$ rpki-client -vvf rpki.apnic.net/member_repository/A91F104D/21C2A08C585F11EA8A1B8753C4F9AE02/TrnMSjh3s_-dQLwbs-YMkK36zVM.mft File: TrnMSjh3s_-dQLwbs-YMkK36zVM.mft (raw, json) Hash identifier: eqBeGDspVXcRzD53N3yiV6CIpFhscqNFjbxKbQiaCuk= Subject key identifier: FC:05:15:6F:68:78:29:2B:65:ED:35:E8:3B:78:A7:43:B2:D0:0C:FC Authority key identifier: 4E:B9:CC:4A:38:77:B3:FF:9D:40:BC:1B:B3:E6:0C:90:AD:FA:CD:53 Certificate issuer: /CN=A91F104D/serialNumber=4EB9CC4A3877B3FF9D40BC1BB3E60C90ADFACD53 Certificate serial: 0A9E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TrnMSjh3s_-dQLwbs-YMkK36zVM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F104D/21C2A08C585F11EA8A1B8753C4F9AE02/TrnMSjh3s_-dQLwbs-YMkK36zVM.mft Manifest number: 0A97 Signing time: Fri 30 May 2025 19:45:20 +0000 Manifest this update: Fri 30 May 2025 19:45:20 +0000 Manifest next update: Fri 06 Jun 2025 19:45:20 +0000 Files and hashes: 1: TrnMSjh3s_-dQLwbs-YMkK36zVM.crl (hash: QvuIUuipTitdhIva2dIG6r0a3HsHB1E65sZUPTtc5yU=) 2: 1979A7C0586111EA9FC98555C4F9AE02.roa (hash: ZDs2CUVgufghQf+Lc8A/Bot+97mQvkMQ7xGXz6nIftU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F104D/21C2A08C585F11EA8A1B8753C4F9AE02/TrnMSjh3s_-dQLwbs-YMkK36zVM.crl rsync://rpki.apnic.net/member_repository/A91F104D/21C2A08C585F11EA8A1B8753C4F9AE02/TrnMSjh3s_-dQLwbs-YMkK36zVM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TrnMSjh3s_-dQLwbs-YMkK36zVM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 19:45:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2718 (0xa9e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F104D, serialNumber=4EB9CC4A3877B3FF9D40BC1BB3E60C90ADFACD53 Validity Not Before: May 30 19:45:20 2025 GMT Not After : Jun 6 19:45:20 2025 GMT Subject: CN=683a0ad0-9202 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:00:a7:ea:cd:7e:d9:a4:a8:79:6f:11:d6:22: ad:75:3d:f8:ff:f6:2a:b3:12:f3:7b:b6:65:04:88: 79:23:ab:01:b5:41:71:d6:da:d8:d0:20:92:d7:cc: c4:c6:31:10:e6:a5:fa:b7:33:68:aa:6e:92:f2:3d: be:07:7e:95:e1:12:28:75:cc:30:23:cd:cd:9b:3f: bd:05:56:59:03:ee:df:ef:04:08:69:8f:0d:2a:14: 27:31:da:f1:d9:04:d8:dc:3d:3b:b7:1d:1f:8a:ba: 8a:df:ef:a1:ad:61:b3:ed:b5:5b:4b:1b:7c:ca:fd: f8:fc:f0:76:e0:ab:2e:a1:93:16:b7:26:44:5d:75: 79:7a:14:97:6b:65:50:9b:ae:5e:4e:6c:f7:cc:c0: dc:cc:c6:dc:1f:eb:7b:cd:c8:3d:73:98:95:74:77: ad:43:93:bc:aa:02:95:26:8b:4b:b0:8e:e1:4f:38: 6c:1e:19:32:d9:82:41:02:8a:2a:75:6c:59:fb:12: ed:4c:3b:19:1b:fc:3c:1e:5d:53:3e:9c:27:08:9e: ac:29:b7:35:84:87:33:ae:d2:11:43:f4:e1:d2:f0: 3f:20:b5:21:e9:37:e6:9f:0e:d8:25:5e:7b:3e:52: a0:54:17:9d:d6:fd:b7:2d:2a:39:2e:12:0a:ae:02: a1:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:05:15:6F:68:78:29:2B:65:ED:35:E8:3B:78:A7:43:B2:D0:0C:FC X509v3 Authority Key Identifier: keyid:4E:B9:CC:4A:38:77:B3:FF:9D:40:BC:1B:B3:E6:0C:90:AD:FA:CD:53 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F104D/21C2A08C585F11EA8A1B8753C4F9AE02/TrnMSjh3s_-dQLwbs-YMkK36zVM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TrnMSjh3s_-dQLwbs-YMkK36zVM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F104D/21C2A08C585F11EA8A1B8753C4F9AE02/TrnMSjh3s_-dQLwbs-YMkK36zVM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 62:77:e2:ec:e6:5b:fb:b5:e1:41:66:8b:1e:04:52:b5:07:e2: 8e:f1:f2:c3:fc:71:65:e7:41:29:cf:60:c8:26:79:69:54:e9: 8c:0b:6c:4f:36:00:c0:5d:b3:ed:bb:26:e8:a2:66:bd:9a:48: 8a:19:c8:a9:f2:56:d7:f9:7b:5c:5c:b1:1c:53:8f:35:85:6b: 66:80:07:e6:11:8d:f3:45:a1:ee:4f:5f:37:21:69:d8:b2:2e: da:96:7d:6c:d5:46:e7:35:72:80:48:97:97:a1:9a:9f:a1:c5: 20:17:bb:6a:93:45:db:61:48:aa:a9:95:82:aa:18:6c:af:b6: 3b:ec:c7:2a:e3:3d:97:81:4b:10:a7:05:53:31:39:4a:dc:45: 51:d4:21:2b:0e:a9:e7:87:61:eb:ef:0e:e7:1f:26:33:6c:71: b3:8c:3a:f2:91:07:a5:59:6c:de:e4:d5:e0:3e:66:fd:79:0b: 0e:c3:9d:b6:39:32:92:97:bf:f2:03:85:52:38:6c:3c:7a:b8: 63:02:d1:c3:cb:10:5f:1f:4b:cb:9a:e1:38:94:c2:e9:5e:68: 30:d7:d7:37:e8:54:27:97:91:d0:c4:82:0e:18:7d:1f:4c:b3: 6d:43:5d:3b:c8:72:56:ed:1f:62:36:2b:7b:75:9c:46:4a:2f: 7b:01:a4:a9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCp4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjEwNEQxMTAvBgNVBAUTKDRFQjlDQzRBMzg3N0IzRkY5RDQwQkMxQkIzRTYwQzkw QURGQUNENTMwHhcNMjUwNTMwMTk0NTIwWhcNMjUwNjA2MTk0NTIwWjAYMRYwFAYD VQQDEw02ODNhMGFkMC05MjAyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyQCn6s1+2aSoeW8R1iKtdT34//YqsxLze7ZlBIh5I6sBtUFx1trY0CCS18zE xjEQ5qX6tzNoqm6S8j2+B36V4RIodcwwI83Nmz+9BVZZA+7f7wQIaY8NKhQnMdrx 2QTY3D07tx0firqK3++hrWGz7bVbSxt8yv34/PB24KsuoZMWtyZEXXV5ehSXa2VQ m65eTmz3zMDczMbcH+t7zcg9c5iVdHetQ5O8qgKVJotLsI7hTzhsHhky2YJBAooq dWxZ+xLtTDsZG/w8Hl1TPpwnCJ6sKbc1hIczrtIRQ/Th0vA/ILUh6Tfmnw7YJV57 PlKgVBed1v23LSo5LhIKrgKhjQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPwFFW9o eCkrZe016Dt4p0Oy0Az8MB8GA1UdIwQYMBaAFE65zEo4d7P/nUC8G7PmDJCt+s1T MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMTA0RC8yMUMyQTA4QzU4 NUYxMUVBOEExQjg3NTNDNEY5QUUwMi9Ucm5NU2poM3NfLWRRTHdicy1ZTWtLMzZ6 Vk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1Rybk1Tamgzc18tZFFMd2JzLVlNa0szNnpWTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG MTA0RC8yMUMyQTA4QzU4NUYxMUVBOEExQjg3NTNDNEY5QUUwMi9Ucm5NU2poM3Nf LWRRTHdicy1ZTWtLMzZ6Vk0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBid+Ls5lv7teFBZoseBFK1B+KO8fLD/HFl50Epz2DIJnlpVOmMC2xP NgDAXbPtuybooma9mkiKGcip8lbX+XtcXLEcU481hWtmgAfmEY3zRaHuT183IWnY si7aln1s1UbnNXKASJeXoZqfocUgF7tqk0XbYUiqqZWCqhhsr7Y77Mcq4z2XgUsQ pwVTMTlK3EVR1CErDqnnh2Hr7w7nHyYzbHGzjDrykQelWWze5NXgPmb9eQsOw522 OTKSl7/yA4VSOGw8erhjAtHDyxBfH0vLmuE4lMLpXmgw19c36FQnl5HQxIIOGH0f TLNtQ107yHJW7R9iNit7dZxGSi97AaSp -----END CERTIFICATE-----Generated at Sat May 31 16:59:27 2025 by rpki-client