$ rpki-client -vvf rpki.apnic.net/member_repository/A91B5CEF/9CA3F54EE7A511ECA188BE12C4F9AE02/TR4XV9LTAT5AudfK9e_JxHs3KwM.mft File: TR4XV9LTAT5AudfK9e_JxHs3KwM.mft (raw, json) Hash identifier: J1fBTvImudx8sxLwvWVUaezp898UFbJtl4IuKmmOq1g= Subject key identifier: 92:FF:D8:8C:E8:D8:F8:ED:AF:55:CF:7E:8E:23:23:DF:3B:E5:5D:63 Authority key identifier: 4D:1E:17:57:D2:D3:01:3E:40:B9:D7:CA:F5:EF:C9:C4:7B:37:2B:03 Certificate issuer: /CN=A91B5CEF/serialNumber=4D1E1757D2D3013E40B9D7CAF5EFC9C47B372B03 Certificate serial: 02FF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TR4XV9LTAT5AudfK9e_JxHs3KwM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B5CEF/9CA3F54EE7A511ECA188BE12C4F9AE02/TR4XV9LTAT5AudfK9e_JxHs3KwM.mft Manifest number: 02FF Signing time: Sat 23 Aug 2025 01:28:07 +0000 Manifest this update: Sat 23 Aug 2025 01:28:06 +0000 Manifest next update: Sat 30 Aug 2025 01:28:06 +0000 Files and hashes: 1: TR4XV9LTAT5AudfK9e_JxHs3KwM.crl (hash: TmtTet+1OyOzmVLO5ZL5xQH1QFI+N8K6Y7uCSfDgsQI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B5CEF/9CA3F54EE7A511ECA188BE12C4F9AE02/TR4XV9LTAT5AudfK9e_JxHs3KwM.crl rsync://rpki.apnic.net/member_repository/A91B5CEF/9CA3F54EE7A511ECA188BE12C4F9AE02/TR4XV9LTAT5AudfK9e_JxHs3KwM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TR4XV9LTAT5AudfK9e_JxHs3KwM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 01:28:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 767 (0x2ff) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B5CEF, serialNumber=4D1E1757D2D3013E40B9D7CAF5EFC9C47B372B03 Validity Not Before: Aug 23 01:28:06 2025 GMT Not After : Aug 30 01:28:06 2025 GMT Subject: CN=68a91927-c768 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:44:d5:a3:a8:c3:f9:70:69:ee:a2:d5:b4:7b: 67:e2:a0:a9:17:d1:3d:87:18:e7:b6:58:06:ad:e7: 74:37:e8:38:4b:48:39:03:8e:bf:35:1a:fe:0c:23: f1:0f:16:f4:3a:82:6e:96:81:16:cc:58:95:7b:6a: df:1f:96:04:0d:54:23:dc:7f:c4:a6:f1:dd:61:bf: 64:22:24:2f:fc:f0:6b:7e:e8:fb:66:4c:88:42:ee: 99:15:00:37:d6:05:47:59:d7:6c:b8:56:ee:a2:fa: 22:be:e2:15:46:b3:26:84:31:8a:87:19:74:40:e6: 0a:7d:e7:05:bd:6a:32:7f:1b:ee:c6:df:86:98:17: e2:d9:b2:b5:65:90:0d:fd:79:f5:09:22:e4:01:fc: c2:1d:a4:2e:07:05:d2:0f:d1:11:8e:ae:30:52:3b: 1f:ae:bd:9e:05:de:f4:d4:16:6b:93:47:77:da:93: 89:01:11:24:e9:3c:1f:6c:84:63:cf:fa:98:22:f1: 62:ca:68:3f:bc:1a:f5:aa:b4:95:aa:79:c2:a5:55: e7:7f:a7:d5:8a:c1:78:d7:49:4c:7c:9d:e9:67:d6: 20:9d:00:b1:ab:a4:c8:e7:2f:27:5a:5a:e1:1a:7c: 8d:62:10:f7:af:63:f6:3e:81:1a:83:7f:ea:9b:35: 21:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:FF:D8:8C:E8:D8:F8:ED:AF:55:CF:7E:8E:23:23:DF:3B:E5:5D:63 X509v3 Authority Key Identifier: keyid:4D:1E:17:57:D2:D3:01:3E:40:B9:D7:CA:F5:EF:C9:C4:7B:37:2B:03 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B5CEF/9CA3F54EE7A511ECA188BE12C4F9AE02/TR4XV9LTAT5AudfK9e_JxHs3KwM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TR4XV9LTAT5AudfK9e_JxHs3KwM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B5CEF/9CA3F54EE7A511ECA188BE12C4F9AE02/TR4XV9LTAT5AudfK9e_JxHs3KwM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1f:f4:9d:34:d6:8c:b4:d0:6f:4f:82:b7:76:6c:79:d4:59:d1: 70:7b:b8:89:44:c2:44:ec:e9:4b:a9:41:0f:c1:be:71:cb:46: 68:34:04:ff:7e:aa:5e:84:f9:9d:5a:d0:09:9b:7c:c1:6e:9c: 7a:f7:fc:c5:77:4a:18:2b:33:f6:65:f2:83:f2:47:90:3f:06: 09:5c:95:81:6f:c6:c2:9a:d6:d2:76:c8:7b:49:38:ef:3d:c7: 37:9d:b8:04:b2:2b:fd:15:09:5f:7e:58:91:a3:61:e5:59:d9: 34:27:3b:77:e8:bf:98:7e:ff:a9:cd:40:db:fb:64:4d:8e:c4: e7:6e:2b:46:36:6f:ed:60:03:a5:a1:b3:98:b2:7e:da:eb:87: 3f:b7:f7:59:33:4e:94:70:5e:5f:ba:ba:1a:39:31:14:ea:77: 83:1b:ee:a2:23:b5:60:6e:ff:31:6f:7f:d9:e7:58:74:f4:1f: d8:b0:05:e7:f0:58:04:33:83:71:19:2f:a5:5b:ab:00:a2:5a: 5f:c3:c6:e8:b4:16:4d:97:39:ab:98:bf:b7:9c:a7:53:dc:e3: 5f:75:90:6e:52:d5:4f:b5:89:d6:4f:01:36:34:61:76:a5:df: 18:89:32:f5:75:52:3a:cf:e0:4d:2f:69:a7:af:90:64:2e:28: 7d:99:5a:5d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAv8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjVDRUYxMTAvBgNVBAUTKDREMUUxNzU3RDJEMzAxM0U0MEI5RDdDQUY1RUZDOUM0 N0IzNzJCMDMwHhcNMjUwODIzMDEyODA2WhcNMjUwODMwMDEyODA2WjAYMRYwFAYD VQQDEw02OGE5MTkyNy1jNzY4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAx0TVo6jD+XBp7qLVtHtn4qCpF9E9hxjntlgGred0N+g4S0g5A46/NRr+DCPx Dxb0OoJuloEWzFiVe2rfH5YEDVQj3H/EpvHdYb9kIiQv/PBrfuj7ZkyIQu6ZFQA3 1gVHWddsuFbuovoivuIVRrMmhDGKhxl0QOYKfecFvWoyfxvuxt+GmBfi2bK1ZZAN /Xn1CSLkAfzCHaQuBwXSD9ERjq4wUjsfrr2eBd701BZrk0d32pOJAREk6TwfbIRj z/qYIvFiymg/vBr1qrSVqnnCpVXnf6fVisF410lMfJ3pZ9YgnQCxq6TI5y8nWlrh GnyNYhD3r2P2PoEag3/qmzUhXwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJL/2Izo 2Pjtr1XPfo4jI9875V1jMB8GA1UdIwQYMBaAFE0eF1fS0wE+QLnXyvXvycR7NysD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNUNFRi85Q0EzRjU0RUU3 QTUxMUVDQTE4OEJFMTJDNEY5QUUwMi9UUjRYVjlMVEFUNUF1ZGZLOWVfSnhIczNL d00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1RSNFhWOUxUQVQ1QXVkZks5ZV9KeEhzM0t3TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NUNFRi85Q0EzRjU0RUU3QTUxMUVDQTE4OEJFMTJDNEY5QUUwMi9UUjRYVjlMVEFU NUF1ZGZLOWVfSnhIczNLd00ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAf9J001oy00G9Pgrd2bHnUWdFwe7iJRMJE7OlLqUEPwb5xy0ZoNAT/ fqpehPmdWtAJm3zBbpx69/zFd0oYKzP2ZfKD8keQPwYJXJWBb8bCmtbSdsh7STjv Pcc3nbgEsiv9FQlffliRo2HlWdk0Jzt36L+Yfv+pzUDb+2RNjsTnbitGNm/tYAOl obOYsn7a64c/t/dZM06UcF5furoaOTEU6neDG+6iI7Vgbv8xb3/Z51h09B/YsAXn 8FgEM4NxGS+lW6sAolpfw8botBZNlzmrmL+3nKdT3ONfdZBuUtVPtYnWTwE2NGF2 pd8YiTL1dVI6z+BNL2mnr5BkLih9mVpd -----END CERTIFICATE-----Generated at Sat Aug 23 21:00:41 2025 by rpki-client