$ rpki-client -vvf rpki.apnic.net/member_repository/A91CE3C4/6DD9F3347F9711EBADDC5F15C4F9AE02/tv1vS0-3wyR8WZKZsui6-1qLunI.mft File: tv1vS0-3wyR8WZKZsui6-1qLunI.mft (raw, json) Hash identifier: 4eWgLH5u08L0upYNLfZPEg1RYxtWhxga0qyaa912pww= Subject key identifier: D8:E9:C6:8E:16:D6:AF:5A:69:DD:B2:01:9E:A8:8B:DB:2E:54:51:05 Authority key identifier: B6:FD:6F:4B:4F:B7:C3:24:7C:59:92:99:B2:E8:BA:FB:5A:8B:BA:72 Certificate issuer: /CN=A91CE3C4/serialNumber=B6FD6F4B4FB7C3247C599299B2E8BAFB5A8BBA72 Certificate serial: 0684 Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/tv1vS0-3wyR8WZKZsui6-1qLunI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CE3C4/6DD9F3347F9711EBADDC5F15C4F9AE02/tv1vS0-3wyR8WZKZsui6-1qLunI.mft Manifest number: 0672 Signing time: Wed 04 Jun 2025 22:15:00 +0000 Manifest this update: Wed 04 Jun 2025 22:15:00 +0000 Manifest next update: Wed 11 Jun 2025 22:15:00 +0000 Files and hashes: 1: tv1vS0-3wyR8WZKZsui6-1qLunI.crl (hash: GRyr1/D4WPqgihkkAJY6CnQpWlzX7ZLeo/KKMBIWNA4=) 2: EC427D64B16311ECA18ED12FC4F9AE02.roa (hash: Ga4Z3DpE9aUbX7W5p2tUSOPgf7WkxMTRgFBKaq09Cxs=) 3: 35341F3E4EAE11EF811DC17BC4F9AE02.roa (hash: 1g7V3yJi0/XsTFsCpcEg/UcPiKQqpqW1UWTVYTWMIZE=) 4: A40873CE7FB811EB82018D29C4F9AE02.roa (hash: x1uMmRK43yay8ZPmLxVu8RIg3TAXDE9HwOF5tkl8BVc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CE3C4/6DD9F3347F9711EBADDC5F15C4F9AE02/tv1vS0-3wyR8WZKZsui6-1qLunI.crl rsync://rpki.apnic.net/member_repository/A91CE3C4/6DD9F3347F9711EBADDC5F15C4F9AE02/tv1vS0-3wyR8WZKZsui6-1qLunI.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/tv1vS0-3wyR8WZKZsui6-1qLunI.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 11 Jun 2025 22:14:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1668 (0x684) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CE3C4, serialNumber=B6FD6F4B4FB7C3247C599299B2E8BAFB5A8BBA72 Validity Not Before: Jun 4 22:15:00 2025 GMT Not After : Jun 11 22:15:00 2025 GMT Subject: CN=6840c564-b2f9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:46:da:69:be:cb:51:67:25:ba:df:95:41:49: 1c:c8:40:69:ab:27:6d:8b:25:cb:0f:7e:f1:21:ff: 8a:d3:d3:b1:86:b9:fc:e3:41:3c:cf:95:0a:9b:a9: fc:6e:12:d6:2e:9a:d8:04:17:51:e2:39:9c:4d:20: 5b:1a:4f:94:16:37:ba:0a:3a:f7:3a:63:ea:a8:90: 1b:a0:ab:c9:1b:5f:70:ae:1b:28:ce:aa:cd:01:ac: 1b:17:c9:32:5a:90:20:0a:60:89:41:50:56:5a:d7: 57:95:e2:0f:f6:3a:61:c9:0e:93:e5:ea:39:fd:4a: 4e:6b:2c:82:b8:04:e0:41:48:ff:d0:48:eb:a0:fd: 1a:aa:80:ba:01:f7:9c:00:88:ec:f9:c8:ad:6f:d2: 0e:d9:6c:36:c0:c0:a0:5f:51:a4:85:b6:4f:f5:b6: 42:3e:c5:c6:3e:6d:1a:be:ec:25:c2:9f:a4:6e:04: b7:1b:db:6b:0a:8e:c9:70:a8:05:c0:5f:fb:87:09: 05:f3:c3:31:a5:a0:0e:3c:02:b4:76:c3:e4:85:4b: 58:31:ec:e4:8a:bf:5a:b7:5e:62:62:8f:27:f1:7c: ca:f4:80:8f:29:5f:f7:77:4a:e9:3f:f3:9c:fa:da: bd:3e:1a:9f:5e:7a:9a:26:77:04:4f:0a:f7:06:c3: 4b:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:E9:C6:8E:16:D6:AF:5A:69:DD:B2:01:9E:A8:8B:DB:2E:54:51:05 X509v3 Authority Key Identifier: keyid:B6:FD:6F:4B:4F:B7:C3:24:7C:59:92:99:B2:E8:BA:FB:5A:8B:BA:72 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CE3C4/6DD9F3347F9711EBADDC5F15C4F9AE02/tv1vS0-3wyR8WZKZsui6-1qLunI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/tv1vS0-3wyR8WZKZsui6-1qLunI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CE3C4/6DD9F3347F9711EBADDC5F15C4F9AE02/tv1vS0-3wyR8WZKZsui6-1qLunI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 72:7b:06:5a:82:0c:33:50:9d:4e:6c:44:6a:94:d4:0e:10:31: 7c:78:5a:8c:bc:8c:82:8f:14:ee:69:79:21:e1:97:2f:e4:99: a7:ca:db:11:40:1d:3d:fd:a2:a8:72:b4:02:d4:08:85:58:c5: 63:d9:1f:34:4e:e1:dc:b9:6c:c1:75:3a:4c:f2:2a:6f:cf:24: 79:8e:0d:6b:47:8c:8b:5d:7e:fc:27:e3:c7:ad:6d:1b:71:5c: 91:0b:21:14:9d:5e:8c:47:6d:21:06:04:ba:60:fa:3e:ad:14: 2a:60:53:d6:73:d1:1f:c2:eb:9e:83:a9:55:d2:2b:01:60:6b: cb:af:53:c6:92:44:00:9a:43:b7:bb:ad:90:ee:a6:2e:bf:fa: b7:65:28:ff:ac:49:b5:88:c0:d8:78:4c:dc:d5:d0:ea:cd:6b: 7c:9d:0d:d0:6f:4b:3d:70:f1:8a:7d:14:ec:8b:c3:7c:bc:97: fe:11:27:10:e5:1d:2e:61:7b:d7:d4:aa:4f:ca:40:65:f5:58: 3c:eb:bc:18:b2:51:2d:db:50:37:c4:71:6d:1d:e4:0b:28:3b: 18:ee:a3:48:83:82:50:39:4c:8e:fb:d5:69:6e:56:a3:51:66: 80:4e:ae:25:f3:5a:b7:04:95:db:b1:b0:c9:57:bb:5e:4e:29: 00:a3:ff:14 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBoQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0UzQzQxMTAvBgNVBAUTKEI2RkQ2RjRCNEZCN0MzMjQ3QzU5OTI5OUIyRThCQUZC NUE4QkJBNzIwHhcNMjUwNjA0MjIxNTAwWhcNMjUwNjExMjIxNTAwWjAYMRYwFAYD VQQDEw02ODQwYzU2NC1iMmY5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAk0baab7LUWclut+VQUkcyEBpqydtiyXLD37xIf+K09Oxhrn840E8z5UKm6n8 bhLWLprYBBdR4jmcTSBbGk+UFje6Cjr3OmPqqJAboKvJG19wrhsozqrNAawbF8ky WpAgCmCJQVBWWtdXleIP9jphyQ6T5eo5/UpOayyCuATgQUj/0EjroP0aqoC6Afec AIjs+citb9IO2Ww2wMCgX1GkhbZP9bZCPsXGPm0avuwlwp+kbgS3G9trCo7JcKgF wF/7hwkF88MxpaAOPAK0dsPkhUtYMezkir9at15iYo8n8XzK9ICPKV/3d0rpP/Oc +tq9PhqfXnqaJncETwr3BsNLTQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNjpxo4W 1q9aad2yAZ6oi9suVFEFMB8GA1UdIwQYMBaAFLb9b0tPt8MkfFmSmbLouvtai7py MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRTNDNC82REQ5RjMzNDdG OTcxMUVCQUREQzVGMTVDNEY5QUUwMi90djF2UzAtM3d5UjhXWktac3VpNi0xcUx1 bkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyL3R2MXZTMC0zd3lSOFdaS1pzdWk2LTFxTHVuSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RTNDNC82REQ5RjMzNDdGOTcxMUVCQUREQzVGMTVDNEY5QUUwMi90djF2UzAtM3d5 UjhXWktac3VpNi0xcUx1bkkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQByewZaggwzUJ1ObERqlNQOEDF8eFqMvIyCjxTuaXkh4Zcv5JmnytsR QB09/aKocrQC1AiFWMVj2R80TuHcuWzBdTpM8ipvzyR5jg1rR4yLXX78J+PHrW0b cVyRCyEUnV6MR20hBgS6YPo+rRQqYFPWc9Efwuueg6lV0isBYGvLr1PGkkQAmkO3 u62Q7qYuv/q3ZSj/rEm1iMDYeEzc1dDqzWt8nQ3Qb0s9cPGKfRTsi8N8vJf+EScQ 5R0uYXvX1KpPykBl9Vg867wYslEt21A3xHFtHeQLKDsY7qNIg4JQOUyO+9Vpblaj UWaATq4l81q3BJXbsbDJV7teTikAo/8U -----END CERTIFICATE-----Generated at Fri Jun 6 16:42:49 2025 by rpki-client