$ rpki-client -vvf rpki.apnic.net/member_repository/A91BB883/E982BA3610E711EA9D21C26FC4F9AE02/T1r1ZdMN1U8kFH714XiqC6oz_Ck.mft File: T1r1ZdMN1U8kFH714XiqC6oz_Ck.mft (raw, json) Hash identifier: 9n1Y63taZOBRoevfgfixATsoDX4b6M0SbpvKSs+kFQg= Subject key identifier: 99:C1:A9:FC:C9:DA:A7:CC:42:34:96:39:A3:F2:B7:42:7D:DF:6D:1B Authority key identifier: 4F:5A:F5:65:D3:0D:D5:4F:24:14:7E:F5:E1:78:AA:0B:AA:33:FC:29 Certificate issuer: /CN=A91BB883/serialNumber=4F5AF565D30DD54F24147EF5E178AA0BAA33FC29 Certificate serial: 0C3B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T1r1ZdMN1U8kFH714XiqC6oz_Ck.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BB883/E982BA3610E711EA9D21C26FC4F9AE02/T1r1ZdMN1U8kFH714XiqC6oz_Ck.mft Manifest number: 0C33 Signing time: Fri 22 Aug 2025 18:45:30 +0000 Manifest this update: Fri 22 Aug 2025 18:45:29 +0000 Manifest next update: Fri 29 Aug 2025 18:45:29 +0000 Files and hashes: 1: T1r1ZdMN1U8kFH714XiqC6oz_Ck.crl (hash: dpE0HgGMYNdsD9uO7uH/ChFU0Jk58GfHXQS4fcmxSmg=) 2: 8160C03610E911EA86FA6774C4F9AE02.roa (hash: 8XfCRrs6KyewkevpBqIWOSXTDqr80tEQ4o/AVxw5pnc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BB883/E982BA3610E711EA9D21C26FC4F9AE02/T1r1ZdMN1U8kFH714XiqC6oz_Ck.crl rsync://rpki.apnic.net/member_repository/A91BB883/E982BA3610E711EA9D21C26FC4F9AE02/T1r1ZdMN1U8kFH714XiqC6oz_Ck.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T1r1ZdMN1U8kFH714XiqC6oz_Ck.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 18:45:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3131 (0xc3b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BB883, serialNumber=4F5AF565D30DD54F24147EF5E178AA0BAA33FC29 Validity Not Before: Aug 22 18:45:29 2025 GMT Not After : Aug 29 18:45:29 2025 GMT Subject: CN=68a8baca-aae8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:80:0b:07:6d:58:9b:2d:32:bd:87:8a:67:a5: 0f:de:5f:d5:d1:b5:30:cf:9d:93:58:12:3f:1a:b6: e1:72:cb:94:74:77:b3:c7:b0:3c:a6:41:f4:be:9b: ed:45:5f:74:36:db:47:01:69:f2:bc:ef:c7:8f:94: 40:74:42:77:36:9d:d9:68:d6:2e:c8:02:e3:3b:57: de:4f:fd:05:f2:5b:59:10:78:bc:58:06:e4:b8:b7: f7:9e:f5:0c:08:49:64:8e:f0:2c:c9:37:dd:fc:d8: a7:80:b4:33:b8:2e:29:6a:ee:ee:d7:bd:fa:f3:c7: 79:4c:b9:85:21:01:15:17:8c:5b:f3:0d:c5:93:54: 95:72:49:8e:0d:58:e1:b6:98:0d:69:f4:89:6b:d8: a2:82:26:5a:e0:16:d7:19:78:29:b9:4c:20:57:04: ac:5f:f4:2f:7d:f2:84:95:86:a3:6f:5c:3b:9a:55: f8:af:e3:1b:7f:8d:03:dd:0c:bd:05:65:20:70:00: f6:11:cf:ac:6d:a0:cd:e1:59:c0:2a:9f:9f:2f:68: b0:4c:e5:05:a6:cc:6f:aa:67:7a:5a:21:31:59:fe: fa:4a:cf:8f:63:ab:f4:0c:9c:5d:31:35:dd:ac:8d: 39:a1:a0:0a:a8:38:15:eb:9e:cd:b1:60:bb:96:b8: d7:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:C1:A9:FC:C9:DA:A7:CC:42:34:96:39:A3:F2:B7:42:7D:DF:6D:1B X509v3 Authority Key Identifier: keyid:4F:5A:F5:65:D3:0D:D5:4F:24:14:7E:F5:E1:78:AA:0B:AA:33:FC:29 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BB883/E982BA3610E711EA9D21C26FC4F9AE02/T1r1ZdMN1U8kFH714XiqC6oz_Ck.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T1r1ZdMN1U8kFH714XiqC6oz_Ck.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BB883/E982BA3610E711EA9D21C26FC4F9AE02/T1r1ZdMN1U8kFH714XiqC6oz_Ck.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6e:b6:e1:f9:69:9d:b7:ce:97:cf:69:cb:43:c0:78:c4:37:55: db:1b:a8:54:67:42:bc:a3:5d:a6:2e:7f:4f:b6:2f:9e:f3:51: 32:b2:83:ff:95:00:1f:2e:81:5a:0a:f2:ad:e2:49:eb:75:51: 60:c6:20:ed:e8:b1:5d:17:46:4d:af:e6:16:06:e1:04:26:e9: 90:cc:cb:c5:e0:4f:dc:b8:7c:48:1e:23:3b:3d:bb:f4:a4:48: b4:c3:8a:6e:91:4a:f2:25:41:3e:22:2f:9e:21:b7:7c:67:0f: cd:d8:5e:f1:5e:08:01:54:2a:e9:ad:fb:ca:05:66:9e:f0:12: 7e:c8:ee:38:0c:18:05:83:99:36:52:44:39:32:0b:e9:b2:6e: 32:86:48:13:f6:38:d9:c7:79:29:51:0b:c3:d9:df:ac:f2:b3: b3:f9:2a:3e:2a:ce:88:3d:86:64:28:11:92:56:0d:c5:ad:bb: cb:73:2b:23:a3:e1:8a:53:f4:cd:26:74:e9:0d:eb:62:0c:30: 3a:fc:e4:f3:a4:fb:d1:6f:96:09:76:56:88:96:df:4c:d0:91: 5d:f3:d8:49:21:47:57:44:a8:98:98:a7:0f:44:7c:05:b5:cc: 48:a4:ca:a2:93:e7:c9:72:ba:dc:f0:43:8c:05:a3:b3:75:93: 5d:51:18:73 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDDswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkI4ODMxMTAvBgNVBAUTKDRGNUFGNTY1RDMwREQ1NEYyNDE0N0VGNUUxNzhBQTBC QUEzM0ZDMjkwHhcNMjUwODIyMTg0NTI5WhcNMjUwODI5MTg0NTI5WjAYMRYwFAYD VQQDEw02OGE4YmFjYS1hYWU4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqYALB21Ymy0yvYeKZ6UP3l/V0bUwz52TWBI/GrbhcsuUdHezx7A8pkH0vpvt RV90NttHAWnyvO/Hj5RAdEJ3Np3ZaNYuyALjO1feT/0F8ltZEHi8WAbkuLf3nvUM CElkjvAsyTfd/NingLQzuC4pau7u173688d5TLmFIQEVF4xb8w3Fk1SVckmODVjh tpgNafSJa9iigiZa4BbXGXgpuUwgVwSsX/QvffKElYajb1w7mlX4r+Mbf40D3Qy9 BWUgcAD2Ec+sbaDN4VnAKp+fL2iwTOUFpsxvqmd6WiExWf76Ss+PY6v0DJxdMTXd rI05oaAKqDgV657NsWC7lrjXfwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJnBqfzJ 2qfMQjSWOaPyt0J9320bMB8GA1UdIwQYMBaAFE9a9WXTDdVPJBR+9eF4qguqM/wp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQjg4My9FOTgyQkEzNjEw RTcxMUVBOUQyMUMyNkZDNEY5QUUwMi9UMXIxWmRNTjFVOGtGSDcxNFhpcUM2b3pf Q2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1QxcjFaZE1OMVU4a0ZINzE0WGlxQzZvel9Day5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC Qjg4My9FOTgyQkEzNjEwRTcxMUVBOUQyMUMyNkZDNEY5QUUwMi9UMXIxWmRNTjFV OGtGSDcxNFhpcUM2b3pfQ2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQButuH5aZ23zpfPactDwHjEN1XbG6hUZ0K8o12mLn9Pti+e81EysoP/ lQAfLoFaCvKt4knrdVFgxiDt6LFdF0ZNr+YWBuEEJumQzMvF4E/cuHxIHiM7Pbv0 pEi0w4pukUryJUE+Ii+eIbd8Zw/N2F7xXggBVCrprfvKBWae8BJ+yO44DBgFg5k2 UkQ5Mgvpsm4yhkgT9jjZx3kpUQvD2d+s8rOz+So+Ks6IPYZkKBGSVg3FrbvLcysj o+GKU/TNJnTpDetiDDA6/OTzpPvRb5YJdlaIlt9M0JFd89hJIUdXRKiYmKcPRHwF tcxIpMqik+fJcrrc8EOMBaOzdZNdURhz -----END CERTIFICATE-----Generated at Sun Aug 24 03:34:11 2025 by rpki-client