$ rpki-client -vvf rpki.apnic.net/member_repository/A91149EA/F42D4CA273E411EA9AE68072C4F9AE02/TVJUdG_vcu-3rMDFNK1gj1C8OAQ.mft File: TVJUdG_vcu-3rMDFNK1gj1C8OAQ.mft (raw, json) Hash identifier: LhZ9sX9OG5/S9+B53i0sWwbXmSVx8N/B46flZcM4uoI= Subject key identifier: 9F:D0:F4:5D:76:E7:25:08:1E:52:C8:7A:F3:1F:B0:0A:FE:F5:91:12 Authority key identifier: 4D:52:54:74:6F:EF:72:EF:B7:AC:C0:C5:34:AD:60:8F:50:BC:38:04 Certificate issuer: /CN=A91149EA/serialNumber=4D5254746FEF72EFB7ACC0C534AD608F50BC3804 Certificate serial: 0A4B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TVJUdG_vcu-3rMDFNK1gj1C8OAQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91149EA/F42D4CA273E411EA9AE68072C4F9AE02/TVJUdG_vcu-3rMDFNK1gj1C8OAQ.mft Manifest number: 0A3B Signing time: Fri 22 Aug 2025 19:52:32 +0000 Manifest this update: Fri 22 Aug 2025 19:52:32 +0000 Manifest next update: Fri 29 Aug 2025 19:52:32 +0000 Files and hashes: 1: TVJUdG_vcu-3rMDFNK1gj1C8OAQ.crl (hash: WVyl+hzwu+IJdgxq8vslIMBvte0LGeTI1xVtPsEIu8o=) 2: F94FA23C92F211EC8D04F649C4F9AE02.roa (hash: cCp7Bzw8poNKj0gr0L5A5NrVzahfSp+S0YQtn1jReFE=) 3: F61F817C9B3B11EBA5C76B80C4F9AE02.roa (hash: MwqZowzxRiYq0MUhfIdoeD3JCO2yoaZpzTRIMaHJxqs=) 4: 6897409A73E811EA93705B7CC4F9AE02.roa (hash: 8MO+sNBEiwlcI2/otkXShyj1mgir6Tk3C5bJL2OwyHE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91149EA/F42D4CA273E411EA9AE68072C4F9AE02/TVJUdG_vcu-3rMDFNK1gj1C8OAQ.crl rsync://rpki.apnic.net/member_repository/A91149EA/F42D4CA273E411EA9AE68072C4F9AE02/TVJUdG_vcu-3rMDFNK1gj1C8OAQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TVJUdG_vcu-3rMDFNK1gj1C8OAQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 19:52:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2635 (0xa4b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91149EA, serialNumber=4D5254746FEF72EFB7ACC0C534AD608F50BC3804 Validity Not Before: Aug 22 19:52:32 2025 GMT Not After : Aug 29 19:52:32 2025 GMT Subject: CN=68a8ca80-000d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:19:85:8c:29:18:d1:a6:d1:97:e2:7c:87:08: 57:44:29:9b:15:f1:79:6c:c9:29:9a:a4:d3:7b:eb: b6:91:bd:80:81:4a:d7:ec:01:41:91:c0:44:40:01: e0:e7:63:77:18:12:ad:2c:8b:ab:2c:14:c7:da:af: 25:8a:fb:db:a1:6e:13:42:58:08:50:83:7c:5a:46: 07:ad:bf:6e:dd:b7:d1:df:65:d9:f3:83:86:53:ac: 82:d4:9e:52:35:4c:99:38:39:02:65:d2:7a:e0:a9: 34:57:d4:2d:bf:30:a9:fc:78:38:c1:a1:32:a2:9a: b1:f6:02:ac:d1:d7:9a:42:5d:4d:d8:46:fa:d0:d3: df:c6:c5:e7:66:66:25:bc:62:64:87:28:1f:73:05: 69:5c:b6:0f:74:67:41:ce:75:96:3d:77:7b:42:79: 87:89:03:a0:fc:57:42:72:7b:49:40:2f:87:7d:20: 0a:03:23:ac:84:1a:47:fe:f3:07:70:3c:93:41:c2: 3e:3a:62:3e:4b:dc:d8:a4:d1:30:a1:79:da:ae:7f: 9e:f4:4e:ce:44:65:2b:16:d9:80:7d:cf:0e:35:09: b2:b4:02:ab:eb:15:01:14:07:82:67:0e:be:05:06: 79:95:73:d4:5e:f6:67:c3:d7:f4:30:90:31:32:1c: 4a:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:D0:F4:5D:76:E7:25:08:1E:52:C8:7A:F3:1F:B0:0A:FE:F5:91:12 X509v3 Authority Key Identifier: keyid:4D:52:54:74:6F:EF:72:EF:B7:AC:C0:C5:34:AD:60:8F:50:BC:38:04 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91149EA/F42D4CA273E411EA9AE68072C4F9AE02/TVJUdG_vcu-3rMDFNK1gj1C8OAQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TVJUdG_vcu-3rMDFNK1gj1C8OAQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91149EA/F42D4CA273E411EA9AE68072C4F9AE02/TVJUdG_vcu-3rMDFNK1gj1C8OAQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9f:95:da:37:59:fe:6c:b4:da:3f:5e:d8:be:45:10:63:10:19: b6:a7:bc:5a:ef:0a:db:b2:e3:4b:1f:ab:23:a7:17:25:1c:f3: 25:0b:20:3a:8b:cc:be:3d:c1:66:9d:5d:c4:9b:61:e1:c7:79: 7b:0b:42:9e:08:de:f9:e7:1e:81:ed:cf:f2:2f:7a:82:99:e2: d6:8a:9c:a7:c1:22:68:46:13:f6:3b:67:5d:fb:1b:34:8f:dc: 1c:f7:7d:f7:66:c7:cf:25:b3:83:59:11:b1:c9:3c:52:38:12: 0b:a9:e0:ef:62:b1:af:1f:87:ff:94:e3:2a:1d:b1:3a:3f:f2: a7:6c:2a:15:ca:a3:4a:20:a7:b3:b1:f6:79:56:ca:bd:65:30: 3b:ed:73:90:f2:53:11:74:52:ed:34:0c:7e:20:4f:96:c1:a1: 00:37:e2:3b:b4:95:62:8e:22:f1:8f:f0:da:b9:24:09:fa:d7: fb:59:d7:2b:eb:e9:97:20:8d:4d:a5:8b:09:4f:ac:06:7f:a2: 7f:79:56:46:69:94:e4:0f:14:a9:b2:34:10:c4:d2:99:63:5b: 48:90:71:3d:68:19:ea:46:61:9f:ec:72:22:1e:b3:5d:0a:9e: 78:1c:e3:8d:48:3b:5c:73:38:01:05:99:d1:d7:3a:6f:0f:cf: 6d:1c:34:34 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCkswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTQ5RUExMTAvBgNVBAUTKDRENTI1NDc0NkZFRjcyRUZCN0FDQzBDNTM0QUQ2MDhG NTBCQzM4MDQwHhcNMjUwODIyMTk1MjMyWhcNMjUwODI5MTk1MjMyWjAYMRYwFAYD VQQDEw02OGE4Y2E4MC0wMDBkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArRmFjCkY0abRl+J8hwhXRCmbFfF5bMkpmqTTe+u2kb2AgUrX7AFBkcBEQAHg 52N3GBKtLIurLBTH2q8livvboW4TQlgIUIN8WkYHrb9u3bfR32XZ84OGU6yC1J5S NUyZODkCZdJ64Kk0V9QtvzCp/Hg4waEyopqx9gKs0deaQl1N2Eb60NPfxsXnZmYl vGJkhygfcwVpXLYPdGdBznWWPXd7QnmHiQOg/FdCcntJQC+HfSAKAyOshBpH/vMH cDyTQcI+OmI+S9zYpNEwoXnarn+e9E7ORGUrFtmAfc8ONQmytAKr6xUBFAeCZw6+ BQZ5lXPUXvZnw9f0MJAxMhxKEwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJ/Q9F12 5yUIHlLIevMfsAr+9ZESMB8GA1UdIwQYMBaAFE1SVHRv73Lvt6zAxTStYI9QvDgE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNDlFQS9GNDJENENBMjcz RTQxMUVBOUFFNjgwNzJDNEY5QUUwMi9UVkpVZEdfdmN1LTNyTURGTksxZ2oxQzhP QVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1RWSlVkR192Y3UtM3JNREZOSzFnajFDOE9BUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx NDlFQS9GNDJENENBMjczRTQxMUVBOUFFNjgwNzJDNEY5QUUwMi9UVkpVZEdfdmN1 LTNyTURGTksxZ2oxQzhPQVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCfldo3Wf5stNo/Xti+RRBjEBm2p7xa7wrbsuNLH6sjpxclHPMlCyA6 i8y+PcFmnV3Em2Hhx3l7C0KeCN755x6B7c/yL3qCmeLWipynwSJoRhP2O2dd+xs0 j9wc9333ZsfPJbODWRGxyTxSOBILqeDvYrGvH4f/lOMqHbE6P/KnbCoVyqNKIKez sfZ5Vsq9ZTA77XOQ8lMRdFLtNAx+IE+WwaEAN+I7tJVijiLxj/DauSQJ+tf7Wdcr 6+mXII1NpYsJT6wGf6J/eVZGaZTkDxSpsjQQxNKZY1tIkHE9aBnqRmGf7HIiHrNd Cp54HOONSDtcczgBBZnR1zpvD89tHDQ0 -----END CERTIFICATE-----Generated at Sat Aug 23 20:27:43 2025 by rpki-client