$ rpki-client -vvf rpki.apnic.net/member_repository/A91CE3C4/6DD9F3347F9711EBADDC5F15C4F9AE02/tv1vS0-3wyR8WZKZsui6-1qLunI.mft File: tv1vS0-3wyR8WZKZsui6-1qLunI.mft (raw, json) Hash identifier: cftBWjv93+bGlgwNdd51NSAAXvPykeWi6FMvnNsZq/g= Subject key identifier: 09:50:ED:5A:68:DF:31:12:B3:76:40:3C:8B:4C:1E:83:19:D6:A0:27 Authority key identifier: B6:FD:6F:4B:4F:B7:C3:24:7C:59:92:99:B2:E8:BA:FB:5A:8B:BA:72 Certificate issuer: /CN=A91CE3C4/serialNumber=B6FD6F4B4FB7C3247C599299B2E8BAFB5A8BBA72 Certificate serial: 0690 Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/tv1vS0-3wyR8WZKZsui6-1qLunI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CE3C4/6DD9F3347F9711EBADDC5F15C4F9AE02/tv1vS0-3wyR8WZKZsui6-1qLunI.mft Manifest number: 067E Signing time: Sat 28 Jun 2025 21:57:35 +0000 Manifest this update: Sat 28 Jun 2025 21:57:34 +0000 Manifest next update: Sat 05 Jul 2025 21:57:34 +0000 Files and hashes: 1: tv1vS0-3wyR8WZKZsui6-1qLunI.crl (hash: B/Q1OUA1XMTwtJEv73MvmYAUdbJNpt+GAgudzj7bgqg=) 2: EC427D64B16311ECA18ED12FC4F9AE02.roa (hash: Ga4Z3DpE9aUbX7W5p2tUSOPgf7WkxMTRgFBKaq09Cxs=) 3: 35341F3E4EAE11EF811DC17BC4F9AE02.roa (hash: 1g7V3yJi0/XsTFsCpcEg/UcPiKQqpqW1UWTVYTWMIZE=) 4: A40873CE7FB811EB82018D29C4F9AE02.roa (hash: x1uMmRK43yay8ZPmLxVu8RIg3TAXDE9HwOF5tkl8BVc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CE3C4/6DD9F3347F9711EBADDC5F15C4F9AE02/tv1vS0-3wyR8WZKZsui6-1qLunI.crl rsync://rpki.apnic.net/member_repository/A91CE3C4/6DD9F3347F9711EBADDC5F15C4F9AE02/tv1vS0-3wyR8WZKZsui6-1qLunI.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/tv1vS0-3wyR8WZKZsui6-1qLunI.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 05 Jul 2025 21:57:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1680 (0x690) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CE3C4, serialNumber=B6FD6F4B4FB7C3247C599299B2E8BAFB5A8BBA72 Validity Not Before: Jun 28 21:57:34 2025 GMT Not After : Jul 5 21:57:34 2025 GMT Subject: CN=6860654f-1665 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:f0:17:6f:fd:ce:62:e2:7c:d3:ec:53:5b:13: b0:13:bf:f7:41:bf:99:94:b8:d6:a0:9c:a0:a2:2e: 41:95:58:e8:d9:0a:8a:0e:79:12:18:a0:8e:42:18: 32:af:9b:9a:69:e2:9d:af:1c:62:a9:11:fc:32:c4: da:01:d2:cc:9f:2e:75:a4:b4:0c:c1:ae:52:a9:2c: fe:4c:e8:bd:10:94:34:20:c1:00:aa:13:33:5b:a1: aa:47:af:96:f6:e7:23:73:e6:3f:7e:82:79:0d:38: bd:96:03:1b:12:59:14:33:d0:ba:65:2e:5f:ce:50: 58:cc:a3:dc:96:05:1b:bb:bf:e2:6c:38:f1:bb:61: d3:b7:8d:2a:93:4f:08:80:77:91:e3:c8:ad:6f:72: 2c:79:ef:5a:09:36:86:d8:6f:67:13:dd:d2:f4:34: 85:19:ff:2d:59:14:c8:29:ed:51:bf:12:2f:c5:ad: 2c:7e:70:16:7d:3f:d9:cb:81:4a:fb:7a:80:f8:3d: 44:e6:13:f4:23:75:38:8f:a7:f0:c7:92:e7:47:f0: be:4f:df:92:37:13:cb:04:0e:29:bc:43:76:cd:97: a4:8b:01:82:2a:55:b6:91:fd:de:8a:6b:33:f1:cd: 90:54:2c:21:44:d0:6d:5f:f3:11:e0:fb:5e:d0:f2: 2b:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:50:ED:5A:68:DF:31:12:B3:76:40:3C:8B:4C:1E:83:19:D6:A0:27 X509v3 Authority Key Identifier: keyid:B6:FD:6F:4B:4F:B7:C3:24:7C:59:92:99:B2:E8:BA:FB:5A:8B:BA:72 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CE3C4/6DD9F3347F9711EBADDC5F15C4F9AE02/tv1vS0-3wyR8WZKZsui6-1qLunI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/tv1vS0-3wyR8WZKZsui6-1qLunI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CE3C4/6DD9F3347F9711EBADDC5F15C4F9AE02/tv1vS0-3wyR8WZKZsui6-1qLunI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 15:33:40:dc:c1:e9:2d:7c:9b:d5:e1:0f:fd:58:a9:a4:d8:f1: 49:11:1f:d6:ae:e0:1e:4f:09:74:b5:6d:e0:95:f4:d6:1f:2b: c7:fc:4d:9d:0d:0c:a3:87:df:47:a7:3c:3e:4b:b2:73:53:54: 64:ce:10:84:37:01:69:cf:78:b8:bf:18:ee:1d:11:46:53:74: 61:e1:84:b1:a3:0e:8c:17:44:78:af:53:c3:a8:33:e9:db:c3: 0b:5e:eb:6d:02:59:67:df:2e:4f:48:47:11:76:ac:2e:61:6f: e1:4e:19:67:e8:ed:c8:5d:b4:96:d6:07:be:23:19:a2:6d:d1: 81:a6:83:c7:e2:16:17:0a:78:01:10:cb:56:5d:96:b7:ac:29: ea:15:a5:ac:a3:d3:b5:1d:f0:b6:57:2f:50:41:2d:8b:38:62: 96:44:d9:3c:2c:20:91:c0:d2:52:20:2e:5b:d0:93:c6:3e:f6: 5a:de:18:29:75:aa:94:0b:43:fe:ad:04:8e:8f:e5:0f:ae:e6: 04:40:0e:95:af:fe:60:7c:0d:8e:75:8d:9d:ef:b1:5d:2f:e2: ac:16:c6:54:36:6a:b6:f2:28:cf:ed:73:1f:5a:9d:28:64:40: 29:81:f5:b6:8d:9e:88:7a:70:56:ba:27:68:89:b7:78:21:b8: 89:fe:50:76 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBpAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0UzQzQxMTAvBgNVBAUTKEI2RkQ2RjRCNEZCN0MzMjQ3QzU5OTI5OUIyRThCQUZC NUE4QkJBNzIwHhcNMjUwNjI4MjE1NzM0WhcNMjUwNzA1MjE1NzM0WjAYMRYwFAYD VQQDEw02ODYwNjU0Zi0xNjY1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2PAXb/3OYuJ80+xTWxOwE7/3Qb+ZlLjWoJygoi5BlVjo2QqKDnkSGKCOQhgy r5uaaeKdrxxiqRH8MsTaAdLMny51pLQMwa5SqSz+TOi9EJQ0IMEAqhMzW6GqR6+W 9ucjc+Y/foJ5DTi9lgMbElkUM9C6ZS5fzlBYzKPclgUbu7/ibDjxu2HTt40qk08I gHeR48itb3Isee9aCTaG2G9nE93S9DSFGf8tWRTIKe1RvxIvxa0sfnAWfT/Zy4FK +3qA+D1E5hP0I3U4j6fwx5LnR/C+T9+SNxPLBA4pvEN2zZekiwGCKlW2kf3eimsz 8c2QVCwhRNBtX/MR4Pte0PIrgQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAlQ7Vpo 3zESs3ZAPItMHoMZ1qAnMB8GA1UdIwQYMBaAFLb9b0tPt8MkfFmSmbLouvtai7py MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRTNDNC82REQ5RjMzNDdG OTcxMUVCQUREQzVGMTVDNEY5QUUwMi90djF2UzAtM3d5UjhXWktac3VpNi0xcUx1 bkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyL3R2MXZTMC0zd3lSOFdaS1pzdWk2LTFxTHVuSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RTNDNC82REQ5RjMzNDdGOTcxMUVCQUREQzVGMTVDNEY5QUUwMi90djF2UzAtM3d5 UjhXWktac3VpNi0xcUx1bkkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAVM0DcwektfJvV4Q/9WKmk2PFJER/WruAeTwl0tW3glfTWHyvH/E2d DQyjh99Hpzw+S7JzU1RkzhCENwFpz3i4vxjuHRFGU3Rh4YSxow6MF0R4r1PDqDPp 28MLXuttAlln3y5PSEcRdqwuYW/hThln6O3IXbSW1ge+IxmibdGBpoPH4hYXCngB EMtWXZa3rCnqFaWso9O1HfC2Vy9QQS2LOGKWRNk8LCCRwNJSIC5b0JPGPvZa3hgp daqUC0P+rQSOj+UPruYEQA6Vr/5gfA2OdY2d77FdL+KsFsZUNmq28ijP7XMfWp0o ZEApgfW2jZ6IenBWuidoibd4IbiJ/lB2 -----END CERTIFICATE-----Generated at Mon Jun 30 17:05:37 2025 by rpki-client