$ rpki-client -vvf rpki.apnic.net/member_repository/A91522E0/C9B90FF8468811EAACF18A28C4F9AE02/TzLs_4zUbD7AP6deEAj0qpoM-JM.mft File: TzLs_4zUbD7AP6deEAj0qpoM-JM.mft (raw, json) Hash identifier: RNTSeHKt3fyhpktdiFJ74kbXNIpzzU3GmrdpJtcZE5Q= Subject key identifier: C6:C7:18:8D:15:9F:20:E5:B0:6D:6A:51:C9:B8:DB:F2:2A:D6:04:76 Authority key identifier: 4F:32:EC:FF:8C:D4:6C:3E:C0:3F:A7:5E:10:08:F4:AA:9A:0C:F8:93 Certificate issuer: /CN=A91522E0/serialNumber=4F32ECFF8CD46C3EC03FA75E1008F4AA9A0CF893 Certificate serial: 0B03 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TzLs_4zUbD7AP6deEAj0qpoM-JM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91522E0/C9B90FF8468811EAACF18A28C4F9AE02/TzLs_4zUbD7AP6deEAj0qpoM-JM.mft Manifest number: 0AEF Signing time: Thu 24 Apr 2025 19:18:08 +0000 Manifest this update: Thu 24 Apr 2025 19:18:07 +0000 Manifest next update: Thu 01 May 2025 19:18:07 +0000 Files and hashes: 1: TzLs_4zUbD7AP6deEAj0qpoM-JM.crl (hash: llSMZ1E9CEbJzsniBDNSePB6tNNYTJJBBN/PuydOjuo=) 2: B34C91C4B14311EF8479AA21C4F9AE02.roa (hash: zX8SsdngBGocfr0PjyPYjkXeGxhOELPXVhgI6hsEekQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91522E0/C9B90FF8468811EAACF18A28C4F9AE02/TzLs_4zUbD7AP6deEAj0qpoM-JM.crl rsync://rpki.apnic.net/member_repository/A91522E0/C9B90FF8468811EAACF18A28C4F9AE02/TzLs_4zUbD7AP6deEAj0qpoM-JM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TzLs_4zUbD7AP6deEAj0qpoM-JM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 19:18:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2819 (0xb03) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91522E0, serialNumber=4F32ECFF8CD46C3EC03FA75E1008F4AA9A0CF893 Validity Not Before: Apr 24 19:18:07 2025 GMT Not After : May 1 19:18:07 2025 GMT Subject: CN=680a8e6f-f762 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:46:2a:26:13:dd:60:ae:3b:70:9e:6e:f4:2a: 3f:9e:4e:05:5f:26:cf:9b:48:43:57:0c:08:56:96: 87:6e:a3:5d:fd:55:e8:fa:34:20:7e:ad:b1:a5:4d: c5:92:be:8e:9f:ce:97:08:d0:b7:04:bc:55:28:74: 2d:66:e0:a6:7b:05:2d:e4:48:30:3b:e5:07:a1:49: 8c:b5:41:e6:e7:b8:80:2c:57:b2:f7:4b:db:ff:05: 5d:1c:d0:10:a2:a1:57:7c:0a:ec:8d:c2:43:d9:69: b8:ec:8f:a4:43:ec:cf:39:a0:c2:fb:d7:80:92:8e: 5d:30:d5:6d:ac:b9:5c:c7:66:0c:6c:21:72:3a:ad: 66:a8:7e:76:3f:4e:ce:ad:af:8b:aa:16:19:56:68: d8:aa:c2:fe:51:41:83:f2:dd:f4:97:ad:69:ba:07: 8c:9d:3d:1d:92:b4:2d:b6:69:4b:55:76:b8:6c:b6: fb:3a:b4:c5:60:dd:e1:b0:73:83:a9:9e:19:67:04: c7:be:b4:cf:c7:93:c9:6a:a4:2d:57:d0:e2:76:56: 06:2b:06:75:3e:f3:72:b6:58:40:e7:44:fe:de:45: 19:17:4a:0e:c5:0b:fc:a8:36:51:58:bd:17:c9:d3: 35:83:0f:40:47:d4:b4:ea:c8:84:56:02:7f:92:bd: 4c:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:C7:18:8D:15:9F:20:E5:B0:6D:6A:51:C9:B8:DB:F2:2A:D6:04:76 X509v3 Authority Key Identifier: keyid:4F:32:EC:FF:8C:D4:6C:3E:C0:3F:A7:5E:10:08:F4:AA:9A:0C:F8:93 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91522E0/C9B90FF8468811EAACF18A28C4F9AE02/TzLs_4zUbD7AP6deEAj0qpoM-JM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TzLs_4zUbD7AP6deEAj0qpoM-JM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91522E0/C9B90FF8468811EAACF18A28C4F9AE02/TzLs_4zUbD7AP6deEAj0qpoM-JM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 82:84:b5:69:50:75:f2:5a:ec:db:d4:a0:b1:42:99:c8:3b:1a: 2d:d2:74:e0:ff:c9:8e:50:3b:80:66:ba:06:96:fc:4f:57:7d: 20:e7:9e:1a:f5:78:02:38:35:a1:8c:33:12:41:cd:f5:d0:c8: 38:f1:9e:47:5c:19:ff:0d:c9:48:63:f2:79:9c:d2:19:a6:88: 35:90:46:4f:bb:3f:35:8d:ce:b7:d9:ca:5e:69:0d:57:1a:9f: 05:c1:42:7e:eb:86:99:b6:20:3b:af:e5:b9:df:fe:cc:4e:41: de:9c:c4:37:4b:d0:72:ae:f9:cf:80:14:7d:d0:5e:1b:67:39: 12:14:ef:bb:ed:94:60:40:00:54:70:bf:51:7b:0c:d0:f2:32: ab:c5:9d:39:c5:1d:d3:66:14:cc:06:2e:54:e0:48:55:62:6a: 8b:eb:61:d2:a8:4f:77:4b:13:1c:9c:f6:e0:fc:b4:9a:b4:e1: f8:68:c2:ab:5a:13:c7:1e:d3:bc:e9:50:b0:60:01:ed:8f:92: c5:3b:99:6e:04:50:6b:00:ea:ce:f1:b3:9c:d7:80:74:70:94: d8:e0:79:91:04:a9:3c:84:0c:c5:70:43:f5:f8:52:88:a3:ba: 21:f0:c4:11:7d:f9:9e:6b:e4:81:f3:fc:16:e6:3e:20:60:f9: 00:20:e9:20 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCwMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTIyRTAxMTAvBgNVBAUTKDRGMzJFQ0ZGOENENDZDM0VDMDNGQTc1RTEwMDhGNEFB OUEwQ0Y4OTMwHhcNMjUwNDI0MTkxODA3WhcNMjUwNTAxMTkxODA3WjAYMRYwFAYD VQQDEw02ODBhOGU2Zi1mNzYyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3UYqJhPdYK47cJ5u9Co/nk4FXybPm0hDVwwIVpaHbqNd/VXo+jQgfq2xpU3F kr6On86XCNC3BLxVKHQtZuCmewUt5EgwO+UHoUmMtUHm57iALFey90vb/wVdHNAQ oqFXfArsjcJD2Wm47I+kQ+zPOaDC+9eAko5dMNVtrLlcx2YMbCFyOq1mqH52P07O ra+LqhYZVmjYqsL+UUGD8t30l61pugeMnT0dkrQttmlLVXa4bLb7OrTFYN3hsHOD qZ4ZZwTHvrTPx5PJaqQtV9DidlYGKwZ1PvNytlhA50T+3kUZF0oOxQv8qDZRWL0X ydM1gw9AR9S06siEVgJ/kr1MmwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMbHGI0V nyDlsG1qUcm42/Iq1gR2MB8GA1UdIwQYMBaAFE8y7P+M1Gw+wD+nXhAI9KqaDPiT MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MjJFMC9DOUI5MEZGODQ2 ODgxMUVBQUNGMThBMjhDNEY5QUUwMi9UekxzXzR6VWJEN0FQNmRlRUFqMHFwb00t Sk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1R6THNfNHpVYkQ3QVA2ZGVFQWowcXBvTS1KTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MjJFMC9DOUI5MEZGODQ2ODgxMUVBQUNGMThBMjhDNEY5QUUwMi9UekxzXzR6VWJE N0FQNmRlRUFqMHFwb00tSk0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCChLVpUHXyWuzb1KCxQpnIOxot0nTg/8mOUDuAZroGlvxPV30g554a 9XgCODWhjDMSQc310Mg48Z5HXBn/DclIY/J5nNIZpog1kEZPuz81jc632cpeaQ1X Gp8FwUJ+64aZtiA7r+W53/7MTkHenMQ3S9ByrvnPgBR90F4bZzkSFO+77ZRgQABU cL9RewzQ8jKrxZ05xR3TZhTMBi5U4EhVYmqL62HSqE93SxMcnPbg/LSatOH4aMKr WhPHHtO86VCwYAHtj5LFO5luBFBrAOrO8bOc14B0cJTY4HmRBKk8hAzFcEP1+FKI o7oh8MQRffmea+SB8/wW5j4gYPkAIOkg -----END CERTIFICATE-----Generated at Sat Apr 26 12:58:40 2025 by rpki-client