$ rpki-client -vvf rpki.apnic.net/member_repository/A912147F/161AABEC1CF711EAAD664532C4F9AE02/tveX2E8uSbi7MiIGt5RtJ5GMoWQ.mft File: tveX2E8uSbi7MiIGt5RtJ5GMoWQ.mft (raw, json) Hash identifier: +DOdEtTuvoyLE+9bwhDL/F/7TLNE6Dy+APZHCjg1uTc= Subject key identifier: FA:9D:22:4C:F6:B3:27:81:81:3F:5B:CD:99:85:95:A0:0C:BF:9B:EE Authority key identifier: B6:F7:97:D8:4F:2E:49:B8:BB:32:22:06:B7:94:6D:27:91:8C:A1:64 Certificate issuer: /CN=A912147F/serialNumber=B6F797D84F2E49B8BB322206B7946D27918CA164 Certificate serial: 0BFD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tveX2E8uSbi7MiIGt5RtJ5GMoWQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912147F/161AABEC1CF711EAAD664532C4F9AE02/tveX2E8uSbi7MiIGt5RtJ5GMoWQ.mft Manifest number: 0BED Signing time: Fri 18 Jul 2025 19:01:12 +0000 Manifest this update: Fri 18 Jul 2025 19:01:12 +0000 Manifest next update: Fri 25 Jul 2025 19:01:12 +0000 Files and hashes: 1: tveX2E8uSbi7MiIGt5RtJ5GMoWQ.crl (hash: z6qfTVXtI2vuIzbKjkScXCQgJLfAnuRvIx0fbUNLIiw=) 2: F648238E766911EC9EADC512C4F9AE02.roa (hash: cXtJZrxFT7iK9u3HHySRT4oRhzJJpyziBzdACacCcms=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912147F/161AABEC1CF711EAAD664532C4F9AE02/tveX2E8uSbi7MiIGt5RtJ5GMoWQ.crl rsync://rpki.apnic.net/member_repository/A912147F/161AABEC1CF711EAAD664532C4F9AE02/tveX2E8uSbi7MiIGt5RtJ5GMoWQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tveX2E8uSbi7MiIGt5RtJ5GMoWQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Jul 2025 19:01:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3069 (0xbfd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912147F, serialNumber=B6F797D84F2E49B8BB322206B7946D27918CA164 Validity Not Before: Jul 18 19:01:12 2025 GMT Not After : Jul 25 19:01:12 2025 GMT Subject: CN=687a99f8-b660 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:64:90:e5:51:3c:19:cb:37:bb:ba:99:18:4d: a8:68:bd:04:5a:7a:6d:40:33:0f:a9:98:1c:7c:41: 7a:4c:1c:a8:18:f6:86:a7:13:f8:72:9f:94:ac:94: 19:5a:be:c6:4b:97:a3:5a:3e:85:28:c9:34:ee:16: 57:a4:38:fb:2e:85:e2:1e:30:e0:f0:c1:18:68:42: 7f:7d:95:f2:01:97:98:f3:06:38:b1:fd:cd:89:4e: fa:24:31:d4:0d:b6:eb:99:f1:85:ed:91:b3:23:38: d1:f6:12:f2:49:88:c2:fc:4f:ba:38:c1:af:81:51: 2b:79:36:dc:14:a7:24:ec:c6:e7:4e:1f:76:d5:a9: 28:96:3b:64:af:3f:c4:05:4d:99:cb:61:25:cb:e9: 86:6c:98:06:2e:ce:34:a7:c7:88:f5:81:8b:6a:1a: c9:1c:79:3c:a3:0e:a0:af:7e:df:2d:bc:cd:06:e7: f9:17:d3:e6:71:15:ed:1f:16:df:70:25:d1:3c:70: 73:7a:1a:8b:c8:b1:56:f3:e4:a6:f0:9a:12:9e:42: 32:fa:52:5a:f8:96:5b:f2:af:d5:e8:e5:ba:0b:4a: b6:7c:0c:b8:bb:b4:55:0b:6f:5b:77:ab:84:26:8a: e2:34:cc:9d:f4:55:2d:df:0b:62:38:fd:2e:71:40: e3:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:9D:22:4C:F6:B3:27:81:81:3F:5B:CD:99:85:95:A0:0C:BF:9B:EE X509v3 Authority Key Identifier: keyid:B6:F7:97:D8:4F:2E:49:B8:BB:32:22:06:B7:94:6D:27:91:8C:A1:64 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912147F/161AABEC1CF711EAAD664532C4F9AE02/tveX2E8uSbi7MiIGt5RtJ5GMoWQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tveX2E8uSbi7MiIGt5RtJ5GMoWQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912147F/161AABEC1CF711EAAD664532C4F9AE02/tveX2E8uSbi7MiIGt5RtJ5GMoWQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 29:97:3b:25:5d:cb:63:40:34:2d:38:fb:06:e2:00:16:bd:cd: 1b:9a:df:b8:b5:5c:38:72:0d:81:e4:7f:f3:74:77:0e:88:f2: 9c:79:fd:14:a7:21:6f:7d:5b:6a:48:d5:41:0c:96:cc:6e:4b: 9e:31:aa:b3:39:cc:6b:23:28:63:21:34:e6:e9:9b:a3:72:2c: ab:b3:b8:44:ae:ac:89:9b:c3:92:1a:6f:6d:56:01:5f:d2:0e: f1:f5:b2:96:74:b0:62:22:23:d1:f0:92:30:26:0a:d2:3e:80: 20:ef:2a:74:ba:d6:88:f6:73:88:a5:99:83:c3:7d:18:f9:4d: 7e:15:85:3d:10:95:03:3a:ca:cd:e1:0e:9a:3c:ad:f1:da:8a: 09:09:ed:8b:da:c5:89:db:07:f8:18:6a:84:ea:fc:67:14:fd: 4d:47:8f:c9:56:91:c2:38:6e:a6:c2:a9:b5:0b:af:f1:18:11: 2b:4f:4c:7c:c2:92:f2:a8:52:0c:14:d3:cf:ba:64:1c:b7:61: cb:71:38:ee:a0:62:8d:9a:f7:b9:dc:31:4d:b5:5f:80:64:d9: f9:63:a7:bd:10:e0:54:af:39:11:e5:aa:6a:a2:95:f5:ae:bf: 76:a7:86:6a:03:e7:bf:e4:23:dc:cd:17:3c:f9:ce:6e:76:c7: 87:44:cd:bc -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC/0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjE0N0YxMTAvBgNVBAUTKEI2Rjc5N0Q4NEYyRTQ5QjhCQjMyMjIwNkI3OTQ2RDI3 OTE4Q0ExNjQwHhcNMjUwNzE4MTkwMTEyWhcNMjUwNzI1MTkwMTEyWjAYMRYwFAYD VQQDEw02ODdhOTlmOC1iNjYwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu2SQ5VE8Gcs3u7qZGE2oaL0EWnptQDMPqZgcfEF6TByoGPaGpxP4cp+UrJQZ Wr7GS5ejWj6FKMk07hZXpDj7LoXiHjDg8MEYaEJ/fZXyAZeY8wY4sf3NiU76JDHU DbbrmfGF7ZGzIzjR9hLySYjC/E+6OMGvgVEreTbcFKck7MbnTh921akoljtkrz/E BU2Zy2Ely+mGbJgGLs40p8eI9YGLahrJHHk8ow6gr37fLbzNBuf5F9PmcRXtHxbf cCXRPHBzehqLyLFW8+Sm8JoSnkIy+lJa+JZb8q/V6OW6C0q2fAy4u7RVC29bd6uE JoriNMyd9FUt3wtiOP0ucUDj9wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPqdIkz2 syeBgT9bzZmFlaAMv5vuMB8GA1UdIwQYMBaAFLb3l9hPLkm4uzIiBreUbSeRjKFk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMTQ3Ri8xNjFBQUJFQzFD RjcxMUVBQUQ2NjQ1MzJDNEY5QUUwMi90dmVYMkU4dVNiaTdNaUlHdDVSdEo1R01v V1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3R2ZVgyRTh1U2JpN01pSUd0NVJ0SjVHTW9XUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MTQ3Ri8xNjFBQUJFQzFDRjcxMUVBQUQ2NjQ1MzJDNEY5QUUwMi90dmVYMkU4dVNi aTdNaUlHdDVSdEo1R01vV1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAplzslXctjQDQtOPsG4gAWvc0bmt+4tVw4cg2B5H/zdHcOiPKcef0U pyFvfVtqSNVBDJbMbkueMaqzOcxrIyhjITTm6Zujciyrs7hErqyJm8OSGm9tVgFf 0g7x9bKWdLBiIiPR8JIwJgrSPoAg7yp0utaI9nOIpZmDw30Y+U1+FYU9EJUDOsrN 4Q6aPK3x2ooJCe2L2sWJ2wf4GGqE6vxnFP1NR4/JVpHCOG6mwqm1C6/xGBErT0x8 wpLyqFIMFNPPumQct2HLcTjuoGKNmve53DFNtV+AZNn5Y6e9EOBUrzkR5apqopX1 rr92p4ZqA+e/5CPczRc8+c5udseHRM28 -----END CERTIFICATE-----Generated at Sun Jul 20 07:51:59 2025 by rpki-client