$ rpki-client -vvf rpki.apnic.net/member_repository/A91B8070/AE364696138411F0BC5F4547C4F9AE02/TvuTtJvxulYAjfxgYItSFq7JmsY.mft File: TvuTtJvxulYAjfxgYItSFq7JmsY.mft (raw, json) Hash identifier: GVt+94u0tVZzhCyBx9fK0VuF17D4iis7eTGPg9rVASE= Subject key identifier: 6D:E8:2B:87:0C:77:0A:C6:6D:F9:A8:2F:7A:FC:F6:DB:D1:BB:15:1B Authority key identifier: 4E:FB:93:B4:9B:F1:BA:56:00:8D:FC:60:60:8B:52:16:AE:C9:9A:C6 Certificate issuer: /CN=A91B8070/serialNumber=4EFB93B49BF1BA56008DFC60608B5216AEC99AC6 Certificate serial: 59 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TvuTtJvxulYAjfxgYItSFq7JmsY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B8070/AE364696138411F0BC5F4547C4F9AE02/TvuTtJvxulYAjfxgYItSFq7JmsY.mft Manifest number: 55 Signing time: Tue 09 Sep 2025 07:25:47 +0000 Manifest this update: Tue 09 Sep 2025 07:25:47 +0000 Manifest next update: Tue 16 Sep 2025 07:25:47 +0000 Files and hashes: 1: TvuTtJvxulYAjfxgYItSFq7JmsY.crl (hash: VIcFDdjLFTZjXeQxJCMDR9dBZiuEQo7YSF92tLx7u7c=) 2: AB942EE0607C11F0A8F5A261C4F9AE02.roa (hash: Ib7XrV2UdhfMc2uSkqN8sJc2pYT7HHMtYcCkEQkD9OY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B8070/AE364696138411F0BC5F4547C4F9AE02/TvuTtJvxulYAjfxgYItSFq7JmsY.crl rsync://rpki.apnic.net/member_repository/A91B8070/AE364696138411F0BC5F4547C4F9AE02/TvuTtJvxulYAjfxgYItSFq7JmsY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TvuTtJvxulYAjfxgYItSFq7JmsY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 16 Sep 2025 07:25:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 89 (0x59) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B8070, serialNumber=4EFB93B49BF1BA56008DFC60608B5216AEC99AC6 Validity Not Before: Sep 9 07:25:47 2025 GMT Not After : Sep 16 07:25:47 2025 GMT Subject: CN=68bfd67b-1415 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:6c:6a:7f:37:af:ad:17:c3:c3:8b:2d:b4:8d: cc:5d:82:42:d4:47:bc:ce:e6:e2:3c:da:4c:5b:64: 53:0a:1d:47:59:54:fb:f9:28:4a:f0:64:70:14:b0: c8:40:ce:50:2b:73:7a:b5:3e:05:6c:d9:d5:da:4a: 09:fd:ea:7e:b8:80:66:f0:27:78:e7:16:b1:6e:fa: b9:47:e3:b4:55:85:34:35:3c:61:7e:6a:ef:87:38: ef:ea:dc:8b:75:6f:02:0e:15:4c:cb:80:58:d7:e0: 64:48:e8:5e:3b:ef:80:b4:b4:18:71:12:03:2f:ee: 9b:6e:29:a1:c3:f2:c2:fb:b4:2d:d0:bb:84:04:77: 61:6b:a6:b2:e5:40:60:7c:49:02:cd:ea:e1:a1:41: bd:1f:3b:75:3c:03:73:ec:33:83:c6:f8:cf:81:b7: 2b:60:ec:e5:f9:92:49:2c:2e:72:4b:14:9e:b9:32: f6:d1:88:b3:99:00:cd:4a:11:0e:14:60:22:23:97: 6d:3c:17:10:4d:eb:12:29:44:60:72:f5:0d:41:2e: 99:06:96:dd:dc:bb:1a:cf:89:66:1e:37:47:05:d3: 63:94:6c:2b:cc:79:72:ce:9f:78:25:24:1c:c4:f3: 1d:a9:b5:5a:c4:08:ac:0e:6b:cc:48:4b:6c:1e:82: 3f:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:E8:2B:87:0C:77:0A:C6:6D:F9:A8:2F:7A:FC:F6:DB:D1:BB:15:1B X509v3 Authority Key Identifier: keyid:4E:FB:93:B4:9B:F1:BA:56:00:8D:FC:60:60:8B:52:16:AE:C9:9A:C6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B8070/AE364696138411F0BC5F4547C4F9AE02/TvuTtJvxulYAjfxgYItSFq7JmsY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TvuTtJvxulYAjfxgYItSFq7JmsY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B8070/AE364696138411F0BC5F4547C4F9AE02/TvuTtJvxulYAjfxgYItSFq7JmsY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 07:1d:c3:17:83:28:bc:a5:a2:ca:f5:c8:87:d9:87:2a:c6:ae: 31:33:76:a1:21:61:81:91:54:53:0a:97:7a:3d:c5:a9:8f:9f: a5:54:b5:a0:65:ac:3a:c2:b1:0b:42:99:fe:0c:5c:e1:4a:2c: 9f:fc:ba:48:1b:29:ab:25:af:d0:b9:7e:81:be:02:68:1e:ad: 79:12:10:42:83:0f:72:00:70:95:35:ab:73:94:ca:6f:0d:d7: d8:c6:e5:96:e8:f0:3b:a1:36:d5:58:f3:3e:94:f1:0b:8a:b9: 35:8e:bd:e5:9d:63:b6:7d:4d:79:fe:4e:7f:15:ea:c1:3c:bf: af:36:cc:5c:a3:99:58:96:e2:70:e4:3d:d0:2b:5b:6e:51:fc: ce:a8:9a:ce:05:57:1f:33:34:85:37:c8:6c:f1:50:2f:e0:c0: 88:fc:ae:2d:54:3b:e3:77:ee:5b:04:33:e2:6c:b3:6f:6b:78: 3f:ff:71:c2:81:55:3a:45:1e:7f:1f:a0:70:f1:ad:41:33:ea: 9d:dc:c2:78:29:58:48:5f:7e:b8:7e:6f:dc:c2:c9:cd:66:c6: 74:2d:13:3e:07:92:19:6e:71:b9:05:a1:2b:3c:7f:76:b6:ac: 79:6a:6a:ba:76:13:33:f2:8d:b4:6f:56:aa:d1:ec:44:43:c3: 08:e7:7a:3c -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBWTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC ODA3MDExMC8GA1UEBRMoNEVGQjkzQjQ5QkYxQkE1NjAwOERGQzYwNjA4QjUyMTZB RUM5OUFDNjAeFw0yNTA5MDkwNzI1NDdaFw0yNTA5MTYwNzI1NDdaMBgxFjAUBgNV BAMTDTY4YmZkNjdiLTE0MTUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDibGp/N6+tF8PDiy20jcxdgkLUR7zO5uI82kxbZFMKHUdZVPv5KErwZHAUsMhA zlArc3q1PgVs2dXaSgn96n64gGbwJ3jnFrFu+rlH47RVhTQ1PGF+au+HOO/q3It1 bwIOFUzLgFjX4GRI6F4774C0tBhxEgMv7ptuKaHD8sL7tC3Qu4QEd2FrprLlQGB8 SQLN6uGhQb0fO3U8A3PsM4PG+M+Btytg7OX5kkksLnJLFJ65MvbRiLOZAM1KEQ4U YCIjl208FxBN6xIpRGBy9Q1BLpkGlt3cuxrPiWYeN0cF02OUbCvMeXLOn3glJBzE 8x2ptVrECKwOa8xIS2wegj/xAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUbegrhwx3 CsZt+agvevz229G7FRswHwYDVR0jBBgwFoAUTvuTtJvxulYAjfxgYItSFq7JmsYw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUI4MDcwL0FFMzY0Njk2MTM4 NDExRjBCQzVGNDU0N0M0RjlBRTAyL1R2dVR0SnZ4dWxZQWpmeGdZSXRTRnE3Sm1z WS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvVHZ1VHRKdnh1bFlBamZ4Z1lJdFNGcTdKbXNZLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUI4 MDcwL0FFMzY0Njk2MTM4NDExRjBCQzVGNDU0N0M0RjlBRTAyL1R2dVR0SnZ4dWxZ QWpmeGdZSXRTRnE3Sm1zWS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAAcdwxeDKLylosr1yIfZhyrGrjEzdqEhYYGRVFMKl3o9xamPn6VUtaBl rDrCsQtCmf4MXOFKLJ/8ukgbKaslr9C5foG+AmgerXkSEEKDD3IAcJU1q3OUym8N 19jG5Zbo8DuhNtVY8z6U8QuKuTWOveWdY7Z9TXn+Tn8V6sE8v682zFyjmViW4nDk PdArW25R/M6oms4FVx8zNIU3yGzxUC/gwIj8ri1UO+N37lsEM+Jss29reD//ccKB VTpFHn8foHDxrUEz6p3cwngpWEhffrh+b9zCyc1mxnQtEz4HkhlucbkFoSs8f3a2 rHlqarp2EzPyjbRvVqrR7ERDwwjnejw= -----END CERTIFICATE-----Generated at Tue Sep 9 13:11:14 2025 by rpki-client