$ rpki-client -vvf rpki.apnic.net/member_repository/A91FDEFE/194B7920A51611EF890ECD3EC4F9AE02/T-GzX5rYKBtm9HAx9Qfg7n1UIRo.mft File: T-GzX5rYKBtm9HAx9Qfg7n1UIRo.mft (raw, json) Hash identifier: Em7wqe0QeLDawuiJMs9RVuue0fhIA65H6vuHrK9DJLQ= Subject key identifier: EF:B0:BF:51:C3:3A:11:B8:35:0A:0A:8D:89:A7:67:D5:5E:4E:20:94 Authority key identifier: 4F:E1:B3:5F:9A:D8:28:1B:66:F4:70:31:F5:07:E0:EE:7D:54:21:1A Certificate issuer: /CN=A91FDEFE/serialNumber=4FE1B35F9AD8281B66F47031F507E0EE7D54211A Certificate serial: 5D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T-GzX5rYKBtm9HAx9Qfg7n1UIRo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FDEFE/194B7920A51611EF890ECD3EC4F9AE02/T-GzX5rYKBtm9HAx9Qfg7n1UIRo.mft Manifest number: 5C Signing time: Sun 11 May 2025 05:52:47 +0000 Manifest this update: Sun 11 May 2025 05:52:47 +0000 Manifest next update: Sun 18 May 2025 05:52:47 +0000 Files and hashes: 1: T-GzX5rYKBtm9HAx9Qfg7n1UIRo.crl (hash: hIdBv7ttq+g7wLxYN5mPI3BzqDylOmxw36ynbZXRxKI=) 2: 669FD05EA53911EFBE261371C4F9AE02.roa (hash: C8BMzBjnObRwd1PN8+bj1Lr3uDFXe55TuSG2M+7J66A=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FDEFE/194B7920A51611EF890ECD3EC4F9AE02/T-GzX5rYKBtm9HAx9Qfg7n1UIRo.crl rsync://rpki.apnic.net/member_repository/A91FDEFE/194B7920A51611EF890ECD3EC4F9AE02/T-GzX5rYKBtm9HAx9Qfg7n1UIRo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T-GzX5rYKBtm9HAx9Qfg7n1UIRo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 18 May 2025 05:52:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 93 (0x5d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FDEFE, serialNumber=4FE1B35F9AD8281B66F47031F507E0EE7D54211A Validity Not Before: May 11 05:52:47 2025 GMT Not After : May 18 05:52:47 2025 GMT Subject: CN=68203b2f-ffd7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:d6:4b:99:e8:22:5e:1e:8e:11:c4:ff:5f:ac: 98:05:e5:1c:70:40:5d:31:6d:ac:b1:fc:39:23:11: de:5a:e7:2f:a3:c0:00:ee:25:50:06:b7:9d:f0:49: 76:93:28:7c:9b:35:65:92:3f:8a:71:09:32:e3:ad: 26:4c:4b:89:03:99:fa:ff:ad:f0:10:58:8d:c3:67: 90:98:f5:5c:87:5c:68:dd:74:70:a4:95:55:f1:63: 0b:92:a6:29:80:4b:e7:2c:01:f0:87:e5:2b:0b:a8: ac:fb:91:3c:88:b9:1e:4b:68:76:a4:cd:5e:81:ef: 2e:fa:f3:59:65:16:15:08:49:06:94:bb:66:e3:68: 4d:a8:ad:e8:e6:de:1f:99:ef:dd:5b:30:c1:23:17: c5:22:3c:38:70:58:c7:7a:9a:ef:48:bd:1a:2e:c0: 6c:3a:32:c3:6a:56:de:b9:00:18:c1:28:72:48:13: 25:cc:b3:76:9f:37:d5:34:ab:5a:13:57:fa:45:c2: 9d:97:39:c2:07:a8:4b:cd:a1:c7:8a:e3:87:68:77: da:18:56:7f:19:f1:16:56:e6:15:9d:b2:8a:7f:f5: e9:91:10:51:32:7b:c7:8d:8f:60:80:d3:af:4f:cd: aa:61:c1:e3:bc:d3:fe:96:a5:fa:d3:0f:40:e6:2d: 48:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:B0:BF:51:C3:3A:11:B8:35:0A:0A:8D:89:A7:67:D5:5E:4E:20:94 X509v3 Authority Key Identifier: keyid:4F:E1:B3:5F:9A:D8:28:1B:66:F4:70:31:F5:07:E0:EE:7D:54:21:1A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FDEFE/194B7920A51611EF890ECD3EC4F9AE02/T-GzX5rYKBtm9HAx9Qfg7n1UIRo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T-GzX5rYKBtm9HAx9Qfg7n1UIRo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FDEFE/194B7920A51611EF890ECD3EC4F9AE02/T-GzX5rYKBtm9HAx9Qfg7n1UIRo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 46:34:8a:27:6d:ac:84:06:4e:ea:3c:1d:9e:99:31:0b:60:7c: 00:f9:ea:2f:be:96:b0:68:6a:b9:f1:26:9b:81:b5:e6:6d:ee: 7a:47:9c:2d:ea:5a:a0:c3:f9:a4:96:e9:9d:81:da:7a:60:52: 7b:7d:9c:a2:a4:a0:90:ba:27:ff:f7:31:1b:2c:9e:ef:ff:88: 73:f5:71:20:d8:67:01:4a:c8:ae:17:ea:5d:59:9c:f0:71:91: 55:ac:aa:81:c5:28:d6:24:41:df:2f:e8:3f:f3:19:c0:eb:00: 12:7f:d3:93:17:4c:3e:1d:9f:94:0c:27:99:ef:23:dd:af:d5: bf:ac:58:aa:d5:fb:e0:ef:2c:97:54:f2:24:3c:dd:b9:65:5d: 24:83:e3:64:73:f1:6c:a9:cd:14:9f:61:27:fe:68:71:b4:11: 88:59:aa:fa:e6:92:07:ec:82:4f:84:e6:15:3f:42:8e:40:a5: 89:b2:63:93:7e:d2:f6:53:3e:de:4a:86:1a:58:b0:a9:63:8b: 34:a4:c7:74:c9:2b:d8:b8:79:14:77:b5:a2:5a:ea:61:b3:83: a4:c9:26:e0:e3:78:61:68:15:0e:59:0a:ff:1f:17:74:dd:54: 5d:4b:fd:72:89:76:5a:44:ab:2e:9a:9a:72:aa:85:08:2e:33: f4:75:ce:37 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBXTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG REVGRTExMC8GA1UEBRMoNEZFMUIzNUY5QUQ4MjgxQjY2RjQ3MDMxRjUwN0UwRUU3 RDU0MjExQTAeFw0yNTA1MTEwNTUyNDdaFw0yNTA1MTgwNTUyNDdaMBgxFjAUBgNV BAMTDTY4MjAzYjJmLWZmZDcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDn1kuZ6CJeHo4RxP9frJgF5RxwQF0xbayx/DkjEd5a5y+jwADuJVAGt53wSXaT KHybNWWSP4pxCTLjrSZMS4kDmfr/rfAQWI3DZ5CY9VyHXGjddHCklVXxYwuSpimA S+csAfCH5SsLqKz7kTyIuR5LaHakzV6B7y7681llFhUISQaUu2bjaE2orejm3h+Z 791bMMEjF8UiPDhwWMd6mu9IvRouwGw6MsNqVt65ABjBKHJIEyXMs3afN9U0q1oT V/pFwp2XOcIHqEvNoceK44dod9oYVn8Z8RZW5hWdsop/9emREFEye8eNj2CA069P zaphweO80/6WpfrTD0DmLUgHAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU77C/UcM6 Ebg1CgqNiadn1V5OIJQwHwYDVR0jBBgwFoAUT+GzX5rYKBtm9HAx9Qfg7n1UIRow DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUZERUZFLzE5NEI3OTIwQTUx NjExRUY4OTBFQ0QzRUM0RjlBRTAyL1QtR3pYNXJZS0J0bTlIQXg5UWZnN24xVUlS by5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvVC1Helg1cllLQnRtOUhBeDlRZmc3bjFVSVJvLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUZE RUZFLzE5NEI3OTIwQTUxNjExRUY4OTBFQ0QzRUM0RjlBRTAyL1QtR3pYNXJZS0J0 bTlIQXg5UWZnN24xVUlSby5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAEY0iidtrIQGTuo8HZ6ZMQtgfAD56i++lrBoarnxJpuBteZt7npHnC3q WqDD+aSW6Z2B2npgUnt9nKKkoJC6J//3MRssnu//iHP1cSDYZwFKyK4X6l1ZnPBx kVWsqoHFKNYkQd8v6D/zGcDrABJ/05MXTD4dn5QMJ5nvI92v1b+sWKrV++DvLJdU 8iQ83bllXSSD42Rz8WypzRSfYSf+aHG0EYhZqvrmkgfsgk+E5hU/Qo5ApYmyY5N+ 0vZTPt5KhhpYsKljizSkx3TJK9i4eRR3taJa6mGzg6TJJuDjeGFoFQ5ZCv8fF3Td VF1L/XKJdlpEqy6amnKqhQguM/R1zjc= -----END CERTIFICATE-----Generated at Mon May 12 19:59:47 2025 by rpki-client