$ rpki-client -vvf rpki.apnic.net/member_repository/A91FDEFE/194B7920A51611EF890ECD3EC4F9AE02/T-GzX5rYKBtm9HAx9Qfg7n1UIRo.mft File: T-GzX5rYKBtm9HAx9Qfg7n1UIRo.mft (raw, json) Hash identifier: T/iFh/ZSz5wzkh3uliYkrSC758X1iNByIZ1sHw2xpNI= Subject key identifier: DA:47:91:FA:DF:43:7F:50:A4:3D:97:DF:7F:1B:3F:B3:94:22:20:F8 Authority key identifier: 4F:E1:B3:5F:9A:D8:28:1B:66:F4:70:31:F5:07:E0:EE:7D:54:21:1A Certificate issuer: /CN=A91FDEFE/serialNumber=4FE1B35F9AD8281B66F47031F507E0EE7D54211A Certificate serial: 6E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T-GzX5rYKBtm9HAx9Qfg7n1UIRo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FDEFE/194B7920A51611EF890ECD3EC4F9AE02/T-GzX5rYKBtm9HAx9Qfg7n1UIRo.mft Manifest number: 6D Signing time: Sun 15 Jun 2025 06:01:30 +0000 Manifest this update: Sun 15 Jun 2025 06:01:30 +0000 Manifest next update: Sun 22 Jun 2025 06:01:30 +0000 Files and hashes: 1: T-GzX5rYKBtm9HAx9Qfg7n1UIRo.crl (hash: PWyzmk3uWse8EfG3O0aO2+M77J18oUwQagxCroWGlMk=) 2: 669FD05EA53911EFBE261371C4F9AE02.roa (hash: C8BMzBjnObRwd1PN8+bj1Lr3uDFXe55TuSG2M+7J66A=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FDEFE/194B7920A51611EF890ECD3EC4F9AE02/T-GzX5rYKBtm9HAx9Qfg7n1UIRo.crl rsync://rpki.apnic.net/member_repository/A91FDEFE/194B7920A51611EF890ECD3EC4F9AE02/T-GzX5rYKBtm9HAx9Qfg7n1UIRo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T-GzX5rYKBtm9HAx9Qfg7n1UIRo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 22 Jun 2025 02:50:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 110 (0x6e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FDEFE, serialNumber=4FE1B35F9AD8281B66F47031F507E0EE7D54211A Validity Not Before: Jun 15 06:01:30 2025 GMT Not After : Jun 22 06:01:30 2025 GMT Subject: CN=684e61ba-0471 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:ea:05:e5:7b:d0:83:da:1d:6d:81:fc:69:a3: 5c:48:09:69:d5:4d:dd:0f:9c:08:24:47:13:e6:90: 7f:c9:2b:27:d5:fe:98:11:11:97:8f:92:1f:18:51: ca:31:fb:16:ba:3f:5e:39:1d:df:4c:18:2e:9b:7d: fb:54:bc:bc:f1:25:68:4c:74:65:a4:50:80:4c:83: 4f:fb:1a:93:de:41:45:11:6a:28:ad:89:a1:26:0b: cc:e4:63:ae:17:1e:b3:c8:f2:51:c4:74:a3:1b:e4: e2:f0:39:ac:da:90:67:64:3c:dc:9c:ea:ae:af:d8: 6c:ba:b0:df:6e:8c:ef:f9:00:a4:4c:a0:03:6e:2b: e1:c8:82:0f:c7:8e:77:b3:64:91:a3:9a:7a:47:fc: 6a:c7:51:e5:cd:5f:32:40:d2:e9:65:5e:d0:7e:96: 45:d3:0b:c4:76:d6:25:92:d0:fe:8b:70:23:b8:f2: a8:14:a8:19:a5:ae:26:e2:22:ae:64:46:11:f0:ec: 14:5c:62:83:73:ec:56:a5:3b:68:a8:51:d5:26:b9: 4c:f9:27:31:45:6f:e4:a7:49:3c:79:93:e9:eb:b8: 2b:82:49:3e:55:26:77:37:be:25:6f:a6:e8:87:b2: 8c:af:cc:bb:ae:17:9e:36:b4:03:6f:b9:e7:39:01: ae:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:47:91:FA:DF:43:7F:50:A4:3D:97:DF:7F:1B:3F:B3:94:22:20:F8 X509v3 Authority Key Identifier: keyid:4F:E1:B3:5F:9A:D8:28:1B:66:F4:70:31:F5:07:E0:EE:7D:54:21:1A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FDEFE/194B7920A51611EF890ECD3EC4F9AE02/T-GzX5rYKBtm9HAx9Qfg7n1UIRo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T-GzX5rYKBtm9HAx9Qfg7n1UIRo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FDEFE/194B7920A51611EF890ECD3EC4F9AE02/T-GzX5rYKBtm9HAx9Qfg7n1UIRo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 85:67:d6:af:eb:d4:6d:97:4c:d7:06:ff:93:55:1a:7f:16:19: a3:c9:7b:f1:7d:f9:be:0c:4f:e5:4e:80:69:17:76:dc:1c:7d: dd:64:9f:fb:1b:f5:47:7a:07:40:57:2e:d4:ed:55:52:84:39: 12:97:a0:d5:7e:51:a6:6d:1f:85:c0:64:f2:38:35:12:dc:e1: 3d:bc:60:7a:8c:b2:ef:c9:90:30:f5:1a:12:14:a5:e7:e8:e3: 29:c3:42:7d:14:01:46:03:c8:d2:64:d5:07:15:3b:75:46:4d: e3:63:09:7f:9f:54:23:9e:f0:86:a6:5f:b4:d1:95:d0:ed:88: 8e:4c:c2:43:5e:ed:20:91:f0:e6:ec:1d:b2:b9:af:e1:d4:a9: e7:26:9f:2a:b2:b2:7d:1c:5b:fb:7f:cd:ba:b5:01:23:10:d5: ef:e3:2d:90:59:2b:81:f1:62:81:66:8f:2c:97:9c:5f:89:1e: db:de:ad:1a:0f:c0:d0:08:89:ff:33:30:d9:36:af:5a:8e:32: 32:9b:63:77:f6:93:9c:d3:40:da:47:1c:a2:81:cb:2e:1c:6e: 2d:33:23:09:86:7d:5d:13:1b:8e:88:3a:fa:00:d5:6d:d4:3a: 8f:c0:f4:5f:d8:3d:ba:03:17:89:88:45:2a:5c:39:9d:a8:09: 6c:c8:af:14 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBbjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG REVGRTExMC8GA1UEBRMoNEZFMUIzNUY5QUQ4MjgxQjY2RjQ3MDMxRjUwN0UwRUU3 RDU0MjExQTAeFw0yNTA2MTUwNjAxMzBaFw0yNTA2MjIwNjAxMzBaMBgxFjAUBgNV BAMTDTY4NGU2MWJhLTA0NzEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDK6gXle9CD2h1tgfxpo1xICWnVTd0PnAgkRxPmkH/JKyfV/pgREZePkh8YUcox +xa6P145Hd9MGC6bfftUvLzxJWhMdGWkUIBMg0/7GpPeQUURaiitiaEmC8zkY64X HrPI8lHEdKMb5OLwOazakGdkPNyc6q6v2Gy6sN9ujO/5AKRMoANuK+HIgg/Hjnez ZJGjmnpH/GrHUeXNXzJA0ullXtB+lkXTC8R21iWS0P6LcCO48qgUqBmlribiIq5k RhHw7BRcYoNz7FalO2ioUdUmuUz5JzFFb+SnSTx5k+nruCuCST5VJnc3viVvpuiH soyvzLuuF542tANvuec5Aa5xAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU2keR+t9D f1CkPZfffxs/s5QiIPgwHwYDVR0jBBgwFoAUT+GzX5rYKBtm9HAx9Qfg7n1UIRow DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUZERUZFLzE5NEI3OTIwQTUx NjExRUY4OTBFQ0QzRUM0RjlBRTAyL1QtR3pYNXJZS0J0bTlIQXg5UWZnN24xVUlS by5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvVC1Helg1cllLQnRtOUhBeDlRZmc3bjFVSVJvLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUZE RUZFLzE5NEI3OTIwQTUxNjExRUY4OTBFQ0QzRUM0RjlBRTAyL1QtR3pYNXJZS0J0 bTlIQXg5UWZnN24xVUlSby5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAIVn1q/r1G2XTNcG/5NVGn8WGaPJe/F9+b4MT+VOgGkXdtwcfd1kn/sb 9Ud6B0BXLtTtVVKEORKXoNV+UaZtH4XAZPI4NRLc4T28YHqMsu/JkDD1GhIUpefo 4ynDQn0UAUYDyNJk1QcVO3VGTeNjCX+fVCOe8IamX7TRldDtiI5MwkNe7SCR8Obs HbK5r+HUqecmnyqysn0cW/t/zbq1ASMQ1e/jLZBZK4HxYoFmjyyXnF+JHtverRoP wNAIif8zMNk2r1qOMjKbY3f2k5zTQNpHHKKByy4cbi0zIwmGfV0TG46IOvoA1W3U Oo/A9F/YPboDF4mIRSpcOZ2oCWzIrxQ= -----END CERTIFICATE-----Generated at Sun Jun 15 08:03:15 2025 by rpki-client