://rpki.apnic.net/member_repository/A914FE53/80B228F8FBDD11EE8984ED30C4F9AE02/TzGZCs_Vnb42pwwFIEtDuSlvU2w.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TzGZCs_Vnb42pwwFIEtDuSlvU2w.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 04:52:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 196 (0xc4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914FE53, serialNumber=4F31990ACFD59DBE36A70C05204B43B9296F536C Validity Not Before: Apr 25 04:52:40 2025 GMT Not After : May 2 04:52:40 2025 GMT Subject: CN=680b1519-b9c1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:80:f1:81:bb:3e:22:67:48:1f:9c:b4:ba:1e: 9b:6f:d4:93:e7:fc:9f:89:35:12:12:ef:54:8b:04: 51:d1:97:b9:2c:5b:6c:de:be:32:a2:65:bd:9d:b5: eb:d0:ef:85:2b:be:97:be:7e:4b:df:22:16:35:01: 17:13:0c:ea:05:94:bf:eb:cf:79:79:71:51:f7:86: 7b:86:f2:ed:43:93:b3:8e:14:2b:77:e6:ac:b7:b3: c6:f5:54:bc:8d:d5:c0:94:5b:e8:94:90:ad:ec:61: 9f:6b:54:28:0d:0a:44:68:8b:a1:39:b9:e2:d6:00: 50:d8:24:c9:48:0c:cb:5a:89:3e:52:87:d7:b6:5e: a1:b1:1b:4b:6a:20:c2:54:0d:f5:2a:a1:8d:de:ff: 0d:ee:55:c1:d7:a3:86:2e:c9:0c:1a:19:6a:72:94: 44:57:94:6b:d9:fc:05:a6:f1:4a:e6:ea:2f:d1:e8: 05:fd:b0:a1:dd:aa:ee:34:ab:03:bb:bd:b1:eb:a4: 7f:28:57:a5:80:ff:01:e5:e2:51:9f:f1:a7:3d:15: da:ae:70:bd:22:72:61:cd:7f:78:a3:48:6e:a8:ae: eb:fe:f9:42:a3:ed:91:fc:fb:46:c1:dc:e2:13:9b: 3b:9f:79:49:83:1a:12:38:58:e8:1a:97:c4:ae:3c: 08:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:90:09:13:06:C1:D8:B7:E7:62:7F:4A:DA:71:2D:1E:DF:E7:9D:59 X509v3 Authority Key Identifier: keyid:4F:31:99:0A:CF:D5:9D:BE:36:A7:0C:05:20:4B:43:B9:29:6F:53:6C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914FE53/80B228F8FBDD11EE8984ED30C4F9AE02/TzGZCs_Vnb42pwwFIEtDuSlvU2w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TzGZCs_Vnb42pwwFIEtDuSlvU2w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914FE53/80B228F8FBDD11EE8984ED30C4F9AE02/TzGZCs_Vnb42pwwFIEtDuSlvU2w.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 11:34:2a:06:b3:56:65:0a:d6:f2:f1:58:46:9b:89:0a:2b:da: 81:f6:a1:ea:cc:77:d7:a8:64:cc:da:8b:e9:1d:7a:5b:77:a9: a9:34:a1:28:cb:3b:ce:a9:f9:bb:db:cc:f0:ca:ed:d3:4e:c1: 37:a6:8e:3b:8b:7b:ca:06:58:28:ca:d5:0d:0b:b1:e1:ab:f6: b7:70:3c:b2:db:2a:8c:35:65:91:30:ac:9e:3b:08:72:d5:41: c3:4e:e0:9b:50:e5:46:f9:b1:bd:68:ed:93:1d:6f:ee:1a:34: e1:64:29:d3:64:58:a7:3f:fe:5f:be:51:bc:f7:c4:25:ac:6e: 80:be:fe:26:fa:4e:99:e0:a8:58:3c:93:71:10:33:f9:37:49: f5:82:9a:06:b6:fe:63:a1:db:38:ba:60:6a:84:c6:93:26:ab: 06:f3:27:9f:31:83:30:45:1a:dd:aa:06:35:3b:6d:65:b4:15: 4a:35:94:8e:d3:23:69:35:3c:64:ba:82:94:8c:49:c6:d3:53: 24:f4:9f:96:a8:1d:60:ad:a1:5b:4d:d1:1a:88:cc:3c:49:ba: 91:a4:62:ef:e4:f0:b0:89:2b:97:aa:90:f3:94:04:4b:ed:8e: 4e:cb:24:3c:83:dd:31:11:90:8b:39:64:46:a0:bf:2d:85:5e: 9e:d3:19:9c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAMQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEZFNTMxMTAvBgNVBAUTKDRGMzE5OTBBQ0ZENTlEQkUzNkE3MEMwNTIwNEI0M0I5 Mjk2RjUzNkMwHhcNMjUwNDI1MDQ1MjQwWhcNMjUwNTAyMDQ1MjQwWjAYMRYwFAYD VQQDEw02ODBiMTUxOS1iOWMxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA14Dxgbs+ImdIH5y0uh6bb9ST5/yfiTUSEu9UiwRR0Ze5LFts3r4yomW9nbXr 0O+FK76Xvn5L3yIWNQEXEwzqBZS/6895eXFR94Z7hvLtQ5OzjhQrd+ast7PG9VS8 jdXAlFvolJCt7GGfa1QoDQpEaIuhObni1gBQ2CTJSAzLWok+UofXtl6hsRtLaiDC VA31KqGN3v8N7lXB16OGLskMGhlqcpREV5Rr2fwFpvFK5uov0egF/bCh3aruNKsD u72x66R/KFelgP8B5eJRn/GnPRXarnC9InJhzX94o0huqK7r/vlCo+2R/PtGwdzi E5s7n3lJgxoSOFjoGpfErjwIQwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCuQCRMG wdi352J/StpxLR7f551ZMB8GA1UdIwQYMBaAFE8xmQrP1Z2+NqcMBSBLQ7kpb1Ns MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RkU1My84MEIyMjhGOEZC REQxMUVFODk4NEVEMzBDNEY5QUUwMi9UekdaQ3NfVm5iNDJwd3dGSUV0RHVTbHZV MncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1R6R1pDc19WbmI0MnB3d0ZJRXREdVNsdlUydy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 RkU1My84MEIyMjhGOEZCREQxMUVFODk4NEVEMzBDNEY5QUUwMi9UekdaQ3NfVm5i NDJwd3dGSUV0RHVTbHZVMncubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQARNCoGs1ZlCtby8VhGm4kKK9qB9qHqzHfXqGTM2ovpHXpbd6mpNKEo yzvOqfm728zwyu3TTsE3po47i3vKBlgoytUNC7Hhq/a3cDyy2yqMNWWRMKyeOwhy 1UHDTuCbUOVG+bG9aO2THW/uGjThZCnTZFinP/5fvlG898QlrG6Avv4m+k6Z4KhY PJNxEDP5N0n1gpoGtv5jods4umBqhMaTJqsG8yefMYMwRRrdqgY1O21ltBVKNZSO 0yNpNTxkuoKUjEnG01Mk9J+WqB1graFbTdEaiMw8SbqRpGLv5PCwiSuXqpDzlARL 7Y5OyyQ8g90xEZCLOWRGoL8thV6e0xmc -----END CERTIFICATE-----Generated at Sat Apr 26 04:30:44 2025 by rpki-client