$ rpki-client -vvf rpki.apnic.net/member_repository/A91F4B25/B21A57289F9211E49DEFE216C4F9AE02/tivfdMEzlCu-93dUx6DlOGY4Mgg.mft File: tivfdMEzlCu-93dUx6DlOGY4Mgg.mft (raw, json) Hash identifier: 60BV0UvIjhbczyVS6kGF/WTJW9+5gz7cILyt24PyOu8= Subject key identifier: 6B:2F:A0:F1:82:2C:FA:B8:C2:15:C2:D3:7F:FE:03:CE:BE:17:B7:ED Authority key identifier: B6:2B:DF:74:C1:33:94:2B:BE:F7:77:54:C7:A0:E5:38:66:38:32:08 Certificate issuer: /CN=A91F4B25/serialNumber=B62BDF74C133942BBEF77754C7A0E53866383208 Certificate serial: 27F3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tivfdMEzlCu-93dUx6DlOGY4Mgg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F4B25/B21A57289F9211E49DEFE216C4F9AE02/tivfdMEzlCu-93dUx6DlOGY4Mgg.mft Manifest number: 27DD Signing time: Fri 06 Jun 2025 15:41:08 +0000 Manifest this update: Fri 06 Jun 2025 15:41:07 +0000 Manifest next update: Fri 13 Jun 2025 15:41:07 +0000 Files and hashes: 1: tivfdMEzlCu-93dUx6DlOGY4Mgg.crl (hash: WuKxcVmEjxzvKsHyQhM64lOC1MYP7JYIp7h40Yxg5rs=) 2: 989C920254F311E7AC64ED3AC4F9AE02.roa (hash: stlk/NCVaUze0Kt4ZoUXV3LV+N07Axo1/0xiMb9KtSw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F4B25/B21A57289F9211E49DEFE216C4F9AE02/tivfdMEzlCu-93dUx6DlOGY4Mgg.crl rsync://rpki.apnic.net/member_repository/A91F4B25/B21A57289F9211E49DEFE216C4F9AE02/tivfdMEzlCu-93dUx6DlOGY4Mgg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tivfdMEzlCu-93dUx6DlOGY4Mgg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 13 Jun 2025 15:41:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10227 (0x27f3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F4B25, serialNumber=B62BDF74C133942BBEF77754C7A0E53866383208 Validity Not Before: Jun 6 15:41:07 2025 GMT Not After : Jun 13 15:41:07 2025 GMT Subject: CN=68430c13-230e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:ff:6e:8c:94:29:c5:77:fd:0a:ef:e8:dd:ef: 2f:81:f8:af:bf:5d:8c:47:ce:95:cc:8e:35:17:26: 43:63:aa:ab:c6:b2:1c:12:38:97:1f:33:62:c9:4a: 2a:81:6f:a8:d8:ad:05:61:11:d1:1d:9c:f8:1e:45: 58:9f:08:da:21:eb:83:a9:df:9a:d9:9e:26:22:56: 92:c1:0e:21:54:3f:31:95:d2:f9:d3:03:64:fb:70: 60:75:4c:a4:98:22:96:02:51:61:e6:a0:56:81:95: 2e:42:69:53:87:b6:f7:ed:19:3a:7e:98:fa:75:c7: ef:86:97:b3:e4:04:b6:47:60:2a:f2:b4:11:8b:6a: f7:07:c8:ab:47:e0:71:03:12:30:c5:c9:9f:b0:e7: 2b:75:d0:fd:32:90:28:b6:7f:ab:ed:65:90:49:da: 08:9b:2e:c8:4e:d6:df:e3:1f:d5:82:8d:cf:9c:34: e3:31:74:89:32:fe:90:4c:30:a0:ad:9d:b4:ba:8e: f5:f9:c8:7d:02:4d:1d:b5:6a:e8:04:0c:af:50:18: 32:3c:98:32:94:9f:12:3d:92:96:bd:3d:0a:c9:83: 67:1c:48:4d:f7:6d:d9:84:dc:cc:f3:a5:e2:73:0e: ef:8d:7f:ce:17:87:c6:f0:ed:56:70:e1:cc:fd:cf: d1:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:2F:A0:F1:82:2C:FA:B8:C2:15:C2:D3:7F:FE:03:CE:BE:17:B7:ED X509v3 Authority Key Identifier: keyid:B6:2B:DF:74:C1:33:94:2B:BE:F7:77:54:C7:A0:E5:38:66:38:32:08 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F4B25/B21A57289F9211E49DEFE216C4F9AE02/tivfdMEzlCu-93dUx6DlOGY4Mgg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tivfdMEzlCu-93dUx6DlOGY4Mgg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F4B25/B21A57289F9211E49DEFE216C4F9AE02/tivfdMEzlCu-93dUx6DlOGY4Mgg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption bd:5d:ac:48:33:56:d4:a6:98:cf:7b:0e:8d:35:0c:0d:ae:01: 76:8d:65:93:a8:ae:1d:53:7c:dd:e2:e4:3a:af:b9:20:32:f4: db:66:f9:8d:ae:e9:6c:9d:00:bd:bf:69:60:41:2f:9f:56:b6: e5:04:4e:17:a6:9a:c9:5e:03:fd:f2:b9:54:4c:19:49:ac:42: 4c:e5:b0:d4:04:9c:38:95:bb:7e:10:61:4a:ff:64:9d:0b:01: 9d:dc:20:51:df:6a:a6:8a:d6:29:3e:6e:a7:e1:40:a8:81:55: 56:a9:19:70:02:3b:67:99:63:4c:ea:80:50:35:5f:5b:9b:d7: f1:5e:11:23:5b:93:05:c1:aa:6b:64:88:d6:4c:02:0c:48:f7: d5:5f:db:0e:b5:34:b1:04:15:b0:15:1f:aa:3a:c7:21:f3:02: 4e:44:82:0a:fe:46:d1:cb:3c:f5:a5:4f:f7:75:11:d0:a8:aa: dc:19:ac:b2:25:72:2c:cf:93:67:42:c7:72:8d:d6:2e:f4:39: ba:c7:4c:4d:77:0a:24:df:7c:d0:1d:f8:0c:6a:d4:ea:ca:65: 63:8f:55:3e:31:45:b9:26:f5:8f:53:45:c5:16:71:5f:15:19: 03:aa:fa:18:4c:49:07:74:0b:12:a1:c1:ca:40:78:f8:7f:06: 7c:78:0e:b6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICJ/MwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjRCMjUxMTAvBgNVBAUTKEI2MkJERjc0QzEzMzk0MkJCRUY3Nzc1NEM3QTBFNTM4 NjYzODMyMDgwHhcNMjUwNjA2MTU0MTA3WhcNMjUwNjEzMTU0MTA3WjAYMRYwFAYD VQQDEw02ODQzMGMxMy0yMzBlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApv9ujJQpxXf9Cu/o3e8vgfivv12MR86VzI41FyZDY6qrxrIcEjiXHzNiyUoq gW+o2K0FYRHRHZz4HkVYnwjaIeuDqd+a2Z4mIlaSwQ4hVD8xldL50wNk+3BgdUyk mCKWAlFh5qBWgZUuQmlTh7b37Rk6fpj6dcfvhpez5AS2R2Aq8rQRi2r3B8irR+Bx AxIwxcmfsOcrddD9MpAotn+r7WWQSdoImy7ITtbf4x/Vgo3PnDTjMXSJMv6QTDCg rZ20uo71+ch9Ak0dtWroBAyvUBgyPJgylJ8SPZKWvT0KyYNnHEhN923ZhNzM86Xi cw7vjX/OF4fG8O1WcOHM/c/RVQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGsvoPGC LPq4whXC03/+A86+F7ftMB8GA1UdIwQYMBaAFLYr33TBM5Qrvvd3VMeg5ThmODII MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNEIyNS9CMjFBNTcyODlG OTIxMUU0OURFRkUyMTZDNEY5QUUwMi90aXZmZE1FemxDdS05M2RVeDZEbE9HWTRN Z2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RpdmZkTUV6bEN1LTkzZFV4NkRsT0dZNE1nZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NEIyNS9CMjFBNTcyODlGOTIxMUU0OURFRkUyMTZDNEY5QUUwMi90aXZmZE1FemxD dS05M2RVeDZEbE9HWTRNZ2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC9XaxIM1bUppjPew6NNQwNrgF2jWWTqK4dU3zd4uQ6r7kgMvTbZvmN rulsnQC9v2lgQS+fVrblBE4XpprJXgP98rlUTBlJrEJM5bDUBJw4lbt+EGFK/2Sd CwGd3CBR32qmitYpPm6n4UCogVVWqRlwAjtnmWNM6oBQNV9bm9fxXhEjW5MFwapr ZIjWTAIMSPfVX9sOtTSxBBWwFR+qOsch8wJORIIK/kbRyzz1pU/3dRHQqKrcGayy JXIsz5NnQsdyjdYu9Dm6x0xNdwok33zQHfgMatTqymVjj1U+MUW5JvWPU0XFFnFf FRkDqvoYTEkHdAsSocHKQHj4fwZ8eA62 -----END CERTIFICATE-----Generated at Sat Jun 7 07:01:22 2025 by rpki-client