$ rpki-client -vvf rpki.apnic.net/member_repository/A91A6E4D/D3CC0D64FB4611EBA7661839C4F9AE02/tr-xkXvTGlViMihYRudjoUMyymg.mft File: tr-xkXvTGlViMihYRudjoUMyymg.mft (raw, json) Hash identifier: J7/3a9FtX7NjtmAVzpeCIQ+OXV7qhhPr6Pt3E4ZDmFg= Subject key identifier: 3A:31:6B:79:EA:21:2C:E4:63:D3:50:58:34:C5:93:BA:3C:BD:5C:74 Authority key identifier: B6:BF:B1:91:7B:D3:1A:55:62:32:28:58:46:E7:63:A1:43:32:CA:68 Certificate issuer: /CN=A91A6E4D/serialNumber=B6BFB1917BD31A556232285846E763A14332CA68 Certificate serial: 052E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tr-xkXvTGlViMihYRudjoUMyymg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A6E4D/D3CC0D64FB4611EBA7661839C4F9AE02/tr-xkXvTGlViMihYRudjoUMyymg.mft Manifest number: 052E Signing time: Fri 06 Jun 2025 23:32:47 +0000 Manifest this update: Fri 06 Jun 2025 23:32:47 +0000 Manifest next update: Fri 13 Jun 2025 23:32:47 +0000 Files and hashes: 1: tr-xkXvTGlViMihYRudjoUMyymg.crl (hash: 7zD8HU3CAKSgBBadzHfZGNw1FPx7rLoDCvRO9jPDJVo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A6E4D/D3CC0D64FB4611EBA7661839C4F9AE02/tr-xkXvTGlViMihYRudjoUMyymg.crl rsync://rpki.apnic.net/member_repository/A91A6E4D/D3CC0D64FB4611EBA7661839C4F9AE02/tr-xkXvTGlViMihYRudjoUMyymg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tr-xkXvTGlViMihYRudjoUMyymg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 13 Jun 2025 23:32:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1326 (0x52e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A6E4D, serialNumber=B6BFB1917BD31A556232285846E763A14332CA68 Validity Not Before: Jun 6 23:32:47 2025 GMT Not After : Jun 13 23:32:47 2025 GMT Subject: CN=68437a9f-d171 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:1b:4d:16:f1:bc:4d:c2:8a:f6:e1:e1:55:ee: 4f:91:7c:18:74:40:7f:a9:22:d7:c3:ef:d9:b6:bc: bc:8c:c3:7e:5e:ff:dc:be:51:aa:c1:3d:8e:39:0d: e8:1d:dd:4f:c1:05:0f:29:3a:a8:b5:18:4a:00:12: 4f:b8:a7:39:d6:46:0d:ba:13:05:f7:90:ae:9b:6c: 8e:3c:09:f2:ed:d7:30:ab:93:09:a2:a0:81:72:9d: ab:45:cd:5d:cf:90:66:37:c8:fd:51:35:9e:bb:2e: 1c:7b:74:a8:ca:f6:7f:12:95:0e:a9:0e:d9:83:9e: 1c:37:60:af:26:2e:10:eb:a8:1f:a5:76:90:99:41: b4:cf:aa:e8:17:85:59:b5:90:f3:30:c2:4a:be:bc: 54:ac:10:92:cd:d4:67:18:84:b2:e8:f2:cb:a9:d5: d4:1e:b6:17:2c:85:35:55:d0:49:12:ae:c2:ed:08: 52:81:95:cc:e2:c6:ff:a5:53:cb:5d:e4:86:d5:40: 8e:2a:86:32:67:b9:a3:82:07:34:a6:e2:df:47:d8: 2e:a1:6a:86:20:75:2c:74:75:b7:6c:1b:66:8b:f5: d1:6b:de:13:0f:79:26:73:c6:2c:21:0a:aa:a4:39: 41:fa:f5:7f:ea:f4:2f:3e:38:4b:8d:23:a9:cc:c0: 94:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:31:6B:79:EA:21:2C:E4:63:D3:50:58:34:C5:93:BA:3C:BD:5C:74 X509v3 Authority Key Identifier: keyid:B6:BF:B1:91:7B:D3:1A:55:62:32:28:58:46:E7:63:A1:43:32:CA:68 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A6E4D/D3CC0D64FB4611EBA7661839C4F9AE02/tr-xkXvTGlViMihYRudjoUMyymg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tr-xkXvTGlViMihYRudjoUMyymg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A6E4D/D3CC0D64FB4611EBA7661839C4F9AE02/tr-xkXvTGlViMihYRudjoUMyymg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4e:5c:84:ec:2a:27:0e:84:ce:fe:b5:48:b6:06:74:25:4e:96: e3:de:4e:a2:5c:2a:8d:5b:6c:d5:12:11:4b:0e:38:85:49:70: b5:4c:33:d0:e3:73:f7:b6:5e:ef:21:a8:80:5b:4b:f6:11:72: 21:03:a0:56:0c:72:ba:25:ad:f2:a8:7a:32:be:29:1e:bd:9d: 26:f0:60:34:ab:59:70:d4:91:50:b4:e5:39:61:e1:2a:86:3b: d2:b8:dd:41:69:2a:54:83:ec:f9:a7:9c:60:85:3b:1d:cb:3e: 60:7f:7b:c4:f8:a6:93:f2:50:0e:e4:63:35:ee:54:52:35:c4: ca:2d:c2:ff:4d:ab:32:13:67:ad:96:82:b8:64:94:1d:76:1f: 51:7a:5f:da:97:07:b5:86:6f:7e:74:2a:a0:fa:a2:74:61:4d: 12:c6:08:51:fb:83:04:58:fb:f2:2b:79:8a:0b:78:28:f9:bf: e5:d9:aa:b2:60:e3:92:95:8d:4a:d6:18:48:3a:08:a9:74:65: 25:4f:a7:91:67:b7:4c:d3:ba:66:81:ff:3f:08:4d:9c:8e:ea: d8:a1:c7:fb:5e:8e:67:12:b0:f0:76:80:d0:60:22:2c:cf:cd: ef:e7:94:f7:09:3a:25:18:0f:0f:7f:25:ee:79:04:97:a6:63: ea:7b:2c:4f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBS4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTZFNEQxMTAvBgNVBAUTKEI2QkZCMTkxN0JEMzFBNTU2MjMyMjg1ODQ2RTc2M0Ex NDMzMkNBNjgwHhcNMjUwNjA2MjMzMjQ3WhcNMjUwNjEzMjMzMjQ3WjAYMRYwFAYD VQQDEw02ODQzN2E5Zi1kMTcxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwxtNFvG8TcKK9uHhVe5PkXwYdEB/qSLXw+/Ztry8jMN+Xv/cvlGqwT2OOQ3o Hd1PwQUPKTqotRhKABJPuKc51kYNuhMF95Cum2yOPAny7dcwq5MJoqCBcp2rRc1d z5BmN8j9UTWeuy4ce3SoyvZ/EpUOqQ7Zg54cN2CvJi4Q66gfpXaQmUG0z6roF4VZ tZDzMMJKvrxUrBCSzdRnGISy6PLLqdXUHrYXLIU1VdBJEq7C7QhSgZXM4sb/pVPL XeSG1UCOKoYyZ7mjggc0puLfR9guoWqGIHUsdHW3bBtmi/XRa94TD3kmc8YsIQqq pDlB+vV/6vQvPjhLjSOpzMCUZwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDoxa3nq ISzkY9NQWDTFk7o8vVx0MB8GA1UdIwQYMBaAFLa/sZF70xpVYjIoWEbnY6FDMspo MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNkU0RC9EM0NDMEQ2NEZC NDYxMUVCQTc2NjE4MzlDNEY5QUUwMi90ci14a1h2VEdsVmlNaWhZUnVkam9VTXl5 bWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RyLXhrWHZUR2xWaU1paFlSdWRqb1VNeXltZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NkU0RC9EM0NDMEQ2NEZCNDYxMUVCQTc2NjE4MzlDNEY5QUUwMi90ci14a1h2VEds VmlNaWhZUnVkam9VTXl5bWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBOXITsKicOhM7+tUi2BnQlTpbj3k6iXCqNW2zVEhFLDjiFSXC1TDPQ 43P3tl7vIaiAW0v2EXIhA6BWDHK6Ja3yqHoyvikevZ0m8GA0q1lw1JFQtOU5YeEq hjvSuN1BaSpUg+z5p5xghTsdyz5gf3vE+KaT8lAO5GM17lRSNcTKLcL/TasyE2et loK4ZJQddh9Rel/alwe1hm9+dCqg+qJ0YU0SxghR+4MEWPvyK3mKC3go+b/l2aqy YOOSlY1K1hhIOgipdGUlT6eRZ7dM07pmgf8/CE2cjurYocf7Xo5nErDwdoDQYCIs z83v55T3CTolGA8PfyXueQSXpmPqeyxP -----END CERTIFICATE-----Generated at Sat Jun 7 09:35:42 2025 by rpki-client