$ rpki-client -vvf rpki.apnic.net/member_repository/A91957C9/C359E75EAC1911E983F2FC62C4F9AE02/TzFe71rLLtp6NynnnhNZkMAecHQ.mft File: TzFe71rLLtp6NynnnhNZkMAecHQ.mft (raw, json) Hash identifier: D2WAm4oKnu46U6+Jhy6zt1GY+6DwKiJp8+c7+JIePBA= Subject key identifier: B3:7D:88:E0:59:6F:0D:67:7D:FF:AB:BE:52:7A:B9:38:E3:BC:D8:8A Authority key identifier: 4F:31:5E:EF:5A:CB:2E:DA:7A:37:29:E7:9E:13:59:90:C0:1E:70:74 Certificate issuer: /CN=A91957C9/serialNumber=4F315EEF5ACB2EDA7A3729E79E135990C01E7074 Certificate serial: 0E5E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TzFe71rLLtp6NynnnhNZkMAecHQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91957C9/C359E75EAC1911E983F2FC62C4F9AE02/TzFe71rLLtp6NynnnhNZkMAecHQ.mft Manifest number: 0E52 Signing time: Sat 18 Oct 2025 18:24:26 +0000 Manifest this update: Sat 18 Oct 2025 18:24:25 +0000 Manifest next update: Sat 25 Oct 2025 18:24:25 +0000 Files and hashes: 1: TzFe71rLLtp6NynnnhNZkMAecHQ.crl (hash: RUrMlZLlv2pSZLQX5bhHKnWTV5YDS8RIFyhsMr1zoJY=) 2: B55EC19EAC2B11E996F6E511C4F9AE02.roa (hash: Kmbnqjt+FsbQjmxP1orKor9zYnpCPWPxfhoKQqbWYu0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91957C9/C359E75EAC1911E983F2FC62C4F9AE02/TzFe71rLLtp6NynnnhNZkMAecHQ.crl rsync://rpki.apnic.net/member_repository/A91957C9/C359E75EAC1911E983F2FC62C4F9AE02/TzFe71rLLtp6NynnnhNZkMAecHQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TzFe71rLLtp6NynnnhNZkMAecHQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 18:24:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3678 (0xe5e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91957C9, serialNumber=4F315EEF5ACB2EDA7A3729E79E135990C01E7074 Validity Not Before: Oct 18 18:24:25 2025 GMT Not After : Oct 25 18:24:25 2025 GMT Subject: CN=68f3db59-5121 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:17:1d:c7:d6:bb:3e:da:08:c7:1f:b6:22:a7: cf:79:77:7c:ca:3c:14:c2:52:c3:51:e8:77:ec:75: dd:58:51:af:98:fe:cd:8b:f6:85:b6:1c:30:89:03: ee:a8:1f:cd:95:b5:10:c3:f8:94:01:2f:0d:ca:49: 15:51:55:9a:0a:a0:0b:f2:18:e7:41:57:a9:82:48: ed:de:7a:b6:7c:4d:c0:92:d4:ba:25:a3:ca:0c:cf: 01:ef:e1:92:92:b0:7c:1d:33:c4:49:90:2f:1a:76: 1c:23:ac:4d:59:65:16:54:ff:27:9d:b5:57:e6:08: e3:1d:7e:ee:34:40:ec:69:df:2d:3d:7e:26:32:6a: db:ad:ff:3e:0c:65:bf:b8:29:5f:b7:3d:de:1c:50: 9a:19:51:e0:df:8b:06:99:7b:32:d3:39:fd:78:da: 64:42:6c:92:52:89:a8:47:1d:20:28:48:0d:07:3a: 09:cb:7e:27:3c:64:4c:a0:21:ec:c0:01:d4:02:58: 59:8a:79:b8:25:6a:e9:b3:a5:25:3f:8b:1a:ac:98: 09:8d:71:7f:e8:b8:e0:ff:59:80:c0:57:d6:32:98: 67:e9:45:7c:7a:b6:fd:4f:1d:dc:f6:d6:0c:e8:8f: d6:29:4f:54:88:b4:e2:8e:3b:78:fd:59:b5:3d:fa: b8:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:7D:88:E0:59:6F:0D:67:7D:FF:AB:BE:52:7A:B9:38:E3:BC:D8:8A X509v3 Authority Key Identifier: keyid:4F:31:5E:EF:5A:CB:2E:DA:7A:37:29:E7:9E:13:59:90:C0:1E:70:74 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91957C9/C359E75EAC1911E983F2FC62C4F9AE02/TzFe71rLLtp6NynnnhNZkMAecHQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TzFe71rLLtp6NynnnhNZkMAecHQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91957C9/C359E75EAC1911E983F2FC62C4F9AE02/TzFe71rLLtp6NynnnhNZkMAecHQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 28:7c:4d:2b:dc:d5:63:f6:39:ee:99:73:f2:42:48:69:70:32: e4:ac:b9:ef:62:12:09:7d:5a:b2:c8:ba:f9:3a:ac:e8:c3:34: 7c:a0:f1:4e:ff:30:44:70:23:61:6e:59:4c:f5:c4:14:da:b6: c1:40:19:13:83:4a:c3:01:2d:2c:53:71:62:66:7b:08:14:1e: ae:e8:75:da:11:48:06:75:06:4c:f0:69:f5:82:d8:e5:f1:df: e2:bf:96:9d:f9:c3:ae:c4:83:f4:45:c6:b2:21:b0:3b:15:3b: 64:8d:2b:d8:04:86:41:dd:d2:cd:ec:ba:cf:28:7c:9f:ff:dc: 01:10:c0:21:ab:bc:18:82:5c:8b:ac:cd:2c:10:a2:d7:31:11: bd:a8:92:92:bf:5a:b0:6e:5c:1c:3c:37:df:df:5e:80:f8:3f: 0d:22:d2:aa:c0:1a:da:b2:bf:8c:3e:ea:af:78:a2:4c:9d:0a: 14:b3:70:e2:b5:f5:c3:2a:b6:29:fe:f4:c6:46:b0:a8:8f:df: 16:5c:ca:c4:f8:df:1a:08:ac:a1:7d:06:49:71:2b:3d:72:73: 97:51:d3:86:20:d6:dd:7e:2b:8c:bb:50:6a:2e:11:f2:9c:55: 84:a7:0c:32:38:40:7a:6b:37:da:8d:f5:6d:6c:17:b2:f2:a3: de:6d:34:e4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDl4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTU3QzkxMTAvBgNVBAUTKDRGMzE1RUVGNUFDQjJFREE3QTM3MjlFNzlFMTM1OTkw QzAxRTcwNzQwHhcNMjUxMDE4MTgyNDI1WhcNMjUxMDI1MTgyNDI1WjAYMRYwFAYD VQQDEw02OGYzZGI1OS01MTIxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxxcdx9a7PtoIxx+2IqfPeXd8yjwUwlLDUeh37HXdWFGvmP7Ni/aFthwwiQPu qB/NlbUQw/iUAS8NykkVUVWaCqAL8hjnQVepgkjt3nq2fE3AktS6JaPKDM8B7+GS krB8HTPESZAvGnYcI6xNWWUWVP8nnbVX5gjjHX7uNEDsad8tPX4mMmrbrf8+DGW/ uClftz3eHFCaGVHg34sGmXsy0zn9eNpkQmySUomoRx0gKEgNBzoJy34nPGRMoCHs wAHUAlhZinm4JWrps6UlP4sarJgJjXF/6Ljg/1mAwFfWMphn6UV8erb9Tx3c9tYM 6I/WKU9UiLTijjt4/Vm1Pfq4rwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLN9iOBZ bw1nff+rvlJ6uTjjvNiKMB8GA1UdIwQYMBaAFE8xXu9ayy7aejcp554TWZDAHnB0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NTdDOS9DMzU5RTc1RUFD MTkxMUU5ODNGMkZDNjJDNEY5QUUwMi9UekZlNzFyTEx0cDZOeW5ubmhOWmtNQWVj SFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1R6RmU3MXJMTHRwNk55bm5uaE5aa01BZWNIUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NTdDOS9DMzU5RTc1RUFDMTkxMUU5ODNGMkZDNjJDNEY5QUUwMi9UekZlNzFyTEx0 cDZOeW5ubmhOWmtNQWVjSFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAofE0r3NVj9jnumXPyQkhpcDLkrLnvYhIJfVqyyLr5OqzowzR8oPFO /zBEcCNhbllM9cQU2rbBQBkTg0rDAS0sU3FiZnsIFB6u6HXaEUgGdQZM8Gn1gtjl 8d/iv5ad+cOuxIP0RcayIbA7FTtkjSvYBIZB3dLN7LrPKHyf/9wBEMAhq7wYglyL rM0sEKLXMRG9qJKSv1qwblwcPDff316A+D8NItKqwBrasr+MPuqveKJMnQoUs3Di tfXDKrYp/vTGRrCoj98WXMrE+N8aCKyhfQZJcSs9cnOXUdOGINbdfiuMu1BqLhHy nFWEpwwyOEB6azfajfVtbBey8qPebTTk -----END CERTIFICATE-----Generated at Mon Oct 20 01:48:02 2025 by rpki-client