$ rpki-client -vvf rpki.apnic.net/member_repository/A91F4B25/B21A57289F9211E49DEFE216C4F9AE02/tivfdMEzlCu-93dUx6DlOGY4Mgg.mft File: tivfdMEzlCu-93dUx6DlOGY4Mgg.mft (raw, json) Hash identifier: MNi8bmd65tzGm9tRKS7gcLfju1y7UBopQxjAWiFuZHs= Subject key identifier: B1:21:E8:0B:08:DA:3E:DD:7C:1F:CF:E9:42:56:DB:24:9F:F0:C6:48 Authority key identifier: B6:2B:DF:74:C1:33:94:2B:BE:F7:77:54:C7:A0:E5:38:66:38:32:08 Certificate issuer: /CN=A91F4B25/serialNumber=B62BDF74C133942BBEF77754C7A0E53866383208 Certificate serial: 281A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tivfdMEzlCu-93dUx6DlOGY4Mgg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F4B25/B21A57289F9211E49DEFE216C4F9AE02/tivfdMEzlCu-93dUx6DlOGY4Mgg.mft Manifest number: 2804 Signing time: Fri 22 Aug 2025 15:39:19 +0000 Manifest this update: Fri 22 Aug 2025 15:39:18 +0000 Manifest next update: Fri 29 Aug 2025 15:39:18 +0000 Files and hashes: 1: tivfdMEzlCu-93dUx6DlOGY4Mgg.crl (hash: Rd6O8B1+WPlrWhBmw5G0HUZJLjB+YIAlpu4Ew5eArj4=) 2: 989C920254F311E7AC64ED3AC4F9AE02.roa (hash: stlk/NCVaUze0Kt4ZoUXV3LV+N07Axo1/0xiMb9KtSw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F4B25/B21A57289F9211E49DEFE216C4F9AE02/tivfdMEzlCu-93dUx6DlOGY4Mgg.crl rsync://rpki.apnic.net/member_repository/A91F4B25/B21A57289F9211E49DEFE216C4F9AE02/tivfdMEzlCu-93dUx6DlOGY4Mgg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tivfdMEzlCu-93dUx6DlOGY4Mgg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 15:39:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10266 (0x281a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F4B25, serialNumber=B62BDF74C133942BBEF77754C7A0E53866383208 Validity Not Before: Aug 22 15:39:18 2025 GMT Not After : Aug 29 15:39:18 2025 GMT Subject: CN=68a88f27-0675 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:ab:63:8e:1e:65:c0:cb:33:45:00:e8:a6:ee: f0:f6:5e:99:fa:28:05:7a:c4:fd:1a:4c:34:3c:62: 09:b1:da:9d:23:b9:fe:0f:95:ea:9f:4d:c0:a0:a0: c2:7e:73:e9:0a:2e:90:ae:00:b1:1f:b0:27:dd:7b: 80:ec:78:e7:16:62:50:5e:d9:f3:61:f7:52:88:c2: e9:3d:6e:f7:78:22:b1:10:d2:68:c3:9d:7f:55:56: a6:33:cc:fd:2c:17:e3:2e:5e:54:06:71:3a:9c:3f: 78:bb:1b:05:eb:bb:84:c2:be:ff:9a:d3:e8:52:4f: 38:2b:65:c3:fa:2e:4e:dd:8c:8e:f3:02:cf:34:4d: 8c:1b:49:f7:7c:d3:d2:14:77:e5:92:c4:43:d6:26: 3c:02:b1:b5:fa:d5:29:34:5e:73:99:59:4a:f0:7c: 1d:c0:5b:ef:16:79:96:a4:19:c2:91:a5:c9:13:d3: 31:fc:ad:b4:51:f0:e8:4c:ce:a4:fa:5a:27:a9:3e: 76:8b:39:f6:85:4d:27:32:f2:d3:83:0f:46:16:85: ea:60:1e:15:e3:86:30:a7:74:56:a7:10:52:ae:c3: 57:98:ea:14:76:00:96:f4:86:09:6c:03:2e:fd:a7: ac:7f:d1:2c:97:25:77:f0:08:99:eb:e1:ff:e6:27: 21:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:21:E8:0B:08:DA:3E:DD:7C:1F:CF:E9:42:56:DB:24:9F:F0:C6:48 X509v3 Authority Key Identifier: keyid:B6:2B:DF:74:C1:33:94:2B:BE:F7:77:54:C7:A0:E5:38:66:38:32:08 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F4B25/B21A57289F9211E49DEFE216C4F9AE02/tivfdMEzlCu-93dUx6DlOGY4Mgg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tivfdMEzlCu-93dUx6DlOGY4Mgg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F4B25/B21A57289F9211E49DEFE216C4F9AE02/tivfdMEzlCu-93dUx6DlOGY4Mgg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 81:86:58:83:be:cd:a1:1b:98:d8:be:e4:e1:15:ff:03:40:0e: ec:68:15:aa:87:01:7f:2e:b8:93:47:e2:81:d4:ee:a6:e9:3f: b7:ff:08:b1:66:11:41:57:8c:de:0f:79:8f:83:b7:91:05:1c: dc:b2:98:8b:8c:49:b3:05:26:03:1b:b2:94:7a:12:61:9a:b9: e5:87:cc:39:2e:ed:e0:03:9c:a5:69:5b:fd:ef:a8:34:98:a8: b1:ad:c2:f2:93:f8:67:10:e3:be:96:87:0d:34:6a:45:d0:80: 01:4a:8c:13:ad:1e:1d:63:57:21:ff:4b:ce:f5:ec:0b:0d:5c: cd:c6:41:5a:7c:eb:24:86:42:4f:02:66:bf:fb:c2:bc:97:1e: 31:55:3c:e8:84:df:75:3b:bf:ee:d8:eb:5a:9e:ac:f5:fe:83: 52:fb:37:5c:49:a8:84:a7:44:e2:24:65:e3:67:81:c6:be:34: 55:6b:3e:bd:59:d3:67:bc:8f:f9:30:03:c1:c3:ac:12:4c:8c: 65:d4:97:70:c7:f1:39:95:7b:6e:5d:58:60:2a:47:07:09:35: 59:dc:31:9f:2a:ac:5b:74:90:87:50:0a:15:a5:e7:48:00:61: b2:f8:15:3b:b2:d3:3a:f5:15:ef:d3:ea:3f:12:02:a3:f3:10: 83:d9:48:a4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICKBowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjRCMjUxMTAvBgNVBAUTKEI2MkJERjc0QzEzMzk0MkJCRUY3Nzc1NEM3QTBFNTM4 NjYzODMyMDgwHhcNMjUwODIyMTUzOTE4WhcNMjUwODI5MTUzOTE4WjAYMRYwFAYD VQQDEw02OGE4OGYyNy0wNjc1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzatjjh5lwMszRQDopu7w9l6Z+igFesT9Gkw0PGIJsdqdI7n+D5Xqn03AoKDC fnPpCi6QrgCxH7An3XuA7HjnFmJQXtnzYfdSiMLpPW73eCKxENJow51/VVamM8z9 LBfjLl5UBnE6nD94uxsF67uEwr7/mtPoUk84K2XD+i5O3YyO8wLPNE2MG0n3fNPS FHflksRD1iY8ArG1+tUpNF5zmVlK8HwdwFvvFnmWpBnCkaXJE9Mx/K20UfDoTM6k +lonqT52izn2hU0nMvLTgw9GFoXqYB4V44Ywp3RWpxBSrsNXmOoUdgCW9IYJbAMu /aesf9EslyV38AiZ6+H/5ichrQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLEh6AsI 2j7dfB/P6UJW2ySf8MZIMB8GA1UdIwQYMBaAFLYr33TBM5Qrvvd3VMeg5ThmODII MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNEIyNS9CMjFBNTcyODlG OTIxMUU0OURFRkUyMTZDNEY5QUUwMi90aXZmZE1FemxDdS05M2RVeDZEbE9HWTRN Z2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RpdmZkTUV6bEN1LTkzZFV4NkRsT0dZNE1nZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NEIyNS9CMjFBNTcyODlGOTIxMUU0OURFRkUyMTZDNEY5QUUwMi90aXZmZE1FemxD dS05M2RVeDZEbE9HWTRNZ2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCBhliDvs2hG5jYvuThFf8DQA7saBWqhwF/LriTR+KB1O6m6T+3/wix ZhFBV4zeD3mPg7eRBRzcspiLjEmzBSYDG7KUehJhmrnlh8w5Lu3gA5ylaVv976g0 mKixrcLyk/hnEOO+locNNGpF0IABSowTrR4dY1ch/0vO9ewLDVzNxkFafOskhkJP Ama/+8K8lx4xVTzohN91O7/u2Otanqz1/oNS+zdcSaiEp0TiJGXjZ4HGvjRVaz69 WdNnvI/5MAPBw6wSTIxl1Jdwx/E5lXtuXVhgKkcHCTVZ3DGfKqxbdJCHUAoVpedI AGGy+BU7stM69RXv0+o/EgKj8xCD2Uik -----END CERTIFICATE-----Generated at Sun Aug 24 01:00:49 2025 by rpki-client