$ rpki-client -vvf rpki.apnic.net/member_repository/A91E4042/EFC98DE6E53611EB9926556BC4F9AE02/TzMtwIyXR6ybyBxUfRujRWQ_drc.mft File: TzMtwIyXR6ybyBxUfRujRWQ_drc.mft (raw, json) Hash identifier: Cexl2EgMO11Xe2ALnoVh/di565mbhRy0uUHWztPenls= Subject key identifier: 8A:A8:4E:13:3C:C3:95:0B:95:45:42:C3:A0:D4:34:38:FE:2A:93:75 Authority key identifier: 4F:33:2D:C0:8C:97:47:AC:9B:C8:1C:54:7D:1B:A3:45:64:3F:76:B7 Certificate issuer: /CN=A91E4042/serialNumber=4F332DC08C9747AC9BC81C547D1BA345643F76B7 Certificate serial: 0591 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TzMtwIyXR6ybyBxUfRujRWQ_drc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E4042/EFC98DE6E53611EB9926556BC4F9AE02/TzMtwIyXR6ybyBxUfRujRWQ_drc.mft Manifest number: 058B Signing time: Sun 10 Aug 2025 23:21:20 +0000 Manifest this update: Sun 10 Aug 2025 23:21:19 +0000 Manifest next update: Sun 17 Aug 2025 23:21:19 +0000 Files and hashes: 1: TzMtwIyXR6ybyBxUfRujRWQ_drc.crl (hash: wjkRxIbf+Xk/K626+Jy/6hZuoCfl3t4uAclVaHTBZA8=) 2: 26F1B59437A511ECB73C9852C4F9AE02.roa (hash: RnCdsnsA5t3rSQhlqndquIzW2+Ap7Mst87/6oAJexVI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E4042/EFC98DE6E53611EB9926556BC4F9AE02/TzMtwIyXR6ybyBxUfRujRWQ_drc.crl rsync://rpki.apnic.net/member_repository/A91E4042/EFC98DE6E53611EB9926556BC4F9AE02/TzMtwIyXR6ybyBxUfRujRWQ_drc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TzMtwIyXR6ybyBxUfRujRWQ_drc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1425 (0x591) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E4042, serialNumber=4F332DC08C9747AC9BC81C547D1BA345643F76B7 Validity Not Before: Aug 10 23:21:19 2025 GMT Not After : Aug 17 23:21:19 2025 GMT Subject: CN=68992970-14df Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:14:30:73:8f:13:1c:35:9e:30:1e:56:36:00: 95:27:e6:78:38:08:fe:a4:cb:ee:24:68:f3:2a:80: cc:90:09:8c:4e:42:7d:df:62:90:2c:74:0a:75:f4: 84:9b:58:a7:b3:29:11:54:e9:47:ab:24:f7:4f:4a: 4d:2c:f4:88:4c:e8:da:29:f5:bc:de:56:c9:b8:1d: 2e:ca:98:e9:2f:9f:2f:48:5d:be:06:3e:62:3a:25: ca:99:5d:ed:dd:4c:e4:7c:b8:26:2d:3f:11:ea:fa: 99:47:ee:5e:0b:7e:c8:cb:4f:11:0d:04:22:79:42: aa:d8:8c:4d:4c:ca:fb:d5:49:3d:b2:95:91:bb:da: 3c:ff:1e:07:5f:a9:e0:0e:41:46:ef:0e:34:69:8f: 00:36:a8:46:1f:db:6a:76:00:5e:21:f2:e4:cd:a7: d1:26:bc:de:3f:6a:68:a2:f9:d1:ce:db:f4:52:f2: 65:9d:f6:e1:01:b2:c9:ca:e4:35:ce:5c:b6:5f:b0: 6b:56:62:ee:aa:5e:ec:e3:46:58:ab:c6:5e:36:7e: f0:0b:38:82:52:7e:ca:1d:76:f9:46:21:52:c4:3c: 77:23:2a:73:c2:02:d2:20:74:2b:4d:5d:f6:4d:e7: 36:12:22:69:47:d0:de:d7:aa:e8:cb:9d:47:88:d9: 10:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:A8:4E:13:3C:C3:95:0B:95:45:42:C3:A0:D4:34:38:FE:2A:93:75 X509v3 Authority Key Identifier: keyid:4F:33:2D:C0:8C:97:47:AC:9B:C8:1C:54:7D:1B:A3:45:64:3F:76:B7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E4042/EFC98DE6E53611EB9926556BC4F9AE02/TzMtwIyXR6ybyBxUfRujRWQ_drc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TzMtwIyXR6ybyBxUfRujRWQ_drc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E4042/EFC98DE6E53611EB9926556BC4F9AE02/TzMtwIyXR6ybyBxUfRujRWQ_drc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a6:ad:48:0f:a3:12:08:d8:3f:c0:b8:cf:9c:ea:1c:e2:60:b9: 7b:07:34:c3:70:41:04:95:a7:51:27:40:ee:f0:56:4a:be:f4: 61:cc:6e:d4:53:65:9e:c9:25:fc:38:ba:6b:cc:e5:eb:bf:df: 64:87:24:f1:85:86:28:b7:bb:34:22:fe:80:05:80:ed:bf:00: 83:34:01:39:55:24:d1:3f:73:a0:90:46:9d:0e:44:f4:bd:e0: 35:ce:ed:c8:bf:03:26:9e:79:d2:28:6e:4d:48:43:1c:75:66: 20:10:02:25:04:be:d0:a4:7d:cc:d7:46:36:e4:b9:6e:61:a2: 1a:d7:b7:43:d0:d8:d2:07:9f:fd:69:0b:0b:c8:d5:ee:8c:fc: 73:38:8c:c9:70:c9:cf:3c:cc:97:ce:f5:06:7f:8a:69:e7:7c: bf:b2:54:a5:2e:79:35:3b:8f:11:82:e3:78:33:38:fe:45:34: 30:ec:e8:3b:4d:56:a7:72:20:a6:24:f1:f7:77:f0:9b:50:1a: 21:09:5c:2b:93:b6:2d:b5:8f:c6:4b:af:a5:70:29:4f:89:e6: d7:7d:c7:37:67:99:14:6e:f1:2c:d3:cc:3f:53:01:f8:99:a7: c0:91:11:03:6a:34:d0:bc:d0:4e:4b:1b:6b:86:48:1f:6d:c4: fe:9d:45:e0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBZEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTQwNDIxMTAvBgNVBAUTKDRGMzMyREMwOEM5NzQ3QUM5QkM4MUM1NDdEMUJBMzQ1 NjQzRjc2QjcwHhcNMjUwODEwMjMyMTE5WhcNMjUwODE3MjMyMTE5WjAYMRYwFAYD VQQDEw02ODk5Mjk3MC0xNGRmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2BQwc48THDWeMB5WNgCVJ+Z4OAj+pMvuJGjzKoDMkAmMTkJ932KQLHQKdfSE m1insykRVOlHqyT3T0pNLPSITOjaKfW83lbJuB0uypjpL58vSF2+Bj5iOiXKmV3t 3UzkfLgmLT8R6vqZR+5eC37Iy08RDQQieUKq2IxNTMr71Uk9spWRu9o8/x4HX6ng DkFG7w40aY8ANqhGH9tqdgBeIfLkzafRJrzeP2poovnRztv0UvJlnfbhAbLJyuQ1 zly2X7BrVmLuql7s40ZYq8ZeNn7wCziCUn7KHXb5RiFSxDx3IypzwgLSIHQrTV32 Tec2EiJpR9De16roy51HiNkQDwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIqoThM8 w5ULlUVCw6DUNDj+KpN1MB8GA1UdIwQYMBaAFE8zLcCMl0esm8gcVH0bo0VkP3a3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNDA0Mi9FRkM5OERFNkU1 MzYxMUVCOTkyNjU1NkJDNEY5QUUwMi9Uek10d0l5WFI2eWJ5QnhVZlJ1alJXUV9k cmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1R6TXR3SXlYUjZ5YnlCeFVmUnVqUldRX2RyYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NDA0Mi9FRkM5OERFNkU1MzYxMUVCOTkyNjU1NkJDNEY5QUUwMi9Uek10d0l5WFI2 eWJ5QnhVZlJ1alJXUV9kcmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCmrUgPoxII2D/AuM+c6hziYLl7BzTDcEEEladRJ0Du8FZKvvRhzG7U U2WeySX8OLprzOXrv99khyTxhYYot7s0Iv6ABYDtvwCDNAE5VSTRP3OgkEadDkT0 veA1zu3IvwMmnnnSKG5NSEMcdWYgEAIlBL7QpH3M10Y25LluYaIa17dD0NjSB5/9 aQsLyNXujPxzOIzJcMnPPMyXzvUGf4pp53y/slSlLnk1O48RguN4Mzj+RTQw7Og7 TVanciCmJPH3d/CbUBohCVwrk7YttY/GS6+lcClPiebXfcc3Z5kUbvEs08w/UwH4 mafAkREDajTQvNBOSxtrhkgfbcT+nUXg -----END CERTIFICATE-----Generated at Mon Aug 11 07:51:17 2025 by rpki-client