$ rpki-client -vvf rpki.apnic.net/member_repository/A91933FE/D31A677AAB6811EDA5CA5B09C4F9AE02/tVGhYNO-3KVi6d395AkzcktpuQA.mft File: tVGhYNO-3KVi6d395AkzcktpuQA.mft (raw, json) Hash identifier: xmEY1B2zTi7eZYIXtWJ8jlgbcEYyAGF9sCn/QAUmFs0= Subject key identifier: 73:04:F8:09:5F:54:94:32:C5:BC:2B:CC:52:E1:91:2A:DA:98:38:4F Authority key identifier: B5:51:A1:60:D3:BE:DC:A5:62:E9:DD:FD:E4:09:33:72:4B:69:B9:00 Certificate issuer: /CN=A91933FE/serialNumber=B551A160D3BEDCA562E9DDFDE40933724B69B900 Certificate serial: 01E1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tVGhYNO-3KVi6d395AkzcktpuQA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91933FE/D31A677AAB6811EDA5CA5B09C4F9AE02/tVGhYNO-3KVi6d395AkzcktpuQA.mft Manifest number: 01D9 Signing time: Sat 23 Aug 2025 02:50:08 +0000 Manifest this update: Sat 23 Aug 2025 02:50:08 +0000 Manifest next update: Sat 30 Aug 2025 02:50:08 +0000 Files and hashes: 1: tVGhYNO-3KVi6d395AkzcktpuQA.crl (hash: /wmnSRjVTkrFMj7rvZ2A0/bp0ooJeC4TF/W0qxf2rqs=) 2: A6CD6A3EAB6B11EDA5C53A0AC4F9AE02.roa (hash: ojParvJ0FGJUPZ25zNdYUl2YaHcSyrc33U2l9MfbPKU=) 3: A63F9024AB6B11EDA5C53A0AC4F9AE02.roa (hash: 67QdihmJWNEdpWctmJLskykPLPRUaTyZfL1MUDXMOe4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91933FE/D31A677AAB6811EDA5CA5B09C4F9AE02/tVGhYNO-3KVi6d395AkzcktpuQA.crl rsync://rpki.apnic.net/member_repository/A91933FE/D31A677AAB6811EDA5CA5B09C4F9AE02/tVGhYNO-3KVi6d395AkzcktpuQA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tVGhYNO-3KVi6d395AkzcktpuQA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 02:50:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 481 (0x1e1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91933FE, serialNumber=B551A160D3BEDCA562E9DDFDE40933724B69B900 Validity Not Before: Aug 23 02:50:08 2025 GMT Not After : Aug 30 02:50:08 2025 GMT Subject: CN=68a92c60-8528 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:a3:d1:38:8d:18:0e:04:7e:79:f8:3f:9a:0f: 35:49:ff:fd:e2:8d:f3:a0:bb:05:75:4c:37:e0:40: a7:18:dc:97:5a:50:70:a8:5d:aa:98:df:67:80:de: 3b:1b:55:19:e8:72:91:f1:57:63:bd:14:fe:ee:84: 5a:07:1d:02:d6:ef:4c:84:11:ec:9b:fe:66:2f:24: 1d:f8:ee:7e:6b:a8:b0:ec:17:e5:30:03:56:9c:bf: 40:69:6e:88:62:05:47:54:af:ad:59:f7:bc:85:a7: 74:01:5a:ed:6a:52:2f:ac:44:5c:a5:f8:bb:92:12: b6:36:c8:9d:1b:b0:ca:03:23:d9:1d:18:f8:64:8e: 94:59:c1:c9:23:10:46:f6:98:41:5e:9f:20:41:e2: 4f:6d:cf:e3:61:ae:b4:f8:48:6e:c5:e0:01:fd:ab: ea:53:8d:0a:dd:5c:95:41:bf:2b:15:5d:86:60:31: bd:c6:e9:fd:cc:49:93:df:3b:d5:51:e2:cf:d3:72: 4d:7a:2c:2c:1e:b6:fd:69:10:c3:3b:02:21:3e:d7: 7b:a8:91:75:05:11:74:74:89:f9:38:76:59:6f:c7: dc:ee:a6:5a:cc:d3:ab:fc:0a:27:05:88:35:4b:1a: b5:53:43:d3:03:5c:c8:6b:fa:a4:10:63:5b:30:37: 48:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:04:F8:09:5F:54:94:32:C5:BC:2B:CC:52:E1:91:2A:DA:98:38:4F X509v3 Authority Key Identifier: keyid:B5:51:A1:60:D3:BE:DC:A5:62:E9:DD:FD:E4:09:33:72:4B:69:B9:00 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91933FE/D31A677AAB6811EDA5CA5B09C4F9AE02/tVGhYNO-3KVi6d395AkzcktpuQA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tVGhYNO-3KVi6d395AkzcktpuQA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91933FE/D31A677AAB6811EDA5CA5B09C4F9AE02/tVGhYNO-3KVi6d395AkzcktpuQA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7c:fa:79:24:c1:02:da:73:bc:11:db:ba:64:f7:91:5b:11:ca: 17:5b:f5:34:61:a3:45:3c:54:9b:a9:32:6c:0e:8b:7d:68:c8: c8:da:ba:eb:28:25:30:a5:63:7a:6b:b5:20:a7:2e:90:77:2b: 00:91:1a:70:a4:5c:f8:79:28:9f:65:5f:44:00:db:00:ea:12: f1:f1:f2:f0:4b:38:4f:f2:67:9f:6d:ff:72:67:e3:b7:59:a4: d8:50:af:8b:60:d7:59:31:a7:3a:e1:65:d9:eb:50:2a:60:ac: f5:fd:5b:cc:28:ec:57:69:27:c8:57:c7:77:4f:d7:38:04:bf: 13:b6:c8:b6:91:50:0d:8f:86:c4:bf:a9:79:e8:73:c0:61:19: 74:86:cb:4f:1f:49:1e:01:2c:97:97:b6:a1:36:97:30:96:20: f3:2f:3b:f7:17:a4:33:0d:17:d5:06:17:82:bd:d6:71:81:32: 12:ce:38:68:5e:6c:53:72:dd:7c:ff:6e:bf:ee:4e:a7:6f:e5: 43:30:82:ad:27:2f:26:b9:ab:d6:f6:1a:c1:cc:14:a8:8c:f7: 23:0b:7f:9c:55:c3:c5:e2:c0:00:58:a5:4b:61:87:f6:91:24: f6:f2:74:09:b0:9c:cd:3f:50:37:be:9a:b6:fa:a9:29:74:21: 04:49:45:5f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAeEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTMzRkUxMTAvBgNVBAUTKEI1NTFBMTYwRDNCRURDQTU2MkU5RERGREU0MDkzMzcy NEI2OUI5MDAwHhcNMjUwODIzMDI1MDA4WhcNMjUwODMwMDI1MDA4WjAYMRYwFAYD VQQDEw02OGE5MmM2MC04NTI4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoKPROI0YDgR+efg/mg81Sf/94o3zoLsFdUw34ECnGNyXWlBwqF2qmN9ngN47 G1UZ6HKR8VdjvRT+7oRaBx0C1u9MhBHsm/5mLyQd+O5+a6iw7BflMANWnL9AaW6I YgVHVK+tWfe8had0AVrtalIvrERcpfi7khK2NsidG7DKAyPZHRj4ZI6UWcHJIxBG 9phBXp8gQeJPbc/jYa60+EhuxeAB/avqU40K3VyVQb8rFV2GYDG9xun9zEmT3zvV UeLP03JNeiwsHrb9aRDDOwIhPtd7qJF1BRF0dIn5OHZZb8fc7qZazNOr/AonBYg1 Sxq1U0PTA1zIa/qkEGNbMDdIPwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHME+Alf VJQyxbwrzFLhkSramDhPMB8GA1UdIwQYMBaAFLVRoWDTvtylYund/eQJM3JLabkA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MzNGRS9EMzFBNjc3QUFC NjgxMUVEQTVDQTVCMDlDNEY5QUUwMi90VkdoWU5PLTNLVmk2ZDM5NUFremNrdHB1 UUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RWR2hZTk8tM0tWaTZkMzk1QWt6Y2t0cHVRQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 MzNGRS9EMzFBNjc3QUFCNjgxMUVEQTVDQTVCMDlDNEY5QUUwMi90VkdoWU5PLTNL Vmk2ZDM5NUFremNrdHB1UUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB8+nkkwQLac7wR27pk95FbEcoXW/U0YaNFPFSbqTJsDot9aMjI2rrr KCUwpWN6a7Ugpy6QdysAkRpwpFz4eSifZV9EANsA6hLx8fLwSzhP8mefbf9yZ+O3 WaTYUK+LYNdZMac64WXZ61AqYKz1/VvMKOxXaSfIV8d3T9c4BL8Ttsi2kVANj4bE v6l56HPAYRl0hstPH0keASyXl7ahNpcwliDzLzv3F6QzDRfVBheCvdZxgTISzjho XmxTct18/26/7k6nb+VDMIKtJy8muavW9hrBzBSojPcjC3+cVcPF4sAAWKVLYYf2 kST28nQJsJzNP1A3vpq2+qkpdCEESUVf -----END CERTIFICATE-----Generated at Sat Aug 23 19:38:07 2025 by rpki-client