$ rpki-client -vvf rpki.apnic.net/member_repository/A91E0AAD/0DE5B40E79E211ECB5013148C4F9AE02/ABc0faPzW3U5Ub30sbB_dh49nr8.mft File: ABc0faPzW3U5Ub30sbB_dh49nr8.mft (raw, json) Hash identifier: X4IAfpjwWrPRd/dQgjUVPUYn4fOpV2Q61Gi8eqSpCK8= Subject key identifier: F2:E4:BA:28:48:EE:04:36:D4:82:77:E5:A5:9C:6E:7E:40:04:6E:62 Authority key identifier: 00:17:34:7D:A3:F3:5B:75:39:51:BD:F4:B1:B0:7F:76:1E:3D:9E:BF Certificate issuer: /CN=A91E0AAD/serialNumber=0017347DA3F35B753951BDF4B1B07F761E3D9EBF Certificate serial: 0402 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ABc0faPzW3U5Ub30sbB_dh49nr8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E0AAD/0DE5B40E79E211ECB5013148C4F9AE02/ABc0faPzW3U5Ub30sbB_dh49nr8.mft Manifest number: 03F7 Signing time: Tue 13 May 2025 00:18:59 +0000 Manifest this update: Tue 13 May 2025 00:18:58 +0000 Manifest next update: Tue 20 May 2025 00:18:58 +0000 Files and hashes: 1: ABc0faPzW3U5Ub30sbB_dh49nr8.crl (hash: T8IcEqwBPiDfxYMg9WrZO6NdUigTO3V/RtiuVqNsCbA=) 2: 0BE6F39E79E611EC99DA1B51C4F9AE02.roa (hash: NrKkQ4m5nwAN210bjbYrFUQAukjqo41a6Baomfs4idw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E0AAD/0DE5B40E79E211ECB5013148C4F9AE02/ABc0faPzW3U5Ub30sbB_dh49nr8.crl rsync://rpki.apnic.net/member_repository/A91E0AAD/0DE5B40E79E211ECB5013148C4F9AE02/ABc0faPzW3U5Ub30sbB_dh49nr8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ABc0faPzW3U5Ub30sbB_dh49nr8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 May 2025 21:34:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1026 (0x402) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E0AAD, serialNumber=0017347DA3F35B753951BDF4B1B07F761E3D9EBF Validity Not Before: May 13 00:18:58 2025 GMT Not After : May 20 00:18:58 2025 GMT Subject: CN=68228ff2-1f24 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:13:56:b7:da:f5:35:5a:93:98:1a:db:b7:7c: 21:89:2f:3c:f4:6c:46:a1:34:7d:06:80:6a:1b:60: 77:0f:f9:58:35:22:e1:ef:16:df:78:a7:05:87:d7: 32:58:76:29:d2:19:4a:42:90:5c:5c:bf:b8:7b:55: 1b:c1:ca:d7:08:59:e2:f0:1e:a6:a1:96:11:80:df: 28:a9:46:ab:09:f1:c9:b4:5c:60:b0:7d:9a:5b:f4: d9:a5:32:72:58:f2:fe:3e:7e:32:88:91:fd:35:00: 38:c5:83:a4:77:47:0d:3f:01:00:40:c2:7d:06:3b: 99:0c:86:30:53:d2:df:97:37:80:d0:b4:af:19:2a: a6:86:8b:a2:7a:6a:5f:10:04:3f:be:b9:0f:4a:10: 32:22:8a:2e:55:e4:87:23:3a:8f:22:79:22:aa:2e: 14:69:06:e4:65:b0:d3:a2:52:0d:53:47:54:bb:c6: 88:92:25:4e:71:9b:20:63:58:ea:90:4b:1c:64:be: 63:67:ae:fa:e0:42:08:47:5a:7c:89:78:5c:49:83: 40:99:9b:76:75:2d:05:61:f0:21:b1:8c:70:eb:6a: 92:65:bf:5a:2a:fe:c4:b5:d4:49:de:b9:08:14:59: 17:e9:b5:b1:10:25:1b:4c:9e:97:33:bd:0b:7c:ef: e4:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:E4:BA:28:48:EE:04:36:D4:82:77:E5:A5:9C:6E:7E:40:04:6E:62 X509v3 Authority Key Identifier: keyid:00:17:34:7D:A3:F3:5B:75:39:51:BD:F4:B1:B0:7F:76:1E:3D:9E:BF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E0AAD/0DE5B40E79E211ECB5013148C4F9AE02/ABc0faPzW3U5Ub30sbB_dh49nr8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ABc0faPzW3U5Ub30sbB_dh49nr8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E0AAD/0DE5B40E79E211ECB5013148C4F9AE02/ABc0faPzW3U5Ub30sbB_dh49nr8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0d:70:15:e1:77:64:6b:5d:ce:3e:9f:3a:f1:28:b2:a8:6b:16: 12:cc:ad:ec:06:eb:5c:3b:17:b0:92:9e:79:ff:c4:5b:17:fd: 6b:a9:c0:09:ab:58:c3:d5:9d:e1:74:d5:03:aa:31:f9:a1:cd: 95:25:30:60:0f:85:8b:a3:9d:f4:4f:ed:98:c4:e9:ce:39:d2: 9e:0d:2e:ce:9c:87:a4:fa:72:06:74:bf:db:5c:ca:b7:f9:56: 2a:40:94:7f:33:7f:e1:72:a6:48:c1:52:00:e3:3f:12:84:a9: 6b:55:f4:15:58:aa:f4:5c:67:b0:61:81:b3:50:da:3f:b7:ca: c5:2f:ca:e7:01:85:39:31:8d:ad:07:37:d7:4c:16:d3:d1:f8: a1:6b:f2:c1:79:0b:28:02:d1:5d:53:82:34:52:bc:25:9e:72: ed:8a:b3:f9:24:63:36:33:66:7c:9d:a9:73:ac:34:ac:86:c2: 2c:8d:e2:f4:66:13:3c:db:7f:3e:5b:df:64:4f:58:ef:1e:65: 31:74:42:e9:05:fe:7f:c7:d3:16:6c:18:47:5d:7c:67:8a:76: 50:5f:11:d5:c7:44:9b:57:f9:e1:4d:65:61:4d:14:a2:30:43: 39:8b:00:ec:76:b3:4f:33:36:71:97:6e:37:1a:90:5c:d7:d5: 5a:41:48:6f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBAIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTBBQUQxMTAvBgNVBAUTKDAwMTczNDdEQTNGMzVCNzUzOTUxQkRGNEIxQjA3Rjc2 MUUzRDlFQkYwHhcNMjUwNTEzMDAxODU4WhcNMjUwNTIwMDAxODU4WjAYMRYwFAYD VQQDEw02ODIyOGZmMi0xZjI0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA9BNWt9r1NVqTmBrbt3whiS889GxGoTR9BoBqG2B3D/lYNSLh7xbfeKcFh9cy WHYp0hlKQpBcXL+4e1UbwcrXCFni8B6moZYRgN8oqUarCfHJtFxgsH2aW/TZpTJy WPL+Pn4yiJH9NQA4xYOkd0cNPwEAQMJ9BjuZDIYwU9LflzeA0LSvGSqmhouiempf EAQ/vrkPShAyIoouVeSHIzqPInkiqi4UaQbkZbDTolINU0dUu8aIkiVOcZsgY1jq kEscZL5jZ6764EIIR1p8iXhcSYNAmZt2dS0FYfAhsYxw62qSZb9aKv7EtdRJ3rkI FFkX6bWxECUbTJ6XM70LfO/k7QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPLkuihI 7gQ21IJ35aWcbn5ABG5iMB8GA1UdIwQYMBaAFAAXNH2j81t1OVG99LGwf3YePZ6/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMEFBRC8wREU1QjQwRTc5 RTIxMUVDQjUwMTMxNDhDNEY5QUUwMi9BQmMwZmFQelczVTVVYjMwc2JCX2RoNDlu cjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0FCYzBmYVB6VzNVNVViMzBzYkJfZGg0OW5yOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MEFBRC8wREU1QjQwRTc5RTIxMUVDQjUwMTMxNDhDNEY5QUUwMi9BQmMwZmFQelcz VTVVYjMwc2JCX2RoNDlucjgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQANcBXhd2RrXc4+nzrxKLKoaxYSzK3sButcOxewkp55/8RbF/1rqcAJ q1jD1Z3hdNUDqjH5oc2VJTBgD4WLo530T+2YxOnOOdKeDS7OnIek+nIGdL/bXMq3 +VYqQJR/M3/hcqZIwVIA4z8ShKlrVfQVWKr0XGewYYGzUNo/t8rFL8rnAYU5MY2t BzfXTBbT0fiha/LBeQsoAtFdU4I0UrwlnnLtirP5JGM2M2Z8nalzrDSshsIsjeL0 ZhM8238+W99kT1jvHmUxdELpBf5/x9MWbBhHXXxninZQXxHVx0SbV/nhTWVhTRSi MEM5iwDsdrNPMzZxl243GpBc19VaQUhv -----END CERTIFICATE-----Generated at Tue May 13 01:45:54 2025 by rpki-client