$ rpki-client -vvf rpki.apnic.net/member_repository/A91B9C74/44CC971E4E1F11EDB3E6CC2FC4F9AE02/ABN5IHjRGy-UAw18O-71ATKibUA.mft File: ABN5IHjRGy-UAw18O-71ATKibUA.mft (raw, json) Hash identifier: j+KNcjqDlQ+8KC8vOy4z6sEWpj0oU6J9yJA3lVyfztA= Subject key identifier: BA:61:9C:E5:54:2F:3C:B3:B4:37:17:61:4F:D1:43:2B:2C:56:70:61 Authority key identifier: 00:13:79:20:78:D1:1B:2F:94:03:0D:7C:3B:EE:F5:01:32:A2:6D:40 Certificate issuer: /CN=A91B9C74/serialNumber=0013792078D11B2F94030D7C3BEEF50132A26D40 Certificate serial: 0228 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ABN5IHjRGy-UAw18O-71ATKibUA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B9C74/44CC971E4E1F11EDB3E6CC2FC4F9AE02/ABN5IHjRGy-UAw18O-71ATKibUA.mft Manifest number: 021D Signing time: Sat 23 Aug 2025 02:14:48 +0000 Manifest this update: Sat 23 Aug 2025 02:14:48 +0000 Manifest next update: Sat 30 Aug 2025 02:14:48 +0000 Files and hashes: 1: ABN5IHjRGy-UAw18O-71ATKibUA.crl (hash: 2dWpMl3bod2kJvjODwnUDM752ap99dZM37aQ1P7lPBE=) 2: F853742A5A9911EDA14F453FC4F9AE02.roa (hash: KraWg2S7y0V2b10B2mX+HUVf2KSluU5nYap1xQfIHpI=) 3: 273E7B284E2311EDB6F68A4AC4F9AE02.roa (hash: hm2JBw4RijcoPdIwahJRqhi4gARjxEI7uzccrW/R3X8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B9C74/44CC971E4E1F11EDB3E6CC2FC4F9AE02/ABN5IHjRGy-UAw18O-71ATKibUA.crl rsync://rpki.apnic.net/member_repository/A91B9C74/44CC971E4E1F11EDB3E6CC2FC4F9AE02/ABN5IHjRGy-UAw18O-71ATKibUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ABN5IHjRGy-UAw18O-71ATKibUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 02:14:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 552 (0x228) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B9C74, serialNumber=0013792078D11B2F94030D7C3BEEF50132A26D40 Validity Not Before: Aug 23 02:14:48 2025 GMT Not After : Aug 30 02:14:48 2025 GMT Subject: CN=68a92418-b0bb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:9e:da:b7:d0:4c:67:c5:84:45:57:47:af:79: 72:07:fe:ec:00:8b:e0:82:c4:ed:30:6a:9e:8c:a7: 0f:f5:5d:80:3a:e2:c3:8f:3d:ab:bc:b5:17:ce:65: 36:b6:f0:c6:85:06:40:35:4a:58:c1:22:9e:70:17: 4e:92:ca:21:8d:ed:bd:73:3f:35:14:dd:32:af:f1: fd:a7:6f:7b:d7:cb:53:2e:6a:22:da:af:a6:f0:38: e4:d2:20:98:10:c6:31:a1:a3:c4:c6:28:c6:79:bf: 9c:e3:41:ef:03:88:a1:71:70:13:2f:45:93:8f:3a: af:a3:bb:37:d9:a0:eb:e6:4e:65:81:8b:38:66:4d: 06:88:fb:23:32:56:50:ff:c8:c1:ff:f3:e1:09:88: 2d:83:cc:a1:00:a5:0e:77:d7:91:05:9f:29:2c:25: 3a:a9:93:fc:ec:59:32:f3:c0:92:e0:1b:c6:3d:7d: c9:ef:c2:64:e2:97:b6:02:61:77:86:48:02:be:27: 90:4f:8d:e6:9f:17:9c:62:aa:f6:92:c0:b9:d9:fc: 83:b6:42:92:64:41:ce:c8:89:06:85:65:33:62:01: c1:69:c3:c3:28:b3:9b:65:ae:5d:8f:15:95:07:5f: 48:2b:4b:88:3c:0e:5f:29:17:26:fa:fb:6a:69:fc: 6d:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:61:9C:E5:54:2F:3C:B3:B4:37:17:61:4F:D1:43:2B:2C:56:70:61 X509v3 Authority Key Identifier: keyid:00:13:79:20:78:D1:1B:2F:94:03:0D:7C:3B:EE:F5:01:32:A2:6D:40 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B9C74/44CC971E4E1F11EDB3E6CC2FC4F9AE02/ABN5IHjRGy-UAw18O-71ATKibUA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ABN5IHjRGy-UAw18O-71ATKibUA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B9C74/44CC971E4E1F11EDB3E6CC2FC4F9AE02/ABN5IHjRGy-UAw18O-71ATKibUA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption d5:c0:3e:38:2f:6a:05:a8:3e:5a:51:5f:38:0f:d7:f5:47:87: ad:9f:85:49:46:ba:71:9f:e5:cb:cd:53:0f:2f:47:b7:1a:b3: ef:c0:0e:6a:7d:40:92:33:df:3d:77:36:63:a3:c0:35:bf:f0: 1a:85:df:24:7e:f4:36:da:39:1b:08:06:13:10:0a:f1:28:d6: 8f:00:7f:04:2e:a0:00:40:0d:d8:96:bd:db:87:eb:c1:64:c1: b3:20:b4:06:a2:3d:f7:9f:c4:62:82:4b:21:50:bc:fa:39:e2: ab:3f:21:72:37:dd:c1:f8:6c:40:40:a5:f7:b6:49:53:ef:b0: 1f:41:a7:ae:3c:19:3b:af:6d:44:30:b8:90:ab:cd:9e:ab:f6: ba:e9:cd:a9:6a:00:ec:c6:1d:61:59:26:97:32:a5:a0:ca:9f: bd:99:1f:d9:78:5a:ae:2b:92:6f:3a:01:8b:4f:3b:aa:b5:09: a6:3e:dd:58:70:df:82:5d:4b:a3:03:11:32:70:07:bd:e9:fd: cb:a4:35:34:6e:e2:de:0e:31:03:ff:88:52:9f:e8:21:74:76: 31:fe:b5:34:f2:1a:05:f5:95:22:bc:8e:b6:a1:ee:07:06:46: 48:32:50:ab:29:57:aa:33:63:ad:1f:eb:ed:33:f8:55:db:dd: da:b9:27:4b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAigwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjlDNzQxMTAvBgNVBAUTKDAwMTM3OTIwNzhEMTFCMkY5NDAzMEQ3QzNCRUVGNTAx MzJBMjZENDAwHhcNMjUwODIzMDIxNDQ4WhcNMjUwODMwMDIxNDQ4WjAYMRYwFAYD VQQDEw02OGE5MjQxOC1iMGJiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuJ7at9BMZ8WERVdHr3lyB/7sAIvggsTtMGqejKcP9V2AOuLDjz2rvLUXzmU2 tvDGhQZANUpYwSKecBdOksohje29cz81FN0yr/H9p29718tTLmoi2q+m8Djk0iCY EMYxoaPExijGeb+c40HvA4ihcXATL0WTjzqvo7s32aDr5k5lgYs4Zk0GiPsjMlZQ /8jB//PhCYgtg8yhAKUOd9eRBZ8pLCU6qZP87Fky88CS4BvGPX3J78Jk4pe2AmF3 hkgCvieQT43mnxecYqr2ksC52fyDtkKSZEHOyIkGhWUzYgHBacPDKLObZa5djxWV B19IK0uIPA5fKRcm+vtqafxtxwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLphnOVU LzyztDcXYU/RQyssVnBhMB8GA1UdIwQYMBaAFAATeSB40RsvlAMNfDvu9QEyom1A MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCOUM3NC80NENDOTcxRTRF MUYxMUVEQjNFNkNDMkZDNEY5QUUwMi9BQk41SUhqUkd5LVVBdzE4Ty03MUFUS2li VUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0FCTjVJSGpSR3ktVUF3MThPLTcxQVRLaWJVQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC OUM3NC80NENDOTcxRTRFMUYxMUVEQjNFNkNDMkZDNEY5QUUwMi9BQk41SUhqUkd5 LVVBdzE4Ty03MUFUS2liVUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDVwD44L2oFqD5aUV84D9f1R4etn4VJRrpxn+XLzVMPL0e3GrPvwA5q fUCSM989dzZjo8A1v/Aahd8kfvQ22jkbCAYTEArxKNaPAH8ELqAAQA3Ylr3bh+vB ZMGzILQGoj33n8RigkshULz6OeKrPyFyN93B+GxAQKX3tklT77AfQaeuPBk7r21E MLiQq82eq/a66c2pagDsxh1hWSaXMqWgyp+9mR/ZeFquK5JvOgGLTzuqtQmmPt1Y cN+CXUujAxEycAe96f3LpDU0buLeDjED/4hSn+ghdHYx/rU08hoF9ZUivI62oe4H BkZIMlCrKVeqM2OtH+vtM/hV293auSdL -----END CERTIFICATE-----Generated at Sat Aug 23 17:51:42 2025 by rpki-client