$ rpki-client -vvf rpki.apnic.net/member_repository/A91F4B25/B21A57289F9211E49DEFE216C4F9AE02/tivfdMEzlCu-93dUx6DlOGY4Mgg.mft File: tivfdMEzlCu-93dUx6DlOGY4Mgg.mft (raw, json) Hash identifier: C21WsAW2EhjPVxOAJWhDudEBFcvwyzttJjBJd7xQOL4= Subject key identifier: AA:A1:D9:F5:41:47:58:29:99:31:2E:DD:1C:B7:25:37:D4:C5:FE:2C Authority key identifier: B6:2B:DF:74:C1:33:94:2B:BE:F7:77:54:C7:A0:E5:38:66:38:32:08 Certificate issuer: /CN=A91F4B25/serialNumber=B62BDF74C133942BBEF77754C7A0E53866383208 Certificate serial: 2841 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tivfdMEzlCu-93dUx6DlOGY4Mgg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F4B25/B21A57289F9211E49DEFE216C4F9AE02/tivfdMEzlCu-93dUx6DlOGY4Mgg.mft Manifest number: 282A Signing time: Sun 02 Nov 2025 15:35:52 +0000 Manifest this update: Sun 02 Nov 2025 15:35:52 +0000 Manifest next update: Sun 09 Nov 2025 15:35:52 +0000 Files and hashes: 1: tivfdMEzlCu-93dUx6DlOGY4Mgg.crl (hash: 3oalpNFt0198T/huOphOdHDieUg3l9K8Zg+tXNYiBDA=) 2: 989C920254F311E7AC64ED3AC4F9AE02.roa (hash: stlk/NCVaUze0Kt4ZoUXV3LV+N07Axo1/0xiMb9KtSw=) 3: 1149FE16984211F0B5591074C4F9AE02.roa (hash: fl8kEHK67RQKryz0U9mrmcAk8nUhjCtO9JFUbRGLeN0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F4B25/B21A57289F9211E49DEFE216C4F9AE02/tivfdMEzlCu-93dUx6DlOGY4Mgg.crl rsync://rpki.apnic.net/member_repository/A91F4B25/B21A57289F9211E49DEFE216C4F9AE02/tivfdMEzlCu-93dUx6DlOGY4Mgg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tivfdMEzlCu-93dUx6DlOGY4Mgg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 15:35:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10305 (0x2841) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F4B25, serialNumber=B62BDF74C133942BBEF77754C7A0E53866383208 Validity Not Before: Nov 2 15:35:52 2025 GMT Not After : Nov 9 15:35:52 2025 GMT Subject: CN=69077a58-4b03 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:02:b7:9f:54:6c:45:1d:c1:70:1e:83:fb:09: 80:c2:92:e5:1e:65:5f:a9:c1:93:21:13:dd:d6:1d: 5d:4d:c5:16:99:a9:c1:55:13:6a:80:3b:48:41:a3: 01:a3:9a:92:22:39:62:a2:e6:7c:61:8d:a9:a6:b2: 02:9f:38:7c:a7:59:67:66:62:fb:6b:2d:84:91:5b: ba:64:7b:9a:df:7a:1d:a4:b2:54:b0:9f:eb:34:4e: bd:c8:8d:5d:94:3d:aa:fb:79:60:31:4f:db:f2:55: 79:fd:fd:eb:f9:c1:7f:2d:02:20:f8:ef:c4:b8:77: e5:4f:1d:c8:2a:a0:ce:49:b4:6c:2a:60:91:aa:d0: 06:51:79:b9:7c:00:62:57:66:54:58:e3:13:53:2d: 8d:75:02:f3:d4:3f:b3:d4:43:16:28:d8:be:93:ca: 82:d2:c1:5b:6c:5a:78:f2:99:1f:bc:ee:a9:2c:e2: 95:28:9d:0c:1f:44:e4:e9:cd:04:d9:33:bc:8b:e2: 3b:1f:2d:63:4d:62:04:9c:91:a5:29:c7:89:bb:1e: 06:21:7d:92:e9:ac:3f:32:4c:47:01:cb:fe:37:61: 07:95:9e:4f:88:b6:e6:bf:d0:b0:3c:d8:65:a7:c8: f0:01:75:89:ed:0c:f9:d8:de:dc:d1:e6:06:08:fc: f1:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:A1:D9:F5:41:47:58:29:99:31:2E:DD:1C:B7:25:37:D4:C5:FE:2C X509v3 Authority Key Identifier: keyid:B6:2B:DF:74:C1:33:94:2B:BE:F7:77:54:C7:A0:E5:38:66:38:32:08 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F4B25/B21A57289F9211E49DEFE216C4F9AE02/tivfdMEzlCu-93dUx6DlOGY4Mgg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tivfdMEzlCu-93dUx6DlOGY4Mgg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F4B25/B21A57289F9211E49DEFE216C4F9AE02/tivfdMEzlCu-93dUx6DlOGY4Mgg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 43:7b:a6:a8:de:c9:fe:0e:b3:50:8d:3e:ea:47:96:34:43:4c: ba:5c:d0:51:76:77:4c:d3:c5:9f:5f:fa:32:91:c1:32:2a:8a: 8d:ae:53:e9:08:55:c1:b0:c5:59:7c:4d:48:55:93:13:38:9a: 62:b9:b0:59:58:85:82:e4:f6:e1:95:b5:b5:4a:96:11:83:85: 8b:56:2d:c2:1d:30:9e:69:6d:f0:1b:ea:14:48:db:8d:82:07: c3:0c:f2:69:ca:bd:1e:c0:f6:71:7f:bf:30:f5:73:bb:d7:17: 2b:03:96:b7:65:81:f8:5d:6f:39:3e:b8:d6:2d:31:8f:77:ce: 60:2b:b6:5f:a8:e1:1b:e8:9e:2b:1d:cf:25:ca:41:ab:0b:fc: 05:22:8c:34:87:7e:11:37:ab:74:f1:8b:f3:25:04:25:3b:5c: 65:31:5b:3d:b6:be:61:70:1b:2a:c3:46:0c:99:ac:d6:f2:b2: df:14:8b:aa:e0:ba:57:5e:50:ff:f3:7e:bb:bc:db:40:28:3b: 98:29:10:cf:79:1b:a2:53:ba:b5:d2:f8:40:bb:66:02:84:90: ca:06:33:04:55:ac:9f:5b:b4:8b:08:96:de:36:fb:86:54:e8: 86:a6:86:fa:d7:34:f9:1e:d5:fa:25:39:62:68:dd:6f:72:fb: d6:48:24:87 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICKEEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjRCMjUxMTAvBgNVBAUTKEI2MkJERjc0QzEzMzk0MkJCRUY3Nzc1NEM3QTBFNTM4 NjYzODMyMDgwHhcNMjUxMTAyMTUzNTUyWhcNMjUxMTA5MTUzNTUyWjAYMRYwFAYD VQQDEw02OTA3N2E1OC00YjAzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnQK3n1RsRR3BcB6D+wmAwpLlHmVfqcGTIRPd1h1dTcUWmanBVRNqgDtIQaMB o5qSIjliouZ8YY2pprICnzh8p1lnZmL7ay2EkVu6ZHua33odpLJUsJ/rNE69yI1d lD2q+3lgMU/b8lV5/f3r+cF/LQIg+O/EuHflTx3IKqDOSbRsKmCRqtAGUXm5fABi V2ZUWOMTUy2NdQLz1D+z1EMWKNi+k8qC0sFbbFp48pkfvO6pLOKVKJ0MH0Tk6c0E 2TO8i+I7Hy1jTWIEnJGlKceJux4GIX2S6aw/MkxHAcv+N2EHlZ5PiLbmv9CwPNhl p8jwAXWJ7Qz52N7c0eYGCPzxWwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKqh2fVB R1gpmTEu3Ry3JTfUxf4sMB8GA1UdIwQYMBaAFLYr33TBM5Qrvvd3VMeg5ThmODII MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNEIyNS9CMjFBNTcyODlG OTIxMUU0OURFRkUyMTZDNEY5QUUwMi90aXZmZE1FemxDdS05M2RVeDZEbE9HWTRN Z2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RpdmZkTUV6bEN1LTkzZFV4NkRsT0dZNE1nZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NEIyNS9CMjFBNTcyODlGOTIxMUU0OURFRkUyMTZDNEY5QUUwMi90aXZmZE1FemxD dS05M2RVeDZEbE9HWTRNZ2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBDe6ao3sn+DrNQjT7qR5Y0Q0y6XNBRdndM08WfX/oykcEyKoqNrlPp CFXBsMVZfE1IVZMTOJpiubBZWIWC5PbhlbW1SpYRg4WLVi3CHTCeaW3wG+oUSNuN ggfDDPJpyr0ewPZxf78w9XO71xcrA5a3ZYH4XW85PrjWLTGPd85gK7ZfqOEb6J4r Hc8lykGrC/wFIow0h34RN6t08YvzJQQlO1xlMVs9tr5hcBsqw0YMmazW8rLfFIuq 4LpXXlD/8367vNtAKDuYKRDPeRuiU7q10vhAu2YChJDKBjMEVayfW7SLCJbeNvuG VOiGpob61zT5HtX6JTliaN1vcvvWSCSH -----END CERTIFICATE-----Generated at Mon Nov 3 18:14:34 2025 by rpki-client