$ rpki-client -vvf rpki.apnic.net/member_repository/A91B8070/AE364696138411F0BC5F4547C4F9AE02/TvuTtJvxulYAjfxgYItSFq7JmsY.mft File: TvuTtJvxulYAjfxgYItSFq7JmsY.mft (raw, json) Hash identifier: b4F4SlKYU8sLGvJ46vAlDqG/p/bvj+zsRJg+stWVkow= Subject key identifier: FD:86:FE:15:6F:98:A0:5B:96:9C:51:2F:DD:E4:A5:D4:82:76:C2:AB Authority key identifier: 4E:FB:93:B4:9B:F1:BA:56:00:8D:FC:60:60:8B:52:16:AE:C9:9A:C6 Certificate issuer: /CN=A91B8070/serialNumber=4EFB93B49BF1BA56008DFC60608B5216AEC99AC6 Certificate serial: 50 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TvuTtJvxulYAjfxgYItSFq7JmsY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B8070/AE364696138411F0BC5F4547C4F9AE02/TvuTtJvxulYAjfxgYItSFq7JmsY.mft Manifest number: 4C Signing time: Sat 23 Aug 2025 07:37:57 +0000 Manifest this update: Sat 23 Aug 2025 07:37:57 +0000 Manifest next update: Sat 30 Aug 2025 07:37:57 +0000 Files and hashes: 1: TvuTtJvxulYAjfxgYItSFq7JmsY.crl (hash: 5NnSIoeP4JcWbFKr2CIeNOXos2DP2s9q7oo57UAVNeI=) 2: AB942EE0607C11F0A8F5A261C4F9AE02.roa (hash: Ib7XrV2UdhfMc2uSkqN8sJc2pYT7HHMtYcCkEQkD9OY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B8070/AE364696138411F0BC5F4547C4F9AE02/TvuTtJvxulYAjfxgYItSFq7JmsY.crl rsync://rpki.apnic.net/member_repository/A91B8070/AE364696138411F0BC5F4547C4F9AE02/TvuTtJvxulYAjfxgYItSFq7JmsY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TvuTtJvxulYAjfxgYItSFq7JmsY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 07:37:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 80 (0x50) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B8070, serialNumber=4EFB93B49BF1BA56008DFC60608B5216AEC99AC6 Validity Not Before: Aug 23 07:37:57 2025 GMT Not After : Aug 30 07:37:57 2025 GMT Subject: CN=68a96fd5-6084 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:d9:e7:47:d8:dd:46:2c:c8:5d:96:a8:48:50: 0c:0f:e1:8a:74:f3:ff:be:6b:f4:ee:8e:9c:d9:f2: 9e:0e:83:c3:82:32:37:df:1c:74:12:a0:48:f3:a1: 17:1e:da:42:16:00:b6:28:8b:e4:c8:9c:e3:d4:37: d7:cf:24:8e:0c:85:6f:95:a9:dd:8e:66:47:e8:e6: 92:e1:10:a3:ea:0c:14:ec:7c:31:4f:af:70:1d:3d: 61:08:04:b2:a1:68:99:10:f7:c6:9c:f8:f3:26:dd: c7:34:72:c1:13:b8:fb:b0:64:46:36:cb:de:54:57: 35:39:a4:04:74:4e:a1:9b:40:b1:94:a8:c6:68:cc: e0:c3:cb:c7:96:dc:32:7e:77:fa:25:99:56:69:8e: 5d:79:28:6c:58:56:60:5a:52:18:c0:83:e2:46:7d: 30:9f:17:67:6f:ee:70:1a:d4:a8:69:2b:c2:1a:88: d0:7e:c6:81:78:0a:c9:50:19:2f:bd:54:7f:b6:91: 02:29:d0:47:2a:76:45:c9:51:17:7d:d9:a1:0c:ce: d1:e0:98:b1:b4:59:dd:4e:96:d1:7f:3e:16:8a:29: 90:6d:b2:50:3f:da:cd:be:ef:71:f1:53:39:44:0b: 1f:11:f4:39:ca:99:e0:59:34:0b:09:89:b8:72:1b: 39:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:86:FE:15:6F:98:A0:5B:96:9C:51:2F:DD:E4:A5:D4:82:76:C2:AB X509v3 Authority Key Identifier: keyid:4E:FB:93:B4:9B:F1:BA:56:00:8D:FC:60:60:8B:52:16:AE:C9:9A:C6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B8070/AE364696138411F0BC5F4547C4F9AE02/TvuTtJvxulYAjfxgYItSFq7JmsY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TvuTtJvxulYAjfxgYItSFq7JmsY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B8070/AE364696138411F0BC5F4547C4F9AE02/TvuTtJvxulYAjfxgYItSFq7JmsY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b2:bf:a1:42:42:0b:fa:8e:e7:83:da:13:8b:2b:01:9e:40:28: 47:18:60:27:aa:85:37:a4:de:ca:76:92:cf:c0:00:d0:f1:a5: 3b:69:2a:72:c8:3f:51:96:c8:46:f7:13:d8:9a:d2:d6:52:c7: 37:7b:31:f4:c8:74:6c:b4:bb:8a:f9:d2:57:78:15:ca:a3:ba: 8d:6f:13:4d:cd:70:68:d3:bb:f9:4e:3f:db:71:1d:d2:08:64: d6:8b:c9:d7:d7:32:94:dc:9d:ab:ea:38:0e:00:c4:2e:96:20: 2b:28:55:09:e0:45:66:f0:48:af:77:6f:13:f0:b9:fa:26:f6: ac:3d:03:01:e5:a9:2d:31:1f:8c:c0:66:92:96:f6:b9:44:9a: cc:41:e7:30:1e:9a:a1:d8:59:f8:17:d5:c7:cd:51:b4:e8:13: 84:85:8a:a8:ba:17:cd:d3:d4:01:db:37:8f:e5:a5:8d:59:6d: e4:25:c4:ba:96:ab:3d:73:fe:6b:20:9e:46:a7:2a:b5:59:dd: 8f:65:0e:a0:cb:90:4a:ff:65:66:33:98:64:03:f8:58:91:79: 11:44:3b:f7:9d:c8:72:26:26:70:c1:d5:52:b9:d5:49:9a:d2: 88:be:7f:68:46:22:b6:34:a6:4d:1f:0b:9c:7a:84:ff:72:aa: 26:e6:90:12 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBUDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC ODA3MDExMC8GA1UEBRMoNEVGQjkzQjQ5QkYxQkE1NjAwOERGQzYwNjA4QjUyMTZB RUM5OUFDNjAeFw0yNTA4MjMwNzM3NTdaFw0yNTA4MzAwNzM3NTdaMBgxFjAUBgNV BAMTDTY4YTk2ZmQ1LTYwODQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCg2edH2N1GLMhdlqhIUAwP4Yp08/++a/TujpzZ8p4Og8OCMjffHHQSoEjzoRce 2kIWALYoi+TInOPUN9fPJI4MhW+Vqd2OZkfo5pLhEKPqDBTsfDFPr3AdPWEIBLKh aJkQ98ac+PMm3cc0csETuPuwZEY2y95UVzU5pAR0TqGbQLGUqMZozODDy8eW3DJ+ d/olmVZpjl15KGxYVmBaUhjAg+JGfTCfF2dv7nAa1KhpK8IaiNB+xoF4CslQGS+9 VH+2kQIp0EcqdkXJURd92aEMztHgmLG0Wd1OltF/PhaKKZBtslA/2s2+73HxUzlE Cx8R9DnKmeBZNAsJibhyGzlnAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU/Yb+FW+Y oFuWnFEv3eSl1IJ2wqswHwYDVR0jBBgwFoAUTvuTtJvxulYAjfxgYItSFq7JmsYw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUI4MDcwL0FFMzY0Njk2MTM4 NDExRjBCQzVGNDU0N0M0RjlBRTAyL1R2dVR0SnZ4dWxZQWpmeGdZSXRTRnE3Sm1z WS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvVHZ1VHRKdnh1bFlBamZ4Z1lJdFNGcTdKbXNZLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUI4 MDcwL0FFMzY0Njk2MTM4NDExRjBCQzVGNDU0N0M0RjlBRTAyL1R2dVR0SnZ4dWxZ QWpmeGdZSXRTRnE3Sm1zWS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBALK/oUJCC/qO54PaE4srAZ5AKEcYYCeqhTek3sp2ks/AANDxpTtpKnLI P1GWyEb3E9ia0tZSxzd7MfTIdGy0u4r50ld4Fcqjuo1vE03NcGjTu/lOP9txHdII ZNaLydfXMpTcnavqOA4AxC6WICsoVQngRWbwSK93bxPwufom9qw9AwHlqS0xH4zA ZpKW9rlEmsxB5zAemqHYWfgX1cfNUbToE4SFiqi6F83T1AHbN4/lpY1ZbeQlxLqW qz1z/msgnkanKrVZ3Y9lDqDLkEr/ZWYzmGQD+FiReRFEO/edyHImJnDB1VK51Uma 0oi+f2hGIrY0pk0fC5x6hP9yqibmkBI= -----END CERTIFICATE-----Generated at Sat Aug 23 19:03:45 2025 by rpki-client