$ rpki-client -vvf rpki.apnic.net/member_repository/A91F4B25/B21A57289F9211E49DEFE216C4F9AE02/tivfdMEzlCu-93dUx6DlOGY4Mgg.mft File: tivfdMEzlCu-93dUx6DlOGY4Mgg.mft (raw, json) Hash identifier: 96Kpc04ltdEqLUlTSXkPeicy5IbiESdmJFjVKslWOpo= Subject key identifier: F9:31:42:CD:41:43:32:43:F7:2D:7F:11:58:17:E2:E9:68:8B:00:1B Authority key identifier: B6:2B:DF:74:C1:33:94:2B:BE:F7:77:54:C7:A0:E5:38:66:38:32:08 Certificate issuer: /CN=A91F4B25/serialNumber=B62BDF74C133942BBEF77754C7A0E53866383208 Certificate serial: 283A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tivfdMEzlCu-93dUx6DlOGY4Mgg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F4B25/B21A57289F9211E49DEFE216C4F9AE02/tivfdMEzlCu-93dUx6DlOGY4Mgg.mft Manifest number: 2823 Signing time: Mon 20 Oct 2025 15:46:55 +0000 Manifest this update: Mon 20 Oct 2025 15:46:54 +0000 Manifest next update: Mon 27 Oct 2025 15:46:54 +0000 Files and hashes: 1: tivfdMEzlCu-93dUx6DlOGY4Mgg.crl (hash: vAGypARM+iLAQUK68/ExnY9ha/fwd54ZX6JG5Po+SxI=) 2: 989C920254F311E7AC64ED3AC4F9AE02.roa (hash: stlk/NCVaUze0Kt4ZoUXV3LV+N07Axo1/0xiMb9KtSw=) 3: 1149FE16984211F0B5591074C4F9AE02.roa (hash: fl8kEHK67RQKryz0U9mrmcAk8nUhjCtO9JFUbRGLeN0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F4B25/B21A57289F9211E49DEFE216C4F9AE02/tivfdMEzlCu-93dUx6DlOGY4Mgg.crl rsync://rpki.apnic.net/member_repository/A91F4B25/B21A57289F9211E49DEFE216C4F9AE02/tivfdMEzlCu-93dUx6DlOGY4Mgg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tivfdMEzlCu-93dUx6DlOGY4Mgg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 27 Oct 2025 15:46:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10298 (0x283a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F4B25, serialNumber=B62BDF74C133942BBEF77754C7A0E53866383208 Validity Not Before: Oct 20 15:46:54 2025 GMT Not After : Oct 27 15:46:54 2025 GMT Subject: CN=68f6596f-f496 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fe:0b:0f:ae:c3:e2:8f:ae:c4:fc:0a:a1:0d:3f: e8:ae:25:48:f0:a1:47:87:5d:4b:ff:89:9b:06:09: 17:cc:06:f2:a4:0c:09:46:d0:74:bd:d9:f5:f1:3d: 1d:8e:36:7f:d1:58:97:7b:16:05:c4:0b:3f:86:76: 05:b6:49:21:2e:1a:97:a4:c1:48:b5:74:61:a1:71: 57:30:e3:2b:8f:f9:ad:49:af:33:5c:ab:0f:cb:a9: d4:9a:21:71:29:c7:a8:c0:dc:0a:fb:a0:e8:7e:6b: ef:64:87:6a:58:2f:4e:0d:ec:cd:f2:fd:6a:bd:aa: 4f:0a:95:eb:73:ee:b6:8c:a7:17:dc:78:f4:a0:e0: 09:30:f0:86:17:62:4f:bc:d1:6f:90:9a:f8:f7:f5: e8:c2:a7:76:3f:00:9b:ca:c6:f8:16:2f:8a:dd:f3: 12:90:70:0d:cd:3d:65:1c:7e:b7:d5:a2:bf:bc:43: 02:84:49:67:0f:4c:1c:4c:31:dc:2a:e9:e2:e1:67: eb:05:a3:60:07:59:68:46:86:1c:8b:5c:56:99:1b: c9:75:ea:10:fb:a5:55:4b:a7:38:79:9e:f5:7d:08: 3b:da:54:84:89:d0:a7:55:53:3c:1a:f0:e7:ff:31: 88:e3:ab:8e:e6:ca:ef:08:43:1f:07:df:5e:cf:cc: d4:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:31:42:CD:41:43:32:43:F7:2D:7F:11:58:17:E2:E9:68:8B:00:1B X509v3 Authority Key Identifier: keyid:B6:2B:DF:74:C1:33:94:2B:BE:F7:77:54:C7:A0:E5:38:66:38:32:08 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F4B25/B21A57289F9211E49DEFE216C4F9AE02/tivfdMEzlCu-93dUx6DlOGY4Mgg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tivfdMEzlCu-93dUx6DlOGY4Mgg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F4B25/B21A57289F9211E49DEFE216C4F9AE02/tivfdMEzlCu-93dUx6DlOGY4Mgg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3c:70:33:e0:35:85:02:d6:1f:05:07:69:93:c5:a6:a0:25:da: 32:71:f5:93:ad:12:24:31:81:15:9e:0a:9a:be:2c:ef:61:8f: 22:da:3a:81:2b:fa:65:79:73:3b:79:9c:7c:32:1b:8c:e1:78: 81:da:e7:31:8a:dd:04:38:89:dd:1e:c4:5a:df:47:0d:78:28: 63:c6:a9:c7:8d:91:33:15:2c:44:4d:ad:62:4d:3e:fc:6b:cb: 31:22:2e:ec:e1:8c:2e:b7:e2:b2:5a:68:2d:d7:b0:09:dc:9d: 0f:75:e2:4d:9f:07:a3:28:a2:68:73:74:1d:75:5f:a1:35:3a: 7a:25:d5:64:51:b9:06:86:bf:42:5b:31:b5:47:10:0a:3b:42: a9:ed:28:57:82:ec:9d:40:e1:ce:71:58:d5:9d:00:c2:a2:40: 06:ed:fd:6c:18:2e:ca:19:38:4b:ae:1c:fe:97:03:b3:92:75: 8f:cd:12:6f:ae:8f:45:35:35:6e:73:ed:73:3a:c3:b7:e9:65: 86:85:16:4a:01:af:ad:20:09:71:05:96:88:67:ba:2a:3f:8e: 02:b7:c0:aa:22:c7:c2:6d:24:bc:8b:5b:02:ca:e9:88:97:36: 5f:32:1a:b2:af:20:6c:8a:dc:13:31:63:92:ed:a8:1f:05:ba: 75:2a:95:8f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICKDowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjRCMjUxMTAvBgNVBAUTKEI2MkJERjc0QzEzMzk0MkJCRUY3Nzc1NEM3QTBFNTM4 NjYzODMyMDgwHhcNMjUxMDIwMTU0NjU0WhcNMjUxMDI3MTU0NjU0WjAYMRYwFAYD VQQDEw02OGY2NTk2Zi1mNDk2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA/gsPrsPij67E/AqhDT/oriVI8KFHh11L/4mbBgkXzAbypAwJRtB0vdn18T0d jjZ/0ViXexYFxAs/hnYFtkkhLhqXpMFItXRhoXFXMOMrj/mtSa8zXKsPy6nUmiFx KceowNwK+6DofmvvZIdqWC9ODezN8v1qvapPCpXrc+62jKcX3Hj0oOAJMPCGF2JP vNFvkJr49/Xowqd2PwCbysb4Fi+K3fMSkHANzT1lHH631aK/vEMChElnD0wcTDHc Kuni4WfrBaNgB1loRoYci1xWmRvJdeoQ+6VVS6c4eZ71fQg72lSEidCnVVM8GvDn /zGI46uO5srvCEMfB99ez8zUMQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPkxQs1B QzJD9y1/EVgX4uloiwAbMB8GA1UdIwQYMBaAFLYr33TBM5Qrvvd3VMeg5ThmODII MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNEIyNS9CMjFBNTcyODlG OTIxMUU0OURFRkUyMTZDNEY5QUUwMi90aXZmZE1FemxDdS05M2RVeDZEbE9HWTRN Z2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RpdmZkTUV6bEN1LTkzZFV4NkRsT0dZNE1nZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NEIyNS9CMjFBNTcyODlGOTIxMUU0OURFRkUyMTZDNEY5QUUwMi90aXZmZE1FemxD dS05M2RVeDZEbE9HWTRNZ2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA8cDPgNYUC1h8FB2mTxaagJdoycfWTrRIkMYEVngqavizvYY8i2jqB K/pleXM7eZx8MhuM4XiB2ucxit0EOIndHsRa30cNeChjxqnHjZEzFSxETa1iTT78 a8sxIi7s4Ywut+KyWmgt17AJ3J0PdeJNnwejKKJoc3QddV+hNTp6JdVkUbkGhr9C WzG1RxAKO0Kp7ShXguydQOHOcVjVnQDCokAG7f1sGC7KGThLrhz+lwOzknWPzRJv ro9FNTVuc+1zOsO36WWGhRZKAa+tIAlxBZaIZ7oqP44Ct8CqIsfCbSS8i1sCyumI lzZfMhqyryBsitwTMWOS7agfBbp1KpWP -----END CERTIFICATE-----Generated at Tue Oct 21 00:11:39 2025 by rpki-client