$ rpki-client -vvf rpki.apnic.net/member_repository/A91BF4A1/0F587A88B1CC11ED85F25A3DC4F9AE02/T-5HlDq-E-OFVqc8KBuQ41SSN9w.mft File: T-5HlDq-E-OFVqc8KBuQ41SSN9w.mft (raw, json) Hash identifier: YhFlnL97bi/+HR68jKXtlhu2o9EiOpdyaC5ymBOEc1g= Subject key identifier: 29:FB:50:9A:65:6D:4D:20:37:A1:72:00:E4:14:A5:C0:0D:13:E8:FD Authority key identifier: 4F:EE:47:94:3A:BE:13:E3:85:56:A7:3C:28:1B:90:E3:54:92:37:DC Certificate issuer: /CN=A91BF4A1/serialNumber=4FEE47943ABE13E38556A73C281B90E3549237DC Certificate serial: 01E8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T-5HlDq-E-OFVqc8KBuQ41SSN9w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BF4A1/0F587A88B1CC11ED85F25A3DC4F9AE02/T-5HlDq-E-OFVqc8KBuQ41SSN9w.mft Manifest number: 01E1 Signing time: Sun 07 Sep 2025 03:02:46 +0000 Manifest this update: Sun 07 Sep 2025 03:02:45 +0000 Manifest next update: Sun 14 Sep 2025 03:02:45 +0000 Files and hashes: 1: T-5HlDq-E-OFVqc8KBuQ41SSN9w.crl (hash: yOgAuqV5xsS4nnWCWPd9TdaEF0FhXEU6AAO5MgCFBKo=) 2: 4405F70C03AE11F08ECE4754C4F9AE02.roa (hash: KSItAPOjkLG7UWPYALBIyJeHmExySZ4KDwSB7GWXFrI=) 3: 9AB64290908211EF9877C022C4F9AE02.roa (hash: 53832RqqEhC0WAnEbw/uqzZOjibGBYS5qoQ5I8q+Q+o=) 4: B780E2A097F711EF89B09770C4F9AE02.roa (hash: DB23UT2fsXrp5BzUdZvw+7TC7FTSDlXyxizqnQeaxYs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BF4A1/0F587A88B1CC11ED85F25A3DC4F9AE02/T-5HlDq-E-OFVqc8KBuQ41SSN9w.crl rsync://rpki.apnic.net/member_repository/A91BF4A1/0F587A88B1CC11ED85F25A3DC4F9AE02/T-5HlDq-E-OFVqc8KBuQ41SSN9w.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T-5HlDq-E-OFVqc8KBuQ41SSN9w.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Sep 2025 03:02:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 488 (0x1e8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BF4A1, serialNumber=4FEE47943ABE13E38556A73C281B90E3549237DC Validity Not Before: Sep 7 03:02:45 2025 GMT Not After : Sep 14 03:02:45 2025 GMT Subject: CN=68bcf5d6-4cab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:ed:f6:11:49:1f:b4:5c:83:89:ee:75:4f:ad: 84:16:06:d4:7a:b3:b9:a0:a8:19:80:00:ca:72:06: 38:79:55:60:9b:5e:d0:e9:10:20:b4:d8:9b:b3:ea: b5:12:73:28:85:e9:69:a1:ab:a6:dd:82:93:28:1f: 76:b3:89:9b:ba:a6:ed:2f:eb:51:26:2e:ff:24:7f: 7e:58:02:0c:9a:7c:df:6a:56:4e:9f:fa:56:8f:49: 54:20:61:2c:3b:de:bc:30:4a:8f:b5:99:80:92:6d: 91:86:0c:12:19:d9:2d:d7:78:e9:94:d9:af:23:94: b4:3e:6f:ad:f0:c7:c2:a2:39:b9:1e:4c:ab:ca:48: a6:c7:cc:91:7f:4d:a7:6d:f5:83:2e:6f:29:dc:1d: 7b:7e:11:95:cb:8d:a3:06:d1:e2:da:eb:5f:31:57: 18:05:6d:50:bf:b9:01:d7:e8:00:bf:7a:a5:c0:71: eb:8b:04:1d:d1:a6:3a:38:c2:5f:aa:78:1f:c0:c6: 42:f2:8c:52:8d:07:a5:e9:2c:ba:4f:26:25:bf:f0: f2:1a:9c:68:98:fe:37:1f:dc:b5:ae:ca:b8:32:e5: 92:80:b6:17:4f:a3:a2:91:73:5b:32:77:6a:36:bc: 8c:23:49:dd:1a:c1:09:81:3a:36:a6:de:1b:bb:ba: b5:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:FB:50:9A:65:6D:4D:20:37:A1:72:00:E4:14:A5:C0:0D:13:E8:FD X509v3 Authority Key Identifier: keyid:4F:EE:47:94:3A:BE:13:E3:85:56:A7:3C:28:1B:90:E3:54:92:37:DC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BF4A1/0F587A88B1CC11ED85F25A3DC4F9AE02/T-5HlDq-E-OFVqc8KBuQ41SSN9w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T-5HlDq-E-OFVqc8KBuQ41SSN9w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BF4A1/0F587A88B1CC11ED85F25A3DC4F9AE02/T-5HlDq-E-OFVqc8KBuQ41SSN9w.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 86:4a:c4:f7:e6:a3:3e:f9:ef:c2:c7:3b:00:57:21:90:49:59: 83:f6:2b:91:7d:73:0d:dc:28:f5:30:4c:3f:0d:3f:f3:a6:e8: b3:aa:cb:84:2b:a3:60:6d:10:8c:8a:d5:8b:99:f7:2d:53:8f: 3c:5b:15:1c:57:2d:3d:2f:4a:f8:14:fa:ee:f7:7f:11:94:54: f2:d7:99:aa:44:d6:26:3d:d8:a8:ef:30:2c:4c:e2:11:05:51: f2:b1:c3:be:57:41:3f:33:ef:7f:f1:7e:51:4a:e4:0a:e9:95: 37:cf:da:e1:a1:32:3a:c0:74:22:9d:73:4d:f1:c9:3e:5d:4c: 9f:2e:3c:19:eb:5a:62:37:ce:ed:3d:d2:67:28:b4:4c:3d:37: 2c:86:0f:39:e2:c1:32:6b:50:88:be:c5:20:1a:29:0b:20:7c: 21:66:60:f3:56:bb:cb:c5:df:e1:00:d0:bb:2e:9f:b0:9e:ce: d8:cf:45:dc:73:5f:c3:f2:d4:f9:7e:47:a4:af:c9:a3:7f:5e: 44:16:e0:5b:d4:bf:36:a5:d1:43:49:b1:e6:bb:e8:dc:fa:76: 74:35:54:bd:82:13:9f:b7:96:03:2b:8b:4d:ec:5f:ea:77:04: 00:df:b2:c3:65:32:90:3d:66:a5:85:56:cc:e9:bf:9e:f9:5c: a9:e4:95:67 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAegwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkY0QTExMTAvBgNVBAUTKDRGRUU0Nzk0M0FCRTEzRTM4NTU2QTczQzI4MUI5MEUz NTQ5MjM3REMwHhcNMjUwOTA3MDMwMjQ1WhcNMjUwOTE0MDMwMjQ1WjAYMRYwFAYD VQQDEw02OGJjZjVkNi00Y2FiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4O32EUkftFyDie51T62EFgbUerO5oKgZgADKcgY4eVVgm17Q6RAgtNibs+q1 EnMohelpoaum3YKTKB92s4mbuqbtL+tRJi7/JH9+WAIMmnzfalZOn/pWj0lUIGEs O968MEqPtZmAkm2RhgwSGdkt13jplNmvI5S0Pm+t8MfCojm5Hkyrykimx8yRf02n bfWDLm8p3B17fhGVy42jBtHi2utfMVcYBW1Qv7kB1+gAv3qlwHHriwQd0aY6OMJf qngfwMZC8oxSjQel6Sy6TyYlv/DyGpxomP43H9y1rsq4MuWSgLYXT6OikXNbMndq NryMI0ndGsEJgTo2pt4bu7q1DwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCn7UJpl bU0gN6FyAOQUpcANE+j9MB8GA1UdIwQYMBaAFE/uR5Q6vhPjhVanPCgbkONUkjfc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCRjRBMS8wRjU4N0E4OEIx Q0MxMUVEODVGMjVBM0RDNEY5QUUwMi9ULTVIbERxLUUtT0ZWcWM4S0J1UTQxU1NO OXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1QtNUhsRHEtRS1PRlZxYzhLQnVRNDFTU045dy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC RjRBMS8wRjU4N0E4OEIxQ0MxMUVEODVGMjVBM0RDNEY5QUUwMi9ULTVIbERxLUUt T0ZWcWM4S0J1UTQxU1NOOXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCGSsT35qM++e/CxzsAVyGQSVmD9iuRfXMN3Cj1MEw/DT/zpuizqsuE K6NgbRCMitWLmfctU488WxUcVy09L0r4FPru938RlFTy15mqRNYmPdio7zAsTOIR BVHyscO+V0E/M+9/8X5RSuQK6ZU3z9rhoTI6wHQinXNN8ck+XUyfLjwZ61piN87t PdJnKLRMPTcshg854sEya1CIvsUgGikLIHwhZmDzVrvLxd/hANC7Lp+wns7Yz0Xc c1/D8tT5fkekr8mjf15EFuBb1L82pdFDSbHmu+jc+nZ0NVS9ghOft5YDK4tN7F/q dwQA37LDZTKQPWalhVbM6b+e+Vyp5JVn -----END CERTIFICATE-----Generated at Mon Sep 8 08:38:58 2025 by rpki-client