$ rpki-client -vvf rpki.apnic.net/member_repository/A91149EA/F42D4CA273E411EA9AE68072C4F9AE02/TVJUdG_vcu-3rMDFNK1gj1C8OAQ.mft File: TVJUdG_vcu-3rMDFNK1gj1C8OAQ.mft (raw, json) Hash identifier: 9kr1LvWm6vzz5LhZAgA120QIj3ATUuwUNEv8IxfbUzs= Subject key identifier: DA:92:12:4C:43:4C:2D:78:34:5D:40:94:CB:FB:08:C2:54:60:AF:9E Authority key identifier: 4D:52:54:74:6F:EF:72:EF:B7:AC:C0:C5:34:AD:60:8F:50:BC:38:04 Certificate issuer: /CN=A91149EA/serialNumber=4D5254746FEF72EFB7ACC0C534AD608F50BC3804 Certificate serial: 0A20 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TVJUdG_vcu-3rMDFNK1gj1C8OAQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91149EA/F42D4CA273E411EA9AE68072C4F9AE02/TVJUdG_vcu-3rMDFNK1gj1C8OAQ.mft Manifest number: 0A10 Signing time: Fri 30 May 2025 20:01:17 +0000 Manifest this update: Fri 30 May 2025 20:01:16 +0000 Manifest next update: Fri 06 Jun 2025 20:01:16 +0000 Files and hashes: 1: TVJUdG_vcu-3rMDFNK1gj1C8OAQ.crl (hash: ZegQlccKFLiIhc7Gb/ZIo8hmhCS7fvg6hnsrZ2C26WI=) 2: F94FA23C92F211EC8D04F649C4F9AE02.roa (hash: cCp7Bzw8poNKj0gr0L5A5NrVzahfSp+S0YQtn1jReFE=) 3: F61F817C9B3B11EBA5C76B80C4F9AE02.roa (hash: MwqZowzxRiYq0MUhfIdoeD3JCO2yoaZpzTRIMaHJxqs=) 4: 6897409A73E811EA93705B7CC4F9AE02.roa (hash: 8MO+sNBEiwlcI2/otkXShyj1mgir6Tk3C5bJL2OwyHE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91149EA/F42D4CA273E411EA9AE68072C4F9AE02/TVJUdG_vcu-3rMDFNK1gj1C8OAQ.crl rsync://rpki.apnic.net/member_repository/A91149EA/F42D4CA273E411EA9AE68072C4F9AE02/TVJUdG_vcu-3rMDFNK1gj1C8OAQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TVJUdG_vcu-3rMDFNK1gj1C8OAQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 20:01:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2592 (0xa20) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91149EA, serialNumber=4D5254746FEF72EFB7ACC0C534AD608F50BC3804 Validity Not Before: May 30 20:01:16 2025 GMT Not After : Jun 6 20:01:16 2025 GMT Subject: CN=683a0e8c-a1fc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:08:89:da:09:aa:d9:96:3e:34:ed:fd:3e:01: 4b:c2:6d:65:86:6a:db:74:d3:db:1f:c6:9d:69:6e: 82:92:f2:62:d4:02:22:3f:52:ac:e9:fb:3f:80:46: 27:63:5c:5a:59:1f:65:21:4f:fe:d2:84:a7:95:a9: 20:43:c7:02:91:e3:51:b2:d9:55:db:9d:8c:55:38: 6d:95:30:8d:4f:d6:f5:a7:34:02:b9:0d:7a:d5:6d: cb:4f:fb:28:0c:0d:a0:0f:30:04:b3:87:bc:a7:f3: 60:01:a9:af:b8:66:cd:7c:ed:fc:fd:c7:cf:b4:12: 14:20:10:eb:8a:c2:7d:bf:2b:f2:fc:24:50:98:dc: d6:08:7a:c8:a6:04:df:7d:26:b0:91:a6:97:35:b1: a3:97:c6:f3:77:24:5d:1f:4f:3c:cf:d0:ef:75:db: 6b:1d:dd:56:ae:0c:64:13:09:3a:8e:c5:63:56:e4: a8:0e:3b:4f:42:c7:53:3a:35:07:c8:7b:38:1c:96: be:c0:71:46:92:21:e9:44:13:f4:7c:9f:ba:a0:16: 01:b2:59:aa:03:fc:cd:b9:87:a3:c3:56:48:46:cb: dc:9b:f5:e6:8c:36:89:0e:06:c9:dc:35:78:4d:4e: c2:c7:61:eb:c7:d8:44:27:eb:a5:24:82:1c:1a:1d: 1a:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:92:12:4C:43:4C:2D:78:34:5D:40:94:CB:FB:08:C2:54:60:AF:9E X509v3 Authority Key Identifier: keyid:4D:52:54:74:6F:EF:72:EF:B7:AC:C0:C5:34:AD:60:8F:50:BC:38:04 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91149EA/F42D4CA273E411EA9AE68072C4F9AE02/TVJUdG_vcu-3rMDFNK1gj1C8OAQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TVJUdG_vcu-3rMDFNK1gj1C8OAQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91149EA/F42D4CA273E411EA9AE68072C4F9AE02/TVJUdG_vcu-3rMDFNK1gj1C8OAQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 07:d0:d8:1c:11:68:7e:e4:af:af:d6:a5:2e:5a:13:a8:04:19: 8f:18:f6:45:cc:53:bc:f3:94:c8:dd:02:1a:d2:fe:8e:12:50: 45:59:e5:25:35:1b:c7:24:03:0c:7e:5b:ed:c5:7b:bc:25:33: b1:b6:f0:94:fc:e5:25:f0:0d:db:00:ae:ce:f0:f0:77:b0:a1: 66:d1:d0:72:93:b3:01:dd:28:e9:09:5d:ca:8d:07:b5:77:8d: 05:c9:58:a4:37:34:3e:bb:d7:80:3f:63:13:f5:b5:20:9c:32: f3:28:45:6d:0a:e3:c5:3d:05:0c:ce:90:a6:45:dd:4a:9b:9e: 90:c4:e7:c5:b7:02:fb:1d:0b:bd:4b:07:87:0e:99:2c:a8:51: 5b:11:61:d9:fd:fb:e5:ee:7e:20:ed:0d:96:29:87:41:f9:b3: 80:2c:66:26:bd:ea:e2:86:7d:bf:d8:e5:d5:fc:ed:72:89:c3: bc:d3:4b:ae:2a:1d:24:f8:f2:1b:b8:f8:34:5e:37:4a:ef:00: 6e:b0:9a:25:e8:c5:64:3b:5f:2c:3f:ca:84:20:8c:6e:7e:7e: 77:4f:93:de:6d:01:8c:24:a0:5a:8a:d8:60:6c:4c:5b:55:b3: f6:29:95:c3:fe:e2:92:53:0b:0f:86:bd:ec:48:15:43:dd:e7: f9:c4:72:48 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCiAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTQ5RUExMTAvBgNVBAUTKDRENTI1NDc0NkZFRjcyRUZCN0FDQzBDNTM0QUQ2MDhG NTBCQzM4MDQwHhcNMjUwNTMwMjAwMTE2WhcNMjUwNjA2MjAwMTE2WjAYMRYwFAYD VQQDEw02ODNhMGU4Yy1hMWZjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5giJ2gmq2ZY+NO39PgFLwm1lhmrbdNPbH8adaW6CkvJi1AIiP1Ks6fs/gEYn Y1xaWR9lIU/+0oSnlakgQ8cCkeNRstlV252MVThtlTCNT9b1pzQCuQ161W3LT/so DA2gDzAEs4e8p/NgAamvuGbNfO38/cfPtBIUIBDrisJ9vyvy/CRQmNzWCHrIpgTf fSawkaaXNbGjl8bzdyRdH088z9DvddtrHd1WrgxkEwk6jsVjVuSoDjtPQsdTOjUH yHs4HJa+wHFGkiHpRBP0fJ+6oBYBslmqA/zNuYejw1ZIRsvcm/XmjDaJDgbJ3DV4 TU7Cx2Hrx9hEJ+ulJIIcGh0a/QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNqSEkxD TC14NF1AlMv7CMJUYK+eMB8GA1UdIwQYMBaAFE1SVHRv73Lvt6zAxTStYI9QvDgE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNDlFQS9GNDJENENBMjcz RTQxMUVBOUFFNjgwNzJDNEY5QUUwMi9UVkpVZEdfdmN1LTNyTURGTksxZ2oxQzhP QVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1RWSlVkR192Y3UtM3JNREZOSzFnajFDOE9BUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx NDlFQS9GNDJENENBMjczRTQxMUVBOUFFNjgwNzJDNEY5QUUwMi9UVkpVZEdfdmN1 LTNyTURGTksxZ2oxQzhPQVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAH0NgcEWh+5K+v1qUuWhOoBBmPGPZFzFO885TI3QIa0v6OElBFWeUl NRvHJAMMflvtxXu8JTOxtvCU/OUl8A3bAK7O8PB3sKFm0dByk7MB3SjpCV3KjQe1 d40FyVikNzQ+u9eAP2MT9bUgnDLzKEVtCuPFPQUMzpCmRd1Km56QxOfFtwL7HQu9 SweHDpksqFFbEWHZ/fvl7n4g7Q2WKYdB+bOALGYmverihn2/2OXV/O1yicO800uu Kh0k+PIbuPg0XjdK7wBusJol6MVkO18sP8qEIIxufn53T5PebQGMJKBaithgbExb VbP2KZXD/uKSUwsPhr3sSBVD3ef5xHJI -----END CERTIFICATE-----Generated at Sat May 31 17:45:01 2025 by rpki-client