$ rpki-client -vvf rpki.apnic.net/member_repository/A91933FE/D31A677AAB6811EDA5CA5B09C4F9AE02/tVGhYNO-3KVi6d395AkzcktpuQA.mft File: tVGhYNO-3KVi6d395AkzcktpuQA.mft (raw, json) Hash identifier: n+DWqIg/oRxUtrBxCN4mITvwPO8N+C5okNXaZQXrT8c= Subject key identifier: C4:EC:B3:BF:DC:2F:C0:46:34:D6:8E:44:4A:7B:73:1F:1D:91:BC:4D Authority key identifier: B5:51:A1:60:D3:BE:DC:A5:62:E9:DD:FD:E4:09:33:72:4B:69:B9:00 Certificate issuer: /CN=A91933FE/serialNumber=B551A160D3BEDCA562E9DDFDE40933724B69B900 Certificate serial: 01EC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tVGhYNO-3KVi6d395AkzcktpuQA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91933FE/D31A677AAB6811EDA5CA5B09C4F9AE02/tVGhYNO-3KVi6d395AkzcktpuQA.mft Manifest number: 01E2 Signing time: Fri 05 Sep 2025 02:57:59 +0000 Manifest this update: Fri 05 Sep 2025 02:57:58 +0000 Manifest next update: Fri 12 Sep 2025 02:57:58 +0000 Files and hashes: 1: tVGhYNO-3KVi6d395AkzcktpuQA.crl (hash: nhY26cTzSChhMaPnGvusfFX4beaVJD/HUtOzCfxfGpc=) 2: A6CD6A3EAB6B11EDA5C53A0AC4F9AE02.roa (hash: Jqnub0wXVy5YAPXo3TdIRx4tcYu2/ytetEQKO0MEOFA=) 3: A63F9024AB6B11EDA5C53A0AC4F9AE02.roa (hash: 86MzttNM09a7Pbj7fiElhdTAIgqK4eCRkFOM21wDde0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91933FE/D31A677AAB6811EDA5CA5B09C4F9AE02/tVGhYNO-3KVi6d395AkzcktpuQA.crl rsync://rpki.apnic.net/member_repository/A91933FE/D31A677AAB6811EDA5CA5B09C4F9AE02/tVGhYNO-3KVi6d395AkzcktpuQA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tVGhYNO-3KVi6d395AkzcktpuQA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Sep 2025 02:57:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 492 (0x1ec) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91933FE, serialNumber=B551A160D3BEDCA562E9DDFDE40933724B69B900 Validity Not Before: Sep 5 02:57:58 2025 GMT Not After : Sep 12 02:57:58 2025 GMT Subject: CN=68ba51b7-3bf2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:44:4b:26:7d:14:c3:2c:4c:83:bb:4c:53:4d: 35:98:2b:6e:fc:3a:6a:76:6f:33:a6:87:00:d7:10: a9:d8:57:74:ef:ab:7f:f3:82:3b:86:cc:0d:22:41: d9:66:ce:b8:9d:d6:e2:e4:9b:31:7b:4c:74:bb:ea: f0:83:da:b9:1f:e6:99:12:59:15:c4:88:c4:46:d5: 5a:f3:58:99:34:b4:50:c3:bc:2f:03:d2:06:a7:03: 90:02:e5:1a:b6:90:2a:7c:90:d2:85:c7:44:c0:1c: 91:8a:75:b6:5b:40:f4:97:49:89:ea:fe:58:77:bf: a7:7c:5e:59:37:c4:d2:76:b9:60:62:33:8c:b8:5d: 94:65:e4:17:0c:1d:d0:8d:6c:31:83:3e:3c:71:99: 9b:b6:11:ce:61:16:7f:98:31:f4:ae:39:c3:3d:a1: 33:47:3a:a7:d5:57:7e:99:59:ad:9b:6f:af:28:1c: 1a:b4:62:42:6b:9c:d5:b2:17:3a:0d:64:e7:6b:25: d2:da:c4:e5:a1:48:0b:67:db:32:6f:0e:8c:95:67: a8:d2:8b:77:c9:40:90:00:03:76:b0:5f:51:f0:2e: 9b:20:ed:bd:a1:fc:66:7b:f1:59:69:f7:27:82:20: 11:cf:82:a3:b2:ef:32:a2:ea:c9:5f:e4:02:a6:6a: c6:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:EC:B3:BF:DC:2F:C0:46:34:D6:8E:44:4A:7B:73:1F:1D:91:BC:4D X509v3 Authority Key Identifier: keyid:B5:51:A1:60:D3:BE:DC:A5:62:E9:DD:FD:E4:09:33:72:4B:69:B9:00 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91933FE/D31A677AAB6811EDA5CA5B09C4F9AE02/tVGhYNO-3KVi6d395AkzcktpuQA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tVGhYNO-3KVi6d395AkzcktpuQA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91933FE/D31A677AAB6811EDA5CA5B09C4F9AE02/tVGhYNO-3KVi6d395AkzcktpuQA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0c:b0:32:29:de:bb:1f:91:d5:1a:fd:22:89:a4:df:db:4f:7d: 91:53:a8:27:ab:3d:ef:cf:b3:06:c3:37:56:a4:4b:51:38:a1: ab:c2:f0:a4:6b:2a:ff:63:6b:bf:9f:7e:d8:8d:d7:0c:8e:07: 99:c3:16:4b:80:6a:d9:de:ce:c9:e5:ef:1e:3e:e1:dc:6a:72: 0e:4e:90:84:ef:d9:cb:1f:af:35:eb:1d:98:59:7a:16:07:2d: d0:c8:87:aa:11:69:d6:40:0a:a4:a6:50:0e:70:a4:86:67:90: f7:d7:b2:39:05:d6:fd:75:76:a2:66:e1:7b:83:e7:61:f4:e7: 62:53:50:8c:0b:81:79:e2:63:68:98:68:2a:a8:bd:0a:71:71: 3d:81:a7:72:06:f7:48:7d:38:b6:45:15:ee:2d:ef:3a:04:1a: c8:ca:10:a4:51:a3:1c:18:58:4a:70:20:cd:e8:38:83:7c:e1: d7:02:f8:3b:0b:7b:9b:0d:3c:40:03:34:0c:04:80:16:2a:1a: 61:b9:17:7f:75:3a:7a:1d:d8:f4:10:89:4d:52:63:fe:b5:eb: a8:c0:e1:3e:82:26:e4:ce:03:47:97:54:03:e5:e5:5c:13:83: b8:20:e9:dd:52:a6:e3:54:00:a3:78:4d:1e:0e:f4:1e:63:85: b6:4c:29:a7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAewwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTMzRkUxMTAvBgNVBAUTKEI1NTFBMTYwRDNCRURDQTU2MkU5RERGREU0MDkzMzcy NEI2OUI5MDAwHhcNMjUwOTA1MDI1NzU4WhcNMjUwOTEyMDI1NzU4WjAYMRYwFAYD VQQDEw02OGJhNTFiNy0zYmYyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2ERLJn0UwyxMg7tMU001mCtu/Dpqdm8zpocA1xCp2Fd076t/84I7hswNIkHZ Zs64ndbi5Jsxe0x0u+rwg9q5H+aZElkVxIjERtVa81iZNLRQw7wvA9IGpwOQAuUa tpAqfJDShcdEwByRinW2W0D0l0mJ6v5Yd7+nfF5ZN8TSdrlgYjOMuF2UZeQXDB3Q jWwxgz48cZmbthHOYRZ/mDH0rjnDPaEzRzqn1Vd+mVmtm2+vKBwatGJCa5zVshc6 DWTnayXS2sTloUgLZ9sybw6MlWeo0ot3yUCQAAN2sF9R8C6bIO29ofxme/FZafcn giARz4Kjsu8yourJX+QCpmrGrQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMTss7/c L8BGNNaOREp7cx8dkbxNMB8GA1UdIwQYMBaAFLVRoWDTvtylYund/eQJM3JLabkA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MzNGRS9EMzFBNjc3QUFC NjgxMUVEQTVDQTVCMDlDNEY5QUUwMi90VkdoWU5PLTNLVmk2ZDM5NUFremNrdHB1 UUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RWR2hZTk8tM0tWaTZkMzk1QWt6Y2t0cHVRQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 MzNGRS9EMzFBNjc3QUFCNjgxMUVEQTVDQTVCMDlDNEY5QUUwMi90VkdoWU5PLTNL Vmk2ZDM5NUFremNrdHB1UUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAMsDIp3rsfkdUa/SKJpN/bT32RU6gnqz3vz7MGwzdWpEtROKGrwvCk ayr/Y2u/n37YjdcMjgeZwxZLgGrZ3s7J5e8ePuHcanIOTpCE79nLH6816x2YWXoW By3QyIeqEWnWQAqkplAOcKSGZ5D317I5Bdb9dXaiZuF7g+dh9OdiU1CMC4F54mNo mGgqqL0KcXE9gadyBvdIfTi2RRXuLe86BBrIyhCkUaMcGFhKcCDN6DiDfOHXAvg7 C3ubDTxAAzQMBIAWKhphuRd/dTp6Hdj0EIlNUmP+teuowOE+gibkzgNHl1QD5eVc E4O4IOndUqbjVACjeE0eDvQeY4W2TCmn -----END CERTIFICATE-----Generated at Sat Sep 6 16:04:12 2025 by rpki-client