$ rpki-client -vvf rpki.apnic.net/member_repository/A91B2D29/F71E7166552111E5ADB2092AC4F9AE02/T4ElgrV_TBLHNl5qp_D_yncQlJE.mft File: T4ElgrV_TBLHNl5qp_D_yncQlJE.mft (raw, json) Hash identifier: IgnivDVRvobd/vtqvQGd93C3iicSB6AQkTDHaoq4sVw= Subject key identifier: 32:72:D8:39:AE:9A:AD:84:52:BD:54:F8:25:5F:76:8A:77:8C:B3:E0 Authority key identifier: 4F:81:25:82:B5:7F:4C:12:C7:36:5E:6A:A7:F0:FF:CA:77:10:94:91 Certificate issuer: /CN=A91B2D29/serialNumber=4F812582B57F4C12C7365E6AA7F0FFCA77109491 Certificate serial: 18D3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T4ElgrV_TBLHNl5qp_D_yncQlJE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B2D29/F71E7166552111E5ADB2092AC4F9AE02/T4ElgrV_TBLHNl5qp_D_yncQlJE.mft Manifest number: 46E4 Signing time: Fri 08 Aug 2025 15:52:35 +0000 Manifest this update: Fri 08 Aug 2025 15:52:34 +0000 Manifest next update: Fri 15 Aug 2025 15:52:34 +0000 Files and hashes: 1: T4ElgrV_TBLHNl5qp_D_yncQlJE.crl (hash: jaBfk/ifCuMY9c8g7BPOe+Ct2r/AQ+P1/Oqbr7TY7Mk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B2D29/F71E7166552111E5ADB2092AC4F9AE02/T4ElgrV_TBLHNl5qp_D_yncQlJE.crl rsync://rpki.apnic.net/member_repository/A91B2D29/F71E7166552111E5ADB2092AC4F9AE02/T4ElgrV_TBLHNl5qp_D_yncQlJE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T4ElgrV_TBLHNl5qp_D_yncQlJE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6355 (0x18d3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B2D29, serialNumber=4F812582B57F4C12C7365E6AA7F0FFCA77109491 Validity Not Before: Aug 8 15:52:34 2025 GMT Not After : Aug 15 15:52:34 2025 GMT Subject: CN=68961d42-1e60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:e8:14:25:7b:4c:8a:f0:0f:b0:92:bd:0e:5c: 5f:c6:0b:ed:f0:66:97:91:dc:03:8a:da:b2:3e:b4: d7:e4:53:e5:02:cd:93:b2:26:ce:95:a3:0e:c9:8c: 4a:1b:e8:dc:cf:d4:4c:a7:1f:4e:4d:d2:11:91:6f: e7:19:8b:6c:eb:33:25:57:5d:ba:f3:1e:49:22:16: 5d:e0:84:c1:6f:32:93:5c:2f:b4:ae:17:50:73:80: 61:90:33:9a:ea:b9:62:77:b8:0e:b5:4d:4d:5a:0c: 3d:ed:6c:74:6a:36:0d:55:14:83:38:c8:c1:20:8f: c9:19:77:53:5e:05:93:e8:7d:24:45:76:ae:94:47: 9b:c4:24:0b:14:a7:a7:5e:aa:11:ca:70:39:fe:dc: 26:7d:d0:bf:f7:c4:b8:60:00:59:a5:69:ef:55:93: 0c:35:a2:9b:06:8e:e0:97:53:06:ef:f5:a3:de:e3: 11:d9:d2:c5:ef:93:38:ce:39:af:8c:75:e8:da:89: fe:b7:f5:da:17:7d:55:05:18:74:eb:c0:51:d3:8c: 3c:0e:82:3b:11:75:92:62:e7:4b:b0:08:94:1e:c6: 22:ba:8a:e3:f2:b7:2b:53:32:77:13:1a:34:1c:3e: ed:c9:53:eb:93:fc:99:80:ea:c3:99:45:19:cc:8e: c9:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:72:D8:39:AE:9A:AD:84:52:BD:54:F8:25:5F:76:8A:77:8C:B3:E0 X509v3 Authority Key Identifier: keyid:4F:81:25:82:B5:7F:4C:12:C7:36:5E:6A:A7:F0:FF:CA:77:10:94:91 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B2D29/F71E7166552111E5ADB2092AC4F9AE02/T4ElgrV_TBLHNl5qp_D_yncQlJE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T4ElgrV_TBLHNl5qp_D_yncQlJE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B2D29/F71E7166552111E5ADB2092AC4F9AE02/T4ElgrV_TBLHNl5qp_D_yncQlJE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1a:6f:67:f2:05:74:ad:67:0c:e7:9c:a3:f9:b8:85:fe:fe:af: af:37:fc:fa:b9:ad:b3:4a:6a:d7:74:57:94:d9:00:90:eb:ea: e3:b0:d2:9c:ba:6d:e6:a1:39:09:d9:35:22:f3:5c:3c:f8:a7: 87:4b:28:4b:b7:da:1e:06:7f:88:48:71:64:e9:83:68:95:3a: 73:ea:bd:ea:5e:46:71:cc:22:2e:87:11:46:60:41:41:92:13: ff:a1:0f:82:6a:54:50:82:39:04:48:7b:18:7b:06:02:10:18: 8d:01:32:fc:3f:94:cc:88:d7:69:b6:77:1c:8c:e3:e7:d3:e7: 1c:1f:28:57:ba:2e:67:7d:b7:79:a3:79:e9:ba:61:a7:22:a0: 5e:f0:92:ee:8b:c0:64:ae:37:db:11:ad:2c:a2:ab:a1:a3:6a: 5e:a1:ef:16:d4:c0:36:e8:4f:10:bf:f4:32:3f:2d:cd:3e:37: be:fd:bb:fe:70:35:d1:c8:51:31:ce:35:84:e0:4f:29:02:1a: 26:d0:4d:6e:5b:cd:a1:21:b1:c5:89:67:ce:31:42:0a:b7:63: 39:68:20:fb:71:3f:fd:72:89:41:86:c5:a8:56:f5:a2:4f:ed: 16:b9:57:7c:29:e6:ad:a2:af:c1:7e:37:86:99:48:ea:cc:1f: 5d:75:5c:4f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICGNMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjJEMjkxMTAvBgNVBAUTKDRGODEyNTgyQjU3RjRDMTJDNzM2NUU2QUE3RjBGRkNB NzcxMDk0OTEwHhcNMjUwODA4MTU1MjM0WhcNMjUwODE1MTU1MjM0WjAYMRYwFAYD VQQDEw02ODk2MWQ0Mi0xZTYwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu+gUJXtMivAPsJK9Dlxfxgvt8GaXkdwDitqyPrTX5FPlAs2TsibOlaMOyYxK G+jcz9RMpx9OTdIRkW/nGYts6zMlV1268x5JIhZd4ITBbzKTXC+0rhdQc4BhkDOa 6rlid7gOtU1NWgw97Wx0ajYNVRSDOMjBII/JGXdTXgWT6H0kRXaulEebxCQLFKen XqoRynA5/twmfdC/98S4YABZpWnvVZMMNaKbBo7gl1MG7/Wj3uMR2dLF75M4zjmv jHXo2on+t/XaF31VBRh068BR04w8DoI7EXWSYudLsAiUHsYiuorj8rcrUzJ3Exo0 HD7tyVPrk/yZgOrDmUUZzI7JowIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDJy2Dmu mq2EUr1U+CVfdop3jLPgMB8GA1UdIwQYMBaAFE+BJYK1f0wSxzZeaqfw/8p3EJSR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMkQyOS9GNzFFNzE2NjU1 MjExMUU1QURCMjA5MkFDNEY5QUUwMi9UNEVsZ3JWX1RCTEhObDVxcF9EX3luY1Fs SkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1Q0RWxnclZfVEJMSE5sNXFwX0RfeW5jUWxKRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MkQyOS9GNzFFNzE2NjU1MjExMUU1QURCMjA5MkFDNEY5QUUwMi9UNEVsZ3JWX1RC TEhObDVxcF9EX3luY1FsSkUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAab2fyBXStZwznnKP5uIX+/q+vN/z6ua2zSmrXdFeU2QCQ6+rjsNKc um3moTkJ2TUi81w8+KeHSyhLt9oeBn+ISHFk6YNolTpz6r3qXkZxzCIuhxFGYEFB khP/oQ+CalRQgjkESHsYewYCEBiNATL8P5TMiNdptnccjOPn0+ccHyhXui5nfbd5 o3npumGnIqBe8JLui8BkrjfbEa0soquho2peoe8W1MA26E8Qv/QyPy3NPje+/bv+ cDXRyFExzjWE4E8pAhom0E1uW82hIbHFiWfOMUIKt2M5aCD7cT/9colBhsWoVvWi T+0WuVd8Keatoq/BfjeGmUjqzB9ddVxP -----END CERTIFICATE-----Generated at Sat Aug 9 20:34:54 2025 by rpki-client