$ rpki-client -vvf rpki.apnic.net/member_repository/A91BF4A1/0F587A88B1CC11ED85F25A3DC4F9AE02/T-5HlDq-E-OFVqc8KBuQ41SSN9w.mft File: T-5HlDq-E-OFVqc8KBuQ41SSN9w.mft (raw, json) Hash identifier: 2EaYr+WWrD1xgYnO71IIsw4qLk/o9RqZomi0qQl+hZU= Subject key identifier: FB:DF:F3:5A:2E:95:57:5D:CD:63:58:A3:45:8C:C0:B7:FF:1C:F9:B5 Authority key identifier: 4F:EE:47:94:3A:BE:13:E3:85:56:A7:3C:28:1B:90:E3:54:92:37:DC Certificate issuer: /CN=A91BF4A1/serialNumber=4FEE47943ABE13E38556A73C281B90E3549237DC Certificate serial: 01A4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T-5HlDq-E-OFVqc8KBuQ41SSN9w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BF4A1/0F587A88B1CC11ED85F25A3DC4F9AE02/T-5HlDq-E-OFVqc8KBuQ41SSN9w.mft Manifest number: 019D Signing time: Fri 25 Apr 2025 02:33:37 +0000 Manifest this update: Fri 25 Apr 2025 02:33:37 +0000 Manifest next update: Fri 02 May 2025 02:33:37 +0000 Files and hashes: 1: T-5HlDq-E-OFVqc8KBuQ41SSN9w.crl (hash: c7OmGA7XNI1DymnFh/QaHkCcTi26JvtVksnie/2O3gE=) 2: 4405F70C03AE11F08ECE4754C4F9AE02.roa (hash: KSItAPOjkLG7UWPYALBIyJeHmExySZ4KDwSB7GWXFrI=) 3: 9AB64290908211EF9877C022C4F9AE02.roa (hash: 53832RqqEhC0WAnEbw/uqzZOjibGBYS5qoQ5I8q+Q+o=) 4: B780E2A097F711EF89B09770C4F9AE02.roa (hash: DB23UT2fsXrp5BzUdZvw+7TC7FTSDlXyxizqnQeaxYs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BF4A1/0F587A88B1CC11ED85F25A3DC4F9AE02/T-5HlDq-E-OFVqc8KBuQ41SSN9w.crl rsync://rpki.apnic.net/member_repository/A91BF4A1/0F587A88B1CC11ED85F25A3DC4F9AE02/T-5HlDq-E-OFVqc8KBuQ41SSN9w.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T-5HlDq-E-OFVqc8KBuQ41SSN9w.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 02:33:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 420 (0x1a4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BF4A1, serialNumber=4FEE47943ABE13E38556A73C281B90E3549237DC Validity Not Before: Apr 25 02:33:37 2025 GMT Not After : May 2 02:33:37 2025 GMT Subject: CN=680af481-80f8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:d6:70:1b:a0:80:f0:a2:f1:09:a4:f1:6d:4e: d9:23:56:07:6a:5b:14:dd:b7:2d:bb:c6:23:8e:54: a6:50:16:ce:75:d0:38:3d:bb:db:b8:ad:ef:9a:0f: e1:30:b6:4d:58:45:e9:40:9e:c6:1e:f8:b9:ee:79: 0a:3e:7f:ae:68:7a:29:54:d4:ea:dc:a0:53:9f:ca: 49:2a:a0:48:66:fc:51:3e:e8:0b:b1:bf:78:f8:9e: 86:71:7c:ea:4c:6e:f5:17:5b:f1:9f:3e:c5:84:c1: 8d:52:3c:24:b0:04:d2:b6:84:d7:94:1e:36:d8:cd: 44:b5:c7:c9:88:97:4a:03:df:d2:fb:b4:42:2b:9b: 12:5f:e8:9b:01:4e:20:f8:02:34:ec:de:12:d1:da: c0:6a:bc:db:8e:a0:3b:54:7d:90:e5:15:19:8d:20: 8d:2a:c0:2d:34:16:a5:67:2d:37:7c:18:ce:5f:59: be:1b:5a:d5:50:8e:af:76:47:a1:6e:95:0f:96:5c: 8a:e7:ae:42:04:47:c3:4f:f2:7c:00:86:1d:3b:2c: 9c:87:8d:33:b0:1d:64:f9:20:ad:89:aa:e9:d2:fc: 6f:ca:7d:5c:28:33:c9:a8:09:4c:94:f9:c8:33:27: 04:e9:86:da:3a:d4:c7:a7:ed:30:d5:c3:aa:5b:5b: 32:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:DF:F3:5A:2E:95:57:5D:CD:63:58:A3:45:8C:C0:B7:FF:1C:F9:B5 X509v3 Authority Key Identifier: keyid:4F:EE:47:94:3A:BE:13:E3:85:56:A7:3C:28:1B:90:E3:54:92:37:DC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BF4A1/0F587A88B1CC11ED85F25A3DC4F9AE02/T-5HlDq-E-OFVqc8KBuQ41SSN9w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T-5HlDq-E-OFVqc8KBuQ41SSN9w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BF4A1/0F587A88B1CC11ED85F25A3DC4F9AE02/T-5HlDq-E-OFVqc8KBuQ41SSN9w.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 04:d2:39:81:39:b7:e2:8e:04:13:06:47:7b:6a:5d:1e:f8:5e: e0:51:ca:54:a8:7b:e7:48:ed:23:54:f1:50:df:68:91:07:1b: d6:cb:7d:5f:c4:80:ef:7f:ed:ab:c8:f6:34:ed:ee:fc:7f:df: 85:01:65:d0:b5:85:04:8b:25:b5:23:92:c5:db:6f:8e:8f:71: 88:54:40:8c:96:90:32:d9:fc:ea:77:8d:25:96:e9:af:9c:37: 6e:2f:10:e4:36:e6:76:76:21:02:91:0c:d1:b1:e2:71:2c:07: 7c:6e:5d:f4:56:81:67:66:47:f6:36:a0:81:38:1b:1e:aa:99: 5b:d6:87:ef:9a:92:35:e1:96:59:eb:a6:9b:6e:11:8e:21:f0: ac:b1:35:15:cb:44:8f:86:5c:7d:f5:de:a5:64:57:0f:f7:18: 10:27:94:ab:67:c7:36:8e:b6:7a:38:f0:af:94:6b:f2:b5:68: 8c:c1:46:d3:ba:dd:dc:5f:eb:93:60:4f:6f:c9:94:be:be:ee: 11:38:79:c2:9e:71:69:0b:25:b2:c3:41:43:5d:12:6d:f2:b9: 27:f7:7e:72:a3:71:bb:14:d7:c5:83:8e:72:03:04:6b:d0:57: 27:ab:91:42:20:a6:09:09:ef:24:ea:92:58:c2:cd:ca:8e:5c: a9:df:b3:6a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAaQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkY0QTExMTAvBgNVBAUTKDRGRUU0Nzk0M0FCRTEzRTM4NTU2QTczQzI4MUI5MEUz NTQ5MjM3REMwHhcNMjUwNDI1MDIzMzM3WhcNMjUwNTAyMDIzMzM3WjAYMRYwFAYD VQQDEw02ODBhZjQ4MS04MGY4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2NZwG6CA8KLxCaTxbU7ZI1YHalsU3bctu8YjjlSmUBbOddA4PbvbuK3vmg/h MLZNWEXpQJ7GHvi57nkKPn+uaHopVNTq3KBTn8pJKqBIZvxRPugLsb94+J6GcXzq TG71F1vxnz7FhMGNUjwksATStoTXlB422M1EtcfJiJdKA9/S+7RCK5sSX+ibAU4g +AI07N4S0drAarzbjqA7VH2Q5RUZjSCNKsAtNBalZy03fBjOX1m+G1rVUI6vdkeh bpUPllyK565CBEfDT/J8AIYdOyych40zsB1k+SCtiarp0vxvyn1cKDPJqAlMlPnI MycE6YbaOtTHp+0w1cOqW1sygQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPvf81ou lVddzWNYo0WMwLf/HPm1MB8GA1UdIwQYMBaAFE/uR5Q6vhPjhVanPCgbkONUkjfc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCRjRBMS8wRjU4N0E4OEIx Q0MxMUVEODVGMjVBM0RDNEY5QUUwMi9ULTVIbERxLUUtT0ZWcWM4S0J1UTQxU1NO OXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1QtNUhsRHEtRS1PRlZxYzhLQnVRNDFTU045dy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC RjRBMS8wRjU4N0E4OEIxQ0MxMUVEODVGMjVBM0RDNEY5QUUwMi9ULTVIbERxLUUt T0ZWcWM4S0J1UTQxU1NOOXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAE0jmBObfijgQTBkd7al0e+F7gUcpUqHvnSO0jVPFQ32iRBxvWy31f xIDvf+2ryPY07e78f9+FAWXQtYUEiyW1I5LF22+Oj3GIVECMlpAy2fzqd40llumv nDduLxDkNuZ2diECkQzRseJxLAd8bl30VoFnZkf2NqCBOBseqplb1ofvmpI14ZZZ 66abbhGOIfCssTUVy0SPhlx99d6lZFcP9xgQJ5SrZ8c2jrZ6OPCvlGvytWiMwUbT ut3cX+uTYE9vyZS+vu4ROHnCnnFpCyWyw0FDXRJt8rkn935yo3G7FNfFg45yAwRr 0Fcnq5FCIKYJCe8k6pJYws3Kjlyp37Nq -----END CERTIFICATE-----Generated at Sat Apr 26 04:29:47 2025 by rpki-client