$ rpki-client -vvf rpki.apnic.net/member_repository/A91DACA7/517E6E4C45B211EFA5DF6D19C4F9AE02/Abso_b4VWoZixe5oDP3wyY1OvR0.mft File: Abso_b4VWoZixe5oDP3wyY1OvR0.mft (raw, json) Hash identifier: fvFwfL3olJUZYcEBlyzzd3/MzNc+pHjW3OehuKx6QNE= Subject key identifier: D2:05:AB:26:17:4A:31:97:70:D5:63:E0:28:A8:64:F2:7D:8F:DD:56 Authority key identifier: 01:BB:28:FD:BE:15:5A:86:62:C5:EE:68:0C:FD:F0:C9:8D:4E:BD:1D Certificate issuer: /CN=A91DACA7/serialNumber=01BB28FDBE155A8662C5EE680CFDF0C98D4EBD1D Certificate serial: 9D Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Abso_b4VWoZixe5oDP3wyY1OvR0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DACA7/517E6E4C45B211EFA5DF6D19C4F9AE02/Abso_b4VWoZixe5oDP3wyY1OvR0.mft Manifest number: 9B Signing time: Tue 13 May 2025 05:29:57 +0000 Manifest this update: Tue 13 May 2025 05:29:57 +0000 Manifest next update: Tue 20 May 2025 05:29:57 +0000 Files and hashes: 1: Abso_b4VWoZixe5oDP3wyY1OvR0.crl (hash: 2KqBk9r+f/gGdSdlbIHTfhMsr084dTj3TEXPIPPvcy0=) 2: ECB0C56845B211EFBCC09A1AC4F9AE02.roa (hash: EGPY/0B+FhNPcxx4yI5SHvTWW9NTcAbNHzvZ84arIm4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DACA7/517E6E4C45B211EFA5DF6D19C4F9AE02/Abso_b4VWoZixe5oDP3wyY1OvR0.crl rsync://rpki.apnic.net/member_repository/A91DACA7/517E6E4C45B211EFA5DF6D19C4F9AE02/Abso_b4VWoZixe5oDP3wyY1OvR0.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Abso_b4VWoZixe5oDP3wyY1OvR0.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 20 May 2025 02:50:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 157 (0x9d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DACA7, serialNumber=01BB28FDBE155A8662C5EE680CFDF0C98D4EBD1D Validity Not Before: May 13 05:29:57 2025 GMT Not After : May 20 05:29:57 2025 GMT Subject: CN=6822d8d5-3c3f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:96:1f:a5:37:6c:01:48:da:54:af:80:2a:43: 0c:74:74:54:76:bf:93:f7:4e:db:c7:82:24:3e:0a: 38:e8:ad:db:2e:ba:21:a8:51:14:69:56:c9:be:41: 2a:94:95:c8:ae:ab:79:20:9c:7d:fd:8d:78:ab:45: fc:36:85:7e:9b:5c:d0:15:37:b4:41:26:f7:60:34: 52:dd:01:5f:ae:fd:6e:a7:66:22:28:9c:dc:b2:f8: 19:35:83:f7:cb:c6:7d:5f:9f:77:1e:11:fe:65:93: d6:76:37:f0:57:97:06:54:29:ec:6d:b6:ce:2a:71: 7d:dd:ce:84:7c:fe:ac:b6:00:ba:03:6f:6c:5a:69: 42:3b:6a:4f:80:e9:fa:7b:ec:56:b4:87:94:bf:ba: 5f:a5:c4:24:10:a9:81:48:92:3d:77:f8:05:47:46: 85:bb:5b:c6:d9:92:2b:98:ca:60:de:63:9d:75:2f: 08:10:03:68:33:08:98:cd:9f:2a:02:67:88:cf:ba: 63:86:7f:c3:c9:96:b6:76:f7:03:39:57:75:2a:99: 2c:76:f9:d7:0c:ce:a4:30:e9:d7:dc:d6:66:24:08: e3:8d:7c:4d:f4:6a:6e:b2:49:83:97:4d:bd:33:3b: 20:fa:25:bd:ef:2d:3f:7d:19:82:ef:36:65:e8:81: e7:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:05:AB:26:17:4A:31:97:70:D5:63:E0:28:A8:64:F2:7D:8F:DD:56 X509v3 Authority Key Identifier: keyid:01:BB:28:FD:BE:15:5A:86:62:C5:EE:68:0C:FD:F0:C9:8D:4E:BD:1D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DACA7/517E6E4C45B211EFA5DF6D19C4F9AE02/Abso_b4VWoZixe5oDP3wyY1OvR0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Abso_b4VWoZixe5oDP3wyY1OvR0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DACA7/517E6E4C45B211EFA5DF6D19C4F9AE02/Abso_b4VWoZixe5oDP3wyY1OvR0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 50:94:31:1c:b0:72:77:7e:33:83:db:02:b1:96:d2:d9:61:52: 9e:46:93:c3:cc:8b:aa:92:57:45:0f:b1:f6:c4:41:02:b1:d9: 5e:7f:ae:75:6b:30:c7:bb:eb:bd:95:d6:7f:35:60:da:94:be: 6e:ae:a1:78:4c:5f:2c:a4:13:67:35:1c:e3:86:b6:bc:d4:37: 77:3b:c1:09:24:bf:ce:29:b0:ac:a6:47:bb:27:74:8e:6d:3f: d9:14:14:40:af:b2:bc:58:69:52:a2:fa:f4:c4:ac:4a:d8:79: 80:62:15:cc:68:22:6e:67:90:22:58:c2:89:47:11:6b:67:18: be:9c:97:cf:41:2d:93:8e:43:95:e5:6c:0b:e0:7d:8d:52:5a: 20:bf:9e:12:b7:7b:19:02:06:d5:05:82:d1:93:d5:17:48:92: 51:ab:33:63:7e:93:c1:2d:df:4c:da:dc:48:f3:94:71:c5:5e: a4:aa:b6:e2:bf:91:a5:6a:0f:9b:ad:21:43:72:5e:21:d2:42: 7b:1d:0b:07:c8:06:33:8e:ac:0c:9c:38:5b:40:48:fd:79:fc: 0d:91:10:4d:6f:69:74:6e:0f:f8:0e:dc:2c:cb:0c:9e:54:c9: 9d:44:79:d4:83:b4:e4:15:ec:95:f9:85:2e:74:2f:a9:28:af: 58:02:f9:b4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAJ0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REFDQTcxMTAvBgNVBAUTKDAxQkIyOEZEQkUxNTVBODY2MkM1RUU2ODBDRkRGMEM5 OEQ0RUJEMUQwHhcNMjUwNTEzMDUyOTU3WhcNMjUwNTIwMDUyOTU3WjAYMRYwFAYD VQQDEw02ODIyZDhkNS0zYzNmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzpYfpTdsAUjaVK+AKkMMdHRUdr+T907bx4IkPgo46K3bLrohqFEUaVbJvkEq lJXIrqt5IJx9/Y14q0X8NoV+m1zQFTe0QSb3YDRS3QFfrv1up2YiKJzcsvgZNYP3 y8Z9X593HhH+ZZPWdjfwV5cGVCnsbbbOKnF93c6EfP6stgC6A29sWmlCO2pPgOn6 e+xWtIeUv7pfpcQkEKmBSJI9d/gFR0aFu1vG2ZIrmMpg3mOddS8IEANoMwiYzZ8q AmeIz7pjhn/DyZa2dvcDOVd1KpksdvnXDM6kMOnX3NZmJAjjjXxN9GpuskmDl029 Mzsg+iW97y0/fRmC7zZl6IHnLwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNIFqyYX SjGXcNVj4CioZPJ9j91WMB8GA1UdIwQYMBaAFAG7KP2+FVqGYsXuaAz98MmNTr0d MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQUNBNy81MTdFNkU0QzQ1 QjIxMUVGQTVERjZEMTlDNEY5QUUwMi9BYnNvX2I0VldvWml4ZTVvRFAzd3lZMU92 UjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0Fic29fYjRWV29aaXhlNW9EUDN3eVkxT3ZSMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE QUNBNy81MTdFNkU0QzQ1QjIxMUVGQTVERjZEMTlDNEY5QUUwMi9BYnNvX2I0Vldv Wml4ZTVvRFAzd3lZMU92UjAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBQlDEcsHJ3fjOD2wKxltLZYVKeRpPDzIuqkldFD7H2xEECsdlef651 azDHu+u9ldZ/NWDalL5urqF4TF8spBNnNRzjhra81Dd3O8EJJL/OKbCspke7J3SO bT/ZFBRAr7K8WGlSovr0xKxK2HmAYhXMaCJuZ5AiWMKJRxFrZxi+nJfPQS2TjkOV 5WwL4H2NUlogv54St3sZAgbVBYLRk9UXSJJRqzNjfpPBLd9M2txI85RxxV6kqrbi v5Glag+brSFDcl4h0kJ7HQsHyAYzjqwMnDhbQEj9efwNkRBNb2l0bg/4Dtwsywye VMmdRHnUg7TkFeyV+YUudC+pKK9YAvm0 -----END CERTIFICATE-----Generated at Tue May 13 11:56:38 2025 by rpki-client