$ rpki-client -vvf rpki.apnic.net/member_repository/A91B8070/AE364696138411F0BC5F4547C4F9AE02/TvuTtJvxulYAjfxgYItSFq7JmsY.mft File: TvuTtJvxulYAjfxgYItSFq7JmsY.mft (raw, json) Hash identifier: 0PlwyP2GhhVfIJ3qo6y7DVPg68yod0TSSyU+togPkBQ= Subject key identifier: 30:14:3E:26:36:56:53:EF:D8:F4:0B:C4:D3:F0:F1:AB:5C:AA:5D:33 Authority key identifier: 4E:FB:93:B4:9B:F1:BA:56:00:8D:FC:60:60:8B:52:16:AE:C9:9A:C6 Certificate issuer: /CN=A91B8070/serialNumber=4EFB93B49BF1BA56008DFC60608B5216AEC99AC6 Certificate serial: 70 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TvuTtJvxulYAjfxgYItSFq7JmsY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B8070/AE364696138411F0BC5F4547C4F9AE02/TvuTtJvxulYAjfxgYItSFq7JmsY.mft Manifest number: 6C Signing time: Mon 27 Oct 2025 09:23:43 +0000 Manifest this update: Mon 27 Oct 2025 09:23:42 +0000 Manifest next update: Mon 03 Nov 2025 09:23:42 +0000 Files and hashes: 1: TvuTtJvxulYAjfxgYItSFq7JmsY.crl (hash: W0sj/MkbA/l4raHzq7xLQsdEbCsQYnf4v+TjDISLFyQ=) 2: AB942EE0607C11F0A8F5A261C4F9AE02.roa (hash: Ib7XrV2UdhfMc2uSkqN8sJc2pYT7HHMtYcCkEQkD9OY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B8070/AE364696138411F0BC5F4547C4F9AE02/TvuTtJvxulYAjfxgYItSFq7JmsY.crl rsync://rpki.apnic.net/member_repository/A91B8070/AE364696138411F0BC5F4547C4F9AE02/TvuTtJvxulYAjfxgYItSFq7JmsY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TvuTtJvxulYAjfxgYItSFq7JmsY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Nov 2025 09:23:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 112 (0x70) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B8070, serialNumber=4EFB93B49BF1BA56008DFC60608B5216AEC99AC6 Validity Not Before: Oct 27 09:23:42 2025 GMT Not After : Nov 3 09:23:42 2025 GMT Subject: CN=68ff3a1f-df06 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:f1:57:d9:16:b4:dd:b2:37:fa:dd:c2:4f:f9: ee:79:3e:f2:ec:b9:40:d1:16:9d:53:4d:69:3c:c1: ab:60:90:a3:f7:6e:03:6c:65:78:6f:a6:6e:50:a2: 22:95:01:f4:9c:64:df:12:77:f7:0d:27:b9:7b:70: dc:a6:e2:fd:57:17:b8:ea:d7:cf:df:78:f1:67:b8: 21:9e:ef:76:51:20:00:40:b5:24:d5:af:ea:dd:e6: e8:20:56:02:2b:de:2e:66:6f:32:6e:ed:4f:eb:3f: 52:57:5d:68:64:8f:d3:d2:04:bb:f7:75:78:e5:26: b5:4b:d2:f2:2e:df:68:5d:b6:5d:27:0c:62:a1:7b: 7f:d7:0c:d9:03:c6:51:9b:98:46:b6:b8:9d:5a:1c: 7d:eb:58:04:b4:a8:b8:3e:54:02:16:ae:99:5b:8a: c3:93:29:43:13:97:f3:c5:18:9a:18:e0:fd:ab:25: cf:5c:bb:23:ed:85:37:de:8b:6c:e6:47:c8:f9:7b: 41:8e:5c:ad:82:f2:60:05:0f:c9:7a:e2:12:06:1f: cf:07:33:8c:12:01:7a:b3:cf:68:2c:76:c3:9f:ea: 50:3d:1e:e8:5c:52:79:52:d9:d1:52:3a:21:2d:c4: d5:92:79:66:ae:12:93:ef:86:c7:3e:2c:b2:37:ae: 96:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:14:3E:26:36:56:53:EF:D8:F4:0B:C4:D3:F0:F1:AB:5C:AA:5D:33 X509v3 Authority Key Identifier: keyid:4E:FB:93:B4:9B:F1:BA:56:00:8D:FC:60:60:8B:52:16:AE:C9:9A:C6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B8070/AE364696138411F0BC5F4547C4F9AE02/TvuTtJvxulYAjfxgYItSFq7JmsY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TvuTtJvxulYAjfxgYItSFq7JmsY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B8070/AE364696138411F0BC5F4547C4F9AE02/TvuTtJvxulYAjfxgYItSFq7JmsY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 46:69:ee:92:18:07:cc:05:af:93:8c:3b:05:fa:a9:61:01:08: 97:cf:bc:b5:f4:30:70:be:c4:5d:26:94:0a:f1:7f:73:f2:c5: 8a:72:71:a9:7e:7b:18:19:8a:b2:0d:4a:46:5f:57:9a:af:42: ae:9d:3a:e0:9c:73:88:73:7e:4e:53:f2:44:6e:fd:8c:cd:14: 41:29:dd:6d:41:2f:d7:5c:ec:8c:f9:4d:57:7b:54:ef:3b:aa: 28:62:10:3e:ed:d1:20:c6:e9:d6:2c:55:c3:d5:a9:24:6b:de: 63:08:68:36:c8:9d:b2:1e:8b:3e:9d:91:22:e7:64:31:2f:1b: 75:9c:d0:3b:44:84:3e:29:4a:5c:5c:84:28:18:76:67:97:90: 57:57:a4:f8:fd:65:da:79:8a:cf:e6:f5:c5:d4:7a:dc:2c:ff: 96:b7:47:cf:da:04:3c:d4:fe:d8:8b:78:b5:59:e3:56:19:52: 5a:1d:7d:53:f3:15:b1:ae:4c:83:4c:9e:b7:aa:1f:2e:35:3a: 04:e0:1b:99:71:c6:f1:4b:7f:e5:66:99:2c:74:33:5e:f6:29: 45:96:fc:f2:f4:72:3d:da:41:48:fd:e4:1a:e4:c7:e6:38:57: 02:3b:b6:91:97:43:94:bb:39:65:4a:9c:fd:65:aa:bc:51:41: fc:db:7b:c7 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBcDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC ODA3MDExMC8GA1UEBRMoNEVGQjkzQjQ5QkYxQkE1NjAwOERGQzYwNjA4QjUyMTZB RUM5OUFDNjAeFw0yNTEwMjcwOTIzNDJaFw0yNTExMDMwOTIzNDJaMBgxFjAUBgNV BAMTDTY4ZmYzYTFmLWRmMDYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC58VfZFrTdsjf63cJP+e55PvLsuUDRFp1TTWk8watgkKP3bgNsZXhvpm5QoiKV AfScZN8Sd/cNJ7l7cNym4v1XF7jq18/fePFnuCGe73ZRIABAtSTVr+rd5uggVgIr 3i5mbzJu7U/rP1JXXWhkj9PSBLv3dXjlJrVL0vIu32hdtl0nDGKhe3/XDNkDxlGb mEa2uJ1aHH3rWAS0qLg+VAIWrplbisOTKUMTl/PFGJoY4P2rJc9cuyPthTfei2zm R8j5e0GOXK2C8mAFD8l64hIGH88HM4wSAXqzz2gsdsOf6lA9HuhcUnlS2dFSOiEt xNWSeWauEpPvhsc+LLI3rpZvAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUMBQ+JjZW U+/Y9AvE0/Dxq1yqXTMwHwYDVR0jBBgwFoAUTvuTtJvxulYAjfxgYItSFq7JmsYw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUI4MDcwL0FFMzY0Njk2MTM4 NDExRjBCQzVGNDU0N0M0RjlBRTAyL1R2dVR0SnZ4dWxZQWpmeGdZSXRTRnE3Sm1z WS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvVHZ1VHRKdnh1bFlBamZ4Z1lJdFNGcTdKbXNZLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUI4 MDcwL0FFMzY0Njk2MTM4NDExRjBCQzVGNDU0N0M0RjlBRTAyL1R2dVR0SnZ4dWxZ QWpmeGdZSXRTRnE3Sm1zWS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAEZp7pIYB8wFr5OMOwX6qWEBCJfPvLX0MHC+xF0mlArxf3PyxYpycal+ exgZirINSkZfV5qvQq6dOuCcc4hzfk5T8kRu/YzNFEEp3W1BL9dc7Iz5TVd7VO87 qihiED7t0SDG6dYsVcPVqSRr3mMIaDbInbIeiz6dkSLnZDEvG3Wc0DtEhD4pSlxc hCgYdmeXkFdXpPj9Zdp5is/m9cXUetws/5a3R8/aBDzU/tiLeLVZ41YZUlodfVPz FbGuTINMnreqHy41OgTgG5lxxvFLf+VmmSx0M172KUWW/PL0cj3aQUj95Brkx+Y4 VwI7tpGXQ5S7OWVKnP1lqrxRQfzbe8c= -----END CERTIFICATE-----Generated at Tue Oct 28 07:34:02 2025 by rpki-client