$ rpki-client -vvf rpki.apnic.net/member_repository/A91FE75F/AB9EB8CAA9F511EB8A492254C4F9AE02/TRThryL1OyL1be8C63LqXda-d-I.mft File: TRThryL1OyL1be8C63LqXda-d-I.mft (raw, json) Hash identifier: IKXkrgXIOudYs2IRWpDPRyH/sc04BPGCTRQbC7Rxcho= Subject key identifier: 34:07:CD:5C:95:66:DC:3A:D5:5C:08:C3:0B:67:FB:B3:56:D0:12:6A Authority key identifier: 4D:14:E1:AF:22:F5:3B:22:F5:6D:EF:02:EB:72:EA:5D:D6:BE:77:E2 Certificate issuer: /CN=A91FE75F/serialNumber=4D14E1AF22F53B22F56DEF02EB72EA5DD6BE77E2 Certificate serial: 02B6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TRThryL1OyL1be8C63LqXda-d-I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FE75F/AB9EB8CAA9F511EB8A492254C4F9AE02/TRThryL1OyL1be8C63LqXda-d-I.mft Manifest number: 08BE Signing time: Sat 28 Jun 2025 22:26:47 +0000 Manifest this update: Sat 28 Jun 2025 22:26:47 +0000 Manifest next update: Sat 05 Jul 2025 22:26:47 +0000 Files and hashes: 1: TRThryL1OyL1be8C63LqXda-d-I.crl (hash: myWcjHRv+K+B+dgiIBWnjWrMU4gIK8H7ArRmNK/hOkA=) 2: C93E74B8D19511EEA71C3920C4F9AE02.roa (hash: 5yEwO4ZnTC2CHQn3tYL6GNEeTVAOOIXAZLN/7OfHXIo=) 3: D734CCEA1E0A11EF87335F33C4F9AE02.roa (hash: Zn/90qwbG+0Df96/zQSMkzHyx6xwf0/RZMauir90ZH8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FE75F/AB9EB8CAA9F511EB8A492254C4F9AE02/TRThryL1OyL1be8C63LqXda-d-I.crl rsync://rpki.apnic.net/member_repository/A91FE75F/AB9EB8CAA9F511EB8A492254C4F9AE02/TRThryL1OyL1be8C63LqXda-d-I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TRThryL1OyL1be8C63LqXda-d-I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 05 Jul 2025 22:26:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 694 (0x2b6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FE75F, serialNumber=4D14E1AF22F53B22F56DEF02EB72EA5DD6BE77E2 Validity Not Before: Jun 28 22:26:47 2025 GMT Not After : Jul 5 22:26:47 2025 GMT Subject: CN=68606c27-babb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:a0:fd:0e:47:24:51:b8:5e:2e:f2:e1:2a:df: 33:cb:d0:ce:01:30:e2:86:d1:e3:da:f3:a9:0d:28: d1:06:9d:d2:13:60:8a:67:b9:01:d1:4d:80:8f:74: d2:79:d1:c6:26:41:b2:38:1b:06:44:4c:af:7f:2c: fa:aa:38:dc:5a:4e:b7:b8:37:5c:1d:58:ef:7a:e9: 30:58:e9:c1:66:b5:9c:f2:db:f5:83:98:5c:b7:a6: bc:f9:f3:44:11:69:a6:61:bf:32:e2:c6:5f:a4:8c: 66:b7:a1:c8:8b:8b:55:ae:9b:6d:e6:74:5a:01:5f: fc:4e:a0:20:a9:1e:30:6b:0b:db:32:6b:cc:8c:a8: d1:d0:eb:1b:14:15:5f:c4:26:cd:bb:43:0d:05:64: 16:9e:b4:8c:e3:fd:6a:78:51:6d:81:34:21:72:d1: e6:fd:cf:47:c7:c5:c1:25:f6:a3:39:30:c7:2d:b4: f7:a6:bd:e1:d2:cc:57:22:1c:bd:65:f8:08:b3:01: 07:f6:3b:4a:30:97:83:21:a2:cb:99:ba:e6:7f:0b: 44:b4:bb:7c:33:35:78:09:9d:9d:cf:a3:83:89:33: 4f:97:59:b3:7e:84:55:ce:bb:be:f8:5b:f0:7f:13: 28:b3:c3:e7:59:c9:b9:84:91:de:84:cd:9f:58:41: 2b:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:07:CD:5C:95:66:DC:3A:D5:5C:08:C3:0B:67:FB:B3:56:D0:12:6A X509v3 Authority Key Identifier: keyid:4D:14:E1:AF:22:F5:3B:22:F5:6D:EF:02:EB:72:EA:5D:D6:BE:77:E2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FE75F/AB9EB8CAA9F511EB8A492254C4F9AE02/TRThryL1OyL1be8C63LqXda-d-I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TRThryL1OyL1be8C63LqXda-d-I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FE75F/AB9EB8CAA9F511EB8A492254C4F9AE02/TRThryL1OyL1be8C63LqXda-d-I.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 40:00:ac:29:90:58:d7:5e:a7:ab:45:cd:e9:9e:48:23:91:44: 28:4a:41:d4:aa:1a:42:e9:76:b7:3c:d8:c4:b1:98:45:d8:9c: af:a1:be:a3:be:9d:32:0a:f5:a7:a2:ba:76:d8:e4:83:e9:1c: f4:ab:f2:2c:f5:da:7c:9a:dd:dd:0b:fc:bf:99:df:b2:5f:48: f8:14:f1:02:f8:ce:95:cb:31:95:8f:dd:c2:71:05:2e:d3:29: f0:55:80:e1:fe:49:57:80:29:e0:22:b6:96:01:6f:d1:f1:33: e3:a1:7e:05:5a:49:2a:e2:26:42:3e:82:c3:c7:08:fa:30:3d: a4:d0:da:87:85:0d:3b:92:f4:50:f6:bd:c9:ea:0b:81:62:5c: 29:c8:32:1a:75:a3:29:60:4f:fc:99:27:6b:2c:ff:48:1e:7b: 85:a6:91:f1:74:83:25:f1:24:5a:3f:d2:13:b5:a6:ae:41:63: 8f:16:ed:ad:1f:e2:b1:a2:ae:71:46:88:23:ad:98:14:41:74: c2:a5:3e:e8:f6:d9:b0:3c:3a:38:dd:d1:22:09:ff:73:ab:d3: 7b:42:62:c5:ce:0d:44:e0:13:82:40:ab:27:35:a4:69:8d:58: 89:18:2d:6f:23:7b:d1:cd:a6:6d:8e:6b:0d:c9:a9:75:ac:5e: e6:40:5f:b6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICArYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkU3NUYxMTAvBgNVBAUTKDREMTRFMUFGMjJGNTNCMjJGNTZERUYwMkVCNzJFQTVE RDZCRTc3RTIwHhcNMjUwNjI4MjIyNjQ3WhcNMjUwNzA1MjIyNjQ3WjAYMRYwFAYD VQQDEw02ODYwNmMyNy1iYWJiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvKD9DkckUbheLvLhKt8zy9DOATDihtHj2vOpDSjRBp3SE2CKZ7kB0U2Aj3TS edHGJkGyOBsGREyvfyz6qjjcWk63uDdcHVjveukwWOnBZrWc8tv1g5hct6a8+fNE EWmmYb8y4sZfpIxmt6HIi4tVrptt5nRaAV/8TqAgqR4wawvbMmvMjKjR0OsbFBVf xCbNu0MNBWQWnrSM4/1qeFFtgTQhctHm/c9Hx8XBJfajOTDHLbT3pr3h0sxXIhy9 ZfgIswEH9jtKMJeDIaLLmbrmfwtEtLt8MzV4CZ2dz6ODiTNPl1mzfoRVzru++Fvw fxMos8PnWcm5hJHehM2fWEErqwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDQHzVyV Ztw61VwIwwtn+7NW0BJqMB8GA1UdIwQYMBaAFE0U4a8i9Tsi9W3vAuty6l3Wvnfi MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGRTc1Ri9BQjlFQjhDQUE5 RjUxMUVCOEE0OTIyNTRDNEY5QUUwMi9UUlRocnlMMU95TDFiZThDNjNMcVhkYS1k LUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1RSVGhyeUwxT3lMMWJlOEM2M0xxWGRhLWQtSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG RTc1Ri9BQjlFQjhDQUE5RjUxMUVCOEE0OTIyNTRDNEY5QUUwMi9UUlRocnlMMU95 TDFiZThDNjNMcVhkYS1kLUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBAAKwpkFjXXqerRc3pnkgjkUQoSkHUqhpC6Xa3PNjEsZhF2Jyvob6j vp0yCvWnorp22OSD6Rz0q/Is9dp8mt3dC/y/md+yX0j4FPEC+M6VyzGVj93CcQUu 0ynwVYDh/klXgCngIraWAW/R8TPjoX4FWkkq4iZCPoLDxwj6MD2k0NqHhQ07kvRQ 9r3J6guBYlwpyDIadaMpYE/8mSdrLP9IHnuFppHxdIMl8SRaP9ITtaauQWOPFu2t H+Kxoq5xRogjrZgUQXTCpT7o9tmwPDo43dEiCf9zq9N7QmLFzg1E4BOCQKsnNaRp jViJGC1vI3vRzaZtjmsNyal1rF7mQF+2 -----END CERTIFICATE-----Generated at Sun Jun 29 09:40:04 2025 by rpki-client