$ rpki-client -vvf rpki.apnic.net/member_repository/A91B2D29/F71E7166552111E5ADB2092AC4F9AE02/T4ElgrV_TBLHNl5qp_D_yncQlJE.mft File: T4ElgrV_TBLHNl5qp_D_yncQlJE.mft (raw, json) Hash identifier: 2RBZwdRa0PuU+0dfslKy15djBljXchBemml8w4UI8ac= Subject key identifier: C9:F1:C8:FC:48:4C:2D:0F:3B:80:FD:2D:45:42:73:29:CB:28:D8:84 Authority key identifier: 4F:81:25:82:B5:7F:4C:12:C7:36:5E:6A:A7:F0:FF:CA:77:10:94:91 Certificate issuer: /CN=A91B2D29/serialNumber=4F812582B57F4C12C7365E6AA7F0FFCA77109491 Certificate serial: 18AF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T4ElgrV_TBLHNl5qp_D_yncQlJE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B2D29/F71E7166552111E5ADB2092AC4F9AE02/T4ElgrV_TBLHNl5qp_D_yncQlJE.mft Manifest number: 4678 Signing time: Fri 30 May 2025 15:59:07 +0000 Manifest this update: Fri 30 May 2025 15:59:06 +0000 Manifest next update: Fri 06 Jun 2025 15:59:06 +0000 Files and hashes: 1: T4ElgrV_TBLHNl5qp_D_yncQlJE.crl (hash: UXlAaN+CeLkmLsPd+SX+soiJavvdTYpq5Ze3Nstfw5g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B2D29/F71E7166552111E5ADB2092AC4F9AE02/T4ElgrV_TBLHNl5qp_D_yncQlJE.crl rsync://rpki.apnic.net/member_repository/A91B2D29/F71E7166552111E5ADB2092AC4F9AE02/T4ElgrV_TBLHNl5qp_D_yncQlJE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T4ElgrV_TBLHNl5qp_D_yncQlJE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 15:59:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6319 (0x18af) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B2D29, serialNumber=4F812582B57F4C12C7365E6AA7F0FFCA77109491 Validity Not Before: May 30 15:59:06 2025 GMT Not After : Jun 6 15:59:06 2025 GMT Subject: CN=6839d5ca-c233 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:43:9e:8b:17:97:52:b1:0e:3f:de:86:3a:c7: fb:d2:71:1e:05:3f:ea:70:9d:7e:91:98:d0:08:0a: 33:1e:e2:5b:06:ed:dc:42:93:26:07:96:1e:0a:d4: 89:91:49:1a:04:6f:74:c2:3b:c8:6e:b5:c6:54:66: 39:1a:49:3d:f5:72:9d:92:6e:56:64:27:ed:ea:03: 01:46:03:8c:97:24:1d:f9:f5:7a:68:7f:a5:67:72: d9:7b:70:5e:60:f4:40:85:74:50:63:ba:14:fc:91: 07:3d:90:69:0a:db:32:1c:4e:12:32:b9:7f:90:bd: 14:5d:e2:6a:7a:db:ed:e1:85:2c:5d:60:67:af:33: f2:8b:29:93:c6:26:ce:38:eb:e3:bb:17:2d:a6:ad: 71:07:13:4d:d3:54:e3:78:61:7d:a2:3c:31:97:71: 17:91:c3:51:5d:98:10:b1:9b:b4:57:65:3f:ae:41: c9:0d:06:25:54:16:50:ef:fc:19:49:26:3b:ec:76: 9a:55:e2:52:6e:76:15:68:7d:b7:84:54:c3:6b:67: 0b:82:79:fc:f0:5a:31:8e:aa:c0:1e:0c:e6:81:dd: a5:f5:25:e9:31:d7:6b:da:42:16:a4:38:8b:88:cd: 8d:a7:c9:3c:9a:28:52:e6:e0:26:49:ee:84:41:3d: f6:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:F1:C8:FC:48:4C:2D:0F:3B:80:FD:2D:45:42:73:29:CB:28:D8:84 X509v3 Authority Key Identifier: keyid:4F:81:25:82:B5:7F:4C:12:C7:36:5E:6A:A7:F0:FF:CA:77:10:94:91 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B2D29/F71E7166552111E5ADB2092AC4F9AE02/T4ElgrV_TBLHNl5qp_D_yncQlJE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T4ElgrV_TBLHNl5qp_D_yncQlJE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B2D29/F71E7166552111E5ADB2092AC4F9AE02/T4ElgrV_TBLHNl5qp_D_yncQlJE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 92:fe:76:0a:31:e2:ea:58:81:4d:1e:71:b8:dc:d2:16:85:8b: 92:fd:82:d4:77:cf:b7:85:c1:cf:f2:8c:6b:b7:c6:71:ce:5e: de:e4:6f:ac:57:af:1c:bf:cb:1a:bd:0b:86:85:75:5d:0b:a3: 57:cc:4a:f5:c5:d0:ec:4e:23:bd:e5:9c:0f:68:60:b6:78:01: 44:99:ea:70:d8:a1:1d:97:0f:82:69:e8:0d:7e:79:a3:06:5b: 53:46:c6:26:2d:d7:c0:90:da:44:82:5f:bb:b6:7f:ff:24:ca: a5:a3:df:ae:e6:c4:91:f4:55:5b:fd:b4:79:63:a3:6a:54:f9: 8e:8d:32:58:f9:3f:60:52:2f:82:01:06:50:d8:e9:f6:4f:93: 94:b2:0c:2f:06:e2:cf:8d:f9:42:b1:6d:ff:6a:cd:b3:1f:b9: 9e:a6:42:6d:79:47:83:8b:dd:b3:c2:45:46:84:72:73:19:83: 20:4c:c5:fc:81:97:ff:ff:24:a4:53:d0:76:8d:b5:ab:ee:9d: 4b:3f:07:69:58:85:97:87:db:26:7d:f2:5a:86:9a:57:bb:d7: ae:71:94:e9:1f:5a:98:2a:56:6f:16:91:1d:31:5f:fc:6e:9a: 7b:cf:27:a5:db:c5:2b:08:52:88:5b:f9:dd:d5:fe:a9:9e:8a: d4:ff:c2:8d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICGK8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjJEMjkxMTAvBgNVBAUTKDRGODEyNTgyQjU3RjRDMTJDNzM2NUU2QUE3RjBGRkNB NzcxMDk0OTEwHhcNMjUwNTMwMTU1OTA2WhcNMjUwNjA2MTU1OTA2WjAYMRYwFAYD VQQDEw02ODM5ZDVjYS1jMjMzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAo0OeixeXUrEOP96GOsf70nEeBT/qcJ1+kZjQCAozHuJbBu3cQpMmB5YeCtSJ kUkaBG90wjvIbrXGVGY5Gkk99XKdkm5WZCft6gMBRgOMlyQd+fV6aH+lZ3LZe3Be YPRAhXRQY7oU/JEHPZBpCtsyHE4SMrl/kL0UXeJqetvt4YUsXWBnrzPyiymTxibO OOvjuxctpq1xBxNN01TjeGF9ojwxl3EXkcNRXZgQsZu0V2U/rkHJDQYlVBZQ7/wZ SSY77HaaVeJSbnYVaH23hFTDa2cLgnn88FoxjqrAHgzmgd2l9SXpMddr2kIWpDiL iM2Np8k8mihS5uAmSe6EQT32/wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMnxyPxI TC0PO4D9LUVCcynLKNiEMB8GA1UdIwQYMBaAFE+BJYK1f0wSxzZeaqfw/8p3EJSR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMkQyOS9GNzFFNzE2NjU1 MjExMUU1QURCMjA5MkFDNEY5QUUwMi9UNEVsZ3JWX1RCTEhObDVxcF9EX3luY1Fs SkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1Q0RWxnclZfVEJMSE5sNXFwX0RfeW5jUWxKRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MkQyOS9GNzFFNzE2NjU1MjExMUU1QURCMjA5MkFDNEY5QUUwMi9UNEVsZ3JWX1RC TEhObDVxcF9EX3luY1FsSkUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCS/nYKMeLqWIFNHnG43NIWhYuS/YLUd8+3hcHP8oxrt8Zxzl7e5G+s V68cv8savQuGhXVdC6NXzEr1xdDsTiO95ZwPaGC2eAFEmepw2KEdlw+CaegNfnmj BltTRsYmLdfAkNpEgl+7tn//JMqlo9+u5sSR9FVb/bR5Y6NqVPmOjTJY+T9gUi+C AQZQ2On2T5OUsgwvBuLPjflCsW3/as2zH7mepkJteUeDi92zwkVGhHJzGYMgTMX8 gZf//ySkU9B2jbWr7p1LPwdpWIWXh9smffJahppXu9eucZTpH1qYKlZvFpEdMV/8 bpp7zyel28UrCFKIW/nd1f6pnorU/8KN -----END CERTIFICATE-----Generated at Sat May 31 16:27:45 2025 by rpki-client