$ rpki-client -vvf rpki.apnic.net/member_repository/A91BF4A1/0F587A88B1CC11ED85F25A3DC4F9AE02/T-5HlDq-E-OFVqc8KBuQ41SSN9w.mft File: T-5HlDq-E-OFVqc8KBuQ41SSN9w.mft (raw, json) Hash identifier: J5rB7/N/11xPE9LPXNX5PQ8RZd2DfiYXeUqE1OaNGnQ= Subject key identifier: CD:61:8D:7C:EF:79:E9:8A:82:84:A4:AB:23:7E:8F:0C:C8:D5:91:6A Authority key identifier: 4F:EE:47:94:3A:BE:13:E3:85:56:A7:3C:28:1B:90:E3:54:92:37:DC Certificate issuer: /CN=A91BF4A1/serialNumber=4FEE47943ABE13E38556A73C281B90E3549237DC Certificate serial: 01C6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T-5HlDq-E-OFVqc8KBuQ41SSN9w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BF4A1/0F587A88B1CC11ED85F25A3DC4F9AE02/T-5HlDq-E-OFVqc8KBuQ41SSN9w.mft Manifest number: 01BF Signing time: Thu 03 Jul 2025 03:07:58 +0000 Manifest this update: Thu 03 Jul 2025 03:07:58 +0000 Manifest next update: Thu 10 Jul 2025 03:07:58 +0000 Files and hashes: 1: T-5HlDq-E-OFVqc8KBuQ41SSN9w.crl (hash: a3dmzvLqZUyq7TFKILFCqaQiJ01uG867ytzH+vg8B+U=) 2: 4405F70C03AE11F08ECE4754C4F9AE02.roa (hash: KSItAPOjkLG7UWPYALBIyJeHmExySZ4KDwSB7GWXFrI=) 3: 9AB64290908211EF9877C022C4F9AE02.roa (hash: 53832RqqEhC0WAnEbw/uqzZOjibGBYS5qoQ5I8q+Q+o=) 4: B780E2A097F711EF89B09770C4F9AE02.roa (hash: DB23UT2fsXrp5BzUdZvw+7TC7FTSDlXyxizqnQeaxYs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BF4A1/0F587A88B1CC11ED85F25A3DC4F9AE02/T-5HlDq-E-OFVqc8KBuQ41SSN9w.crl rsync://rpki.apnic.net/member_repository/A91BF4A1/0F587A88B1CC11ED85F25A3DC4F9AE02/T-5HlDq-E-OFVqc8KBuQ41SSN9w.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T-5HlDq-E-OFVqc8KBuQ41SSN9w.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:07:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 454 (0x1c6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BF4A1, serialNumber=4FEE47943ABE13E38556A73C281B90E3549237DC Validity Not Before: Jul 3 03:07:58 2025 GMT Not After : Jul 10 03:07:58 2025 GMT Subject: CN=6865f40e-c5ac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:e3:bb:42:0e:d7:93:b1:3a:fd:64:18:3e:23: 2e:e4:ed:c7:d8:b0:e3:53:8c:b1:57:87:9a:b5:a0: 6e:e6:0d:95:f6:4c:41:95:ff:0b:3c:1b:72:c8:15: 06:08:83:e5:8a:35:30:80:29:a1:52:63:89:a1:e0: 02:df:be:7b:e8:55:9b:f2:f9:f0:b4:5e:90:71:18: 74:dd:04:48:d2:77:bc:6c:03:6d:55:f5:d9:ee:29: 4c:a1:87:94:59:12:35:64:6e:91:30:86:ec:00:58: bf:0d:42:f5:50:c8:45:bd:82:f9:1e:15:80:68:29: 31:19:52:d9:49:67:fc:b3:eb:ba:c6:10:8c:5b:f9: 89:4a:49:07:6f:3f:d0:1d:cf:a8:37:1b:13:d8:58: b6:2d:90:7b:51:19:79:2c:1d:66:e3:9f:ab:49:d7: 03:7c:4d:73:d8:36:a8:df:87:c9:d6:b5:06:96:1d: 58:84:03:c2:b4:e9:a1:0b:34:1b:17:9c:6e:b8:03: c8:05:4b:08:aa:b7:00:d9:cb:e8:30:b9:a1:f5:39: 25:f1:3e:45:ef:54:77:a8:6d:5c:06:e7:eb:72:57: 93:52:8f:c6:8e:ab:bf:c1:09:58:e8:01:bd:8a:0d: 9a:7d:99:96:bc:2b:63:be:9e:4c:50:0d:80:3f:f4: ef:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:61:8D:7C:EF:79:E9:8A:82:84:A4:AB:23:7E:8F:0C:C8:D5:91:6A X509v3 Authority Key Identifier: keyid:4F:EE:47:94:3A:BE:13:E3:85:56:A7:3C:28:1B:90:E3:54:92:37:DC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BF4A1/0F587A88B1CC11ED85F25A3DC4F9AE02/T-5HlDq-E-OFVqc8KBuQ41SSN9w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T-5HlDq-E-OFVqc8KBuQ41SSN9w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BF4A1/0F587A88B1CC11ED85F25A3DC4F9AE02/T-5HlDq-E-OFVqc8KBuQ41SSN9w.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 26:58:a9:34:f9:0b:7b:13:6f:5b:a7:7c:8e:5b:69:58:13:4d: a7:60:81:69:e0:30:e3:14:d5:c5:d3:dc:a6:be:28:29:14:64: 2b:6b:6a:bd:7b:d9:91:b6:7b:62:5c:c6:0a:fd:ab:d5:05:c9: b9:4f:61:1b:cd:ca:0c:0d:6f:d5:87:f7:5d:87:46:15:1d:dc: 0b:d5:16:14:eb:77:95:48:f0:9b:94:fc:35:6e:3b:09:58:1e: 45:55:11:6d:37:18:db:cd:b4:9f:50:4a:8f:06:fb:f9:fc:1e: b6:c3:5a:a3:aa:56:f2:36:b0:8e:67:be:1b:f3:32:c2:b9:12: 12:df:d7:6d:76:42:47:8f:b2:b6:3c:01:2b:7f:e4:8e:41:a0: d2:37:fb:11:25:2b:88:21:07:77:10:1d:77:fa:f8:2b:0b:4d: 52:92:65:66:cd:7b:92:5a:8a:7d:16:6b:82:69:40:40:f7:ff: f3:29:5f:c4:1f:93:ec:94:08:34:f6:32:a3:51:3a:92:a2:50: f4:d6:82:d1:d9:9c:54:19:3d:c1:09:cc:1c:05:fb:47:34:df: 44:ba:a5:ff:bb:e8:9d:c9:fa:ce:e1:9a:1d:d6:4b:aa:77:70: 9d:f4:c4:43:be:ee:74:cd:79:f8:06:98:fb:80:37:2b:19:14: b8:76:f7:f7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAcYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkY0QTExMTAvBgNVBAUTKDRGRUU0Nzk0M0FCRTEzRTM4NTU2QTczQzI4MUI5MEUz NTQ5MjM3REMwHhcNMjUwNzAzMDMwNzU4WhcNMjUwNzEwMDMwNzU4WjAYMRYwFAYD VQQDEw02ODY1ZjQwZS1jNWFjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv+O7Qg7Xk7E6/WQYPiMu5O3H2LDjU4yxV4eataBu5g2V9kxBlf8LPBtyyBUG CIPlijUwgCmhUmOJoeAC37576FWb8vnwtF6QcRh03QRI0ne8bANtVfXZ7ilMoYeU WRI1ZG6RMIbsAFi/DUL1UMhFvYL5HhWAaCkxGVLZSWf8s+u6xhCMW/mJSkkHbz/Q Hc+oNxsT2Fi2LZB7URl5LB1m45+rSdcDfE1z2Dao34fJ1rUGlh1YhAPCtOmhCzQb F5xuuAPIBUsIqrcA2cvoMLmh9Tkl8T5F71R3qG1cBufrcleTUo/Gjqu/wQlY6AG9 ig2afZmWvCtjvp5MUA2AP/TvuwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFM1hjXzv eemKgoSkqyN+jwzI1ZFqMB8GA1UdIwQYMBaAFE/uR5Q6vhPjhVanPCgbkONUkjfc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCRjRBMS8wRjU4N0E4OEIx Q0MxMUVEODVGMjVBM0RDNEY5QUUwMi9ULTVIbERxLUUtT0ZWcWM4S0J1UTQxU1NO OXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1QtNUhsRHEtRS1PRlZxYzhLQnVRNDFTU045dy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC RjRBMS8wRjU4N0E4OEIxQ0MxMUVEODVGMjVBM0RDNEY5QUUwMi9ULTVIbERxLUUt T0ZWcWM4S0J1UTQxU1NOOXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAmWKk0+Qt7E29bp3yOW2lYE02nYIFp4DDjFNXF09ymvigpFGQra2q9 e9mRtntiXMYK/avVBcm5T2EbzcoMDW/Vh/ddh0YVHdwL1RYU63eVSPCblPw1bjsJ WB5FVRFtNxjbzbSfUEqPBvv5/B62w1qjqlbyNrCOZ74b8zLCuRIS39dtdkJHj7K2 PAErf+SOQaDSN/sRJSuIIQd3EB13+vgrC01SkmVmzXuSWop9FmuCaUBA9//zKV/E H5PslAg09jKjUTqSolD01oLR2ZxUGT3BCcwcBftHNN9EuqX/u+idyfrO4Zod1kuq d3Cd9MRDvu50zXn4Bpj7gDcrGRS4dvf3 -----END CERTIFICATE-----Generated at Thu Jul 3 05:07:44 2025 by rpki-client