$ rpki-client -vvf rpki.apnic.net/member_repository/A91BB883/E982BA3610E711EA9D21C26FC4F9AE02/T1r1ZdMN1U8kFH714XiqC6oz_Ck.mft File: T1r1ZdMN1U8kFH714XiqC6oz_Ck.mft (raw, json) Hash identifier: e4a3RlacQXrOEHWiEoCCyIupwBqy4B9SFBUVgzEjkLw= Subject key identifier: 68:F0:1F:39:69:D4:B5:FD:EF:42:56:FF:1F:11:0B:15:DD:38:B1:89 Authority key identifier: 4F:5A:F5:65:D3:0D:D5:4F:24:14:7E:F5:E1:78:AA:0B:AA:33:FC:29 Certificate issuer: /CN=A91BB883/serialNumber=4F5AF565D30DD54F24147EF5E178AA0BAA33FC29 Certificate serial: 0C18 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T1r1ZdMN1U8kFH714XiqC6oz_Ck.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BB883/E982BA3610E711EA9D21C26FC4F9AE02/T1r1ZdMN1U8kFH714XiqC6oz_Ck.mft Manifest number: 0C10 Signing time: Sat 14 Jun 2025 18:33:24 +0000 Manifest this update: Sat 14 Jun 2025 18:33:24 +0000 Manifest next update: Sat 21 Jun 2025 18:33:24 +0000 Files and hashes: 1: T1r1ZdMN1U8kFH714XiqC6oz_Ck.crl (hash: f6D7hUy8OeBxg0sANSOGSwtfIR1NR5wmgs7cmFK1ZR0=) 2: 8160C03610E911EA86FA6774C4F9AE02.roa (hash: 8XfCRrs6KyewkevpBqIWOSXTDqr80tEQ4o/AVxw5pnc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BB883/E982BA3610E711EA9D21C26FC4F9AE02/T1r1ZdMN1U8kFH714XiqC6oz_Ck.crl rsync://rpki.apnic.net/member_repository/A91BB883/E982BA3610E711EA9D21C26FC4F9AE02/T1r1ZdMN1U8kFH714XiqC6oz_Ck.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T1r1ZdMN1U8kFH714XiqC6oz_Ck.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Jun 2025 18:33:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3096 (0xc18) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BB883, serialNumber=4F5AF565D30DD54F24147EF5E178AA0BAA33FC29 Validity Not Before: Jun 14 18:33:24 2025 GMT Not After : Jun 21 18:33:24 2025 GMT Subject: CN=684dc074-2bb0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:02:1c:fa:05:b0:14:fa:5e:d6:cf:3f:f5:7f: 8f:dd:e1:ad:fb:32:10:a9:fd:8e:0c:3a:76:44:df: 66:0f:cd:26:8b:ef:ac:61:c2:bc:c3:af:22:89:82: c1:dd:d8:a0:8a:33:d6:66:95:2c:56:00:cc:a1:ad: 84:29:82:38:9d:7c:4a:20:ee:ad:a9:c7:4f:b9:ae: 37:e6:bf:2b:4b:76:39:25:7e:6e:1f:c6:7f:bc:58: 2e:9d:12:f7:97:a4:b3:d2:5a:5e:d8:98:86:bf:cd: d3:70:45:74:29:d7:d0:02:82:ba:7d:8a:0d:a4:f6: 43:5c:1c:9a:d7:80:d4:c3:2b:9b:5b:28:84:f0:8e: d5:b8:bd:13:fa:cb:c1:5d:85:53:fe:39:00:70:eb: dc:78:95:4e:31:33:5c:96:58:6b:59:6f:79:f2:82: fd:f8:c2:1c:b4:a1:10:e1:da:0c:74:d4:ed:9f:3e: 5f:8d:9d:36:40:c1:09:1e:c5:ca:2f:65:ce:d7:03: 61:59:c7:0f:72:50:f3:11:05:18:1c:dd:0e:3d:8f: ac:f8:67:51:05:c5:76:55:e2:41:ff:cb:c2:8e:e2: f1:b7:ad:53:8c:fd:1d:51:ac:b8:95:4e:59:76:52: 60:f9:ab:d1:d1:3f:07:ac:39:7d:92:2c:37:96:1c: fe:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:F0:1F:39:69:D4:B5:FD:EF:42:56:FF:1F:11:0B:15:DD:38:B1:89 X509v3 Authority Key Identifier: keyid:4F:5A:F5:65:D3:0D:D5:4F:24:14:7E:F5:E1:78:AA:0B:AA:33:FC:29 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BB883/E982BA3610E711EA9D21C26FC4F9AE02/T1r1ZdMN1U8kFH714XiqC6oz_Ck.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T1r1ZdMN1U8kFH714XiqC6oz_Ck.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BB883/E982BA3610E711EA9D21C26FC4F9AE02/T1r1ZdMN1U8kFH714XiqC6oz_Ck.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 16:57:70:58:13:c6:a1:be:61:fa:d4:74:be:14:33:18:3d:79: 4a:72:c5:b6:ab:68:d0:77:e6:00:cd:d0:09:03:31:1b:11:89: c0:a2:32:99:de:fd:5a:03:93:86:5a:2e:be:5d:00:91:f1:68: 59:24:5d:3f:76:ba:82:ed:0d:3a:7f:02:5a:33:ec:2a:fa:81: 25:26:36:49:9e:c8:3d:14:3c:81:32:42:b4:bc:2b:ec:89:d5: 58:2b:99:69:00:6e:79:b0:38:99:b1:23:50:d0:b4:ce:83:9a: cb:5a:ef:94:92:d6:88:4f:80:db:24:65:33:a2:1b:44:5c:62: 80:92:56:af:07:69:80:b7:c2:b8:b7:ce:52:38:6f:49:c3:41: f3:72:cf:04:76:00:b8:33:23:42:a3:be:aa:5b:d5:ce:fe:d5: f1:0f:66:c8:af:86:8f:65:79:c7:0d:f9:66:37:13:61:2e:98: e9:b9:88:36:fa:76:08:dd:f4:4b:ae:a6:97:b0:4d:86:94:0f: f1:ec:3f:b4:80:c2:8c:28:c2:27:f5:31:d0:2f:ee:86:f9:18: a7:5f:47:e0:f1:08:c9:b2:6e:d8:fa:06:11:9b:b0:4f:d0:78: 82:d8:10:3a:47:36:e7:f1:af:da:4d:97:2a:62:32:1d:aa:fa: 96:8e:8c:e7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDBgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkI4ODMxMTAvBgNVBAUTKDRGNUFGNTY1RDMwREQ1NEYyNDE0N0VGNUUxNzhBQTBC QUEzM0ZDMjkwHhcNMjUwNjE0MTgzMzI0WhcNMjUwNjIxMTgzMzI0WjAYMRYwFAYD VQQDEw02ODRkYzA3NC0yYmIwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArgIc+gWwFPpe1s8/9X+P3eGt+zIQqf2ODDp2RN9mD80mi++sYcK8w68iiYLB 3digijPWZpUsVgDMoa2EKYI4nXxKIO6tqcdPua435r8rS3Y5JX5uH8Z/vFgunRL3 l6Sz0lpe2JiGv83TcEV0KdfQAoK6fYoNpPZDXBya14DUwyubWyiE8I7VuL0T+svB XYVT/jkAcOvceJVOMTNcllhrWW958oL9+MIctKEQ4doMdNTtnz5fjZ02QMEJHsXK L2XO1wNhWccPclDzEQUYHN0OPY+s+GdRBcV2VeJB/8vCjuLxt61TjP0dUay4lU5Z dlJg+avR0T8HrDl9kiw3lhz+nwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGjwHzlp 1LX970JW/x8RCxXdOLGJMB8GA1UdIwQYMBaAFE9a9WXTDdVPJBR+9eF4qguqM/wp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQjg4My9FOTgyQkEzNjEw RTcxMUVBOUQyMUMyNkZDNEY5QUUwMi9UMXIxWmRNTjFVOGtGSDcxNFhpcUM2b3pf Q2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1QxcjFaZE1OMVU4a0ZINzE0WGlxQzZvel9Day5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC Qjg4My9FOTgyQkEzNjEwRTcxMUVBOUQyMUMyNkZDNEY5QUUwMi9UMXIxWmRNTjFV OGtGSDcxNFhpcUM2b3pfQ2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAWV3BYE8ahvmH61HS+FDMYPXlKcsW2q2jQd+YAzdAJAzEbEYnAojKZ 3v1aA5OGWi6+XQCR8WhZJF0/drqC7Q06fwJaM+wq+oElJjZJnsg9FDyBMkK0vCvs idVYK5lpAG55sDiZsSNQ0LTOg5rLWu+UktaIT4DbJGUzohtEXGKAklavB2mAt8K4 t85SOG9Jw0Hzcs8EdgC4MyNCo76qW9XO/tXxD2bIr4aPZXnHDflmNxNhLpjpuYg2 +nYI3fRLrqaXsE2GlA/x7D+0gMKMKMIn9THQL+6G+RinX0fg8QjJsm7Y+gYRm7BP 0HiC2BA6Rzbn8a/aTZcqYjIdqvqWjozn -----END CERTIFICATE-----Generated at Sun Jun 15 10:03:20 2025 by rpki-client