$ rpki-client -vvf rpki.apnic.net/member_repository/A91933FE/D31A677AAB6811EDA5CA5B09C4F9AE02/tVGhYNO-3KVi6d395AkzcktpuQA.mft File: tVGhYNO-3KVi6d395AkzcktpuQA.mft (raw, json) Hash identifier: ot9jlJKz5SFuftVuhKXKIZvpr55FtHdE766ZmCfL6jw= Subject key identifier: D6:1C:64:D0:8E:45:4A:F0:6A:81:21:C6:83:64:21:FF:11:D0:BC:2B Authority key identifier: B5:51:A1:60:D3:BE:DC:A5:62:E9:DD:FD:E4:09:33:72:4B:69:B9:00 Certificate issuer: /CN=A91933FE/serialNumber=B551A160D3BEDCA562E9DDFDE40933724B69B900 Certificate serial: 01CF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tVGhYNO-3KVi6d395AkzcktpuQA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91933FE/D31A677AAB6811EDA5CA5B09C4F9AE02/tVGhYNO-3KVi6d395AkzcktpuQA.mft Manifest number: 01C7 Signing time: Sat 19 Jul 2025 03:05:51 +0000 Manifest this update: Sat 19 Jul 2025 03:05:50 +0000 Manifest next update: Sat 26 Jul 2025 03:05:50 +0000 Files and hashes: 1: tVGhYNO-3KVi6d395AkzcktpuQA.crl (hash: 3UR2K6Hr/L4Za5ucUc3i6JqzQSQdWya2Oal3edMBD7Y=) 2: A6CD6A3EAB6B11EDA5C53A0AC4F9AE02.roa (hash: ojParvJ0FGJUPZ25zNdYUl2YaHcSyrc33U2l9MfbPKU=) 3: A63F9024AB6B11EDA5C53A0AC4F9AE02.roa (hash: 67QdihmJWNEdpWctmJLskykPLPRUaTyZfL1MUDXMOe4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91933FE/D31A677AAB6811EDA5CA5B09C4F9AE02/tVGhYNO-3KVi6d395AkzcktpuQA.crl rsync://rpki.apnic.net/member_repository/A91933FE/D31A677AAB6811EDA5CA5B09C4F9AE02/tVGhYNO-3KVi6d395AkzcktpuQA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tVGhYNO-3KVi6d395AkzcktpuQA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 03:05:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 463 (0x1cf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91933FE, serialNumber=B551A160D3BEDCA562E9DDFDE40933724B69B900 Validity Not Before: Jul 19 03:05:50 2025 GMT Not After : Jul 26 03:05:50 2025 GMT Subject: CN=687b0b8f-490d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:8a:8a:5d:3b:f1:b1:2a:79:5c:0d:2e:bb:89: d2:83:26:79:d8:eb:ee:48:44:b1:64:f0:2a:2e:6e: be:16:d3:a5:c7:44:f6:83:e3:a8:58:f7:e3:f3:fd: 7c:6e:79:ea:33:61:ed:66:57:76:f3:7e:95:ea:d7: 92:75:71:7d:c8:01:fe:98:ad:6f:ce:cf:2f:10:f9: 73:3b:74:43:d2:19:6c:d1:1c:8b:49:98:12:c7:0e: b8:c7:85:70:44:9d:38:2b:da:2c:8a:86:f8:85:c3: e3:e9:4e:f0:8f:49:10:de:a8:f3:c1:b5:3d:62:17: 8d:0c:0a:92:56:3d:93:9b:a4:a2:96:ec:14:35:0f: 95:f7:ba:9f:46:6b:ca:76:da:d5:5a:15:ba:30:46: 73:99:9f:0c:a6:61:f1:9a:73:a0:bd:6c:8a:28:f6: 4f:56:6c:5d:9a:44:d2:97:f2:82:92:4a:2c:17:21: 28:45:17:06:4b:81:01:29:3f:c8:a5:f4:9c:ec:fc: e5:c3:f5:10:44:78:1d:ac:56:44:dc:f5:c5:25:8c: 7c:49:b3:3f:f5:5e:e8:13:af:15:c8:87:de:df:a1: 71:a5:ee:15:75:23:ce:be:f7:0b:13:b1:cc:23:b8: 58:c8:8f:44:86:3d:35:29:b7:e3:c3:84:bd:4b:6a: c2:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:1C:64:D0:8E:45:4A:F0:6A:81:21:C6:83:64:21:FF:11:D0:BC:2B X509v3 Authority Key Identifier: keyid:B5:51:A1:60:D3:BE:DC:A5:62:E9:DD:FD:E4:09:33:72:4B:69:B9:00 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91933FE/D31A677AAB6811EDA5CA5B09C4F9AE02/tVGhYNO-3KVi6d395AkzcktpuQA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tVGhYNO-3KVi6d395AkzcktpuQA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91933FE/D31A677AAB6811EDA5CA5B09C4F9AE02/tVGhYNO-3KVi6d395AkzcktpuQA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 86:20:a9:0d:f5:0d:2c:16:87:2e:ef:1a:88:66:0c:ee:23:c4: 87:67:12:f3:4d:b1:64:ce:e5:2f:94:f3:8f:99:e7:03:5d:80: 6e:1c:a8:c2:6f:9e:37:bd:ed:f3:d7:7b:9f:08:53:43:d9:40: 2f:ab:bb:c4:7e:8f:b3:d2:9d:a6:fa:6d:7c:94:ec:2c:b0:27: da:6f:94:28:df:19:f0:3e:f8:9b:ca:b9:ae:d5:5a:5f:8f:bc: cc:7c:71:6e:2d:62:36:5b:03:69:70:e4:db:62:4d:ed:db:31: ca:d5:cd:58:4e:dd:50:b2:05:00:87:29:00:a9:c7:b2:98:88: df:66:d0:d9:7c:7b:0d:39:37:ba:20:30:20:41:1a:18:96:b4: ea:28:59:02:9c:a7:ff:95:67:f0:b6:4b:01:bf:2f:a6:69:50: 09:5e:42:8f:9f:7c:14:22:b6:c5:51:e2:82:46:e8:31:f9:84: 2e:c5:41:64:d0:58:ec:08:14:9f:9d:03:82:d9:e8:40:45:b1: 6a:d5:0b:fb:4f:ad:f1:72:08:6e:80:e0:49:d7:e9:bf:35:24: 7c:f2:0c:b8:ad:aa:66:4a:a2:40:a1:d8:57:e1:6e:af:35:af: 76:f8:3a:f9:3e:06:42:97:ef:c1:2d:6f:83:5f:ce:0f:38:60: 85:37:3f:d2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAc8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTMzRkUxMTAvBgNVBAUTKEI1NTFBMTYwRDNCRURDQTU2MkU5RERGREU0MDkzMzcy NEI2OUI5MDAwHhcNMjUwNzE5MDMwNTUwWhcNMjUwNzI2MDMwNTUwWjAYMRYwFAYD VQQDEw02ODdiMGI4Zi00OTBkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtYqKXTvxsSp5XA0uu4nSgyZ52OvuSESxZPAqLm6+FtOlx0T2g+OoWPfj8/18 bnnqM2HtZld2836V6teSdXF9yAH+mK1vzs8vEPlzO3RD0hls0RyLSZgSxw64x4Vw RJ04K9osiob4hcPj6U7wj0kQ3qjzwbU9YheNDAqSVj2Tm6SiluwUNQ+V97qfRmvK dtrVWhW6MEZzmZ8MpmHxmnOgvWyKKPZPVmxdmkTSl/KCkkosFyEoRRcGS4EBKT/I pfSc7Pzlw/UQRHgdrFZE3PXFJYx8SbM/9V7oE68VyIfe36Fxpe4VdSPOvvcLE7HM I7hYyI9Ehj01Kbfjw4S9S2rCBwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNYcZNCO RUrwaoEhxoNkIf8R0LwrMB8GA1UdIwQYMBaAFLVRoWDTvtylYund/eQJM3JLabkA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MzNGRS9EMzFBNjc3QUFC NjgxMUVEQTVDQTVCMDlDNEY5QUUwMi90VkdoWU5PLTNLVmk2ZDM5NUFremNrdHB1 UUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RWR2hZTk8tM0tWaTZkMzk1QWt6Y2t0cHVRQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 MzNGRS9EMzFBNjc3QUFCNjgxMUVEQTVDQTVCMDlDNEY5QUUwMi90VkdoWU5PLTNL Vmk2ZDM5NUFremNrdHB1UUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCGIKkN9Q0sFocu7xqIZgzuI8SHZxLzTbFkzuUvlPOPmecDXYBuHKjC b543ve3z13ufCFND2UAvq7vEfo+z0p2m+m18lOwssCfab5Qo3xnwPvibyrmu1Vpf j7zMfHFuLWI2WwNpcOTbYk3t2zHK1c1YTt1QsgUAhykAqceymIjfZtDZfHsNOTe6 IDAgQRoYlrTqKFkCnKf/lWfwtksBvy+maVAJXkKPn3wUIrbFUeKCRugx+YQuxUFk 0FjsCBSfnQOC2ehARbFq1Qv7T63xcghugOBJ1+m/NSR88gy4rapmSqJAodhX4W6v Na92+Dr5PgZCl+/BLW+DX84POGCFNz/S -----END CERTIFICATE-----Generated at Sun Jul 20 13:59:19 2025 by rpki-client