$ rpki-client -vvf rpki.apnic.net/member_repository/A91BF4A1/0F587A88B1CC11ED85F25A3DC4F9AE02/T-5HlDq-E-OFVqc8KBuQ41SSN9w.mft File: T-5HlDq-E-OFVqc8KBuQ41SSN9w.mft (raw, json) Hash identifier: ibpaeiAmUl9VHw7riPk7cH6+IS93axSdm3PoIx3CTCA= Subject key identifier: 24:18:03:87:49:9B:31:7E:14:EA:FF:B7:D9:B2:CD:DF:65:37:57:22 Authority key identifier: 4F:EE:47:94:3A:BE:13:E3:85:56:A7:3C:28:1B:90:E3:54:92:37:DC Certificate issuer: /CN=A91BF4A1/serialNumber=4FEE47943ABE13E38556A73C281B90E3549237DC Certificate serial: 01CF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T-5HlDq-E-OFVqc8KBuQ41SSN9w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BF4A1/0F587A88B1CC11ED85F25A3DC4F9AE02/T-5HlDq-E-OFVqc8KBuQ41SSN9w.mft Manifest number: 01C8 Signing time: Mon 21 Jul 2025 03:00:55 +0000 Manifest this update: Mon 21 Jul 2025 03:00:55 +0000 Manifest next update: Mon 28 Jul 2025 03:00:55 +0000 Files and hashes: 1: T-5HlDq-E-OFVqc8KBuQ41SSN9w.crl (hash: z6+ymSqwHCzoWu3k9TIlAdZ3yf1HKvcYq6KIuTuiFek=) 2: 4405F70C03AE11F08ECE4754C4F9AE02.roa (hash: KSItAPOjkLG7UWPYALBIyJeHmExySZ4KDwSB7GWXFrI=) 3: 9AB64290908211EF9877C022C4F9AE02.roa (hash: 53832RqqEhC0WAnEbw/uqzZOjibGBYS5qoQ5I8q+Q+o=) 4: B780E2A097F711EF89B09770C4F9AE02.roa (hash: DB23UT2fsXrp5BzUdZvw+7TC7FTSDlXyxizqnQeaxYs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BF4A1/0F587A88B1CC11ED85F25A3DC4F9AE02/T-5HlDq-E-OFVqc8KBuQ41SSN9w.crl rsync://rpki.apnic.net/member_repository/A91BF4A1/0F587A88B1CC11ED85F25A3DC4F9AE02/T-5HlDq-E-OFVqc8KBuQ41SSN9w.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T-5HlDq-E-OFVqc8KBuQ41SSN9w.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Jul 2025 03:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 463 (0x1cf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BF4A1, serialNumber=4FEE47943ABE13E38556A73C281B90E3549237DC Validity Not Before: Jul 21 03:00:55 2025 GMT Not After : Jul 28 03:00:55 2025 GMT Subject: CN=687dad67-d632 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:02:72:a7:6b:db:fd:05:94:5d:a4:1e:ff:db: 3c:3e:54:d1:26:8c:33:37:e2:1c:be:de:8c:b6:c7: d9:be:db:1b:40:be:7b:f5:ed:72:72:0a:0d:06:ce: a5:a9:95:45:1a:50:b3:f1:44:c8:bd:13:ef:71:1a: 67:27:15:87:8b:cd:8d:f1:f2:4c:42:b0:ca:7e:a8: 76:c7:5f:2f:49:bb:fe:e8:9b:8a:f0:aa:03:77:3b: 4a:62:35:49:18:c9:5f:9d:53:36:03:83:d6:8d:4c: 90:e6:fc:58:e8:74:87:ad:56:54:43:c2:6c:68:2d: fa:12:ad:67:7b:a5:a0:1f:37:ff:54:c9:ee:f7:b8: 51:38:18:64:fc:ac:94:4a:f6:9e:f8:77:2f:84:a6: 36:aa:21:e8:35:30:2f:99:9e:4f:e6:aa:f9:04:9c: f5:cd:cf:22:a7:ca:ae:98:0d:7d:b8:45:cf:50:7b: bb:92:bd:e6:94:71:b6:5b:93:6d:5a:81:a8:98:36: 1f:3b:73:2f:00:0d:1c:11:ab:fc:39:a4:86:7c:eb: b8:d7:32:d0:68:aa:cb:85:e4:ac:b9:b6:65:24:1b: 80:ae:c8:1c:7b:23:08:ba:d3:22:46:cf:8c:4e:0a: 74:c6:a3:06:33:3f:2c:2a:e2:0d:d8:cd:75:e9:54: cb:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:18:03:87:49:9B:31:7E:14:EA:FF:B7:D9:B2:CD:DF:65:37:57:22 X509v3 Authority Key Identifier: keyid:4F:EE:47:94:3A:BE:13:E3:85:56:A7:3C:28:1B:90:E3:54:92:37:DC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BF4A1/0F587A88B1CC11ED85F25A3DC4F9AE02/T-5HlDq-E-OFVqc8KBuQ41SSN9w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T-5HlDq-E-OFVqc8KBuQ41SSN9w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BF4A1/0F587A88B1CC11ED85F25A3DC4F9AE02/T-5HlDq-E-OFVqc8KBuQ41SSN9w.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6b:de:90:2a:a8:48:6f:85:51:00:77:24:7c:fc:cb:17:0b:f6: 20:b9:cf:6c:b0:93:d6:03:a9:28:43:17:ab:b8:58:cc:75:59: 01:63:95:72:32:17:a0:dc:10:5f:40:78:11:c5:02:92:04:a7: 15:5d:47:8a:90:c4:48:04:16:0e:88:c6:62:25:1e:4a:1d:43: 01:7c:a6:c3:aa:1d:4c:96:a1:98:0e:8d:ee:94:6a:ab:ea:97: 70:c7:44:f4:da:28:5d:c8:8d:e8:3d:5f:74:0b:21:ae:8f:47: 6e:c4:c0:26:f0:4d:ca:08:08:bb:9b:3d:18:c9:ad:40:ae:18: 1f:66:70:56:d2:4f:dc:e4:39:10:75:46:b1:e0:79:ff:a4:09: b0:d9:df:b4:cf:d5:cf:0f:18:d0:7d:d9:86:f7:14:c9:e3:57: 82:70:f0:81:28:13:62:c2:4b:6e:6b:35:5f:a1:a3:95:93:c6: 6f:5c:9d:db:55:79:81:3e:6c:10:87:8c:03:d9:1d:bb:1b:6b: 27:77:ed:73:1b:7a:34:f4:c7:e0:c4:ae:ea:bf:11:56:e6:b8: c0:ae:50:1d:5e:81:c5:06:b1:83:21:7c:78:fe:0a:1c:b1:c6: 17:4a:d0:a1:19:1f:fe:37:a8:db:ef:1f:3b:4d:8e:5d:84:96: 92:ea:39:5f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAc8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkY0QTExMTAvBgNVBAUTKDRGRUU0Nzk0M0FCRTEzRTM4NTU2QTczQzI4MUI5MEUz NTQ5MjM3REMwHhcNMjUwNzIxMDMwMDU1WhcNMjUwNzI4MDMwMDU1WjAYMRYwFAYD VQQDEw02ODdkYWQ2Ny1kNjMyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzwJyp2vb/QWUXaQe/9s8PlTRJowzN+Icvt6MtsfZvtsbQL579e1ycgoNBs6l qZVFGlCz8UTIvRPvcRpnJxWHi82N8fJMQrDKfqh2x18vSbv+6JuK8KoDdztKYjVJ GMlfnVM2A4PWjUyQ5vxY6HSHrVZUQ8JsaC36Eq1ne6WgHzf/VMnu97hROBhk/KyU Svae+HcvhKY2qiHoNTAvmZ5P5qr5BJz1zc8ip8qumA19uEXPUHu7kr3mlHG2W5Nt WoGomDYfO3MvAA0cEav8OaSGfOu41zLQaKrLheSsubZlJBuArsgceyMIutMiRs+M Tgp0xqMGMz8sKuIN2M116VTL2wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCQYA4dJ mzF+FOr/t9myzd9lN1ciMB8GA1UdIwQYMBaAFE/uR5Q6vhPjhVanPCgbkONUkjfc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCRjRBMS8wRjU4N0E4OEIx Q0MxMUVEODVGMjVBM0RDNEY5QUUwMi9ULTVIbERxLUUtT0ZWcWM4S0J1UTQxU1NO OXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1QtNUhsRHEtRS1PRlZxYzhLQnVRNDFTU045dy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC RjRBMS8wRjU4N0E4OEIxQ0MxMUVEODVGMjVBM0RDNEY5QUUwMi9ULTVIbERxLUUt T0ZWcWM4S0J1UTQxU1NOOXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBr3pAqqEhvhVEAdyR8/MsXC/Yguc9ssJPWA6koQxeruFjMdVkBY5Vy Mheg3BBfQHgRxQKSBKcVXUeKkMRIBBYOiMZiJR5KHUMBfKbDqh1MlqGYDo3ulGqr 6pdwx0T02ihdyI3oPV90CyGuj0duxMAm8E3KCAi7mz0Yya1ArhgfZnBW0k/c5DkQ dUax4Hn/pAmw2d+0z9XPDxjQfdmG9xTJ41eCcPCBKBNiwktuazVfoaOVk8ZvXJ3b VXmBPmwQh4wD2R27G2snd+1zG3o09MfgxK7qvxFW5rjArlAdXoHFBrGDIXx4/goc scYXStChGR/+N6jb7x87TY5dhJaS6jlf -----END CERTIFICATE-----Generated at Mon Jul 21 23:55:12 2025 by rpki-client