$ rpki-client -vvf rpki.apnic.net/member_repository/A91522E0/C9B90FF8468811EAACF18A28C4F9AE02/TzLs_4zUbD7AP6deEAj0qpoM-JM.mft File: TzLs_4zUbD7AP6deEAj0qpoM-JM.mft (raw, json) Hash identifier: 50P+k23IgrBuY1PiHMffDhJy7ai4j6bHU67wFpIC8PE= Subject key identifier: E2:7F:DC:5E:9B:1A:68:30:E6:CF:07:AF:53:FA:90:C9:F4:33:CF:4F Authority key identifier: 4F:32:EC:FF:8C:D4:6C:3E:C0:3F:A7:5E:10:08:F4:AA:9A:0C:F8:93 Certificate issuer: /CN=A91522E0/serialNumber=4F32ECFF8CD46C3EC03FA75E1008F4AA9A0CF893 Certificate serial: 0B0B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TzLs_4zUbD7AP6deEAj0qpoM-JM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91522E0/C9B90FF8468811EAACF18A28C4F9AE02/TzLs_4zUbD7AP6deEAj0qpoM-JM.mft Manifest number: 0AF7 Signing time: Sat 10 May 2025 19:09:14 +0000 Manifest this update: Sat 10 May 2025 19:09:13 +0000 Manifest next update: Sat 17 May 2025 19:09:13 +0000 Files and hashes: 1: TzLs_4zUbD7AP6deEAj0qpoM-JM.crl (hash: f27nhFVMKhorFL8j3YLV4gmIyozhDuH0wgnxvmkDhGU=) 2: B34C91C4B14311EF8479AA21C4F9AE02.roa (hash: zX8SsdngBGocfr0PjyPYjkXeGxhOELPXVhgI6hsEekQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91522E0/C9B90FF8468811EAACF18A28C4F9AE02/TzLs_4zUbD7AP6deEAj0qpoM-JM.crl rsync://rpki.apnic.net/member_repository/A91522E0/C9B90FF8468811EAACF18A28C4F9AE02/TzLs_4zUbD7AP6deEAj0qpoM-JM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TzLs_4zUbD7AP6deEAj0qpoM-JM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 May 2025 18:24:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2827 (0xb0b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91522E0, serialNumber=4F32ECFF8CD46C3EC03FA75E1008F4AA9A0CF893 Validity Not Before: May 10 19:09:13 2025 GMT Not After : May 17 19:09:13 2025 GMT Subject: CN=681fa45a-a047 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:d4:bc:d5:0b:1c:81:2e:ce:76:6c:ce:b3:47: 8a:de:e6:e8:2d:40:15:ea:b4:6f:6d:1e:8e:68:50: c7:f4:02:c0:d8:26:dd:2c:b5:79:d8:32:a8:77:1b: 6a:fd:a6:64:1c:04:61:b7:74:ab:46:4f:1d:e9:3e: cb:15:7c:4e:e2:e6:1f:fb:e0:b4:de:a1:2a:9e:0f: 3e:0c:d4:45:e2:28:de:91:a6:47:07:06:9c:27:a1: 0b:ca:57:27:bf:10:de:c0:f2:68:d5:e8:18:d0:f4: 90:4d:c1:f8:b7:23:dc:ae:29:88:5b:6d:52:d1:87: 25:85:54:37:7a:7c:f9:0b:90:0a:61:f0:57:34:75: b0:e6:0b:df:9e:68:22:59:70:d0:01:c9:86:88:34: 93:1b:98:9c:fc:be:2e:6e:95:5f:2e:0f:e0:57:c4: 8f:0f:fc:ad:f2:0c:45:f8:91:fa:df:9c:d4:5f:5b: 27:b0:40:04:c2:8c:db:c7:d0:6c:4e:13:5f:71:f9: 54:3d:d3:4b:50:f7:1a:6d:2b:88:f6:91:e0:12:df: ac:77:c2:12:d7:0c:af:89:26:64:4c:4c:d8:d5:20: 3f:b4:8d:6e:1f:d2:f2:c8:8f:e1:3f:79:f2:2b:9e: 8b:9e:21:7c:1b:51:bf:9f:73:06:46:86:ec:16:32: a8:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:7F:DC:5E:9B:1A:68:30:E6:CF:07:AF:53:FA:90:C9:F4:33:CF:4F X509v3 Authority Key Identifier: keyid:4F:32:EC:FF:8C:D4:6C:3E:C0:3F:A7:5E:10:08:F4:AA:9A:0C:F8:93 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91522E0/C9B90FF8468811EAACF18A28C4F9AE02/TzLs_4zUbD7AP6deEAj0qpoM-JM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TzLs_4zUbD7AP6deEAj0qpoM-JM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91522E0/C9B90FF8468811EAACF18A28C4F9AE02/TzLs_4zUbD7AP6deEAj0qpoM-JM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 89:84:64:81:93:71:73:11:c9:9e:35:0a:94:a5:df:6d:27:59: d4:7c:0f:56:2b:7d:04:00:5b:5c:69:b5:ab:ec:15:96:80:7e: 58:76:55:c4:78:89:f0:42:3c:37:09:95:5c:27:1b:04:4a:07: 4d:77:00:7e:ed:fb:60:d9:81:a1:d8:91:a9:d3:65:35:eb:22: cb:08:c8:8b:4f:a3:de:ae:19:29:0c:83:fc:f3:d1:e0:b3:f2: 47:b8:7c:07:9c:2d:8d:20:72:a8:d9:0e:53:a4:33:0c:23:4c: e6:1c:24:d6:d1:5f:a7:38:1e:1d:9e:6e:9c:a5:e6:fd:58:0e: e5:c3:a2:62:5d:33:b4:0f:b6:c2:3c:ce:f6:dc:78:ed:5f:0e: 85:d6:cf:70:b4:33:71:f8:bd:21:f7:c9:e0:f6:f0:c2:2b:b4: d4:36:66:5a:5b:f5:e0:45:9a:2c:37:97:3d:13:3d:17:1f:af: 4d:66:fe:81:04:7a:9d:4f:38:96:a4:1f:63:92:a4:75:8f:64: 67:f8:fe:34:cc:8d:6f:86:23:af:3c:c4:3b:0e:a0:67:59:41: d0:46:d6:1a:a2:31:9d:76:d7:3c:89:55:64:60:c2:8e:be:30: 1c:86:16:df:88:f3:db:7d:9d:3d:1d:2b:26:78:37:c9:5e:aa: 36:59:9a:be -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCwswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTIyRTAxMTAvBgNVBAUTKDRGMzJFQ0ZGOENENDZDM0VDMDNGQTc1RTEwMDhGNEFB OUEwQ0Y4OTMwHhcNMjUwNTEwMTkwOTEzWhcNMjUwNTE3MTkwOTEzWjAYMRYwFAYD VQQDEw02ODFmYTQ1YS1hMDQ3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5NS81QscgS7OdmzOs0eK3uboLUAV6rRvbR6OaFDH9ALA2CbdLLV52DKodxtq /aZkHARht3SrRk8d6T7LFXxO4uYf++C03qEqng8+DNRF4ijekaZHBwacJ6ELylcn vxDewPJo1egY0PSQTcH4tyPcrimIW21S0YclhVQ3enz5C5AKYfBXNHWw5gvfnmgi WXDQAcmGiDSTG5ic/L4ubpVfLg/gV8SPD/yt8gxF+JH635zUX1snsEAEwozbx9Bs ThNfcflUPdNLUPcabSuI9pHgEt+sd8IS1wyviSZkTEzY1SA/tI1uH9LyyI/hP3ny K56LniF8G1G/n3MGRobsFjKo6wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOJ/3F6b Gmgw5s8Hr1P6kMn0M89PMB8GA1UdIwQYMBaAFE8y7P+M1Gw+wD+nXhAI9KqaDPiT MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MjJFMC9DOUI5MEZGODQ2 ODgxMUVBQUNGMThBMjhDNEY5QUUwMi9UekxzXzR6VWJEN0FQNmRlRUFqMHFwb00t Sk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1R6THNfNHpVYkQ3QVA2ZGVFQWowcXBvTS1KTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MjJFMC9DOUI5MEZGODQ2ODgxMUVBQUNGMThBMjhDNEY5QUUwMi9UekxzXzR6VWJE N0FQNmRlRUFqMHFwb00tSk0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCJhGSBk3FzEcmeNQqUpd9tJ1nUfA9WK30EAFtcabWr7BWWgH5YdlXE eInwQjw3CZVcJxsESgdNdwB+7ftg2YGh2JGp02U16yLLCMiLT6PerhkpDIP889Hg s/JHuHwHnC2NIHKo2Q5TpDMMI0zmHCTW0V+nOB4dnm6cpeb9WA7lw6JiXTO0D7bC PM723HjtXw6F1s9wtDNx+L0h98ng9vDCK7TUNmZaW/XgRZosN5c9Ez0XH69NZv6B BHqdTziWpB9jkqR1j2Rn+P40zI1vhiOvPMQ7DqBnWUHQRtYaojGddtc8iVVkYMKO vjAchhbfiPPbfZ09HSsmeDfJXqo2WZq+ -----END CERTIFICATE-----Generated at Sun May 11 02:01:46 2025 by rpki-client