$ rpki-client -vvf rpki.apnic.net/member_repository/A91149EA/F42D4CA273E411EA9AE68072C4F9AE02/TVJUdG_vcu-3rMDFNK1gj1C8OAQ.mft File: TVJUdG_vcu-3rMDFNK1gj1C8OAQ.mft (raw, json) Hash identifier: HoEuwHdAEEUUjZTY/gIryfQpBeoo0flw8pZG7nYtVak= Subject key identifier: 97:F0:FD:EA:BD:FF:30:5C:D3:B3:C4:36:C1:6F:4C:B4:62:C0:D8:64 Authority key identifier: 4D:52:54:74:6F:EF:72:EF:B7:AC:C0:C5:34:AD:60:8F:50:BC:38:04 Certificate issuer: /CN=A91149EA/serialNumber=4D5254746FEF72EFB7ACC0C534AD608F50BC3804 Certificate serial: 0A31 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TVJUdG_vcu-3rMDFNK1gj1C8OAQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91149EA/F42D4CA273E411EA9AE68072C4F9AE02/TVJUdG_vcu-3rMDFNK1gj1C8OAQ.mft Manifest number: 0A21 Signing time: Wed 02 Jul 2025 20:01:07 +0000 Manifest this update: Wed 02 Jul 2025 20:01:06 +0000 Manifest next update: Wed 09 Jul 2025 20:01:06 +0000 Files and hashes: 1: TVJUdG_vcu-3rMDFNK1gj1C8OAQ.crl (hash: SPlo0xCpWCHpygxddodsd1ecq9OCoLtgu5Si9fsVqDg=) 2: F94FA23C92F211EC8D04F649C4F9AE02.roa (hash: cCp7Bzw8poNKj0gr0L5A5NrVzahfSp+S0YQtn1jReFE=) 3: F61F817C9B3B11EBA5C76B80C4F9AE02.roa (hash: MwqZowzxRiYq0MUhfIdoeD3JCO2yoaZpzTRIMaHJxqs=) 4: 6897409A73E811EA93705B7CC4F9AE02.roa (hash: 8MO+sNBEiwlcI2/otkXShyj1mgir6Tk3C5bJL2OwyHE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91149EA/F42D4CA273E411EA9AE68072C4F9AE02/TVJUdG_vcu-3rMDFNK1gj1C8OAQ.crl rsync://rpki.apnic.net/member_repository/A91149EA/F42D4CA273E411EA9AE68072C4F9AE02/TVJUdG_vcu-3rMDFNK1gj1C8OAQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TVJUdG_vcu-3rMDFNK1gj1C8OAQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 20:01:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2609 (0xa31) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91149EA, serialNumber=4D5254746FEF72EFB7ACC0C534AD608F50BC3804 Validity Not Before: Jul 2 20:01:06 2025 GMT Not After : Jul 9 20:01:06 2025 GMT Subject: CN=68659002-2037 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:94:4d:29:f7:72:c3:32:35:6d:49:c0:29:e5: 67:65:de:e6:8e:a6:1c:4a:de:4c:a5:a6:7a:52:4a: 68:19:22:8d:26:bf:9f:1a:6d:98:c1:82:ff:df:be: a7:41:74:4d:c4:16:84:3c:e2:ae:9c:68:05:38:6e: c7:9b:4a:34:68:27:15:81:37:f8:ea:6f:bf:39:15: b0:1d:c6:d6:34:40:2d:8c:a8:04:c9:43:35:bb:5f: d8:8d:5d:dc:a5:bc:1e:60:8a:9d:6f:d6:4e:29:b0: f7:8d:28:21:e5:b6:25:d0:32:83:2b:0d:58:37:fa: b4:ff:57:64:a7:03:4d:e4:3f:fd:ed:05:3b:46:ef: 2d:d4:31:7b:4a:67:6f:63:a3:63:75:91:9f:c6:76: 0f:3c:27:5a:eb:d8:2c:6e:32:10:82:ab:68:94:1f: 71:6f:ce:79:c6:ee:d6:5b:fc:6b:8a:f2:be:31:0f: 80:fb:54:64:7a:73:f5:1a:b9:ed:7a:4c:5b:32:76: f5:a4:58:11:bf:f7:a1:20:c1:0a:f5:3d:f0:9e:f9: b1:a7:65:88:1e:bc:b7:64:c4:87:ff:5d:3b:cf:83: df:97:ff:f9:5b:e5:cf:06:61:61:a7:fe:6b:f9:f4: 0b:07:8b:d0:51:08:99:e8:ab:0f:63:0a:d2:02:80: 34:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:F0:FD:EA:BD:FF:30:5C:D3:B3:C4:36:C1:6F:4C:B4:62:C0:D8:64 X509v3 Authority Key Identifier: keyid:4D:52:54:74:6F:EF:72:EF:B7:AC:C0:C5:34:AD:60:8F:50:BC:38:04 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91149EA/F42D4CA273E411EA9AE68072C4F9AE02/TVJUdG_vcu-3rMDFNK1gj1C8OAQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TVJUdG_vcu-3rMDFNK1gj1C8OAQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91149EA/F42D4CA273E411EA9AE68072C4F9AE02/TVJUdG_vcu-3rMDFNK1gj1C8OAQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 16:b1:f4:54:a6:0f:bf:16:c1:fc:e7:85:28:fe:db:b5:6f:d3: 25:44:8c:e3:e6:6d:71:b2:c8:cf:67:68:e1:6f:c5:df:3d:99: cf:59:5b:b4:17:68:3f:8b:dd:36:e2:74:f1:06:72:1d:35:5d: ad:1c:8b:f1:c9:11:e4:1e:bb:6e:ef:ae:22:12:6a:ae:a2:4a: a2:5a:c7:cf:89:ae:83:d7:60:92:1e:4d:dd:57:8c:7f:76:bb: 5a:51:42:e4:bf:11:d5:cf:4b:c0:b5:07:9f:ff:77:92:26:c5: d9:2d:17:c1:c6:6f:d3:04:2e:6f:60:e3:67:58:91:38:79:e7: 2e:2d:e3:a9:da:1c:b9:6b:29:38:23:a5:e6:e1:bd:09:1f:2b: 95:c9:ca:7b:ac:57:9a:ed:df:f8:bf:43:3c:35:7b:36:cf:72: 5b:01:96:13:e1:dc:98:69:52:81:cf:23:23:a3:fb:4a:6f:23: 4c:e6:26:9a:ef:49:83:d3:64:03:a3:e5:b4:34:90:23:0d:84: 70:02:38:6a:e1:7a:0d:e7:9d:8f:22:0d:8b:12:34:64:b8:72: 1a:5a:61:95:bb:58:5f:5f:72:e7:6f:48:67:58:d1:23:38:f7: ab:18:f4:12:8e:f7:3e:9e:5d:d3:6d:6e:b5:da:3a:ae:7c:e9: 58:54:72:da -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCjEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTQ5RUExMTAvBgNVBAUTKDRENTI1NDc0NkZFRjcyRUZCN0FDQzBDNTM0QUQ2MDhG NTBCQzM4MDQwHhcNMjUwNzAyMjAwMTA2WhcNMjUwNzA5MjAwMTA2WjAYMRYwFAYD VQQDEw02ODY1OTAwMi0yMDM3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtZRNKfdywzI1bUnAKeVnZd7mjqYcSt5MpaZ6UkpoGSKNJr+fGm2YwYL/376n QXRNxBaEPOKunGgFOG7Hm0o0aCcVgTf46m+/ORWwHcbWNEAtjKgEyUM1u1/YjV3c pbweYIqdb9ZOKbD3jSgh5bYl0DKDKw1YN/q0/1dkpwNN5D/97QU7Ru8t1DF7Smdv Y6NjdZGfxnYPPCda69gsbjIQgqtolB9xb855xu7WW/xrivK+MQ+A+1RkenP1Grnt ekxbMnb1pFgRv/ehIMEK9T3wnvmxp2WIHry3ZMSH/107z4Pfl//5W+XPBmFhp/5r +fQLB4vQUQiZ6KsPYwrSAoA04wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJfw/eq9 /zBc07PENsFvTLRiwNhkMB8GA1UdIwQYMBaAFE1SVHRv73Lvt6zAxTStYI9QvDgE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNDlFQS9GNDJENENBMjcz RTQxMUVBOUFFNjgwNzJDNEY5QUUwMi9UVkpVZEdfdmN1LTNyTURGTksxZ2oxQzhP QVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1RWSlVkR192Y3UtM3JNREZOSzFnajFDOE9BUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx NDlFQS9GNDJENENBMjczRTQxMUVBOUFFNjgwNzJDNEY5QUUwMi9UVkpVZEdfdmN1 LTNyTURGTksxZ2oxQzhPQVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAWsfRUpg+/FsH854Uo/tu1b9MlRIzj5m1xssjPZ2jhb8XfPZnPWVu0 F2g/i9024nTxBnIdNV2tHIvxyRHkHrtu764iEmquokqiWsfPia6D12CSHk3dV4x/ drtaUULkvxHVz0vAtQef/3eSJsXZLRfBxm/TBC5vYONnWJE4eecuLeOp2hy5ayk4 I6Xm4b0JHyuVycp7rFea7d/4v0M8NXs2z3JbAZYT4dyYaVKBzyMjo/tKbyNM5iaa 70mD02QDo+W0NJAjDYRwAjhq4XoN552PIg2LEjRkuHIaWmGVu1hfX3Lnb0hnWNEj OPerGPQSjvc+nl3TbW612jqufOlYVHLa -----END CERTIFICATE-----Generated at Thu Jul 3 09:36:51 2025 by rpki-client