$ rpki-client -vvf rpki.apnic.net/member_repository/A91FDEFE/194B7920A51611EF890ECD3EC4F9AE02/T-GzX5rYKBtm9HAx9Qfg7n1UIRo.mft File: T-GzX5rYKBtm9HAx9Qfg7n1UIRo.mft (raw, json) Hash identifier: LguAoDSYew+LMMIuoV3rhgZKF8Rg2CTWlIgb2YjGCOc= Subject key identifier: A7:88:A4:FB:C0:A1:D1:E6:72:EB:82:0C:08:70:0F:35:3D:0E:20:B4 Authority key identifier: 4F:E1:B3:5F:9A:D8:28:1B:66:F4:70:31:F5:07:E0:EE:7D:54:21:1A Certificate issuer: /CN=A91FDEFE/serialNumber=4FE1B35F9AD8281B66F47031F507E0EE7D54211A Certificate serial: 9E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T-GzX5rYKBtm9HAx9Qfg7n1UIRo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FDEFE/194B7920A51611EF890ECD3EC4F9AE02/T-GzX5rYKBtm9HAx9Qfg7n1UIRo.mft Manifest number: 9D Signing time: Wed 17 Sep 2025 07:01:46 +0000 Manifest this update: Wed 17 Sep 2025 07:01:45 +0000 Manifest next update: Wed 24 Sep 2025 07:01:45 +0000 Files and hashes: 1: T-GzX5rYKBtm9HAx9Qfg7n1UIRo.crl (hash: E/CFLLIvTJzZJ3Q9xsadOn1WOHJTQy3zIPLG9mJDqIU=) 2: 669FD05EA53911EFBE261371C4F9AE02.roa (hash: C8BMzBjnObRwd1PN8+bj1Lr3uDFXe55TuSG2M+7J66A=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FDEFE/194B7920A51611EF890ECD3EC4F9AE02/T-GzX5rYKBtm9HAx9Qfg7n1UIRo.crl rsync://rpki.apnic.net/member_repository/A91FDEFE/194B7920A51611EF890ECD3EC4F9AE02/T-GzX5rYKBtm9HAx9Qfg7n1UIRo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T-GzX5rYKBtm9HAx9Qfg7n1UIRo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 24 Sep 2025 07:01:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 158 (0x9e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FDEFE, serialNumber=4FE1B35F9AD8281B66F47031F507E0EE7D54211A Validity Not Before: Sep 17 07:01:45 2025 GMT Not After : Sep 24 07:01:45 2025 GMT Subject: CN=68ca5cd9-1769 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:cd:82:fa:6d:0c:d8:49:22:28:41:3d:6c:f1: c5:ee:65:3e:8d:ec:2e:0c:63:4d:95:6e:6c:c2:b3: 37:da:bc:ce:f1:9d:40:b1:18:12:2e:32:57:2e:8a: 6b:b2:d6:98:c9:43:f6:70:19:18:c8:54:86:66:6d: 17:06:f2:c0:a9:97:1c:c2:1a:34:cf:0a:c4:83:47: 9a:9d:ba:64:2f:bb:da:11:0f:36:fa:34:42:70:f8: 86:73:50:90:d5:d7:4c:bc:65:4a:6d:9d:de:0b:f4: c6:3a:4c:1c:65:ae:ef:d2:e3:b6:6b:5b:ef:c1:e6: 22:15:7e:c5:a5:0e:ec:1b:1f:31:10:e0:85:c1:38: 1f:ee:ca:f8:c5:8f:9c:6b:99:dd:cb:dc:28:16:4d: c2:11:bc:8f:6b:55:da:c3:2f:c4:75:fb:99:11:09: d4:b4:a8:a6:1c:e1:2b:a3:11:5c:44:fe:8a:f3:42: 57:48:f7:7a:a7:3d:19:f5:e8:b3:29:52:9f:fd:26: ef:86:25:ec:b6:b4:d0:6a:43:93:5c:b6:d0:c4:c1: 4a:43:be:bb:4b:16:36:c9:44:32:ec:41:7a:7c:b5: be:12:fd:92:cb:8a:93:ca:6f:5c:17:ab:95:3d:a4: ab:d7:3b:79:63:d9:0d:7f:f2:ce:3e:99:cf:26:61: 6a:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:88:A4:FB:C0:A1:D1:E6:72:EB:82:0C:08:70:0F:35:3D:0E:20:B4 X509v3 Authority Key Identifier: keyid:4F:E1:B3:5F:9A:D8:28:1B:66:F4:70:31:F5:07:E0:EE:7D:54:21:1A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FDEFE/194B7920A51611EF890ECD3EC4F9AE02/T-GzX5rYKBtm9HAx9Qfg7n1UIRo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T-GzX5rYKBtm9HAx9Qfg7n1UIRo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FDEFE/194B7920A51611EF890ECD3EC4F9AE02/T-GzX5rYKBtm9HAx9Qfg7n1UIRo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3a:cf:d0:66:17:c7:fc:63:64:33:31:eb:d9:f0:b1:02:29:fa: 9c:b8:0d:cc:89:e6:49:89:b2:44:22:f6:55:89:89:78:82:c7: 61:b7:c7:6b:2a:2f:82:27:10:3a:1d:ea:75:f5:6e:f7:9b:41: 1a:63:79:96:f9:d1:68:ef:f6:39:a6:90:c5:d2:ee:a1:f3:e2: da:b5:67:a8:56:38:06:58:01:9b:7c:13:ef:da:b8:84:d1:88: 68:8e:82:d0:92:9d:41:2a:41:af:40:ee:c2:7e:50:66:38:1c: fb:b8:c1:e4:bb:05:3d:61:84:d1:c5:b3:bf:d9:6a:92:d3:da: 8c:60:67:e4:23:2f:81:54:f7:7b:3f:04:ea:1d:6d:19:44:04: 46:d6:ef:ae:13:2e:77:75:c6:f0:b7:70:af:45:d0:d9:58:48: 9e:f5:87:65:c5:f0:1d:45:d8:66:df:c3:d8:ac:76:f9:b1:4b: ee:3e:51:35:46:9a:69:da:2c:c6:09:81:ac:54:26:3c:ad:fb: 70:25:26:66:ac:cd:0f:63:4e:3d:74:ca:96:5c:47:b8:05:6c: 2b:58:dd:07:9a:b8:de:be:9d:9a:f3:07:d9:fd:6c:8f:d9:a5: e1:cc:ca:5e:c9:09:6a:91:f8:3a:6d:63:e4:b9:7e:04:af:e7: 1f:34:d5:41 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAJ4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkRFRkUxMTAvBgNVBAUTKDRGRTFCMzVGOUFEODI4MUI2NkY0NzAzMUY1MDdFMEVF N0Q1NDIxMUEwHhcNMjUwOTE3MDcwMTQ1WhcNMjUwOTI0MDcwMTQ1WjAYMRYwFAYD VQQDEw02OGNhNWNkOS0xNzY5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzs2C+m0M2EkiKEE9bPHF7mU+jewuDGNNlW5swrM32rzO8Z1AsRgSLjJXLopr staYyUP2cBkYyFSGZm0XBvLAqZccwho0zwrEg0eanbpkL7vaEQ82+jRCcPiGc1CQ 1ddMvGVKbZ3eC/TGOkwcZa7v0uO2a1vvweYiFX7FpQ7sGx8xEOCFwTgf7sr4xY+c a5ndy9woFk3CEbyPa1Xawy/EdfuZEQnUtKimHOEroxFcRP6K80JXSPd6pz0Z9eiz KVKf/SbvhiXstrTQakOTXLbQxMFKQ767SxY2yUQy7EF6fLW+Ev2Sy4qTym9cF6uV PaSr1zt5Y9kNf/LOPpnPJmFqQwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKeIpPvA odHmcuuCDAhwDzU9DiC0MB8GA1UdIwQYMBaAFE/hs1+a2CgbZvRwMfUH4O59VCEa MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGREVGRS8xOTRCNzkyMEE1 MTYxMUVGODkwRUNEM0VDNEY5QUUwMi9ULUd6WDVyWUtCdG05SEF4OVFmZzduMVVJ Um8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1QtR3pYNXJZS0J0bTlIQXg5UWZnN24xVUlSby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG REVGRS8xOTRCNzkyMEE1MTYxMUVGODkwRUNEM0VDNEY5QUUwMi9ULUd6WDVyWUtC dG05SEF4OVFmZzduMVVJUm8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA6z9BmF8f8Y2QzMevZ8LECKfqcuA3MieZJibJEIvZViYl4gsdht8dr Ki+CJxA6Hep19W73m0EaY3mW+dFo7/Y5ppDF0u6h8+LatWeoVjgGWAGbfBPv2riE 0YhojoLQkp1BKkGvQO7CflBmOBz7uMHkuwU9YYTRxbO/2WqS09qMYGfkIy+BVPd7 PwTqHW0ZRARG1u+uEy53dcbwt3CvRdDZWEie9YdlxfAdRdhm38PYrHb5sUvuPlE1 Rppp2izGCYGsVCY8rftwJSZmrM0PY049dMqWXEe4BWwrWN0Hmrjevp2a8wfZ/WyP 2aXhzMpeyQlqkfg6bWPkuX4Er+cfNNVB -----END CERTIFICATE-----Generated at Fri Sep 19 06:50:42 2025 by rpki-client