$ rpki-client -vvf rpki.apnic.net/member_repository/A91BB883/E982BA3610E711EA9D21C26FC4F9AE02/T1r1ZdMN1U8kFH714XiqC6oz_Ck.mft File: T1r1ZdMN1U8kFH714XiqC6oz_Ck.mft (raw, json) Hash identifier: U04T4b62H38xGvFakBgR5YaDgCiUzb2MrjGP7ksddz4= Subject key identifier: 30:A2:06:1A:7F:D8:CB:46:BA:E9:7B:CC:F4:EA:F9:0C:3D:00:00:EE Authority key identifier: 4F:5A:F5:65:D3:0D:D5:4F:24:14:7E:F5:E1:78:AA:0B:AA:33:FC:29 Certificate issuer: /CN=A91BB883/serialNumber=4F5AF565D30DD54F24147EF5E178AA0BAA33FC29 Certificate serial: 0BF5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T1r1ZdMN1U8kFH714XiqC6oz_Ck.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BB883/E982BA3610E711EA9D21C26FC4F9AE02/T1r1ZdMN1U8kFH714XiqC6oz_Ck.mft Manifest number: 0BED Signing time: Fri 04 Apr 2025 18:51:23 +0000 Manifest this update: Fri 04 Apr 2025 18:51:22 +0000 Manifest next update: Fri 11 Apr 2025 18:51:22 +0000 Files and hashes: 1: T1r1ZdMN1U8kFH714XiqC6oz_Ck.crl (hash: 64YlhvuHIeIoxLl/bwcTU/HlavsGoYs5JHmCCHy73SY=) 2: 8160C03610E911EA86FA6774C4F9AE02.roa (hash: 8XfCRrs6KyewkevpBqIWOSXTDqr80tEQ4o/AVxw5pnc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BB883/E982BA3610E711EA9D21C26FC4F9AE02/T1r1ZdMN1U8kFH714XiqC6oz_Ck.crl rsync://rpki.apnic.net/member_repository/A91BB883/E982BA3610E711EA9D21C26FC4F9AE02/T1r1ZdMN1U8kFH714XiqC6oz_Ck.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T1r1ZdMN1U8kFH714XiqC6oz_Ck.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Apr 2025 18:51:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3061 (0xbf5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BB883 Validity Not Before: Apr 4 18:51:22 2025 GMT Not After : Apr 11 18:51:22 2025 GMT Subject: CN=67f02a2b-de4a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:e3:ba:95:77:32:6b:3d:38:c0:5e:84:e6:d2: 68:08:31:9d:8f:a6:f5:ed:d0:7e:c0:94:36:b6:b7: 42:bd:eb:60:1b:f4:5e:b5:8c:4d:f3:a4:35:c1:e0: 56:42:16:2e:5c:f9:da:1c:87:e2:7a:57:fb:96:40: ed:c9:fc:28:4e:3b:d5:14:dd:04:01:ae:53:81:52: 94:b7:27:50:8b:87:ec:6f:ff:65:4f:ad:a4:ed:10: 94:fe:3d:90:62:f7:ac:c1:7e:f8:2d:f5:eb:ef:3d: 08:f4:4d:d6:9f:a4:3e:3d:59:6e:bf:7b:5d:02:46: 1c:52:93:2d:12:34:f5:f2:07:0b:14:b1:85:fb:e5: 3a:9c:2b:45:f2:68:54:cf:b6:ff:91:f1:bd:64:db: c4:d2:44:44:f2:00:90:85:03:f8:4a:d2:57:d2:79: 22:f1:bb:7c:ae:a4:17:40:21:0b:64:18:7b:e8:c5: 0e:ed:a3:61:a9:9d:52:86:9b:b6:62:b5:7a:71:ad: 4c:df:35:6e:ec:19:8a:ff:ca:85:00:c9:ac:14:f2: af:72:17:93:63:78:5e:53:85:31:ed:11:b6:36:f0: 47:b3:05:9c:fa:b3:a4:ca:9f:51:76:3f:1d:9d:a3: 1f:53:b4:e7:cd:17:ee:a3:de:50:1d:60:c7:22:85: a1:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:A2:06:1A:7F:D8:CB:46:BA:E9:7B:CC:F4:EA:F9:0C:3D:00:00:EE X509v3 Authority Key Identifier: keyid:4F:5A:F5:65:D3:0D:D5:4F:24:14:7E:F5:E1:78:AA:0B:AA:33:FC:29 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BB883/E982BA3610E711EA9D21C26FC4F9AE02/T1r1ZdMN1U8kFH714XiqC6oz_Ck.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T1r1ZdMN1U8kFH714XiqC6oz_Ck.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BB883/E982BA3610E711EA9D21C26FC4F9AE02/T1r1ZdMN1U8kFH714XiqC6oz_Ck.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 95:f4:1b:a5:b6:3b:07:4d:df:0e:6d:39:53:0d:cd:59:0a:48: 0c:7b:50:0b:b6:99:8c:88:fe:ef:83:80:a9:ea:97:38:31:8b: c8:3d:20:ba:91:6e:57:16:bb:3a:a9:55:a9:42:56:ae:b0:e2: d6:09:a2:df:7f:ee:be:87:52:8e:4d:5b:50:e4:48:1c:a3:cf: 6d:b6:af:4c:7a:6c:ea:eb:c5:13:a2:ca:74:f8:79:af:55:5c: 3d:29:63:3e:75:cc:63:c4:34:86:06:33:83:1f:34:22:26:e8: 7e:9f:3a:b1:d0:04:5d:f9:7e:e1:d0:bb:69:68:87:df:82:8e: dc:0f:d9:c6:a8:69:ae:c7:7d:74:40:ff:e6:e4:18:5f:a6:56: 5b:47:80:e7:f0:c0:14:39:3c:fc:66:1a:ee:bf:3f:23:d2:57: c9:59:10:71:7e:49:92:71:a8:5d:93:7d:a8:4b:28:85:d8:bc: 0d:5f:6a:24:7b:7b:d9:e1:01:0e:1a:d9:bb:0a:56:cf:47:ea: 21:63:83:b8:21:13:60:d8:04:1e:f0:a5:87:1a:16:71:46:cf: a8:3d:ba:7e:7f:9a:ba:1d:fa:6f:9a:b0:b6:f3:6d:5c:b0:1a: ea:75:79:dc:84:bd:62:c6:3b:7d:5e:95:9e:c4:c1:cc:39:8f: b2:d9:4a:ac -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC/UwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkI4ODMxMTAvBgNVBAUTKDRGNUFGNTY1RDMwREQ1NEYyNDE0N0VGNUUxNzhBQTBC QUEzM0ZDMjkwHhcNMjUwNDA0MTg1MTIyWhcNMjUwNDExMTg1MTIyWjAYMRYwFAYD VQQDEw02N2YwMmEyYi1kZTRhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0eO6lXcyaz04wF6E5tJoCDGdj6b17dB+wJQ2trdCvetgG/RetYxN86Q1weBW QhYuXPnaHIfielf7lkDtyfwoTjvVFN0EAa5TgVKUtydQi4fsb/9lT62k7RCU/j2Q YveswX74LfXr7z0I9E3Wn6Q+PVluv3tdAkYcUpMtEjT18gcLFLGF++U6nCtF8mhU z7b/kfG9ZNvE0kRE8gCQhQP4StJX0nki8bt8rqQXQCELZBh76MUO7aNhqZ1Shpu2 YrV6ca1M3zVu7BmK/8qFAMmsFPKvcheTY3heU4Ux7RG2NvBHswWc+rOkyp9Rdj8d naMfU7TnzRfuo95QHWDHIoWh8wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDCiBhp/ 2MtGuul7zPTq+Qw9AADuMB8GA1UdIwQYMBaAFE9a9WXTDdVPJBR+9eF4qguqM/wp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQjg4My9FOTgyQkEzNjEw RTcxMUVBOUQyMUMyNkZDNEY5QUUwMi9UMXIxWmRNTjFVOGtGSDcxNFhpcUM2b3pf Q2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1QxcjFaZE1OMVU4a0ZINzE0WGlxQzZvel9Day5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC Qjg4My9FOTgyQkEzNjEwRTcxMUVBOUQyMUMyNkZDNEY5QUUwMi9UMXIxWmRNTjFV OGtGSDcxNFhpcUM2b3pfQ2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCV9BultjsHTd8ObTlTDc1ZCkgMe1ALtpmMiP7vg4Cp6pc4MYvIPSC6 kW5XFrs6qVWpQlausOLWCaLff+6+h1KOTVtQ5Egco89ttq9Memzq68UTosp0+Hmv VVw9KWM+dcxjxDSGBjODHzQiJuh+nzqx0ARd+X7h0LtpaIffgo7cD9nGqGmux310 QP/m5BhfplZbR4Dn8MAUOTz8Zhruvz8j0lfJWRBxfkmScahdk32oSyiF2LwNX2ok e3vZ4QEOGtm7ClbPR+ohY4O4IRNg2AQe8KWHGhZxRs+oPbp+f5q6HfpvmrC2821c sBrqdXnchL1ixjt9XpWexMHMOY+y2Uqs -----END CERTIFICATE-----Generated at Fri Apr 4 22:19:59 2025 by rpki-client