$ rpki-client -vvf rpki.apnic.net/member_repository/A91E4042/EFC98DE6E53611EB9926556BC4F9AE02/TzMtwIyXR6ybyBxUfRujRWQ_drc.mft File: TzMtwIyXR6ybyBxUfRujRWQ_drc.mft (raw, json) Hash identifier: /2HQw/mCvFgQzJnVv+jIHExQGM2rLJEM1H8SU54Nx2o= Subject key identifier: F8:C0:86:14:CF:05:88:78:C6:4A:AF:4D:C6:48:86:87:DC:3A:0D:68 Authority key identifier: 4F:33:2D:C0:8C:97:47:AC:9B:C8:1C:54:7D:1B:A3:45:64:3F:76:B7 Certificate issuer: /CN=A91E4042/serialNumber=4F332DC08C9747AC9BC81C547D1BA345643F76B7 Certificate serial: 0597 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TzMtwIyXR6ybyBxUfRujRWQ_drc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E4042/EFC98DE6E53611EB9926556BC4F9AE02/TzMtwIyXR6ybyBxUfRujRWQ_drc.mft Manifest number: 0591 Signing time: Fri 22 Aug 2025 23:25:15 +0000 Manifest this update: Fri 22 Aug 2025 23:25:15 +0000 Manifest next update: Fri 29 Aug 2025 23:25:15 +0000 Files and hashes: 1: TzMtwIyXR6ybyBxUfRujRWQ_drc.crl (hash: sbVxaAb+9gYKwKgK8jtW7FXP3e8G+35PZzwm8UtTDa4=) 2: 26F1B59437A511ECB73C9852C4F9AE02.roa (hash: RnCdsnsA5t3rSQhlqndquIzW2+Ap7Mst87/6oAJexVI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E4042/EFC98DE6E53611EB9926556BC4F9AE02/TzMtwIyXR6ybyBxUfRujRWQ_drc.crl rsync://rpki.apnic.net/member_repository/A91E4042/EFC98DE6E53611EB9926556BC4F9AE02/TzMtwIyXR6ybyBxUfRujRWQ_drc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TzMtwIyXR6ybyBxUfRujRWQ_drc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 23:25:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1431 (0x597) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E4042, serialNumber=4F332DC08C9747AC9BC81C547D1BA345643F76B7 Validity Not Before: Aug 22 23:25:15 2025 GMT Not After : Aug 29 23:25:15 2025 GMT Subject: CN=68a8fc5b-3196 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:0b:16:22:04:a4:6d:49:15:96:b5:cb:6d:20: d3:3a:5d:71:cd:48:a2:f0:6a:19:0e:87:23:e9:0c: a4:de:36:0a:00:25:73:14:c7:dd:f7:1c:0d:15:bf: 56:78:28:a7:0d:2a:30:6d:cb:dc:29:c9:b6:12:77: 50:e1:a6:7f:b5:17:c0:45:54:cb:40:01:b8:c5:f1: a0:7e:6f:9b:c5:5e:38:6a:2b:36:19:66:63:ce:c6: f6:d1:f9:f9:b6:77:e8:b7:81:31:84:13:a0:17:10: c9:30:17:a6:65:2a:ed:75:c4:2f:9b:9c:53:76:2f: 4b:87:03:86:a0:11:71:46:06:f2:21:5f:d3:52:4a: d1:e9:33:fa:96:97:3a:78:82:7d:a7:d1:8c:32:88: c7:03:fa:96:19:c0:a9:4b:eb:cb:28:8d:a0:94:99: cb:03:fb:01:e9:52:5b:58:43:55:c6:b0:d0:8e:c9: 4d:5d:a9:cf:2e:16:22:88:79:2e:1c:d1:bf:8d:59: b1:ce:82:ac:26:c0:59:71:7a:24:ad:4f:73:b1:f9: 82:88:44:be:61:b4:b5:5e:8d:56:75:fd:92:ab:a5: 92:70:e7:14:e2:5f:3e:cd:30:ae:6c:c2:d8:33:cb: 1d:f8:93:49:a5:85:00:35:ce:89:b7:e4:7c:96:68: e7:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:C0:86:14:CF:05:88:78:C6:4A:AF:4D:C6:48:86:87:DC:3A:0D:68 X509v3 Authority Key Identifier: keyid:4F:33:2D:C0:8C:97:47:AC:9B:C8:1C:54:7D:1B:A3:45:64:3F:76:B7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E4042/EFC98DE6E53611EB9926556BC4F9AE02/TzMtwIyXR6ybyBxUfRujRWQ_drc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TzMtwIyXR6ybyBxUfRujRWQ_drc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E4042/EFC98DE6E53611EB9926556BC4F9AE02/TzMtwIyXR6ybyBxUfRujRWQ_drc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 54:14:32:ed:1b:32:64:62:03:6b:76:27:ae:52:f0:c3:ce:0e: 53:0a:c3:83:50:ff:4d:1d:c6:7a:2c:42:0c:73:19:d0:c5:ae: 3d:3d:1e:c1:7d:6a:0a:ae:ac:16:d2:99:af:a1:19:9f:28:48: b8:9a:c7:94:4d:97:4e:9d:0d:43:43:96:88:13:ba:e1:d8:e0: d5:56:05:df:8d:9a:1a:4a:79:5c:e1:44:b0:e7:ec:d5:ed:ba: 60:83:d5:67:95:8d:0b:1c:93:66:de:11:c8:51:2f:4b:78:5c: 7c:e3:d9:74:13:db:a0:61:43:24:67:be:22:65:cf:d3:e9:8c: 4e:4e:d4:ff:8d:ab:f2:31:5f:8b:a5:a2:a3:d4:c4:0f:b2:c3: 65:cb:11:2f:70:f8:8b:19:15:64:23:fb:20:1a:d4:51:60:0e: 5d:b6:22:3d:f3:e1:04:d8:40:40:f5:e9:81:68:97:28:52:ca: b8:bf:d9:cf:62:62:64:27:4a:29:85:73:e8:3f:29:3a:76:20: 58:cc:a6:e2:d3:f9:ac:2d:bb:41:fb:b5:35:77:6e:77:90:cb: 65:c3:6a:8e:a9:33:c2:e6:d3:c4:5d:6e:9c:4a:ce:9b:be:6e: 8d:3d:d0:41:69:e5:8c:44:ba:cd:b5:e8:23:cd:ee:83:ef:bb: ba:98:df:a6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBZcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTQwNDIxMTAvBgNVBAUTKDRGMzMyREMwOEM5NzQ3QUM5QkM4MUM1NDdEMUJBMzQ1 NjQzRjc2QjcwHhcNMjUwODIyMjMyNTE1WhcNMjUwODI5MjMyNTE1WjAYMRYwFAYD VQQDEw02OGE4ZmM1Yi0zMTk2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArgsWIgSkbUkVlrXLbSDTOl1xzUii8GoZDocj6Qyk3jYKACVzFMfd9xwNFb9W eCinDSowbcvcKcm2EndQ4aZ/tRfARVTLQAG4xfGgfm+bxV44ais2GWZjzsb20fn5 tnfot4ExhBOgFxDJMBemZSrtdcQvm5xTdi9LhwOGoBFxRgbyIV/TUkrR6TP6lpc6 eIJ9p9GMMojHA/qWGcCpS+vLKI2glJnLA/sB6VJbWENVxrDQjslNXanPLhYiiHku HNG/jVmxzoKsJsBZcXokrU9zsfmCiES+YbS1Xo1Wdf2Sq6WScOcU4l8+zTCubMLY M8sd+JNJpYUANc6Jt+R8lmjnvwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPjAhhTP BYh4xkqvTcZIhofcOg1oMB8GA1UdIwQYMBaAFE8zLcCMl0esm8gcVH0bo0VkP3a3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNDA0Mi9FRkM5OERFNkU1 MzYxMUVCOTkyNjU1NkJDNEY5QUUwMi9Uek10d0l5WFI2eWJ5QnhVZlJ1alJXUV9k cmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1R6TXR3SXlYUjZ5YnlCeFVmUnVqUldRX2RyYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NDA0Mi9FRkM5OERFNkU1MzYxMUVCOTkyNjU1NkJDNEY5QUUwMi9Uek10d0l5WFI2 eWJ5QnhVZlJ1alJXUV9kcmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBUFDLtGzJkYgNrdieuUvDDzg5TCsODUP9NHcZ6LEIMcxnQxa49PR7B fWoKrqwW0pmvoRmfKEi4mseUTZdOnQ1DQ5aIE7rh2ODVVgXfjZoaSnlc4USw5+zV 7bpgg9VnlY0LHJNm3hHIUS9LeFx849l0E9ugYUMkZ74iZc/T6YxOTtT/javyMV+L paKj1MQPssNlyxEvcPiLGRVkI/sgGtRRYA5dtiI98+EE2EBA9emBaJcoUsq4v9nP YmJkJ0ophXPoPyk6diBYzKbi0/msLbtB+7U1d253kMtlw2qOqTPC5tPEXW6cSs6b vm6NPdBBaeWMRLrNtegjze6D77u6mN+m -----END CERTIFICATE-----Generated at Sun Aug 24 09:16:28 2025 by rpki-client