$ rpki-client -vvf rpki.apnic.net/member_repository/A91522E0/C9B90FF8468811EAACF18A28C4F9AE02/TzLs_4zUbD7AP6deEAj0qpoM-JM.mft File: TzLs_4zUbD7AP6deEAj0qpoM-JM.mft (raw, json) Hash identifier: +stRzRp32KrYCLkd0BvL3Iai9cfTlD9MR1q2jf/aWQU= Subject key identifier: 09:A6:C9:9C:B0:C3:F6:8E:BD:1C:91:D7:52:C8:D5:30:33:E9:1A:12 Authority key identifier: 4F:32:EC:FF:8C:D4:6C:3E:C0:3F:A7:5E:10:08:F4:AA:9A:0C:F8:93 Certificate issuer: /CN=A91522E0/serialNumber=4F32ECFF8CD46C3EC03FA75E1008F4AA9A0CF893 Certificate serial: 0B65 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TzLs_4zUbD7AP6deEAj0qpoM-JM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91522E0/C9B90FF8468811EAACF18A28C4F9AE02/TzLs_4zUbD7AP6deEAj0qpoM-JM.mft Manifest number: 0B51 Signing time: Tue 04 Nov 2025 19:19:33 +0000 Manifest this update: Tue 04 Nov 2025 19:19:32 +0000 Manifest next update: Tue 11 Nov 2025 19:19:32 +0000 Files and hashes: 1: TzLs_4zUbD7AP6deEAj0qpoM-JM.crl (hash: E+j8sq/K7x1G6KJgVRSun6ZQ6sBVy58nv45nexwyfbQ=) 2: B34C91C4B14311EF8479AA21C4F9AE02.roa (hash: zX8SsdngBGocfr0PjyPYjkXeGxhOELPXVhgI6hsEekQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91522E0/C9B90FF8468811EAACF18A28C4F9AE02/TzLs_4zUbD7AP6deEAj0qpoM-JM.crl rsync://rpki.apnic.net/member_repository/A91522E0/C9B90FF8468811EAACF18A28C4F9AE02/TzLs_4zUbD7AP6deEAj0qpoM-JM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TzLs_4zUbD7AP6deEAj0qpoM-JM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 19:19:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2917 (0xb65) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91522E0, serialNumber=4F32ECFF8CD46C3EC03FA75E1008F4AA9A0CF893 Validity Not Before: Nov 4 19:19:32 2025 GMT Not After : Nov 11 19:19:32 2025 GMT Subject: CN=690a51c5-6a74 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:c9:8a:26:71:d2:06:0e:c9:3d:78:47:d2:db: 24:a2:f7:a2:91:d4:01:96:28:ec:82:c1:d4:fa:f8: b8:81:43:39:17:67:e8:5a:fc:c1:be:43:6b:94:3e: 46:08:5d:6a:14:9a:64:d0:90:bd:79:7a:38:9c:24: bc:ae:6e:1e:53:24:20:b0:dd:41:db:e7:f7:67:ed: e1:fc:7b:2f:f3:78:45:98:81:74:4a:f8:16:51:0b: 8f:3c:ed:e1:b3:d2:62:b3:0a:10:2c:b4:3f:91:82: 57:72:57:12:54:3a:6f:43:d2:e5:ae:46:59:3d:51: 6a:95:bd:dd:fe:e9:bf:88:2a:fe:22:b4:fa:7a:53: 7f:ba:fd:8b:85:98:98:6a:76:d4:81:4f:b0:25:96: f9:e4:3f:3c:74:98:14:41:ee:77:d0:de:43:3b:bc: 10:f2:bd:96:e9:0a:a3:42:57:ee:31:ce:9d:51:28: 21:f0:90:3b:fc:37:bb:68:93:f6:07:2f:a7:9e:71: 8a:82:e8:fd:e9:e1:f5:5f:90:8f:9a:33:35:0e:f3: f1:7b:51:b4:b6:6b:00:05:98:31:e3:66:81:59:d4: dc:68:24:26:af:22:56:49:04:cd:da:4a:ab:7e:ab: 01:72:96:3f:95:c2:62:81:2e:53:26:84:b4:ed:4b: 91:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:A6:C9:9C:B0:C3:F6:8E:BD:1C:91:D7:52:C8:D5:30:33:E9:1A:12 X509v3 Authority Key Identifier: keyid:4F:32:EC:FF:8C:D4:6C:3E:C0:3F:A7:5E:10:08:F4:AA:9A:0C:F8:93 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91522E0/C9B90FF8468811EAACF18A28C4F9AE02/TzLs_4zUbD7AP6deEAj0qpoM-JM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TzLs_4zUbD7AP6deEAj0qpoM-JM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91522E0/C9B90FF8468811EAACF18A28C4F9AE02/TzLs_4zUbD7AP6deEAj0qpoM-JM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption d3:ef:ef:96:4c:a3:5b:f7:f7:51:55:1a:01:82:47:18:a1:fd: 9a:87:67:3d:07:34:52:d9:01:f7:e4:28:d2:0b:70:94:a1:ae: 1e:b9:db:b0:b7:4c:37:8b:c9:6e:8e:2a:e7:8b:36:46:50:5a: 4f:fd:d5:37:58:7a:7d:a6:54:72:a9:93:7c:2b:9b:da:92:de: a6:ef:5f:36:f2:c6:78:f6:ad:4c:ee:d0:8c:5f:9b:0b:6f:f5: cf:de:bd:7d:54:59:05:8d:33:d0:61:1e:13:d7:e2:e1:ec:33: 8b:17:f5:11:86:52:33:40:67:40:d3:c3:14:60:85:53:63:5c: 34:a9:6e:b8:ba:82:fa:37:66:59:b0:d1:cd:a8:80:8e:3d:85: 06:cc:04:46:7d:e3:6c:7f:7f:f8:90:2b:4b:19:d7:0a:46:52: c4:f0:ee:b1:d9:7f:78:52:1c:50:a5:71:84:8c:e7:46:07:7a: 3e:43:af:22:e8:03:34:b2:8c:b6:d7:9a:85:f2:9c:e5:56:b3: 98:16:e1:c8:67:91:6c:2b:24:24:6c:92:6b:3e:38:73:5d:c8: e7:2c:fd:c0:af:89:7a:7b:fe:79:ee:a5:91:99:47:82:61:b8: c6:ac:93:84:bc:00:31:53:c9:8e:fb:e0:19:16:78:40:4d:18: bf:6e:55:12 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC2UwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTIyRTAxMTAvBgNVBAUTKDRGMzJFQ0ZGOENENDZDM0VDMDNGQTc1RTEwMDhGNEFB OUEwQ0Y4OTMwHhcNMjUxMTA0MTkxOTMyWhcNMjUxMTExMTkxOTMyWjAYMRYwFAYD VQQDEw02OTBhNTFjNS02YTc0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAssmKJnHSBg7JPXhH0tskoveikdQBlijsgsHU+vi4gUM5F2foWvzBvkNrlD5G CF1qFJpk0JC9eXo4nCS8rm4eUyQgsN1B2+f3Z+3h/Hsv83hFmIF0SvgWUQuPPO3h s9JiswoQLLQ/kYJXclcSVDpvQ9LlrkZZPVFqlb3d/um/iCr+IrT6elN/uv2LhZiY anbUgU+wJZb55D88dJgUQe530N5DO7wQ8r2W6QqjQlfuMc6dUSgh8JA7/De7aJP2 By+nnnGKguj96eH1X5CPmjM1DvPxe1G0tmsABZgx42aBWdTcaCQmryJWSQTN2kqr fqsBcpY/lcJigS5TJoS07UuRswIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAmmyZyw w/aOvRyR11LI1TAz6RoSMB8GA1UdIwQYMBaAFE8y7P+M1Gw+wD+nXhAI9KqaDPiT MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MjJFMC9DOUI5MEZGODQ2 ODgxMUVBQUNGMThBMjhDNEY5QUUwMi9UekxzXzR6VWJEN0FQNmRlRUFqMHFwb00t Sk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1R6THNfNHpVYkQ3QVA2ZGVFQWowcXBvTS1KTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MjJFMC9DOUI5MEZGODQ2ODgxMUVBQUNGMThBMjhDNEY5QUUwMi9UekxzXzR6VWJE N0FQNmRlRUFqMHFwb00tSk0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDT7++WTKNb9/dRVRoBgkcYof2ah2c9BzRS2QH35CjSC3CUoa4euduw t0w3i8lujirnizZGUFpP/dU3WHp9plRyqZN8K5vakt6m71828sZ49q1M7tCMX5sL b/XP3r19VFkFjTPQYR4T1+Lh7DOLF/URhlIzQGdA08MUYIVTY1w0qW64uoL6N2ZZ sNHNqICOPYUGzARGfeNsf3/4kCtLGdcKRlLE8O6x2X94UhxQpXGEjOdGB3o+Q68i 6AM0soy215qF8pzlVrOYFuHIZ5FsKyQkbJJrPjhzXcjnLP3Ar4l6e/557qWRmUeC YbjGrJOEvAAxU8mO++AZFnhATRi/blUS -----END CERTIFICATE-----Generated at Wed Nov 5 11:50:10 2025 by rpki-client