$ rpki-client -vvf rpki.apnic.net/member_repository/A91B5CEF/9CA3F54EE7A511ECA188BE12C4F9AE02/TR4XV9LTAT5AudfK9e_JxHs3KwM.mft File: TR4XV9LTAT5AudfK9e_JxHs3KwM.mft (raw, json) Hash identifier: eMo7icA5T1UAqTMhuSUefSUlOw3+Le4u7Tbxw0X85sQ= Subject key identifier: 5B:C8:4D:29:49:7E:DC:B9:76:1B:77:BC:D3:E0:34:07:D4:4F:99:9F Authority key identifier: 4D:1E:17:57:D2:D3:01:3E:40:B9:D7:CA:F5:EF:C9:C4:7B:37:2B:03 Certificate issuer: /CN=A91B5CEF/serialNumber=4D1E1757D2D3013E40B9D7CAF5EFC9C47B372B03 Certificate serial: 02DB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TR4XV9LTAT5AudfK9e_JxHs3KwM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B5CEF/9CA3F54EE7A511ECA188BE12C4F9AE02/TR4XV9LTAT5AudfK9e_JxHs3KwM.mft Manifest number: 02DB Signing time: Sun 15 Jun 2025 01:02:09 +0000 Manifest this update: Sun 15 Jun 2025 01:02:09 +0000 Manifest next update: Sun 22 Jun 2025 01:02:09 +0000 Files and hashes: 1: TR4XV9LTAT5AudfK9e_JxHs3KwM.crl (hash: OCiMcyHu5GIdoljKdQ3KTa1iLCOYxWK54nc1baNZavs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B5CEF/9CA3F54EE7A511ECA188BE12C4F9AE02/TR4XV9LTAT5AudfK9e_JxHs3KwM.crl rsync://rpki.apnic.net/member_repository/A91B5CEF/9CA3F54EE7A511ECA188BE12C4F9AE02/TR4XV9LTAT5AudfK9e_JxHs3KwM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TR4XV9LTAT5AudfK9e_JxHs3KwM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 22 Jun 2025 01:02:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 731 (0x2db) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B5CEF, serialNumber=4D1E1757D2D3013E40B9D7CAF5EFC9C47B372B03 Validity Not Before: Jun 15 01:02:09 2025 GMT Not After : Jun 22 01:02:09 2025 GMT Subject: CN=684e1b91-5989 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:85:9d:66:74:68:0d:a2:a0:cc:e3:cc:c9:9f: 58:22:49:36:55:30:30:51:cd:30:eb:95:2c:2d:4d: a2:a9:0c:2e:f3:7f:95:03:df:19:43:86:7a:e7:78: a8:e6:be:ab:05:bf:f5:d4:52:84:a3:21:45:d6:0b: ee:5e:30:85:ea:bc:39:fe:5e:c6:63:36:22:39:8c: 92:03:5f:3f:6b:5a:b7:08:a3:f1:eb:36:ae:5c:3d: b7:a1:6f:38:0a:7e:38:ad:40:06:9e:88:a7:74:99: f0:db:0c:b5:52:2b:91:42:1d:a3:79:8d:22:cf:6b: 50:58:9a:e7:8e:01:5e:41:76:99:a3:87:0a:45:06: aa:10:ab:9c:94:ed:3f:b5:1e:c4:24:f3:8d:68:94: cb:36:66:c7:26:66:cc:f4:cc:67:54:df:22:d0:08: d1:74:64:30:7b:83:bd:ea:06:59:e4:38:5e:97:36: e9:53:3c:43:02:49:a4:13:77:94:e7:56:f4:00:52: 29:cf:f1:67:8d:fa:07:61:f3:7e:31:81:8f:9a:74: b8:13:8f:bf:1a:70:ad:5d:ca:2b:c3:10:42:0b:0f: fb:6e:dc:58:d4:ae:7f:f5:47:00:6e:6c:bb:3c:35: 8c:87:7b:92:5d:cf:e4:99:09:e2:3b:21:ab:ca:79: 12:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:C8:4D:29:49:7E:DC:B9:76:1B:77:BC:D3:E0:34:07:D4:4F:99:9F X509v3 Authority Key Identifier: keyid:4D:1E:17:57:D2:D3:01:3E:40:B9:D7:CA:F5:EF:C9:C4:7B:37:2B:03 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B5CEF/9CA3F54EE7A511ECA188BE12C4F9AE02/TR4XV9LTAT5AudfK9e_JxHs3KwM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TR4XV9LTAT5AudfK9e_JxHs3KwM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B5CEF/9CA3F54EE7A511ECA188BE12C4F9AE02/TR4XV9LTAT5AudfK9e_JxHs3KwM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2d:be:9f:6f:da:23:c2:54:71:e3:e1:c4:b6:96:1b:5d:cb:4d: 2a:58:a6:cc:79:2f:8b:62:1c:83:71:08:c4:5b:88:bf:c2:64: a6:63:b9:1c:d5:d6:71:c4:ae:3e:19:61:ac:2b:34:11:53:e9: 13:81:6d:2f:b3:04:d2:57:c3:78:18:c8:d3:92:79:dc:6c:ca: ca:87:b1:a1:f9:7c:e9:9f:b9:09:5a:69:ab:bf:0e:8e:29:de: 09:a2:fe:bd:c8:0d:6c:a4:5d:18:d0:e4:4a:56:a3:df:03:9c: 94:97:0f:1b:c4:7f:14:d3:fa:53:dd:18:3b:3d:95:cb:ab:26: ae:87:95:9c:ab:52:64:6c:2a:10:47:db:43:4d:e7:d9:1d:94: e9:61:f2:1b:8a:70:7f:35:34:6c:77:79:53:55:aa:f2:47:01: eb:a7:59:0b:61:34:be:ed:cd:3e:55:03:8b:9b:af:e2:00:51: 1d:f2:e4:af:30:fe:fa:c8:64:31:27:36:9a:59:ac:81:32:a6: 70:cc:ae:d3:1d:b5:9f:de:66:34:8e:05:ef:33:54:69:d9:27: f1:fe:f4:db:8d:88:67:a6:44:ad:d6:d5:a3:17:4a:23:0f:6e: ba:87:4a:4e:23:11:6c:8f:74:7b:48:d6:62:1b:f8:b6:3e:58: db:a1:9a:3e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAtswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjVDRUYxMTAvBgNVBAUTKDREMUUxNzU3RDJEMzAxM0U0MEI5RDdDQUY1RUZDOUM0 N0IzNzJCMDMwHhcNMjUwNjE1MDEwMjA5WhcNMjUwNjIyMDEwMjA5WjAYMRYwFAYD VQQDEw02ODRlMWI5MS01OTg5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvYWdZnRoDaKgzOPMyZ9YIkk2VTAwUc0w65UsLU2iqQwu83+VA98ZQ4Z653io 5r6rBb/11FKEoyFF1gvuXjCF6rw5/l7GYzYiOYySA18/a1q3CKPx6zauXD23oW84 Cn44rUAGnoindJnw2wy1UiuRQh2jeY0iz2tQWJrnjgFeQXaZo4cKRQaqEKuclO0/ tR7EJPONaJTLNmbHJmbM9MxnVN8i0AjRdGQwe4O96gZZ5DhelzbpUzxDAkmkE3eU 51b0AFIpz/FnjfoHYfN+MYGPmnS4E4+/GnCtXcorwxBCCw/7btxY1K5/9UcAbmy7 PDWMh3uSXc/kmQniOyGrynkSbwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFvITSlJ fty5dht3vNPgNAfUT5mfMB8GA1UdIwQYMBaAFE0eF1fS0wE+QLnXyvXvycR7NysD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNUNFRi85Q0EzRjU0RUU3 QTUxMUVDQTE4OEJFMTJDNEY5QUUwMi9UUjRYVjlMVEFUNUF1ZGZLOWVfSnhIczNL d00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1RSNFhWOUxUQVQ1QXVkZks5ZV9KeEhzM0t3TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NUNFRi85Q0EzRjU0RUU3QTUxMUVDQTE4OEJFMTJDNEY5QUUwMi9UUjRYVjlMVEFU NUF1ZGZLOWVfSnhIczNLd00ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAtvp9v2iPCVHHj4cS2lhtdy00qWKbMeS+LYhyDcQjEW4i/wmSmY7kc 1dZxxK4+GWGsKzQRU+kTgW0vswTSV8N4GMjTknncbMrKh7Gh+Xzpn7kJWmmrvw6O Kd4Jov69yA1spF0Y0ORKVqPfA5yUlw8bxH8U0/pT3Rg7PZXLqyauh5Wcq1JkbCoQ R9tDTefZHZTpYfIbinB/NTRsd3lTVaryRwHrp1kLYTS+7c0+VQOLm6/iAFEd8uSv MP76yGQxJzaaWayBMqZwzK7THbWf3mY0jgXvM1Rp2Sfx/vTbjYhnpkSt1tWjF0oj D266h0pOIxFsj3R7SNZiG/i2PljboZo+ -----END CERTIFICATE-----Generated at Sun Jun 15 05:52:22 2025 by rpki-client