$ rpki-client -vvf rpki.apnic.net/member_repository/A91B5CEF/9CA3F54EE7A511ECA188BE12C4F9AE02/TR4XV9LTAT5AudfK9e_JxHs3KwM.mft File: TR4XV9LTAT5AudfK9e_JxHs3KwM.mft (raw, json) Hash identifier: QS3dIoi4/L1ocKP61cJxHv8IkMyXE0iI4F/1U+zv3l4= Subject key identifier: EA:D4:47:AB:79:76:75:95:E6:A4:5F:53:C6:5D:E1:57:D5:B5:95:6B Authority key identifier: 4D:1E:17:57:D2:D3:01:3E:40:B9:D7:CA:F5:EF:C9:C4:7B:37:2B:03 Certificate issuer: /CN=A91B5CEF/serialNumber=4D1E1757D2D3013E40B9D7CAF5EFC9C47B372B03 Certificate serial: 02CA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TR4XV9LTAT5AudfK9e_JxHs3KwM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B5CEF/9CA3F54EE7A511ECA188BE12C4F9AE02/TR4XV9LTAT5AudfK9e_JxHs3KwM.mft Manifest number: 02CA Signing time: Sun 11 May 2025 00:55:36 +0000 Manifest this update: Sun 11 May 2025 00:55:36 +0000 Manifest next update: Sun 18 May 2025 00:55:36 +0000 Files and hashes: 1: TR4XV9LTAT5AudfK9e_JxHs3KwM.crl (hash: TGj3kbRomb+Z1tTserq987WoScBgAOX06/lL9G03HGo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B5CEF/9CA3F54EE7A511ECA188BE12C4F9AE02/TR4XV9LTAT5AudfK9e_JxHs3KwM.crl rsync://rpki.apnic.net/member_repository/A91B5CEF/9CA3F54EE7A511ECA188BE12C4F9AE02/TR4XV9LTAT5AudfK9e_JxHs3KwM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TR4XV9LTAT5AudfK9e_JxHs3KwM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 May 2025 18:24:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 714 (0x2ca) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B5CEF, serialNumber=4D1E1757D2D3013E40B9D7CAF5EFC9C47B372B03 Validity Not Before: May 11 00:55:36 2025 GMT Not After : May 18 00:55:36 2025 GMT Subject: CN=681ff588-e052 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:10:92:52:65:7a:ef:f2:c0:ac:92:19:a1:91: 04:94:d1:05:76:82:1d:c5:34:1e:83:61:45:02:45: aa:de:8b:ad:5c:8e:a6:b9:6b:88:2a:e6:fe:fe:f7: 20:b3:0e:4c:ab:64:03:b6:37:f2:74:e0:e2:c3:42: 2e:f2:d6:fb:9c:bc:d2:9b:62:ed:03:20:39:99:43: 61:87:fd:8b:e2:6f:d8:ba:30:b2:b9:bd:f0:e4:90: cd:e1:9d:8f:95:3a:44:53:56:26:c7:e9:9a:21:56: fa:00:a8:96:79:f4:c4:40:ef:82:6c:60:32:3b:d6: 31:2d:49:ee:78:b7:14:c3:bc:1a:6c:93:6c:5e:d9: c6:d7:ec:54:64:7d:6f:99:3e:a3:1a:ed:26:e9:65: 19:c6:c8:0e:42:ae:63:d4:d0:ac:73:eb:75:bf:a1: 96:47:42:76:c9:ad:f3:15:61:d7:79:09:6a:c1:21: 5c:ca:a3:1c:7d:7c:99:d1:4f:75:62:74:b5:fc:21: 7b:bf:60:dc:10:9d:ae:62:49:9e:0a:4e:08:f5:b9: 22:91:f8:4e:1e:8e:cb:13:eb:a7:59:8e:de:d2:93: 74:2d:db:13:5c:d4:47:fe:c1:25:77:92:66:36:07: 5c:9e:a0:5a:8b:08:66:b9:22:d1:a2:e4:c2:36:d6: 9d:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:D4:47:AB:79:76:75:95:E6:A4:5F:53:C6:5D:E1:57:D5:B5:95:6B X509v3 Authority Key Identifier: keyid:4D:1E:17:57:D2:D3:01:3E:40:B9:D7:CA:F5:EF:C9:C4:7B:37:2B:03 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B5CEF/9CA3F54EE7A511ECA188BE12C4F9AE02/TR4XV9LTAT5AudfK9e_JxHs3KwM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TR4XV9LTAT5AudfK9e_JxHs3KwM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B5CEF/9CA3F54EE7A511ECA188BE12C4F9AE02/TR4XV9LTAT5AudfK9e_JxHs3KwM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1e:84:95:e5:ed:21:ea:df:7c:8a:d4:93:1a:8e:3a:46:c1:a0: 8a:47:75:9b:ad:25:71:55:02:f5:19:ed:e0:74:94:54:8a:72: bb:fa:71:b4:34:7b:56:50:bc:8d:cf:c2:16:59:4b:37:ce:8f: 91:c8:60:9f:0c:9e:2d:7c:23:ba:bb:1e:14:52:41:0e:61:9b: 8c:a9:37:94:ac:f5:05:55:bb:61:5c:e9:6f:d3:0f:52:a3:59: fd:d6:96:03:5b:46:6e:a4:18:d8:ff:73:7b:21:63:3f:87:27: cd:75:7f:0a:d6:9e:86:2f:70:19:25:19:67:75:4e:14:3b:eb: 08:8a:a9:73:11:c0:c9:bc:81:31:14:a1:2a:5d:d2:e1:4e:f9: 63:50:f7:8d:13:aa:fa:23:38:5c:26:d0:06:76:8e:79:d2:1c: 59:62:34:d4:51:a8:3c:d8:3f:01:6c:0e:a9:40:6f:b6:aa:53: d5:f8:2e:65:e8:09:ad:79:31:f1:67:8a:ba:ad:10:41:54:8c: 13:ff:e8:79:d5:78:4e:a9:03:46:a8:5d:0b:3f:d2:87:c4:23: 6b:49:3b:05:03:e9:60:da:66:8e:4f:43:29:05:9d:24:69:3d: f4:0c:a8:7b:08:b8:30:9b:16:84:81:02:31:f7:92:81:fd:9d: c1:e6:ca:0a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAsowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjVDRUYxMTAvBgNVBAUTKDREMUUxNzU3RDJEMzAxM0U0MEI5RDdDQUY1RUZDOUM0 N0IzNzJCMDMwHhcNMjUwNTExMDA1NTM2WhcNMjUwNTE4MDA1NTM2WjAYMRYwFAYD VQQDEw02ODFmZjU4OC1lMDUyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4RCSUmV67/LArJIZoZEElNEFdoIdxTQeg2FFAkWq3outXI6muWuIKub+/vcg sw5Mq2QDtjfydODiw0Iu8tb7nLzSm2LtAyA5mUNhh/2L4m/YujCyub3w5JDN4Z2P lTpEU1Ymx+maIVb6AKiWefTEQO+CbGAyO9YxLUnueLcUw7wabJNsXtnG1+xUZH1v mT6jGu0m6WUZxsgOQq5j1NCsc+t1v6GWR0J2ya3zFWHXeQlqwSFcyqMcfXyZ0U91 YnS1/CF7v2DcEJ2uYkmeCk4I9bkikfhOHo7LE+unWY7e0pN0LdsTXNRH/sEld5Jm NgdcnqBaiwhmuSLRouTCNtad1wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOrUR6t5 dnWV5qRfU8Zd4VfVtZVrMB8GA1UdIwQYMBaAFE0eF1fS0wE+QLnXyvXvycR7NysD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNUNFRi85Q0EzRjU0RUU3 QTUxMUVDQTE4OEJFMTJDNEY5QUUwMi9UUjRYVjlMVEFUNUF1ZGZLOWVfSnhIczNL d00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1RSNFhWOUxUQVQ1QXVkZks5ZV9KeEhzM0t3TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NUNFRi85Q0EzRjU0RUU3QTUxMUVDQTE4OEJFMTJDNEY5QUUwMi9UUjRYVjlMVEFU NUF1ZGZLOWVfSnhIczNLd00ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAehJXl7SHq33yK1JMajjpGwaCKR3WbrSVxVQL1Ge3gdJRUinK7+nG0 NHtWULyNz8IWWUs3zo+RyGCfDJ4tfCO6ux4UUkEOYZuMqTeUrPUFVbthXOlv0w9S o1n91pYDW0ZupBjY/3N7IWM/hyfNdX8K1p6GL3AZJRlndU4UO+sIiqlzEcDJvIEx FKEqXdLhTvljUPeNE6r6IzhcJtAGdo550hxZYjTUUag82D8BbA6pQG+2qlPV+C5l 6AmteTHxZ4q6rRBBVIwT/+h51XhOqQNGqF0LP9KHxCNrSTsFA+lg2maOT0MpBZ0k aT30DKh7CLgwmxaEgQIx95KB/Z3B5soK -----END CERTIFICATE-----Generated at Sun May 11 03:42:17 2025 by rpki-client