$ rpki-client -vvf rpki.apnic.net/member_repository/A91FDEFE/194B7920A51611EF890ECD3EC4F9AE02/T-GzX5rYKBtm9HAx9Qfg7n1UIRo.mft File: T-GzX5rYKBtm9HAx9Qfg7n1UIRo.mft (raw, json) Hash identifier: 0yMcSws/+HUrYseLWCCYnWD8pubGQASuOjh2j14L/Fs= Subject key identifier: 5B:9B:71:6C:28:D8:86:53:51:1C:4A:7E:C4:96:A2:6A:34:9A:CA:87 Authority key identifier: 4F:E1:B3:5F:9A:D8:28:1B:66:F4:70:31:F5:07:E0:EE:7D:54:21:1A Certificate issuer: /CN=A91FDEFE/serialNumber=4FE1B35F9AD8281B66F47031F507E0EE7D54211A Certificate serial: 50 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T-GzX5rYKBtm9HAx9Qfg7n1UIRo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FDEFE/194B7920A51611EF890ECD3EC4F9AE02/T-GzX5rYKBtm9HAx9Qfg7n1UIRo.mft Manifest number: 4F Signing time: Tue 15 Apr 2025 06:03:16 +0000 Manifest this update: Tue 15 Apr 2025 06:03:15 +0000 Manifest next update: Tue 22 Apr 2025 06:03:15 +0000 Files and hashes: 1: T-GzX5rYKBtm9HAx9Qfg7n1UIRo.crl (hash: LzEd9i1kEXFxj3D4m9SQt3CISMbSy6DtvuLmDoGiOlo=) 2: 669FD05EA53911EFBE261371C4F9AE02.roa (hash: C8BMzBjnObRwd1PN8+bj1Lr3uDFXe55TuSG2M+7J66A=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FDEFE/194B7920A51611EF890ECD3EC4F9AE02/T-GzX5rYKBtm9HAx9Qfg7n1UIRo.crl rsync://rpki.apnic.net/member_repository/A91FDEFE/194B7920A51611EF890ECD3EC4F9AE02/T-GzX5rYKBtm9HAx9Qfg7n1UIRo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T-GzX5rYKBtm9HAx9Qfg7n1UIRo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Apr 2025 06:03:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 80 (0x50) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FDEFE, serialNumber=4FE1B35F9AD8281B66F47031F507E0EE7D54211A Validity Not Before: Apr 15 06:03:15 2025 GMT Not After : Apr 22 06:03:15 2025 GMT Subject: CN=67fdf6a4-1978 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:a1:01:8e:ed:df:e3:91:f0:cc:ff:20:d4:ce: 01:b4:cd:4f:ac:df:e7:cb:e0:43:ac:20:b5:a7:16: a7:98:9f:f4:6f:49:91:9f:68:e9:9a:ae:e7:80:75: 29:70:e5:5f:d2:44:01:6b:9b:4e:4a:41:eb:fd:eb: f9:65:9c:ef:ee:80:40:07:40:29:22:d3:b2:a5:95: 91:58:a1:2f:d9:8f:16:55:d0:cd:34:df:43:4e:99: 9b:29:cc:09:2a:37:01:24:31:6c:f3:cc:18:3c:62: 76:27:f2:e3:3b:1e:4d:ff:38:c2:d3:5f:ea:b3:9d: 30:f8:a2:55:c3:38:d0:a0:4e:8a:e7:c1:86:f2:61: 33:b7:b8:01:e3:49:00:67:3b:b8:dd:e5:d5:14:64: b6:bf:47:46:80:a9:9e:35:f1:e3:44:5a:e0:b9:27: 60:21:cd:d5:75:d3:55:fa:33:18:46:6a:a5:2e:38: c5:0e:ad:dd:fd:74:a0:2d:c6:a6:5b:bc:0a:04:37: bd:f9:5a:e7:6f:45:a3:b3:01:e5:e1:1b:c4:90:a3: 5d:2a:3e:f3:59:08:f8:8c:28:63:fd:ec:dd:8b:11: ff:a5:3b:c4:8a:c2:b8:17:3c:32:a8:18:03:6a:d9: bf:4b:8c:79:ff:09:b9:39:8d:3b:f0:93:a0:33:92: 27:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:9B:71:6C:28:D8:86:53:51:1C:4A:7E:C4:96:A2:6A:34:9A:CA:87 X509v3 Authority Key Identifier: keyid:4F:E1:B3:5F:9A:D8:28:1B:66:F4:70:31:F5:07:E0:EE:7D:54:21:1A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FDEFE/194B7920A51611EF890ECD3EC4F9AE02/T-GzX5rYKBtm9HAx9Qfg7n1UIRo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T-GzX5rYKBtm9HAx9Qfg7n1UIRo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FDEFE/194B7920A51611EF890ECD3EC4F9AE02/T-GzX5rYKBtm9HAx9Qfg7n1UIRo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 71:a8:4e:79:b6:eb:84:c6:93:f1:d2:af:5f:70:ee:1a:1d:80: 69:a4:93:93:13:27:12:b0:e5:93:d3:f6:f2:e9:32:05:6d:16: b3:52:02:05:30:1b:63:94:b8:60:0e:50:79:bb:20:57:aa:5a: 19:7d:d7:55:76:3d:68:ce:11:7e:ca:ac:99:12:30:c0:4a:59: 7e:1b:a0:5c:e4:3f:aa:31:28:6c:96:a0:b6:09:d5:3c:f3:d1: 58:d5:24:67:39:1c:d1:dd:98:93:de:e5:50:15:3a:79:b6:67: 72:6a:9b:e8:79:d2:79:51:22:5a:3b:ff:26:d8:34:28:70:d1: c2:bd:25:e8:d0:02:c4:e1:1d:ca:cd:53:14:7f:b2:20:ad:e3: 48:f7:17:68:ce:ad:65:38:9b:09:12:0f:fe:19:ea:64:34:6d: b0:1c:6d:9e:74:73:d6:5b:d7:77:0f:ad:30:55:19:5c:be:b2: 7b:25:a0:95:b2:21:7e:6a:97:97:94:24:9a:6b:ef:f1:43:4a: 57:2e:36:2c:d4:14:53:b5:98:0d:cf:50:3c:18:68:64:7e:44: 48:c5:9c:22:16:0a:87:97:1c:b5:8e:85:d8:ab:61:e3:34:a8: a0:05:16:0f:c0:83:ec:dc:62:09:1b:af:65:4d:5b:cc:21:6e: 49:a5:1f:a7 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBUDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG REVGRTExMC8GA1UEBRMoNEZFMUIzNUY5QUQ4MjgxQjY2RjQ3MDMxRjUwN0UwRUU3 RDU0MjExQTAeFw0yNTA0MTUwNjAzMTVaFw0yNTA0MjIwNjAzMTVaMBgxFjAUBgNV BAMTDTY3ZmRmNmE0LTE5NzgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCnoQGO7d/jkfDM/yDUzgG0zU+s3+fL4EOsILWnFqeYn/RvSZGfaOmarueAdSlw 5V/SRAFrm05KQev96/llnO/ugEAHQCki07KllZFYoS/ZjxZV0M0030NOmZspzAkq NwEkMWzzzBg8YnYn8uM7Hk3/OMLTX+qznTD4olXDONCgTornwYbyYTO3uAHjSQBn O7jd5dUUZLa/R0aAqZ418eNEWuC5J2AhzdV101X6MxhGaqUuOMUOrd39dKAtxqZb vAoEN735WudvRaOzAeXhG8SQo10qPvNZCPiMKGP97N2LEf+lO8SKwrgXPDKoGANq 2b9LjHn/Cbk5jTvwk6AzkicFAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUW5txbCjY hlNRHEp+xJaiajSayocwHwYDVR0jBBgwFoAUT+GzX5rYKBtm9HAx9Qfg7n1UIRow DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUZERUZFLzE5NEI3OTIwQTUx NjExRUY4OTBFQ0QzRUM0RjlBRTAyL1QtR3pYNXJZS0J0bTlIQXg5UWZnN24xVUlS by5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvVC1Helg1cllLQnRtOUhBeDlRZmc3bjFVSVJvLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUZE RUZFLzE5NEI3OTIwQTUxNjExRUY4OTBFQ0QzRUM0RjlBRTAyL1QtR3pYNXJZS0J0 bTlIQXg5UWZnN24xVUlSby5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAHGoTnm264TGk/HSr19w7hodgGmkk5MTJxKw5ZPT9vLpMgVtFrNSAgUw G2OUuGAOUHm7IFeqWhl911V2PWjOEX7KrJkSMMBKWX4boFzkP6oxKGyWoLYJ1Tzz 0VjVJGc5HNHdmJPe5VAVOnm2Z3Jqm+h50nlRIlo7/ybYNChw0cK9JejQAsThHcrN UxR/siCt40j3F2jOrWU4mwkSD/4Z6mQ0bbAcbZ50c9Zb13cPrTBVGVy+snsloJWy IX5ql5eUJJpr7/FDSlcuNizUFFO1mA3PUDwYaGR+REjFnCIWCoeXHLWOhdirYeM0 qKAFFg/Ag+zcYgkbr2VNW8whbkmlH6c= -----END CERTIFICATE-----Generated at Wed Apr 16 17:16:36 2025 by rpki-client