$ rpki-client -vvf rpki.apnic.net/member_repository/A91FDEFE/194B7920A51611EF890ECD3EC4F9AE02/T-GzX5rYKBtm9HAx9Qfg7n1UIRo.mft File: T-GzX5rYKBtm9HAx9Qfg7n1UIRo.mft (raw, json) Hash identifier: cRv2RT3lPtEJPeqRGJq8+f4QyeQO/mhDUdTktnpBerA= Subject key identifier: 1C:B8:B8:A3:0B:D3:15:DD:91:C6:89:67:B7:CC:72:E2:53:78:22:24 Authority key identifier: 4F:E1:B3:5F:9A:D8:28:1B:66:F4:70:31:F5:07:E0:EE:7D:54:21:1A Certificate issuer: /CN=A91FDEFE/serialNumber=4FE1B35F9AD8281B66F47031F507E0EE7D54211A Certificate serial: 89 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T-GzX5rYKBtm9HAx9Qfg7n1UIRo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FDEFE/194B7920A51611EF890ECD3EC4F9AE02/T-GzX5rYKBtm9HAx9Qfg7n1UIRo.mft Manifest number: 88 Signing time: Thu 07 Aug 2025 07:10:55 +0000 Manifest this update: Thu 07 Aug 2025 07:10:54 +0000 Manifest next update: Thu 14 Aug 2025 07:10:54 +0000 Files and hashes: 1: T-GzX5rYKBtm9HAx9Qfg7n1UIRo.crl (hash: PeqYSwjkU26suAfLqR1ZtRAT+3W5qDgD7sUc7PyBDvg=) 2: 669FD05EA53911EFBE261371C4F9AE02.roa (hash: C8BMzBjnObRwd1PN8+bj1Lr3uDFXe55TuSG2M+7J66A=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FDEFE/194B7920A51611EF890ECD3EC4F9AE02/T-GzX5rYKBtm9HAx9Qfg7n1UIRo.crl rsync://rpki.apnic.net/member_repository/A91FDEFE/194B7920A51611EF890ECD3EC4F9AE02/T-GzX5rYKBtm9HAx9Qfg7n1UIRo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T-GzX5rYKBtm9HAx9Qfg7n1UIRo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 137 (0x89) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FDEFE, serialNumber=4FE1B35F9AD8281B66F47031F507E0EE7D54211A Validity Not Before: Aug 7 07:10:54 2025 GMT Not After : Aug 14 07:10:54 2025 GMT Subject: CN=6894517e-ff80 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:b9:db:df:e8:44:7d:4d:05:0e:5c:7b:f1:df: a3:49:4f:a8:b8:37:44:2e:b0:68:8d:4e:b4:e5:55: 3d:0f:d0:af:10:d8:31:84:9a:f2:3e:af:ad:cd:76: b4:b6:91:7e:15:b6:c1:b7:27:b7:76:40:94:b8:0b: 71:e3:d0:4b:c7:30:05:70:1c:23:8c:2f:34:b7:43: 26:ed:95:ce:24:0c:e9:72:b7:79:40:63:63:71:8b: 4a:e1:e8:db:23:6b:bf:ec:a9:f1:56:2d:52:dd:12: 4f:a2:9f:db:19:ec:ee:3b:97:bf:1e:64:e0:21:07: 35:90:b7:71:85:c8:9b:1e:7c:d4:10:b9:4e:9f:88: 79:cd:e9:00:8c:33:4e:61:19:d4:c8:62:0b:63:9f: fb:d6:19:06:38:61:56:f7:27:f1:42:e8:03:de:16: e8:73:f3:97:11:e5:0c:90:b9:4e:84:44:3d:ea:a5: 27:f2:b9:d8:ba:c8:7e:52:31:93:cd:7a:1a:4c:ed: 27:3b:13:76:6d:05:7b:8f:d6:1e:57:51:fc:9c:09: 24:3f:d8:87:e6:e0:b0:44:bd:dd:f6:70:10:31:76: e2:d5:3b:53:8f:d2:66:ac:79:ac:14:d1:a4:ff:08: 17:20:a9:26:64:3e:b9:d6:28:43:f5:e0:16:7a:a8: 28:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:B8:B8:A3:0B:D3:15:DD:91:C6:89:67:B7:CC:72:E2:53:78:22:24 X509v3 Authority Key Identifier: keyid:4F:E1:B3:5F:9A:D8:28:1B:66:F4:70:31:F5:07:E0:EE:7D:54:21:1A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FDEFE/194B7920A51611EF890ECD3EC4F9AE02/T-GzX5rYKBtm9HAx9Qfg7n1UIRo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T-GzX5rYKBtm9HAx9Qfg7n1UIRo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FDEFE/194B7920A51611EF890ECD3EC4F9AE02/T-GzX5rYKBtm9HAx9Qfg7n1UIRo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 68:1d:7b:0e:24:60:db:98:bc:55:ce:61:fb:40:2b:80:ae:60: c5:26:20:66:86:4f:24:86:0a:f1:63:57:4a:fe:10:ff:10:cc: bd:2a:40:a2:56:80:55:bc:d9:db:e5:8a:e2:ef:65:23:46:30: 52:7a:9a:7b:f9:75:54:3c:e7:59:3c:15:d1:f5:b3:7f:a7:13: f8:79:00:24:cd:6f:2c:d7:e7:fa:58:dd:b7:27:2c:3f:3b:d1: cd:81:26:ce:aa:21:44:20:9a:6c:9d:ef:44:e6:59:56:ea:c3: c0:59:37:3e:f3:99:77:6a:38:11:bb:f7:a1:75:04:42:4a:4c: 27:c0:2c:27:0d:5a:22:6e:c0:9c:57:d7:24:0f:bb:d3:5a:72: 28:c4:af:21:a6:90:f5:96:2e:2d:c3:f8:05:a6:a7:4f:98:2f: a6:a6:65:40:ad:de:de:75:1b:9c:73:00:fe:28:4f:cc:9f:5f: eb:ef:2f:8d:b2:53:ca:40:56:c5:23:68:e1:66:5d:91:8e:16: 58:d7:db:ef:6d:3c:3c:be:c8:89:d6:78:a2:e7:98:cf:ad:e8: 24:a9:d1:c6:6e:80:96:0a:44:a3:98:19:f8:09:6c:cb:87:df: 64:f1:14:25:7e:86:c8:ae:73:94:a1:55:34:4f:d5:b2:42:ce: 2b:ed:d9:26 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAIkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkRFRkUxMTAvBgNVBAUTKDRGRTFCMzVGOUFEODI4MUI2NkY0NzAzMUY1MDdFMEVF N0Q1NDIxMUEwHhcNMjUwODA3MDcxMDU0WhcNMjUwODE0MDcxMDU0WjAYMRYwFAYD VQQDEw02ODk0NTE3ZS1mZjgwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA47nb3+hEfU0FDlx78d+jSU+ouDdELrBojU605VU9D9CvENgxhJryPq+tzXa0 tpF+FbbBtye3dkCUuAtx49BLxzAFcBwjjC80t0Mm7ZXOJAzpcrd5QGNjcYtK4ejb I2u/7KnxVi1S3RJPop/bGezuO5e/HmTgIQc1kLdxhcibHnzUELlOn4h5zekAjDNO YRnUyGILY5/71hkGOGFW9yfxQugD3hboc/OXEeUMkLlOhEQ96qUn8rnYush+UjGT zXoaTO0nOxN2bQV7j9YeV1H8nAkkP9iH5uCwRL3d9nAQMXbi1TtTj9JmrHmsFNGk /wgXIKkmZD651ihD9eAWeqgo4QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBy4uKML 0xXdkcaJZ7fMcuJTeCIkMB8GA1UdIwQYMBaAFE/hs1+a2CgbZvRwMfUH4O59VCEa MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGREVGRS8xOTRCNzkyMEE1 MTYxMUVGODkwRUNEM0VDNEY5QUUwMi9ULUd6WDVyWUtCdG05SEF4OVFmZzduMVVJ Um8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1QtR3pYNXJZS0J0bTlIQXg5UWZnN24xVUlSby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG REVGRS8xOTRCNzkyMEE1MTYxMUVGODkwRUNEM0VDNEY5QUUwMi9ULUd6WDVyWUtC dG05SEF4OVFmZzduMVVJUm8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBoHXsOJGDbmLxVzmH7QCuArmDFJiBmhk8khgrxY1dK/hD/EMy9KkCi VoBVvNnb5Yri72UjRjBSepp7+XVUPOdZPBXR9bN/pxP4eQAkzW8s1+f6WN23Jyw/ O9HNgSbOqiFEIJpsne9E5llW6sPAWTc+85l3ajgRu/ehdQRCSkwnwCwnDVoibsCc V9ckD7vTWnIoxK8hppD1li4tw/gFpqdPmC+mpmVArd7edRuccwD+KE/Mn1/r7y+N slPKQFbFI2jhZl2RjhZY19vvbTw8vsiJ1nii55jPregkqdHGboCWCkSjmBn4CWzL h99k8RQlfobIrnOUoVU0T9WyQs4r7dkm -----END CERTIFICATE-----Generated at Sat Aug 9 02:48:02 2025 by rpki-client