$ rpki-client -vvf rpki.apnic.net/member_repository/A91BB883/E982BA3610E711EA9D21C26FC4F9AE02/T1r1ZdMN1U8kFH714XiqC6oz_Ck.mft File: T1r1ZdMN1U8kFH714XiqC6oz_Ck.mft (raw, json) Hash identifier: L3ymw+WUPEw0tDIHXuGB4pKeyTWtl9pgGX6uRFXI0tU= Subject key identifier: 5F:BE:E7:62:60:6E:15:25:DF:61:0E:3E:39:CF:D4:95:BB:1E:89:14 Authority key identifier: 4F:5A:F5:65:D3:0D:D5:4F:24:14:7E:F5:E1:78:AA:0B:AA:33:FC:29 Certificate issuer: /CN=A91BB883/serialNumber=4F5AF565D30DD54F24147EF5E178AA0BAA33FC29 Certificate serial: 0BFF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T1r1ZdMN1U8kFH714XiqC6oz_Ck.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BB883/E982BA3610E711EA9D21C26FC4F9AE02/T1r1ZdMN1U8kFH714XiqC6oz_Ck.mft Manifest number: 0BF7 Signing time: Thu 24 Apr 2025 18:39:05 +0000 Manifest this update: Thu 24 Apr 2025 18:39:04 +0000 Manifest next update: Thu 01 May 2025 18:39:04 +0000 Files and hashes: 1: T1r1ZdMN1U8kFH714XiqC6oz_Ck.crl (hash: Rr/8FLJcTPpivUQkmoOEbUtYLERMaGgItt9f5ww5pbk=) 2: 8160C03610E911EA86FA6774C4F9AE02.roa (hash: 8XfCRrs6KyewkevpBqIWOSXTDqr80tEQ4o/AVxw5pnc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BB883/E982BA3610E711EA9D21C26FC4F9AE02/T1r1ZdMN1U8kFH714XiqC6oz_Ck.crl rsync://rpki.apnic.net/member_repository/A91BB883/E982BA3610E711EA9D21C26FC4F9AE02/T1r1ZdMN1U8kFH714XiqC6oz_Ck.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T1r1ZdMN1U8kFH714XiqC6oz_Ck.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 18:39:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3071 (0xbff) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BB883, serialNumber=4F5AF565D30DD54F24147EF5E178AA0BAA33FC29 Validity Not Before: Apr 24 18:39:04 2025 GMT Not After : May 1 18:39:04 2025 GMT Subject: CN=680a8549-d111 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:0b:d9:16:fb:62:f1:db:6c:15:61:33:40:e6: fe:92:cf:e8:96:47:81:04:61:ff:54:33:a3:e3:ae: 7c:ce:44:d6:8b:17:24:5d:0b:87:2f:fe:14:19:8b: 0c:e8:a8:ab:bc:6b:64:41:57:75:db:5e:97:d3:b2: 11:64:9f:8d:b2:05:a4:fb:c1:7f:8f:17:bb:cf:ad: 34:20:8f:0e:c9:91:94:14:af:05:67:d3:0f:8e:18: d0:f4:d2:ae:2a:92:66:b6:dc:8f:db:a9:a9:50:32: ac:59:4c:bf:ee:84:57:4b:d4:a4:76:b2:81:0c:f4: d2:ec:83:a0:41:70:5f:e7:61:53:2a:1b:dc:4c:e3: 26:cd:c3:2d:21:f0:a6:9c:e8:7c:53:34:86:9c:a0: 61:8d:22:c2:6d:9c:04:d1:70:7b:cb:1e:6f:d8:2a: ce:e8:e6:f3:16:b4:0b:cf:13:85:f5:85:e2:b0:68: 01:7f:b4:4b:24:e8:7b:6d:32:ac:42:ba:0a:57:45: 88:ed:b2:39:8c:4e:50:3e:cb:82:cc:4c:2d:fe:89: 4a:11:4a:92:88:8a:10:d6:e6:9f:c3:71:fe:b7:bb: b0:16:ed:44:ec:a3:16:66:91:27:54:54:0c:0f:39: 0a:83:29:fe:c7:6c:12:8a:be:fb:3f:b0:b1:6f:27: 86:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:BE:E7:62:60:6E:15:25:DF:61:0E:3E:39:CF:D4:95:BB:1E:89:14 X509v3 Authority Key Identifier: keyid:4F:5A:F5:65:D3:0D:D5:4F:24:14:7E:F5:E1:78:AA:0B:AA:33:FC:29 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BB883/E982BA3610E711EA9D21C26FC4F9AE02/T1r1ZdMN1U8kFH714XiqC6oz_Ck.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T1r1ZdMN1U8kFH714XiqC6oz_Ck.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BB883/E982BA3610E711EA9D21C26FC4F9AE02/T1r1ZdMN1U8kFH714XiqC6oz_Ck.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0d:5d:b0:ed:5e:74:53:dd:f3:00:38:b3:7d:c6:bf:28:b1:21: 52:0d:9a:8b:94:7b:a0:b9:12:c7:cd:90:ab:2e:ab:72:34:3b: 13:60:10:3b:13:aa:65:a4:12:02:a8:9b:88:cc:56:8a:87:0c: 98:bc:94:5a:79:10:da:3e:19:19:0b:e8:30:96:c3:5b:2e:d0: e6:c9:4c:09:92:72:82:84:bc:67:c4:62:de:2c:61:cb:8c:46: fb:61:71:26:db:a4:f2:de:ae:84:7d:5d:fb:90:3d:86:7c:d0: d9:81:bb:b4:85:5a:d0:86:95:e3:06:ba:bb:79:07:83:c8:10: 0d:6c:b7:44:2c:05:da:f2:e2:ba:97:95:20:91:9c:2e:d6:3c: 07:01:37:22:9b:7d:96:09:5e:b8:82:3e:a7:71:5f:b7:94:7f: fd:36:17:df:cd:f8:4e:05:97:73:16:84:d1:22:b7:04:57:47: 64:c4:bf:12:b1:aa:f2:82:cf:c7:87:24:60:11:69:cb:22:7a: c7:68:37:f7:2d:1f:f9:16:b5:03:fc:33:e8:b1:92:81:4e:b5: 2f:fb:d5:74:ca:d9:b0:fb:58:0b:f3:f7:46:46:59:46:33:cb: c6:c9:03:34:7d:15:a7:eb:c8:bd:1b:a7:64:10:cf:d7:f7:98: d1:98:2f:1d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC/8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkI4ODMxMTAvBgNVBAUTKDRGNUFGNTY1RDMwREQ1NEYyNDE0N0VGNUUxNzhBQTBC QUEzM0ZDMjkwHhcNMjUwNDI0MTgzOTA0WhcNMjUwNTAxMTgzOTA0WjAYMRYwFAYD VQQDEw02ODBhODU0OS1kMTExMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxgvZFvti8dtsFWEzQOb+ks/olkeBBGH/VDOj4658zkTWixckXQuHL/4UGYsM 6KirvGtkQVd1216X07IRZJ+NsgWk+8F/jxe7z600II8OyZGUFK8FZ9MPjhjQ9NKu KpJmttyP26mpUDKsWUy/7oRXS9SkdrKBDPTS7IOgQXBf52FTKhvcTOMmzcMtIfCm nOh8UzSGnKBhjSLCbZwE0XB7yx5v2CrO6ObzFrQLzxOF9YXisGgBf7RLJOh7bTKs QroKV0WI7bI5jE5QPsuCzEwt/olKEUqSiIoQ1uafw3H+t7uwFu1E7KMWZpEnVFQM DzkKgyn+x2wSir77P7CxbyeG2QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFF++52Jg bhUl32EOPjnP1JW7HokUMB8GA1UdIwQYMBaAFE9a9WXTDdVPJBR+9eF4qguqM/wp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQjg4My9FOTgyQkEzNjEw RTcxMUVBOUQyMUMyNkZDNEY5QUUwMi9UMXIxWmRNTjFVOGtGSDcxNFhpcUM2b3pf Q2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1QxcjFaZE1OMVU4a0ZINzE0WGlxQzZvel9Day5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC Qjg4My9FOTgyQkEzNjEwRTcxMUVBOUQyMUMyNkZDNEY5QUUwMi9UMXIxWmRNTjFV OGtGSDcxNFhpcUM2b3pfQ2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQANXbDtXnRT3fMAOLN9xr8osSFSDZqLlHuguRLHzZCrLqtyNDsTYBA7 E6plpBICqJuIzFaKhwyYvJRaeRDaPhkZC+gwlsNbLtDmyUwJknKChLxnxGLeLGHL jEb7YXEm26Ty3q6EfV37kD2GfNDZgbu0hVrQhpXjBrq7eQeDyBANbLdELAXa8uK6 l5UgkZwu1jwHATcim32WCV64gj6ncV+3lH/9NhffzfhOBZdzFoTRIrcEV0dkxL8S sarygs/HhyRgEWnLInrHaDf3LR/5FrUD/DPosZKBTrUv+9V0ytmw+1gL8/dGRllG M8vGyQM0fRWn68i9G6dkEM/X95jRmC8d -----END CERTIFICATE-----Generated at Sat Apr 26 13:05:18 2025 by rpki-client