$ rpki-client -vvf rpki.apnic.net/member_repository/A91E4042/EFC98DE6E53611EB9926556BC4F9AE02/TzMtwIyXR6ybyBxUfRujRWQ_drc.mft File: TzMtwIyXR6ybyBxUfRujRWQ_drc.mft (raw, json) Hash identifier: 8LBxkVcUWxm13FySNP8VZ/IT6y1BWdFmumdkd6r1E8E= Subject key identifier: B1:3F:37:8F:89:F6:A9:5E:9A:D0:02:5A:87:50:10:CB:ED:EB:0B:1A Authority key identifier: 4F:33:2D:C0:8C:97:47:AC:9B:C8:1C:54:7D:1B:A3:45:64:3F:76:B7 Certificate issuer: /CN=A91E4042/serialNumber=4F332DC08C9747AC9BC81C547D1BA345643F76B7 Certificate serial: 057D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TzMtwIyXR6ybyBxUfRujRWQ_drc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E4042/EFC98DE6E53611EB9926556BC4F9AE02/TzMtwIyXR6ybyBxUfRujRWQ_drc.mft Manifest number: 0577 Signing time: Thu 03 Jul 2025 00:03:26 +0000 Manifest this update: Thu 03 Jul 2025 00:03:26 +0000 Manifest next update: Thu 10 Jul 2025 00:03:26 +0000 Files and hashes: 1: TzMtwIyXR6ybyBxUfRujRWQ_drc.crl (hash: e7oU4BLXFmNJHBUxAzi0Srf100yAKuVUIEWxiqNEkoA=) 2: 26F1B59437A511ECB73C9852C4F9AE02.roa (hash: RnCdsnsA5t3rSQhlqndquIzW2+Ap7Mst87/6oAJexVI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E4042/EFC98DE6E53611EB9926556BC4F9AE02/TzMtwIyXR6ybyBxUfRujRWQ_drc.crl rsync://rpki.apnic.net/member_repository/A91E4042/EFC98DE6E53611EB9926556BC4F9AE02/TzMtwIyXR6ybyBxUfRujRWQ_drc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TzMtwIyXR6ybyBxUfRujRWQ_drc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 00:03:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1405 (0x57d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E4042, serialNumber=4F332DC08C9747AC9BC81C547D1BA345643F76B7 Validity Not Before: Jul 3 00:03:26 2025 GMT Not After : Jul 10 00:03:26 2025 GMT Subject: CN=6865c8ce-5a4b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:5f:7e:f0:4d:d0:1e:85:1c:19:ad:f1:08:64: 2e:70:fd:86:77:92:3d:3c:c1:ae:49:ea:ae:e2:19: a4:b0:bc:b8:1f:8f:54:16:e9:8e:8c:22:56:33:eb: a3:4a:d5:6a:48:81:97:e0:37:e5:de:02:26:78:a3: bc:4c:53:70:c5:0a:e4:cd:84:83:58:48:ee:f2:a3: 16:f2:1f:f7:f9:58:6c:d7:b6:91:bb:6b:72:5d:3c: 57:ca:5e:32:56:d9:1c:96:09:00:ab:58:f5:fd:d4: ff:dd:ad:10:ae:37:6b:0d:b9:30:e6:2a:af:19:dd: 15:c3:06:51:a9:68:e9:d1:85:64:c9:66:e4:ae:11: 70:82:9f:e8:0b:4e:a7:39:9f:e0:e1:89:6b:c3:10: 9d:68:50:e9:d1:0b:16:11:cc:b1:f3:5e:8e:92:54: 5f:cb:1e:ad:9e:a0:73:1e:9c:e6:8e:6b:d7:51:bd: 80:6a:0a:f5:e2:df:35:b5:c7:01:56:5c:e5:24:a4: 3e:60:1c:ee:01:a2:6c:08:0a:11:d0:38:de:d7:5c: 59:27:92:2a:26:af:6e:1d:52:c4:20:70:f8:42:a8: 13:13:56:f3:9d:da:59:d7:b0:bc:da:6f:aa:33:0f: da:38:7f:21:cb:b5:7d:e8:d6:d4:10:cc:92:b1:52: ef:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:3F:37:8F:89:F6:A9:5E:9A:D0:02:5A:87:50:10:CB:ED:EB:0B:1A X509v3 Authority Key Identifier: keyid:4F:33:2D:C0:8C:97:47:AC:9B:C8:1C:54:7D:1B:A3:45:64:3F:76:B7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E4042/EFC98DE6E53611EB9926556BC4F9AE02/TzMtwIyXR6ybyBxUfRujRWQ_drc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TzMtwIyXR6ybyBxUfRujRWQ_drc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E4042/EFC98DE6E53611EB9926556BC4F9AE02/TzMtwIyXR6ybyBxUfRujRWQ_drc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8e:78:27:15:1c:9a:3f:a1:7c:49:1a:2d:a1:63:9b:63:a0:14: be:e4:40:cc:ce:6b:5a:b8:eb:df:c6:fa:a0:ff:b9:fc:dd:03: 33:60:2f:fc:ed:06:75:4c:d5:07:05:20:9c:96:36:77:ca:b9: 49:c5:b6:7a:d5:8d:67:f1:fb:d6:cf:6d:7b:3c:e2:76:03:8f: a6:ad:a0:a5:2c:41:4b:eb:ba:40:e4:84:80:6a:bf:98:c7:94: 74:1c:0f:c1:36:f0:d7:ce:a0:80:f4:79:9d:66:c4:ae:3b:a7: 3a:69:05:3e:c4:18:b2:07:b8:2e:4a:20:bb:67:1d:0e:82:da: b5:8b:f4:c2:a1:f9:b0:55:71:ba:23:19:3b:e9:8b:0c:40:d5: de:bc:a1:58:96:44:34:75:8e:38:4e:0f:22:bb:11:37:e7:89: 61:a7:86:b3:fc:63:ee:2c:05:78:6a:5d:1b:b1:5f:b8:5f:57: e6:e1:78:6a:eb:df:1e:e1:32:56:14:fb:6e:bf:ca:2c:1c:03: 55:49:eb:3f:12:e5:60:01:47:56:15:68:47:a2:20:c7:d1:3f: 77:1d:75:3b:1d:1d:c0:62:99:9f:16:4a:f7:89:a8:6e:34:d0: f4:b5:ca:9e:d0:1a:34:c6:5f:80:18:e0:46:a4:5e:46:24:a7: 55:20:d4:f8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBX0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTQwNDIxMTAvBgNVBAUTKDRGMzMyREMwOEM5NzQ3QUM5QkM4MUM1NDdEMUJBMzQ1 NjQzRjc2QjcwHhcNMjUwNzAzMDAwMzI2WhcNMjUwNzEwMDAwMzI2WjAYMRYwFAYD VQQDEw02ODY1YzhjZS01YTRiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxV9+8E3QHoUcGa3xCGQucP2Gd5I9PMGuSequ4hmksLy4H49UFumOjCJWM+uj StVqSIGX4Dfl3gImeKO8TFNwxQrkzYSDWEju8qMW8h/3+Vhs17aRu2tyXTxXyl4y VtkclgkAq1j1/dT/3a0QrjdrDbkw5iqvGd0VwwZRqWjp0YVkyWbkrhFwgp/oC06n OZ/g4YlrwxCdaFDp0QsWEcyx816OklRfyx6tnqBzHpzmjmvXUb2Aagr14t81tccB VlzlJKQ+YBzuAaJsCAoR0Dje11xZJ5IqJq9uHVLEIHD4QqgTE1bzndpZ17C82m+q Mw/aOH8hy7V96NbUEMySsVLvAwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLE/N4+J 9qlemtACWodQEMvt6wsaMB8GA1UdIwQYMBaAFE8zLcCMl0esm8gcVH0bo0VkP3a3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNDA0Mi9FRkM5OERFNkU1 MzYxMUVCOTkyNjU1NkJDNEY5QUUwMi9Uek10d0l5WFI2eWJ5QnhVZlJ1alJXUV9k cmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1R6TXR3SXlYUjZ5YnlCeFVmUnVqUldRX2RyYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NDA0Mi9FRkM5OERFNkU1MzYxMUVCOTkyNjU1NkJDNEY5QUUwMi9Uek10d0l5WFI2 eWJ5QnhVZlJ1alJXUV9kcmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCOeCcVHJo/oXxJGi2hY5tjoBS+5EDMzmtauOvfxvqg/7n83QMzYC/8 7QZ1TNUHBSCcljZ3yrlJxbZ61Y1n8fvWz217POJ2A4+mraClLEFL67pA5ISAar+Y x5R0HA/BNvDXzqCA9HmdZsSuO6c6aQU+xBiyB7guSiC7Zx0Ogtq1i/TCofmwVXG6 Ixk76YsMQNXevKFYlkQ0dY44Tg8iuxE354lhp4az/GPuLAV4al0bsV+4X1fm4Xhq 698e4TJWFPtuv8osHANVSes/EuVgAUdWFWhHoiDH0T93HXU7HR3AYpmfFkr3iahu NND0tcqe0Bo0xl+AGOBGpF5GJKdVINT4 -----END CERTIFICATE-----Generated at Thu Jul 3 11:40:36 2025 by rpki-client