$ rpki-client -vvf rpki.apnic.net/member_repository/A919DD2B/0B26BACC58BA11ECA1D91A51C4F9AE02/TZ0PaMLT_yhGBYGQy_bIySHN2mI.mft File: TZ0PaMLT_yhGBYGQy_bIySHN2mI.mft (raw, json) Hash identifier: EUljqj5VgC6D8UoMrdjZ9yXivaGNv1qAemNoTkGa/yM= Subject key identifier: 9A:FC:60:B7:4E:31:CE:5C:E9:59:A5:EC:F1:E6:00:9A:49:13:AC:1A Authority key identifier: 4D:9D:0F:68:C2:D3:FF:28:46:05:81:90:CB:F6:C8:C9:21:CD:DA:62 Certificate issuer: /CN=A919DD2B/serialNumber=4D9D0F68C2D3FF2846058190CBF6C8C921CDDA62 Certificate serial: 0450 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TZ0PaMLT_yhGBYGQy_bIySHN2mI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919DD2B/0B26BACC58BA11ECA1D91A51C4F9AE02/TZ0PaMLT_yhGBYGQy_bIySHN2mI.mft Manifest number: 044C Signing time: Thu 12 Jun 2025 23:48:53 +0000 Manifest this update: Thu 12 Jun 2025 23:48:53 +0000 Manifest next update: Thu 19 Jun 2025 23:48:53 +0000 Files and hashes: 1: TZ0PaMLT_yhGBYGQy_bIySHN2mI.crl (hash: Dj/IVFzGONEo0PE7Q5zcKJ6B6Lr3rlW0mIXc6lfcTv0=) 2: E1484B3658BD11ECB49A9856C4F9AE02.roa (hash: /HXDuqjyr3f0zY/02q1871VGREErBAo71F5/20UhS78=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919DD2B/0B26BACC58BA11ECA1D91A51C4F9AE02/TZ0PaMLT_yhGBYGQy_bIySHN2mI.crl rsync://rpki.apnic.net/member_repository/A919DD2B/0B26BACC58BA11ECA1D91A51C4F9AE02/TZ0PaMLT_yhGBYGQy_bIySHN2mI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TZ0PaMLT_yhGBYGQy_bIySHN2mI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 19 Jun 2025 23:48:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1104 (0x450) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919DD2B, serialNumber=4D9D0F68C2D3FF2846058190CBF6C8C921CDDA62 Validity Not Before: Jun 12 23:48:53 2025 GMT Not After : Jun 19 23:48:53 2025 GMT Subject: CN=684b6765-82d3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:ff:ac:d3:da:42:e7:04:f5:b6:5a:17:a3:e0: 33:8c:7b:57:ff:4a:64:e7:d2:e2:31:b0:1a:8a:e5: 4a:c7:a1:55:20:5b:8b:f6:2c:3e:14:aa:18:36:1e: 62:f1:51:b2:88:71:4a:02:5f:b5:50:8f:50:dc:1b: 9b:2c:46:92:d5:f1:c0:08:85:d2:ca:e0:32:67:6c: b1:58:a6:cb:2b:8c:79:b3:5f:75:99:62:30:1f:56: cc:d6:ad:44:df:15:b8:fa:84:1c:14:96:89:e0:6f: 79:d4:6a:c4:68:b0:71:d4:a2:e4:16:53:47:d4:0c: 5e:bd:64:bb:ad:73:5d:93:61:2f:db:3a:90:63:93: cf:ea:17:04:b6:45:df:f0:58:35:ee:be:b2:98:1c: d9:e9:3f:a6:16:2c:85:7a:d6:10:88:b2:aa:7b:0c: c1:96:2e:f6:d9:a2:84:c3:d0:d7:04:43:16:19:b2: 74:50:00:69:e7:3b:90:6b:c2:5a:cd:81:c2:68:3a: 57:1f:73:1e:72:44:16:6d:4a:f8:4e:ff:bd:71:4a: 63:64:20:33:b0:b1:0e:32:4b:d6:14:4b:aa:75:f0: cb:13:a4:88:b3:ea:95:ed:6b:13:e0:b6:bb:53:c9: bc:8c:f7:96:da:c7:76:e4:91:fe:db:44:d5:6e:2f: 35:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:FC:60:B7:4E:31:CE:5C:E9:59:A5:EC:F1:E6:00:9A:49:13:AC:1A X509v3 Authority Key Identifier: keyid:4D:9D:0F:68:C2:D3:FF:28:46:05:81:90:CB:F6:C8:C9:21:CD:DA:62 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919DD2B/0B26BACC58BA11ECA1D91A51C4F9AE02/TZ0PaMLT_yhGBYGQy_bIySHN2mI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TZ0PaMLT_yhGBYGQy_bIySHN2mI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919DD2B/0B26BACC58BA11ECA1D91A51C4F9AE02/TZ0PaMLT_yhGBYGQy_bIySHN2mI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4a:71:b6:a4:49:1e:dd:77:f4:ca:f8:9d:95:83:3f:69:c4:bc: bd:ae:fb:a9:15:fb:d8:dc:00:e4:36:a7:ca:1e:91:fb:5c:c3: 2a:8c:0b:41:25:fd:30:35:79:6c:a9:58:65:e8:2d:23:26:d4: f7:d4:8b:e1:7e:c0:3a:81:75:bd:d9:ab:d1:d9:cd:3c:21:d2: 17:0b:7d:dc:78:f6:8a:1b:f7:5a:bd:cb:ab:d7:dd:ff:94:c4: 3d:92:41:0d:ec:f7:f2:7e:c4:87:bb:7f:12:25:6f:4c:29:15: 8b:4c:0f:9b:b9:7c:86:04:1c:31:2b:24:76:70:b9:57:bd:42: d4:82:0d:9d:2b:a7:14:09:40:84:69:e8:27:a3:f7:87:b1:65: aa:aa:aa:0a:9f:6d:12:cf:35:96:e4:53:e9:7a:93:e5:dc:99: 2b:b1:eb:ec:f9:a5:19:f0:e0:b4:b3:d7:75:e0:0d:5b:f2:0a: 44:63:97:36:80:86:31:06:33:da:07:b0:61:ce:a2:ae:91:58: 5a:6c:5d:61:2f:22:4f:53:cc:f0:11:76:f1:d8:31:4e:1f:d8: d4:26:ad:86:09:0a:45:d0:05:87:73:82:fa:9c:93:bd:8c:0e: 95:b5:81:89:5a:0a:c4:f5:c7:0b:47:f2:c4:5a:f1:d1:ae:5f: 56:d3:59:eb -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBFAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUREMkIxMTAvBgNVBAUTKDREOUQwRjY4QzJEM0ZGMjg0NjA1ODE5MENCRjZDOEM5 MjFDRERBNjIwHhcNMjUwNjEyMjM0ODUzWhcNMjUwNjE5MjM0ODUzWjAYMRYwFAYD VQQDEw02ODRiNjc2NS04MmQzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxP+s09pC5wT1tloXo+AzjHtX/0pk59LiMbAaiuVKx6FVIFuL9iw+FKoYNh5i 8VGyiHFKAl+1UI9Q3BubLEaS1fHACIXSyuAyZ2yxWKbLK4x5s191mWIwH1bM1q1E 3xW4+oQcFJaJ4G951GrEaLBx1KLkFlNH1AxevWS7rXNdk2Ev2zqQY5PP6hcEtkXf 8Fg17r6ymBzZ6T+mFiyFetYQiLKqewzBli722aKEw9DXBEMWGbJ0UABp5zuQa8Ja zYHCaDpXH3MeckQWbUr4Tv+9cUpjZCAzsLEOMkvWFEuqdfDLE6SIs+qV7WsT4La7 U8m8jPeW2sd25JH+20TVbi81vQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJr8YLdO Mc5c6Vml7PHmAJpJE6waMB8GA1UdIwQYMBaAFE2dD2jC0/8oRgWBkMv2yMkhzdpi MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5REQyQi8wQjI2QkFDQzU4 QkExMUVDQTFEOTFBNTFDNEY5QUUwMi9UWjBQYU1MVF95aEdCWUdReV9iSXlTSE4y bUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1RaMFBhTUxUX3loR0JZR1F5X2JJeVNITjJtSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 REQyQi8wQjI2QkFDQzU4QkExMUVDQTFEOTFBNTFDNEY5QUUwMi9UWjBQYU1MVF95 aEdCWUdReV9iSXlTSE4ybUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBKcbakSR7dd/TK+J2Vgz9pxLy9rvupFfvY3ADkNqfKHpH7XMMqjAtB Jf0wNXlsqVhl6C0jJtT31IvhfsA6gXW92avR2c08IdIXC33cePaKG/davcur193/ lMQ9kkEN7PfyfsSHu38SJW9MKRWLTA+buXyGBBwxKyR2cLlXvULUgg2dK6cUCUCE aegno/eHsWWqqqoKn20SzzWW5FPpepPl3Jkrsevs+aUZ8OC0s9d14A1b8gpEY5c2 gIYxBjPaB7BhzqKukVhabF1hLyJPU8zwEXbx2DFOH9jUJq2GCQpF0AWHc4L6nJO9 jA6VtYGJWgrE9ccLR/LEWvHRrl9W01nr -----END CERTIFICATE-----Generated at Sat Jun 14 19:26:59 2025 by rpki-client