$ rpki-client -vvf rpki.apnic.net/member_repository/A91F4B25/B21A57289F9211E49DEFE216C4F9AE02/tivfdMEzlCu-93dUx6DlOGY4Mgg.mft File: tivfdMEzlCu-93dUx6DlOGY4Mgg.mft (raw, json) Hash identifier: 8cUXhXSU1JlVWoSVoBLGM5wShHlk4WlOxvwnRuuX8lg= Subject key identifier: 86:AD:9A:FB:C5:E1:F1:EA:55:D5:1E:A0:D1:89:69:3B:7C:5B:36:E5 Authority key identifier: B6:2B:DF:74:C1:33:94:2B:BE:F7:77:54:C7:A0:E5:38:66:38:32:08 Certificate issuer: /CN=A91F4B25/serialNumber=B62BDF74C133942BBEF77754C7A0E53866383208 Certificate serial: 281B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tivfdMEzlCu-93dUx6DlOGY4Mgg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F4B25/B21A57289F9211E49DEFE216C4F9AE02/tivfdMEzlCu-93dUx6DlOGY4Mgg.mft Manifest number: 2805 Signing time: Sun 24 Aug 2025 15:34:31 +0000 Manifest this update: Sun 24 Aug 2025 15:34:31 +0000 Manifest next update: Sun 31 Aug 2025 15:34:31 +0000 Files and hashes: 1: tivfdMEzlCu-93dUx6DlOGY4Mgg.crl (hash: kPianOr5qjSC/5XMDMdzAb3PUoKzkr310NoCizWkqlE=) 2: 989C920254F311E7AC64ED3AC4F9AE02.roa (hash: stlk/NCVaUze0Kt4ZoUXV3LV+N07Axo1/0xiMb9KtSw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F4B25/B21A57289F9211E49DEFE216C4F9AE02/tivfdMEzlCu-93dUx6DlOGY4Mgg.crl rsync://rpki.apnic.net/member_repository/A91F4B25/B21A57289F9211E49DEFE216C4F9AE02/tivfdMEzlCu-93dUx6DlOGY4Mgg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tivfdMEzlCu-93dUx6DlOGY4Mgg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 31 Aug 2025 15:34:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10267 (0x281b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F4B25, serialNumber=B62BDF74C133942BBEF77754C7A0E53866383208 Validity Not Before: Aug 24 15:34:31 2025 GMT Not After : Aug 31 15:34:31 2025 GMT Subject: CN=68ab3107-a023 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:a4:e2:de:ed:b2:6d:ec:ce:6a:ef:2c:9d:d0: 7f:3d:62:e4:86:6e:96:4e:d3:fb:d1:50:90:62:ac: 22:02:77:ae:7f:74:d9:b2:36:84:dd:37:09:49:c1: 5e:a7:af:56:85:03:e1:a0:3b:8a:81:5b:b6:f3:ae: fb:b2:e5:b0:3d:8d:25:55:f7:41:ec:d7:1c:37:e1: f6:84:e0:4a:06:ff:b6:b2:50:d6:d9:64:c4:96:ed: 52:4b:ab:77:fe:f4:3b:a0:35:ac:90:08:03:7b:b8: 3c:d2:c4:38:ce:e2:11:a1:93:e8:4b:0e:01:48:c9: ff:8c:8b:0b:78:87:9e:d1:74:f0:48:fd:4b:0b:c0: 5e:33:83:52:65:26:a3:bf:01:f8:be:e4:2e:28:4c: b9:1d:13:73:a2:aa:f1:8f:e1:a2:f7:a9:9a:1d:76: ed:26:a0:85:d4:7a:56:0f:a2:2d:c1:a7:a7:63:de: ab:b6:2c:42:6e:10:cd:6c:cf:17:d3:35:7b:be:8b: af:b3:2a:fe:61:36:4e:6b:bc:d7:62:2c:b0:4c:a4: 71:74:7b:52:dd:96:90:68:f1:52:f4:b8:13:02:a4: 3d:79:ac:0e:b4:ea:c3:28:2e:8c:06:17:16:f9:6b: e4:93:33:7c:56:60:47:0e:ad:93:57:00:64:3e:bb: 36:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:AD:9A:FB:C5:E1:F1:EA:55:D5:1E:A0:D1:89:69:3B:7C:5B:36:E5 X509v3 Authority Key Identifier: keyid:B6:2B:DF:74:C1:33:94:2B:BE:F7:77:54:C7:A0:E5:38:66:38:32:08 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F4B25/B21A57289F9211E49DEFE216C4F9AE02/tivfdMEzlCu-93dUx6DlOGY4Mgg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tivfdMEzlCu-93dUx6DlOGY4Mgg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F4B25/B21A57289F9211E49DEFE216C4F9AE02/tivfdMEzlCu-93dUx6DlOGY4Mgg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 88:d4:bc:b9:03:bd:11:9b:a0:38:08:c2:5c:b3:9a:47:8d:d8: 8f:a3:9f:1a:c0:a4:27:f8:58:0b:d7:a2:f8:39:df:83:6f:20: 2f:b9:6e:17:ae:62:3b:0b:33:8f:d6:08:17:20:a8:3b:ad:dd: ba:6f:c4:d7:d1:1d:d5:08:2e:73:d9:5b:9e:6c:69:94:bb:0a: 18:61:92:26:3a:d6:5e:a7:06:91:35:c9:90:d2:53:d6:ad:95: 99:27:44:4c:d8:2d:6d:34:63:72:01:9c:86:40:00:41:60:c7: 6a:59:63:23:32:43:74:c6:93:b9:d7:25:64:5d:db:79:46:04: a9:d1:ef:1e:e4:f4:11:40:c1:36:bd:cf:ce:e3:e4:db:36:06: 4b:af:15:07:a7:bb:90:79:78:10:9c:f2:6e:d1:e1:66:a5:b3: 44:ff:44:8a:75:1f:fb:14:92:90:f9:2f:f5:50:e1:4c:86:c1: 45:4a:be:6a:7a:76:43:22:af:ff:3a:89:51:20:1a:72:e5:6e: c7:15:9a:8d:c9:5e:d2:ca:12:33:a6:bb:bf:09:14:84:31:eb: 95:a7:1e:37:da:7c:1d:30:05:33:1a:48:f2:95:fb:51:5f:81: b6:d3:1f:30:e6:1a:13:3d:fc:73:c2:8f:30:10:56:d0:47:5e: 12:81:fb:03 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICKBswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjRCMjUxMTAvBgNVBAUTKEI2MkJERjc0QzEzMzk0MkJCRUY3Nzc1NEM3QTBFNTM4 NjYzODMyMDgwHhcNMjUwODI0MTUzNDMxWhcNMjUwODMxMTUzNDMxWjAYMRYwFAYD VQQDEw02OGFiMzEwNy1hMDIzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu6Ti3u2ybezOau8sndB/PWLkhm6WTtP70VCQYqwiAneuf3TZsjaE3TcJScFe p69WhQPhoDuKgVu28677suWwPY0lVfdB7NccN+H2hOBKBv+2slDW2WTElu1SS6t3 /vQ7oDWskAgDe7g80sQ4zuIRoZPoSw4BSMn/jIsLeIee0XTwSP1LC8BeM4NSZSaj vwH4vuQuKEy5HRNzoqrxj+Gi96maHXbtJqCF1HpWD6ItwaenY96rtixCbhDNbM8X 0zV7vouvsyr+YTZOa7zXYiywTKRxdHtS3ZaQaPFS9LgTAqQ9eawOtOrDKC6MBhcW +WvkkzN8VmBHDq2TVwBkPrs2wwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIatmvvF 4fHqVdUeoNGJaTt8WzblMB8GA1UdIwQYMBaAFLYr33TBM5Qrvvd3VMeg5ThmODII MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNEIyNS9CMjFBNTcyODlG OTIxMUU0OURFRkUyMTZDNEY5QUUwMi90aXZmZE1FemxDdS05M2RVeDZEbE9HWTRN Z2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RpdmZkTUV6bEN1LTkzZFV4NkRsT0dZNE1nZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NEIyNS9CMjFBNTcyODlGOTIxMUU0OURFRkUyMTZDNEY5QUUwMi90aXZmZE1FemxD dS05M2RVeDZEbE9HWTRNZ2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCI1Ly5A70Rm6A4CMJcs5pHjdiPo58awKQn+FgL16L4Od+DbyAvuW4X rmI7CzOP1ggXIKg7rd26b8TX0R3VCC5z2VuebGmUuwoYYZImOtZepwaRNcmQ0lPW rZWZJ0RM2C1tNGNyAZyGQABBYMdqWWMjMkN0xpO51yVkXdt5RgSp0e8e5PQRQME2 vc/O4+TbNgZLrxUHp7uQeXgQnPJu0eFmpbNE/0SKdR/7FJKQ+S/1UOFMhsFFSr5q enZDIq//OolRIBpy5W7HFZqNyV7SyhIzpru/CRSEMeuVpx432nwdMAUzGkjylftR X4G20x8w5hoTPfxzwo8wEFbQR14SgfsD -----END CERTIFICATE-----Generated at Sun Aug 24 22:23:15 2025 by rpki-client