$ rpki-client -vvf rpki.apnic.net/member_repository/A91CC564/4F29D0C4C40F11EA9C15B470C4F9AE02/ABXboDjLzLFS7RcROqCo1ddIjSE.mft File: ABXboDjLzLFS7RcROqCo1ddIjSE.mft (raw, json) Hash identifier: fSTbz4ACJlC/vFRWqkHnLoWXzxgcSXyFho6nVDsHyQg= Subject key identifier: 11:70:46:C1:33:DB:23:40:94:C9:8A:8A:44:B7:DB:C1:9B:CC:5F:C4 Authority key identifier: 00:15:DB:A0:38:CB:CC:B1:52:ED:17:11:3A:A0:A8:D5:D7:48:8D:21 Certificate issuer: /CN=A91CC564/serialNumber=0015DBA038CBCCB152ED17113AA0A8D5D7488D21 Certificate serial: 086E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ABXboDjLzLFS7RcROqCo1ddIjSE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CC564/4F29D0C4C40F11EA9C15B470C4F9AE02/ABXboDjLzLFS7RcROqCo1ddIjSE.mft Manifest number: 0868 Signing time: Sat 10 May 2025 20:23:21 +0000 Manifest this update: Sat 10 May 2025 20:23:21 +0000 Manifest next update: Sat 17 May 2025 20:23:21 +0000 Files and hashes: 1: ABXboDjLzLFS7RcROqCo1ddIjSE.crl (hash: CDZ0ZwN0JrcPjGxtkvcwre0yqlc2kOt6RCZgpD8ORiM=) 2: 74CCA13ADBE811EA8D063B7DC4F9AE02.roa (hash: r8kplkUIga9YQn8b4xbaXWuaaJUEiwNgh+YYSbpeRUQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CC564/4F29D0C4C40F11EA9C15B470C4F9AE02/ABXboDjLzLFS7RcROqCo1ddIjSE.crl rsync://rpki.apnic.net/member_repository/A91CC564/4F29D0C4C40F11EA9C15B470C4F9AE02/ABXboDjLzLFS7RcROqCo1ddIjSE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ABXboDjLzLFS7RcROqCo1ddIjSE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 May 2025 20:23:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2158 (0x86e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CC564, serialNumber=0015DBA038CBCCB152ED17113AA0A8D5D7488D21 Validity Not Before: May 10 20:23:21 2025 GMT Not After : May 17 20:23:21 2025 GMT Subject: CN=681fb5b9-ce01 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:71:ca:4e:74:08:dc:36:bd:e3:06:db:06:07: 4f:7f:a9:19:5f:dd:85:ff:da:2d:7f:53:29:b2:6a: 0f:13:ff:14:7c:59:a1:37:79:51:e6:21:20:8d:af: d6:ca:21:08:0a:58:5d:fd:98:2f:0d:80:8d:fa:2e: 39:14:43:1c:84:cd:b0:7f:48:07:ab:cf:b1:13:0d: 2a:4a:cb:02:98:d7:c9:fd:cd:5d:cc:68:80:3f:cf: c2:57:15:5f:8b:30:32:c7:35:9b:be:d5:77:f0:53: 61:77:dd:51:69:42:fa:a1:d0:da:e0:13:49:e0:fb: be:57:91:0a:20:c4:1e:b3:1b:00:fb:c5:08:85:e0: ef:0f:68:b7:fa:45:04:29:f0:0b:d1:ce:bc:95:7b: 9f:ee:fa:b8:83:1a:3c:a0:cb:a0:2a:c2:9f:3a:88: 1a:36:0f:e4:a0:ec:ef:b2:ee:cb:a2:64:c1:bd:a4: fe:7f:99:01:3b:9d:c5:6b:fc:eb:e1:03:90:c4:ab: ec:52:21:21:ac:7a:66:ab:44:fe:b1:4c:f9:68:5a: 62:2b:19:a0:31:76:68:2a:c5:88:62:be:4b:d5:b6: 78:f8:86:91:4e:ae:d3:b4:74:c0:3a:0f:07:0d:4b: 59:da:dc:3d:cd:66:e9:0c:ee:0b:04:54:3b:60:33: af:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:70:46:C1:33:DB:23:40:94:C9:8A:8A:44:B7:DB:C1:9B:CC:5F:C4 X509v3 Authority Key Identifier: keyid:00:15:DB:A0:38:CB:CC:B1:52:ED:17:11:3A:A0:A8:D5:D7:48:8D:21 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CC564/4F29D0C4C40F11EA9C15B470C4F9AE02/ABXboDjLzLFS7RcROqCo1ddIjSE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ABXboDjLzLFS7RcROqCo1ddIjSE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CC564/4F29D0C4C40F11EA9C15B470C4F9AE02/ABXboDjLzLFS7RcROqCo1ddIjSE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 24:e1:84:fa:36:b4:39:64:a5:76:2f:21:11:29:6b:78:e0:17: d8:16:8a:b8:d8:2e:ff:4b:a1:65:34:c5:5c:55:1f:6f:16:4f: 62:c8:94:f8:39:e0:b2:75:ee:f5:eb:3d:b5:45:af:ef:4b:0e: c3:2d:63:ce:2d:0e:cf:42:0f:7b:e0:df:8d:e8:1c:45:2c:be: 96:19:2c:3c:d0:06:9a:a0:d9:8f:e1:ab:58:68:8e:7c:f2:b4: 38:f1:f9:e5:06:a4:4a:6f:ae:f0:92:54:81:97:18:8f:ec:9f: c5:5e:e0:ec:19:ef:48:b5:99:a1:a5:4b:0e:19:aa:68:98:44: 9b:24:ee:a1:37:c4:da:79:01:c4:94:1c:c3:89:1f:f8:ed:e8: d7:62:ce:7f:a5:09:a5:52:6c:ae:79:38:c0:bf:cf:6d:d0:d9: 3c:a9:e3:ac:a6:a2:88:fb:09:ce:cb:3c:44:1e:f7:fa:49:a8: 66:a7:47:35:b2:70:e5:f3:46:ac:07:6d:93:c6:dc:b0:01:6b: a8:73:4c:c3:dd:ee:27:89:18:60:7d:da:b0:73:49:1e:41:cc: bc:ba:2d:46:23:9c:00:79:5d:e4:29:7e:fb:6d:a1:a1:91:0e: 34:9b:6d:88:d3:1f:46:d3:ae:09:b1:4f:1e:9e:cc:97:cb:8b: d0:09:2f:68 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCG4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0M1NjQxMTAvBgNVBAUTKDAwMTVEQkEwMzhDQkNDQjE1MkVEMTcxMTNBQTBBOEQ1 RDc0ODhEMjEwHhcNMjUwNTEwMjAyMzIxWhcNMjUwNTE3MjAyMzIxWjAYMRYwFAYD VQQDEw02ODFmYjViOS1jZTAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuXHKTnQI3Da94wbbBgdPf6kZX92F/9otf1MpsmoPE/8UfFmhN3lR5iEgja/W yiEIClhd/ZgvDYCN+i45FEMchM2wf0gHq8+xEw0qSssCmNfJ/c1dzGiAP8/CVxVf izAyxzWbvtV38FNhd91RaUL6odDa4BNJ4Pu+V5EKIMQesxsA+8UIheDvD2i3+kUE KfAL0c68lXuf7vq4gxo8oMugKsKfOogaNg/koOzvsu7LomTBvaT+f5kBO53Fa/zr 4QOQxKvsUiEhrHpmq0T+sUz5aFpiKxmgMXZoKsWIYr5L1bZ4+IaRTq7TtHTAOg8H DUtZ2tw9zWbpDO4LBFQ7YDOvIwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBFwRsEz 2yNAlMmKikS328GbzF/EMB8GA1UdIwQYMBaAFAAV26A4y8yxUu0XETqgqNXXSI0h MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQzU2NC80RjI5RDBDNEM0 MEYxMUVBOUMxNUI0NzBDNEY5QUUwMi9BQlhib0RqTHpMRlM3UmNST3FDbzFkZElq U0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0FCWGJvRGpMekxGUzdSY1JPcUNvMWRkSWpTRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD QzU2NC80RjI5RDBDNEM0MEYxMUVBOUMxNUI0NzBDNEY5QUUwMi9BQlhib0RqTHpM RlM3UmNST3FDbzFkZElqU0UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAk4YT6NrQ5ZKV2LyERKWt44BfYFoq42C7/S6FlNMVcVR9vFk9iyJT4 OeCyde716z21Ra/vSw7DLWPOLQ7PQg974N+N6BxFLL6WGSw80AaaoNmP4atYaI58 8rQ48fnlBqRKb67wklSBlxiP7J/FXuDsGe9ItZmhpUsOGapomESbJO6hN8TaeQHE lBzDiR/47ejXYs5/pQmlUmyueTjAv89t0Nk8qeOspqKI+wnOyzxEHvf6Sahmp0c1 snDl80asB22TxtywAWuoc0zD3e4niRhgfdqwc0keQcy8ui1GI5wAeV3kKX77baGh kQ40m22I0x9G064JsU8ensyXy4vQCS9o -----END CERTIFICATE-----Generated at Sun May 11 17:04:40 2025 by rpki-client