$ rpki-client -vvf rpki.apnic.net/member_repository/A91522E0/C9B90FF8468811EAACF18A28C4F9AE02/TzLs_4zUbD7AP6deEAj0qpoM-JM.mft File: TzLs_4zUbD7AP6deEAj0qpoM-JM.mft (raw, json) Hash identifier: fkc3+QRqS84PtiWThoJXanhfbDl++mfgIvZKp1dWdhM= Subject key identifier: 39:5F:E9:94:88:67:1D:62:FA:71:8D:13:67:1E:20:A1:48:D5:3F:0F Authority key identifier: 4F:32:EC:FF:8C:D4:6C:3E:C0:3F:A7:5E:10:08:F4:AA:9A:0C:F8:93 Certificate issuer: /CN=A91522E0/serialNumber=4F32ECFF8CD46C3EC03FA75E1008F4AA9A0CF893 Certificate serial: 0B5C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TzLs_4zUbD7AP6deEAj0qpoM-JM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91522E0/C9B90FF8468811EAACF18A28C4F9AE02/TzLs_4zUbD7AP6deEAj0qpoM-JM.mft Manifest number: 0B48 Signing time: Sat 18 Oct 2025 20:08:45 +0000 Manifest this update: Sat 18 Oct 2025 20:08:45 +0000 Manifest next update: Sat 25 Oct 2025 20:08:45 +0000 Files and hashes: 1: TzLs_4zUbD7AP6deEAj0qpoM-JM.crl (hash: jl/JLuZXOI+4VZMuNvJOEpPKNP9BVLWEASn4Hi/Y4Sw=) 2: B34C91C4B14311EF8479AA21C4F9AE02.roa (hash: zX8SsdngBGocfr0PjyPYjkXeGxhOELPXVhgI6hsEekQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91522E0/C9B90FF8468811EAACF18A28C4F9AE02/TzLs_4zUbD7AP6deEAj0qpoM-JM.crl rsync://rpki.apnic.net/member_repository/A91522E0/C9B90FF8468811EAACF18A28C4F9AE02/TzLs_4zUbD7AP6deEAj0qpoM-JM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TzLs_4zUbD7AP6deEAj0qpoM-JM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 20:08:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2908 (0xb5c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91522E0, serialNumber=4F32ECFF8CD46C3EC03FA75E1008F4AA9A0CF893 Validity Not Before: Oct 18 20:08:45 2025 GMT Not After : Oct 25 20:08:45 2025 GMT Subject: CN=68f3f3cd-58cd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:7c:c4:3c:3f:29:fc:dd:af:cb:1c:c7:fb:81: 44:fe:5a:d4:1a:bc:9d:a4:6e:da:ab:52:8e:03:54: 35:63:ec:48:1e:b0:b3:31:48:73:ed:17:bf:1b:24: 73:23:8d:24:e2:bc:97:97:b8:05:91:94:3c:ef:f1: 20:78:17:24:ac:6c:f8:5b:9a:f6:54:d4:99:e2:e5: a6:3e:0b:ab:8e:6a:ea:06:f7:5a:61:23:b9:d1:ee: fb:76:ee:88:ae:eb:1e:9c:0d:90:b5:f9:6b:39:f4: 3f:74:f4:f7:a5:ae:7d:47:99:77:ec:9d:19:f6:61: 1f:33:2b:f8:bc:e1:3d:55:43:7c:0f:99:51:35:71: 95:32:c0:40:0b:d2:f4:ee:c0:c1:68:b2:75:59:7f: 9a:93:50:f1:6f:ce:e5:13:a1:8b:73:6a:41:f8:9b: e2:75:90:ac:34:46:7d:2d:39:41:2f:40:f3:96:b3: 47:08:bc:42:ac:48:66:de:e7:12:e0:8b:75:87:e8: bd:94:1b:68:d1:3f:30:cf:9b:e1:dd:22:05:ce:2d: f4:00:4b:aa:82:19:7f:69:a0:bf:44:1a:49:3c:3e: 58:e7:28:ba:67:58:88:46:00:5d:68:34:36:86:19: 1c:20:df:b7:16:6a:b0:ef:e7:cf:05:24:81:79:fa: c8:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:5F:E9:94:88:67:1D:62:FA:71:8D:13:67:1E:20:A1:48:D5:3F:0F X509v3 Authority Key Identifier: keyid:4F:32:EC:FF:8C:D4:6C:3E:C0:3F:A7:5E:10:08:F4:AA:9A:0C:F8:93 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91522E0/C9B90FF8468811EAACF18A28C4F9AE02/TzLs_4zUbD7AP6deEAj0qpoM-JM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TzLs_4zUbD7AP6deEAj0qpoM-JM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91522E0/C9B90FF8468811EAACF18A28C4F9AE02/TzLs_4zUbD7AP6deEAj0qpoM-JM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 34:be:8d:02:07:05:da:aa:48:01:fc:b2:87:9d:ac:e2:e4:90: 9a:77:cc:d3:5e:c2:49:86:eb:7f:b5:6a:74:19:15:6e:fa:4d: e8:70:db:4a:40:0b:af:18:b3:ae:05:3f:40:0d:76:2e:dc:ab: 85:95:fc:a1:cb:57:c7:c7:0b:fb:1f:e6:a7:9e:72:c4:27:09: fa:ef:f0:a2:eb:b7:f9:25:16:12:d8:cc:35:01:ac:56:af:fb: 96:37:0a:14:0c:a2:b8:8a:f3:b2:e2:93:a1:8b:01:67:ae:03: c7:6b:a5:e9:71:ae:37:4b:0e:95:27:d4:8b:01:fa:a6:1c:aa: 53:46:98:ee:fc:63:27:90:2f:73:41:76:93:f6:7b:03:07:45: 5b:b8:d6:d4:33:cb:2d:16:ed:7f:39:3c:a3:51:52:47:21:20: ff:64:65:c1:b2:74:ae:ea:77:c8:69:ab:54:ca:d9:1a:78:e7: 2c:fb:22:80:db:ed:d1:36:fa:64:9f:1a:5e:03:d2:56:c6:31: 3d:86:eb:52:51:8d:0a:b5:70:24:b0:c7:01:98:7b:8e:20:ed: 0d:94:ba:fe:2d:46:38:97:34:a5:78:ad:90:e0:97:1e:fd:65: b0:38:9e:ac:33:fc:59:11:3a:93:c6:b8:38:61:4a:03:4b:76: 26:35:91:e5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC1wwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTIyRTAxMTAvBgNVBAUTKDRGMzJFQ0ZGOENENDZDM0VDMDNGQTc1RTEwMDhGNEFB OUEwQ0Y4OTMwHhcNMjUxMDE4MjAwODQ1WhcNMjUxMDI1MjAwODQ1WjAYMRYwFAYD VQQDEw02OGYzZjNjZC01OGNkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2XzEPD8p/N2vyxzH+4FE/lrUGrydpG7aq1KOA1Q1Y+xIHrCzMUhz7Re/GyRz I40k4ryXl7gFkZQ87/EgeBckrGz4W5r2VNSZ4uWmPgurjmrqBvdaYSO50e77du6I rusenA2QtflrOfQ/dPT3pa59R5l37J0Z9mEfMyv4vOE9VUN8D5lRNXGVMsBAC9L0 7sDBaLJ1WX+ak1Dxb87lE6GLc2pB+JvidZCsNEZ9LTlBL0DzlrNHCLxCrEhm3ucS 4It1h+i9lBto0T8wz5vh3SIFzi30AEuqghl/aaC/RBpJPD5Y5yi6Z1iIRgBdaDQ2 hhkcIN+3Fmqw7+fPBSSBefrI/QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDlf6ZSI Zx1i+nGNE2ceIKFI1T8PMB8GA1UdIwQYMBaAFE8y7P+M1Gw+wD+nXhAI9KqaDPiT MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MjJFMC9DOUI5MEZGODQ2 ODgxMUVBQUNGMThBMjhDNEY5QUUwMi9UekxzXzR6VWJEN0FQNmRlRUFqMHFwb00t Sk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1R6THNfNHpVYkQ3QVA2ZGVFQWowcXBvTS1KTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MjJFMC9DOUI5MEZGODQ2ODgxMUVBQUNGMThBMjhDNEY5QUUwMi9UekxzXzR6VWJE N0FQNmRlRUFqMHFwb00tSk0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA0vo0CBwXaqkgB/LKHnazi5JCad8zTXsJJhut/tWp0GRVu+k3ocNtK QAuvGLOuBT9ADXYu3KuFlfyhy1fHxwv7H+annnLEJwn67/Ci67f5JRYS2Mw1AaxW r/uWNwoUDKK4ivOy4pOhiwFnrgPHa6Xpca43Sw6VJ9SLAfqmHKpTRpju/GMnkC9z QXaT9nsDB0VbuNbUM8stFu1/OTyjUVJHISD/ZGXBsnSu6nfIaatUytkaeOcs+yKA 2+3RNvpknxpeA9JWxjE9hutSUY0KtXAksMcBmHuOIO0NlLr+LUY4lzSleK2Q4Jce /WWwOJ6sM/xZETqTxrg4YUoDS3YmNZHl -----END CERTIFICATE-----Generated at Mon Oct 20 07:05:44 2025 by rpki-client