$ rpki-client -vvf rpki.apnic.net/member_repository/A91957C9/C359E75EAC1911E983F2FC62C4F9AE02/TzFe71rLLtp6NynnnhNZkMAecHQ.mft File: TzFe71rLLtp6NynnnhNZkMAecHQ.mft (raw, json) Hash identifier: TWhpQgxCpSvijHZqxstjhH8I4FJuZgKX6NAQeETZ5JE= Subject key identifier: 2B:C5:61:2B:AB:17:C2:D8:F2:26:C1:FC:C4:7C:8F:B0:FA:28:A6:33 Authority key identifier: 4F:31:5E:EF:5A:CB:2E:DA:7A:37:29:E7:9E:13:59:90:C0:1E:70:74 Certificate issuer: /CN=A91957C9/serialNumber=4F315EEF5ACB2EDA7A3729E79E135990C01E7074 Certificate serial: 0E41 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TzFe71rLLtp6NynnnhNZkMAecHQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91957C9/C359E75EAC1911E983F2FC62C4F9AE02/TzFe71rLLtp6NynnnhNZkMAecHQ.mft Manifest number: 0E35 Signing time: Fri 22 Aug 2025 17:54:02 +0000 Manifest this update: Fri 22 Aug 2025 17:54:01 +0000 Manifest next update: Fri 29 Aug 2025 17:54:01 +0000 Files and hashes: 1: TzFe71rLLtp6NynnnhNZkMAecHQ.crl (hash: TEKt6KTpEYcockWXVEQJupHwrXlUItjUFBNR7x045Vg=) 2: B55EC19EAC2B11E996F6E511C4F9AE02.roa (hash: Kmbnqjt+FsbQjmxP1orKor9zYnpCPWPxfhoKQqbWYu0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91957C9/C359E75EAC1911E983F2FC62C4F9AE02/TzFe71rLLtp6NynnnhNZkMAecHQ.crl rsync://rpki.apnic.net/member_repository/A91957C9/C359E75EAC1911E983F2FC62C4F9AE02/TzFe71rLLtp6NynnnhNZkMAecHQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TzFe71rLLtp6NynnnhNZkMAecHQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 17:54:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3649 (0xe41) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91957C9, serialNumber=4F315EEF5ACB2EDA7A3729E79E135990C01E7074 Validity Not Before: Aug 22 17:54:01 2025 GMT Not After : Aug 29 17:54:01 2025 GMT Subject: CN=68a8aeb9-962c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:84:b3:0e:48:0e:8a:87:fc:6a:18:9c:5f:ec: da:d4:03:e5:5c:c0:08:23:c4:fb:06:08:a1:91:3d: 98:50:8c:64:62:57:2a:d3:24:21:6b:3b:75:c3:71: 94:e2:c9:1b:cd:04:f4:4f:09:db:96:25:12:7f:9c: 92:81:be:8e:d7:53:74:e7:e9:77:ca:c7:2d:e8:bb: 49:37:b2:7e:c1:01:9a:c8:aa:97:10:fc:fd:5d:3e: e9:76:d7:9e:b4:36:89:bb:94:67:be:7a:85:d3:21: bc:68:dd:6e:e4:b2:3c:ee:bc:e3:89:f0:28:75:80: 4b:45:33:d2:c2:3c:b8:63:1b:06:cd:ba:46:dc:8f: b4:7c:5d:8d:2e:93:ce:86:9c:42:8a:f9:0b:24:c7: 8d:7d:c4:ae:ef:0a:2b:c0:0d:0f:65:ce:d8:c4:ff: 86:ad:c5:d4:cb:10:c7:a6:61:5a:26:66:d3:b4:58: af:96:a7:e9:f6:4c:49:19:c4:91:5d:03:23:be:9e: f6:79:11:ad:62:19:49:b3:f0:8d:ee:3c:1d:2d:f6: fb:7f:ad:42:6e:49:17:97:55:60:d9:2f:4f:a0:9e: 2f:6c:52:32:bf:0e:fd:f5:fc:6d:20:5a:fe:0f:ed: 7f:bb:42:be:7f:38:af:5a:f2:35:b9:43:51:e0:28: e8:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:C5:61:2B:AB:17:C2:D8:F2:26:C1:FC:C4:7C:8F:B0:FA:28:A6:33 X509v3 Authority Key Identifier: keyid:4F:31:5E:EF:5A:CB:2E:DA:7A:37:29:E7:9E:13:59:90:C0:1E:70:74 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91957C9/C359E75EAC1911E983F2FC62C4F9AE02/TzFe71rLLtp6NynnnhNZkMAecHQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TzFe71rLLtp6NynnnhNZkMAecHQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91957C9/C359E75EAC1911E983F2FC62C4F9AE02/TzFe71rLLtp6NynnnhNZkMAecHQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8c:a2:97:3e:11:9c:c8:09:ee:20:5f:06:e1:d8:f9:76:ab:2c: 5f:b1:64:69:27:57:65:f7:dc:d7:68:ca:8f:d1:66:61:85:2a: 80:2c:bd:22:a9:63:88:0f:ec:af:ee:d2:1e:d9:24:4c:de:b0: 42:9a:20:98:2e:17:e2:cd:54:be:5d:9d:a7:55:38:2a:62:ee: 4a:ef:d6:b8:98:ca:49:49:b1:fb:6a:15:80:7d:93:a1:c2:81: 06:eb:4b:3d:70:ee:55:54:08:ea:52:e6:dc:e8:89:7e:ff:e6: db:4c:b8:df:9d:4c:87:69:f3:49:4f:0b:84:07:f4:6a:09:01: 1a:99:05:12:32:63:cc:10:52:2c:aa:e3:42:c5:dc:d1:fc:90: e5:02:83:f1:a5:36:20:87:5a:0e:0d:8c:d9:d1:5f:13:e4:52: 84:59:d0:85:5a:d8:76:9b:6a:e2:94:c8:f0:e9:40:d9:a4:5f: c6:c3:68:b7:86:28:e0:82:1e:75:7c:23:54:a8:eb:65:d2:73: fd:60:24:93:6e:e1:c5:e5:db:7d:1d:8b:2f:fa:fd:1e:0e:d4: aa:ca:72:06:1e:5b:fe:df:eb:1d:b8:5c:3e:9f:ac:85:3f:44: 62:13:4e:92:a5:64:93:cc:a2:4b:a7:8c:b2:ad:8c:18:90:16: ed:fa:d0:eb -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDkEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTU3QzkxMTAvBgNVBAUTKDRGMzE1RUVGNUFDQjJFREE3QTM3MjlFNzlFMTM1OTkw QzAxRTcwNzQwHhcNMjUwODIyMTc1NDAxWhcNMjUwODI5MTc1NDAxWjAYMRYwFAYD VQQDEw02OGE4YWViOS05NjJjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqoSzDkgOiof8ahicX+za1APlXMAII8T7BgihkT2YUIxkYlcq0yQhazt1w3GU 4skbzQT0TwnbliUSf5ySgb6O11N05+l3ysct6LtJN7J+wQGayKqXEPz9XT7pdtee tDaJu5RnvnqF0yG8aN1u5LI87rzjifAodYBLRTPSwjy4YxsGzbpG3I+0fF2NLpPO hpxCivkLJMeNfcSu7worwA0PZc7YxP+GrcXUyxDHpmFaJmbTtFivlqfp9kxJGcSR XQMjvp72eRGtYhlJs/CN7jwdLfb7f61CbkkXl1Vg2S9PoJ4vbFIyvw799fxtIFr+ D+1/u0K+fzivWvI1uUNR4CjojwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCvFYSur F8LY8ibB/MR8j7D6KKYzMB8GA1UdIwQYMBaAFE8xXu9ayy7aejcp554TWZDAHnB0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NTdDOS9DMzU5RTc1RUFD MTkxMUU5ODNGMkZDNjJDNEY5QUUwMi9UekZlNzFyTEx0cDZOeW5ubmhOWmtNQWVj SFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1R6RmU3MXJMTHRwNk55bm5uaE5aa01BZWNIUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NTdDOS9DMzU5RTc1RUFDMTkxMUU5ODNGMkZDNjJDNEY5QUUwMi9UekZlNzFyTEx0 cDZOeW5ubmhOWmtNQWVjSFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCMopc+EZzICe4gXwbh2Pl2qyxfsWRpJ1dl99zXaMqP0WZhhSqALL0i qWOID+yv7tIe2SRM3rBCmiCYLhfizVS+XZ2nVTgqYu5K79a4mMpJSbH7ahWAfZOh woEG60s9cO5VVAjqUubc6Il+/+bbTLjfnUyHafNJTwuEB/RqCQEamQUSMmPMEFIs quNCxdzR/JDlAoPxpTYgh1oODYzZ0V8T5FKEWdCFWth2m2rilMjw6UDZpF/Gw2i3 hijggh51fCNUqOtl0nP9YCSTbuHF5dt9HYsv+v0eDtSqynIGHlv+3+sduFw+n6yF P0RiE06SpWSTzKJLp4yyrYwYkBbt+tDr -----END CERTIFICATE-----Generated at Sun Aug 24 00:12:59 2025 by rpki-client