$ rpki-client -vvf rpki.apnic.net/member_repository/A91522E0/C9B90FF8468811EAACF18A28C4F9AE02/TzLs_4zUbD7AP6deEAj0qpoM-JM.mft File: TzLs_4zUbD7AP6deEAj0qpoM-JM.mft (raw, json) Hash identifier: Cg5wpFqBFvTeH4oJlWCLSLeyr10/TVV15cRDerxqrcs= Subject key identifier: AA:C5:49:DB:B1:90:F6:DA:0E:2F:80:34:0E:CF:C7:24:C7:73:46:35 Authority key identifier: 4F:32:EC:FF:8C:D4:6C:3E:C0:3F:A7:5E:10:08:F4:AA:9A:0C:F8:93 Certificate issuer: /CN=A91522E0/serialNumber=4F32ECFF8CD46C3EC03FA75E1008F4AA9A0CF893 Certificate serial: 0B24 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TzLs_4zUbD7AP6deEAj0qpoM-JM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91522E0/C9B90FF8468811EAACF18A28C4F9AE02/TzLs_4zUbD7AP6deEAj0qpoM-JM.mft Manifest number: 0B10 Signing time: Mon 30 Jun 2025 19:29:53 +0000 Manifest this update: Mon 30 Jun 2025 19:29:52 +0000 Manifest next update: Mon 07 Jul 2025 19:29:52 +0000 Files and hashes: 1: TzLs_4zUbD7AP6deEAj0qpoM-JM.crl (hash: EKmxJflF1J4zhzagduNq6g51tztnEqG4GjTH7iisBWY=) 2: B34C91C4B14311EF8479AA21C4F9AE02.roa (hash: zX8SsdngBGocfr0PjyPYjkXeGxhOELPXVhgI6hsEekQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91522E0/C9B90FF8468811EAACF18A28C4F9AE02/TzLs_4zUbD7AP6deEAj0qpoM-JM.crl rsync://rpki.apnic.net/member_repository/A91522E0/C9B90FF8468811EAACF18A28C4F9AE02/TzLs_4zUbD7AP6deEAj0qpoM-JM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TzLs_4zUbD7AP6deEAj0qpoM-JM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Jul 2025 19:29:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2852 (0xb24) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91522E0, serialNumber=4F32ECFF8CD46C3EC03FA75E1008F4AA9A0CF893 Validity Not Before: Jun 30 19:29:52 2025 GMT Not After : Jul 7 19:29:52 2025 GMT Subject: CN=6862e5b1-44ce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:84:eb:d0:38:1b:cc:aa:98:81:43:a9:93:04: c4:56:85:07:cb:73:3f:be:23:b0:9b:0a:87:28:2b: f4:b8:6b:8c:23:d5:84:f5:69:62:9c:a5:77:06:61: a8:f4:a0:2e:ae:13:4c:1c:21:81:0f:a9:ca:72:14: 93:d8:2e:2c:44:62:77:c2:e8:65:b3:b9:a6:c9:76: c2:da:29:0d:72:c3:f8:96:84:54:c9:5d:22:ed:fa: ad:b2:91:dd:0c:cf:aa:05:3f:c5:15:51:44:84:2d: df:b9:d7:ca:ed:86:60:e6:19:61:bb:b5:76:97:72: f7:c4:08:e6:3b:40:98:7f:9e:20:c5:d3:5d:77:8f: e6:18:52:b2:2f:58:2c:c1:42:1c:2e:d5:e7:d8:8f: af:aa:95:f6:73:00:44:d0:ec:14:9b:58:5d:c0:42: 99:22:d8:06:fe:65:61:18:14:4e:2f:c3:ac:8b:dd: dd:19:5a:6f:78:f7:f8:d4:25:46:3f:f9:20:a5:7e: 95:20:66:e5:d7:d3:6a:29:3e:d4:75:40:31:3d:0e: 77:1a:6b:37:24:8f:e3:f5:eb:61:2e:7d:8e:d1:02: bb:ff:24:b4:96:ac:aa:4e:c4:4a:5d:19:6c:23:7c: 7e:4e:1f:15:59:bc:1f:1d:b9:4d:a7:07:e2:b2:55: c3:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:C5:49:DB:B1:90:F6:DA:0E:2F:80:34:0E:CF:C7:24:C7:73:46:35 X509v3 Authority Key Identifier: keyid:4F:32:EC:FF:8C:D4:6C:3E:C0:3F:A7:5E:10:08:F4:AA:9A:0C:F8:93 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91522E0/C9B90FF8468811EAACF18A28C4F9AE02/TzLs_4zUbD7AP6deEAj0qpoM-JM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TzLs_4zUbD7AP6deEAj0qpoM-JM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91522E0/C9B90FF8468811EAACF18A28C4F9AE02/TzLs_4zUbD7AP6deEAj0qpoM-JM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption cd:1a:09:4a:ca:6c:b8:68:37:20:3c:d5:9e:6e:9e:a9:2b:ad: 2c:39:86:14:ca:8e:73:9c:56:d4:2b:f1:c4:c6:8b:d9:ce:d4: 0a:e2:e2:4e:ef:79:96:8c:0b:ed:ed:9e:ea:31:63:88:5b:7b: fc:3a:af:c3:8f:f9:c3:00:e4:10:ab:c4:f3:ba:63:49:be:98: d2:7f:34:1f:3e:2e:5a:d6:18:8e:9f:dc:66:af:51:82:8c:2a: af:da:76:f9:01:51:8a:63:65:e5:94:6a:9e:72:a9:60:16:41: a4:d8:59:c3:af:31:39:b8:09:ed:ee:dc:dc:f2:b7:68:6f:fd: 3c:ce:c6:e8:55:d5:8b:ea:02:72:16:0e:64:7f:49:92:59:0a: 4b:67:94:8e:b6:1f:e0:f8:29:85:4c:5e:d3:51:88:36:3f:90: 58:b1:47:41:1d:3a:24:df:80:32:94:82:bd:a9:67:75:62:fd: 36:b2:bf:3b:49:45:58:25:66:29:d4:f2:b8:7e:b4:76:a6:81: c2:d9:0c:b2:55:07:d8:97:cb:62:a2:50:0b:19:cc:95:ff:f4: 7b:e9:da:96:09:37:db:16:ee:43:84:7a:75:05:f9:38:65:ff: 6a:94:74:94:bf:10:2d:aa:58:38:06:ec:68:d6:5b:01:2d:f8: 65:7c:50:b9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCyQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTIyRTAxMTAvBgNVBAUTKDRGMzJFQ0ZGOENENDZDM0VDMDNGQTc1RTEwMDhGNEFB OUEwQ0Y4OTMwHhcNMjUwNjMwMTkyOTUyWhcNMjUwNzA3MTkyOTUyWjAYMRYwFAYD VQQDEw02ODYyZTViMS00NGNlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAs4Tr0DgbzKqYgUOpkwTEVoUHy3M/viOwmwqHKCv0uGuMI9WE9WlinKV3BmGo 9KAurhNMHCGBD6nKchST2C4sRGJ3wuhls7mmyXbC2ikNcsP4loRUyV0i7fqtspHd DM+qBT/FFVFEhC3fudfK7YZg5hlhu7V2l3L3xAjmO0CYf54gxdNdd4/mGFKyL1gs wUIcLtXn2I+vqpX2cwBE0OwUm1hdwEKZItgG/mVhGBROL8Osi93dGVpvePf41CVG P/kgpX6VIGbl19NqKT7UdUAxPQ53Gms3JI/j9ethLn2O0QK7/yS0lqyqTsRKXRls I3x+Th8VWbwfHblNpwfislXDnwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKrFSdux kPbaDi+ANA7PxyTHc0Y1MB8GA1UdIwQYMBaAFE8y7P+M1Gw+wD+nXhAI9KqaDPiT MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MjJFMC9DOUI5MEZGODQ2 ODgxMUVBQUNGMThBMjhDNEY5QUUwMi9UekxzXzR6VWJEN0FQNmRlRUFqMHFwb00t Sk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1R6THNfNHpVYkQ3QVA2ZGVFQWowcXBvTS1KTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MjJFMC9DOUI5MEZGODQ2ODgxMUVBQUNGMThBMjhDNEY5QUUwMi9UekxzXzR6VWJE N0FQNmRlRUFqMHFwb00tSk0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDNGglKymy4aDcgPNWebp6pK60sOYYUyo5znFbUK/HExovZztQK4uJO 73mWjAvt7Z7qMWOIW3v8Oq/Dj/nDAOQQq8TzumNJvpjSfzQfPi5a1hiOn9xmr1GC jCqv2nb5AVGKY2XllGqecqlgFkGk2FnDrzE5uAnt7tzc8rdob/08zsboVdWL6gJy Fg5kf0mSWQpLZ5SOth/g+CmFTF7TUYg2P5BYsUdBHTok34AylIK9qWd1Yv02sr87 SUVYJWYp1PK4frR2poHC2QyyVQfYl8tiolALGcyV//R76dqWCTfbFu5DhHp1Bfk4 Zf9qlHSUvxAtqlg4Buxo1lsBLfhlfFC5 -----END CERTIFICATE-----Generated at Tue Jul 1 06:24:00 2025 by rpki-client