$ rpki-client -vvf rpki.apnic.net/member_repository/A91B5CEF/9CA3F54EE7A511ECA188BE12C4F9AE02/TR4XV9LTAT5AudfK9e_JxHs3KwM.mft File: TR4XV9LTAT5AudfK9e_JxHs3KwM.mft (raw, json) Hash identifier: GaQ7q0d+6iQ6IbIsierhAJBD5j/taGkV5Mcsigj0yS4= Subject key identifier: 6E:E6:F8:AA:A1:31:1E:FE:31:78:50:B9:A3:20:3B:1A:58:7C:27:14 Authority key identifier: 4D:1E:17:57:D2:D3:01:3E:40:B9:D7:CA:F5:EF:C9:C4:7B:37:2B:03 Certificate issuer: /CN=A91B5CEF/serialNumber=4D1E1757D2D3013E40B9D7CAF5EFC9C47B372B03 Certificate serial: 031C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TR4XV9LTAT5AudfK9e_JxHs3KwM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B5CEF/9CA3F54EE7A511ECA188BE12C4F9AE02/TR4XV9LTAT5AudfK9e_JxHs3KwM.mft Manifest number: 031C Signing time: Sun 19 Oct 2025 03:10:46 +0000 Manifest this update: Sun 19 Oct 2025 03:10:45 +0000 Manifest next update: Sun 26 Oct 2025 03:10:45 +0000 Files and hashes: 1: TR4XV9LTAT5AudfK9e_JxHs3KwM.crl (hash: nZ67BAORCuMFE0H6qA85WN1AFFHSkUuxq0oENSzC8ls=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B5CEF/9CA3F54EE7A511ECA188BE12C4F9AE02/TR4XV9LTAT5AudfK9e_JxHs3KwM.crl rsync://rpki.apnic.net/member_repository/A91B5CEF/9CA3F54EE7A511ECA188BE12C4F9AE02/TR4XV9LTAT5AudfK9e_JxHs3KwM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TR4XV9LTAT5AudfK9e_JxHs3KwM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 03:10:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 796 (0x31c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B5CEF, serialNumber=4D1E1757D2D3013E40B9D7CAF5EFC9C47B372B03 Validity Not Before: Oct 19 03:10:45 2025 GMT Not After : Oct 26 03:10:45 2025 GMT Subject: CN=68f456b5-4e9a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:a0:a6:8a:43:41:48:3f:08:88:ef:a9:e0:94: 44:e4:1d:b4:0f:36:7d:87:01:b0:2f:82:05:cd:b3: 85:8d:46:39:da:47:a3:fe:be:3a:92:01:51:aa:38: 8d:07:7f:6f:02:3b:fd:5a:44:e6:38:ab:37:23:75: ab:a4:c2:77:8e:95:49:4d:00:f5:71:8b:3d:16:bc: f6:86:46:3a:ea:26:e9:f6:fa:94:71:36:b6:fe:0b: ea:8a:3a:99:ea:46:08:fc:d3:34:bd:08:a9:96:cb: f7:fa:7d:b4:68:e6:f9:a3:de:db:df:5c:10:aa:a5: d5:34:85:d0:f0:31:ac:8c:f3:a1:2c:ae:32:6c:97: 7b:68:8c:01:6b:7b:3a:63:aa:5f:f2:ee:cd:19:7d: d2:bc:97:5f:29:e9:38:30:72:9d:6c:f5:36:68:5f: a0:40:28:5b:ea:f6:19:f9:cd:79:b1:4d:96:00:cf: d3:dc:7b:b8:95:5d:db:a0:58:0f:3d:fd:c4:be:9b: 71:5a:0a:90:a1:b2:dd:0c:73:82:82:f4:4f:c9:ac: 2a:f1:9e:0b:d5:3e:5e:81:df:6f:de:e0:9e:84:7b: 3e:41:05:29:48:4c:8a:8f:59:6b:38:60:07:b3:c6: 46:53:47:95:11:32:d5:b0:b2:d0:8c:84:e9:01:e6: f1:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:E6:F8:AA:A1:31:1E:FE:31:78:50:B9:A3:20:3B:1A:58:7C:27:14 X509v3 Authority Key Identifier: keyid:4D:1E:17:57:D2:D3:01:3E:40:B9:D7:CA:F5:EF:C9:C4:7B:37:2B:03 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B5CEF/9CA3F54EE7A511ECA188BE12C4F9AE02/TR4XV9LTAT5AudfK9e_JxHs3KwM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TR4XV9LTAT5AudfK9e_JxHs3KwM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B5CEF/9CA3F54EE7A511ECA188BE12C4F9AE02/TR4XV9LTAT5AudfK9e_JxHs3KwM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 23:66:7e:32:45:6b:50:b4:6b:78:ab:00:fc:8c:fc:ef:c7:3f: 6d:f5:74:38:77:1f:d4:f3:b6:60:d0:8d:02:03:ac:11:b2:f1: cb:ee:0c:ba:64:18:f3:d4:0b:48:c1:36:f9:80:43:30:91:1f: 23:2d:7e:47:1e:2f:e7:08:bd:e1:12:42:35:08:8f:8c:f2:53: e7:89:e8:d9:44:e5:b8:b6:0c:f0:2b:bc:ae:42:25:c8:d3:4a: 05:ef:eb:64:cd:cd:63:16:63:ac:67:d1:8a:c3:c2:dd:55:fc: 14:75:a0:54:67:4f:1a:d5:ee:72:8f:01:25:68:a3:cb:b5:ba: fe:da:ef:c6:09:fd:a7:67:ff:3e:6f:43:31:f1:c9:d6:c8:96: 97:fb:11:89:05:bb:3a:a6:00:fb:cb:9b:59:aa:7e:eb:0f:c2: 2f:b2:1a:1e:da:d4:3d:7b:01:47:d1:d1:b2:51:43:a4:99:8d: cf:66:c9:c7:28:4b:67:76:b1:fc:e0:b3:44:37:eb:bd:d2:27: 69:04:86:b3:5b:f6:1a:5b:1d:85:9a:9f:67:4c:67:db:ae:22: 8c:92:e2:89:7c:dc:7e:25:24:3f:47:5c:7e:e2:ce:c7:a1:91: 34:41:57:b7:07:59:c4:bf:16:d0:6e:25:c7:7c:1b:9b:43:18: 73:35:c9:cf -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAxwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjVDRUYxMTAvBgNVBAUTKDREMUUxNzU3RDJEMzAxM0U0MEI5RDdDQUY1RUZDOUM0 N0IzNzJCMDMwHhcNMjUxMDE5MDMxMDQ1WhcNMjUxMDI2MDMxMDQ1WjAYMRYwFAYD VQQDEw02OGY0NTZiNS00ZTlhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzKCmikNBSD8IiO+p4JRE5B20DzZ9hwGwL4IFzbOFjUY52kej/r46kgFRqjiN B39vAjv9WkTmOKs3I3WrpMJ3jpVJTQD1cYs9Frz2hkY66ibp9vqUcTa2/gvqijqZ 6kYI/NM0vQiplsv3+n20aOb5o97b31wQqqXVNIXQ8DGsjPOhLK4ybJd7aIwBa3s6 Y6pf8u7NGX3SvJdfKek4MHKdbPU2aF+gQChb6vYZ+c15sU2WAM/T3Hu4lV3boFgP Pf3EvptxWgqQobLdDHOCgvRPyawq8Z4L1T5egd9v3uCehHs+QQUpSEyKj1lrOGAH s8ZGU0eVETLVsLLQjITpAebxSQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFG7m+Kqh MR7+MXhQuaMgOxpYfCcUMB8GA1UdIwQYMBaAFE0eF1fS0wE+QLnXyvXvycR7NysD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNUNFRi85Q0EzRjU0RUU3 QTUxMUVDQTE4OEJFMTJDNEY5QUUwMi9UUjRYVjlMVEFUNUF1ZGZLOWVfSnhIczNL d00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1RSNFhWOUxUQVQ1QXVkZks5ZV9KeEhzM0t3TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NUNFRi85Q0EzRjU0RUU3QTUxMUVDQTE4OEJFMTJDNEY5QUUwMi9UUjRYVjlMVEFU NUF1ZGZLOWVfSnhIczNLd00ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAjZn4yRWtQtGt4qwD8jPzvxz9t9XQ4dx/U87Zg0I0CA6wRsvHL7gy6 ZBjz1AtIwTb5gEMwkR8jLX5HHi/nCL3hEkI1CI+M8lPniejZROW4tgzwK7yuQiXI 00oF7+tkzc1jFmOsZ9GKw8LdVfwUdaBUZ08a1e5yjwElaKPLtbr+2u/GCf2nZ/8+ b0Mx8cnWyJaX+xGJBbs6pgD7y5tZqn7rD8Ivshoe2tQ9ewFH0dGyUUOkmY3PZsnH KEtndrH84LNEN+u90idpBIazW/YaWx2Fmp9nTGfbriKMkuKJfNx+JSQ/R1x+4s7H oZE0QVe3B1nEvxbQbiXHfBubQxhzNcnP -----END CERTIFICATE-----Generated at Mon Oct 20 18:45:26 2025 by rpki-client