$ rpki-client -vvf rpki.apnic.net/member_repository/A91933FE/D31A677AAB6811EDA5CA5B09C4F9AE02/tVGhYNO-3KVi6d395AkzcktpuQA.mft File: tVGhYNO-3KVi6d395AkzcktpuQA.mft (raw, json) Hash identifier: vsTHeB9agw/+RXRBBd9db8ZFfEEg9T780XvOx6R/rMQ= Subject key identifier: 6B:8C:47:3E:6D:7E:5B:D1:A6:A9:27:12:EC:47:E9:A2:4A:63:23:72 Authority key identifier: B5:51:A1:60:D3:BE:DC:A5:62:E9:DD:FD:E4:09:33:72:4B:69:B9:00 Certificate issuer: /CN=A91933FE/serialNumber=B551A160D3BEDCA562E9DDFDE40933724B69B900 Certificate serial: 01BE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tVGhYNO-3KVi6d395AkzcktpuQA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91933FE/D31A677AAB6811EDA5CA5B09C4F9AE02/tVGhYNO-3KVi6d395AkzcktpuQA.mft Manifest number: 01B6 Signing time: Sun 15 Jun 2025 02:21:08 +0000 Manifest this update: Sun 15 Jun 2025 02:21:08 +0000 Manifest next update: Sun 22 Jun 2025 02:21:08 +0000 Files and hashes: 1: tVGhYNO-3KVi6d395AkzcktpuQA.crl (hash: FVw+vUrpulr1r+a9G19fRWl7CxWkbBe2g0V/ImdKezg=) 2: A6CD6A3EAB6B11EDA5C53A0AC4F9AE02.roa (hash: ojParvJ0FGJUPZ25zNdYUl2YaHcSyrc33U2l9MfbPKU=) 3: A63F9024AB6B11EDA5C53A0AC4F9AE02.roa (hash: 67QdihmJWNEdpWctmJLskykPLPRUaTyZfL1MUDXMOe4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91933FE/D31A677AAB6811EDA5CA5B09C4F9AE02/tVGhYNO-3KVi6d395AkzcktpuQA.crl rsync://rpki.apnic.net/member_repository/A91933FE/D31A677AAB6811EDA5CA5B09C4F9AE02/tVGhYNO-3KVi6d395AkzcktpuQA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tVGhYNO-3KVi6d395AkzcktpuQA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 22 Jun 2025 02:21:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 446 (0x1be) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91933FE, serialNumber=B551A160D3BEDCA562E9DDFDE40933724B69B900 Validity Not Before: Jun 15 02:21:08 2025 GMT Not After : Jun 22 02:21:08 2025 GMT Subject: CN=684e2e14-00cd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:87:92:fe:1e:35:22:d9:98:b4:eb:e7:8d:5e: f8:78:b1:8e:6c:f1:e4:a8:ca:5d:09:78:8d:a0:c8: 97:9c:c3:06:13:f0:04:1b:2c:b2:ef:d2:75:fb:09: 53:79:73:1c:98:f4:88:d7:94:fa:5f:ff:66:e8:f1: bd:67:24:6b:84:90:90:2d:b4:72:b1:b9:4e:84:42: b1:b4:f2:67:25:fa:7b:83:b4:17:e9:e2:ac:cf:3c: d1:3b:64:08:e7:4a:63:83:86:d6:65:b4:d6:46:e6: ba:31:e8:27:81:6a:a0:f5:50:c9:f2:16:32:51:6b: 92:6d:3f:18:2e:a5:96:fb:c9:d6:b8:df:53:20:b5: 1b:01:29:51:81:ae:2f:fb:3c:84:56:fc:9a:76:ec: f2:5b:ba:75:6a:82:f2:eb:59:ff:eb:cc:aa:0f:93: 36:fc:05:ff:ab:99:11:3c:8f:d2:8f:c8:9d:8b:27: 3b:37:bb:b7:31:d9:43:3b:e2:33:69:31:9b:ff:fb: 5e:43:24:95:be:a9:00:59:00:db:58:d9:42:7d:f2: 7e:5e:67:ec:77:c0:9a:b3:7a:9e:9a:52:60:7d:fb: db:03:70:0c:6a:58:2d:d8:a6:8c:7d:f2:06:9d:c6: 28:46:b9:b3:bb:aa:0e:6a:1c:c4:1f:43:39:be:61: 40:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:8C:47:3E:6D:7E:5B:D1:A6:A9:27:12:EC:47:E9:A2:4A:63:23:72 X509v3 Authority Key Identifier: keyid:B5:51:A1:60:D3:BE:DC:A5:62:E9:DD:FD:E4:09:33:72:4B:69:B9:00 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91933FE/D31A677AAB6811EDA5CA5B09C4F9AE02/tVGhYNO-3KVi6d395AkzcktpuQA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tVGhYNO-3KVi6d395AkzcktpuQA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91933FE/D31A677AAB6811EDA5CA5B09C4F9AE02/tVGhYNO-3KVi6d395AkzcktpuQA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 58:d9:7b:ca:fb:31:56:66:7f:b6:14:75:9d:d7:cc:80:bc:d2: 4d:be:61:69:a7:e1:98:c8:3a:66:f2:54:b4:e0:56:f8:e2:ea: 58:a2:1a:30:7b:bd:0f:41:7a:ea:35:32:a8:58:45:33:c0:c6: 3a:da:e5:75:bd:c0:82:c3:1a:01:e0:41:f2:e1:aa:a9:14:dd: f2:0c:d2:13:d7:81:57:1e:6c:78:eb:38:1c:78:40:0f:e8:8c: 55:af:19:aa:ef:31:8c:b4:fc:b6:61:5d:d6:45:e5:c7:20:74: 8c:15:30:a6:d7:42:ad:a3:d5:6e:e2:69:05:8c:a0:4b:66:34: 27:d8:d7:45:a1:8f:47:bb:80:e3:0c:30:27:8f:b3:d1:70:62: aa:1a:99:10:05:ed:75:46:0a:07:b1:3e:11:df:fc:56:b6:22: 83:41:64:0e:fc:b4:34:7c:f9:bf:86:29:5e:ca:7d:d9:91:ad: 5f:da:f7:1e:78:9b:c7:0e:5f:6a:ca:34:0a:b2:37:26:2f:43: ee:82:11:24:8c:2d:01:0d:91:91:8c:5e:12:d0:28:87:76:15: 77:00:b9:66:10:e3:13:b6:f8:a8:84:02:42:99:45:6a:33:f9: b0:7e:e5:41:4f:23:74:27:00:94:e2:74:0a:91:c8:8b:24:8f: 4c:9b:7f:9a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAb4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTMzRkUxMTAvBgNVBAUTKEI1NTFBMTYwRDNCRURDQTU2MkU5RERGREU0MDkzMzcy NEI2OUI5MDAwHhcNMjUwNjE1MDIyMTA4WhcNMjUwNjIyMDIyMTA4WjAYMRYwFAYD VQQDEw02ODRlMmUxNC0wMGNkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnoeS/h41ItmYtOvnjV74eLGObPHkqMpdCXiNoMiXnMMGE/AEGyyy79J1+wlT eXMcmPSI15T6X/9m6PG9ZyRrhJCQLbRysblOhEKxtPJnJfp7g7QX6eKszzzRO2QI 50pjg4bWZbTWRua6MegngWqg9VDJ8hYyUWuSbT8YLqWW+8nWuN9TILUbASlRga4v +zyEVvyaduzyW7p1aoLy61n/68yqD5M2/AX/q5kRPI/Sj8idiyc7N7u3MdlDO+Iz aTGb//teQySVvqkAWQDbWNlCffJ+Xmfsd8Cas3qemlJgffvbA3AMalgt2KaMffIG ncYoRrmzu6oOahzEH0M5vmFACQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGuMRz5t flvRpqknEuxH6aJKYyNyMB8GA1UdIwQYMBaAFLVRoWDTvtylYund/eQJM3JLabkA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MzNGRS9EMzFBNjc3QUFC NjgxMUVEQTVDQTVCMDlDNEY5QUUwMi90VkdoWU5PLTNLVmk2ZDM5NUFremNrdHB1 UUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RWR2hZTk8tM0tWaTZkMzk1QWt6Y2t0cHVRQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 MzNGRS9EMzFBNjc3QUFCNjgxMUVEQTVDQTVCMDlDNEY5QUUwMi90VkdoWU5PLTNL Vmk2ZDM5NUFremNrdHB1UUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBY2XvK+zFWZn+2FHWd18yAvNJNvmFpp+GYyDpm8lS04Fb44upYohow e70PQXrqNTKoWEUzwMY62uV1vcCCwxoB4EHy4aqpFN3yDNIT14FXHmx46zgceEAP 6IxVrxmq7zGMtPy2YV3WReXHIHSMFTCm10Kto9Vu4mkFjKBLZjQn2NdFoY9Hu4Dj DDAnj7PRcGKqGpkQBe11RgoHsT4R3/xWtiKDQWQO/LQ0fPm/hileyn3Zka1f2vce eJvHDl9qyjQKsjcmL0PughEkjC0BDZGRjF4S0CiHdhV3ALlmEOMTtviohAJCmUVq M/mwfuVBTyN0JwCU4nQKkciLJI9Mm3+a -----END CERTIFICATE-----Generated at Sun Jun 15 10:14:35 2025 by rpki-client