$ rpki-client -vvf rpki.apnic.net/member_repository/A91149EA/F42D4CA273E411EA9AE68072C4F9AE02/TVJUdG_vcu-3rMDFNK1gj1C8OAQ.mft File: TVJUdG_vcu-3rMDFNK1gj1C8OAQ.mft (raw, json) Hash identifier: AAuteJGu1fhcFV9xuGSZWas/9xVGP4sKKAa08r6Fa58= Subject key identifier: E4:9D:2F:7E:78:3F:7F:E3:BE:54:E0:C5:8F:BC:01:94:7D:02:F9:00 Authority key identifier: 4D:52:54:74:6F:EF:72:EF:B7:AC:C0:C5:34:AD:60:8F:50:BC:38:04 Certificate issuer: /CN=A91149EA/serialNumber=4D5254746FEF72EFB7ACC0C534AD608F50BC3804 Certificate serial: 0A39 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TVJUdG_vcu-3rMDFNK1gj1C8OAQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91149EA/F42D4CA273E411EA9AE68072C4F9AE02/TVJUdG_vcu-3rMDFNK1gj1C8OAQ.mft Manifest number: 0A29 Signing time: Fri 18 Jul 2025 20:00:36 +0000 Manifest this update: Fri 18 Jul 2025 20:00:35 +0000 Manifest next update: Fri 25 Jul 2025 20:00:35 +0000 Files and hashes: 1: TVJUdG_vcu-3rMDFNK1gj1C8OAQ.crl (hash: 7Ainsz2w0BQkQtnljKZzkmLMxY6gIknbRTsYedigI/o=) 2: F94FA23C92F211EC8D04F649C4F9AE02.roa (hash: cCp7Bzw8poNKj0gr0L5A5NrVzahfSp+S0YQtn1jReFE=) 3: F61F817C9B3B11EBA5C76B80C4F9AE02.roa (hash: MwqZowzxRiYq0MUhfIdoeD3JCO2yoaZpzTRIMaHJxqs=) 4: 6897409A73E811EA93705B7CC4F9AE02.roa (hash: 8MO+sNBEiwlcI2/otkXShyj1mgir6Tk3C5bJL2OwyHE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91149EA/F42D4CA273E411EA9AE68072C4F9AE02/TVJUdG_vcu-3rMDFNK1gj1C8OAQ.crl rsync://rpki.apnic.net/member_repository/A91149EA/F42D4CA273E411EA9AE68072C4F9AE02/TVJUdG_vcu-3rMDFNK1gj1C8OAQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TVJUdG_vcu-3rMDFNK1gj1C8OAQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Jul 2025 20:00:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2617 (0xa39) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91149EA, serialNumber=4D5254746FEF72EFB7ACC0C534AD608F50BC3804 Validity Not Before: Jul 18 20:00:35 2025 GMT Not After : Jul 25 20:00:35 2025 GMT Subject: CN=687aa7e4-1cf2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:e4:fb:2b:e3:c2:5d:37:b6:bd:a8:c3:cf:c9: e4:0d:1e:12:9f:a2:c3:06:1f:2f:99:2c:fa:36:5d: 3f:d9:c4:d6:e5:9b:e3:0b:18:05:6e:a7:71:64:c2: 99:47:81:12:c6:8c:c2:c2:d5:b6:47:37:ee:df:af: 4a:55:a0:ef:b7:11:c5:ba:37:84:34:8b:27:31:59: cf:76:d3:c6:e6:a2:3a:eb:0b:0a:b8:cb:29:9c:9e: 07:44:d6:ac:e1:30:fd:0d:87:61:85:f5:74:bf:95: 98:92:76:ed:d4:2a:36:0c:9f:1b:02:94:61:9b:db: 41:4e:5c:06:97:44:aa:22:b2:12:28:9e:9e:15:0c: 72:e0:d1:e6:d5:be:cd:b0:9e:44:69:d3:70:bc:6a: 09:cb:97:dd:4e:a6:a0:e4:a0:18:d3:74:87:42:4e: be:05:1a:b0:15:97:28:4e:37:44:3b:9f:9f:bd:64: fc:d9:b1:25:9d:af:20:f0:91:46:13:1f:3b:f2:97: 36:f4:08:74:3b:13:bd:82:57:35:c0:a8:3f:30:ed: dd:63:41:87:8f:fa:c1:e6:82:26:5b:23:ea:69:ab: b3:3c:9b:ad:68:f7:21:87:14:41:14:3b:bd:25:a9: 0d:f9:14:ea:0a:5b:a3:63:f4:51:19:0f:08:f7:1e: fa:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:9D:2F:7E:78:3F:7F:E3:BE:54:E0:C5:8F:BC:01:94:7D:02:F9:00 X509v3 Authority Key Identifier: keyid:4D:52:54:74:6F:EF:72:EF:B7:AC:C0:C5:34:AD:60:8F:50:BC:38:04 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91149EA/F42D4CA273E411EA9AE68072C4F9AE02/TVJUdG_vcu-3rMDFNK1gj1C8OAQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TVJUdG_vcu-3rMDFNK1gj1C8OAQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91149EA/F42D4CA273E411EA9AE68072C4F9AE02/TVJUdG_vcu-3rMDFNK1gj1C8OAQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 63:b2:5a:40:38:51:43:b7:74:53:a7:ad:39:f9:53:b2:c1:8e: f4:7f:df:07:59:b4:9f:4e:b1:27:cf:c5:9f:ec:58:04:20:00: 4e:26:ac:e6:e0:8b:54:4b:b9:0b:07:94:6c:12:38:18:2e:51: 12:6e:90:20:d9:1d:09:3b:41:ad:c8:d4:3f:b9:f6:f5:15:66: 94:5a:f5:70:91:05:2b:74:68:91:0b:44:df:96:61:8b:12:b3: 2c:fc:5a:e8:6a:9a:54:d1:a2:03:43:08:fd:18:35:2b:8d:db: 13:48:f1:28:56:ee:3c:80:36:34:4e:19:fa:4f:5b:47:11:01: b1:df:ba:72:c1:8e:ec:c6:1e:23:48:8c:5d:71:9d:b2:6c:c4: eb:ec:cf:df:a0:2c:54:8c:5e:19:82:8d:04:a2:8a:92:12:f8: 27:e3:f2:e9:ea:50:06:b9:79:96:d1:2f:48:03:77:41:8d:5d: 11:f9:d5:25:d2:86:bc:90:9d:63:d5:6a:2b:b2:27:e0:4f:5c: 41:b6:28:a1:fb:35:3a:52:c7:37:a8:38:c0:1d:d0:e7:6d:4e: b3:d4:75:a7:2c:17:37:9f:fa:57:62:82:a0:ec:e5:e8:0d:17: bd:7e:33:c8:dc:ea:c0:61:8e:ab:65:e8:45:fa:da:f0:1a:78: d4:f1:f3:c2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCjkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTQ5RUExMTAvBgNVBAUTKDRENTI1NDc0NkZFRjcyRUZCN0FDQzBDNTM0QUQ2MDhG NTBCQzM4MDQwHhcNMjUwNzE4MjAwMDM1WhcNMjUwNzI1MjAwMDM1WjAYMRYwFAYD VQQDEw02ODdhYTdlNC0xY2YyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAr+T7K+PCXTe2vajDz8nkDR4Sn6LDBh8vmSz6Nl0/2cTW5ZvjCxgFbqdxZMKZ R4ESxozCwtW2Rzfu369KVaDvtxHFujeENIsnMVnPdtPG5qI66wsKuMspnJ4HRNas 4TD9DYdhhfV0v5WYknbt1Co2DJ8bApRhm9tBTlwGl0SqIrISKJ6eFQxy4NHm1b7N sJ5EadNwvGoJy5fdTqag5KAY03SHQk6+BRqwFZcoTjdEO5+fvWT82bElna8g8JFG Ex878pc29Ah0OxO9glc1wKg/MO3dY0GHj/rB5oImWyPqaauzPJutaPchhxRBFDu9 JakN+RTqClujY/RRGQ8I9x76iQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOSdL354 P3/jvlTgxY+8AZR9AvkAMB8GA1UdIwQYMBaAFE1SVHRv73Lvt6zAxTStYI9QvDgE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNDlFQS9GNDJENENBMjcz RTQxMUVBOUFFNjgwNzJDNEY5QUUwMi9UVkpVZEdfdmN1LTNyTURGTksxZ2oxQzhP QVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1RWSlVkR192Y3UtM3JNREZOSzFnajFDOE9BUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx NDlFQS9GNDJENENBMjczRTQxMUVBOUFFNjgwNzJDNEY5QUUwMi9UVkpVZEdfdmN1 LTNyTURGTksxZ2oxQzhPQVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBjslpAOFFDt3RTp605+VOywY70f98HWbSfTrEnz8Wf7FgEIABOJqzm 4ItUS7kLB5RsEjgYLlESbpAg2R0JO0GtyNQ/ufb1FWaUWvVwkQUrdGiRC0TflmGL ErMs/FroappU0aIDQwj9GDUrjdsTSPEoVu48gDY0Thn6T1tHEQGx37pywY7sxh4j SIxdcZ2ybMTr7M/foCxUjF4Zgo0EooqSEvgn4/Lp6lAGuXmW0S9IA3dBjV0R+dUl 0oa8kJ1j1WorsifgT1xBtiih+zU6Usc3qDjAHdDnbU6z1HWnLBc3n/pXYoKg7OXo DRe9fjPI3OrAYY6rZehF+trwGnjU8fPC -----END CERTIFICATE-----Generated at Sun Jul 20 19:01:49 2025 by rpki-client