$ rpki-client -vvf rpki.apnic.net/member_repository/A91BF4A1/0F587A88B1CC11ED85F25A3DC4F9AE02/T-5HlDq-E-OFVqc8KBuQ41SSN9w.mft File: T-5HlDq-E-OFVqc8KBuQ41SSN9w.mft (raw, json) Hash identifier: UDJFFXilXtjxadfUXhWBYuQFXJW0EflSHhTePh89Pqs= Subject key identifier: 50:24:AD:94:68:2C:E5:AD:51:6E:E5:E4:F5:D9:AC:A0:DD:6B:C9:E4 Authority key identifier: 4F:EE:47:94:3A:BE:13:E3:85:56:A7:3C:28:1B:90:E3:54:92:37:DC Certificate issuer: /CN=A91BF4A1/serialNumber=4FEE47943ABE13E38556A73C281B90E3549237DC Certificate serial: 01B5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T-5HlDq-E-OFVqc8KBuQ41SSN9w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BF4A1/0F587A88B1CC11ED85F25A3DC4F9AE02/T-5HlDq-E-OFVqc8KBuQ41SSN9w.mft Manifest number: 01AE Signing time: Sat 31 May 2025 02:55:49 +0000 Manifest this update: Sat 31 May 2025 02:55:49 +0000 Manifest next update: Sat 07 Jun 2025 02:55:49 +0000 Files and hashes: 1: T-5HlDq-E-OFVqc8KBuQ41SSN9w.crl (hash: pzKjmah0uqFCk/nWvFPJ6Hv/GyrOjz23/JXbw70BuFs=) 2: 4405F70C03AE11F08ECE4754C4F9AE02.roa (hash: KSItAPOjkLG7UWPYALBIyJeHmExySZ4KDwSB7GWXFrI=) 3: 9AB64290908211EF9877C022C4F9AE02.roa (hash: 53832RqqEhC0WAnEbw/uqzZOjibGBYS5qoQ5I8q+Q+o=) 4: B780E2A097F711EF89B09770C4F9AE02.roa (hash: DB23UT2fsXrp5BzUdZvw+7TC7FTSDlXyxizqnQeaxYs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BF4A1/0F587A88B1CC11ED85F25A3DC4F9AE02/T-5HlDq-E-OFVqc8KBuQ41SSN9w.crl rsync://rpki.apnic.net/member_repository/A91BF4A1/0F587A88B1CC11ED85F25A3DC4F9AE02/T-5HlDq-E-OFVqc8KBuQ41SSN9w.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T-5HlDq-E-OFVqc8KBuQ41SSN9w.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 02:55:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 437 (0x1b5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BF4A1, serialNumber=4FEE47943ABE13E38556A73C281B90E3549237DC Validity Not Before: May 31 02:55:49 2025 GMT Not After : Jun 7 02:55:49 2025 GMT Subject: CN=683a6fb5-984f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:5d:aa:9a:bc:16:e5:9f:ec:1b:0b:10:96:74: c8:7a:d6:27:9c:06:86:b0:03:b0:f0:e6:19:e3:39: 54:e7:89:f3:2f:a1:61:e6:7f:b8:b2:cb:66:c9:b1: 72:16:81:2b:b0:bc:11:dc:9d:47:1d:b6:d1:a0:b8: f9:84:a5:18:7c:53:40:d1:c8:11:7a:63:84:2d:9d: 64:de:91:b6:99:50:c6:00:69:d5:e3:17:e1:6d:e7: 23:4d:c7:fb:10:c7:13:8e:f7:d4:c1:6a:f8:62:be: 83:80:17:15:90:8f:82:0c:9e:ee:b6:84:b6:e9:c8: 05:5c:b6:8a:98:b2:50:6b:b2:c7:51:68:77:40:ff: a9:38:10:1a:e2:bd:74:e5:a3:ed:ef:63:62:ad:a4: 48:fd:bc:bb:4f:b2:7d:49:9f:cb:02:2c:2c:dc:ce: 08:51:76:ad:94:a2:72:77:b7:23:c2:9c:60:16:79: c5:86:e7:d4:9b:e0:83:eb:79:ac:d9:ab:52:5d:1d: 1d:48:f8:77:ac:99:9d:ba:2c:04:c0:6c:11:5f:0f: 2c:44:97:48:93:69:6f:18:c1:72:41:1e:52:c8:f2: db:10:c0:ce:e2:5e:f1:f3:0d:87:30:d3:09:98:03: bb:29:00:96:00:5d:5a:d8:f9:a0:2b:c0:a0:35:40: cf:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:24:AD:94:68:2C:E5:AD:51:6E:E5:E4:F5:D9:AC:A0:DD:6B:C9:E4 X509v3 Authority Key Identifier: keyid:4F:EE:47:94:3A:BE:13:E3:85:56:A7:3C:28:1B:90:E3:54:92:37:DC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BF4A1/0F587A88B1CC11ED85F25A3DC4F9AE02/T-5HlDq-E-OFVqc8KBuQ41SSN9w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T-5HlDq-E-OFVqc8KBuQ41SSN9w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BF4A1/0F587A88B1CC11ED85F25A3DC4F9AE02/T-5HlDq-E-OFVqc8KBuQ41SSN9w.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 65:be:20:28:55:5e:df:69:86:6f:79:6e:d2:36:df:82:da:42: df:0f:ac:96:63:66:07:22:e7:15:cb:2f:e3:b4:6b:01:f1:e8: ed:f8:bf:67:87:63:2f:d9:3b:0b:e3:f7:4d:68:2f:0f:a1:79: 61:8c:ca:c6:a2:0d:9c:af:e6:71:40:40:e8:b5:ae:c7:72:b1: 37:3b:d2:9c:2c:ff:82:d0:25:33:44:73:23:6b:14:ad:26:df: a4:83:c9:81:d3:d6:a4:14:b7:9f:7e:c5:f0:78:ca:1d:56:df: 2b:e8:67:0c:70:f8:5f:0f:e2:99:c3:39:21:4d:9b:d1:25:6f: 2d:0d:5f:a4:d7:db:b3:5f:f6:71:fc:41:eb:fd:6e:e6:e0:45: 1f:92:d3:cd:4f:ec:86:1d:bd:68:d2:1e:a7:27:9a:6b:95:11: 2f:6c:56:f5:93:7f:51:16:ab:73:50:83:f8:87:f2:bf:52:9e: 32:e2:59:ae:a5:05:d7:89:6e:36:3a:65:e3:19:21:67:e2:61: f2:e9:e9:43:45:d3:f3:fb:3a:d7:7d:8b:8b:3d:fe:c0:2a:6f: 86:ff:f4:95:b6:2d:84:0b:97:cd:bb:05:d6:d0:0c:c2:a5:f0: 6a:58:35:ee:80:5e:03:d9:25:88:b6:44:cd:fe:2e:e3:22:7f: df:9a:b2:57 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAbUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkY0QTExMTAvBgNVBAUTKDRGRUU0Nzk0M0FCRTEzRTM4NTU2QTczQzI4MUI5MEUz NTQ5MjM3REMwHhcNMjUwNTMxMDI1NTQ5WhcNMjUwNjA3MDI1NTQ5WjAYMRYwFAYD VQQDEw02ODNhNmZiNS05ODRmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmF2qmrwW5Z/sGwsQlnTIetYnnAaGsAOw8OYZ4zlU54nzL6Fh5n+4sstmybFy FoErsLwR3J1HHbbRoLj5hKUYfFNA0cgRemOELZ1k3pG2mVDGAGnV4xfhbecjTcf7 EMcTjvfUwWr4Yr6DgBcVkI+CDJ7utoS26cgFXLaKmLJQa7LHUWh3QP+pOBAa4r10 5aPt72NiraRI/by7T7J9SZ/LAiws3M4IUXatlKJyd7cjwpxgFnnFhufUm+CD63ms 2atSXR0dSPh3rJmduiwEwGwRXw8sRJdIk2lvGMFyQR5SyPLbEMDO4l7x8w2HMNMJ mAO7KQCWAF1a2PmgK8CgNUDP0wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFAkrZRo LOWtUW7l5PXZrKDda8nkMB8GA1UdIwQYMBaAFE/uR5Q6vhPjhVanPCgbkONUkjfc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCRjRBMS8wRjU4N0E4OEIx Q0MxMUVEODVGMjVBM0RDNEY5QUUwMi9ULTVIbERxLUUtT0ZWcWM4S0J1UTQxU1NO OXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1QtNUhsRHEtRS1PRlZxYzhLQnVRNDFTU045dy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC RjRBMS8wRjU4N0E4OEIxQ0MxMUVEODVGMjVBM0RDNEY5QUUwMi9ULTVIbERxLUUt T0ZWcWM4S0J1UTQxU1NOOXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBlviAoVV7faYZveW7SNt+C2kLfD6yWY2YHIucVyy/jtGsB8ejt+L9n h2Mv2TsL4/dNaC8PoXlhjMrGog2cr+ZxQEDota7HcrE3O9KcLP+C0CUzRHMjaxSt Jt+kg8mB09akFLeffsXweModVt8r6GcMcPhfD+KZwzkhTZvRJW8tDV+k19uzX/Zx /EHr/W7m4EUfktPNT+yGHb1o0h6nJ5prlREvbFb1k39RFqtzUIP4h/K/Up4y4lmu pQXXiW42OmXjGSFn4mHy6elDRdPz+zrXfYuLPf7AKm+G//SVti2EC5fNuwXW0AzC pfBqWDXugF4D2SWItkTN/i7jIn/fmrJX -----END CERTIFICATE-----Generated at Sat May 31 17:11:26 2025 by rpki-client