$ rpki-client -vvf rpki.apnic.net/member_repository/A91BB883/E982BA3610E711EA9D21C26FC4F9AE02/T1r1ZdMN1U8kFH714XiqC6oz_Ck.mft File: T1r1ZdMN1U8kFH714XiqC6oz_Ck.mft (raw, json) Hash identifier: YJG5w/mTyuB8eKyd70cpNU2ab8pBKsdQormOUGGjbHk= Subject key identifier: 22:82:69:8D:37:9B:69:6A:32:04:80:51:07:B9:4F:75:62:78:A8:BF Authority key identifier: 4F:5A:F5:65:D3:0D:D5:4F:24:14:7E:F5:E1:78:AA:0B:AA:33:FC:29 Certificate issuer: /CN=A91BB883/serialNumber=4F5AF565D30DD54F24147EF5E178AA0BAA33FC29 Certificate serial: 0C10 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T1r1ZdMN1U8kFH714XiqC6oz_Ck.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BB883/E982BA3610E711EA9D21C26FC4F9AE02/T1r1ZdMN1U8kFH714XiqC6oz_Ck.mft Manifest number: 0C08 Signing time: Fri 30 May 2025 18:53:09 +0000 Manifest this update: Fri 30 May 2025 18:53:08 +0000 Manifest next update: Fri 06 Jun 2025 18:53:08 +0000 Files and hashes: 1: T1r1ZdMN1U8kFH714XiqC6oz_Ck.crl (hash: Dg0S/c7L4gI2+R+3754VG4NAhQXvpBvHS1gVuvZhixo=) 2: 8160C03610E911EA86FA6774C4F9AE02.roa (hash: 8XfCRrs6KyewkevpBqIWOSXTDqr80tEQ4o/AVxw5pnc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BB883/E982BA3610E711EA9D21C26FC4F9AE02/T1r1ZdMN1U8kFH714XiqC6oz_Ck.crl rsync://rpki.apnic.net/member_repository/A91BB883/E982BA3610E711EA9D21C26FC4F9AE02/T1r1ZdMN1U8kFH714XiqC6oz_Ck.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T1r1ZdMN1U8kFH714XiqC6oz_Ck.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 18:53:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3088 (0xc10) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BB883, serialNumber=4F5AF565D30DD54F24147EF5E178AA0BAA33FC29 Validity Not Before: May 30 18:53:08 2025 GMT Not After : Jun 6 18:53:08 2025 GMT Subject: CN=6839fe95-3f40 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:1a:1a:2a:af:2b:26:f1:14:5e:42:22:5e:71: 82:4b:84:3d:96:ee:fa:97:53:a1:5f:2a:97:02:77: 81:72:81:36:e1:b2:fd:77:e7:60:8f:3a:1a:7e:42: 14:bd:a4:ec:55:68:b3:11:f4:30:b9:64:22:db:5e: 56:06:ee:6d:2e:de:62:79:49:b1:cf:b6:ab:28:9d: a7:57:fc:c6:8c:7c:fc:aa:77:2e:5b:90:9b:9d:e7: d4:de:e3:b3:0a:67:ad:1e:2e:f1:a9:34:b9:e8:8f: 10:a3:d2:f8:e1:9d:c1:3f:38:ba:8c:0a:30:72:61: 9b:a4:1b:48:b1:8a:12:2a:3e:c0:01:05:d6:c2:a4: ce:de:cc:c0:d8:59:c0:3b:0b:9a:49:09:36:ba:25: d4:9f:ef:d5:9a:a5:ce:cd:76:d0:41:a4:e1:0c:3f: cf:77:53:f9:4e:a2:bf:0b:ac:fb:b0:38:58:97:0d: 10:20:4d:a1:2d:41:60:a8:f9:2c:ff:ef:e5:76:7c: 23:eb:37:34:1d:31:41:8d:4a:17:33:48:43:18:37: ef:85:30:4f:eb:ce:b2:64:21:27:61:48:2c:b5:99: 56:55:d9:ed:ac:1a:f6:90:a0:33:85:44:ae:94:8b: 8b:65:da:29:a8:18:a3:ca:8d:87:6b:7a:35:ee:89: 17:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:82:69:8D:37:9B:69:6A:32:04:80:51:07:B9:4F:75:62:78:A8:BF X509v3 Authority Key Identifier: keyid:4F:5A:F5:65:D3:0D:D5:4F:24:14:7E:F5:E1:78:AA:0B:AA:33:FC:29 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BB883/E982BA3610E711EA9D21C26FC4F9AE02/T1r1ZdMN1U8kFH714XiqC6oz_Ck.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T1r1ZdMN1U8kFH714XiqC6oz_Ck.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BB883/E982BA3610E711EA9D21C26FC4F9AE02/T1r1ZdMN1U8kFH714XiqC6oz_Ck.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 95:64:d4:17:00:9a:c5:26:36:5f:ae:9e:98:2f:4c:5e:89:8f: c5:2b:70:63:37:c1:ce:fa:12:41:79:0e:96:96:be:9a:8e:91: 79:86:83:c9:0a:03:fd:f9:70:12:dd:a5:2e:88:e3:28:12:2e: 52:97:d6:6c:25:4b:c1:63:d3:ed:af:65:9e:3a:55:99:3c:58: cf:04:9d:d9:b4:ea:8f:37:eb:90:2b:9d:a2:a3:fc:89:07:f1: 85:a1:2f:c6:77:ff:a5:5b:97:76:1f:93:b5:87:a0:b8:93:fb: e2:b9:f9:c3:95:77:2c:7e:0d:2a:83:2e:91:4f:97:6c:00:c7: 37:90:30:e4:10:30:13:8d:b1:ea:f9:9e:3d:9a:09:a0:50:40: 0f:d0:46:17:14:db:94:8d:e5:a6:10:92:37:f8:51:c7:9b:a8: cf:f7:b7:54:8a:91:8a:99:cc:94:43:c7:9f:a0:bf:47:53:9b: df:6f:d1:5b:bd:43:41:55:11:f0:c4:55:5e:87:a1:e3:5a:9e: 47:4d:14:72:49:6c:93:12:e2:3d:d2:b4:fa:e0:7c:61:9e:3e: cc:59:99:b3:87:98:a8:5a:d6:25:a4:fe:61:e3:18:39:78:bf: c3:c1:89:f3:47:02:19:c5:30:d1:38:68:2b:3b:c5:35:23:ac: 45:e5:63:68 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDBAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkI4ODMxMTAvBgNVBAUTKDRGNUFGNTY1RDMwREQ1NEYyNDE0N0VGNUUxNzhBQTBC QUEzM0ZDMjkwHhcNMjUwNTMwMTg1MzA4WhcNMjUwNjA2MTg1MzA4WjAYMRYwFAYD VQQDEw02ODM5ZmU5NS0zZjQwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwRoaKq8rJvEUXkIiXnGCS4Q9lu76l1OhXyqXAneBcoE24bL9d+dgjzoafkIU vaTsVWizEfQwuWQi215WBu5tLt5ieUmxz7arKJ2nV/zGjHz8qncuW5CbnefU3uOz CmetHi7xqTS56I8Qo9L44Z3BPzi6jAowcmGbpBtIsYoSKj7AAQXWwqTO3szA2FnA OwuaSQk2uiXUn+/VmqXOzXbQQaThDD/Pd1P5TqK/C6z7sDhYlw0QIE2hLUFgqPks /+/ldnwj6zc0HTFBjUoXM0hDGDfvhTBP686yZCEnYUgstZlWVdntrBr2kKAzhUSu lIuLZdopqBijyo2Ha3o17okXoQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCKCaY03 m2lqMgSAUQe5T3VieKi/MB8GA1UdIwQYMBaAFE9a9WXTDdVPJBR+9eF4qguqM/wp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQjg4My9FOTgyQkEzNjEw RTcxMUVBOUQyMUMyNkZDNEY5QUUwMi9UMXIxWmRNTjFVOGtGSDcxNFhpcUM2b3pf Q2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1QxcjFaZE1OMVU4a0ZINzE0WGlxQzZvel9Day5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC Qjg4My9FOTgyQkEzNjEwRTcxMUVBOUQyMUMyNkZDNEY5QUUwMi9UMXIxWmRNTjFV OGtGSDcxNFhpcUM2b3pfQ2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCVZNQXAJrFJjZfrp6YL0xeiY/FK3BjN8HO+hJBeQ6Wlr6ajpF5hoPJ CgP9+XAS3aUuiOMoEi5Sl9ZsJUvBY9Ptr2WeOlWZPFjPBJ3ZtOqPN+uQK52io/yJ B/GFoS/Gd/+lW5d2H5O1h6C4k/viufnDlXcsfg0qgy6RT5dsAMc3kDDkEDATjbHq +Z49mgmgUEAP0EYXFNuUjeWmEJI3+FHHm6jP97dUipGKmcyUQ8efoL9HU5vfb9Fb vUNBVRHwxFVeh6HjWp5HTRRySWyTEuI90rT64Hxhnj7MWZmzh5ioWtYlpP5h4xg5 eL/DwYnzRwIZxTDROGgrO8U1I6xF5WNo -----END CERTIFICATE-----Generated at Sat May 31 17:28:51 2025 by rpki-client