$ rpki-client -vvf rpki.apnic.net/member_repository/A91522E0/C9B90FF8468811EAACF18A28C4F9AE02/TzLs_4zUbD7AP6deEAj0qpoM-JM.mft File: TzLs_4zUbD7AP6deEAj0qpoM-JM.mft (raw, json) Hash identifier: tT1+kxrY5MVusSQ6Ivoqn52e0KI24EYe0wqX0PnSXf8= Subject key identifier: 22:EA:3D:1C:1B:97:C3:A3:6C:6F:1E:C4:C8:44:22:4B:35:71:89:DE Authority key identifier: 4F:32:EC:FF:8C:D4:6C:3E:C0:3F:A7:5E:10:08:F4:AA:9A:0C:F8:93 Certificate issuer: /CN=A91522E0/serialNumber=4F32ECFF8CD46C3EC03FA75E1008F4AA9A0CF893 Certificate serial: 0B1D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TzLs_4zUbD7AP6deEAj0qpoM-JM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91522E0/C9B90FF8468811EAACF18A28C4F9AE02/TzLs_4zUbD7AP6deEAj0qpoM-JM.mft Manifest number: 0B09 Signing time: Mon 16 Jun 2025 19:13:46 +0000 Manifest this update: Mon 16 Jun 2025 19:13:46 +0000 Manifest next update: Mon 23 Jun 2025 19:13:46 +0000 Files and hashes: 1: TzLs_4zUbD7AP6deEAj0qpoM-JM.crl (hash: tsCGOGTuDSP5P7flOlPgYOh6y3oPAEZ0+dDjPCBRVEg=) 2: B34C91C4B14311EF8479AA21C4F9AE02.roa (hash: zX8SsdngBGocfr0PjyPYjkXeGxhOELPXVhgI6hsEekQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91522E0/C9B90FF8468811EAACF18A28C4F9AE02/TzLs_4zUbD7AP6deEAj0qpoM-JM.crl rsync://rpki.apnic.net/member_repository/A91522E0/C9B90FF8468811EAACF18A28C4F9AE02/TzLs_4zUbD7AP6deEAj0qpoM-JM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TzLs_4zUbD7AP6deEAj0qpoM-JM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 23 Jun 2025 19:13:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2845 (0xb1d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91522E0, serialNumber=4F32ECFF8CD46C3EC03FA75E1008F4AA9A0CF893 Validity Not Before: Jun 16 19:13:46 2025 GMT Not After : Jun 23 19:13:46 2025 GMT Subject: CN=68506cea-bcf4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:be:c4:13:25:e3:79:76:db:2f:8f:df:e7:f9: 21:bb:49:29:cd:39:e2:a7:e9:e0:eb:40:a5:b8:63: c2:38:dc:e2:dc:b0:7a:c4:e0:fd:c2:8d:fb:8a:90: 35:7c:11:e2:e7:b8:d3:08:eb:55:4f:a4:a4:90:e7: 3d:06:1e:44:55:8d:80:dc:34:c3:86:49:e9:c6:f1: 9f:58:6a:66:a0:91:20:ac:5d:1c:44:c4:57:a6:bf: 89:fc:b5:2b:da:bc:d2:85:6b:93:d2:db:f5:ff:13: ef:35:bf:87:4a:b9:ea:66:ac:57:58:92:b4:ad:69: e3:4b:df:8f:d2:7f:d5:b7:51:65:a6:1c:92:3c:3e: 7b:28:f3:4e:cd:ec:b4:7d:4a:80:5d:a5:00:5c:fd: 8b:9d:d9:f2:7f:80:d4:35:5e:2c:48:90:b3:74:f4: 2e:f2:87:c6:f9:01:0c:08:00:42:8f:20:1c:ef:72: 8c:e1:0b:ba:b1:04:8f:ae:e6:81:c7:2a:2f:0a:b9: 73:d3:f3:00:d0:19:de:15:63:cf:f0:ce:1b:f6:c2: 4e:f6:1e:d7:4a:86:f7:5a:c4:58:5d:a4:11:9d:48: 86:3c:50:13:98:4d:3d:52:98:96:24:39:26:06:37: e1:48:6d:cf:86:0c:ad:2a:ed:a3:fe:00:cb:c7:60: 94:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:EA:3D:1C:1B:97:C3:A3:6C:6F:1E:C4:C8:44:22:4B:35:71:89:DE X509v3 Authority Key Identifier: keyid:4F:32:EC:FF:8C:D4:6C:3E:C0:3F:A7:5E:10:08:F4:AA:9A:0C:F8:93 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91522E0/C9B90FF8468811EAACF18A28C4F9AE02/TzLs_4zUbD7AP6deEAj0qpoM-JM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TzLs_4zUbD7AP6deEAj0qpoM-JM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91522E0/C9B90FF8468811EAACF18A28C4F9AE02/TzLs_4zUbD7AP6deEAj0qpoM-JM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7b:b7:d8:ce:d0:fd:d4:f7:2c:2a:a0:0d:92:f3:f0:05:14:c2: 74:88:21:fd:25:5c:4f:47:44:27:24:b3:4c:92:6a:36:44:00: 90:a5:99:ea:e4:58:db:9f:5a:d8:c4:cf:ce:3a:b4:8b:6e:0d: d8:28:4a:04:ca:a9:71:7a:41:66:d8:d9:2c:9a:4c:af:1a:f9: c8:96:f1:33:02:d1:60:91:eb:89:db:f9:93:6d:21:e6:f1:69: b6:c3:aa:dd:83:9f:47:f6:79:70:7e:ec:44:17:38:6e:58:00: 8c:41:57:21:90:bb:90:af:12:5e:dd:24:98:ec:91:c1:42:39: f8:4e:07:9a:fa:b5:e3:f6:54:95:2f:8c:4a:86:ff:5d:6c:76: 8e:0f:35:8d:3e:50:9b:7f:fa:3d:30:da:e5:41:a2:dc:77:b8: e6:72:f9:83:9c:16:88:f0:a6:92:89:56:d6:c6:24:77:95:f3: 7e:79:3e:6f:eb:54:e1:5f:33:4f:fb:60:52:51:28:60:c1:78: f3:09:ae:00:60:42:89:b8:4d:31:01:af:92:60:ff:78:e4:ba: c6:ce:f4:ae:0a:0e:06:15:18:8e:87:13:47:12:82:95:ff:c2: d8:97:a5:27:20:0e:6d:a0:c2:76:8c:68:cb:89:96:7d:c3:29: 18:87:9e:24 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCx0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTIyRTAxMTAvBgNVBAUTKDRGMzJFQ0ZGOENENDZDM0VDMDNGQTc1RTEwMDhGNEFB OUEwQ0Y4OTMwHhcNMjUwNjE2MTkxMzQ2WhcNMjUwNjIzMTkxMzQ2WjAYMRYwFAYD VQQDEw02ODUwNmNlYS1iY2Y0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5L7EEyXjeXbbL4/f5/khu0kpzTnip+ng60CluGPCONzi3LB6xOD9wo37ipA1 fBHi57jTCOtVT6SkkOc9Bh5EVY2A3DTDhknpxvGfWGpmoJEgrF0cRMRXpr+J/LUr 2rzShWuT0tv1/xPvNb+HSrnqZqxXWJK0rWnjS9+P0n/Vt1FlphySPD57KPNOzey0 fUqAXaUAXP2Lndnyf4DUNV4sSJCzdPQu8ofG+QEMCABCjyAc73KM4Qu6sQSPruaB xyovCrlz0/MA0BneFWPP8M4b9sJO9h7XSob3WsRYXaQRnUiGPFATmE09UpiWJDkm BjfhSG3PhgytKu2j/gDLx2CU2wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCLqPRwb l8OjbG8exMhEIks1cYneMB8GA1UdIwQYMBaAFE8y7P+M1Gw+wD+nXhAI9KqaDPiT MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MjJFMC9DOUI5MEZGODQ2 ODgxMUVBQUNGMThBMjhDNEY5QUUwMi9UekxzXzR6VWJEN0FQNmRlRUFqMHFwb00t Sk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1R6THNfNHpVYkQ3QVA2ZGVFQWowcXBvTS1KTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MjJFMC9DOUI5MEZGODQ2ODgxMUVBQUNGMThBMjhDNEY5QUUwMi9UekxzXzR6VWJE N0FQNmRlRUFqMHFwb00tSk0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB7t9jO0P3U9ywqoA2S8/AFFMJ0iCH9JVxPR0QnJLNMkmo2RACQpZnq 5Fjbn1rYxM/OOrSLbg3YKEoEyqlxekFm2NksmkyvGvnIlvEzAtFgkeuJ2/mTbSHm 8Wm2w6rdg59H9nlwfuxEFzhuWACMQVchkLuQrxJe3SSY7JHBQjn4Tgea+rXj9lSV L4xKhv9dbHaODzWNPlCbf/o9MNrlQaLcd7jmcvmDnBaI8KaSiVbWxiR3lfN+eT5v 61ThXzNP+2BSUShgwXjzCa4AYEKJuE0xAa+SYP945LrGzvSuCg4GFRiOhxNHEoKV /8LYl6UnIA5toMJ2jGjLiZZ9wykYh54k -----END CERTIFICATE-----Generated at Tue Jun 17 04:01:48 2025 by rpki-client