$ rpki-client -vvf rpki.apnic.net/member_repository/A91522E0/C9B90FF8468811EAACF18A28C4F9AE02/TzLs_4zUbD7AP6deEAj0qpoM-JM.mft File: TzLs_4zUbD7AP6deEAj0qpoM-JM.mft (raw, json) Hash identifier: 2OfAwBr4vL72+4mqmPpg2JvU/iukUTO7XOISPO/chos= Subject key identifier: E8:86:F0:26:B9:13:C2:1B:70:EE:4D:94:54:BF:5D:6C:D5:B2:6B:2B Authority key identifier: 4F:32:EC:FF:8C:D4:6C:3E:C0:3F:A7:5E:10:08:F4:AA:9A:0C:F8:93 Certificate issuer: /CN=A91522E0/serialNumber=4F32ECFF8CD46C3EC03FA75E1008F4AA9A0CF893 Certificate serial: 0B37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TzLs_4zUbD7AP6deEAj0qpoM-JM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91522E0/C9B90FF8468811EAACF18A28C4F9AE02/TzLs_4zUbD7AP6deEAj0qpoM-JM.mft Manifest number: 0B23 Signing time: Wed 06 Aug 2025 19:34:41 +0000 Manifest this update: Wed 06 Aug 2025 19:34:40 +0000 Manifest next update: Wed 13 Aug 2025 19:34:40 +0000 Files and hashes: 1: TzLs_4zUbD7AP6deEAj0qpoM-JM.crl (hash: sxJ0WnSTkkdiN7Kgh0z8QRvtFGZfw+dxVFEVUcQOCpU=) 2: B34C91C4B14311EF8479AA21C4F9AE02.roa (hash: zX8SsdngBGocfr0PjyPYjkXeGxhOELPXVhgI6hsEekQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91522E0/C9B90FF8468811EAACF18A28C4F9AE02/TzLs_4zUbD7AP6deEAj0qpoM-JM.crl rsync://rpki.apnic.net/member_repository/A91522E0/C9B90FF8468811EAACF18A28C4F9AE02/TzLs_4zUbD7AP6deEAj0qpoM-JM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TzLs_4zUbD7AP6deEAj0qpoM-JM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 Aug 2025 19:34:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2871 (0xb37) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91522E0, serialNumber=4F32ECFF8CD46C3EC03FA75E1008F4AA9A0CF893 Validity Not Before: Aug 6 19:34:40 2025 GMT Not After : Aug 13 19:34:40 2025 GMT Subject: CN=6893ae50-c0e5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:ed:60:84:06:5a:97:e7:c7:57:1b:15:a7:7c: 44:4a:3e:6b:6d:1c:ab:e0:53:f5:84:9a:cc:e9:d4: 62:8b:8c:ae:83:b6:e9:be:e9:34:f1:fe:56:6b:04: 61:26:db:20:f7:c5:87:86:3e:4c:aa:12:85:00:8c: 62:ef:7d:1f:ec:cb:03:da:67:b1:6c:63:54:c4:a2: 7e:fe:58:65:7d:95:f5:cb:89:3b:92:64:ae:57:40: 60:da:2b:2f:bb:65:3e:0e:1a:05:5d:3c:15:a6:f5: 37:d5:0c:d2:30:dd:2c:96:b5:57:c7:2c:ab:94:4e: ee:8c:a4:50:cb:d9:aa:21:6c:d7:95:a1:46:36:15: ea:8d:2c:a2:12:ea:cc:0a:11:77:0b:f2:40:3a:ce: d5:dc:7d:ae:cd:b9:9f:e9:be:0f:62:bd:c2:09:05: 94:c7:1b:53:c6:1d:31:73:c9:89:15:49:52:c0:e9: 7b:1f:27:dc:c6:fd:7a:2b:26:f9:66:d8:4f:7e:28: 5f:53:b6:f4:1d:8d:c4:1b:1f:f2:73:ea:41:57:07: c3:68:69:82:2b:96:0a:39:99:a6:f0:e5:a5:0d:45: 44:d8:b2:68:7a:ec:c4:b0:22:33:3b:99:2b:a1:6a: 97:ea:1f:aa:1c:a8:c2:43:80:82:26:24:72:1b:99: 50:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:86:F0:26:B9:13:C2:1B:70:EE:4D:94:54:BF:5D:6C:D5:B2:6B:2B X509v3 Authority Key Identifier: keyid:4F:32:EC:FF:8C:D4:6C:3E:C0:3F:A7:5E:10:08:F4:AA:9A:0C:F8:93 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91522E0/C9B90FF8468811EAACF18A28C4F9AE02/TzLs_4zUbD7AP6deEAj0qpoM-JM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TzLs_4zUbD7AP6deEAj0qpoM-JM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91522E0/C9B90FF8468811EAACF18A28C4F9AE02/TzLs_4zUbD7AP6deEAj0qpoM-JM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 81:39:45:af:da:75:1a:92:73:e3:9a:bb:a7:f6:95:53:24:01: 4a:28:a5:34:71:3e:11:11:d7:e4:94:6e:b0:8e:b7:35:ea:84: d4:35:24:03:e1:da:c8:67:3d:dd:a5:d8:45:53:e8:4c:39:8b: a1:11:79:5f:32:9d:7a:ea:15:0e:c9:03:2d:ac:21:e3:f2:73: 83:10:c3:72:36:65:47:e4:14:38:fa:ef:05:66:41:6d:09:ae: 2e:d3:55:41:52:ed:36:e4:46:70:c3:72:30:76:c0:5e:c6:be: da:b9:13:21:7a:c7:de:a6:82:49:64:06:e6:42:88:b6:00:9f: 17:09:72:a5:2f:6b:1b:7a:f0:8a:27:6e:a3:87:68:86:60:dc: 7d:d9:93:4f:70:4d:34:e7:c5:63:08:16:d0:f4:46:9b:5f:42: 4f:c7:a9:8e:e9:dd:1e:ad:13:3c:90:5f:b6:42:8d:7e:76:ac: c0:72:6b:ec:d3:bc:b5:7c:a6:3e:9f:f4:43:fd:db:3e:8f:a3: 1a:54:03:79:7f:c5:27:bc:de:de:85:ed:bc:a3:80:cb:07:e9: 81:21:13:3d:3e:b4:3a:9e:25:b9:7d:13:36:e1:e1:cd:9a:4c: 82:e1:89:b9:39:92:83:68:e5:05:c4:d6:85:4d:c2:a2:42:90: 01:d4:8b:08 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCzcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTIyRTAxMTAvBgNVBAUTKDRGMzJFQ0ZGOENENDZDM0VDMDNGQTc1RTEwMDhGNEFB OUEwQ0Y4OTMwHhcNMjUwODA2MTkzNDQwWhcNMjUwODEzMTkzNDQwWjAYMRYwFAYD VQQDEw02ODkzYWU1MC1jMGU1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyu1ghAZal+fHVxsVp3xESj5rbRyr4FP1hJrM6dRii4yug7bpvuk08f5WawRh Jtsg98WHhj5MqhKFAIxi730f7MsD2mexbGNUxKJ+/lhlfZX1y4k7kmSuV0Bg2isv u2U+DhoFXTwVpvU31QzSMN0slrVXxyyrlE7ujKRQy9mqIWzXlaFGNhXqjSyiEurM ChF3C/JAOs7V3H2uzbmf6b4PYr3CCQWUxxtTxh0xc8mJFUlSwOl7Hyfcxv16Kyb5 ZthPfihfU7b0HY3EGx/yc+pBVwfDaGmCK5YKOZmm8OWlDUVE2LJoeuzEsCIzO5kr oWqX6h+qHKjCQ4CCJiRyG5lQ+QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOiG8Ca5 E8IbcO5NlFS/XWzVsmsrMB8GA1UdIwQYMBaAFE8y7P+M1Gw+wD+nXhAI9KqaDPiT MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MjJFMC9DOUI5MEZGODQ2 ODgxMUVBQUNGMThBMjhDNEY5QUUwMi9UekxzXzR6VWJEN0FQNmRlRUFqMHFwb00t Sk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1R6THNfNHpVYkQ3QVA2ZGVFQWowcXBvTS1KTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MjJFMC9DOUI5MEZGODQ2ODgxMUVBQUNGMThBMjhDNEY5QUUwMi9UekxzXzR6VWJE N0FQNmRlRUFqMHFwb00tSk0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCBOUWv2nUaknPjmrun9pVTJAFKKKU0cT4REdfklG6wjrc16oTUNSQD 4drIZz3dpdhFU+hMOYuhEXlfMp166hUOyQMtrCHj8nODEMNyNmVH5BQ4+u8FZkFt Ca4u01VBUu025EZww3IwdsBexr7auRMhesfepoJJZAbmQoi2AJ8XCXKlL2sbevCK J26jh2iGYNx92ZNPcE0058VjCBbQ9EabX0JPx6mO6d0erRM8kF+2Qo1+dqzAcmvs 07y1fKY+n/RD/ds+j6MaVAN5f8UnvN7ehe28o4DLB+mBIRM9PrQ6niW5fRM24eHN mkyC4Ym5OZKDaOUFxNaFTcKiQpAB1IsI -----END CERTIFICATE-----Generated at Fri Aug 8 00:15:51 2025 by rpki-client