$ rpki-client -vvf rpki.apnic.net/member_repository/A91BB883/E982BA3610E711EA9D21C26FC4F9AE02/T1r1ZdMN1U8kFH714XiqC6oz_Ck.mft File: T1r1ZdMN1U8kFH714XiqC6oz_Ck.mft (raw, json) Hash identifier: f3YtfRwMEPjDHyMncuV9tpzf+IJ+lHxzXD/lF3bORcM= Subject key identifier: 02:88:A1:49:40:3F:AE:DB:86:8C:BC:41:60:BA:AA:C7:6F:DC:EE:CB Authority key identifier: 4F:5A:F5:65:D3:0D:D5:4F:24:14:7E:F5:E1:78:AA:0B:AA:33:FC:29 Certificate issuer: /CN=A91BB883/serialNumber=4F5AF565D30DD54F24147EF5E178AA0BAA33FC29 Certificate serial: 0C3C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T1r1ZdMN1U8kFH714XiqC6oz_Ck.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BB883/E982BA3610E711EA9D21C26FC4F9AE02/T1r1ZdMN1U8kFH714XiqC6oz_Ck.mft Manifest number: 0C34 Signing time: Sun 24 Aug 2025 18:36:53 +0000 Manifest this update: Sun 24 Aug 2025 18:36:52 +0000 Manifest next update: Sun 31 Aug 2025 18:36:52 +0000 Files and hashes: 1: T1r1ZdMN1U8kFH714XiqC6oz_Ck.crl (hash: wJ3xfZNltWNcBnk3WBSR1vdwm2Ud7/pBXVT9USPBP+M=) 2: 8160C03610E911EA86FA6774C4F9AE02.roa (hash: 8XfCRrs6KyewkevpBqIWOSXTDqr80tEQ4o/AVxw5pnc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BB883/E982BA3610E711EA9D21C26FC4F9AE02/T1r1ZdMN1U8kFH714XiqC6oz_Ck.crl rsync://rpki.apnic.net/member_repository/A91BB883/E982BA3610E711EA9D21C26FC4F9AE02/T1r1ZdMN1U8kFH714XiqC6oz_Ck.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T1r1ZdMN1U8kFH714XiqC6oz_Ck.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 31 Aug 2025 18:36:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3132 (0xc3c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BB883, serialNumber=4F5AF565D30DD54F24147EF5E178AA0BAA33FC29 Validity Not Before: Aug 24 18:36:52 2025 GMT Not After : Aug 31 18:36:52 2025 GMT Subject: CN=68ab5bc5-f560 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:b7:f1:62:9d:ee:94:f4:01:19:7d:ff:1c:35: b6:fa:83:c2:6d:57:37:4b:af:4b:a8:3e:2e:c0:27: 8c:9e:4a:a5:65:9a:7a:25:f9:99:e9:9a:57:1f:24: a0:6f:4a:3f:b6:07:a5:28:fb:66:0b:ae:a3:e1:fc: c5:34:e8:b0:08:0c:bd:22:09:29:4e:58:37:fc:70: fe:f1:21:d9:74:d4:32:2b:c6:0d:62:66:72:20:3a: 10:1c:1f:ae:ab:48:f4:8d:b0:90:79:89:a0:bd:07: 2f:46:cd:a9:a2:80:e8:53:64:62:1d:1e:7d:02:8b: d1:1d:ec:16:79:31:0c:b0:e8:62:f7:bf:e5:e4:74: 54:7b:e7:44:9d:c1:7f:2d:0f:0e:f9:fd:e3:92:b1: e3:d5:6d:ed:43:9c:68:5b:84:4b:0b:01:42:fb:bb: 4c:e2:bf:90:68:cd:f0:7d:5c:ac:60:23:26:ae:01: 67:dc:a4:f9:e4:8b:93:a5:8c:24:7c:b1:95:c2:fb: 45:52:f2:db:2c:00:ac:0f:e8:bc:9c:fe:91:fe:37: c4:84:b6:d6:a1:1b:68:4e:29:38:5d:91:6b:5f:ed: b5:6e:4a:de:ef:2e:4f:5f:1e:1a:c7:22:1f:b8:ac: 9f:ab:35:4d:0e:9d:1e:b5:82:e3:dc:3b:c9:4e:26: 3c:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:88:A1:49:40:3F:AE:DB:86:8C:BC:41:60:BA:AA:C7:6F:DC:EE:CB X509v3 Authority Key Identifier: keyid:4F:5A:F5:65:D3:0D:D5:4F:24:14:7E:F5:E1:78:AA:0B:AA:33:FC:29 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BB883/E982BA3610E711EA9D21C26FC4F9AE02/T1r1ZdMN1U8kFH714XiqC6oz_Ck.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T1r1ZdMN1U8kFH714XiqC6oz_Ck.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BB883/E982BA3610E711EA9D21C26FC4F9AE02/T1r1ZdMN1U8kFH714XiqC6oz_Ck.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 97:4c:5d:c2:07:dc:62:7e:0f:f6:7e:48:27:f3:2c:d8:03:47: 43:e4:62:91:68:93:ce:1e:c6:e7:a7:f7:88:12:fa:fd:3e:39: 59:42:23:64:75:a4:43:bc:cc:af:a5:99:fc:11:d3:4f:01:e0: a6:44:eb:89:41:20:af:ac:ed:14:50:ef:15:b0:25:d1:f4:1d: b0:90:4e:a6:3d:07:03:2f:1b:5f:cc:0b:2d:64:8d:50:20:61: 09:81:d7:62:31:4a:b8:07:d6:7b:eb:92:5b:53:45:f2:3f:a0: c6:dc:64:0d:18:99:d5:79:1f:2b:e6:cd:4b:b2:cb:19:ed:f1: 8b:54:15:ac:af:51:61:87:af:dc:7c:66:46:99:9d:f6:14:ff: 20:da:c6:fb:6c:9a:20:36:6f:82:6f:ab:54:59:09:8a:7d:8e: df:48:5e:41:df:b5:79:73:c2:92:11:c9:99:fd:ad:cc:09:18: 31:f9:e7:de:b3:24:35:31:f2:7d:59:8e:d2:f5:f7:7b:53:93: 5d:cd:d3:2c:e2:33:4f:c5:13:d9:73:89:7f:83:0c:2d:b4:1c: d0:2f:f1:ec:23:a7:94:e1:79:0d:08:50:fa:91:77:9d:fc:14: 33:55:cd:c8:31:92:34:34:49:6e:38:34:ca:c0:90:4b:2d:20: 9b:35:d9:f7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDDwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkI4ODMxMTAvBgNVBAUTKDRGNUFGNTY1RDMwREQ1NEYyNDE0N0VGNUUxNzhBQTBC QUEzM0ZDMjkwHhcNMjUwODI0MTgzNjUyWhcNMjUwODMxMTgzNjUyWjAYMRYwFAYD VQQDEw02OGFiNWJjNS1mNTYwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA17fxYp3ulPQBGX3/HDW2+oPCbVc3S69LqD4uwCeMnkqlZZp6JfmZ6ZpXHySg b0o/tgelKPtmC66j4fzFNOiwCAy9IgkpTlg3/HD+8SHZdNQyK8YNYmZyIDoQHB+u q0j0jbCQeYmgvQcvRs2pooDoU2RiHR59AovRHewWeTEMsOhi97/l5HRUe+dEncF/ LQ8O+f3jkrHj1W3tQ5xoW4RLCwFC+7tM4r+QaM3wfVysYCMmrgFn3KT55IuTpYwk fLGVwvtFUvLbLACsD+i8nP6R/jfEhLbWoRtoTik4XZFrX+21bkre7y5PXx4axyIf uKyfqzVNDp0etYLj3DvJTiY8ZwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAKIoUlA P67bhoy8QWC6qsdv3O7LMB8GA1UdIwQYMBaAFE9a9WXTDdVPJBR+9eF4qguqM/wp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQjg4My9FOTgyQkEzNjEw RTcxMUVBOUQyMUMyNkZDNEY5QUUwMi9UMXIxWmRNTjFVOGtGSDcxNFhpcUM2b3pf Q2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1QxcjFaZE1OMVU4a0ZINzE0WGlxQzZvel9Day5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC Qjg4My9FOTgyQkEzNjEwRTcxMUVBOUQyMUMyNkZDNEY5QUUwMi9UMXIxWmRNTjFV OGtGSDcxNFhpcUM2b3pfQ2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCXTF3CB9xifg/2fkgn8yzYA0dD5GKRaJPOHsbnp/eIEvr9PjlZQiNk daRDvMyvpZn8EdNPAeCmROuJQSCvrO0UUO8VsCXR9B2wkE6mPQcDLxtfzAstZI1Q IGEJgddiMUq4B9Z765JbU0XyP6DG3GQNGJnVeR8r5s1LsssZ7fGLVBWsr1Fhh6/c fGZGmZ32FP8g2sb7bJogNm+Cb6tUWQmKfY7fSF5B37V5c8KSEcmZ/a3MCRgx+efe syQ1MfJ9WY7S9fd7U5NdzdMs4jNPxRPZc4l/gwwttBzQL/HsI6eU4XkNCFD6kXed /BQzVc3IMZI0NEluODTKwJBLLSCbNdn3 -----END CERTIFICATE-----Generated at Sun Aug 24 22:16:10 2025 by rpki-client