$ rpki-client -vvf rpki.apnic.net/member_repository/A91933FE/D31A677AAB6811EDA5CA5B09C4F9AE02/tVGhYNO-3KVi6d395AkzcktpuQA.mft File: tVGhYNO-3KVi6d395AkzcktpuQA.mft (raw, json) Hash identifier: A0XbGwjlGfg4RTpdNocI4Qh60vYj0dTn+SAkg8RMLKM= Subject key identifier: 88:45:37:A7:B8:AE:CC:B9:1F:59:FF:C8:BC:AC:EC:76:5C:09:7F:22 Authority key identifier: B5:51:A1:60:D3:BE:DC:A5:62:E9:DD:FD:E4:09:33:72:4B:69:B9:00 Certificate issuer: /CN=A91933FE/serialNumber=B551A160D3BEDCA562E9DDFDE40933724B69B900 Certificate serial: 020A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tVGhYNO-3KVi6d395AkzcktpuQA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91933FE/D31A677AAB6811EDA5CA5B09C4F9AE02/tVGhYNO-3KVi6d395AkzcktpuQA.mft Manifest number: 0200 Signing time: Wed 05 Nov 2025 02:30:19 +0000 Manifest this update: Wed 05 Nov 2025 02:30:18 +0000 Manifest next update: Wed 12 Nov 2025 02:30:18 +0000 Files and hashes: 1: tVGhYNO-3KVi6d395AkzcktpuQA.crl (hash: NmkXGEh5yaa0IT3OEEuo+evKS15nc1inKsQNFo8anwo=) 2: A6CD6A3EAB6B11EDA5C53A0AC4F9AE02.roa (hash: Jqnub0wXVy5YAPXo3TdIRx4tcYu2/ytetEQKO0MEOFA=) 3: A63F9024AB6B11EDA5C53A0AC4F9AE02.roa (hash: 86MzttNM09a7Pbj7fiElhdTAIgqK4eCRkFOM21wDde0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91933FE/D31A677AAB6811EDA5CA5B09C4F9AE02/tVGhYNO-3KVi6d395AkzcktpuQA.crl rsync://rpki.apnic.net/member_repository/A91933FE/D31A677AAB6811EDA5CA5B09C4F9AE02/tVGhYNO-3KVi6d395AkzcktpuQA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tVGhYNO-3KVi6d395AkzcktpuQA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 02:30:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 522 (0x20a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91933FE, serialNumber=B551A160D3BEDCA562E9DDFDE40933724B69B900 Validity Not Before: Nov 5 02:30:18 2025 GMT Not After : Nov 12 02:30:18 2025 GMT Subject: CN=690ab6ba-d243 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:ef:6b:07:16:73:95:50:2b:4b:39:bc:f1:67: 2c:5e:ab:05:b1:c8:de:20:bc:db:b4:93:1f:f4:92: cd:ca:ae:39:a4:b6:39:31:09:e9:2f:8d:cd:1f:12: 1b:79:6c:59:6c:8b:c3:80:05:69:78:93:59:e0:a2: 3e:fa:2f:4f:06:6b:8c:0d:fa:a6:83:92:ef:32:62: ed:86:e8:33:a7:3d:ff:bf:60:6b:43:55:7f:8e:c0: d8:01:3b:5c:45:4a:9b:8f:e0:06:e0:6d:51:48:0c: 90:74:70:e3:42:64:84:09:f7:55:1d:2f:32:cc:9c: b3:ce:64:f9:7e:4e:43:12:4a:f7:fc:b7:cb:f8:b8: 49:05:fd:8f:8a:33:3e:7b:cc:d7:b5:95:a3:88:55: 32:bb:7c:4c:54:b8:98:5d:cb:66:10:cd:f7:b7:fc: c5:e9:2d:59:25:cd:4b:d4:88:53:a3:8f:6b:27:65: 55:5c:29:f0:f7:bb:64:3b:0d:e6:37:94:50:74:b6: 8d:12:db:40:3c:07:60:5f:9a:d2:2b:4a:bd:f3:77: de:f7:fd:79:e5:0c:c3:b9:88:09:3b:76:8e:1d:a1: 17:48:72:b9:cb:c1:76:9d:63:8a:a7:17:80:35:f6: 64:25:82:a3:e0:2d:d1:fc:fe:ed:d1:b2:1c:d2:84: 79:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:45:37:A7:B8:AE:CC:B9:1F:59:FF:C8:BC:AC:EC:76:5C:09:7F:22 X509v3 Authority Key Identifier: keyid:B5:51:A1:60:D3:BE:DC:A5:62:E9:DD:FD:E4:09:33:72:4B:69:B9:00 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91933FE/D31A677AAB6811EDA5CA5B09C4F9AE02/tVGhYNO-3KVi6d395AkzcktpuQA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tVGhYNO-3KVi6d395AkzcktpuQA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91933FE/D31A677AAB6811EDA5CA5B09C4F9AE02/tVGhYNO-3KVi6d395AkzcktpuQA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5c:b6:27:03:2f:65:db:a0:1d:72:9f:39:ed:1e:67:17:6d:ac: 5c:f0:c8:de:d7:c8:52:4d:31:99:ff:b0:40:06:44:95:28:71: 80:70:b5:e4:08:52:2a:7f:75:60:89:9b:52:7a:b5:0e:6a:12: 64:f0:8e:57:b7:6d:c4:0c:21:5a:90:1e:a8:65:29:f3:ae:35: aa:17:db:57:98:c3:c2:1e:d3:4f:ef:37:5c:88:f0:e0:f9:eb: 16:31:5a:a4:4a:be:4b:97:25:ba:5a:08:fa:97:f3:2f:ee:08: e6:15:7e:81:08:a4:b3:33:00:1a:2f:fa:c7:1f:c9:a3:8b:0b: 4f:7e:76:05:c7:ce:fd:12:92:59:71:50:c2:0b:82:fa:c9:72: ce:63:26:35:fe:c9:5b:89:7f:f6:9f:33:d8:d1:cc:a0:04:cf: 87:0e:a8:96:58:9d:2c:f1:eb:ba:e5:93:b7:d9:fe:82:c3:e7: 15:21:47:51:52:99:8f:00:be:ef:39:00:17:37:90:a9:8c:55: 91:19:e0:ee:0e:d6:d3:03:76:b4:85:59:43:b8:6a:81:08:43: f8:18:d5:51:de:50:e1:98:0d:a1:4d:3d:be:55:fb:d1:d2:b4: 85:08:61:57:49:79:ba:6b:e8:5e:14:f0:cc:2d:2e:1f:19:5e: 15:a5:97:00 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAgowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTMzRkUxMTAvBgNVBAUTKEI1NTFBMTYwRDNCRURDQTU2MkU5RERGREU0MDkzMzcy NEI2OUI5MDAwHhcNMjUxMTA1MDIzMDE4WhcNMjUxMTEyMDIzMDE4WjAYMRYwFAYD VQQDEw02OTBhYjZiYS1kMjQzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAse9rBxZzlVArSzm88WcsXqsFscjeILzbtJMf9JLNyq45pLY5MQnpL43NHxIb eWxZbIvDgAVpeJNZ4KI++i9PBmuMDfqmg5LvMmLthugzpz3/v2BrQ1V/jsDYATtc RUqbj+AG4G1RSAyQdHDjQmSECfdVHS8yzJyzzmT5fk5DEkr3/LfL+LhJBf2PijM+ e8zXtZWjiFUyu3xMVLiYXctmEM33t/zF6S1ZJc1L1IhTo49rJ2VVXCnw97tkOw3m N5RQdLaNEttAPAdgX5rSK0q983fe9/155QzDuYgJO3aOHaEXSHK5y8F2nWOKpxeA NfZkJYKj4C3R/P7t0bIc0oR5nQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIhFN6e4 rsy5H1n/yLys7HZcCX8iMB8GA1UdIwQYMBaAFLVRoWDTvtylYund/eQJM3JLabkA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MzNGRS9EMzFBNjc3QUFC NjgxMUVEQTVDQTVCMDlDNEY5QUUwMi90VkdoWU5PLTNLVmk2ZDM5NUFremNrdHB1 UUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RWR2hZTk8tM0tWaTZkMzk1QWt6Y2t0cHVRQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 MzNGRS9EMzFBNjc3QUFCNjgxMUVEQTVDQTVCMDlDNEY5QUUwMi90VkdoWU5PLTNL Vmk2ZDM5NUFremNrdHB1UUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBcticDL2XboB1ynzntHmcXbaxc8Mje18hSTTGZ/7BABkSVKHGAcLXk CFIqf3VgiZtSerUOahJk8I5Xt23EDCFakB6oZSnzrjWqF9tXmMPCHtNP7zdciPDg +esWMVqkSr5LlyW6Wgj6l/Mv7gjmFX6BCKSzMwAaL/rHH8mjiwtPfnYFx879EpJZ cVDCC4L6yXLOYyY1/slbiX/2nzPY0cygBM+HDqiWWJ0s8eu65ZO32f6Cw+cVIUdR UpmPAL7vOQAXN5CpjFWRGeDuDtbTA3a0hVlDuGqBCEP4GNVR3lDhmA2hTT2+VfvR 0rSFCGFXSXm6a+heFPDMLS4fGV4VpZcA -----END CERTIFICATE-----Generated at Wed Nov 5 16:43:33 2025 by rpki-client