$ rpki-client -vvf rpki.apnic.net/member_repository/A91FDEFE/194B7920A51611EF890ECD3EC4F9AE02/T-GzX5rYKBtm9HAx9Qfg7n1UIRo.mft File: T-GzX5rYKBtm9HAx9Qfg7n1UIRo.mft (raw, json) Hash identifier: dQu9r/8rZxDURBsijYF6B0iSmLawCOH1IETpaLqOT9Y= Subject key identifier: 0A:F2:2C:00:52:CB:C9:B0:D6:0B:0A:36:6C:21:C3:C3:3E:10:F2:F0 Authority key identifier: 4F:E1:B3:5F:9A:D8:28:1B:66:F4:70:31:F5:07:E0:EE:7D:54:21:1A Certificate issuer: /CN=A91FDEFE/serialNumber=4FE1B35F9AD8281B66F47031F507E0EE7D54211A Certificate serial: 91 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T-GzX5rYKBtm9HAx9Qfg7n1UIRo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FDEFE/194B7920A51611EF890ECD3EC4F9AE02/T-GzX5rYKBtm9HAx9Qfg7n1UIRo.mft Manifest number: 90 Signing time: Sat 23 Aug 2025 06:43:34 +0000 Manifest this update: Sat 23 Aug 2025 06:43:34 +0000 Manifest next update: Sat 30 Aug 2025 06:43:34 +0000 Files and hashes: 1: T-GzX5rYKBtm9HAx9Qfg7n1UIRo.crl (hash: OrvwxHick4IJngOmslcK457vZdSZ+CUJd2YZ+iO93Ng=) 2: 669FD05EA53911EFBE261371C4F9AE02.roa (hash: C8BMzBjnObRwd1PN8+bj1Lr3uDFXe55TuSG2M+7J66A=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FDEFE/194B7920A51611EF890ECD3EC4F9AE02/T-GzX5rYKBtm9HAx9Qfg7n1UIRo.crl rsync://rpki.apnic.net/member_repository/A91FDEFE/194B7920A51611EF890ECD3EC4F9AE02/T-GzX5rYKBtm9HAx9Qfg7n1UIRo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T-GzX5rYKBtm9HAx9Qfg7n1UIRo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 06:43:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 145 (0x91) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FDEFE, serialNumber=4FE1B35F9AD8281B66F47031F507E0EE7D54211A Validity Not Before: Aug 23 06:43:34 2025 GMT Not After : Aug 30 06:43:34 2025 GMT Subject: CN=68a96316-dad6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:2e:c8:4e:ab:f3:38:ec:2e:e3:69:71:74:38: c3:ba:e5:63:45:87:33:e3:61:b0:8e:a7:05:8c:cf: 83:4e:e5:67:26:a5:0d:4f:c9:e7:15:20:54:9d:cf: e2:86:ad:f8:29:66:62:6f:7b:45:e7:14:80:f8:34: 77:70:39:e2:7e:c3:1e:bb:0e:25:2a:cb:78:f3:d3: a9:9e:51:0f:da:cf:63:b3:1a:6a:dc:b0:2d:6b:a4: 99:8f:d1:83:9b:73:bf:90:1b:4e:08:56:10:48:f3: 65:5e:97:e2:a8:15:23:2c:2f:69:23:86:4a:fc:b5: cc:c0:e0:cd:6d:62:25:7c:15:6f:22:3d:30:7c:66: 68:97:f9:4c:b4:f8:20:11:b3:1f:fb:4f:82:a1:6f: 0a:7d:f9:f3:d8:1e:ca:5b:be:8b:b3:7c:f1:27:a2: 33:e0:c3:30:25:a1:5f:c8:17:a2:78:fa:c4:4b:46: 9e:5e:c0:6d:10:73:45:d7:ea:8f:2b:b0:d3:a9:dc: 14:b9:c1:b6:25:ab:33:14:ee:8e:07:9e:f8:68:fe: 5a:f7:be:8a:e3:33:b3:38:8e:8e:95:98:b8:b3:34: cf:7c:4f:d5:99:db:2b:8c:85:d8:1a:6b:51:70:95: 37:81:68:a5:22:34:45:8d:24:6f:8b:f4:7c:89:4b: ac:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:F2:2C:00:52:CB:C9:B0:D6:0B:0A:36:6C:21:C3:C3:3E:10:F2:F0 X509v3 Authority Key Identifier: keyid:4F:E1:B3:5F:9A:D8:28:1B:66:F4:70:31:F5:07:E0:EE:7D:54:21:1A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FDEFE/194B7920A51611EF890ECD3EC4F9AE02/T-GzX5rYKBtm9HAx9Qfg7n1UIRo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T-GzX5rYKBtm9HAx9Qfg7n1UIRo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FDEFE/194B7920A51611EF890ECD3EC4F9AE02/T-GzX5rYKBtm9HAx9Qfg7n1UIRo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 31:28:9a:de:30:2b:08:33:5a:35:55:52:70:1d:89:a0:4a:67: ff:d7:a8:dd:4a:cd:22:8a:c7:29:d1:75:37:ab:1f:41:20:97: 69:cb:6b:78:d6:ed:68:46:b2:10:14:19:22:28:a9:a4:dc:5a: f2:b5:8a:d6:d5:58:ac:f1:64:0b:29:1a:b5:b8:e7:eb:66:22: dd:0a:63:2e:42:6b:09:9e:79:77:de:5b:af:96:6e:b4:4f:f2: 35:18:36:bf:33:76:c9:ce:b6:e5:08:94:c8:88:93:18:a0:a9: 8f:a6:ee:0d:62:a0:71:59:86:af:c9:1a:d6:3d:2c:cf:64:c1: e3:a9:d7:ee:83:18:c3:62:95:57:46:c8:c6:0a:d2:c0:12:4d: e8:21:20:dc:66:8d:27:ee:57:2b:c6:10:58:63:58:60:08:7c: 0f:57:49:89:3c:a3:18:e1:d6:51:25:bb:bb:74:b8:f7:3b:28: fb:78:e0:3c:0c:e7:00:00:f5:d4:fe:03:36:10:c8:88:ea:d6: a2:f6:33:06:65:2f:cb:c5:30:51:c9:7a:d4:91:cf:d1:3d:37: ca:44:d1:5b:7a:5c:d6:83:2d:df:b4:b7:c5:38:18:a4:10:9f: c4:5b:f5:83:5e:2c:bb:f9:ff:f5:de:d4:f2:9d:91:b8:8f:20: 1b:60:c2:21 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAJEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkRFRkUxMTAvBgNVBAUTKDRGRTFCMzVGOUFEODI4MUI2NkY0NzAzMUY1MDdFMEVF N0Q1NDIxMUEwHhcNMjUwODIzMDY0MzM0WhcNMjUwODMwMDY0MzM0WjAYMRYwFAYD VQQDEw02OGE5NjMxNi1kYWQ2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0y7ITqvzOOwu42lxdDjDuuVjRYcz42GwjqcFjM+DTuVnJqUNT8nnFSBUnc/i hq34KWZib3tF5xSA+DR3cDnifsMeuw4lKst489OpnlEP2s9jsxpq3LAta6SZj9GD m3O/kBtOCFYQSPNlXpfiqBUjLC9pI4ZK/LXMwODNbWIlfBVvIj0wfGZol/lMtPgg EbMf+0+CoW8Kffnz2B7KW76Ls3zxJ6Iz4MMwJaFfyBeiePrES0aeXsBtEHNF1+qP K7DTqdwUucG2JaszFO6OB574aP5a976K4zOzOI6OlZi4szTPfE/VmdsrjIXYGmtR cJU3gWilIjRFjSRvi/R8iUusZwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAryLABS y8mw1gsKNmwhw8M+EPLwMB8GA1UdIwQYMBaAFE/hs1+a2CgbZvRwMfUH4O59VCEa MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGREVGRS8xOTRCNzkyMEE1 MTYxMUVGODkwRUNEM0VDNEY5QUUwMi9ULUd6WDVyWUtCdG05SEF4OVFmZzduMVVJ Um8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1QtR3pYNXJZS0J0bTlIQXg5UWZnN24xVUlSby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG REVGRS8xOTRCNzkyMEE1MTYxMUVGODkwRUNEM0VDNEY5QUUwMi9ULUd6WDVyWUtC dG05SEF4OVFmZzduMVVJUm8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAxKJreMCsIM1o1VVJwHYmgSmf/16jdSs0iiscp0XU3qx9BIJdpy2t4 1u1oRrIQFBkiKKmk3FrytYrW1Vis8WQLKRq1uOfrZiLdCmMuQmsJnnl33luvlm60 T/I1GDa/M3bJzrblCJTIiJMYoKmPpu4NYqBxWYavyRrWPSzPZMHjqdfugxjDYpVX RsjGCtLAEk3oISDcZo0n7lcrxhBYY1hgCHwPV0mJPKMY4dZRJbu7dLj3Oyj7eOA8 DOcAAPXU/gM2EMiI6tai9jMGZS/LxTBRyXrUkc/RPTfKRNFbelzWgy3ftLfFOBik EJ/EW/WDXiy7+f/13tTynZG4jyAbYMIh -----END CERTIFICATE-----Generated at Sat Aug 23 17:17:04 2025 by rpki-client