$ rpki-client -vvf rpki.apnic.net/member_repository/A91FE75F/AB9EB8CAA9F511EB8A492254C4F9AE02/TRThryL1OyL1be8C63LqXda-d-I.mft File: TRThryL1OyL1be8C63LqXda-d-I.mft (raw, json) Hash identifier: O8jdd/Kg8ZyVpIc6ZU04/YEg5XWkuPLZdL9tc3BfEHA= Subject key identifier: 87:84:52:84:2B:BA:BA:B0:B2:08:48:B2:41:67:0F:64:65:88:68:96 Authority key identifier: 4D:14:E1:AF:22:F5:3B:22:F5:6D:EF:02:EB:72:EA:5D:D6:BE:77:E2 Certificate issuer: /CN=A91FE75F/serialNumber=4D14E1AF22F53B22F56DEF02EB72EA5DD6BE77E2 Certificate serial: 0296 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TRThryL1OyL1be8C63LqXda-d-I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FE75F/AB9EB8CAA9F511EB8A492254C4F9AE02/TRThryL1OyL1be8C63LqXda-d-I.mft Manifest number: 087E Signing time: Thu 24 Apr 2025 22:44:05 +0000 Manifest this update: Thu 24 Apr 2025 22:44:05 +0000 Manifest next update: Thu 01 May 2025 22:44:05 +0000 Files and hashes: 1: TRThryL1OyL1be8C63LqXda-d-I.crl (hash: UHl51SwKshsmhIolszeaxVeUClGQdcgTHRjU6fhs4zw=) 2: C93E74B8D19511EEA71C3920C4F9AE02.roa (hash: 5yEwO4ZnTC2CHQn3tYL6GNEeTVAOOIXAZLN/7OfHXIo=) 3: D734CCEA1E0A11EF87335F33C4F9AE02.roa (hash: Zn/90qwbG+0Df96/zQSMkzHyx6xwf0/RZMauir90ZH8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FE75F/AB9EB8CAA9F511EB8A492254C4F9AE02/TRThryL1OyL1be8C63LqXda-d-I.crl rsync://rpki.apnic.net/member_repository/A91FE75F/AB9EB8CAA9F511EB8A492254C4F9AE02/TRThryL1OyL1be8C63LqXda-d-I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TRThryL1OyL1be8C63LqXda-d-I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 22:44:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 662 (0x296) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FE75F, serialNumber=4D14E1AF22F53B22F56DEF02EB72EA5DD6BE77E2 Validity Not Before: Apr 24 22:44:05 2025 GMT Not After : May 1 22:44:05 2025 GMT Subject: CN=680abeb5-1c4e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:a4:f7:cd:7e:36:13:3d:41:3d:3a:f0:78:bc: bc:6f:d1:1f:5f:2e:2e:9f:3e:24:0e:b1:b5:40:8a: 74:d2:53:b2:40:c4:bd:bd:89:8f:83:59:26:fa:91: 1e:cf:8f:13:3f:1f:9a:2d:f9:06:bb:bd:b7:dc:b7: 8a:db:02:db:d5:2b:e9:e3:f6:19:93:3d:88:66:fe: 1e:ab:6b:4d:11:d4:5c:2d:ee:6a:0a:47:52:ef:30: c2:20:9d:30:1d:eb:ee:1e:c0:d0:1d:ae:60:ee:c5: e4:fb:bf:c8:87:fd:95:e1:1d:b3:e1:73:27:bb:d9: ac:1c:7b:91:7d:d5:24:43:00:60:e8:7a:79:2e:d0: 7c:6e:87:a3:5c:30:59:77:82:32:85:de:cf:96:93: b0:76:fd:f2:1e:85:e8:47:8b:b5:50:cc:eb:fe:43: ef:a7:6e:87:32:9d:66:30:9a:a8:df:3f:71:18:60: 57:0d:98:be:8e:73:3e:9d:50:9a:bc:fb:c5:f2:2d: fb:8a:05:9d:39:d5:2d:53:e9:44:07:32:55:39:de: 21:21:04:e9:6b:91:4a:1b:b0:4f:8f:15:d8:c1:d2: 39:44:6f:7a:76:ad:7d:d1:0d:ea:5f:f9:a2:61:a5: 5b:6f:ce:01:21:42:ec:01:36:c3:ec:7e:86:2d:a0: 0c:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:84:52:84:2B:BA:BA:B0:B2:08:48:B2:41:67:0F:64:65:88:68:96 X509v3 Authority Key Identifier: keyid:4D:14:E1:AF:22:F5:3B:22:F5:6D:EF:02:EB:72:EA:5D:D6:BE:77:E2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FE75F/AB9EB8CAA9F511EB8A492254C4F9AE02/TRThryL1OyL1be8C63LqXda-d-I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TRThryL1OyL1be8C63LqXda-d-I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FE75F/AB9EB8CAA9F511EB8A492254C4F9AE02/TRThryL1OyL1be8C63LqXda-d-I.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4b:58:fa:8c:70:50:2e:c8:a9:fa:b2:91:da:86:d0:19:f9:dd: 7e:74:39:66:4a:02:b2:f3:1d:e1:c0:60:cb:2e:91:98:70:86: 49:9e:ef:f2:43:44:9b:4f:6c:60:3f:83:44:85:ca:ad:b0:d1: 71:e1:42:41:67:98:0b:68:01:a3:f3:a3:4d:eb:b5:28:ec:d7: 07:e4:c6:36:a5:59:27:7e:11:36:81:0d:75:1e:48:9d:11:5b: 0b:18:5b:8e:7d:f8:5a:e5:c4:63:ac:8f:18:07:f2:3c:b5:54: 3c:4f:8b:b0:39:01:75:15:72:97:26:87:a7:ce:db:76:d6:d0: 44:7d:2e:e6:d2:37:55:30:f7:72:7b:56:9f:52:0b:c8:d9:47: 8b:6d:cf:0d:ac:7e:90:2f:d0:30:bc:61:74:74:e1:4a:81:59: 97:fd:e7:a6:00:23:9e:38:01:54:63:6a:d9:a9:cc:41:c8:8e: 1e:f8:5e:f2:c9:d1:48:7a:21:dd:60:25:96:ce:e8:c6:d5:a7: f9:df:86:8b:16:aa:44:a4:03:3f:15:1b:67:4e:a1:22:87:a0: b1:68:5d:0f:1c:13:54:cd:ac:c5:85:62:0a:35:86:7f:a7:ac: f8:8b:dc:c6:fd:ca:10:02:22:5b:51:d8:40:9d:e5:f3:34:6e: 52:16:65:10 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICApYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkU3NUYxMTAvBgNVBAUTKDREMTRFMUFGMjJGNTNCMjJGNTZERUYwMkVCNzJFQTVE RDZCRTc3RTIwHhcNMjUwNDI0MjI0NDA1WhcNMjUwNTAxMjI0NDA1WjAYMRYwFAYD VQQDEw02ODBhYmViNS0xYzRlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyKT3zX42Ez1BPTrweLy8b9EfXy4unz4kDrG1QIp00lOyQMS9vYmPg1km+pEe z48TPx+aLfkGu7233LeK2wLb1Svp4/YZkz2IZv4eq2tNEdRcLe5qCkdS7zDCIJ0w HevuHsDQHa5g7sXk+7/Ih/2V4R2z4XMnu9msHHuRfdUkQwBg6Hp5LtB8boejXDBZ d4Iyhd7PlpOwdv3yHoXoR4u1UMzr/kPvp26HMp1mMJqo3z9xGGBXDZi+jnM+nVCa vPvF8i37igWdOdUtU+lEBzJVOd4hIQTpa5FKG7BPjxXYwdI5RG96dq190Q3qX/mi YaVbb84BIULsATbD7H6GLaAMMQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIeEUoQr urqwsghIskFnD2RliGiWMB8GA1UdIwQYMBaAFE0U4a8i9Tsi9W3vAuty6l3Wvnfi MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGRTc1Ri9BQjlFQjhDQUE5 RjUxMUVCOEE0OTIyNTRDNEY5QUUwMi9UUlRocnlMMU95TDFiZThDNjNMcVhkYS1k LUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1RSVGhyeUwxT3lMMWJlOEM2M0xxWGRhLWQtSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG RTc1Ri9BQjlFQjhDQUE5RjUxMUVCOEE0OTIyNTRDNEY5QUUwMi9UUlRocnlMMU95 TDFiZThDNjNMcVhkYS1kLUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBLWPqMcFAuyKn6spHahtAZ+d1+dDlmSgKy8x3hwGDLLpGYcIZJnu/y Q0SbT2xgP4NEhcqtsNFx4UJBZ5gLaAGj86NN67Uo7NcH5MY2pVknfhE2gQ11Hkid EVsLGFuOffha5cRjrI8YB/I8tVQ8T4uwOQF1FXKXJoenztt21tBEfS7m0jdVMPdy e1afUgvI2UeLbc8NrH6QL9AwvGF0dOFKgVmX/eemACOeOAFUY2rZqcxByI4e+F7y ydFIeiHdYCWWzujG1af534aLFqpEpAM/FRtnTqEih6CxaF0PHBNUzazFhWIKNYZ/ p6z4i9zG/coQAiJbUdhAneXzNG5SFmUQ -----END CERTIFICATE-----Generated at Sat Apr 26 08:25:10 2025 by rpki-client