$ rpki-client -vvf rpki.apnic.net/member_repository/A91BB883/E982BA3610E711EA9D21C26FC4F9AE02/T1r1ZdMN1U8kFH714XiqC6oz_Ck.mft File: T1r1ZdMN1U8kFH714XiqC6oz_Ck.mft (raw, json) Hash identifier: GWlNE7noX0Q87JmonV8o3UWVruk/NlOe9XCgPsX44B0= Subject key identifier: F1:3F:D1:6D:CF:CC:2B:E0:68:5A:FD:F0:8F:4D:EC:87:08:0C:02:40 Authority key identifier: 4F:5A:F5:65:D3:0D:D5:4F:24:14:7E:F5:E1:78:AA:0B:AA:33:FC:29 Certificate issuer: /CN=A91BB883/serialNumber=4F5AF565D30DD54F24147EF5E178AA0BAA33FC29 Certificate serial: 0C35 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T1r1ZdMN1U8kFH714XiqC6oz_Ck.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BB883/E982BA3610E711EA9D21C26FC4F9AE02/T1r1ZdMN1U8kFH714XiqC6oz_Ck.mft Manifest number: 0C2D Signing time: Sun 10 Aug 2025 18:39:08 +0000 Manifest this update: Sun 10 Aug 2025 18:39:07 +0000 Manifest next update: Sun 17 Aug 2025 18:39:07 +0000 Files and hashes: 1: T1r1ZdMN1U8kFH714XiqC6oz_Ck.crl (hash: pvwdOX1YJ0weXuM44v49nlpQ/LvgYLKw+vQdDsu8EpU=) 2: 8160C03610E911EA86FA6774C4F9AE02.roa (hash: 8XfCRrs6KyewkevpBqIWOSXTDqr80tEQ4o/AVxw5pnc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BB883/E982BA3610E711EA9D21C26FC4F9AE02/T1r1ZdMN1U8kFH714XiqC6oz_Ck.crl rsync://rpki.apnic.net/member_repository/A91BB883/E982BA3610E711EA9D21C26FC4F9AE02/T1r1ZdMN1U8kFH714XiqC6oz_Ck.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T1r1ZdMN1U8kFH714XiqC6oz_Ck.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3125 (0xc35) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BB883, serialNumber=4F5AF565D30DD54F24147EF5E178AA0BAA33FC29 Validity Not Before: Aug 10 18:39:07 2025 GMT Not After : Aug 17 18:39:07 2025 GMT Subject: CN=6898e74c-379b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:5e:9d:62:5e:b9:ec:27:01:54:b9:a1:5b:8f: ed:05:0f:e6:32:44:f8:22:be:c3:13:c7:3d:aa:bf: 58:19:87:9d:f8:58:35:4a:6d:da:fe:30:c2:4f:a2: d9:df:7c:c4:9d:2a:30:b8:85:02:e5:df:ab:36:e1: 86:13:e4:2e:ff:81:62:05:97:eb:e6:3c:54:47:2a: e0:0d:f5:95:66:3d:64:f5:ac:ef:10:43:f6:bf:bd: d4:3f:d7:07:94:5c:cd:4b:2b:d6:28:e1:a0:55:dd: 45:83:d1:d9:5d:35:5f:74:14:a5:84:1d:1b:db:b2: e3:69:82:bf:73:59:41:40:52:b4:7c:e3:83:da:73: 29:42:73:79:c0:4b:ac:0f:05:ea:d8:23:6a:d8:7c: 4e:da:dc:de:f3:b2:89:81:84:78:a7:68:55:32:ae: 8c:d7:5f:6f:23:ff:49:dc:7a:9e:36:74:30:2f:5f: ea:3e:bb:29:59:a1:8a:69:65:49:9e:19:02:15:7b: 34:2f:b3:b0:f2:34:ec:46:5d:45:74:cf:8f:28:2b: de:7e:65:5d:c2:c3:92:df:06:77:a7:e7:1c:b4:b7: 6d:f6:22:84:c7:74:c2:37:73:9e:bb:8a:3d:dd:4d: 05:c8:33:d6:39:95:b8:1c:78:55:1f:a2:92:86:e1: 3c:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:3F:D1:6D:CF:CC:2B:E0:68:5A:FD:F0:8F:4D:EC:87:08:0C:02:40 X509v3 Authority Key Identifier: keyid:4F:5A:F5:65:D3:0D:D5:4F:24:14:7E:F5:E1:78:AA:0B:AA:33:FC:29 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BB883/E982BA3610E711EA9D21C26FC4F9AE02/T1r1ZdMN1U8kFH714XiqC6oz_Ck.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T1r1ZdMN1U8kFH714XiqC6oz_Ck.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BB883/E982BA3610E711EA9D21C26FC4F9AE02/T1r1ZdMN1U8kFH714XiqC6oz_Ck.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 38:5d:51:81:88:db:78:44:e0:1b:74:e3:88:67:f1:7c:35:84: fa:78:03:de:df:49:66:bb:c1:8a:bf:06:37:36:ea:aa:5f:4c: b3:9e:a3:bc:be:f4:e8:d3:10:a7:46:11:ec:29:ce:43:29:1f: a5:ff:23:d9:ae:0e:4d:0e:00:e7:22:d2:27:f3:5f:d9:71:1b: 13:b3:22:8f:ac:e5:9e:0f:d5:79:79:85:89:bb:3b:c6:2f:0c: fd:35:b9:e4:cf:1e:65:4a:d0:d4:d0:ca:9d:1d:65:2b:31:43: 7e:57:64:11:97:81:33:2b:06:66:be:a5:ea:a3:ff:10:9c:fb: 3c:a5:34:08:85:ea:ff:4e:7a:b8:71:12:9e:0a:4e:34:b3:6c: 80:a2:08:55:9e:e5:9e:94:e0:f5:36:67:6b:d2:d9:00:79:70: 8e:b7:61:1b:ce:58:ed:27:54:6b:e1:11:6b:b4:aa:0a:34:4a: 52:ff:cb:d8:37:ab:01:d2:3a:c0:bf:73:93:48:3e:76:13:70: 3e:c2:d2:fc:c9:af:b3:29:b4:eb:a8:43:27:4b:f9:1e:99:63: 77:f8:df:40:d0:a2:dc:1f:ee:ed:36:f1:86:20:9d:f1:65:f7: bf:6c:92:24:1f:8e:2d:91:34:48:d3:98:6d:d8:66:43:67:27: 52:a4:75:be -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDDUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkI4ODMxMTAvBgNVBAUTKDRGNUFGNTY1RDMwREQ1NEYyNDE0N0VGNUUxNzhBQTBC QUEzM0ZDMjkwHhcNMjUwODEwMTgzOTA3WhcNMjUwODE3MTgzOTA3WjAYMRYwFAYD VQQDEw02ODk4ZTc0Yy0zNzliMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAul6dYl657CcBVLmhW4/tBQ/mMkT4Ir7DE8c9qr9YGYed+Fg1Sm3a/jDCT6LZ 33zEnSowuIUC5d+rNuGGE+Qu/4FiBZfr5jxURyrgDfWVZj1k9azvEEP2v73UP9cH lFzNSyvWKOGgVd1Fg9HZXTVfdBSlhB0b27LjaYK/c1lBQFK0fOOD2nMpQnN5wEus DwXq2CNq2HxO2tze87KJgYR4p2hVMq6M119vI/9J3HqeNnQwL1/qPrspWaGKaWVJ nhkCFXs0L7Ow8jTsRl1FdM+PKCvefmVdwsOS3wZ3p+cctLdt9iKEx3TCN3Oeu4o9 3U0FyDPWOZW4HHhVH6KShuE8KwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPE/0W3P zCvgaFr98I9N7IcIDAJAMB8GA1UdIwQYMBaAFE9a9WXTDdVPJBR+9eF4qguqM/wp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQjg4My9FOTgyQkEzNjEw RTcxMUVBOUQyMUMyNkZDNEY5QUUwMi9UMXIxWmRNTjFVOGtGSDcxNFhpcUM2b3pf Q2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1QxcjFaZE1OMVU4a0ZINzE0WGlxQzZvel9Day5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC Qjg4My9FOTgyQkEzNjEwRTcxMUVBOUQyMUMyNkZDNEY5QUUwMi9UMXIxWmRNTjFV OGtGSDcxNFhpcUM2b3pfQ2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA4XVGBiNt4ROAbdOOIZ/F8NYT6eAPe30lmu8GKvwY3NuqqX0yznqO8 vvTo0xCnRhHsKc5DKR+l/yPZrg5NDgDnItIn81/ZcRsTsyKPrOWeD9V5eYWJuzvG Lwz9Nbnkzx5lStDU0MqdHWUrMUN+V2QRl4EzKwZmvqXqo/8QnPs8pTQIher/Tnq4 cRKeCk40s2yAoghVnuWelOD1Nmdr0tkAeXCOt2EbzljtJ1Rr4RFrtKoKNEpS/8vY N6sB0jrAv3OTSD52E3A+wtL8ya+zKbTrqEMnS/kemWN3+N9A0KLcH+7tNvGGIJ3x Zfe/bJIkH44tkTRI05ht2GZDZydSpHW+ -----END CERTIFICATE-----Generated at Mon Aug 11 04:14:28 2025 by rpki-client