$ rpki-client -vvf rpki.apnic.net/member_repository/A912147F/161AABEC1CF711EAAD664532C4F9AE02/tveX2E8uSbi7MiIGt5RtJ5GMoWQ.mft File: tveX2E8uSbi7MiIGt5RtJ5GMoWQ.mft (raw, json) Hash identifier: qJ0nRK0Z8wpTRC29qz+ECpQfnrY1M6hE2Fn0UI88ltI= Subject key identifier: 4D:19:7D:CE:F0:AF:ED:CC:A1:8E:C3:8D:95:BE:62:12:B4:C7:09:9A Authority key identifier: B6:F7:97:D8:4F:2E:49:B8:BB:32:22:06:B7:94:6D:27:91:8C:A1:64 Certificate issuer: /CN=A912147F/serialNumber=B6F797D84F2E49B8BB322206B7946D27918CA164 Certificate serial: 0C0F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tveX2E8uSbi7MiIGt5RtJ5GMoWQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912147F/161AABEC1CF711EAAD664532C4F9AE02/tveX2E8uSbi7MiIGt5RtJ5GMoWQ.mft Manifest number: 0BFF Signing time: Fri 22 Aug 2025 18:56:24 +0000 Manifest this update: Fri 22 Aug 2025 18:56:23 +0000 Manifest next update: Fri 29 Aug 2025 18:56:23 +0000 Files and hashes: 1: tveX2E8uSbi7MiIGt5RtJ5GMoWQ.crl (hash: 8gHCJvp9IzWk28dd6xHTTV6hrigSBW8FmHu9oxJNchc=) 2: F648238E766911EC9EADC512C4F9AE02.roa (hash: cXtJZrxFT7iK9u3HHySRT4oRhzJJpyziBzdACacCcms=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912147F/161AABEC1CF711EAAD664532C4F9AE02/tveX2E8uSbi7MiIGt5RtJ5GMoWQ.crl rsync://rpki.apnic.net/member_repository/A912147F/161AABEC1CF711EAAD664532C4F9AE02/tveX2E8uSbi7MiIGt5RtJ5GMoWQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tveX2E8uSbi7MiIGt5RtJ5GMoWQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 18:56:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3087 (0xc0f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912147F, serialNumber=B6F797D84F2E49B8BB322206B7946D27918CA164 Validity Not Before: Aug 22 18:56:23 2025 GMT Not After : Aug 29 18:56:23 2025 GMT Subject: CN=68a8bd57-c61d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:aa:91:8b:74:f2:dd:30:ba:35:cf:50:ac:6d: 92:1c:45:2f:db:2c:77:71:d5:09:a1:27:f3:27:85: aa:94:7c:c9:d8:68:3c:9b:d3:f3:ae:e2:c5:f8:88: bc:37:ef:ad:d0:f8:aa:61:46:bc:43:12:b0:9b:ba: 8e:e6:ae:77:e5:3e:52:f9:8e:10:8f:4d:37:9b:25: d3:d2:cb:8a:fc:f4:02:50:40:ab:61:01:72:40:e0: 0c:3a:1c:a7:a5:25:f2:fb:30:58:60:11:8e:bf:ad: fd:e2:a9:36:4a:00:d2:d0:e0:90:05:b5:fd:f1:f2: 20:19:49:91:8e:0c:f4:e6:d9:ab:67:78:a7:26:39: 36:e0:20:3d:d4:a2:4d:1a:5a:ee:fa:d8:a8:08:3f: d2:de:8d:bb:82:d2:fb:87:f3:2d:c3:e8:ad:23:d9: 29:c6:02:1a:8e:09:98:bc:63:3c:c2:05:2d:c2:91: f3:c7:5d:72:21:6f:b3:a8:9e:dc:49:f0:5f:6a:ca: 4a:ed:dd:b8:d6:3c:e9:ef:92:4a:cf:46:38:a8:7b: 23:b1:2a:b4:4e:e6:19:77:7f:94:b3:bc:7e:7e:81: 22:ae:8c:25:66:3f:be:ea:82:c4:c6:e7:22:94:e8: 0e:48:76:48:e6:22:33:76:76:66:e0:80:51:a5:e8: 1f:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:19:7D:CE:F0:AF:ED:CC:A1:8E:C3:8D:95:BE:62:12:B4:C7:09:9A X509v3 Authority Key Identifier: keyid:B6:F7:97:D8:4F:2E:49:B8:BB:32:22:06:B7:94:6D:27:91:8C:A1:64 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912147F/161AABEC1CF711EAAD664532C4F9AE02/tveX2E8uSbi7MiIGt5RtJ5GMoWQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tveX2E8uSbi7MiIGt5RtJ5GMoWQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912147F/161AABEC1CF711EAAD664532C4F9AE02/tveX2E8uSbi7MiIGt5RtJ5GMoWQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a6:a9:09:6a:dd:e5:4e:87:2d:57:be:f5:02:90:29:d7:f7:9c: 75:4d:22:34:22:aa:de:e5:14:24:6a:b6:4b:5b:8f:9e:c1:88: 6f:71:ab:fe:52:6b:36:2a:1e:81:c2:15:a9:80:1e:86:30:00: 0b:ce:83:af:42:24:b2:c4:48:7f:a7:99:80:2a:64:a6:d2:78: 37:ef:d1:39:26:66:0b:00:c3:16:d0:37:b5:69:e0:4c:f5:73: 80:d5:85:95:e9:12:7e:38:15:00:04:51:3c:c6:cb:33:c5:a0: 68:63:19:c7:b3:db:9e:e9:73:39:76:40:9f:0e:0a:a7:58:75: d1:df:c7:cb:47:70:42:ad:23:8f:b3:73:5c:87:79:a2:db:61: 61:4d:cf:bc:49:92:64:ac:dc:59:3e:6c:2a:2b:75:cb:f0:87: b0:f6:d3:59:6b:73:a7:43:10:4d:25:6a:87:37:ea:6b:72:9b: 01:5f:c5:fb:89:35:d6:c7:0f:aa:90:2e:81:e2:dd:e4:ec:f5: 65:8a:e1:5b:3d:f0:14:54:3b:f9:29:da:8f:1b:ba:2d:e7:26: 6b:fd:82:80:72:0a:89:74:60:57:e7:11:8e:37:57:4e:d3:bb: fd:f9:e5:0e:a1:3b:8b:77:bf:ee:ed:93:d5:4e:11:1a:02:b9: 8e:20:c1:1d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDA8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjE0N0YxMTAvBgNVBAUTKEI2Rjc5N0Q4NEYyRTQ5QjhCQjMyMjIwNkI3OTQ2RDI3 OTE4Q0ExNjQwHhcNMjUwODIyMTg1NjIzWhcNMjUwODI5MTg1NjIzWjAYMRYwFAYD VQQDEw02OGE4YmQ1Ny1jNjFkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3qqRi3Ty3TC6Nc9QrG2SHEUv2yx3cdUJoSfzJ4WqlHzJ2Gg8m9PzruLF+Ii8 N++t0PiqYUa8QxKwm7qO5q535T5S+Y4Qj003myXT0suK/PQCUECrYQFyQOAMOhyn pSXy+zBYYBGOv6394qk2SgDS0OCQBbX98fIgGUmRjgz05tmrZ3inJjk24CA91KJN Glru+tioCD/S3o27gtL7h/Mtw+itI9kpxgIajgmYvGM8wgUtwpHzx11yIW+zqJ7c SfBfaspK7d241jzp75JKz0Y4qHsjsSq0TuYZd3+Us7x+foEirowlZj++6oLExuci lOgOSHZI5iIzdnZm4IBRpegfXwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFE0Zfc7w r+3MoY7DjZW+YhK0xwmaMB8GA1UdIwQYMBaAFLb3l9hPLkm4uzIiBreUbSeRjKFk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMTQ3Ri8xNjFBQUJFQzFD RjcxMUVBQUQ2NjQ1MzJDNEY5QUUwMi90dmVYMkU4dVNiaTdNaUlHdDVSdEo1R01v V1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3R2ZVgyRTh1U2JpN01pSUd0NVJ0SjVHTW9XUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MTQ3Ri8xNjFBQUJFQzFDRjcxMUVBQUQ2NjQ1MzJDNEY5QUUwMi90dmVYMkU4dVNi aTdNaUlHdDVSdEo1R01vV1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCmqQlq3eVOhy1XvvUCkCnX95x1TSI0Iqre5RQkarZLW4+ewYhvcav+ Ums2Kh6BwhWpgB6GMAALzoOvQiSyxEh/p5mAKmSm0ng379E5JmYLAMMW0De1aeBM 9XOA1YWV6RJ+OBUABFE8xsszxaBoYxnHs9ue6XM5dkCfDgqnWHXR38fLR3BCrSOP s3Nch3mi22FhTc+8SZJkrNxZPmwqK3XL8Iew9tNZa3OnQxBNJWqHN+prcpsBX8X7 iTXWxw+qkC6B4t3k7PVliuFbPfAUVDv5KdqPG7ot5yZr/YKAcgqJdGBX5xGON1dO 07v9+eUOoTuLd7/u7ZPVThEaArmOIMEd -----END CERTIFICATE-----Generated at Sun Aug 24 07:14:48 2025 by rpki-client