$ rpki-client -vvf rpki.apnic.net/member_repository/A91BB883/E982BA3610E711EA9D21C26FC4F9AE02/T1r1ZdMN1U8kFH714XiqC6oz_Ck.mft File: T1r1ZdMN1U8kFH714XiqC6oz_Ck.mft (raw, json) Hash identifier: +53DNWU+KC9HDUlHqVR1yjPU/o4WuCq1Gf6AiHGGTSU= Subject key identifier: E7:1F:37:A4:72:0D:68:A5:43:73:C6:61:FA:CC:7D:A5:71:89:10:BE Authority key identifier: 4F:5A:F5:65:D3:0D:D5:4F:24:14:7E:F5:E1:78:AA:0B:AA:33:FC:29 Certificate issuer: /CN=A91BB883/serialNumber=4F5AF565D30DD54F24147EF5E178AA0BAA33FC29 Certificate serial: 0C22 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T1r1ZdMN1U8kFH714XiqC6oz_Ck.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BB883/E982BA3610E711EA9D21C26FC4F9AE02/T1r1ZdMN1U8kFH714XiqC6oz_Ck.mft Manifest number: 0C1A Signing time: Fri 04 Jul 2025 19:00:25 +0000 Manifest this update: Fri 04 Jul 2025 19:00:24 +0000 Manifest next update: Fri 11 Jul 2025 19:00:24 +0000 Files and hashes: 1: T1r1ZdMN1U8kFH714XiqC6oz_Ck.crl (hash: 7GbtyUnS1hJOXTD3TCtpkLUcdI1KfMjgVtFwY0VQESs=) 2: 8160C03610E911EA86FA6774C4F9AE02.roa (hash: 8XfCRrs6KyewkevpBqIWOSXTDqr80tEQ4o/AVxw5pnc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BB883/E982BA3610E711EA9D21C26FC4F9AE02/T1r1ZdMN1U8kFH714XiqC6oz_Ck.crl rsync://rpki.apnic.net/member_repository/A91BB883/E982BA3610E711EA9D21C26FC4F9AE02/T1r1ZdMN1U8kFH714XiqC6oz_Ck.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T1r1ZdMN1U8kFH714XiqC6oz_Ck.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3106 (0xc22) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BB883, serialNumber=4F5AF565D30DD54F24147EF5E178AA0BAA33FC29 Validity Not Before: Jul 4 19:00:24 2025 GMT Not After : Jul 11 19:00:24 2025 GMT Subject: CN=686824c8-188f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:94:3f:fb:6d:57:bb:13:8b:8f:73:d7:8f:6d: 10:d5:d4:27:a4:5d:77:9d:0e:88:46:4b:d9:bf:50: 4e:52:8d:d1:12:c3:e7:7c:52:57:10:2c:a2:a2:71: 42:5c:f8:6b:61:e3:ee:93:a6:05:72:e1:a0:43:83: 88:d6:f2:e5:38:40:6a:41:a3:ec:44:8f:36:d7:c1: 31:16:11:b3:77:68:3e:63:b9:d6:80:c4:91:08:db: a2:4f:cc:41:15:f4:cc:d2:b6:b3:7f:b8:df:4e:fc: 37:04:a4:a4:01:87:53:e1:ee:d4:f9:02:e9:39:ad: a9:4a:17:fd:23:46:9c:33:ec:80:72:4b:cf:09:b1: 20:8b:44:de:e7:7a:31:c0:60:26:c8:ed:f2:dd:61: 0f:7c:12:3d:32:3e:22:63:5f:f2:bf:62:b6:4d:30: 23:54:0d:a7:54:5c:9b:dd:19:b0:1b:e8:5b:07:60: 40:bc:9d:d2:07:ab:69:99:fc:7c:13:05:3e:29:0f: 29:4d:de:37:9d:fa:96:bf:68:7c:12:c8:b7:af:f7: 50:a2:de:30:ac:ff:bb:f3:be:83:7b:a7:74:70:f1: b5:8f:89:06:d6:6c:22:a0:9a:45:d8:31:da:1c:f3: 64:30:cc:f3:a6:bf:30:fe:a7:b0:9b:77:0f:b2:3b: 9a:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:1F:37:A4:72:0D:68:A5:43:73:C6:61:FA:CC:7D:A5:71:89:10:BE X509v3 Authority Key Identifier: keyid:4F:5A:F5:65:D3:0D:D5:4F:24:14:7E:F5:E1:78:AA:0B:AA:33:FC:29 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BB883/E982BA3610E711EA9D21C26FC4F9AE02/T1r1ZdMN1U8kFH714XiqC6oz_Ck.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T1r1ZdMN1U8kFH714XiqC6oz_Ck.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BB883/E982BA3610E711EA9D21C26FC4F9AE02/T1r1ZdMN1U8kFH714XiqC6oz_Ck.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 35:8f:09:0e:4a:18:23:91:0b:fa:11:1b:22:e9:49:94:cb:11: 32:73:72:bf:51:86:0d:68:49:40:ab:0b:f1:b7:52:8f:9b:47: d5:5f:7c:1b:35:75:1d:61:dd:de:5c:82:ed:85:fd:b8:30:5b: ad:34:e4:4a:30:5d:fe:1d:3d:01:cb:22:e1:d6:61:3f:2d:26: 4d:52:18:e7:d9:4d:02:05:c9:30:62:cd:b0:f3:93:b0:09:d1: d9:83:28:1e:39:2e:c4:89:8d:c2:cf:9f:57:51:91:c2:a7:b3: 1b:47:5f:40:99:18:46:b4:ee:db:9e:6d:2c:f2:c5:91:96:37: 84:e7:ea:cb:ff:e8:22:38:32:5d:ed:b5:2c:3b:3f:0b:7a:80: db:d4:6b:53:46:dc:84:2c:b2:98:ab:6b:9b:9e:8b:8c:a1:55: 4c:66:4b:7a:3e:5b:4b:af:4a:6f:75:95:f6:eb:8b:26:1a:9d: 41:3a:5c:45:b8:1d:fa:60:c7:ec:e5:0d:90:66:b4:ed:c7:f7: b6:da:3a:de:f3:d4:1a:d6:55:39:e2:01:db:ec:89:1e:97:bb: 52:30:00:6c:f1:68:69:10:0d:9d:ac:a4:c7:11:e4:db:bf:fd: b1:33:d2:92:cb:c0:bd:18:37:33:67:d0:e1:aa:f8:b8:73:c5: b3:80:17:be -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDCIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkI4ODMxMTAvBgNVBAUTKDRGNUFGNTY1RDMwREQ1NEYyNDE0N0VGNUUxNzhBQTBC QUEzM0ZDMjkwHhcNMjUwNzA0MTkwMDI0WhcNMjUwNzExMTkwMDI0WjAYMRYwFAYD VQQDEw02ODY4MjRjOC0xODhmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA45Q/+21XuxOLj3PXj20Q1dQnpF13nQ6IRkvZv1BOUo3REsPnfFJXECyionFC XPhrYePuk6YFcuGgQ4OI1vLlOEBqQaPsRI8218ExFhGzd2g+Y7nWgMSRCNuiT8xB FfTM0razf7jfTvw3BKSkAYdT4e7U+QLpOa2pShf9I0acM+yAckvPCbEgi0Te53ox wGAmyO3y3WEPfBI9Mj4iY1/yv2K2TTAjVA2nVFyb3RmwG+hbB2BAvJ3SB6tpmfx8 EwU+KQ8pTd43nfqWv2h8Esi3r/dQot4wrP+7876De6d0cPG1j4kG1mwioJpF2DHa HPNkMMzzpr8w/qewm3cPsjuaGwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOcfN6Ry DWilQ3PGYfrMfaVxiRC+MB8GA1UdIwQYMBaAFE9a9WXTDdVPJBR+9eF4qguqM/wp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQjg4My9FOTgyQkEzNjEw RTcxMUVBOUQyMUMyNkZDNEY5QUUwMi9UMXIxWmRNTjFVOGtGSDcxNFhpcUM2b3pf Q2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1QxcjFaZE1OMVU4a0ZINzE0WGlxQzZvel9Day5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC Qjg4My9FOTgyQkEzNjEwRTcxMUVBOUQyMUMyNkZDNEY5QUUwMi9UMXIxWmRNTjFV OGtGSDcxNFhpcUM2b3pfQ2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA1jwkOShgjkQv6ERsi6UmUyxEyc3K/UYYNaElAqwvxt1KPm0fVX3wb NXUdYd3eXILthf24MFutNORKMF3+HT0ByyLh1mE/LSZNUhjn2U0CBckwYs2w85Ow CdHZgygeOS7EiY3Cz59XUZHCp7MbR19AmRhGtO7bnm0s8sWRljeE5+rL/+giODJd 7bUsOz8LeoDb1GtTRtyELLKYq2ubnouMoVVMZkt6PltLr0pvdZX264smGp1BOlxF uB36YMfs5Q2QZrTtx/e22jre89Qa1lU54gHb7Ikel7tSMABs8WhpEA2drKTHEeTb v/2xM9KSy8C9GDczZ9Dhqvi4c8WzgBe+ -----END CERTIFICATE-----Generated at Sat Jul 5 11:40:18 2025 by rpki-client