$ rpki-client -vvf rpki.apnic.net/member_repository/A914FE53/80B228F8FBDD11EE8984ED30C4F9AE02/TzGZCs_Vnb42pwwFIEtDuSlvU2w.mft File: TzGZCs_Vnb42pwwFIEtDuSlvU2w.mft (raw, json) Hash identifier: ocrf8HTLGPT3auZYVuz3sAwj9XqNN2EljZxONYg4ou4= Subject key identifier: C8:DC:92:AB:94:0E:8B:B4:09:7A:30:C7:A7:B4:0B:56:BB:92:84:BB Authority key identifier: 4F:31:99:0A:CF:D5:9D:BE:36:A7:0C:05:20:4B:43:B9:29:6F:53:6C Certificate issuer: /CN=A914FE53/serialNumber=4F31990ACFD59DBE36A70C05204B43B9296F536C Certificate serial: E5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TzGZCs_Vnb42pwwFIEtDuSlvU2w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914FE53/80B228F8FBDD11EE8984ED30C4F9AE02/TzGZCs_Vnb42pwwFIEtDuSlvU2w.mft Manifest number: E1 Signing time: Tue 01 Jul 2025 05:59:07 +0000 Manifest this update: Tue 01 Jul 2025 05:59:07 +0000 Manifest next update: Tue 08 Jul 2025 05:59:07 +0000 Files and hashes: 1: TzGZCs_Vnb42pwwFIEtDuSlvU2w.crl (hash: VA2SgkHeaNQgrSHKS4YS1KB/7FKmPsKX+f6yBoLjcks=) 2: E3F7E3DAFBDD11EE8914AD31C4F9AE02.roa (hash: DdKCynIF2QkHo2PO8684k4cU1Szr4+DYT4h1WAaKo1Y=) 3: E387F700FBDD11EE8914AD31C4F9AE02.roa (hash: oQGf8UeNLRAoFQkfiIvmUxfekUFi9chn7l63adDoD3s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914FE53/80B228F8FBDD11EE8984ED30C4F9AE02/TzGZCs_Vnb42pwwFIEtDuSlvU2w.crl rsync://rpki.apnic.net/member_repository/A914FE53/80B228F8FBDD11EE8984ED30C4F9AE02/TzGZCs_Vnb42pwwFIEtDuSlvU2w.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TzGZCs_Vnb42pwwFIEtDuSlvU2w.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 08 Jul 2025 05:59:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 229 (0xe5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914FE53, serialNumber=4F31990ACFD59DBE36A70C05204B43B9296F536C Validity Not Before: Jul 1 05:59:07 2025 GMT Not After : Jul 8 05:59:07 2025 GMT Subject: CN=6863792b-0458 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:d8:9e:00:bd:44:9a:86:89:9f:b7:39:fb:fa: a8:52:10:3a:18:4b:13:fa:96:51:90:47:86:9a:c1: 15:d5:32:d6:77:33:e5:29:4a:24:4d:03:6c:ef:4b: a7:2f:01:e8:6c:1d:3c:97:dd:54:0f:ca:c1:f1:0d: 84:74:c7:7f:21:6b:df:2a:55:a2:7d:70:4e:b0:cd: 66:db:e2:50:26:06:b5:60:df:0f:fc:62:1c:53:71: b0:89:92:a7:61:24:0b:90:99:d6:c1:a6:01:31:61: 91:b7:fe:f7:53:dc:e1:c7:22:5e:79:af:dd:ab:9a: ce:b5:a5:39:32:ff:c2:34:82:38:e0:34:1a:34:63: b5:b8:20:0c:ab:58:be:0e:ed:43:a9:9e:00:fd:79: cc:45:b7:82:0e:a0:37:86:c7:fe:c0:db:0c:6b:19: a7:ee:c6:07:d7:5a:bb:c4:0c:af:e4:32:50:e7:54: d4:3b:ca:a8:aa:dc:b4:10:22:31:8b:cc:91:9c:fc: 90:fd:08:f5:57:00:1a:ed:c8:bb:ab:2f:17:ac:e4: cd:09:75:85:aa:ea:84:ee:40:ea:7c:1a:e5:42:ed: a9:9f:1d:c0:c5:6a:20:d2:ab:32:61:49:a7:6a:ae: 97:14:b9:10:7a:02:60:73:f1:9e:33:8e:37:10:7c: 77:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:DC:92:AB:94:0E:8B:B4:09:7A:30:C7:A7:B4:0B:56:BB:92:84:BB X509v3 Authority Key Identifier: keyid:4F:31:99:0A:CF:D5:9D:BE:36:A7:0C:05:20:4B:43:B9:29:6F:53:6C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914FE53/80B228F8FBDD11EE8984ED30C4F9AE02/TzGZCs_Vnb42pwwFIEtDuSlvU2w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TzGZCs_Vnb42pwwFIEtDuSlvU2w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914FE53/80B228F8FBDD11EE8984ED30C4F9AE02/TzGZCs_Vnb42pwwFIEtDuSlvU2w.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 05:71:8b:05:90:eb:5b:bf:11:d0:65:9f:e2:f9:d2:a8:85:7e: f4:1d:fb:3a:52:b5:25:37:dc:14:23:a0:c2:26:8e:1c:da:3a: ee:0c:cd:83:cd:8b:a3:8a:9d:f1:88:97:16:c7:d1:b7:d9:a0: 5d:6a:ab:a8:61:29:99:19:3e:a8:d3:85:02:af:c2:fc:5e:52: ee:82:51:92:75:3e:37:bb:1a:34:9d:cc:43:89:a0:f5:7c:fe: 90:09:76:f5:98:35:00:e9:cf:9f:43:f1:e1:7c:6b:c6:ed:4a: 12:cc:60:3d:f9:9f:fe:1c:41:6f:57:f4:44:38:28:ab:8b:07: 29:96:b1:3f:53:59:ae:e3:48:28:9b:15:1d:f2:98:68:54:35: a4:ff:e8:79:7b:21:1c:30:b2:59:ad:3b:b2:7d:d0:50:f9:a2: 64:78:41:c6:76:9c:0a:88:65:ad:e7:f6:6b:2e:ba:f5:32:1f: fe:26:33:12:f8:a5:3f:e4:ce:4d:16:62:d3:f6:39:e2:d2:ba: 8c:46:33:7a:32:dd:49:94:23:c5:c1:69:da:ee:ff:01:20:c2: 99:93:c9:2a:d4:58:cd:2c:d9:c2:87:38:eb:95:f3:11:fc:aa: c6:30:ea:a4:e3:08:2e:f9:2d:59:fd:37:29:95:fc:3d:66:99: f6:0b:a5:0a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAOUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEZFNTMxMTAvBgNVBAUTKDRGMzE5OTBBQ0ZENTlEQkUzNkE3MEMwNTIwNEI0M0I5 Mjk2RjUzNkMwHhcNMjUwNzAxMDU1OTA3WhcNMjUwNzA4MDU1OTA3WjAYMRYwFAYD VQQDEw02ODYzNzkyYi0wNDU4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6tieAL1EmoaJn7c5+/qoUhA6GEsT+pZRkEeGmsEV1TLWdzPlKUokTQNs70un LwHobB08l91UD8rB8Q2EdMd/IWvfKlWifXBOsM1m2+JQJga1YN8P/GIcU3GwiZKn YSQLkJnWwaYBMWGRt/73U9zhxyJeea/dq5rOtaU5Mv/CNII44DQaNGO1uCAMq1i+ Du1DqZ4A/XnMRbeCDqA3hsf+wNsMaxmn7sYH11q7xAyv5DJQ51TUO8qoqty0ECIx i8yRnPyQ/Qj1VwAa7ci7qy8XrOTNCXWFquqE7kDqfBrlQu2pnx3AxWog0qsyYUmn aq6XFLkQegJgc/GeM443EHx3vwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMjckquU Dou0CXowx6e0C1a7koS7MB8GA1UdIwQYMBaAFE8xmQrP1Z2+NqcMBSBLQ7kpb1Ns MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RkU1My84MEIyMjhGOEZC REQxMUVFODk4NEVEMzBDNEY5QUUwMi9UekdaQ3NfVm5iNDJwd3dGSUV0RHVTbHZV MncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1R6R1pDc19WbmI0MnB3d0ZJRXREdVNsdlUydy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 RkU1My84MEIyMjhGOEZCREQxMUVFODk4NEVEMzBDNEY5QUUwMi9UekdaQ3NfVm5i NDJwd3dGSUV0RHVTbHZVMncubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAFcYsFkOtbvxHQZZ/i+dKohX70Hfs6UrUlN9wUI6DCJo4c2jruDM2D zYujip3xiJcWx9G32aBdaquoYSmZGT6o04UCr8L8XlLuglGSdT43uxo0ncxDiaD1 fP6QCXb1mDUA6c+fQ/HhfGvG7UoSzGA9+Z/+HEFvV/REOCiriwcplrE/U1mu40go mxUd8phoVDWk/+h5eyEcMLJZrTuyfdBQ+aJkeEHGdpwKiGWt5/ZrLrr1Mh/+JjMS +KU/5M5NFmLT9jni0rqMRjN6Mt1JlCPFwWna7v8BIMKZk8kq1FjNLNnChzjrlfMR /KrGMOqk4wgu+S1Z/Tcplfw9Zpn2C6UK -----END CERTIFICATE-----Generated at Wed Jul 2 23:45:13 2025 by rpki-client