$ rpki-client -vvf rpki.apnic.net/member_repository/A91758EC/74D35840663011F0B9DC4E64C4F9AE02/tvsH4Dje8GyCC8bNIDUUVU1kPWg.mft File: tvsH4Dje8GyCC8bNIDUUVU1kPWg.mft (raw, json) Hash identifier: hNXOX+7MkzfKLKLRExNA37j/Hi0K/ZYZHVIxT7VPZlc= Subject key identifier: 1B:39:37:30:78:33:BD:C6:D6:33:05:A6:F2:0B:EB:04:1D:26:0C:5C Authority key identifier: B6:FB:07:E0:38:DE:F0:6C:82:0B:C6:CD:20:35:14:55:4D:64:3D:68 Certificate issuer: /CN=A91758EC/serialNumber=B6FB07E038DEF06C820BC6CD203514554D643D68 Certificate serial: 33 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tvsH4Dje8GyCC8bNIDUUVU1kPWg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91758EC/74D35840663011F0B9DC4E64C4F9AE02/tvsH4Dje8GyCC8bNIDUUVU1kPWg.mft Manifest number: 31 Signing time: Sun 19 Oct 2025 11:10:16 +0000 Manifest this update: Sun 19 Oct 2025 11:10:15 +0000 Manifest next update: Sun 26 Oct 2025 11:10:15 +0000 Files and hashes: 1: tvsH4Dje8GyCC8bNIDUUVU1kPWg.crl (hash: g7Ow7NMySriV4PDnP4ZYZ1jZX7qaY/3IJKLm6yJAqh4=) 2: F8160AD86E1C11F0A9381E85C4F9AE02.roa (hash: C6WLz8pg0rqM3qeZ+YC0BJ8jpvArrDDfO+jGLc5bHSQ=) 3: F88DC2766E1C11F0A9381E85C4F9AE02.roa (hash: i6WXTIBGM94y1QaV3vi+ZNcgxl/9nWzNVLRTa2F/avU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91758EC/74D35840663011F0B9DC4E64C4F9AE02/tvsH4Dje8GyCC8bNIDUUVU1kPWg.crl rsync://rpki.apnic.net/member_repository/A91758EC/74D35840663011F0B9DC4E64C4F9AE02/tvsH4Dje8GyCC8bNIDUUVU1kPWg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tvsH4Dje8GyCC8bNIDUUVU1kPWg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 11:10:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 51 (0x33) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91758EC, serialNumber=B6FB07E038DEF06C820BC6CD203514554D643D68 Validity Not Before: Oct 19 11:10:15 2025 GMT Not After : Oct 26 11:10:15 2025 GMT Subject: CN=68f4c718-3915 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:aa:85:eb:77:59:d3:4b:2e:0a:3c:26:b5:d4: b1:1a:c5:65:02:6e:10:8d:61:03:cd:b6:19:92:31: 2d:e3:67:c1:66:36:d1:64:59:29:4f:94:26:b3:bd: f5:e5:c8:94:d3:81:4e:70:9c:48:04:d5:dc:4e:41: 1f:19:1c:d0:b2:71:35:f5:9c:ff:08:0a:7f:08:32: 00:42:52:4b:81:d6:7c:b0:1f:e0:99:6a:79:a2:8a: 95:78:79:96:18:b7:62:76:35:8f:26:f6:e6:6b:d8: e6:4a:68:aa:73:47:58:ac:de:0b:b6:19:d6:ad:ac: 3a:5e:04:bb:94:f9:5d:6d:5f:03:e3:f1:31:1d:2c: a3:d7:bc:4a:d7:c1:aa:df:25:ba:a6:4b:e7:93:7c: e3:90:28:54:95:e6:c9:a3:53:e1:cc:5e:26:35:24: 16:f9:df:d0:22:ea:8d:b1:05:7b:36:8e:ff:00:d5: 28:51:55:29:79:d3:ee:5d:1a:a6:f9:77:b1:32:f5: 51:8a:df:cd:93:4f:66:b9:ae:89:ed:5f:0f:49:48: 8a:0c:e2:67:c2:0a:b5:ff:4b:be:6b:0b:ca:87:a9: 1a:bf:39:d9:33:64:c1:0f:80:ac:aa:4b:be:b8:c9: b6:27:dd:43:d9:06:c9:da:b5:2b:3a:c4:18:7e:41: 87:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:39:37:30:78:33:BD:C6:D6:33:05:A6:F2:0B:EB:04:1D:26:0C:5C X509v3 Authority Key Identifier: keyid:B6:FB:07:E0:38:DE:F0:6C:82:0B:C6:CD:20:35:14:55:4D:64:3D:68 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91758EC/74D35840663011F0B9DC4E64C4F9AE02/tvsH4Dje8GyCC8bNIDUUVU1kPWg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tvsH4Dje8GyCC8bNIDUUVU1kPWg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91758EC/74D35840663011F0B9DC4E64C4F9AE02/tvsH4Dje8GyCC8bNIDUUVU1kPWg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1b:ec:ab:b8:0e:af:d1:ed:98:92:b7:eb:ad:32:10:c1:13:69: 6d:c4:dc:d3:74:a4:df:4c:db:87:21:f1:20:d2:c5:38:f0:39: 0e:b4:f5:40:b8:9b:c3:26:fb:62:7b:0b:f4:93:f0:bd:27:f6: dc:1d:2a:02:eb:11:68:03:d0:d6:0a:a7:c9:05:ca:31:3a:a1: 5c:31:6a:04:d0:a3:6d:e7:b8:c1:87:be:95:14:4a:32:b3:79: 7a:a6:7a:95:9c:62:9e:59:b9:8d:4e:a6:7f:80:a5:25:d8:43: 16:8b:6d:50:ff:b4:6a:0b:44:b5:bf:75:c9:db:79:fa:42:3a: ee:a8:fa:77:a2:1c:ed:9a:6d:21:79:7e:db:3f:5c:99:6f:57: 95:8e:ae:4b:fa:c2:8f:7d:e5:bd:59:40:df:14:42:c3:f5:f1: 9c:55:f3:7f:cd:6d:8f:10:0e:12:bb:5b:d6:c9:8e:e9:73:4c: 43:8a:fa:ab:b1:cd:24:0b:21:c7:21:7f:19:90:0d:ef:f0:14: d2:04:64:43:a9:ed:77:f9:b6:04:b5:83:57:38:77:2b:fa:b6: 97:56:c9:03:4b:9b:ce:5e:f1:93:fd:be:17:3b:72:f9:59:28: af:ba:83:d6:92:ca:c1:40:20:2b:fc:aa:9f:3d:b1:40:67:42: f5:34:97:00 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBMzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3 NThFQzExMC8GA1UEBRMoQjZGQjA3RTAzOERFRjA2QzgyMEJDNkNEMjAzNTE0NTU0 RDY0M0Q2ODAeFw0yNTEwMTkxMTEwMTVaFw0yNTEwMjYxMTEwMTVaMBgxFjAUBgNV BAMTDTY4ZjRjNzE4LTM5MTUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCkqoXrd1nTSy4KPCa11LEaxWUCbhCNYQPNthmSMS3jZ8FmNtFkWSlPlCazvfXl yJTTgU5wnEgE1dxOQR8ZHNCycTX1nP8ICn8IMgBCUkuB1nywH+CZanmiipV4eZYY t2J2NY8m9uZr2OZKaKpzR1is3gu2GdatrDpeBLuU+V1tXwPj8TEdLKPXvErXwarf JbqmS+eTfOOQKFSV5smjU+HMXiY1JBb539Ai6o2xBXs2jv8A1ShRVSl50+5dGqb5 d7Ey9VGK382TT2a5rontXw9JSIoM4mfCCrX/S75rC8qHqRq/OdkzZMEPgKyqS764 ybYn3UPZBsnatSs6xBh+QYcLAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUGzk3MHgz vcbWMwWm8gvrBB0mDFwwHwYDVR0jBBgwFoAUtvsH4Dje8GyCC8bNIDUUVU1kPWgw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTc1OEVDLzc0RDM1ODQwNjYz MDExRjBCOURDNEU2NEM0RjlBRTAyL3R2c0g0RGplOEd5Q0M4Yk5JRFVVVlUxa1BX Zy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvdHZzSDREamU4R3lDQzhiTklEVVVWVTFrUFdnLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTc1 OEVDLzc0RDM1ODQwNjYzMDExRjBCOURDNEU2NEM0RjlBRTAyL3R2c0g0RGplOEd5 Q0M4Yk5JRFVVVlUxa1BXZy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBABvsq7gOr9HtmJK3660yEMETaW3E3NN0pN9M24ch8SDSxTjwOQ609UC4 m8Mm+2J7C/ST8L0n9twdKgLrEWgD0NYKp8kFyjE6oVwxagTQo23nuMGHvpUUSjKz eXqmepWcYp5ZuY1Opn+ApSXYQxaLbVD/tGoLRLW/dcnbefpCOu6o+neiHO2abSF5 fts/XJlvV5WOrkv6wo995b1ZQN8UQsP18ZxV83/NbY8QDhK7W9bJjulzTEOK+qux zSQLIcchfxmQDe/wFNIEZEOp7Xf5tgS1g1c4dyv6tpdWyQNLm85e8ZP9vhc7cvlZ KK+6g9aSysFAICv8qp89sUBnQvU0lwA= -----END CERTIFICATE-----Generated at Mon Oct 20 04:49:12 2025 by rpki-client