$ rpki-client -vvf rpki.apnic.net/member_repository/A914FE53/80B228F8FBDD11EE8984ED30C4F9AE02/TzGZCs_Vnb42pwwFIEtDuSlvU2w.mft File: TzGZCs_Vnb42pwwFIEtDuSlvU2w.mft (raw, json) Hash identifier: AriHEG+ZsDtR4zEvE2PIJFOiDH7uUNJema4DdqTwxK0= Subject key identifier: 7A:47:3A:12:16:CA:5F:3A:2B:D2:FA:DC:57:74:F4:5E:DB:14:57:08 Authority key identifier: 4F:31:99:0A:CF:D5:9D:BE:36:A7:0C:05:20:4B:43:B9:29:6F:53:6C Certificate issuer: /CN=A914FE53/serialNumber=4F31990ACFD59DBE36A70C05204B43B9296F536C Certificate serial: DD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TzGZCs_Vnb42pwwFIEtDuSlvU2w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914FE53/80B228F8FBDD11EE8984ED30C4F9AE02/TzGZCs_Vnb42pwwFIEtDuSlvU2w.mft Manifest number: D9 Signing time: Sun 15 Jun 2025 04:41:01 +0000 Manifest this update: Sun 15 Jun 2025 04:41:01 +0000 Manifest next update: Sun 22 Jun 2025 04:41:01 +0000 Files and hashes: 1: TzGZCs_Vnb42pwwFIEtDuSlvU2w.crl (hash: 4w5WK/3DFqLYPKQPgjOFjBNRstynjIkQRviULba6sqA=) 2: E3F7E3DAFBDD11EE8914AD31C4F9AE02.roa (hash: DdKCynIF2QkHo2PO8684k4cU1Szr4+DYT4h1WAaKo1Y=) 3: E387F700FBDD11EE8914AD31C4F9AE02.roa (hash: oQGf8UeNLRAoFQkfiIvmUxfekUFi9chn7l63adDoD3s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914FE53/80B228F8FBDD11EE8984ED30C4F9AE02/TzGZCs_Vnb42pwwFIEtDuSlvU2w.crl rsync://rpki.apnic.net/member_repository/A914FE53/80B228F8FBDD11EE8984ED30C4F9AE02/TzGZCs_Vnb42pwwFIEtDuSlvU2w.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TzGZCs_Vnb42pwwFIEtDuSlvU2w.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 22 Jun 2025 02:50:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 221 (0xdd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914FE53, serialNumber=4F31990ACFD59DBE36A70C05204B43B9296F536C Validity Not Before: Jun 15 04:41:01 2025 GMT Not After : Jun 22 04:41:01 2025 GMT Subject: CN=684e4edd-d7dc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:79:45:92:82:a1:28:de:cf:37:aa:bf:1b:10: 4a:2d:be:ac:0e:e9:2f:cb:9e:c4:07:c6:6e:18:0c: f2:e7:d1:9a:32:5a:74:3d:64:09:37:3a:57:c3:69: bf:0f:c8:5a:9a:28:52:b3:07:e3:21:10:5d:92:95: ca:61:2c:6f:e8:61:28:ca:cc:ca:12:1c:52:22:54: c8:a5:4f:0e:4b:32:d1:b1:a7:36:fb:04:05:17:76: 7a:1a:94:25:bc:22:8b:a9:aa:3b:90:43:6e:14:7d: b2:06:67:a9:47:e0:dd:1c:f9:19:1e:8e:ce:02:d4: 95:84:c4:59:2f:17:41:96:97:19:bf:ec:72:42:a1: cb:da:5a:4b:d2:c9:f8:4a:24:f3:50:2b:3b:a8:01: ce:c0:51:55:11:fe:1c:e5:76:f9:ea:95:ae:25:cc: c5:23:43:4b:0f:0d:4e:9f:bf:ca:b8:ac:3c:77:c0: 8e:19:c0:56:b9:c0:8d:61:2f:46:fd:b8:a5:a9:b8: 36:f0:96:3c:29:b7:f1:2d:52:85:10:ca:46:be:35: b5:1b:a0:95:ef:0e:8c:bf:01:4d:44:d0:28:e7:27: d8:00:8f:1e:d5:d5:03:f1:4f:0c:ba:08:d7:8c:36: d8:10:5c:8b:71:60:fa:82:fe:8f:a0:17:90:58:dd: c2:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:47:3A:12:16:CA:5F:3A:2B:D2:FA:DC:57:74:F4:5E:DB:14:57:08 X509v3 Authority Key Identifier: keyid:4F:31:99:0A:CF:D5:9D:BE:36:A7:0C:05:20:4B:43:B9:29:6F:53:6C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914FE53/80B228F8FBDD11EE8984ED30C4F9AE02/TzGZCs_Vnb42pwwFIEtDuSlvU2w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TzGZCs_Vnb42pwwFIEtDuSlvU2w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914FE53/80B228F8FBDD11EE8984ED30C4F9AE02/TzGZCs_Vnb42pwwFIEtDuSlvU2w.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 34:e0:f0:ac:fa:b7:1a:8d:93:0f:34:85:5e:e8:db:de:72:f5: 3e:2c:b8:95:3c:54:a2:31:dd:13:4e:56:ae:04:27:a2:fe:78: 12:73:c9:e6:b1:2c:91:11:ab:46:76:5f:39:59:f2:c2:70:d0: e0:4b:52:7b:f2:c0:17:d7:e5:db:a2:66:ce:d7:8a:46:8b:fc: 72:51:bb:b1:63:c0:f9:62:93:95:ba:b7:a5:60:8e:a8:c5:b1: 5b:78:c2:18:4c:58:74:31:d3:e6:73:9b:f5:99:f9:e7:50:8e: 37:75:b7:04:d8:b5:7e:0c:7e:9c:54:4f:93:a2:32:cc:d1:fe: 83:e5:65:c1:7c:7a:49:4a:f3:13:b4:4e:7d:b5:fb:6d:57:bd: 70:96:cd:f1:82:ca:24:06:d4:8a:3e:66:ed:a2:f1:92:e5:2d: 8e:11:89:75:24:65:5f:c1:e7:fc:42:35:1e:d1:c3:d2:b1:8b: 5a:13:74:0d:a8:6a:f0:31:0e:a9:aa:7a:0f:02:ed:b6:cb:36: 63:c7:61:f2:b9:d4:13:08:4c:f6:61:d2:43:5e:cd:86:2f:a6: 5b:bf:8f:12:d7:66:ff:9d:2d:8a:25:16:64:4f:e2:07:fc:11: c8:c1:1c:02:b1:1c:f8:9a:5b:01:77:79:a9:41:ff:11:65:4b: 62:26:e0:58 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAN0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEZFNTMxMTAvBgNVBAUTKDRGMzE5OTBBQ0ZENTlEQkUzNkE3MEMwNTIwNEI0M0I5 Mjk2RjUzNkMwHhcNMjUwNjE1MDQ0MTAxWhcNMjUwNjIyMDQ0MTAxWjAYMRYwFAYD VQQDEw02ODRlNGVkZC1kN2RjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoHlFkoKhKN7PN6q/GxBKLb6sDukvy57EB8ZuGAzy59GaMlp0PWQJNzpXw2m/ D8hamihSswfjIRBdkpXKYSxv6GEoyszKEhxSIlTIpU8OSzLRsac2+wQFF3Z6GpQl vCKLqao7kENuFH2yBmepR+DdHPkZHo7OAtSVhMRZLxdBlpcZv+xyQqHL2lpL0sn4 SiTzUCs7qAHOwFFVEf4c5Xb56pWuJczFI0NLDw1On7/KuKw8d8COGcBWucCNYS9G /bilqbg28JY8KbfxLVKFEMpGvjW1G6CV7w6MvwFNRNAo5yfYAI8e1dUD8U8MugjX jDbYEFyLcWD6gv6PoBeQWN3CgwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHpHOhIW yl86K9L63Fd09F7bFFcIMB8GA1UdIwQYMBaAFE8xmQrP1Z2+NqcMBSBLQ7kpb1Ns MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RkU1My84MEIyMjhGOEZC REQxMUVFODk4NEVEMzBDNEY5QUUwMi9UekdaQ3NfVm5iNDJwd3dGSUV0RHVTbHZV MncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1R6R1pDc19WbmI0MnB3d0ZJRXREdVNsdlUydy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 RkU1My84MEIyMjhGOEZCREQxMUVFODk4NEVEMzBDNEY5QUUwMi9UekdaQ3NfVm5i NDJwd3dGSUV0RHVTbHZVMncubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA04PCs+rcajZMPNIVe6NvecvU+LLiVPFSiMd0TTlauBCei/ngSc8nm sSyREatGdl85WfLCcNDgS1J78sAX1+XbombO14pGi/xyUbuxY8D5YpOVurelYI6o xbFbeMIYTFh0MdPmc5v1mfnnUI43dbcE2LV+DH6cVE+TojLM0f6D5WXBfHpJSvMT tE59tfttV71wls3xgsokBtSKPmbtovGS5S2OEYl1JGVfwef8QjUe0cPSsYtaE3QN qGrwMQ6pqnoPAu22yzZjx2HyudQTCEz2YdJDXs2GL6Zbv48S12b/nS2KJRZkT+IH /BHIwRwCsRz4mlsBd3mpQf8RZUtiJuBY -----END CERTIFICATE-----Generated at Sun Jun 15 09:36:04 2025 by rpki-client