$ rpki-client -vvf rpki.apnic.net/member_repository/A91B8070/AE364696138411F0BC5F4547C4F9AE02/TvuTtJvxulYAjfxgYItSFq7JmsY.mft File: TvuTtJvxulYAjfxgYItSFq7JmsY.mft (raw, json) Hash identifier: hnimEkUF6GQYVG/fBHMx/l1CjwJf23vsR3Psm3StJv0= Subject key identifier: 7B:49:5A:2A:4E:89:A4:10:36:6D:E4:4B:95:6D:19:5F:01:95:5B:0B Authority key identifier: 4E:FB:93:B4:9B:F1:BA:56:00:8D:FC:60:60:8B:52:16:AE:C9:9A:C6 Certificate issuer: /CN=A91B8070/serialNumber=4EFB93B49BF1BA56008DFC60608B5216AEC99AC6 Certificate serial: 2F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TvuTtJvxulYAjfxgYItSFq7JmsY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B8070/AE364696138411F0BC5F4547C4F9AE02/TvuTtJvxulYAjfxgYItSFq7JmsY.mft Manifest number: 2D Signing time: Tue 01 Jul 2025 08:30:08 +0000 Manifest this update: Tue 01 Jul 2025 08:30:07 +0000 Manifest next update: Tue 08 Jul 2025 08:30:07 +0000 Files and hashes: 1: TvuTtJvxulYAjfxgYItSFq7JmsY.crl (hash: LH8ML+w4F7z8bOIrMd6chyg03EzzSkMa8tiTBymkuR4=) 2: 3AD6ED62138511F08BE72448C4F9AE02.roa (hash: 3S4RVGDMTvhO6vm0Gyvr7UAtQxMy4Fhc3zbaUVgynRE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B8070/AE364696138411F0BC5F4547C4F9AE02/TvuTtJvxulYAjfxgYItSFq7JmsY.crl rsync://rpki.apnic.net/member_repository/A91B8070/AE364696138411F0BC5F4547C4F9AE02/TvuTtJvxulYAjfxgYItSFq7JmsY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TvuTtJvxulYAjfxgYItSFq7JmsY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 08 Jul 2025 08:30:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47 (0x2f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B8070, serialNumber=4EFB93B49BF1BA56008DFC60608B5216AEC99AC6 Validity Not Before: Jul 1 08:30:07 2025 GMT Not After : Jul 8 08:30:07 2025 GMT Subject: CN=68639c90-38fd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:d6:4f:c2:0d:22:88:6e:37:ee:87:81:b3:10: 51:c9:19:74:e6:75:fd:98:6e:70:b4:87:95:e5:23: d3:37:36:fe:68:6b:cd:e7:1b:55:61:19:dd:e0:a4: 21:0d:f4:4a:95:57:fc:94:ae:b4:df:5a:1e:fc:29: 46:43:ad:ea:ce:89:70:b8:26:dd:68:c0:ac:b3:c4: d5:6a:73:de:19:5a:14:6c:ff:f4:99:f2:d2:ff:ce: 12:d6:31:4f:15:a3:8d:a2:0f:15:1b:18:f5:04:b2: b7:c1:7e:36:04:3d:d1:da:89:bc:79:ee:a6:f9:0f: 98:64:d6:cf:9c:43:5b:79:22:e1:da:47:1a:fd:d2: a9:91:70:b3:bd:4f:6b:60:af:bc:20:18:ef:e6:44: bf:d7:54:32:65:13:0e:3b:1f:19:7f:f7:6f:a6:7f: 9d:b2:2a:26:a5:8f:04:73:0c:a3:55:08:04:bb:68: 72:79:20:8c:e1:89:48:44:66:db:a2:d3:31:57:5e: 11:d8:01:6f:d8:79:83:ad:57:90:a5:39:e4:7d:94: 6a:b7:54:b8:2d:4b:f4:a6:64:e8:ef:3b:c5:bf:8e: b5:48:3e:1d:a6:6d:39:a0:c6:c2:2d:98:80:17:ff: fd:56:0f:f9:81:53:9a:58:16:7c:75:e0:aa:ed:43: f3:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:49:5A:2A:4E:89:A4:10:36:6D:E4:4B:95:6D:19:5F:01:95:5B:0B X509v3 Authority Key Identifier: keyid:4E:FB:93:B4:9B:F1:BA:56:00:8D:FC:60:60:8B:52:16:AE:C9:9A:C6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B8070/AE364696138411F0BC5F4547C4F9AE02/TvuTtJvxulYAjfxgYItSFq7JmsY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TvuTtJvxulYAjfxgYItSFq7JmsY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B8070/AE364696138411F0BC5F4547C4F9AE02/TvuTtJvxulYAjfxgYItSFq7JmsY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4b:3b:c7:26:cc:4d:bf:03:b7:39:ba:48:18:b9:68:da:96:93: f2:1f:58:d9:f6:0b:4b:b8:f3:ce:2a:f5:a7:11:d6:33:f1:77: cf:39:3d:6c:47:42:1a:d6:c3:8f:dd:fc:02:65:be:af:95:e6: d1:83:fa:5e:2a:ed:02:32:31:a0:f7:11:1f:fa:b4:db:82:28: e0:2a:fd:f0:a1:d7:79:4d:63:39:af:46:33:45:de:21:10:30: 7e:02:3b:51:47:2a:9a:a6:5c:67:b8:c1:07:f5:9c:26:c6:ac: b4:e1:8f:9b:5c:50:e1:1a:76:8e:9d:33:76:03:07:47:33:3c: 3d:4a:35:d2:fc:6b:7e:2b:3d:a7:58:35:4d:42:80:89:ed:2f: b2:d1:8d:52:9e:c0:6e:fa:3b:44:01:b8:71:cd:86:1d:68:81: 9c:95:e3:5f:25:e2:bd:66:ac:6d:1c:14:15:75:64:49:d1:bf: a0:39:9d:a9:26:c9:50:1c:7d:53:55:2d:b0:ec:f2:1f:ba:b4: 52:0e:9f:ba:d3:62:09:1e:b5:f8:09:c8:ff:51:98:a8:c2:55: bd:5e:e7:a5:64:f4:45:e2:86:fb:9c:3d:cf:1c:9b:c9:1e:8a: 30:6e:f8:c5:a8:24:26:18:9c:41:7e:a2:23:61:11:63:c5:9c: 0f:26:36:1d -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBLzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC ODA3MDExMC8GA1UEBRMoNEVGQjkzQjQ5QkYxQkE1NjAwOERGQzYwNjA4QjUyMTZB RUM5OUFDNjAeFw0yNTA3MDEwODMwMDdaFw0yNTA3MDgwODMwMDdaMBgxFjAUBgNV BAMTDTY4NjM5YzkwLTM4ZmQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDd1k/CDSKIbjfuh4GzEFHJGXTmdf2YbnC0h5XlI9M3Nv5oa83nG1VhGd3gpCEN 9EqVV/yUrrTfWh78KUZDrerOiXC4Jt1owKyzxNVqc94ZWhRs//SZ8tL/zhLWMU8V o42iDxUbGPUEsrfBfjYEPdHaibx57qb5D5hk1s+cQ1t5IuHaRxr90qmRcLO9T2tg r7wgGO/mRL/XVDJlEw47Hxl/92+mf52yKialjwRzDKNVCAS7aHJ5IIzhiUhEZtui 0zFXXhHYAW/YeYOtV5ClOeR9lGq3VLgtS/SmZOjvO8W/jrVIPh2mbTmgxsItmIAX //1WD/mBU5pYFnx14KrtQ/MxAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUe0laKk6J pBA2beRLlW0ZXwGVWwswHwYDVR0jBBgwFoAUTvuTtJvxulYAjfxgYItSFq7JmsYw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUI4MDcwL0FFMzY0Njk2MTM4 NDExRjBCQzVGNDU0N0M0RjlBRTAyL1R2dVR0SnZ4dWxZQWpmeGdZSXRTRnE3Sm1z WS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvVHZ1VHRKdnh1bFlBamZ4Z1lJdFNGcTdKbXNZLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUI4 MDcwL0FFMzY0Njk2MTM4NDExRjBCQzVGNDU0N0M0RjlBRTAyL1R2dVR0SnZ4dWxZ QWpmeGdZSXRTRnE3Sm1zWS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAEs7xybMTb8Dtzm6SBi5aNqWk/IfWNn2C0u4884q9acR1jPxd885PWxH QhrWw4/d/AJlvq+V5tGD+l4q7QIyMaD3ER/6tNuCKOAq/fCh13lNYzmvRjNF3iEQ MH4CO1FHKpqmXGe4wQf1nCbGrLThj5tcUOEado6dM3YDB0czPD1KNdL8a34rPadY NU1CgIntL7LRjVKewG76O0QBuHHNhh1ogZyV418l4r1mrG0cFBV1ZEnRv6A5nakm yVAcfVNVLbDs8h+6tFIOn7rTYgketfgJyP9RmKjCVb1e56Vk9EXihvucPc8cm8ke ijBu+MWoJCYYnEF+oiNhEWPFnA8mNh0= -----END CERTIFICATE-----Generated at Wed Jul 2 21:56:00 2025 by rpki-client