$ rpki-client -vvf rpki.apnic.net/member_repository/A91B8070/AE364696138411F0BC5F4547C4F9AE02/TvuTtJvxulYAjfxgYItSFq7JmsY.mft File: TvuTtJvxulYAjfxgYItSFq7JmsY.mft (raw, json) Hash identifier: Yv/B/9JeBcEiIkMyDlkltczWUzGzKchFMk234N4qg6o= Subject key identifier: 97:8E:8B:14:9B:71:42:B0:90:54:96:7F:EC:4A:D9:99:36:6D:4D:E7 Authority key identifier: 4E:FB:93:B4:9B:F1:BA:56:00:8D:FC:60:60:8B:52:16:AE:C9:9A:C6 Certificate issuer: /CN=A91B8070/serialNumber=4EFB93B49BF1BA56008DFC60608B5216AEC99AC6 Certificate serial: 1F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TvuTtJvxulYAjfxgYItSFq7JmsY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B8070/AE364696138411F0BC5F4547C4F9AE02/TvuTtJvxulYAjfxgYItSFq7JmsY.mft Manifest number: 1D Signing time: Sat 31 May 2025 07:28:57 +0000 Manifest this update: Sat 31 May 2025 07:28:56 +0000 Manifest next update: Sat 07 Jun 2025 07:28:56 +0000 Files and hashes: 1: TvuTtJvxulYAjfxgYItSFq7JmsY.crl (hash: SipRJ2bO+5EVI+3q89E3LYfmtRemOV5E+Dzffzj/zAM=) 2: 3AD6ED62138511F08BE72448C4F9AE02.roa (hash: 3S4RVGDMTvhO6vm0Gyvr7UAtQxMy4Fhc3zbaUVgynRE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B8070/AE364696138411F0BC5F4547C4F9AE02/TvuTtJvxulYAjfxgYItSFq7JmsY.crl rsync://rpki.apnic.net/member_repository/A91B8070/AE364696138411F0BC5F4547C4F9AE02/TvuTtJvxulYAjfxgYItSFq7JmsY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TvuTtJvxulYAjfxgYItSFq7JmsY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 07:28:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31 (0x1f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B8070, serialNumber=4EFB93B49BF1BA56008DFC60608B5216AEC99AC6 Validity Not Before: May 31 07:28:56 2025 GMT Not After : Jun 7 07:28:56 2025 GMT Subject: CN=683aafb9-5295 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:38:f0:5a:2f:8e:b5:58:3b:50:22:d9:01:4e: 4d:fe:7e:6c:35:45:9e:c4:b8:2c:b9:22:99:08:89: f3:30:5a:0e:e4:7f:01:13:63:ba:12:87:ff:8d:a9: 0b:f5:f5:56:15:b0:3e:42:f2:3a:0f:6e:80:0b:38: 0a:8c:ba:a0:12:89:f3:97:b6:e1:72:42:b6:63:7c: c1:50:ed:7f:ff:75:65:8c:dd:57:0f:0c:01:38:ad: 95:d9:fa:ab:65:44:3e:b1:86:cb:cf:49:fd:c2:05: 65:c0:c9:f2:dc:03:03:d3:d6:9c:37:b4:f6:60:84: 11:03:f9:01:0f:70:f9:6a:c6:64:d4:da:20:a2:70: 4f:cb:d0:5b:4f:fc:05:3a:96:21:2c:33:89:b1:2a: 9f:64:9d:b5:8e:88:0f:8d:c4:d1:6d:2c:44:3e:b9: 30:86:0b:a4:31:69:b1:c9:5c:80:ae:0c:57:eb:2b: 0c:25:53:ed:33:4e:56:b7:af:4f:47:da:65:1f:dc: cc:04:55:5e:69:78:92:eb:87:a3:6c:9d:cb:ba:ae: b3:b7:fd:7a:b1:1a:d0:c4:3b:b4:8d:6c:d8:10:20: f6:37:88:66:69:fa:76:29:69:b9:32:67:7e:45:0d: 03:a9:6f:8e:bb:75:74:c7:10:c2:c0:56:66:a2:13: f4:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:8E:8B:14:9B:71:42:B0:90:54:96:7F:EC:4A:D9:99:36:6D:4D:E7 X509v3 Authority Key Identifier: keyid:4E:FB:93:B4:9B:F1:BA:56:00:8D:FC:60:60:8B:52:16:AE:C9:9A:C6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B8070/AE364696138411F0BC5F4547C4F9AE02/TvuTtJvxulYAjfxgYItSFq7JmsY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TvuTtJvxulYAjfxgYItSFq7JmsY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B8070/AE364696138411F0BC5F4547C4F9AE02/TvuTtJvxulYAjfxgYItSFq7JmsY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b2:d3:06:81:ab:79:9a:ed:69:80:06:eb:de:c3:82:0d:97:51: 73:ef:ab:f8:fa:4a:30:fd:79:5b:5e:97:eb:5a:de:cc:16:d1: b7:fb:4b:3a:1a:5b:66:40:a9:d6:df:ca:80:ee:c3:e0:5f:7f: 65:31:0b:83:ec:73:7c:25:ce:1b:41:06:d2:80:17:2c:69:c2: a4:74:9d:a5:0d:62:c2:3e:36:29:4e:c2:14:29:2c:58:54:bc: 83:aa:eb:7b:6f:c3:88:70:2f:8f:50:0b:df:83:05:50:7d:47: 08:98:51:3c:7b:f5:16:a2:99:fb:c0:a7:7b:ee:24:d0:8d:4c: 14:d3:a4:57:ef:e5:fe:01:be:13:e1:b7:c7:58:4a:21:d9:35: 6f:9c:65:64:0e:3f:1b:6b:4f:a2:83:c4:32:5d:98:14:13:67: d5:d2:28:0b:7a:a3:10:97:fb:12:bc:ea:84:ae:f3:04:91:29: aa:da:35:11:08:dc:1f:cc:5b:05:88:f8:cc:e2:73:f3:e4:23: 4a:c1:4e:5f:64:cb:0c:61:c5:f3:6a:36:95:45:73:1e:59:28: 77:7e:d6:ea:de:16:b7:8a:1b:1d:12:30:cb:15:14:ea:f7:95: 3b:12:27:b8:68:f8:3e:fd:18:a0:ca:fc:22:c9:8a:8c:f7:e1: 6a:09:ba:9a -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBHzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC ODA3MDExMC8GA1UEBRMoNEVGQjkzQjQ5QkYxQkE1NjAwOERGQzYwNjA4QjUyMTZB RUM5OUFDNjAeFw0yNTA1MzEwNzI4NTZaFw0yNTA2MDcwNzI4NTZaMBgxFjAUBgNV BAMTDTY4M2FhZmI5LTUyOTUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDYOPBaL461WDtQItkBTk3+fmw1RZ7EuCy5IpkIifMwWg7kfwETY7oSh/+NqQv1 9VYVsD5C8joPboALOAqMuqASifOXtuFyQrZjfMFQ7X//dWWM3VcPDAE4rZXZ+qtl RD6xhsvPSf3CBWXAyfLcAwPT1pw3tPZghBED+QEPcPlqxmTU2iCicE/L0FtP/AU6 liEsM4mxKp9knbWOiA+NxNFtLEQ+uTCGC6QxabHJXICuDFfrKwwlU+0zTla3r09H 2mUf3MwEVV5peJLrh6Nsncu6rrO3/XqxGtDEO7SNbNgQIPY3iGZp+nYpabkyZ35F DQOpb467dXTHEMLAVmaiE/QZAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUl46LFJtx QrCQVJZ/7ErZmTZtTecwHwYDVR0jBBgwFoAUTvuTtJvxulYAjfxgYItSFq7JmsYw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUI4MDcwL0FFMzY0Njk2MTM4 NDExRjBCQzVGNDU0N0M0RjlBRTAyL1R2dVR0SnZ4dWxZQWpmeGdZSXRTRnE3Sm1z WS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvVHZ1VHRKdnh1bFlBamZ4Z1lJdFNGcTdKbXNZLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUI4 MDcwL0FFMzY0Njk2MTM4NDExRjBCQzVGNDU0N0M0RjlBRTAyL1R2dVR0SnZ4dWxZ QWpmeGdZSXRTRnE3Sm1zWS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBALLTBoGreZrtaYAG697Dgg2XUXPvq/j6SjD9eVtel+ta3swW0bf7Szoa W2ZAqdbfyoDuw+Bff2UxC4Psc3wlzhtBBtKAFyxpwqR0naUNYsI+NilOwhQpLFhU vIOq63tvw4hwL49QC9+DBVB9RwiYUTx79RaimfvAp3vuJNCNTBTTpFfv5f4BvhPh t8dYSiHZNW+cZWQOPxtrT6KDxDJdmBQTZ9XSKAt6oxCX+xK86oSu8wSRKaraNREI 3B/MWwWI+Mzic/PkI0rBTl9kywxhxfNqNpVFcx5ZKHd+1ureFreKGx0SMMsVFOr3 lTsSJ7ho+D79GKDK/CLJioz34WoJupo= -----END CERTIFICATE-----Generated at Sat May 31 17:07:37 2025 by rpki-client