$ rpki-client -vvf rpki.apnic.net/member_repository/A91149EA/F42D4CA273E411EA9AE68072C4F9AE02/TVJUdG_vcu-3rMDFNK1gj1C8OAQ.mft File: TVJUdG_vcu-3rMDFNK1gj1C8OAQ.mft (raw, json) Hash identifier: Pfq7XT+Y05PiDbWmm7VEDGKb4nc0+C4DHpPG3VTPrt0= Subject key identifier: 89:B9:70:BB:8B:1B:12:E1:47:12:D9:AB:FC:E1:74:10:D3:71:A0:93 Authority key identifier: 4D:52:54:74:6F:EF:72:EF:B7:AC:C0:C5:34:AD:60:8F:50:BC:38:04 Certificate issuer: /CN=A91149EA/serialNumber=4D5254746FEF72EFB7ACC0C534AD608F50BC3804 Certificate serial: 0A59 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TVJUdG_vcu-3rMDFNK1gj1C8OAQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91149EA/F42D4CA273E411EA9AE68072C4F9AE02/TVJUdG_vcu-3rMDFNK1gj1C8OAQ.mft Manifest number: 0A46 Signing time: Mon 08 Sep 2025 19:45:10 +0000 Manifest this update: Mon 08 Sep 2025 19:45:10 +0000 Manifest next update: Mon 15 Sep 2025 19:45:10 +0000 Files and hashes: 1: TVJUdG_vcu-3rMDFNK1gj1C8OAQ.crl (hash: hpJjFYVPgte4xDfn5Er0nRAq/FE1L7spZFDdon+/5TI=) 2: F94FA23C92F211EC8D04F649C4F9AE02.roa (hash: DROILj1BwyjxRZ/+rF2KA3dKpZPUrELvcEb3dM0Qp7U=) 3: F61F817C9B3B11EBA5C76B80C4F9AE02.roa (hash: zc4cHjOXUtulolit5W5JS6fmyA0a1J1yq4iXu5YdjfI=) 4: 6897409A73E811EA93705B7CC4F9AE02.roa (hash: gUFANucoHRujP4j5Puno+323S2mO6+VcvY0hxTT5wug=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91149EA/F42D4CA273E411EA9AE68072C4F9AE02/TVJUdG_vcu-3rMDFNK1gj1C8OAQ.crl rsync://rpki.apnic.net/member_repository/A91149EA/F42D4CA273E411EA9AE68072C4F9AE02/TVJUdG_vcu-3rMDFNK1gj1C8OAQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TVJUdG_vcu-3rMDFNK1gj1C8OAQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 15 Sep 2025 19:45:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2649 (0xa59) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91149EA, serialNumber=4D5254746FEF72EFB7ACC0C534AD608F50BC3804 Validity Not Before: Sep 8 19:45:10 2025 GMT Not After : Sep 15 19:45:10 2025 GMT Subject: CN=68bf3246-add3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:d0:e0:3d:6d:46:17:00:22:29:6c:da:12:63: b2:1a:6b:36:91:c3:44:20:f1:90:dd:c0:2d:27:16: 0f:84:eb:92:d8:0d:b1:63:56:3d:91:8c:e7:54:2b: de:2e:23:9a:93:c3:73:3e:55:6e:00:03:2f:71:81: 8a:54:b9:47:ed:5a:b8:73:67:54:3a:b4:c2:9e:33: b7:cd:25:cd:b5:d8:15:6d:04:f9:ec:8e:9b:8c:a9: b1:57:77:e6:5b:b5:83:64:59:3c:9e:26:73:4e:2a: 49:a3:5c:50:68:9c:ed:b1:d9:a7:50:c5:97:5c:5c: ec:9a:d7:91:0a:72:6f:7a:23:00:71:4f:09:17:f6: 7c:56:ea:5d:33:2c:f6:8d:ec:ca:cd:0a:c4:21:5c: a1:b9:7f:ff:bd:59:8a:2b:79:a9:1f:f1:f3:93:20: fc:42:a4:ab:1a:7b:0d:95:27:a5:cb:54:83:65:07: 3d:7a:22:c7:19:06:59:91:c1:7b:76:86:5a:67:9d: 12:d3:3a:1f:47:26:94:31:10:f7:77:c2:4e:2c:97: 53:fc:87:6b:d7:2e:0f:bc:ed:6a:e1:04:df:f7:85: e0:46:bb:e9:51:d2:43:98:61:50:4d:0b:6d:8b:49: 7a:89:6c:74:e6:d2:36:08:90:d9:cc:4d:86:e5:38: d7:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:B9:70:BB:8B:1B:12:E1:47:12:D9:AB:FC:E1:74:10:D3:71:A0:93 X509v3 Authority Key Identifier: keyid:4D:52:54:74:6F:EF:72:EF:B7:AC:C0:C5:34:AD:60:8F:50:BC:38:04 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91149EA/F42D4CA273E411EA9AE68072C4F9AE02/TVJUdG_vcu-3rMDFNK1gj1C8OAQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TVJUdG_vcu-3rMDFNK1gj1C8OAQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91149EA/F42D4CA273E411EA9AE68072C4F9AE02/TVJUdG_vcu-3rMDFNK1gj1C8OAQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 81:fa:4c:51:c4:41:0a:42:90:84:89:2a:5a:70:b1:e8:be:ef: c8:b6:a8:87:f2:4b:3e:4d:6a:94:28:3f:22:6f:57:ba:78:22: 53:05:13:41:32:d4:76:20:43:9d:fd:61:ed:1b:26:56:c1:01: 7c:26:4a:66:b5:f2:c1:cb:28:5f:67:b9:25:cf:e2:49:5f:36: 03:12:92:5f:17:9b:14:a8:aa:36:27:48:f3:ad:cd:b6:3e:6a: d5:67:6b:b3:44:62:e6:45:e8:64:1c:0e:64:dd:f0:b7:82:9f: 80:b0:9b:e1:47:1c:49:d0:3d:5f:c7:c7:d6:4e:c1:8d:44:9e: 4c:ed:3f:a4:5b:21:d0:c1:d0:eb:cf:2d:43:de:58:40:a0:b3: e2:b1:38:8d:06:c8:ba:0e:f4:24:76:f6:28:1f:f9:83:34:6c: 48:25:14:af:c6:da:1e:56:01:2e:32:ce:82:ed:41:05:fd:d5: 6e:71:08:4d:50:f1:79:34:20:24:14:13:fc:82:75:94:8f:25: af:49:7a:02:38:b5:8a:5b:a4:32:55:0e:a0:c8:7b:61:0c:54: 06:c3:d4:34:2e:33:80:50:af:5e:a9:71:73:e7:9a:46:6e:73: 14:11:56:26:d8:a5:27:ad:ca:d4:0e:0f:e8:9c:8a:4e:b7:14: b5:f7:5e:77 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICClkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTQ5RUExMTAvBgNVBAUTKDRENTI1NDc0NkZFRjcyRUZCN0FDQzBDNTM0QUQ2MDhG NTBCQzM4MDQwHhcNMjUwOTA4MTk0NTEwWhcNMjUwOTE1MTk0NTEwWjAYMRYwFAYD VQQDEw02OGJmMzI0Ni1hZGQzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1NDgPW1GFwAiKWzaEmOyGms2kcNEIPGQ3cAtJxYPhOuS2A2xY1Y9kYznVCve LiOak8NzPlVuAAMvcYGKVLlH7Vq4c2dUOrTCnjO3zSXNtdgVbQT57I6bjKmxV3fm W7WDZFk8niZzTipJo1xQaJztsdmnUMWXXFzsmteRCnJveiMAcU8JF/Z8VupdMyz2 jezKzQrEIVyhuX//vVmKK3mpH/HzkyD8QqSrGnsNlSely1SDZQc9eiLHGQZZkcF7 doZaZ50S0zofRyaUMRD3d8JOLJdT/Idr1y4PvO1q4QTf94XgRrvpUdJDmGFQTQtt i0l6iWx05tI2CJDZzE2G5TjXsQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIm5cLuL GxLhRxLZq/zhdBDTcaCTMB8GA1UdIwQYMBaAFE1SVHRv73Lvt6zAxTStYI9QvDgE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNDlFQS9GNDJENENBMjcz RTQxMUVBOUFFNjgwNzJDNEY5QUUwMi9UVkpVZEdfdmN1LTNyTURGTksxZ2oxQzhP QVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1RWSlVkR192Y3UtM3JNREZOSzFnajFDOE9BUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx NDlFQS9GNDJENENBMjczRTQxMUVBOUFFNjgwNzJDNEY5QUUwMi9UVkpVZEdfdmN1 LTNyTURGTksxZ2oxQzhPQVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCB+kxRxEEKQpCEiSpacLHovu/ItqiH8ks+TWqUKD8ib1e6eCJTBRNB MtR2IEOd/WHtGyZWwQF8JkpmtfLByyhfZ7klz+JJXzYDEpJfF5sUqKo2J0jzrc22 PmrVZ2uzRGLmRehkHA5k3fC3gp+AsJvhRxxJ0D1fx8fWTsGNRJ5M7T+kWyHQwdDr zy1D3lhAoLPisTiNBsi6DvQkdvYoH/mDNGxIJRSvxtoeVgEuMs6C7UEF/dVucQhN UPF5NCAkFBP8gnWUjyWvSXoCOLWKW6QyVQ6gyHthDFQGw9Q0LjOAUK9eqXFz55pG bnMUEVYm2KUnrcrUDg/onIpOtxS19153 -----END CERTIFICATE-----Generated at Tue Sep 9 08:18:27 2025 by rpki-client