$ rpki-client -vvf rpki.apnic.net/member_repository/A91A6E4D/D3CC0D64FB4611EBA7661839C4F9AE02/tr-xkXvTGlViMihYRudjoUMyymg.mft File: tr-xkXvTGlViMihYRudjoUMyymg.mft (raw, json) Hash identifier: ULFRTlHDl8OF/0c1S1u56wCGc++ajrw1ZYZiRdCNuPs= Subject key identifier: 3F:90:42:B3:E0:F5:2E:4F:99:57:AB:B6:2F:AC:41:B8:9C:87:0D:22 Authority key identifier: B6:BF:B1:91:7B:D3:1A:55:62:32:28:58:46:E7:63:A1:43:32:CA:68 Certificate issuer: /CN=A91A6E4D/serialNumber=B6BFB1917BD31A556232285846E763A14332CA68 Certificate serial: 0514 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tr-xkXvTGlViMihYRudjoUMyymg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A6E4D/D3CC0D64FB4611EBA7661839C4F9AE02/tr-xkXvTGlViMihYRudjoUMyymg.mft Manifest number: 0514 Signing time: Fri 18 Apr 2025 23:34:29 +0000 Manifest this update: Fri 18 Apr 2025 23:34:28 +0000 Manifest next update: Fri 25 Apr 2025 23:34:28 +0000 Files and hashes: 1: tr-xkXvTGlViMihYRudjoUMyymg.crl (hash: u0INT3hqp+ugltqC0OHCDtl1Hl2RZOUxfIwwYlc7yiE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A6E4D/D3CC0D64FB4611EBA7661839C4F9AE02/tr-xkXvTGlViMihYRudjoUMyymg.crl rsync://rpki.apnic.net/member_repository/A91A6E4D/D3CC0D64FB4611EBA7661839C4F9AE02/tr-xkXvTGlViMihYRudjoUMyymg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tr-xkXvTGlViMihYRudjoUMyymg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Apr 2025 23:34:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1300 (0x514) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A6E4D, serialNumber=B6BFB1917BD31A556232285846E763A14332CA68 Validity Not Before: Apr 18 23:34:28 2025 GMT Not After : Apr 25 23:34:28 2025 GMT Subject: CN=6802e185-dfe0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:5f:31:e5:52:7d:1c:2c:59:86:67:20:86:60: 97:6e:4b:a2:32:80:81:ad:e1:a7:85:f2:f7:6e:39: 44:18:60:05:da:2f:59:5e:f8:16:2a:19:29:5f:35: 11:e4:be:e3:e5:59:8f:48:3d:65:94:f8:f9:e0:c9: 01:12:26:e5:c1:a4:99:f4:9d:18:17:f7:e6:2f:d8: 21:be:50:2c:f9:55:20:f0:c4:71:97:73:8a:99:62: 32:97:3a:1e:b8:ed:1c:c2:11:0c:fa:05:91:d7:25: 50:b1:f7:57:a4:9f:48:87:c8:1f:ff:4d:9b:80:9d: 78:be:32:5e:df:7d:42:e0:0f:04:36:47:5f:96:4b: be:e0:86:db:4c:03:1d:3d:9f:1b:60:a6:9d:15:89: 9e:0b:a0:28:09:bd:4e:b1:9f:04:73:e4:db:60:50: cf:70:fb:e7:66:29:78:44:7d:57:e1:17:82:e9:97: 60:44:5a:1c:a0:41:47:67:07:fd:68:30:75:dc:9b: 02:a1:7e:98:df:d0:d7:78:44:ee:2c:54:04:25:a6: b6:e9:a3:95:04:7e:b3:30:9b:01:2e:af:f4:f2:ec: ff:74:10:85:e5:5b:80:6a:9c:45:1b:7e:7a:27:7e: 07:e1:ec:f3:0e:50:52:d0:46:07:bc:8d:47:a7:8c: 8c:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:90:42:B3:E0:F5:2E:4F:99:57:AB:B6:2F:AC:41:B8:9C:87:0D:22 X509v3 Authority Key Identifier: keyid:B6:BF:B1:91:7B:D3:1A:55:62:32:28:58:46:E7:63:A1:43:32:CA:68 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A6E4D/D3CC0D64FB4611EBA7661839C4F9AE02/tr-xkXvTGlViMihYRudjoUMyymg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tr-xkXvTGlViMihYRudjoUMyymg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A6E4D/D3CC0D64FB4611EBA7661839C4F9AE02/tr-xkXvTGlViMihYRudjoUMyymg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4f:8b:c0:98:86:42:02:7e:fc:11:e1:fd:ce:33:cc:fa:89:a1: 57:48:8c:65:3b:24:33:41:1e:cb:41:0d:43:95:d9:7b:e6:82: 48:24:bb:9c:d4:35:24:66:47:ca:4d:93:da:96:b8:12:cb:8b: 6f:64:ef:22:5a:db:75:17:2b:31:44:4a:46:80:d9:c4:1d:47: be:67:45:96:eb:57:db:bc:2c:6d:f5:81:e7:28:76:fa:20:95: 18:07:87:1a:87:81:22:26:b5:46:5f:39:c3:8a:8c:2a:f8:5e: 2e:e3:b7:f8:f9:b6:e1:b3:e2:b5:3b:8e:26:68:2f:a6:ef:58: dc:74:31:d8:42:c9:99:e8:55:44:ac:c5:7f:58:4d:9b:a4:9b: a8:57:b6:2d:08:98:26:9d:85:1c:14:79:2c:d8:84:51:3f:72: 3c:0d:aa:85:8c:1f:36:3d:9f:c5:79:6d:b0:4e:4a:1c:e4:dd: 12:3a:1f:7a:61:7b:f5:10:9b:d8:db:3c:b6:65:7c:95:a1:b2: a7:ee:f6:0e:ea:e2:28:4e:91:2d:58:5f:d6:d8:53:21:32:6d: 6f:74:74:f5:5f:18:6c:d2:d4:55:87:d6:32:ba:e5:9a:45:20: 65:d9:0d:ce:60:92:ad:95:7f:2a:bd:32:96:94:12:df:7b:c4: 91:95:41:4b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBRQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTZFNEQxMTAvBgNVBAUTKEI2QkZCMTkxN0JEMzFBNTU2MjMyMjg1ODQ2RTc2M0Ex NDMzMkNBNjgwHhcNMjUwNDE4MjMzNDI4WhcNMjUwNDI1MjMzNDI4WjAYMRYwFAYD VQQDEw02ODAyZTE4NS1kZmUwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4V8x5VJ9HCxZhmcghmCXbkuiMoCBreGnhfL3bjlEGGAF2i9ZXvgWKhkpXzUR 5L7j5VmPSD1llPj54MkBEiblwaSZ9J0YF/fmL9ghvlAs+VUg8MRxl3OKmWIylzoe uO0cwhEM+gWR1yVQsfdXpJ9Ih8gf/02bgJ14vjJe331C4A8ENkdflku+4IbbTAMd PZ8bYKadFYmeC6AoCb1OsZ8Ec+TbYFDPcPvnZil4RH1X4ReC6ZdgRFocoEFHZwf9 aDB13JsCoX6Y39DXeETuLFQEJaa26aOVBH6zMJsBLq/08uz/dBCF5VuAapxFG356 J34H4ezzDlBS0EYHvI1Hp4yMiwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFD+QQrPg 9S5PmVerti+sQbichw0iMB8GA1UdIwQYMBaAFLa/sZF70xpVYjIoWEbnY6FDMspo MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNkU0RC9EM0NDMEQ2NEZC NDYxMUVCQTc2NjE4MzlDNEY5QUUwMi90ci14a1h2VEdsVmlNaWhZUnVkam9VTXl5 bWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RyLXhrWHZUR2xWaU1paFlSdWRqb1VNeXltZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NkU0RC9EM0NDMEQ2NEZCNDYxMUVCQTc2NjE4MzlDNEY5QUUwMi90ci14a1h2VEds VmlNaWhZUnVkam9VTXl5bWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBPi8CYhkICfvwR4f3OM8z6iaFXSIxlOyQzQR7LQQ1Dldl75oJIJLuc 1DUkZkfKTZPalrgSy4tvZO8iWtt1FysxREpGgNnEHUe+Z0WW61fbvCxt9YHnKHb6 IJUYB4cah4EiJrVGXznDiowq+F4u47f4+bbhs+K1O44maC+m71jcdDHYQsmZ6FVE rMV/WE2bpJuoV7YtCJgmnYUcFHks2IRRP3I8DaqFjB82PZ/FeW2wTkoc5N0SOh96 YXv1EJvY2zy2ZXyVobKn7vYO6uIoTpEtWF/W2FMhMm1vdHT1Xxhs0tRVh9YyuuWa RSBl2Q3OYJKtlX8qvTKWlBLfe8SRlUFL -----END CERTIFICATE-----Generated at Sat Apr 19 05:53:24 2025 by rpki-client