$ rpki-client -vvf rpki.apnic.net/member_repository/A91B5CEF/9CA3F54EE7A511ECA188BE12C4F9AE02/TR4XV9LTAT5AudfK9e_JxHs3KwM.mft File: TR4XV9LTAT5AudfK9e_JxHs3KwM.mft (raw, json) Hash identifier: BXObw8afeM5ZuWkeWRevenagf32ovuFL5BhNR7BOfa0= Subject key identifier: 2C:2F:AA:00:3F:42:D3:98:17:0E:CB:67:0E:7F:06:3F:06:91:CC:DF Authority key identifier: 4D:1E:17:57:D2:D3:01:3E:40:B9:D7:CA:F5:EF:C9:C4:7B:37:2B:03 Certificate issuer: /CN=A91B5CEF/serialNumber=4D1E1757D2D3013E40B9D7CAF5EFC9C47B372B03 Certificate serial: 02C2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TR4XV9LTAT5AudfK9e_JxHs3KwM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B5CEF/9CA3F54EE7A511ECA188BE12C4F9AE02/TR4XV9LTAT5AudfK9e_JxHs3KwM.mft Manifest number: 02C2 Signing time: Fri 25 Apr 2025 01:09:56 +0000 Manifest this update: Fri 25 Apr 2025 01:09:56 +0000 Manifest next update: Fri 02 May 2025 01:09:56 +0000 Files and hashes: 1: TR4XV9LTAT5AudfK9e_JxHs3KwM.crl (hash: F7zU0s8+k+aSRVR/iUMIYR94tOnXF0WeXFLYjwh5nqc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B5CEF/9CA3F54EE7A511ECA188BE12C4F9AE02/TR4XV9LTAT5AudfK9e_JxHs3KwM.crl rsync://rpki.apnic.net/member_repository/A91B5CEF/9CA3F54EE7A511ECA188BE12C4F9AE02/TR4XV9LTAT5AudfK9e_JxHs3KwM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TR4XV9LTAT5AudfK9e_JxHs3KwM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 01:09:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 706 (0x2c2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B5CEF, serialNumber=4D1E1757D2D3013E40B9D7CAF5EFC9C47B372B03 Validity Not Before: Apr 25 01:09:56 2025 GMT Not After : May 2 01:09:56 2025 GMT Subject: CN=680ae0e4-87d5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:83:51:f0:4a:d2:31:70:6c:5e:d7:49:ae:3c: ef:3d:8f:c0:bb:8b:51:1e:e0:21:6e:55:16:c0:31: f9:b8:61:0c:5a:36:53:75:06:73:3c:e0:92:14:be: de:8e:90:33:d1:91:d2:0a:d0:7f:79:0d:8f:a1:02: 52:5d:5d:fb:29:76:5d:3d:4b:e5:0f:3f:28:fd:c4: 68:c2:3a:2f:9d:6d:46:99:22:e9:37:30:a2:47:31: d1:1b:74:5c:bf:3c:64:0f:6a:76:b0:32:98:34:26: c4:1c:45:56:cb:d6:c9:bf:ad:4f:a5:02:b8:ee:81: 7a:a3:98:61:af:de:ed:22:92:ca:b2:a2:b7:54:61: fb:d4:51:e5:f4:fb:b6:41:b7:37:1a:cc:6c:1b:d7: 1a:87:22:01:46:94:8c:d2:92:0d:d1:7b:36:17:43: 9b:93:f3:a6:1b:99:22:eb:1c:50:d8:3f:cd:02:d6: bc:64:5d:e0:da:f1:0f:79:67:1a:77:95:63:64:07: d3:c9:74:08:14:c3:f6:24:c1:23:c0:af:d9:f8:5e: 47:63:ba:58:b7:ed:86:48:14:45:91:db:f6:bc:43: c1:68:7d:dc:b7:7e:83:84:74:84:e7:ac:3a:06:e1: 63:8d:50:9d:d9:0f:40:6d:3d:9f:cb:31:3a:86:50: ad:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:2F:AA:00:3F:42:D3:98:17:0E:CB:67:0E:7F:06:3F:06:91:CC:DF X509v3 Authority Key Identifier: keyid:4D:1E:17:57:D2:D3:01:3E:40:B9:D7:CA:F5:EF:C9:C4:7B:37:2B:03 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B5CEF/9CA3F54EE7A511ECA188BE12C4F9AE02/TR4XV9LTAT5AudfK9e_JxHs3KwM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TR4XV9LTAT5AudfK9e_JxHs3KwM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B5CEF/9CA3F54EE7A511ECA188BE12C4F9AE02/TR4XV9LTAT5AudfK9e_JxHs3KwM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 59:cf:fb:04:89:00:7b:7b:46:4f:76:b5:bf:6f:88:7c:8a:f4: c7:ca:5e:6b:87:a7:bc:91:07:87:b6:6b:16:ca:f7:b1:8b:33: 7f:91:56:4e:1b:4e:96:47:4e:c4:6f:51:c0:fd:b1:56:42:77: 6f:f9:d7:b5:a8:ef:c1:40:1b:d8:1a:cb:78:39:6f:d6:b2:51: a3:0d:42:c0:9e:2b:2d:bd:c5:06:b0:d6:1c:47:fe:52:3f:f1: 0d:bc:2e:f2:ae:b9:ec:16:19:5a:3b:a0:85:8f:e7:48:bb:dc: 0b:e9:72:b1:9c:7d:2c:a8:22:5f:05:c7:bf:1d:21:e1:83:e8: d9:c0:c8:db:7e:22:74:3e:dd:44:a9:b3:e1:65:93:41:59:d9: 84:61:02:a6:f7:dd:2a:5e:53:89:bf:fc:b7:a9:70:2d:ee:2a: 52:06:78:66:cf:2c:df:9b:1b:64:41:53:bb:ee:e4:1e:b1:d3: d0:45:21:b9:d5:47:ef:f4:74:05:75:29:33:fe:08:01:a2:4e: cc:ed:69:b2:97:50:bc:a0:2f:15:e6:18:0d:c8:57:f0:ff:fa: e8:ce:a7:92:87:7d:19:61:73:d7:9c:70:df:69:5b:75:88:fa: ca:5a:c3:dd:96:9b:e7:cf:80:6e:36:63:95:6f:1e:b3:b0:75: 6f:85:4d:1e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAsIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjVDRUYxMTAvBgNVBAUTKDREMUUxNzU3RDJEMzAxM0U0MEI5RDdDQUY1RUZDOUM0 N0IzNzJCMDMwHhcNMjUwNDI1MDEwOTU2WhcNMjUwNTAyMDEwOTU2WjAYMRYwFAYD VQQDEw02ODBhZTBlNC04N2Q1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuYNR8ErSMXBsXtdJrjzvPY/Au4tRHuAhblUWwDH5uGEMWjZTdQZzPOCSFL7e jpAz0ZHSCtB/eQ2PoQJSXV37KXZdPUvlDz8o/cRowjovnW1GmSLpNzCiRzHRG3Rc vzxkD2p2sDKYNCbEHEVWy9bJv61PpQK47oF6o5hhr97tIpLKsqK3VGH71FHl9Pu2 Qbc3GsxsG9cahyIBRpSM0pIN0Xs2F0Obk/OmG5ki6xxQ2D/NAta8ZF3g2vEPeWca d5VjZAfTyXQIFMP2JMEjwK/Z+F5HY7pYt+2GSBRFkdv2vEPBaH3ct36DhHSE56w6 BuFjjVCd2Q9AbT2fyzE6hlCtBQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCwvqgA/ QtOYFw7LZw5/Bj8GkczfMB8GA1UdIwQYMBaAFE0eF1fS0wE+QLnXyvXvycR7NysD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNUNFRi85Q0EzRjU0RUU3 QTUxMUVDQTE4OEJFMTJDNEY5QUUwMi9UUjRYVjlMVEFUNUF1ZGZLOWVfSnhIczNL d00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1RSNFhWOUxUQVQ1QXVkZks5ZV9KeEhzM0t3TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NUNFRi85Q0EzRjU0RUU3QTUxMUVDQTE4OEJFMTJDNEY5QUUwMi9UUjRYVjlMVEFU NUF1ZGZLOWVfSnhIczNLd00ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBZz/sEiQB7e0ZPdrW/b4h8ivTHyl5rh6e8kQeHtmsWyvexizN/kVZO G06WR07Eb1HA/bFWQndv+de1qO/BQBvYGst4OW/WslGjDULAnistvcUGsNYcR/5S P/ENvC7yrrnsFhlaO6CFj+dIu9wL6XKxnH0sqCJfBce/HSHhg+jZwMjbfiJ0Pt1E qbPhZZNBWdmEYQKm990qXlOJv/y3qXAt7ipSBnhmzyzfmxtkQVO77uQesdPQRSG5 1Ufv9HQFdSkz/ggBok7M7Wmyl1C8oC8V5hgNyFfw//rozqeSh30ZYXPXnHDfaVt1 iPrKWsPdlpvnz4BuNmOVbx6zsHVvhU0e -----END CERTIFICATE-----Generated at Sat Apr 26 12:22:00 2025 by rpki-client