$ rpki-client -vvf rpki.apnic.net/member_repository/A91D3F8E/6C4089BA216C11EEB28BF24CC4F9AE02/1ABRvI3aYMky7gd2mrhnvvqNQvY.mft File: 1ABRvI3aYMky7gd2mrhnvvqNQvY.mft (raw, json) Hash identifier: 3lIf9biXbtH3eMjwyh5i5rIxZaktcmXPisKsTcRtUG4= Subject key identifier: DC:88:7C:0C:C6:51:4A:F2:7B:68:09:7D:BF:53:0D:CE:46:1C:59:4D Authority key identifier: D4:00:51:BC:8D:DA:60:C9:32:EE:07:76:9A:B8:67:BE:FA:8D:42:F6 Certificate issuer: /CN=A91D3F8E/serialNumber=D40051BC8DDA60C932EE07769AB867BEFA8D42F6 Certificate serial: 0198 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1ABRvI3aYMky7gd2mrhnvvqNQvY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D3F8E/6C4089BA216C11EEB28BF24CC4F9AE02/1ABRvI3aYMky7gd2mrhnvvqNQvY.mft Manifest number: 017A Signing time: Thu 15 May 2025 03:28:04 +0000 Manifest this update: Thu 15 May 2025 03:28:03 +0000 Manifest next update: Thu 22 May 2025 03:28:03 +0000 Files and hashes: 1: 1ABRvI3aYMky7gd2mrhnvvqNQvY.crl (hash: eppJexM1Za0hpQe+nAHeD9ECEW6ihCleAeYAEWqBpDA=) 2: F8B64B2A97BB11EF9D4C9647C4F9AE02.roa (hash: 61jykwbjSWlecTxQbXexQrYBIHCiEouIxmqT8SrgbD0=) 3: C0E3BC02B8B611EFBD4C6F4AC4F9AE02.roa (hash: W/53nThgtqJJzKbcr1z4E+VxinzpZInwajjfUaYcr0E=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D3F8E/6C4089BA216C11EEB28BF24CC4F9AE02/1ABRvI3aYMky7gd2mrhnvvqNQvY.crl rsync://rpki.apnic.net/member_repository/A91D3F8E/6C4089BA216C11EEB28BF24CC4F9AE02/1ABRvI3aYMky7gd2mrhnvvqNQvY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1ABRvI3aYMky7gd2mrhnvvqNQvY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 22 May 2025 03:28:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 408 (0x198) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D3F8E, serialNumber=D40051BC8DDA60C932EE07769AB867BEFA8D42F6 Validity Not Before: May 15 03:28:03 2025 GMT Not After : May 22 03:28:03 2025 GMT Subject: CN=68255f44-1353 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:c7:3d:97:d3:8c:96:c9:e8:61:d5:99:90:0f: 76:eb:3e:51:e5:6a:3f:a3:16:90:68:b7:c4:bf:f4: 05:c1:60:b3:85:ec:a6:71:d4:03:4f:b4:8d:99:47: e5:94:49:78:3e:06:c7:cc:04:cc:6c:96:c3:05:07: 20:82:c3:30:c6:64:b3:b1:1f:8f:da:d4:d0:4f:e1: 75:24:78:eb:b1:f6:f8:ed:c9:88:92:34:6f:f7:b5: af:7a:8c:eb:54:cf:7d:32:61:08:12:05:10:51:b9: 13:63:2a:26:5d:d5:22:cb:90:12:91:5c:b0:2e:5d: 5a:14:f7:0e:2e:8a:a8:03:c6:62:29:90:85:6a:f7: e1:a6:d1:0e:cb:fa:6e:33:e2:1a:1d:1b:f0:a5:15: 24:58:ae:42:e5:f2:63:e3:5f:ab:3a:31:f3:42:de: 6f:58:a2:16:43:87:82:9a:da:8b:98:1b:cb:4e:a1: 72:29:e2:1d:40:17:38:37:67:af:34:74:90:9c:39: 86:f0:17:0f:16:ac:bb:c6:33:d9:37:cf:d5:6e:83: c0:be:e6:5d:e5:76:f3:29:60:c5:10:17:55:91:92: 52:ec:55:33:d9:b5:2c:dc:17:4e:a9:5d:d1:d7:16: 96:14:9b:e4:92:b0:23:bc:1f:08:36:78:5c:b2:a5: 47:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:88:7C:0C:C6:51:4A:F2:7B:68:09:7D:BF:53:0D:CE:46:1C:59:4D X509v3 Authority Key Identifier: keyid:D4:00:51:BC:8D:DA:60:C9:32:EE:07:76:9A:B8:67:BE:FA:8D:42:F6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D3F8E/6C4089BA216C11EEB28BF24CC4F9AE02/1ABRvI3aYMky7gd2mrhnvvqNQvY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1ABRvI3aYMky7gd2mrhnvvqNQvY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D3F8E/6C4089BA216C11EEB28BF24CC4F9AE02/1ABRvI3aYMky7gd2mrhnvvqNQvY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 72:6d:78:ca:af:92:29:bf:50:66:45:fd:11:b8:d5:bc:05:19: 7d:35:35:29:a2:92:04:2c:86:ac:5f:bb:5b:53:7f:a8:11:28: 78:95:2f:56:0c:22:10:4e:a3:bc:10:62:13:7d:7f:1d:eb:f7: 9b:0f:b4:98:82:89:75:ed:d5:04:a5:ab:91:df:20:2a:00:88: a3:95:00:5b:83:01:40:23:d3:ed:69:19:a4:a3:c8:f7:16:9a: d6:3d:01:f0:e2:cb:22:de:25:83:71:3e:ae:ad:87:9c:95:db: ad:d4:87:0e:32:8a:62:a4:b9:eb:a1:75:70:af:4d:92:cf:82: 50:95:da:2b:66:3f:ef:fa:26:88:51:4b:b8:46:4b:42:91:32: de:b1:e7:f2:07:d5:89:d8:f4:88:53:08:d7:08:de:92:d7:32: 8a:6c:1a:8c:77:db:31:f7:2a:9d:b3:b7:a8:82:7e:ce:ab:0f: 6a:cc:ca:8b:22:50:1f:a0:67:ea:7e:f4:1d:a1:cd:f5:72:51: ba:54:ee:ee:9e:54:b2:3a:f0:e5:90:ef:a4:81:69:ef:27:e3: 03:ee:ca:3f:ed:b6:33:af:00:73:bd:9e:00:73:25:d5:d1:0d: 8e:04:00:cd:7d:6f:7b:6f:aa:7a:24:86:03:f8:7c:8b:a2:3b: 1d:b8:de:ec -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAZgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDNGOEUxMTAvBgNVBAUTKEQ0MDA1MUJDOEREQTYwQzkzMkVFMDc3NjlBQjg2N0JF RkE4RDQyRjYwHhcNMjUwNTE1MDMyODAzWhcNMjUwNTIyMDMyODAzWjAYMRYwFAYD VQQDEw02ODI1NWY0NC0xMzUzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAs8c9l9OMlsnoYdWZkA926z5R5Wo/oxaQaLfEv/QFwWCzheymcdQDT7SNmUfl lEl4PgbHzATMbJbDBQcggsMwxmSzsR+P2tTQT+F1JHjrsfb47cmIkjRv97Wveozr VM99MmEIEgUQUbkTYyomXdUiy5ASkVywLl1aFPcOLoqoA8ZiKZCFavfhptEOy/pu M+IaHRvwpRUkWK5C5fJj41+rOjHzQt5vWKIWQ4eCmtqLmBvLTqFyKeIdQBc4N2ev NHSQnDmG8BcPFqy7xjPZN8/VboPAvuZd5XbzKWDFEBdVkZJS7FUz2bUs3BdOqV3R 1xaWFJvkkrAjvB8INnhcsqVHIQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNyIfAzG UUrye2gJfb9TDc5GHFlNMB8GA1UdIwQYMBaAFNQAUbyN2mDJMu4Hdpq4Z776jUL2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEM0Y4RS82QzQwODlCQTIx NkMxMUVFQjI4QkYyNENDNEY5QUUwMi8xQUJSdkkzYVlNa3k3Z2QybXJobnZ2cU5R dlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzFBQlJ2STNhWU1reTdnZDJtcmhudnZxTlF2WS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE M0Y4RS82QzQwODlCQTIxNkMxMUVFQjI4QkYyNENDNEY5QUUwMi8xQUJSdkkzYVlN a3k3Z2QybXJobnZ2cU5RdlkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBybXjKr5Ipv1BmRf0RuNW8BRl9NTUpopIELIasX7tbU3+oESh4lS9W DCIQTqO8EGITfX8d6/ebD7SYgol17dUEpauR3yAqAIijlQBbgwFAI9PtaRmko8j3 FprWPQHw4ssi3iWDcT6urYecldut1IcOMopipLnroXVwr02Sz4JQldorZj/v+iaI UUu4RktCkTLesefyB9WJ2PSIUwjXCN6S1zKKbBqMd9sx9yqds7eogn7Oqw9qzMqL IlAfoGfqfvQdoc31clG6VO7unlSyOvDlkO+kgWnvJ+MD7so/7bYzrwBzvZ4AcyXV 0Q2OBADNfW97b6p6JIYD+HyLojsduN7s -----END CERTIFICATE-----Generated at Thu May 15 23:30:18 2025 by rpki-client