$ rpki-client -vvf rpki.apnic.net/member_repository/A91DE43E/CC03FBB82AFB11EA8DF37D55C4F9AE02/tpVKYo70-TShCnBay8uQbtYQSAw.mft File: tpVKYo70-TShCnBay8uQbtYQSAw.mft (raw, json) Hash identifier: DqSUw/0lp2z7KKMMUc7dyOjPBo7/enY/m1p23zRWoLc= Subject key identifier: B1:92:62:45:D3:EA:3D:AA:1C:1B:87:EF:A3:D9:D3:E7:CC:D6:C1:27 Authority key identifier: B6:95:4A:62:8E:F4:F9:34:A1:0A:70:5A:CB:CB:90:6E:D6:10:48:0C Certificate issuer: /CN=A91DE43E/serialNumber=B6954A628EF4F934A10A705ACBCB906ED610480C Certificate serial: 0BA8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tpVKYo70-TShCnBay8uQbtYQSAw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DE43E/CC03FBB82AFB11EA8DF37D55C4F9AE02/tpVKYo70-TShCnBay8uQbtYQSAw.mft Manifest number: 0BA2 Signing time: Fri 08 Aug 2025 19:13:45 +0000 Manifest this update: Fri 08 Aug 2025 19:13:45 +0000 Manifest next update: Fri 15 Aug 2025 19:13:45 +0000 Files and hashes: 1: tpVKYo70-TShCnBay8uQbtYQSAw.crl (hash: pAje5Ygttfjdl53T1Yhmjz5eTAljqSXcaFU/0NU1UEA=) 2: 5E117DC82AFC11EAB5FEC955C4F9AE02.roa (hash: FLXDHzghX+xgCtsrZgeGezVp6qrYExOvwRgCUG3oquw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DE43E/CC03FBB82AFB11EA8DF37D55C4F9AE02/tpVKYo70-TShCnBay8uQbtYQSAw.crl rsync://rpki.apnic.net/member_repository/A91DE43E/CC03FBB82AFB11EA8DF37D55C4F9AE02/tpVKYo70-TShCnBay8uQbtYQSAw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tpVKYo70-TShCnBay8uQbtYQSAw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2984 (0xba8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DE43E, serialNumber=B6954A628EF4F934A10A705ACBCB906ED610480C Validity Not Before: Aug 8 19:13:45 2025 GMT Not After : Aug 15 19:13:45 2025 GMT Subject: CN=68964c69-3603 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:59:49:42:47:bf:52:d5:74:74:c9:ff:7e:93: f6:cc:de:72:82:d4:38:e4:d5:95:81:99:ed:26:c1: 97:36:62:df:2d:06:b8:36:8c:3e:3f:00:95:61:d9: 42:ca:be:35:ac:d3:6a:56:81:9f:65:a8:22:cd:51: b2:90:57:0f:2d:33:6a:75:44:da:30:58:65:45:6f: a7:87:79:fd:86:1e:24:46:4f:7c:a1:eb:f7:b5:bf: 38:70:25:46:c8:1f:b2:1c:c5:b1:ee:94:5b:eb:42: 1d:2e:bb:2c:4e:df:11:ab:01:da:ff:7f:85:af:4b: 27:c0:c8:9d:24:28:36:d5:89:9c:48:cf:b0:f9:4e: fd:07:c1:d5:b1:e7:1d:0a:60:2e:9f:e5:02:31:0d: b2:09:af:77:5e:64:f1:a2:ed:e8:b0:1d:7a:59:d7: e4:2c:f0:8e:c4:95:0b:cf:94:da:b0:ce:62:72:1f: ee:27:b2:b0:a0:ac:cc:8e:69:0d:fc:58:99:8e:9e: 97:9e:87:26:f0:94:78:cf:4e:af:1b:37:0e:78:1c: 8d:2b:cc:71:50:b9:d7:df:98:25:78:11:0d:60:a4: ce:1f:0e:fa:a6:a7:dc:df:37:e7:a2:35:03:18:d8: 09:57:28:5a:5f:4b:58:68:5e:41:74:62:bc:ef:72: 71:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:92:62:45:D3:EA:3D:AA:1C:1B:87:EF:A3:D9:D3:E7:CC:D6:C1:27 X509v3 Authority Key Identifier: keyid:B6:95:4A:62:8E:F4:F9:34:A1:0A:70:5A:CB:CB:90:6E:D6:10:48:0C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DE43E/CC03FBB82AFB11EA8DF37D55C4F9AE02/tpVKYo70-TShCnBay8uQbtYQSAw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tpVKYo70-TShCnBay8uQbtYQSAw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DE43E/CC03FBB82AFB11EA8DF37D55C4F9AE02/tpVKYo70-TShCnBay8uQbtYQSAw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption d4:41:26:96:b0:c7:51:b9:9d:1e:1b:10:68:38:a8:1a:45:2f: 36:b0:9a:f5:b2:94:33:1c:37:54:57:5d:d7:de:2f:c7:ea:8f: d0:1f:1d:3a:e9:df:05:4c:61:bf:28:1e:03:0e:55:0b:3f:15: fd:a5:46:8a:86:cc:b5:dd:15:d0:cc:03:85:43:d7:7d:e2:1a: c3:44:4a:09:9f:e4:f5:7f:f3:a9:2e:ca:b8:6f:61:27:dc:78: 16:7d:f6:40:75:f1:ff:fd:8b:76:31:c5:75:dc:59:0a:ff:88: e9:fe:cf:5a:73:8a:a2:86:e0:29:ad:28:e6:2e:f1:29:d7:c0: 94:d0:66:16:75:d3:4c:80:c0:a9:10:10:63:99:f6:8f:94:d8: bc:4e:7d:1c:24:e1:ec:b6:06:36:b4:c0:88:01:90:72:c2:9f: a3:50:08:e5:44:d3:81:62:13:0f:a6:fd:9c:dc:2c:ad:71:9e: 74:6d:b9:2a:2d:93:62:78:d7:23:18:74:d2:9d:15:b4:a2:17: b0:d5:0c:d9:1d:9e:07:57:18:63:15:53:9b:7b:8c:b3:e5:c9: 00:e3:15:c8:18:2f:4e:39:75:0b:6d:65:9d:14:09:cd:be:f0: 53:fd:88:2c:ce:2d:fe:4f:9b:df:ae:84:0d:25:4c:d9:1b:76: 58:a0:e9:4b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC6gwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REU0M0UxMTAvBgNVBAUTKEI2OTU0QTYyOEVGNEY5MzRBMTBBNzA1QUNCQ0I5MDZF RDYxMDQ4MEMwHhcNMjUwODA4MTkxMzQ1WhcNMjUwODE1MTkxMzQ1WjAYMRYwFAYD VQQDEw02ODk2NGM2OS0zNjAzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1llJQke/UtV0dMn/fpP2zN5ygtQ45NWVgZntJsGXNmLfLQa4Now+PwCVYdlC yr41rNNqVoGfZagizVGykFcPLTNqdUTaMFhlRW+nh3n9hh4kRk98oev3tb84cCVG yB+yHMWx7pRb60IdLrssTt8RqwHa/3+Fr0snwMidJCg21YmcSM+w+U79B8HVsecd CmAun+UCMQ2yCa93XmTxou3osB16WdfkLPCOxJULz5TasM5ich/uJ7KwoKzMjmkN /FiZjp6Xnocm8JR4z06vGzcOeByNK8xxULnX35gleBENYKTOHw76pqfc3zfnojUD GNgJVyhaX0tYaF5BdGK873JxXQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLGSYkXT 6j2qHBuH76PZ0+fM1sEnMB8GA1UdIwQYMBaAFLaVSmKO9Pk0oQpwWsvLkG7WEEgM MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERTQzRS9DQzAzRkJCODJB RkIxMUVBOERGMzdENTVDNEY5QUUwMi90cFZLWW83MC1UU2hDbkJheTh1UWJ0WVFT QXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RwVktZbzcwLVRTaENuQmF5OHVRYnRZUVNBdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RTQzRS9DQzAzRkJCODJBRkIxMUVBOERGMzdENTVDNEY5QUUwMi90cFZLWW83MC1U U2hDbkJheTh1UWJ0WVFTQXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDUQSaWsMdRuZ0eGxBoOKgaRS82sJr1spQzHDdUV13X3i/H6o/QHx06 6d8FTGG/KB4DDlULPxX9pUaKhsy13RXQzAOFQ9d94hrDREoJn+T1f/OpLsq4b2En 3HgWffZAdfH//Yt2McV13FkK/4jp/s9ac4qihuAprSjmLvEp18CU0GYWddNMgMCp EBBjmfaPlNi8Tn0cJOHstgY2tMCIAZBywp+jUAjlRNOBYhMPpv2c3CytcZ50bbkq LZNieNcjGHTSnRW0ohew1QzZHZ4HVxhjFVObe4yz5ckA4xXIGC9OOXULbWWdFAnN vvBT/Ygszi3+T5vfroQNJUzZG3ZYoOlL -----END CERTIFICATE-----Generated at Sat Aug 9 15:06:41 2025 by rpki-client