$ rpki-client -vvf rpki.apnic.net/member_repository/A91DB4C3/C23F767C998011EAB3373E6FC4F9AE02/TvlHO1VK4acroJgf_v4Tji1IDsw.mft File: TvlHO1VK4acroJgf_v4Tji1IDsw.mft (raw, json) Hash identifier: QUKJdENySIGgagfyl7nvu8W6nu9M1+XlV0/KjomjITU= Subject key identifier: C5:25:EB:AA:C9:5C:73:D6:3B:40:47:D6:E3:2D:72:EB:B5:AD:88:C5 Authority key identifier: 4E:F9:47:3B:55:4A:E1:A7:2B:A0:98:1F:FE:FE:13:8E:2D:48:0E:CC Certificate issuer: /CN=A91DB4C3/serialNumber=4EF9473B554AE1A72BA0981FFEFE138E2D480ECC Certificate serial: 0954 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TvlHO1VK4acroJgf_v4Tji1IDsw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DB4C3/C23F767C998011EAB3373E6FC4F9AE02/TvlHO1VK4acroJgf_v4Tji1IDsw.mft Manifest number: 094C Signing time: Fri 30 May 2025 21:02:25 +0000 Manifest this update: Fri 30 May 2025 21:02:25 +0000 Manifest next update: Fri 06 Jun 2025 21:02:25 +0000 Files and hashes: 1: TvlHO1VK4acroJgf_v4Tji1IDsw.crl (hash: QB+xMtZJPRBdlRKJdN1CvkGo71pabQT9JMYXjXlIOa0=) 2: E32E2F000EE811EE90BBC818C4F9AE02.roa (hash: rZTxgnVXWMDQsg0oTYE7f4kyKGpDxh1zgyaFzYbZkqY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DB4C3/C23F767C998011EAB3373E6FC4F9AE02/TvlHO1VK4acroJgf_v4Tji1IDsw.crl rsync://rpki.apnic.net/member_repository/A91DB4C3/C23F767C998011EAB3373E6FC4F9AE02/TvlHO1VK4acroJgf_v4Tji1IDsw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TvlHO1VK4acroJgf_v4Tji1IDsw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 21:02:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2388 (0x954) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DB4C3, serialNumber=4EF9473B554AE1A72BA0981FFEFE138E2D480ECC Validity Not Before: May 30 21:02:25 2025 GMT Not After : Jun 6 21:02:25 2025 GMT Subject: CN=683a1ce1-12e9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:e0:cc:b9:9c:54:8b:fb:1a:7e:e7:af:28:c5: 2c:fd:3c:91:4f:e0:d3:ff:fa:23:61:ac:6a:d9:82: e1:81:47:c9:dc:ba:16:17:59:c4:30:70:ac:a5:e6: 5c:ac:16:c3:79:fa:b5:05:87:76:df:56:85:5b:8b: f4:56:da:94:c7:43:8f:0c:2b:30:cc:87:2d:b6:42: 80:a9:f5:38:dd:af:2f:73:9c:ad:cb:37:eb:f9:e5: eb:18:38:72:e2:d9:4e:d4:91:fa:af:ab:4c:3b:69: 5f:4e:17:e9:ec:b9:8d:ff:68:f8:09:f3:25:78:05: e0:fc:87:c1:e5:4c:32:a2:03:3b:e8:85:6e:8d:21: 9f:74:7e:ec:56:33:e0:92:b8:77:e7:c1:cb:76:b2: 49:d6:65:0f:46:e2:2d:49:5d:f4:31:5c:b1:da:e5: f2:f6:a6:c6:15:01:5d:a4:95:41:ea:ae:ae:cb:fe: de:70:2c:35:18:2e:32:5a:7e:8a:d6:05:cf:4d:02: f4:d5:13:e6:ba:b7:f7:01:59:4b:a9:7a:1e:0b:a8: 4e:df:93:e6:c2:3a:9b:77:db:df:cd:9b:bb:c1:87: fd:b6:89:9b:8f:64:0e:d6:ea:48:63:be:dc:03:7a: fb:d4:fb:2f:c4:95:18:5e:cc:1b:6d:7f:6f:3f:d0: 59:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:25:EB:AA:C9:5C:73:D6:3B:40:47:D6:E3:2D:72:EB:B5:AD:88:C5 X509v3 Authority Key Identifier: keyid:4E:F9:47:3B:55:4A:E1:A7:2B:A0:98:1F:FE:FE:13:8E:2D:48:0E:CC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DB4C3/C23F767C998011EAB3373E6FC4F9AE02/TvlHO1VK4acroJgf_v4Tji1IDsw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TvlHO1VK4acroJgf_v4Tji1IDsw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DB4C3/C23F767C998011EAB3373E6FC4F9AE02/TvlHO1VK4acroJgf_v4Tji1IDsw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 73:09:40:3d:19:a7:a6:a1:5d:f2:62:9a:74:4e:ef:03:b6:c0: d3:98:eb:57:9b:48:e8:4e:9a:03:6b:f5:e1:5b:a0:57:fc:b1: 69:1a:cc:e2:32:64:ca:9c:41:d4:60:b9:a3:40:95:0b:7c:b0: 68:a3:22:ac:c8:24:d1:35:06:98:3d:7f:1d:9e:69:62:b5:0b: 30:b7:de:44:f5:30:c0:0e:11:3c:72:9e:51:0a:67:d1:b2:6d: e6:2d:79:22:c8:32:df:5c:cd:55:32:2d:57:d5:87:b0:47:9f: f7:7b:44:ec:b4:be:f8:2e:8a:d2:b1:4f:76:55:e4:9f:b1:49: 67:49:e0:0d:fe:27:8b:b1:8c:da:f8:c6:99:44:cf:20:30:db: 15:64:72:8b:3e:12:9b:cd:1a:53:6b:d0:8c:78:49:e6:46:b7: 03:8f:95:16:42:d9:a1:bb:20:47:e5:b9:cc:32:81:7a:ae:bb: 69:46:53:86:50:b6:54:c1:40:77:fc:b2:a0:c5:b2:d3:5d:78: 55:ec:85:64:5c:37:18:b0:f3:f0:a6:55:de:c7:00:1b:44:a2: 80:fb:06:81:61:ad:55:d8:29:e6:7b:35:04:e4:4a:47:34:34: 49:73:79:2c:61:74:4c:3d:fa:05:be:0c:24:6f:29:9b:73:d9: 38:57:7c:76 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCVQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REI0QzMxMTAvBgNVBAUTKDRFRjk0NzNCNTU0QUUxQTcyQkEwOTgxRkZFRkUxMzhF MkQ0ODBFQ0MwHhcNMjUwNTMwMjEwMjI1WhcNMjUwNjA2MjEwMjI1WjAYMRYwFAYD VQQDEw02ODNhMWNlMS0xMmU5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw+DMuZxUi/safuevKMUs/TyRT+DT//ojYaxq2YLhgUfJ3LoWF1nEMHCspeZc rBbDefq1BYd231aFW4v0VtqUx0OPDCswzIcttkKAqfU43a8vc5ytyzfr+eXrGDhy 4tlO1JH6r6tMO2lfThfp7LmN/2j4CfMleAXg/IfB5UwyogM76IVujSGfdH7sVjPg krh358HLdrJJ1mUPRuItSV30MVyx2uXy9qbGFQFdpJVB6q6uy/7ecCw1GC4yWn6K 1gXPTQL01RPmurf3AVlLqXoeC6hO35Pmwjqbd9vfzZu7wYf9tombj2QO1upIY77c A3r71PsvxJUYXswbbX9vP9BZEwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMUl66rJ XHPWO0BH1uMtcuu1rYjFMB8GA1UdIwQYMBaAFE75RztVSuGnK6CYH/7+E44tSA7M MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQjRDMy9DMjNGNzY3Qzk5 ODAxMUVBQjMzNzNFNkZDNEY5QUUwMi9UdmxITzFWSzRhY3JvSmdmX3Y0VGppMUlE c3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1R2bEhPMVZLNGFjcm9KZ2ZfdjRUamkxSURzdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE QjRDMy9DMjNGNzY3Qzk5ODAxMUVBQjMzNzNFNkZDNEY5QUUwMi9UdmxITzFWSzRh Y3JvSmdmX3Y0VGppMUlEc3cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBzCUA9GaemoV3yYpp0Tu8DtsDTmOtXm0joTpoDa/XhW6BX/LFpGszi MmTKnEHUYLmjQJULfLBooyKsyCTRNQaYPX8dnmlitQswt95E9TDADhE8cp5RCmfR sm3mLXkiyDLfXM1VMi1X1YewR5/3e0TstL74LorSsU92VeSfsUlnSeAN/ieLsYza +MaZRM8gMNsVZHKLPhKbzRpTa9CMeEnmRrcDj5UWQtmhuyBH5bnMMoF6rrtpRlOG ULZUwUB3/LKgxbLTXXhV7IVkXDcYsPPwplXexwAbRKKA+waBYa1V2CnmezUE5EpH NDRJc3ksYXRMPfoFvgwkbymbc9k4V3x2 -----END CERTIFICATE-----Generated at Sat May 31 16:55:10 2025 by rpki-client