$ rpki-client -vvf rpki.apnic.net/member_repository/A91A6E4D/D3CC0D64FB4611EBA7661839C4F9AE02/tr-xkXvTGlViMihYRudjoUMyymg.mft File: tr-xkXvTGlViMihYRudjoUMyymg.mft (raw, json) Hash identifier: iCHKKELEoW1y6EkLE/iyit2nM3keIQ0p7KAZmYy1/to= Subject key identifier: 21:F8:55:88:27:BC:22:6B:4D:D2:51:E1:57:06:AF:D7:2A:3C:F6:5D Authority key identifier: B6:BF:B1:91:7B:D3:1A:55:62:32:28:58:46:E7:63:A1:43:32:CA:68 Certificate issuer: /CN=A91A6E4D/serialNumber=B6BFB1917BD31A556232285846E763A14332CA68 Certificate serial: 0554 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tr-xkXvTGlViMihYRudjoUMyymg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A6E4D/D3CC0D64FB4611EBA7661839C4F9AE02/tr-xkXvTGlViMihYRudjoUMyymg.mft Manifest number: 0554 Signing time: Wed 20 Aug 2025 23:28:52 +0000 Manifest this update: Wed 20 Aug 2025 23:28:51 +0000 Manifest next update: Wed 27 Aug 2025 23:28:51 +0000 Files and hashes: 1: tr-xkXvTGlViMihYRudjoUMyymg.crl (hash: nPwamNkpw6T/atzXWBHFuMatMZwAr8mwn/eGnEBDV9Y=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A6E4D/D3CC0D64FB4611EBA7661839C4F9AE02/tr-xkXvTGlViMihYRudjoUMyymg.crl rsync://rpki.apnic.net/member_repository/A91A6E4D/D3CC0D64FB4611EBA7661839C4F9AE02/tr-xkXvTGlViMihYRudjoUMyymg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tr-xkXvTGlViMihYRudjoUMyymg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 Aug 2025 23:28:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1364 (0x554) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A6E4D, serialNumber=B6BFB1917BD31A556232285846E763A14332CA68 Validity Not Before: Aug 20 23:28:51 2025 GMT Not After : Aug 27 23:28:51 2025 GMT Subject: CN=68a65a34-5e32 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:96:d0:00:7b:02:8f:cc:99:2a:ae:75:63:7c: c8:d5:f3:7f:42:29:a9:ab:37:c3:63:a4:36:7f:7e: 1b:79:e1:6c:46:f4:b9:c1:d2:fe:c0:17:e1:29:67: 3c:41:a1:6b:e9:c5:bf:7a:78:74:07:51:5a:10:2c: b5:84:b3:1f:25:46:fe:d6:12:ac:f2:0a:c6:6a:fb: 22:d6:2b:f9:2b:84:c9:41:a8:51:52:79:99:06:5c: 1c:17:40:bf:27:33:e6:86:f1:36:7b:ad:55:ab:99: 33:96:f8:e2:67:33:6d:0a:17:49:f5:91:55:16:71: 07:e7:15:51:47:52:ad:38:0f:c8:ec:cc:b2:d8:09: 59:b5:91:c4:29:ae:2e:5b:ab:4c:24:04:b5:89:9c: e5:bb:0d:76:f6:87:7d:56:0f:72:f8:f9:0b:f7:e0: 40:67:79:dd:58:8a:b6:b6:c5:c4:7e:02:4f:61:fc: 04:d7:d6:84:26:1a:58:cd:40:c6:ad:00:30:04:e5: 7d:78:ac:17:3e:87:87:fb:c4:09:03:a0:28:8a:0d: fb:36:67:8f:57:1a:c3:5e:29:12:50:d0:0b:9b:02: 79:15:e3:2b:c5:49:10:9d:0a:3f:5c:c5:4b:b3:91: d6:cf:b4:87:49:03:4b:de:24:1d:83:a2:ae:d4:bb: 2d:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:F8:55:88:27:BC:22:6B:4D:D2:51:E1:57:06:AF:D7:2A:3C:F6:5D X509v3 Authority Key Identifier: keyid:B6:BF:B1:91:7B:D3:1A:55:62:32:28:58:46:E7:63:A1:43:32:CA:68 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A6E4D/D3CC0D64FB4611EBA7661839C4F9AE02/tr-xkXvTGlViMihYRudjoUMyymg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tr-xkXvTGlViMihYRudjoUMyymg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A6E4D/D3CC0D64FB4611EBA7661839C4F9AE02/tr-xkXvTGlViMihYRudjoUMyymg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9a:c1:66:58:0d:1f:e7:82:f1:b7:0b:d9:ef:0b:ea:78:e9:8b: 2a:30:9d:f9:4c:29:56:ff:81:9e:47:c5:8e:89:51:0b:37:ce: 0b:87:a4:b4:9c:4d:09:9f:fe:5b:45:b0:44:42:1c:c5:2a:a1: 36:c3:a1:97:7e:a1:6c:5a:c5:09:db:16:78:aa:d2:c6:c1:c2: 77:01:e9:75:58:de:7e:99:59:02:dc:ed:9f:93:ae:e9:a3:af: ef:c1:dd:93:bc:f4:86:69:d7:85:9b:50:d9:fb:46:0f:4f:ee: f0:45:2d:41:1b:c9:a4:03:b6:23:97:04:66:93:df:f8:a0:79: a7:c0:59:dc:7f:6d:a0:61:46:1d:66:51:5d:0d:58:fc:2f:f1: 8c:71:b6:99:35:bc:b4:18:c8:d4:9c:96:b9:c2:e6:b8:92:c9: 1b:26:83:c1:cc:30:af:12:e7:90:ee:59:37:2a:1e:7f:81:15: 58:c6:8b:73:ee:a9:90:0e:0f:15:29:b7:df:ff:e7:d3:68:95: bb:08:9b:87:3f:08:03:34:5f:b8:a6:0b:3c:dc:bd:34:66:ee: 55:2f:12:de:47:c7:8e:6f:d2:76:3c:79:81:b3:9a:90:b4:c2: 1c:09:ef:fb:e1:57:f2:56:61:2a:bb:d8:17:98:10:2b:a8:74: 2e:12:e4:f6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBVQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTZFNEQxMTAvBgNVBAUTKEI2QkZCMTkxN0JEMzFBNTU2MjMyMjg1ODQ2RTc2M0Ex NDMzMkNBNjgwHhcNMjUwODIwMjMyODUxWhcNMjUwODI3MjMyODUxWjAYMRYwFAYD VQQDEw02OGE2NWEzNC01ZTMyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv5bQAHsCj8yZKq51Y3zI1fN/QimpqzfDY6Q2f34beeFsRvS5wdL+wBfhKWc8 QaFr6cW/enh0B1FaECy1hLMfJUb+1hKs8grGavsi1iv5K4TJQahRUnmZBlwcF0C/ JzPmhvE2e61Vq5kzlvjiZzNtChdJ9ZFVFnEH5xVRR1KtOA/I7Myy2AlZtZHEKa4u W6tMJAS1iZzluw129od9Vg9y+PkL9+BAZ3ndWIq2tsXEfgJPYfwE19aEJhpYzUDG rQAwBOV9eKwXPoeH+8QJA6Aoig37NmePVxrDXikSUNALmwJ5FeMrxUkQnQo/XMVL s5HWz7SHSQNL3iQdg6Ku1LstWQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCH4VYgn vCJrTdJR4VcGr9cqPPZdMB8GA1UdIwQYMBaAFLa/sZF70xpVYjIoWEbnY6FDMspo MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNkU0RC9EM0NDMEQ2NEZC NDYxMUVCQTc2NjE4MzlDNEY5QUUwMi90ci14a1h2VEdsVmlNaWhZUnVkam9VTXl5 bWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RyLXhrWHZUR2xWaU1paFlSdWRqb1VNeXltZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NkU0RC9EM0NDMEQ2NEZCNDYxMUVCQTc2NjE4MzlDNEY5QUUwMi90ci14a1h2VEds VmlNaWhZUnVkam9VTXl5bWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCawWZYDR/ngvG3C9nvC+p46YsqMJ35TClW/4GeR8WOiVELN84Lh6S0 nE0Jn/5bRbBEQhzFKqE2w6GXfqFsWsUJ2xZ4qtLGwcJ3Ael1WN5+mVkC3O2fk67p o6/vwd2TvPSGadeFm1DZ+0YPT+7wRS1BG8mkA7YjlwRmk9/4oHmnwFncf22gYUYd ZlFdDVj8L/GMcbaZNby0GMjUnJa5wua4kskbJoPBzDCvEueQ7lk3Kh5/gRVYxotz 7qmQDg8VKbff/+fTaJW7CJuHPwgDNF+4pgs83L00Zu5VLxLeR8eOb9J2PHmBs5qQ tMIcCe/74VfyVmEqu9gXmBArqHQuEuT2 -----END CERTIFICATE-----Generated at Fri Aug 22 16:16:44 2025 by rpki-client