$ rpki-client -vvf rpki.apnic.net/member_repository/A91149EA/F42D4CA273E411EA9AE68072C4F9AE02/TVJUdG_vcu-3rMDFNK1gj1C8OAQ.mft File: TVJUdG_vcu-3rMDFNK1gj1C8OAQ.mft (raw, json) Hash identifier: JIB8rDCJ6gB3tUWmLmS/sSdo7aQ6pEEc29T72Pb0RK4= Subject key identifier: 1A:B9:0C:A1:29:DF:30:67:E2:C0:29:19:36:48:A7:7F:30:6A:C3:03 Authority key identifier: 4D:52:54:74:6F:EF:72:EF:B7:AC:C0:C5:34:AD:60:8F:50:BC:38:04 Certificate issuer: /CN=A91149EA/serialNumber=4D5254746FEF72EFB7ACC0C534AD608F50BC3804 Certificate serial: 0A45 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TVJUdG_vcu-3rMDFNK1gj1C8OAQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91149EA/F42D4CA273E411EA9AE68072C4F9AE02/TVJUdG_vcu-3rMDFNK1gj1C8OAQ.mft Manifest number: 0A35 Signing time: Sun 10 Aug 2025 19:46:19 +0000 Manifest this update: Sun 10 Aug 2025 19:46:19 +0000 Manifest next update: Sun 17 Aug 2025 19:46:19 +0000 Files and hashes: 1: TVJUdG_vcu-3rMDFNK1gj1C8OAQ.crl (hash: MC2xYfD7HJiYGoaFAMPw6+oAMbBizFxE58DxNfQansc=) 2: F94FA23C92F211EC8D04F649C4F9AE02.roa (hash: cCp7Bzw8poNKj0gr0L5A5NrVzahfSp+S0YQtn1jReFE=) 3: F61F817C9B3B11EBA5C76B80C4F9AE02.roa (hash: MwqZowzxRiYq0MUhfIdoeD3JCO2yoaZpzTRIMaHJxqs=) 4: 6897409A73E811EA93705B7CC4F9AE02.roa (hash: 8MO+sNBEiwlcI2/otkXShyj1mgir6Tk3C5bJL2OwyHE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91149EA/F42D4CA273E411EA9AE68072C4F9AE02/TVJUdG_vcu-3rMDFNK1gj1C8OAQ.crl rsync://rpki.apnic.net/member_repository/A91149EA/F42D4CA273E411EA9AE68072C4F9AE02/TVJUdG_vcu-3rMDFNK1gj1C8OAQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TVJUdG_vcu-3rMDFNK1gj1C8OAQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2629 (0xa45) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91149EA, serialNumber=4D5254746FEF72EFB7ACC0C534AD608F50BC3804 Validity Not Before: Aug 10 19:46:19 2025 GMT Not After : Aug 17 19:46:19 2025 GMT Subject: CN=6898f70b-c50b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:15:0a:7a:0c:ef:18:a5:55:86:ee:ea:98:b2: 74:9f:38:5e:a5:0a:a4:f9:de:2d:aa:76:a2:61:2a: 6c:c8:f7:34:45:7a:fb:ba:1c:b0:24:7b:e5:7a:c1: 15:8e:ee:99:ba:a0:b8:85:06:29:d2:12:17:ce:78: 3f:03:f3:06:d3:cf:2a:3b:d4:68:f1:43:0a:4c:e4: 5b:4a:4b:40:f8:12:19:ea:79:0e:68:20:a1:2f:3c: 66:3b:a8:83:3f:bc:86:74:1d:57:17:24:9a:e7:2d: f7:17:b4:95:13:70:13:81:45:55:70:fd:d1:b9:ad: 63:e0:63:00:7c:62:a1:f4:76:dc:85:19:a3:93:ca: c3:79:de:31:c9:f9:12:39:b6:5b:fc:f5:da:c8:3a: cd:72:63:7d:96:0e:76:a2:61:e9:5d:4c:b0:29:cf: a8:9b:7b:d7:3a:dd:bf:d3:21:bd:27:90:16:a9:03: 02:c7:60:09:6d:c0:86:a6:98:5c:f1:bd:11:4c:3b: 86:cc:66:77:08:1a:7c:44:19:04:0e:52:cd:1e:3f: 6e:2d:c4:6e:93:f8:77:b1:e9:e2:6e:6d:dd:fc:c2: c3:6b:82:38:d9:e3:04:cd:f1:9d:24:01:72:a1:35: d5:bf:7f:83:90:08:49:8c:53:8c:2e:29:74:78:a9: 22:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:B9:0C:A1:29:DF:30:67:E2:C0:29:19:36:48:A7:7F:30:6A:C3:03 X509v3 Authority Key Identifier: keyid:4D:52:54:74:6F:EF:72:EF:B7:AC:C0:C5:34:AD:60:8F:50:BC:38:04 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91149EA/F42D4CA273E411EA9AE68072C4F9AE02/TVJUdG_vcu-3rMDFNK1gj1C8OAQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TVJUdG_vcu-3rMDFNK1gj1C8OAQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91149EA/F42D4CA273E411EA9AE68072C4F9AE02/TVJUdG_vcu-3rMDFNK1gj1C8OAQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b2:b8:8a:7b:6c:34:17:01:84:ee:99:81:6d:bb:d3:d4:a6:f0: 4c:da:c7:1e:ac:44:c5:47:ad:b4:93:53:d2:3b:d4:06:57:69: ec:cb:ea:94:ee:46:93:80:8b:f2:09:40:15:12:68:df:b5:c2: ee:a8:2c:aa:7a:1f:93:7b:ba:af:59:3b:5f:e3:29:25:9c:35: 6f:41:f0:f1:7e:17:68:ea:d3:77:db:25:9f:75:04:81:59:1d: 5f:cb:d6:d2:ef:f6:e6:53:fc:02:13:74:b6:c7:d5:47:ee:4e: f7:54:4b:39:90:c6:7b:72:7d:fc:3f:56:0e:57:d2:42:fb:bb: f1:69:d8:01:b5:b2:1c:30:6b:41:2a:f8:eb:89:97:03:18:33: 67:6e:1a:41:d6:a9:2e:ed:e7:d3:37:a9:13:8c:90:9c:a7:f3: 27:6a:46:1b:e0:b4:d4:92:0a:c3:5f:48:54:07:76:ac:c0:4c: dd:82:7f:4f:2d:6d:ee:c5:81:c2:c7:31:86:ca:02:aa:20:6e: d4:01:d4:eb:76:73:79:1f:4b:6e:03:96:e9:7a:87:8b:63:4f: b6:43:01:22:2c:c6:a8:9b:1b:f8:a7:e8:e7:a2:e2:e6:4a:ad: fe:eb:f5:13:17:e6:c3:bc:d7:2e:44:8e:8d:a6:92:c1:4f:d6: a0:55:85:94 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCkUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTQ5RUExMTAvBgNVBAUTKDRENTI1NDc0NkZFRjcyRUZCN0FDQzBDNTM0QUQ2MDhG NTBCQzM4MDQwHhcNMjUwODEwMTk0NjE5WhcNMjUwODE3MTk0NjE5WjAYMRYwFAYD VQQDEw02ODk4ZjcwYi1jNTBiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxBUKegzvGKVVhu7qmLJ0nzhepQqk+d4tqnaiYSpsyPc0RXr7uhywJHvlesEV ju6ZuqC4hQYp0hIXzng/A/MG088qO9Ro8UMKTORbSktA+BIZ6nkOaCChLzxmO6iD P7yGdB1XFySa5y33F7SVE3ATgUVVcP3Rua1j4GMAfGKh9HbchRmjk8rDed4xyfkS ObZb/PXayDrNcmN9lg52omHpXUywKc+om3vXOt2/0yG9J5AWqQMCx2AJbcCGpphc 8b0RTDuGzGZ3CBp8RBkEDlLNHj9uLcRuk/h3senibm3d/MLDa4I42eMEzfGdJAFy oTXVv3+DkAhJjFOMLil0eKkiHwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBq5DKEp 3zBn4sApGTZIp38wasMDMB8GA1UdIwQYMBaAFE1SVHRv73Lvt6zAxTStYI9QvDgE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNDlFQS9GNDJENENBMjcz RTQxMUVBOUFFNjgwNzJDNEY5QUUwMi9UVkpVZEdfdmN1LTNyTURGTksxZ2oxQzhP QVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1RWSlVkR192Y3UtM3JNREZOSzFnajFDOE9BUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx NDlFQS9GNDJENENBMjczRTQxMUVBOUFFNjgwNzJDNEY5QUUwMi9UVkpVZEdfdmN1 LTNyTURGTksxZ2oxQzhPQVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCyuIp7bDQXAYTumYFtu9PUpvBM2scerETFR620k1PSO9QGV2nsy+qU 7kaTgIvyCUAVEmjftcLuqCyqeh+Te7qvWTtf4yklnDVvQfDxfhdo6tN32yWfdQSB WR1fy9bS7/bmU/wCE3S2x9VH7k73VEs5kMZ7cn38P1YOV9JC+7vxadgBtbIcMGtB KvjriZcDGDNnbhpB1qku7efTN6kTjJCcp/MnakYb4LTUkgrDX0hUB3aswEzdgn9P LW3uxYHCxzGGygKqIG7UAdTrdnN5H0tuA5bpeoeLY0+2QwEiLMaomxv4p+jnouLm Sq3+6/UTF+bDvNcuRI6NppLBT9agVYWU -----END CERTIFICATE-----Generated at Mon Aug 11 04:22:03 2025 by rpki-client