$ rpki-client -vvf rpki.apnic.net/member_repository/A91BF4A1/0F587A88B1CC11ED85F25A3DC4F9AE02/T-5HlDq-E-OFVqc8KBuQ41SSN9w.mft File: T-5HlDq-E-OFVqc8KBuQ41SSN9w.mft (raw, json) Hash identifier: 18c+FAm/77nm1IpdXEItsaPK6hzXeyRfIkNgSDz6ATA= Subject key identifier: 2E:C4:58:48:21:80:FD:1B:0A:1F:6F:46:0D:21:D1:BC:AA:E9:8D:51 Authority key identifier: 4F:EE:47:94:3A:BE:13:E3:85:56:A7:3C:28:1B:90:E3:54:92:37:DC Certificate issuer: /CN=A91BF4A1/serialNumber=4FEE47943ABE13E38556A73C281B90E3549237DC Certificate serial: 01E0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T-5HlDq-E-OFVqc8KBuQ41SSN9w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BF4A1/0F587A88B1CC11ED85F25A3DC4F9AE02/T-5HlDq-E-OFVqc8KBuQ41SSN9w.mft Manifest number: 01D9 Signing time: Sat 23 Aug 2025 02:53:08 +0000 Manifest this update: Sat 23 Aug 2025 02:53:07 +0000 Manifest next update: Sat 30 Aug 2025 02:53:07 +0000 Files and hashes: 1: T-5HlDq-E-OFVqc8KBuQ41SSN9w.crl (hash: 3RafjWvImZ68GWb4/X0eOEHX1PMsBg5XBdrB+nD7+40=) 2: 4405F70C03AE11F08ECE4754C4F9AE02.roa (hash: KSItAPOjkLG7UWPYALBIyJeHmExySZ4KDwSB7GWXFrI=) 3: 9AB64290908211EF9877C022C4F9AE02.roa (hash: 53832RqqEhC0WAnEbw/uqzZOjibGBYS5qoQ5I8q+Q+o=) 4: B780E2A097F711EF89B09770C4F9AE02.roa (hash: DB23UT2fsXrp5BzUdZvw+7TC7FTSDlXyxizqnQeaxYs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BF4A1/0F587A88B1CC11ED85F25A3DC4F9AE02/T-5HlDq-E-OFVqc8KBuQ41SSN9w.crl rsync://rpki.apnic.net/member_repository/A91BF4A1/0F587A88B1CC11ED85F25A3DC4F9AE02/T-5HlDq-E-OFVqc8KBuQ41SSN9w.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T-5HlDq-E-OFVqc8KBuQ41SSN9w.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 02:53:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 480 (0x1e0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BF4A1, serialNumber=4FEE47943ABE13E38556A73C281B90E3549237DC Validity Not Before: Aug 23 02:53:07 2025 GMT Not After : Aug 30 02:53:07 2025 GMT Subject: CN=68a92d13-1d7a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:1c:f2:9e:b3:a1:2a:c5:e6:a0:98:f6:59:4b: e8:57:96:79:19:40:bd:a8:64:8b:90:e9:29:d2:32: cb:96:4e:7d:98:6e:b6:39:bb:54:4e:f6:de:95:8a: 7a:b9:a3:bc:77:92:2a:ba:5d:51:89:bc:78:23:c6: a1:0e:17:af:9f:f6:db:95:85:df:5c:eb:ac:6e:0a: 4f:6f:6d:9f:11:ff:6d:d5:f8:0c:64:d0:07:4e:e3: 85:7a:7d:b5:d5:40:77:cd:57:6b:6a:ef:c0:39:d0: 45:b3:45:25:5c:c3:2e:77:6f:29:c1:77:4e:a2:4e: 3a:e8:5f:d9:42:8c:06:27:51:32:2a:dd:ab:78:8f: 4d:9a:ee:b3:e6:d6:24:07:02:1c:b3:54:5c:90:2f: ab:1a:d3:b5:f2:3a:c2:30:2f:1f:1d:0f:12:bb:ee: 3e:73:21:36:2e:bd:51:43:0b:d0:28:1a:7a:35:68: 0b:7e:27:9e:ed:60:e8:7e:ee:d1:b5:5d:3c:a8:7e: 00:df:8d:60:9b:8a:52:bd:47:d0:a0:b6:79:ea:70: e3:8d:77:5f:79:7e:ef:0e:ee:15:ed:62:83:f1:67: 01:17:5d:a0:ce:97:c4:ee:7b:a2:b0:88:51:7a:e5: 66:81:c1:10:fe:21:75:92:d5:f6:92:5d:8b:03:2a: 98:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:C4:58:48:21:80:FD:1B:0A:1F:6F:46:0D:21:D1:BC:AA:E9:8D:51 X509v3 Authority Key Identifier: keyid:4F:EE:47:94:3A:BE:13:E3:85:56:A7:3C:28:1B:90:E3:54:92:37:DC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BF4A1/0F587A88B1CC11ED85F25A3DC4F9AE02/T-5HlDq-E-OFVqc8KBuQ41SSN9w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T-5HlDq-E-OFVqc8KBuQ41SSN9w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BF4A1/0F587A88B1CC11ED85F25A3DC4F9AE02/T-5HlDq-E-OFVqc8KBuQ41SSN9w.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ad:3c:a8:37:66:47:b9:4b:c9:9a:cf:43:07:fa:3b:d5:0c:f3: 2a:36:b1:f4:c2:84:8a:96:19:03:90:d0:d1:47:c1:a1:c8:e3: 1b:88:7d:3c:b7:3b:7e:e3:4b:c5:ba:9f:60:2e:15:e9:42:03: d7:2e:87:d6:a5:59:9c:b0:d6:04:59:ec:b8:2c:cd:f7:fa:27: 11:b9:3a:30:7f:4e:2c:c5:e5:69:d8:2c:99:bc:90:ac:29:a6: af:00:73:11:88:14:de:6a:a2:fb:98:81:15:a4:72:e8:93:ec: 5a:08:02:71:93:1f:1c:16:d0:68:55:d6:8f:91:c5:4c:23:f6: 78:c6:76:e3:05:cf:c0:16:b4:da:ab:4d:1a:0b:58:3d:65:3e: 26:71:c4:4e:b0:9c:14:33:62:76:32:4a:75:b0:e3:32:5a:39: b9:b1:1b:ed:02:94:df:64:da:a4:0b:49:70:de:2c:17:64:cd: 32:07:a5:79:1b:f3:7d:fe:c9:c2:48:59:29:c8:e7:fb:14:89: 40:3e:b2:cf:8b:d1:d6:58:18:be:ea:ad:d6:05:05:0e:d8:92: 7e:2e:2f:6b:a8:8d:f1:87:5f:27:e1:26:9d:5f:ff:45:88:31: c0:5a:ef:a2:5d:92:e6:85:f7:12:dc:de:ae:f8:43:86:0c:7e: bf:78:67:f1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAeAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkY0QTExMTAvBgNVBAUTKDRGRUU0Nzk0M0FCRTEzRTM4NTU2QTczQzI4MUI5MEUz NTQ5MjM3REMwHhcNMjUwODIzMDI1MzA3WhcNMjUwODMwMDI1MzA3WjAYMRYwFAYD VQQDEw02OGE5MmQxMy0xZDdhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2hzynrOhKsXmoJj2WUvoV5Z5GUC9qGSLkOkp0jLLlk59mG62ObtUTvbelYp6 uaO8d5Iqul1Ribx4I8ahDhevn/bblYXfXOusbgpPb22fEf9t1fgMZNAHTuOFen21 1UB3zVdrau/AOdBFs0UlXMMud28pwXdOok466F/ZQowGJ1EyKt2reI9Nmu6z5tYk BwIcs1RckC+rGtO18jrCMC8fHQ8Su+4+cyE2Lr1RQwvQKBp6NWgLfiee7WDofu7R tV08qH4A341gm4pSvUfQoLZ56nDjjXdfeX7vDu4V7WKD8WcBF12gzpfE7nuisIhR euVmgcEQ/iF1ktX2kl2LAyqYFwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFC7EWEgh gP0bCh9vRg0h0byq6Y1RMB8GA1UdIwQYMBaAFE/uR5Q6vhPjhVanPCgbkONUkjfc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCRjRBMS8wRjU4N0E4OEIx Q0MxMUVEODVGMjVBM0RDNEY5QUUwMi9ULTVIbERxLUUtT0ZWcWM4S0J1UTQxU1NO OXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1QtNUhsRHEtRS1PRlZxYzhLQnVRNDFTU045dy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC RjRBMS8wRjU4N0E4OEIxQ0MxMUVEODVGMjVBM0RDNEY5QUUwMi9ULTVIbERxLUUt T0ZWcWM4S0J1UTQxU1NOOXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCtPKg3Zke5S8maz0MH+jvVDPMqNrH0woSKlhkDkNDRR8GhyOMbiH08 tzt+40vFup9gLhXpQgPXLofWpVmcsNYEWey4LM33+icRuTowf04sxeVp2CyZvJCs KaavAHMRiBTeaqL7mIEVpHLok+xaCAJxkx8cFtBoVdaPkcVMI/Z4xnbjBc/AFrTa q00aC1g9ZT4mccROsJwUM2J2Mkp1sOMyWjm5sRvtApTfZNqkC0lw3iwXZM0yB6V5 G/N9/snCSFkpyOf7FIlAPrLPi9HWWBi+6q3WBQUO2JJ+Li9rqI3xh18n4SadX/9F iDHAWu+iXZLmhfcS3N6u+EOGDH6/eGfx -----END CERTIFICATE-----Generated at Sat Aug 23 19:12:54 2025 by rpki-client