$ rpki-client -vvf rpki.apnic.net/member_repository/A91D3F8E/6C4089BA216C11EEB28BF24CC4F9AE02/1ABRvI3aYMky7gd2mrhnvvqNQvY.mft File: 1ABRvI3aYMky7gd2mrhnvvqNQvY.mft (raw, json) Hash identifier: utg63+YZs6yt0PrS287V61sR9F0hagHJjhpbY7N2MQw= Subject key identifier: A8:EF:88:0E:1E:2E:F2:E5:4E:2B:31:38:02:E9:0A:B8:83:2D:B4:10 Authority key identifier: D4:00:51:BC:8D:DA:60:C9:32:EE:07:76:9A:B8:67:BE:FA:8D:42:F6 Certificate issuer: /CN=A91D3F8E/serialNumber=D40051BC8DDA60C932EE07769AB867BEFA8D42F6 Certificate serial: 01B3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1ABRvI3aYMky7gd2mrhnvvqNQvY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D3F8E/6C4089BA216C11EEB28BF24CC4F9AE02/1ABRvI3aYMky7gd2mrhnvvqNQvY.mft Manifest number: 0194 Signing time: Thu 03 Jul 2025 03:53:18 +0000 Manifest this update: Thu 03 Jul 2025 03:53:18 +0000 Manifest next update: Thu 10 Jul 2025 03:53:18 +0000 Files and hashes: 1: 1ABRvI3aYMky7gd2mrhnvvqNQvY.crl (hash: 3LCHmIk5CmSMvPwPh+oFFsy1tLQRHK/5fZu8Ux4zy9U=) 2: F8B64B2A97BB11EF9D4C9647C4F9AE02.roa (hash: 61jykwbjSWlecTxQbXexQrYBIHCiEouIxmqT8SrgbD0=) 3: C0E3BC02B8B611EFBD4C6F4AC4F9AE02.roa (hash: W/53nThgtqJJzKbcr1z4E+VxinzpZInwajjfUaYcr0E=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D3F8E/6C4089BA216C11EEB28BF24CC4F9AE02/1ABRvI3aYMky7gd2mrhnvvqNQvY.crl rsync://rpki.apnic.net/member_repository/A91D3F8E/6C4089BA216C11EEB28BF24CC4F9AE02/1ABRvI3aYMky7gd2mrhnvvqNQvY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1ABRvI3aYMky7gd2mrhnvvqNQvY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 435 (0x1b3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D3F8E, serialNumber=D40051BC8DDA60C932EE07769AB867BEFA8D42F6 Validity Not Before: Jul 3 03:53:18 2025 GMT Not After : Jul 10 03:53:18 2025 GMT Subject: CN=6865feae-d8e7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:99:07:1c:c0:29:12:59:82:e8:6a:93:3d:89: 1e:08:1a:21:3e:9b:05:82:0b:ba:48:2f:f6:58:99: ac:b8:50:54:dd:91:39:6f:65:71:65:9f:ad:8e:14: fc:9c:b8:fc:a7:86:ce:d9:f4:58:d0:7b:59:c9:86: a3:f5:fd:e6:d1:7e:49:5a:5a:87:aa:21:11:3f:60: 3a:3e:4d:a1:7a:ec:66:b8:d4:5a:a0:99:d3:12:71: 07:87:61:22:99:24:31:be:ca:1d:ac:20:ed:98:12: b0:7e:23:5b:1b:f8:a5:8c:9e:24:28:3a:f0:83:ee: 33:a2:12:9a:8b:ae:82:b6:ff:94:04:fb:46:f1:83: 75:63:c5:21:3d:1d:4e:56:4b:1d:ee:3d:53:b1:47: 49:d3:c9:52:40:bc:2e:eb:41:b9:9e:05:c4:b3:2d: 07:2c:ab:23:f8:d7:7d:13:59:fb:4b:9a:61:73:08: 20:b7:85:96:02:42:4c:dd:03:60:13:4e:a7:87:64: 66:a4:a3:dc:83:a1:cd:84:c1:db:c4:e5:a8:fa:fa: 45:73:5d:96:6e:32:7e:bf:db:a6:24:05:e6:0d:31: 8a:7c:99:67:50:91:57:62:f2:64:cb:67:6d:b0:e0: 2d:4a:4d:29:f9:2c:db:f2:d2:d2:38:f7:a6:8d:ef: 9a:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:EF:88:0E:1E:2E:F2:E5:4E:2B:31:38:02:E9:0A:B8:83:2D:B4:10 X509v3 Authority Key Identifier: keyid:D4:00:51:BC:8D:DA:60:C9:32:EE:07:76:9A:B8:67:BE:FA:8D:42:F6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D3F8E/6C4089BA216C11EEB28BF24CC4F9AE02/1ABRvI3aYMky7gd2mrhnvvqNQvY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1ABRvI3aYMky7gd2mrhnvvqNQvY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D3F8E/6C4089BA216C11EEB28BF24CC4F9AE02/1ABRvI3aYMky7gd2mrhnvvqNQvY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 06:ad:4b:61:e7:f4:29:bc:67:b3:a1:7c:c3:0f:a0:3e:e7:a0: 67:9a:c2:53:8b:a0:26:42:9b:1a:80:34:88:38:d4:14:fb:90: f6:7e:7d:e5:8f:bb:ae:54:59:9d:0a:d8:a1:b6:27:11:c6:26: 3c:b4:73:99:a7:e8:b2:00:40:36:53:4d:94:54:b7:55:ca:72: 56:41:fd:4f:e0:a9:de:b9:60:89:e6:0d:b7:e0:4c:3b:b9:1e: 81:00:64:ab:de:55:6b:de:30:90:4b:ba:31:f7:12:d5:53:73: b8:3b:48:16:9e:3b:2b:e9:cc:24:0f:8f:ec:60:17:8f:69:70: 0b:c6:f6:69:77:13:33:60:24:80:79:51:10:8c:7b:f2:b4:9e: df:bb:70:dd:90:8d:81:22:fb:1c:de:c1:65:84:84:d4:9f:7b: 0e:59:6e:19:63:2b:46:8b:62:8e:00:89:64:1c:bb:7d:0e:99: fd:34:6f:82:2c:fb:80:fc:b4:53:b4:3e:0d:06:87:76:e3:27: 43:9b:b2:05:3b:89:6e:d8:04:fe:4b:1c:07:25:33:28:2b:4f: 0a:71:42:34:29:80:f3:54:33:9d:dd:26:e2:9d:8b:88:e0:76: f6:6d:a3:50:17:b1:49:d1:d0:7a:e2:da:6c:43:ac:ff:c1:3b: 89:be:03:4d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAbMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDNGOEUxMTAvBgNVBAUTKEQ0MDA1MUJDOEREQTYwQzkzMkVFMDc3NjlBQjg2N0JF RkE4RDQyRjYwHhcNMjUwNzAzMDM1MzE4WhcNMjUwNzEwMDM1MzE4WjAYMRYwFAYD VQQDEw02ODY1ZmVhZS1kOGU3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2pkHHMApElmC6GqTPYkeCBohPpsFggu6SC/2WJmsuFBU3ZE5b2VxZZ+tjhT8 nLj8p4bO2fRY0HtZyYaj9f3m0X5JWlqHqiERP2A6Pk2heuxmuNRaoJnTEnEHh2Ei mSQxvsodrCDtmBKwfiNbG/iljJ4kKDrwg+4zohKai66Ctv+UBPtG8YN1Y8UhPR1O Vksd7j1TsUdJ08lSQLwu60G5ngXEsy0HLKsj+Nd9E1n7S5phcwggt4WWAkJM3QNg E06nh2RmpKPcg6HNhMHbxOWo+vpFc12WbjJ+v9umJAXmDTGKfJlnUJFXYvJky2dt sOAtSk0p+Szb8tLSOPemje+aHQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKjviA4e LvLlTisxOALpCriDLbQQMB8GA1UdIwQYMBaAFNQAUbyN2mDJMu4Hdpq4Z776jUL2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEM0Y4RS82QzQwODlCQTIx NkMxMUVFQjI4QkYyNENDNEY5QUUwMi8xQUJSdkkzYVlNa3k3Z2QybXJobnZ2cU5R dlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzFBQlJ2STNhWU1reTdnZDJtcmhudnZxTlF2WS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE M0Y4RS82QzQwODlCQTIxNkMxMUVFQjI4QkYyNENDNEY5QUUwMi8xQUJSdkkzYVlN a3k3Z2QybXJobnZ2cU5RdlkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAGrUth5/QpvGezoXzDD6A+56BnmsJTi6AmQpsagDSIONQU+5D2fn3l j7uuVFmdCtihticRxiY8tHOZp+iyAEA2U02UVLdVynJWQf1P4KneuWCJ5g234Ew7 uR6BAGSr3lVr3jCQS7ox9xLVU3O4O0gWnjsr6cwkD4/sYBePaXALxvZpdxMzYCSA eVEQjHvytJ7fu3DdkI2BIvsc3sFlhITUn3sOWW4ZYytGi2KOAIlkHLt9Dpn9NG+C LPuA/LRTtD4NBod24ydDm7IFO4lu2AT+SxwHJTMoK08KcUI0KYDzVDOd3SbinYuI 4Hb2baNQF7FJ0dB64tpsQ6z/wTuJvgNN -----END CERTIFICATE-----Generated at Fri Jul 4 08:03:10 2025 by rpki-client