$ rpki-client -vvf rpki.apnic.net/member_repository/A91B5CEF/9CA3F54EE7A511ECA188BE12C4F9AE02/TR4XV9LTAT5AudfK9e_JxHs3KwM.mft File: TR4XV9LTAT5AudfK9e_JxHs3KwM.mft (raw, json) Hash identifier: IJvt8jkjCYnDZfxcTDl0UoV6+nTX+WvFLk7E+V1EM38= Subject key identifier: 40:2A:47:B6:04:89:8F:E9:8E:22:D5:0F:27:04:84:64:37:56:CF:19 Authority key identifier: 4D:1E:17:57:D2:D3:01:3E:40:B9:D7:CA:F5:EF:C9:C4:7B:37:2B:03 Certificate issuer: /CN=A91B5CEF/serialNumber=4D1E1757D2D3013E40B9D7CAF5EFC9C47B372B03 Certificate serial: 030D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TR4XV9LTAT5AudfK9e_JxHs3KwM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B5CEF/9CA3F54EE7A511ECA188BE12C4F9AE02/TR4XV9LTAT5AudfK9e_JxHs3KwM.mft Manifest number: 030D Signing time: Fri 19 Sep 2025 01:35:31 +0000 Manifest this update: Fri 19 Sep 2025 01:35:30 +0000 Manifest next update: Fri 26 Sep 2025 01:35:30 +0000 Files and hashes: 1: TR4XV9LTAT5AudfK9e_JxHs3KwM.crl (hash: JS+7NutAmut6ZrgEc/ikxNWKI36r7wxCu/NK556dKdI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B5CEF/9CA3F54EE7A511ECA188BE12C4F9AE02/TR4XV9LTAT5AudfK9e_JxHs3KwM.crl rsync://rpki.apnic.net/member_repository/A91B5CEF/9CA3F54EE7A511ECA188BE12C4F9AE02/TR4XV9LTAT5AudfK9e_JxHs3KwM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TR4XV9LTAT5AudfK9e_JxHs3KwM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Sep 2025 01:35:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 781 (0x30d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B5CEF, serialNumber=4D1E1757D2D3013E40B9D7CAF5EFC9C47B372B03 Validity Not Before: Sep 19 01:35:30 2025 GMT Not After : Sep 26 01:35:30 2025 GMT Subject: CN=68ccb362-a881 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:65:4b:10:d3:9f:b7:00:54:50:3e:d3:45:46: 8b:8f:78:0c:a0:22:33:d0:dd:b7:cc:70:3d:54:4a: 87:d8:8e:1d:62:cb:4a:4c:2c:b7:51:fa:fc:a2:2b: 11:1b:22:2e:32:b4:fd:28:aa:7d:c2:b1:64:8a:3c: 7c:31:ca:94:ec:b6:9a:52:50:62:4c:ed:52:18:40: d3:f3:a1:a5:55:f6:f4:7b:22:9e:cf:e0:d7:a5:ed: a7:f7:2c:a8:ae:02:0e:93:17:b5:4f:fe:f1:58:cb: 08:ae:f0:f1:85:ea:d0:cd:21:e0:a6:10:41:0a:70: 9e:6c:6d:16:02:b0:d1:70:8f:85:5a:d8:ef:44:ed: c7:89:6d:d8:f4:04:ea:97:cb:42:77:a0:25:06:c7: 10:89:9d:7f:ab:9c:b3:97:d9:96:60:f6:0b:25:f5: 5b:96:6a:2c:03:13:2b:bb:70:89:41:c7:ea:4c:c7: 4d:02:ba:36:1b:86:58:6c:0d:79:3e:24:af:13:c7: 25:61:3e:ae:a2:c6:21:6e:84:b4:1e:71:ee:aa:11: 96:74:06:27:bf:f1:c7:91:8d:d9:45:fc:2c:76:3a: 41:6c:ad:a5:8e:39:78:3c:1b:07:b4:22:f4:91:63: 68:14:5c:56:ce:30:72:75:f7:a9:02:7a:d4:79:58: a1:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:2A:47:B6:04:89:8F:E9:8E:22:D5:0F:27:04:84:64:37:56:CF:19 X509v3 Authority Key Identifier: keyid:4D:1E:17:57:D2:D3:01:3E:40:B9:D7:CA:F5:EF:C9:C4:7B:37:2B:03 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B5CEF/9CA3F54EE7A511ECA188BE12C4F9AE02/TR4XV9LTAT5AudfK9e_JxHs3KwM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TR4XV9LTAT5AudfK9e_JxHs3KwM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B5CEF/9CA3F54EE7A511ECA188BE12C4F9AE02/TR4XV9LTAT5AudfK9e_JxHs3KwM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2b:70:e4:34:ce:ab:5f:41:44:d7:ad:56:a3:21:d1:cc:b3:dd: 2d:c0:81:2c:54:02:64:75:76:de:68:d5:65:03:f9:38:13:cf: e7:d8:b0:75:87:4e:3b:b6:bf:89:ea:87:c7:6f:2b:3e:eb:5d: ee:eb:93:a1:d4:a6:58:bb:34:10:83:2f:8f:25:5c:33:aa:73: c2:3d:b7:4a:45:d8:ec:43:94:57:27:f9:a0:68:57:5b:71:f3: a8:55:fb:42:ce:56:35:fb:9e:5d:e1:e8:24:da:50:f1:a2:bc: 48:ff:f0:e2:f3:0d:fd:fa:93:da:b3:3c:fc:87:83:0e:6a:fd: 3b:b8:44:89:48:84:3b:25:93:0f:88:98:de:0e:61:dc:c9:ff: 20:77:89:4a:65:71:ca:0c:09:c1:37:fa:c2:dd:6a:28:54:08: bc:ee:b5:03:1e:b1:cf:17:fb:99:56:93:ea:f8:3d:a6:c6:7e: 40:4f:62:37:87:11:e2:c9:a5:6c:18:31:76:3f:b5:96:59:81: 71:16:1c:2d:39:fe:55:60:87:a4:5b:70:24:b5:7f:d8:1c:65: 82:c5:05:17:24:e3:33:81:9a:b1:f8:8c:5f:0f:1f:64:5d:0f: 12:59:6b:f5:9c:1c:e6:fc:d7:9c:9b:2c:34:f6:78:19:75:e3: ee:36:c6:a9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAw0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjVDRUYxMTAvBgNVBAUTKDREMUUxNzU3RDJEMzAxM0U0MEI5RDdDQUY1RUZDOUM0 N0IzNzJCMDMwHhcNMjUwOTE5MDEzNTMwWhcNMjUwOTI2MDEzNTMwWjAYMRYwFAYD VQQDEw02OGNjYjM2Mi1hODgxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAp2VLENOftwBUUD7TRUaLj3gMoCIz0N23zHA9VEqH2I4dYstKTCy3Ufr8oisR GyIuMrT9KKp9wrFkijx8McqU7LaaUlBiTO1SGEDT86GlVfb0eyKez+DXpe2n9yyo rgIOkxe1T/7xWMsIrvDxherQzSHgphBBCnCebG0WArDRcI+FWtjvRO3HiW3Y9ATq l8tCd6AlBscQiZ1/q5yzl9mWYPYLJfVblmosAxMru3CJQcfqTMdNAro2G4ZYbA15 PiSvE8clYT6uosYhboS0HnHuqhGWdAYnv/HHkY3ZRfwsdjpBbK2ljjl4PBsHtCL0 kWNoFFxWzjBydfepAnrUeVihTwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEAqR7YE iY/pjiLVDycEhGQ3Vs8ZMB8GA1UdIwQYMBaAFE0eF1fS0wE+QLnXyvXvycR7NysD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNUNFRi85Q0EzRjU0RUU3 QTUxMUVDQTE4OEJFMTJDNEY5QUUwMi9UUjRYVjlMVEFUNUF1ZGZLOWVfSnhIczNL d00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1RSNFhWOUxUQVQ1QXVkZks5ZV9KeEhzM0t3TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NUNFRi85Q0EzRjU0RUU3QTUxMUVDQTE4OEJFMTJDNEY5QUUwMi9UUjRYVjlMVEFU NUF1ZGZLOWVfSnhIczNLd00ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQArcOQ0zqtfQUTXrVajIdHMs90twIEsVAJkdXbeaNVlA/k4E8/n2LB1 h047tr+J6ofHbys+613u65Oh1KZYuzQQgy+PJVwzqnPCPbdKRdjsQ5RXJ/mgaFdb cfOoVftCzlY1+55d4egk2lDxorxI//Di8w39+pPaszz8h4MOav07uESJSIQ7JZMP iJjeDmHcyf8gd4lKZXHKDAnBN/rC3WooVAi87rUDHrHPF/uZVpPq+D2mxn5AT2I3 hxHiyaVsGDF2P7WWWYFxFhwtOf5VYIekW3AktX/YHGWCxQUXJOMzgZqx+IxfDx9k XQ8SWWv1nBzm/Necmyw09ngZdePuNsap -----END CERTIFICATE-----Generated at Fri Sep 19 05:26:18 2025 by rpki-client