$ rpki-client -vvf rpki.apnic.net/member_repository/A91F4B25/B21A57289F9211E49DEFE216C4F9AE02/tivfdMEzlCu-93dUx6DlOGY4Mgg.mft File: tivfdMEzlCu-93dUx6DlOGY4Mgg.mft (raw, json) Hash identifier: 8SuRiknJxofNQ3utr04n8Wt7mx4FwYNtJc22kAx4Cx0= Subject key identifier: B2:10:B6:49:8B:3C:AA:5A:C9:7F:7D:4D:6A:C8:A3:64:0B:AE:46:53 Authority key identifier: B6:2B:DF:74:C1:33:94:2B:BE:F7:77:54:C7:A0:E5:38:66:38:32:08 Certificate issuer: /CN=A91F4B25/serialNumber=B62BDF74C133942BBEF77754C7A0E53866383208 Certificate serial: 2842 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tivfdMEzlCu-93dUx6DlOGY4Mgg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F4B25/B21A57289F9211E49DEFE216C4F9AE02/tivfdMEzlCu-93dUx6DlOGY4Mgg.mft Manifest number: 282B Signing time: Tue 04 Nov 2025 15:41:04 +0000 Manifest this update: Tue 04 Nov 2025 15:41:04 +0000 Manifest next update: Tue 11 Nov 2025 15:41:04 +0000 Files and hashes: 1: tivfdMEzlCu-93dUx6DlOGY4Mgg.crl (hash: EtzwfKdrGxYrcRIyDwS3oxdePl1LxixZlP2K/M7mnvM=) 2: 989C920254F311E7AC64ED3AC4F9AE02.roa (hash: stlk/NCVaUze0Kt4ZoUXV3LV+N07Axo1/0xiMb9KtSw=) 3: 1149FE16984211F0B5591074C4F9AE02.roa (hash: fl8kEHK67RQKryz0U9mrmcAk8nUhjCtO9JFUbRGLeN0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F4B25/B21A57289F9211E49DEFE216C4F9AE02/tivfdMEzlCu-93dUx6DlOGY4Mgg.crl rsync://rpki.apnic.net/member_repository/A91F4B25/B21A57289F9211E49DEFE216C4F9AE02/tivfdMEzlCu-93dUx6DlOGY4Mgg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tivfdMEzlCu-93dUx6DlOGY4Mgg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 15:41:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10306 (0x2842) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F4B25, serialNumber=B62BDF74C133942BBEF77754C7A0E53866383208 Validity Not Before: Nov 4 15:41:04 2025 GMT Not After : Nov 11 15:41:04 2025 GMT Subject: CN=690a1e90-a77d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:d1:e8:24:03:4c:18:4f:38:02:43:90:69:d2: ad:9d:ef:8a:23:d9:0e:b8:45:f7:73:60:53:82:4c: 60:f9:a2:a2:b2:18:2d:50:f4:72:7e:a0:5f:78:a5: 5b:72:43:3a:2f:c6:f0:c2:33:b9:38:e8:27:1b:da: 2a:5a:8d:0c:e2:75:0b:84:b2:18:2d:64:40:6e:55: 35:d8:51:83:e4:86:8c:0b:73:c4:0c:a0:fd:2f:42: 5e:aa:63:eb:4f:ea:9a:03:1f:c6:44:2a:5b:75:52: 09:36:a1:fb:3c:4f:97:fc:3a:fa:ae:b7:b6:88:6b: 8a:18:75:92:83:e6:c8:a0:80:2f:d1:a0:11:a8:6e: 78:0f:af:b5:40:ef:f0:01:98:73:60:12:18:ea:60: b1:c3:3a:cf:0d:37:58:a7:27:97:a0:53:d1:9b:fb: 39:c1:90:b2:cd:bf:e7:5e:4b:9b:79:20:a9:bd:b6: ef:52:1b:03:fa:53:96:62:db:0e:cb:19:23:6f:8d: bc:16:c5:ad:b8:48:15:36:17:94:69:59:e5:a1:01: d7:98:03:8c:b9:56:a1:6c:16:f5:85:1e:09:ad:50: 03:d6:62:94:a1:23:f3:73:5e:c3:82:7f:4d:7a:29: 26:09:4d:76:8a:9e:b3:c6:2e:2c:b7:8d:b6:f1:7f: b0:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:10:B6:49:8B:3C:AA:5A:C9:7F:7D:4D:6A:C8:A3:64:0B:AE:46:53 X509v3 Authority Key Identifier: keyid:B6:2B:DF:74:C1:33:94:2B:BE:F7:77:54:C7:A0:E5:38:66:38:32:08 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F4B25/B21A57289F9211E49DEFE216C4F9AE02/tivfdMEzlCu-93dUx6DlOGY4Mgg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tivfdMEzlCu-93dUx6DlOGY4Mgg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F4B25/B21A57289F9211E49DEFE216C4F9AE02/tivfdMEzlCu-93dUx6DlOGY4Mgg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3a:7d:bd:d1:88:f6:a5:f6:29:1b:a8:e8:30:3b:3f:2d:77:a7: 49:29:4b:5a:5f:fa:96:ae:81:ac:f0:a0:37:56:6d:e0:72:97: 6b:e9:6a:34:8b:9e:d2:f4:45:e0:76:15:eb:c1:7f:3b:53:d6: d5:33:93:e4:28:b2:f7:07:46:84:0d:f2:0c:40:c2:a3:3a:2f: 67:a7:c7:db:7f:48:fe:cf:5f:d0:5c:35:d7:d7:d6:ba:ef:b1: 48:90:ff:a8:b3:b3:13:f5:2b:58:f1:ba:46:16:67:d1:4b:53: d6:9e:25:bd:b9:9b:45:9c:dd:62:ab:c8:df:a8:ed:37:19:44: 87:11:dd:ec:66:31:cd:ca:ee:54:1b:18:84:5e:5e:b3:fc:9c: 42:74:5e:ba:76:92:99:4d:33:2f:c2:07:7e:c2:e1:55:de:1b: 94:3a:1e:09:24:c6:67:ef:2e:dc:a1:8f:f1:01:2e:ca:78:c7: e6:e1:20:28:2e:01:24:41:4b:53:69:d1:bc:44:1f:08:fd:c8: 29:b6:8f:a7:2b:9a:53:60:da:fe:61:b5:a1:03:66:55:ba:ac: 3c:fb:30:3c:bb:50:1d:79:f5:90:a8:39:00:bb:cb:3e:cc:ee: 54:48:d8:dd:5c:1f:dd:7d:48:d7:85:9f:51:91:db:a9:36:09: 4a:00:43:e3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICKEIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjRCMjUxMTAvBgNVBAUTKEI2MkJERjc0QzEzMzk0MkJCRUY3Nzc1NEM3QTBFNTM4 NjYzODMyMDgwHhcNMjUxMTA0MTU0MTA0WhcNMjUxMTExMTU0MTA0WjAYMRYwFAYD VQQDEw02OTBhMWU5MC1hNzdkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqtHoJANMGE84AkOQadKtne+KI9kOuEX3c2BTgkxg+aKishgtUPRyfqBfeKVb ckM6L8bwwjO5OOgnG9oqWo0M4nULhLIYLWRAblU12FGD5IaMC3PEDKD9L0JeqmPr T+qaAx/GRCpbdVIJNqH7PE+X/Dr6rre2iGuKGHWSg+bIoIAv0aARqG54D6+1QO/w AZhzYBIY6mCxwzrPDTdYpyeXoFPRm/s5wZCyzb/nXkubeSCpvbbvUhsD+lOWYtsO yxkjb428FsWtuEgVNheUaVnloQHXmAOMuVahbBb1hR4JrVAD1mKUoSPzc17Dgn9N eikmCU12ip6zxi4st4228X+wWwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLIQtkmL PKpayX99TWrIo2QLrkZTMB8GA1UdIwQYMBaAFLYr33TBM5Qrvvd3VMeg5ThmODII MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNEIyNS9CMjFBNTcyODlG OTIxMUU0OURFRkUyMTZDNEY5QUUwMi90aXZmZE1FemxDdS05M2RVeDZEbE9HWTRN Z2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RpdmZkTUV6bEN1LTkzZFV4NkRsT0dZNE1nZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NEIyNS9CMjFBNTcyODlGOTIxMUU0OURFRkUyMTZDNEY5QUUwMi90aXZmZE1FemxD dS05M2RVeDZEbE9HWTRNZ2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA6fb3RiPal9ikbqOgwOz8td6dJKUtaX/qWroGs8KA3Vm3gcpdr6Wo0 i57S9EXgdhXrwX87U9bVM5PkKLL3B0aEDfIMQMKjOi9np8fbf0j+z1/QXDXX19a6 77FIkP+os7MT9StY8bpGFmfRS1PWniW9uZtFnN1iq8jfqO03GUSHEd3sZjHNyu5U GxiEXl6z/JxCdF66dpKZTTMvwgd+wuFV3huUOh4JJMZn7y7coY/xAS7KeMfm4SAo LgEkQUtTadG8RB8I/cgpto+nK5pTYNr+YbWhA2ZVuqw8+zA8u1AdefWQqDkAu8s+ zO5USNjdXB/dfUjXhZ9RkdupNglKAEPj -----END CERTIFICATE-----Generated at Wed Nov 5 20:01:41 2025 by rpki-client