$ rpki-client -vvf rpki.apnic.net/member_repository/A912147F/161AABEC1CF711EAAD664532C4F9AE02/tveX2E8uSbi7MiIGt5RtJ5GMoWQ.mft File: tveX2E8uSbi7MiIGt5RtJ5GMoWQ.mft (raw, json) Hash identifier: /HK6HXF+pmgQO+aPUwz7mqo2ZB9kFTOaxLWdcHQ7Qiw= Subject key identifier: F6:16:AA:75:AE:DD:CF:25:21:B1:D8:4B:83:B2:19:69:DB:65:30:C6 Authority key identifier: B6:F7:97:D8:4F:2E:49:B8:BB:32:22:06:B7:94:6D:27:91:8C:A1:64 Certificate issuer: /CN=A912147F/serialNumber=B6F797D84F2E49B8BB322206B7946D27918CA164 Certificate serial: 0C08 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tveX2E8uSbi7MiIGt5RtJ5GMoWQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912147F/161AABEC1CF711EAAD664532C4F9AE02/tveX2E8uSbi7MiIGt5RtJ5GMoWQ.mft Manifest number: 0BF8 Signing time: Fri 08 Aug 2025 19:04:03 +0000 Manifest this update: Fri 08 Aug 2025 19:04:03 +0000 Manifest next update: Fri 15 Aug 2025 19:04:03 +0000 Files and hashes: 1: tveX2E8uSbi7MiIGt5RtJ5GMoWQ.crl (hash: 1e4/migWkSdovigVykpaLjM5E6XCsvlcrmp+mVooGbg=) 2: F648238E766911EC9EADC512C4F9AE02.roa (hash: cXtJZrxFT7iK9u3HHySRT4oRhzJJpyziBzdACacCcms=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912147F/161AABEC1CF711EAAD664532C4F9AE02/tveX2E8uSbi7MiIGt5RtJ5GMoWQ.crl rsync://rpki.apnic.net/member_repository/A912147F/161AABEC1CF711EAAD664532C4F9AE02/tveX2E8uSbi7MiIGt5RtJ5GMoWQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tveX2E8uSbi7MiIGt5RtJ5GMoWQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3080 (0xc08) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912147F, serialNumber=B6F797D84F2E49B8BB322206B7946D27918CA164 Validity Not Before: Aug 8 19:04:03 2025 GMT Not After : Aug 15 19:04:03 2025 GMT Subject: CN=68964a23-77cc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:fc:6e:88:a4:46:c3:a9:24:10:87:b1:1f:bf: bc:53:ab:03:04:b2:d0:db:37:15:e8:ef:a7:6f:35: fe:05:a5:c4:e8:38:7e:ba:e3:6d:55:de:cc:5d:de: a8:e4:39:4a:09:b5:77:68:e6:11:6f:57:33:68:9c: e9:de:dd:e4:a1:d4:c6:28:2a:41:b4:c9:02:a1:0a: 12:28:45:24:d1:87:32:70:dc:e8:5f:d5:bf:06:03: a1:29:b7:83:1e:f4:ce:da:3c:ad:94:9d:e8:0d:9a: 61:0a:be:ff:f2:1f:33:8a:25:95:fa:2d:38:23:01: 90:94:20:2e:13:05:eb:01:82:bc:34:f3:2b:b2:0b: 8c:92:9d:5c:87:7d:d5:62:fd:bc:de:92:30:c8:98: 5e:10:27:7e:f1:c6:bc:ae:58:0a:4c:54:fa:23:68: a1:e7:cf:c3:6b:e8:33:17:04:66:9f:ab:db:dc:80: eb:75:b0:36:19:f3:4e:87:bb:ca:9c:c8:31:0b:e4: 0c:53:45:12:06:6a:3c:32:6e:91:79:ad:e8:fa:b7: df:59:ff:11:c7:88:87:98:af:64:ad:dc:25:c7:d3: 4d:19:e8:15:e2:19:d0:dd:8a:f0:df:94:8a:a8:29: 15:65:59:ef:80:a5:d2:d4:98:fb:b0:98:57:5a:a3: cc:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:16:AA:75:AE:DD:CF:25:21:B1:D8:4B:83:B2:19:69:DB:65:30:C6 X509v3 Authority Key Identifier: keyid:B6:F7:97:D8:4F:2E:49:B8:BB:32:22:06:B7:94:6D:27:91:8C:A1:64 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912147F/161AABEC1CF711EAAD664532C4F9AE02/tveX2E8uSbi7MiIGt5RtJ5GMoWQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tveX2E8uSbi7MiIGt5RtJ5GMoWQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912147F/161AABEC1CF711EAAD664532C4F9AE02/tveX2E8uSbi7MiIGt5RtJ5GMoWQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 98:33:c2:7d:1d:6a:07:ff:26:d0:24:e0:52:81:8b:9d:fe:b0: a6:2a:f5:d4:48:e1:bb:96:44:d4:82:71:c8:53:e3:37:bf:03: ac:09:4f:c0:3d:c3:ec:f9:c6:b9:b5:14:b3:c3:e0:06:13:06: e7:f4:fd:2e:f7:dc:4a:9f:c6:8f:ee:27:fc:b1:83:ad:58:5f: 79:82:54:0d:2a:ea:53:31:d8:e2:0e:8f:da:c9:08:13:54:a1: 56:b2:ff:9f:88:5d:cf:5e:28:9c:bb:ed:e2:87:26:3e:70:23: 19:1d:3e:90:66:8a:46:40:8b:d4:98:58:22:1c:37:dc:a6:87: 0b:36:de:86:85:d2:eb:2c:93:42:0b:31:89:6f:81:e6:6f:97: 4c:31:38:f5:48:aa:c8:fb:43:66:3e:a9:3c:0d:21:79:0b:2f: 8a:51:9f:77:0f:9e:c9:5b:8e:b1:b5:2f:70:a5:9e:d9:80:52: 88:d4:66:0b:de:c2:dc:1b:ec:b5:79:25:ea:79:16:ae:9b:19: 18:bb:63:33:b3:0d:64:38:a0:cb:5d:56:4e:2d:d0:02:50:51: c7:cb:9c:b7:49:2f:93:b4:c3:fc:eb:d5:70:d9:1d:54:45:87: fd:6f:c9:41:1b:6f:8e:8e:82:9c:48:0e:e1:37:f3:e9:f4:6f: 0a:af:15:cb -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDAgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjE0N0YxMTAvBgNVBAUTKEI2Rjc5N0Q4NEYyRTQ5QjhCQjMyMjIwNkI3OTQ2RDI3 OTE4Q0ExNjQwHhcNMjUwODA4MTkwNDAzWhcNMjUwODE1MTkwNDAzWjAYMRYwFAYD VQQDEw02ODk2NGEyMy03N2NjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAy/xuiKRGw6kkEIexH7+8U6sDBLLQ2zcV6O+nbzX+BaXE6Dh+uuNtVd7MXd6o 5DlKCbV3aOYRb1czaJzp3t3kodTGKCpBtMkCoQoSKEUk0YcycNzoX9W/BgOhKbeD HvTO2jytlJ3oDZphCr7/8h8ziiWV+i04IwGQlCAuEwXrAYK8NPMrsguMkp1ch33V Yv283pIwyJheECd+8ca8rlgKTFT6I2ih58/Da+gzFwRmn6vb3IDrdbA2GfNOh7vK nMgxC+QMU0USBmo8Mm6Rea3o+rffWf8Rx4iHmK9krdwlx9NNGegV4hnQ3Yrw35SK qCkVZVnvgKXS1Jj7sJhXWqPMswIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPYWqnWu 3c8lIbHYS4OyGWnbZTDGMB8GA1UdIwQYMBaAFLb3l9hPLkm4uzIiBreUbSeRjKFk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMTQ3Ri8xNjFBQUJFQzFD RjcxMUVBQUQ2NjQ1MzJDNEY5QUUwMi90dmVYMkU4dVNiaTdNaUlHdDVSdEo1R01v V1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3R2ZVgyRTh1U2JpN01pSUd0NVJ0SjVHTW9XUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MTQ3Ri8xNjFBQUJFQzFDRjcxMUVBQUQ2NjQ1MzJDNEY5QUUwMi90dmVYMkU4dVNi aTdNaUlHdDVSdEo1R01vV1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCYM8J9HWoH/ybQJOBSgYud/rCmKvXUSOG7lkTUgnHIU+M3vwOsCU/A PcPs+ca5tRSzw+AGEwbn9P0u99xKn8aP7if8sYOtWF95glQNKupTMdjiDo/ayQgT VKFWsv+fiF3PXiicu+3ihyY+cCMZHT6QZopGQIvUmFgiHDfcpocLNt6GhdLrLJNC CzGJb4Hmb5dMMTj1SKrI+0NmPqk8DSF5Cy+KUZ93D57JW46xtS9wpZ7ZgFKI1GYL 3sLcG+y1eSXqeRaumxkYu2Mzsw1kOKDLXVZOLdACUFHHy5y3SS+TtMP869Vw2R1U RYf9b8lBG2+OjoKcSA7hN/Pp9G8KrxXL -----END CERTIFICATE-----Generated at Sun Aug 10 18:26:05 2025 by rpki-client