$ rpki-client -vvf rpki.apnic.net/member_repository/A91F4B25/B21A57289F9211E49DEFE216C4F9AE02/tivfdMEzlCu-93dUx6DlOGY4Mgg.mft File: tivfdMEzlCu-93dUx6DlOGY4Mgg.mft (raw, json) Hash identifier: 0kC+nblpSlpSZSqzmfAnaeWsNiGAvpUbXfRrn70yBgU= Subject key identifier: 7E:B2:32:49:F0:21:BF:15:3C:C3:A2:2D:BC:65:25:89:A6:2C:69:EB Authority key identifier: B6:2B:DF:74:C1:33:94:2B:BE:F7:77:54:C7:A0:E5:38:66:38:32:08 Certificate issuer: /CN=A91F4B25/serialNumber=B62BDF74C133942BBEF77754C7A0E53866383208 Certificate serial: 27FA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tivfdMEzlCu-93dUx6DlOGY4Mgg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F4B25/B21A57289F9211E49DEFE216C4F9AE02/tivfdMEzlCu-93dUx6DlOGY4Mgg.mft Manifest number: 27E4 Signing time: Fri 20 Jun 2025 15:39:28 +0000 Manifest this update: Fri 20 Jun 2025 15:39:27 +0000 Manifest next update: Fri 27 Jun 2025 15:39:27 +0000 Files and hashes: 1: tivfdMEzlCu-93dUx6DlOGY4Mgg.crl (hash: NALcRkIhmtMkPt6SfpFLm5mtb6ENtCncxe6HJeOWn6E=) 2: 989C920254F311E7AC64ED3AC4F9AE02.roa (hash: stlk/NCVaUze0Kt4ZoUXV3LV+N07Axo1/0xiMb9KtSw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F4B25/B21A57289F9211E49DEFE216C4F9AE02/tivfdMEzlCu-93dUx6DlOGY4Mgg.crl rsync://rpki.apnic.net/member_repository/A91F4B25/B21A57289F9211E49DEFE216C4F9AE02/tivfdMEzlCu-93dUx6DlOGY4Mgg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tivfdMEzlCu-93dUx6DlOGY4Mgg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 27 Jun 2025 15:39:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10234 (0x27fa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F4B25, serialNumber=B62BDF74C133942BBEF77754C7A0E53866383208 Validity Not Before: Jun 20 15:39:27 2025 GMT Not After : Jun 27 15:39:27 2025 GMT Subject: CN=685580af-2304 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:84:cf:7c:ab:40:19:50:7d:6d:ab:e2:a3:da: a7:3e:e7:fd:20:bf:b0:71:77:b3:1b:f1:33:95:1d: 90:4e:d4:16:8d:1c:c1:3f:b8:c1:13:0c:e4:ad:49: 16:ad:5b:de:bb:93:6c:64:b9:a2:1a:1b:7b:19:58: 83:bd:c1:f6:e6:79:c0:b8:a8:b1:da:f0:4a:cf:47: 2b:c6:cb:75:1d:4a:c5:55:9f:14:52:4e:bc:b9:b6: 06:bb:36:a8:4e:bc:9b:39:34:61:1a:5b:04:fe:14: 66:88:52:1e:09:75:1f:d3:26:0c:16:e1:25:1e:05: 46:dc:e6:f2:c5:2f:fd:22:ba:6a:6f:6b:f4:dc:37: 91:2d:9a:79:27:5e:8f:5d:70:00:77:97:a2:fb:8b: 01:52:63:2a:d0:fd:93:2a:38:22:d7:e0:05:6b:10: e7:f6:ef:86:78:02:5a:0c:4a:06:42:bd:59:25:0c: 7c:c0:1b:c6:93:b7:84:55:38:cd:18:3a:91:d7:7c: 21:f5:c8:61:fa:bf:3b:3d:fe:75:4d:e5:7f:37:eb: fd:99:6d:26:a3:f6:95:22:5f:df:c5:05:51:e8:80: ed:01:ae:f7:78:69:77:3a:26:00:df:d8:dd:79:1e: 6e:e4:a3:bd:6d:a0:b6:5d:47:e2:5f:fd:44:2e:60: 37:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:B2:32:49:F0:21:BF:15:3C:C3:A2:2D:BC:65:25:89:A6:2C:69:EB X509v3 Authority Key Identifier: keyid:B6:2B:DF:74:C1:33:94:2B:BE:F7:77:54:C7:A0:E5:38:66:38:32:08 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F4B25/B21A57289F9211E49DEFE216C4F9AE02/tivfdMEzlCu-93dUx6DlOGY4Mgg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tivfdMEzlCu-93dUx6DlOGY4Mgg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F4B25/B21A57289F9211E49DEFE216C4F9AE02/tivfdMEzlCu-93dUx6DlOGY4Mgg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 44:b4:c7:0a:a9:45:6c:61:77:d2:63:51:b4:d3:bc:30:b1:3d: 80:10:94:74:4d:7e:fb:f2:9b:4f:6b:20:e5:a8:79:63:d6:78: f8:02:10:80:cf:ce:a3:9f:44:6a:a6:0d:ab:39:5a:c2:69:49: 56:40:96:aa:aa:1d:ee:19:07:26:75:a1:1a:4c:7b:bb:bc:37: 67:50:d8:3d:05:4a:84:4c:b7:2e:f7:f9:f1:7a:1c:b8:92:59: b8:4e:0b:20:b8:0d:c0:61:69:27:ad:44:02:7c:9e:43:99:82: ce:0d:2a:4d:9e:3a:93:a4:a5:f6:08:44:d6:05:8c:06:19:e2: 73:1a:b8:c4:74:32:d5:bb:93:80:73:2f:a5:66:c3:8a:9b:e1: 57:57:03:ad:18:a8:92:3f:ab:5c:68:25:b1:a0:a5:71:3c:e5: a5:26:89:5a:8d:bd:74:6d:7b:45:0a:cd:d0:67:40:4e:11:5d: b9:55:e7:4e:0f:c4:15:f8:86:56:24:fc:79:37:21:e4:af:5f: 4c:1a:09:b7:58:dc:9a:c8:b8:bc:1f:6f:69:2e:af:df:b3:c6: 19:f8:c4:9f:06:a7:c6:bd:66:42:43:00:09:8b:fd:00:49:c7: 82:29:7e:d1:8d:38:56:70:8d:e2:c6:e1:3a:18:e6:14:5f:c4: c2:ae:1b:86 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICJ/owDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjRCMjUxMTAvBgNVBAUTKEI2MkJERjc0QzEzMzk0MkJCRUY3Nzc1NEM3QTBFNTM4 NjYzODMyMDgwHhcNMjUwNjIwMTUzOTI3WhcNMjUwNjI3MTUzOTI3WjAYMRYwFAYD VQQDEw02ODU1ODBhZi0yMzA0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6YTPfKtAGVB9bavio9qnPuf9IL+wcXezG/EzlR2QTtQWjRzBP7jBEwzkrUkW rVveu5NsZLmiGht7GViDvcH25nnAuKix2vBKz0crxst1HUrFVZ8UUk68ubYGuzao TrybOTRhGlsE/hRmiFIeCXUf0yYMFuElHgVG3ObyxS/9Irpqb2v03DeRLZp5J16P XXAAd5ei+4sBUmMq0P2TKjgi1+AFaxDn9u+GeAJaDEoGQr1ZJQx8wBvGk7eEVTjN GDqR13wh9chh+r87Pf51TeV/N+v9mW0mo/aVIl/fxQVR6IDtAa73eGl3OiYA39jd eR5u5KO9baC2XUfiX/1ELmA3lwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFH6yMknw Ib8VPMOiLbxlJYmmLGnrMB8GA1UdIwQYMBaAFLYr33TBM5Qrvvd3VMeg5ThmODII MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNEIyNS9CMjFBNTcyODlG OTIxMUU0OURFRkUyMTZDNEY5QUUwMi90aXZmZE1FemxDdS05M2RVeDZEbE9HWTRN Z2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RpdmZkTUV6bEN1LTkzZFV4NkRsT0dZNE1nZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NEIyNS9CMjFBNTcyODlGOTIxMUU0OURFRkUyMTZDNEY5QUUwMi90aXZmZE1FemxD dS05M2RVeDZEbE9HWTRNZ2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBEtMcKqUVsYXfSY1G007wwsT2AEJR0TX778ptPayDlqHlj1nj4AhCA z86jn0Rqpg2rOVrCaUlWQJaqqh3uGQcmdaEaTHu7vDdnUNg9BUqETLcu9/nxehy4 klm4TgsguA3AYWknrUQCfJ5DmYLODSpNnjqTpKX2CETWBYwGGeJzGrjEdDLVu5OA cy+lZsOKm+FXVwOtGKiSP6tcaCWxoKVxPOWlJolajb10bXtFCs3QZ0BOEV25VedO D8QV+IZWJPx5NyHkr19MGgm3WNyayLi8H29pLq/fs8YZ+MSfBqfGvWZCQwAJi/0A SceCKX7RjThWcI3ixuE6GOYUX8TCrhuG -----END CERTIFICATE-----Generated at Fri Jun 20 19:45:07 2025 by rpki-client