$ rpki-client -vvf rpki.apnic.net/member_repository/A91E4042/EFC98DE6E53611EB9926556BC4F9AE02/TzMtwIyXR6ybyBxUfRujRWQ_drc.mft File: TzMtwIyXR6ybyBxUfRujRWQ_drc.mft (raw, json) Hash identifier: fzoxGx0SEY4e1+34PIcBkavXqVhnQTcykUW7IvOELHQ= Subject key identifier: 42:48:96:67:3F:35:4E:EB:A8:22:E9:5D:CD:1B:67:67:CB:88:64:A4 Authority key identifier: 4F:33:2D:C0:8C:97:47:AC:9B:C8:1C:54:7D:1B:A3:45:64:3F:76:B7 Certificate issuer: /CN=A91E4042/serialNumber=4F332DC08C9747AC9BC81C547D1BA345643F76B7 Certificate serial: 05B4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TzMtwIyXR6ybyBxUfRujRWQ_drc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E4042/EFC98DE6E53611EB9926556BC4F9AE02/TzMtwIyXR6ybyBxUfRujRWQ_drc.mft Manifest number: 05AE Signing time: Sun 19 Oct 2025 00:48:55 +0000 Manifest this update: Sun 19 Oct 2025 00:48:55 +0000 Manifest next update: Sun 26 Oct 2025 00:48:55 +0000 Files and hashes: 1: TzMtwIyXR6ybyBxUfRujRWQ_drc.crl (hash: ww2+1kYTzSrK7XKXgjA6hBjbSeXfPM8W5sybNKOA3gA=) 2: 26F1B59437A511ECB73C9852C4F9AE02.roa (hash: RnCdsnsA5t3rSQhlqndquIzW2+Ap7Mst87/6oAJexVI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E4042/EFC98DE6E53611EB9926556BC4F9AE02/TzMtwIyXR6ybyBxUfRujRWQ_drc.crl rsync://rpki.apnic.net/member_repository/A91E4042/EFC98DE6E53611EB9926556BC4F9AE02/TzMtwIyXR6ybyBxUfRujRWQ_drc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TzMtwIyXR6ybyBxUfRujRWQ_drc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 00:48:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1460 (0x5b4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E4042, serialNumber=4F332DC08C9747AC9BC81C547D1BA345643F76B7 Validity Not Before: Oct 19 00:48:55 2025 GMT Not After : Oct 26 00:48:55 2025 GMT Subject: CN=68f43577-bb7e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:6a:3f:51:4f:ab:d2:91:f9:d1:b3:6f:59:8f: b7:1f:6a:94:f6:df:aa:1b:6f:5b:5e:4a:19:ed:5e: 31:79:53:bb:28:31:da:77:63:ec:e6:4f:da:91:5e: 9e:77:1f:98:ea:76:0c:cc:42:0d:42:45:c5:a7:30: de:21:ed:25:7c:a9:5a:ed:79:d3:4f:e0:c2:0d:47: 3c:fc:02:d0:ac:21:d0:e4:22:f0:85:7f:0b:32:50: 6d:89:7e:be:a4:26:90:30:06:ee:95:27:23:76:4e: 82:f1:7c:45:0d:e4:11:03:a9:4b:d8:07:09:e4:58: 88:e3:99:3b:e3:be:96:e3:bb:62:91:30:0a:95:a5: 4f:a7:8b:cf:51:cb:b6:c4:a1:f4:82:93:70:7b:ea: 47:18:83:20:79:df:db:99:18:4e:0d:d1:b2:7e:f8: 73:9a:b7:f9:29:d1:b3:0b:6d:9b:36:b1:20:3c:55: 7a:63:31:8b:e1:52:27:48:d3:13:6d:d4:2f:e6:4d: 9d:28:2f:55:2c:8f:35:2c:81:03:65:34:4e:c2:7f: 24:fa:bd:38:22:7b:c9:85:fc:42:69:07:e3:64:d6: 72:ee:69:09:8c:46:90:d0:77:27:0d:cf:2a:8f:70: ca:04:00:1d:6b:11:fc:84:d2:16:50:6d:c3:e1:c7: d7:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:48:96:67:3F:35:4E:EB:A8:22:E9:5D:CD:1B:67:67:CB:88:64:A4 X509v3 Authority Key Identifier: keyid:4F:33:2D:C0:8C:97:47:AC:9B:C8:1C:54:7D:1B:A3:45:64:3F:76:B7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E4042/EFC98DE6E53611EB9926556BC4F9AE02/TzMtwIyXR6ybyBxUfRujRWQ_drc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TzMtwIyXR6ybyBxUfRujRWQ_drc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E4042/EFC98DE6E53611EB9926556BC4F9AE02/TzMtwIyXR6ybyBxUfRujRWQ_drc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5f:57:e3:d1:e5:c0:ab:9c:80:ab:1f:d4:0f:39:7c:25:a9:cc: fe:92:d8:e9:8c:de:5b:b3:1a:fa:a7:44:7b:95:6a:04:db:4c: ff:e1:fa:12:36:91:73:01:8a:4c:cd:27:ef:92:38:9a:48:38: c6:13:b7:0e:77:46:15:df:68:e3:2f:63:51:16:b0:7b:c6:f3: b8:80:40:20:a2:1b:1c:3f:d4:62:36:02:92:71:fb:1d:17:cd: 2a:6b:95:f7:9d:f4:1f:2b:22:c6:3b:bd:2d:35:37:8b:96:e4: a5:32:39:ba:68:e9:a6:c4:8d:a2:01:9b:4a:9a:d3:80:b0:46: 62:2b:0c:cf:8f:90:76:19:ce:bb:c1:7a:c7:70:0a:9c:15:6b: 3f:0f:c2:86:47:7d:ca:7e:8a:3d:6e:41:2b:33:83:d5:68:e8: 0e:62:7f:c0:7f:ab:10:9e:84:7a:6e:60:34:f1:4b:53:07:f4: 4f:82:0d:43:ff:42:9d:e0:21:3b:5c:b8:e0:81:7e:11:20:90: 52:7f:80:52:2e:d7:0c:1d:74:83:a7:40:4c:0c:04:b1:ad:c6: 70:f1:54:e9:c5:d0:4f:cc:81:5e:dc:07:91:43:a8:e8:37:99: 44:73:97:61:f9:1c:da:ce:19:be:4f:51:7c:54:64:6c:40:a1: 43:9c:19:de -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBbQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTQwNDIxMTAvBgNVBAUTKDRGMzMyREMwOEM5NzQ3QUM5QkM4MUM1NDdEMUJBMzQ1 NjQzRjc2QjcwHhcNMjUxMDE5MDA0ODU1WhcNMjUxMDI2MDA0ODU1WjAYMRYwFAYD VQQDEw02OGY0MzU3Ny1iYjdlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAy2o/UU+r0pH50bNvWY+3H2qU9t+qG29bXkoZ7V4xeVO7KDHad2Ps5k/akV6e dx+Y6nYMzEINQkXFpzDeIe0lfKla7XnTT+DCDUc8/ALQrCHQ5CLwhX8LMlBtiX6+ pCaQMAbulScjdk6C8XxFDeQRA6lL2AcJ5FiI45k7476W47tikTAKlaVPp4vPUcu2 xKH0gpNwe+pHGIMged/bmRhODdGyfvhzmrf5KdGzC22bNrEgPFV6YzGL4VInSNMT bdQv5k2dKC9VLI81LIEDZTROwn8k+r04InvJhfxCaQfjZNZy7mkJjEaQ0HcnDc8q j3DKBAAdaxH8hNIWUG3D4cfXkQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEJIlmc/ NU7rqCLpXc0bZ2fLiGSkMB8GA1UdIwQYMBaAFE8zLcCMl0esm8gcVH0bo0VkP3a3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNDA0Mi9FRkM5OERFNkU1 MzYxMUVCOTkyNjU1NkJDNEY5QUUwMi9Uek10d0l5WFI2eWJ5QnhVZlJ1alJXUV9k cmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1R6TXR3SXlYUjZ5YnlCeFVmUnVqUldRX2RyYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NDA0Mi9FRkM5OERFNkU1MzYxMUVCOTkyNjU1NkJDNEY5QUUwMi9Uek10d0l5WFI2 eWJ5QnhVZlJ1alJXUV9kcmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBfV+PR5cCrnICrH9QPOXwlqcz+ktjpjN5bsxr6p0R7lWoE20z/4foS NpFzAYpMzSfvkjiaSDjGE7cOd0YV32jjL2NRFrB7xvO4gEAgohscP9RiNgKScfsd F80qa5X3nfQfKyLGO70tNTeLluSlMjm6aOmmxI2iAZtKmtOAsEZiKwzPj5B2Gc67 wXrHcAqcFWs/D8KGR33Kfoo9bkErM4PVaOgOYn/Af6sQnoR6bmA08UtTB/RPgg1D /0Kd4CE7XLjggX4RIJBSf4BSLtcMHXSDp0BMDASxrcZw8VTpxdBPzIFe3AeRQ6jo N5lEc5dh+Rzazhm+T1F8VGRsQKFDnBne -----END CERTIFICATE-----Generated at Mon Oct 20 21:42:33 2025 by rpki-client