$ rpki-client -vvf rpki.apnic.net/member_repository/A91E4042/EFC98DE6E53611EB9926556BC4F9AE02/TzMtwIyXR6ybyBxUfRujRWQ_drc.mft File: TzMtwIyXR6ybyBxUfRujRWQ_drc.mft (raw, json) Hash identifier: CRRQfMPG77akjKQ/uecdVfkPInRsLnrAAenreWNS+Eo= Subject key identifier: 92:44:B1:42:20:68:55:8D:9F:2F:13:53:59:AA:3D:9A:0C:38:FB:3F Authority key identifier: 4F:33:2D:C0:8C:97:47:AC:9B:C8:1C:54:7D:1B:A3:45:64:3F:76:B7 Certificate issuer: /CN=A91E4042/serialNumber=4F332DC08C9747AC9BC81C547D1BA345643F76B7 Certificate serial: 05BC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TzMtwIyXR6ybyBxUfRujRWQ_drc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E4042/EFC98DE6E53611EB9926556BC4F9AE02/TzMtwIyXR6ybyBxUfRujRWQ_drc.mft Manifest number: 05B6 Signing time: Tue 04 Nov 2025 23:12:11 +0000 Manifest this update: Tue 04 Nov 2025 23:12:11 +0000 Manifest next update: Tue 11 Nov 2025 23:12:11 +0000 Files and hashes: 1: TzMtwIyXR6ybyBxUfRujRWQ_drc.crl (hash: l0w2M65vV2VgzlUeBxZ7zfOeQ5bU+J/yZgbiQXYreZM=) 2: 26F1B59437A511ECB73C9852C4F9AE02.roa (hash: RnCdsnsA5t3rSQhlqndquIzW2+Ap7Mst87/6oAJexVI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E4042/EFC98DE6E53611EB9926556BC4F9AE02/TzMtwIyXR6ybyBxUfRujRWQ_drc.crl rsync://rpki.apnic.net/member_repository/A91E4042/EFC98DE6E53611EB9926556BC4F9AE02/TzMtwIyXR6ybyBxUfRujRWQ_drc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TzMtwIyXR6ybyBxUfRujRWQ_drc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 23:12:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1468 (0x5bc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E4042, serialNumber=4F332DC08C9747AC9BC81C547D1BA345643F76B7 Validity Not Before: Nov 4 23:12:11 2025 GMT Not After : Nov 11 23:12:11 2025 GMT Subject: CN=690a884b-b9ef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:ca:61:8e:ef:3f:68:85:25:ac:e9:a6:89:16: 86:6a:09:43:14:30:ff:6d:92:34:ca:ee:e9:15:65: 4c:11:26:8a:d9:eb:e9:e3:81:e9:58:a6:3c:0a:07: eb:7b:d6:47:66:a5:18:0c:e1:0a:76:c0:3c:13:00: 32:3f:79:4c:0e:57:9a:e1:6c:81:4b:5a:76:d4:de: 6b:3b:e4:75:37:27:5e:94:38:7d:f1:2f:f6:d3:b9: 11:64:18:c8:d1:8e:6d:5c:e4:81:c8:3c:85:8b:cb: 12:2f:3f:3c:69:02:6b:93:7e:a2:ee:19:06:3c:bd: 4c:da:87:5b:db:00:5e:ba:db:7d:86:15:b6:d8:e3: ed:72:2f:20:b6:03:1e:a4:df:70:42:44:7b:99:52: 06:2e:a8:bc:45:30:cd:a0:12:7b:b0:d4:f0:d0:0c: 4c:3c:ae:6a:c0:7f:0b:70:d6:a2:cf:24:3b:31:99: b5:d0:74:60:08:9b:75:27:50:e4:61:30:c0:b5:aa: 5b:07:e7:4a:8a:da:cc:a9:f8:b0:44:af:3d:2a:91: b3:0e:0d:a6:83:cd:e4:54:f8:6b:39:11:f0:88:23: 0c:67:98:89:2d:10:a6:c0:e6:96:e5:ee:34:bd:0c: a9:11:27:b0:d2:c7:9a:7a:65:c0:a6:59:0b:de:9d: f2:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:44:B1:42:20:68:55:8D:9F:2F:13:53:59:AA:3D:9A:0C:38:FB:3F X509v3 Authority Key Identifier: keyid:4F:33:2D:C0:8C:97:47:AC:9B:C8:1C:54:7D:1B:A3:45:64:3F:76:B7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E4042/EFC98DE6E53611EB9926556BC4F9AE02/TzMtwIyXR6ybyBxUfRujRWQ_drc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TzMtwIyXR6ybyBxUfRujRWQ_drc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E4042/EFC98DE6E53611EB9926556BC4F9AE02/TzMtwIyXR6ybyBxUfRujRWQ_drc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 01:3b:5a:6a:70:f4:cd:7f:5e:dc:5e:7e:92:e0:72:98:86:7a: 26:60:ea:e9:0a:d4:35:5a:15:e8:0d:37:13:cd:e2:cf:3a:8f: e7:8b:04:38:b5:59:6a:22:03:cd:30:84:8c:42:09:36:50:59: 68:01:aa:c9:11:b9:70:a4:57:b5:cb:2e:34:72:69:06:f7:98: aa:14:dd:95:fd:ed:6a:8d:7b:fb:eb:a4:9a:38:fb:95:c4:ae: 84:4a:73:a7:36:b2:7c:c6:7c:01:94:28:e8:e5:77:eb:44:c4: 81:a1:89:b5:6d:77:7a:eb:98:09:6a:c4:39:11:de:e3:ed:c6: 3f:33:57:f5:69:3d:35:c1:52:c9:75:74:0d:55:17:b4:48:aa: 06:00:f3:64:03:d6:31:d0:9a:4c:a6:50:ce:0b:ec:16:db:00: d1:6c:6b:56:3a:1b:20:8a:f1:84:47:db:84:a1:e6:37:1f:2f: aa:15:b8:4a:97:2a:1c:6f:28:cb:b0:18:f1:50:59:e4:85:2c: aa:06:14:e5:2f:56:73:35:97:e0:19:d7:22:03:9d:25:27:6f: 0b:6d:8d:c0:73:70:cb:26:f3:ce:80:5f:37:a2:8f:2d:62:cc: 89:7b:db:77:79:80:e5:8b:2a:6d:83:88:09:c3:e9:27:7f:40: e9:de:7c:7e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBbwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTQwNDIxMTAvBgNVBAUTKDRGMzMyREMwOEM5NzQ3QUM5QkM4MUM1NDdEMUJBMzQ1 NjQzRjc2QjcwHhcNMjUxMTA0MjMxMjExWhcNMjUxMTExMjMxMjExWjAYMRYwFAYD VQQDEw02OTBhODg0Yi1iOWVmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7sphju8/aIUlrOmmiRaGaglDFDD/bZI0yu7pFWVMESaK2evp44HpWKY8Cgfr e9ZHZqUYDOEKdsA8EwAyP3lMDlea4WyBS1p21N5rO+R1NydelDh98S/207kRZBjI 0Y5tXOSByDyFi8sSLz88aQJrk36i7hkGPL1M2odb2wBeutt9hhW22OPtci8gtgMe pN9wQkR7mVIGLqi8RTDNoBJ7sNTw0AxMPK5qwH8LcNaizyQ7MZm10HRgCJt1J1Dk YTDAtapbB+dKitrMqfiwRK89KpGzDg2mg83kVPhrORHwiCMMZ5iJLRCmwOaW5e40 vQypESew0seaemXAplkL3p3y2QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJJEsUIg aFWNny8TU1mqPZoMOPs/MB8GA1UdIwQYMBaAFE8zLcCMl0esm8gcVH0bo0VkP3a3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNDA0Mi9FRkM5OERFNkU1 MzYxMUVCOTkyNjU1NkJDNEY5QUUwMi9Uek10d0l5WFI2eWJ5QnhVZlJ1alJXUV9k cmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1R6TXR3SXlYUjZ5YnlCeFVmUnVqUldRX2RyYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NDA0Mi9FRkM5OERFNkU1MzYxMUVCOTkyNjU1NkJDNEY5QUUwMi9Uek10d0l5WFI2 eWJ5QnhVZlJ1alJXUV9kcmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQABO1pqcPTNf17cXn6S4HKYhnomYOrpCtQ1WhXoDTcTzeLPOo/niwQ4 tVlqIgPNMISMQgk2UFloAarJEblwpFe1yy40cmkG95iqFN2V/e1qjXv766SaOPuV xK6ESnOnNrJ8xnwBlCjo5XfrRMSBoYm1bXd665gJasQ5Ed7j7cY/M1f1aT01wVLJ dXQNVRe0SKoGAPNkA9Yx0JpMplDOC+wW2wDRbGtWOhsgivGER9uEoeY3Hy+qFbhK lyocbyjLsBjxUFnkhSyqBhTlL1ZzNZfgGdciA50lJ28LbY3Ac3DLJvPOgF83oo8t YsyJe9t3eYDliyptg4gJw+knf0Dp3nx+ -----END CERTIFICATE-----Generated at Wed Nov 5 20:01:53 2025 by rpki-client