$ rpki-client -vvf rpki.apnic.net/member_repository/A91289A2/FB52F64E8E6311EC9E015D6DC4F9AE02/aBQMFYJe1QoDeBBSrd4uyhpv6jo.mft File: aBQMFYJe1QoDeBBSrd4uyhpv6jo.mft (raw, json) Hash identifier: u97fm9HNAEg6lLoTE3TtuWRKlaZkP4P6l98iNLOS23g= Subject key identifier: FA:CB:54:82:E4:25:E0:80:E8:84:EC:27:00:E0:48:BC:C5:EF:85:2A Authority key identifier: 68:14:0C:15:82:5E:D5:0A:03:78:10:52:AD:DE:2E:CA:1A:6F:EA:3A Certificate issuer: /CN=A91289A2/serialNumber=68140C15825ED50A03781052ADDE2ECA1A6FEA3A Certificate serial: 03BF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aBQMFYJe1QoDeBBSrd4uyhpv6jo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91289A2/FB52F64E8E6311EC9E015D6DC4F9AE02/aBQMFYJe1QoDeBBSrd4uyhpv6jo.mft Manifest number: 03B9 Signing time: Fri 09 May 2025 00:29:08 +0000 Manifest this update: Fri 09 May 2025 00:29:07 +0000 Manifest next update: Fri 16 May 2025 00:29:07 +0000 Files and hashes: 1: aBQMFYJe1QoDeBBSrd4uyhpv6jo.crl (hash: jc+q5N4xpJxWGmpsi9H5dp90vHrs4Rav5s89/IN8SwY=) 2: 97E8ACD68E6611EC9EBE626FC4F9AE02.roa (hash: tLChoqAT+qMzYdiOem/hyADnIcDAlpuqVUc6loXrSu8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91289A2/FB52F64E8E6311EC9E015D6DC4F9AE02/aBQMFYJe1QoDeBBSrd4uyhpv6jo.crl rsync://rpki.apnic.net/member_repository/A91289A2/FB52F64E8E6311EC9E015D6DC4F9AE02/aBQMFYJe1QoDeBBSrd4uyhpv6jo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aBQMFYJe1QoDeBBSrd4uyhpv6jo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 16 May 2025 00:29:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 959 (0x3bf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91289A2, serialNumber=68140C15825ED50A03781052ADDE2ECA1A6FEA3A Validity Not Before: May 9 00:29:07 2025 GMT Not After : May 16 00:29:07 2025 GMT Subject: CN=681d4c54-2bb4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:45:e2:f4:7a:70:23:aa:e7:79:50:32:1f:90: 5b:5d:d8:e8:90:43:7f:45:4d:5e:72:ab:90:41:0d: bc:b8:d0:e1:c3:af:b7:ad:ac:09:03:5f:20:05:85: 37:43:7e:ae:e4:fd:4d:b2:b8:ab:24:e4:ca:a3:d1: b3:d7:65:d2:e5:55:55:de:b1:ff:b9:28:ee:d4:c6: 52:19:d2:aa:32:4b:64:35:3a:85:25:08:4b:e2:90: 2e:9c:c3:5c:ce:2d:e0:ec:27:cd:f7:dd:e8:60:2a: df:cc:60:f1:af:47:6c:60:7b:fb:94:a9:6e:dd:97: 76:c1:6a:a6:f9:85:e5:10:7a:c4:83:b1:68:e1:cf: 28:ed:eb:9a:e2:c2:46:02:f5:1c:67:57:2d:2b:cf: e9:08:fd:40:40:62:8e:90:8d:e1:df:87:f5:5a:6f: 91:fd:eb:39:00:99:4f:fa:02:2c:22:6a:2c:9b:66: e3:25:bf:65:5b:4b:55:a2:73:f3:71:2e:15:c1:df: e7:e4:ee:f0:58:fd:5c:79:e9:68:ac:ed:e5:8d:96: 32:e5:2a:34:05:f7:da:6c:f3:a5:38:df:a2:12:2a: 6c:10:df:e1:84:96:9c:cd:15:68:0f:4d:09:30:70: ee:72:54:e8:71:f3:a5:9a:dd:98:d2:63:65:d9:92: 8d:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:CB:54:82:E4:25:E0:80:E8:84:EC:27:00:E0:48:BC:C5:EF:85:2A X509v3 Authority Key Identifier: keyid:68:14:0C:15:82:5E:D5:0A:03:78:10:52:AD:DE:2E:CA:1A:6F:EA:3A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91289A2/FB52F64E8E6311EC9E015D6DC4F9AE02/aBQMFYJe1QoDeBBSrd4uyhpv6jo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aBQMFYJe1QoDeBBSrd4uyhpv6jo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91289A2/FB52F64E8E6311EC9E015D6DC4F9AE02/aBQMFYJe1QoDeBBSrd4uyhpv6jo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 91:a1:b2:fb:7f:ae:15:ca:62:6d:39:29:41:94:1e:36:95:db: 3e:a3:0a:ac:e9:ad:60:01:d1:6b:bf:0f:cc:0f:33:98:4d:ef: a1:4a:e9:f3:b9:4c:71:87:24:34:87:02:25:d2:23:d2:ea:c9: 78:ee:0e:ac:c0:47:65:67:20:58:0e:a7:98:d2:a7:23:cc:a8: 72:c1:99:51:88:d2:5b:67:7f:04:9d:80:e1:48:4f:7b:53:c0: 60:7c:e1:ec:99:0c:93:ea:35:99:22:64:4c:30:32:3a:f0:88: 8d:39:aa:9a:41:0f:6a:8f:d8:47:69:8d:aa:5f:76:54:1e:2e: bf:97:50:9d:a0:72:c9:a1:2f:df:36:15:61:1c:98:3e:17:00: 55:d8:aa:2a:78:c3:c7:49:af:48:da:43:b9:18:48:d3:9b:94: f8:9c:9c:8f:54:3d:64:7c:2d:8f:06:23:38:2a:31:a9:bd:bb: ef:7e:fc:5c:a5:67:d2:5b:c9:bf:7a:f5:ec:cc:f4:fd:ab:43: 56:24:b1:02:37:53:fc:70:8c:98:b0:9d:10:36:60:b4:ce:4f: 0f:7f:8e:53:9e:db:80:c9:6c:c5:03:59:19:e2:a9:be:d5:83: f7:00:30:3f:a0:c7:b6:6d:fc:72:43:e9:e1:c3:53:a1:3b:fd: 0b:b0:6c:bb -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA78wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Mjg5QTIxMTAvBgNVBAUTKDY4MTQwQzE1ODI1RUQ1MEEwMzc4MTA1MkFEREUyRUNB MUE2RkVBM0EwHhcNMjUwNTA5MDAyOTA3WhcNMjUwNTE2MDAyOTA3WjAYMRYwFAYD VQQDEw02ODFkNGM1NC0yYmI0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArUXi9HpwI6rneVAyH5BbXdjokEN/RU1ecquQQQ28uNDhw6+3rawJA18gBYU3 Q36u5P1NsrirJOTKo9Gz12XS5VVV3rH/uSju1MZSGdKqMktkNTqFJQhL4pAunMNc zi3g7CfN993oYCrfzGDxr0dsYHv7lKlu3Zd2wWqm+YXlEHrEg7Fo4c8o7eua4sJG AvUcZ1ctK8/pCP1AQGKOkI3h34f1Wm+R/es5AJlP+gIsImosm2bjJb9lW0tVonPz cS4Vwd/n5O7wWP1ceelorO3ljZYy5So0BffabPOlON+iEipsEN/hhJaczRVoD00J MHDuclTocfOlmt2Y0mNl2ZKNtQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPrLVILk JeCA6ITsJwDgSLzF74UqMB8GA1UdIwQYMBaAFGgUDBWCXtUKA3gQUq3eLsoab+o6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyODlBMi9GQjUyRjY0RThF NjMxMUVDOUUwMTVENkRDNEY5QUUwMi9hQlFNRllKZTFRb0RlQkJTcmQ0dXlocHY2 am8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2FCUU1GWUplMVFvRGVCQlNyZDR1eWhwdjZqby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy ODlBMi9GQjUyRjY0RThFNjMxMUVDOUUwMTVENkRDNEY5QUUwMi9hQlFNRllKZTFR b0RlQkJTcmQ0dXlocHY2am8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCRobL7f64VymJtOSlBlB42lds+owqs6a1gAdFrvw/MDzOYTe+hSunz uUxxhyQ0hwIl0iPS6sl47g6swEdlZyBYDqeY0qcjzKhywZlRiNJbZ38EnYDhSE97 U8BgfOHsmQyT6jWZImRMMDI68IiNOaqaQQ9qj9hHaY2qX3ZUHi6/l1CdoHLJoS/f NhVhHJg+FwBV2KoqeMPHSa9I2kO5GEjTm5T4nJyPVD1kfC2PBiM4KjGpvbvvfvxc pWfSW8m/evXszPT9q0NWJLECN1P8cIyYsJ0QNmC0zk8Pf45TntuAyWzFA1kZ4qm+ 1YP3ADA/oMe2bfxyQ+nhw1OhO/0LsGy7 -----END CERTIFICATE-----Generated at Fri May 9 02:47:26 2025 by rpki-client