$ rpki-client -vvf rpki.apnic.net/member_repository/A919DD2B/0B26BACC58BA11ECA1D91A51C4F9AE02/TZ0PaMLT_yhGBYGQy_bIySHN2mI.mft File: TZ0PaMLT_yhGBYGQy_bIySHN2mI.mft (raw, json) Hash identifier: zgwiyMPlPeHjQ7Qkylgm4uFtw+1a+Jgc2jH5vThu+/o= Subject key identifier: 00:62:68:41:79:10:EE:05:41:39:1E:5E:68:7F:EB:D0:67:92:2D:00 Authority key identifier: 4D:9D:0F:68:C2:D3:FF:28:46:05:81:90:CB:F6:C8:C9:21:CD:DA:62 Certificate issuer: /CN=A919DD2B/serialNumber=4D9D0F68C2D3FF2846058190CBF6C8C921CDDA62 Certificate serial: 0438 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TZ0PaMLT_yhGBYGQy_bIySHN2mI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919DD2B/0B26BACC58BA11ECA1D91A51C4F9AE02/TZ0PaMLT_yhGBYGQy_bIySHN2mI.mft Manifest number: 0434 Signing time: Fri 25 Apr 2025 00:05:12 +0000 Manifest this update: Fri 25 Apr 2025 00:05:11 +0000 Manifest next update: Fri 02 May 2025 00:05:11 +0000 Files and hashes: 1: TZ0PaMLT_yhGBYGQy_bIySHN2mI.crl (hash: CD2M2sYOhO5y5RgXI94JorrqmeaT0FvFu4FE01VhuiM=) 2: E1484B3658BD11ECB49A9856C4F9AE02.roa (hash: /HXDuqjyr3f0zY/02q1871VGREErBAo71F5/20UhS78=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919DD2B/0B26BACC58BA11ECA1D91A51C4F9AE02/TZ0PaMLT_yhGBYGQy_bIySHN2mI.crl rsync://rpki.apnic.net/member_repository/A919DD2B/0B26BACC58BA11ECA1D91A51C4F9AE02/TZ0PaMLT_yhGBYGQy_bIySHN2mI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TZ0PaMLT_yhGBYGQy_bIySHN2mI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 00:05:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1080 (0x438) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919DD2B, serialNumber=4D9D0F68C2D3FF2846058190CBF6C8C921CDDA62 Validity Not Before: Apr 25 00:05:11 2025 GMT Not After : May 2 00:05:11 2025 GMT Subject: CN=680ad1b8-d1e0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:b9:c0:d6:d3:81:c1:e3:e8:a3:50:8e:a9:37: e9:da:ef:3e:b9:32:51:c5:7c:6e:fb:9e:74:50:2d: ac:6d:74:8d:ca:3d:4a:b9:2f:40:69:a3:0b:ae:a5: 86:ad:ab:80:f7:5b:d6:4f:ad:46:71:22:e7:89:dd: 9b:4e:e9:65:91:6f:3d:fa:7a:c6:76:65:17:2a:3c: c6:be:87:fe:fc:82:7d:cb:83:60:75:0d:65:08:d6: 4a:22:f1:d6:87:35:cb:8c:be:8c:e1:5c:15:65:6a: 9c:c3:bb:a3:d0:39:30:aa:88:21:d0:25:c5:5d:6a: 00:87:02:be:2e:b1:8d:4b:f3:b3:c4:49:7f:ae:9e: d0:34:6b:9f:d9:79:f3:32:95:5b:9c:58:aa:2e:20: 50:1d:76:8e:c3:63:16:b2:fb:0a:cd:75:cd:83:d4: a9:f2:36:60:7f:2d:06:48:b5:28:57:17:23:c5:30: 34:35:ee:f5:10:43:a9:05:28:f8:7c:0a:21:a4:78: 9e:0a:52:38:a2:e2:02:5c:af:df:ea:ea:2d:2c:63: 9e:52:e7:0f:7a:e0:e1:df:32:84:24:b6:f6:ee:48: 9d:db:7b:c0:98:d1:d1:15:bc:a1:69:50:22:e8:1a: 6c:d5:0c:24:4b:0a:0e:dd:d4:6c:b6:d8:a7:bc:be: c6:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:62:68:41:79:10:EE:05:41:39:1E:5E:68:7F:EB:D0:67:92:2D:00 X509v3 Authority Key Identifier: keyid:4D:9D:0F:68:C2:D3:FF:28:46:05:81:90:CB:F6:C8:C9:21:CD:DA:62 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919DD2B/0B26BACC58BA11ECA1D91A51C4F9AE02/TZ0PaMLT_yhGBYGQy_bIySHN2mI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TZ0PaMLT_yhGBYGQy_bIySHN2mI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919DD2B/0B26BACC58BA11ECA1D91A51C4F9AE02/TZ0PaMLT_yhGBYGQy_bIySHN2mI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 76:e3:71:f7:ee:73:76:5c:8b:d4:25:7d:8d:62:21:ee:c6:d0: da:56:c6:c7:16:56:d8:b0:d2:3b:71:8d:73:9a:30:a3:a8:21: 5f:0f:cb:e2:f3:61:ac:66:4f:55:ed:cb:af:cd:31:f0:ce:3f: 19:5b:e4:fd:ea:fb:e7:6e:cf:c7:23:3f:b0:7c:ef:8e:2c:77: f0:43:68:14:13:a2:71:1c:da:41:d8:d2:fe:e0:70:be:20:a8: d1:8f:31:3e:39:63:7b:31:0b:ae:39:f7:98:39:e8:ee:b7:19: 10:21:67:1e:3c:41:18:84:9c:d3:d0:42:b6:f8:d8:8f:05:fd: 27:90:05:c1:cd:e9:80:18:f0:11:46:dd:6e:05:3d:de:f8:1a: 6e:d0:de:53:5b:40:4c:c3:5b:f0:87:60:cd:b3:7c:f9:8f:ef: 8b:29:f3:87:30:2c:19:fa:8f:8d:c2:45:fd:6f:27:bc:99:74: aa:25:fe:e9:c6:12:ef:ff:f1:a5:e7:77:09:ea:3e:43:ab:58: 54:e4:d8:f6:26:25:09:a9:d2:04:db:b4:d7:42:69:7c:db:92: 2e:cc:fb:dc:ed:e7:2e:8c:e3:15:da:fb:2c:2a:4a:3d:63:5b: 5d:d2:e8:7d:e0:93:d6:14:85:11:6b:80:0d:f2:e7:11:30:10: 71:ee:b5:b9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBDgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUREMkIxMTAvBgNVBAUTKDREOUQwRjY4QzJEM0ZGMjg0NjA1ODE5MENCRjZDOEM5 MjFDRERBNjIwHhcNMjUwNDI1MDAwNTExWhcNMjUwNTAyMDAwNTExWjAYMRYwFAYD VQQDEw02ODBhZDFiOC1kMWUwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7rnA1tOBwePoo1COqTfp2u8+uTJRxXxu+550UC2sbXSNyj1KuS9AaaMLrqWG rauA91vWT61GcSLnid2bTullkW89+nrGdmUXKjzGvof+/IJ9y4NgdQ1lCNZKIvHW hzXLjL6M4VwVZWqcw7uj0Dkwqogh0CXFXWoAhwK+LrGNS/OzxEl/rp7QNGuf2Xnz MpVbnFiqLiBQHXaOw2MWsvsKzXXNg9Sp8jZgfy0GSLUoVxcjxTA0Ne71EEOpBSj4 fAohpHieClI4ouICXK/f6uotLGOeUucPeuDh3zKEJLb27kid23vAmNHRFbyhaVAi 6Bps1QwkSwoO3dRsttinvL7GgwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFABiaEF5 EO4FQTkeXmh/69Bnki0AMB8GA1UdIwQYMBaAFE2dD2jC0/8oRgWBkMv2yMkhzdpi MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5REQyQi8wQjI2QkFDQzU4 QkExMUVDQTFEOTFBNTFDNEY5QUUwMi9UWjBQYU1MVF95aEdCWUdReV9iSXlTSE4y bUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1RaMFBhTUxUX3loR0JZR1F5X2JJeVNITjJtSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 REQyQi8wQjI2QkFDQzU4QkExMUVDQTFEOTFBNTFDNEY5QUUwMi9UWjBQYU1MVF95 aEdCWUdReV9iSXlTSE4ybUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB243H37nN2XIvUJX2NYiHuxtDaVsbHFlbYsNI7cY1zmjCjqCFfD8vi 82GsZk9V7cuvzTHwzj8ZW+T96vvnbs/HIz+wfO+OLHfwQ2gUE6JxHNpB2NL+4HC+ IKjRjzE+OWN7MQuuOfeYOejutxkQIWcePEEYhJzT0EK2+NiPBf0nkAXBzemAGPAR Rt1uBT3e+Bpu0N5TW0BMw1vwh2DNs3z5j++LKfOHMCwZ+o+NwkX9bye8mXSqJf7p xhLv//Gl53cJ6j5Dq1hU5Nj2JiUJqdIE27TXQml825IuzPvc7ecujOMV2vssKko9 Y1td0uh94JPWFIURa4AN8ucRMBBx7rW5 -----END CERTIFICATE-----Generated at Sat Apr 26 04:34:14 2025 by rpki-client