$ rpki-client -vvf rpki.apnic.net/member_repository/A91F9605/36666D6E870911EB823B3356C4F9AE02/aBiEwMdVflJu8rxNHlq8M2rif54.mft File: aBiEwMdVflJu8rxNHlq8M2rif54.mft (raw, json) Hash identifier: Wd6pa7hwyeCK377bmog+KFBFx7A0g3oBbVnfd6um96U= Subject key identifier: 32:BA:61:D8:1A:5A:A8:CD:4F:05:FC:D9:35:39:C4:EA:52:C6:A6:D0 Authority key identifier: 68:18:84:C0:C7:55:7E:52:6E:F2:BC:4D:1E:5A:BC:33:6A:E2:7F:9E Certificate issuer: /CN=A91F9605/serialNumber=681884C0C7557E526EF2BC4D1E5ABC336AE27F9E Certificate serial: 0658 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aBiEwMdVflJu8rxNHlq8M2rif54.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F9605/36666D6E870911EB823B3356C4F9AE02/aBiEwMdVflJu8rxNHlq8M2rif54.mft Manifest number: 0651 Signing time: Wed 14 May 2025 22:36:12 +0000 Manifest this update: Wed 14 May 2025 22:36:12 +0000 Manifest next update: Wed 21 May 2025 22:36:12 +0000 Files and hashes: 1: aBiEwMdVflJu8rxNHlq8M2rif54.crl (hash: vs1asPpjd3WbDx6ij6So1ZHUWxFGgxe2e/JcsOnjm00=) 2: 75AB03A2870B11EB88E44876C4F9AE02.roa (hash: 7qI+njWvbbh+KneeLcZmySdlxOhiGVsKeC65nMgeI7E=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F9605/36666D6E870911EB823B3356C4F9AE02/aBiEwMdVflJu8rxNHlq8M2rif54.crl rsync://rpki.apnic.net/member_repository/A91F9605/36666D6E870911EB823B3356C4F9AE02/aBiEwMdVflJu8rxNHlq8M2rif54.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aBiEwMdVflJu8rxNHlq8M2rif54.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 21 May 2025 22:36:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1624 (0x658) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F9605, serialNumber=681884C0C7557E526EF2BC4D1E5ABC336AE27F9E Validity Not Before: May 14 22:36:12 2025 GMT Not After : May 21 22:36:12 2025 GMT Subject: CN=68251adc-cce4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:03:6f:be:1d:55:4d:dc:4e:f8:07:7a:f9:b6: 82:66:6a:35:d9:04:90:28:28:af:28:60:8d:5c:b4: 5d:fc:29:bd:fe:c0:c0:27:7f:d7:9b:51:49:d0:17: f1:bb:a7:7e:8e:5d:07:f7:0a:fc:8f:94:15:d6:cc: 38:01:2d:86:86:1a:00:ed:29:00:b0:6b:f0:ca:06: c2:e9:75:90:35:cc:11:dc:b6:26:d3:bf:a7:e3:ea: 73:68:7c:34:47:d7:8b:3c:45:73:bc:99:ba:ee:3b: 7d:80:9a:9e:af:80:76:be:f8:dd:83:d5:37:7d:89: 2f:b2:20:c9:ae:10:d9:18:ee:0c:db:21:17:95:aa: 21:26:bc:a9:d5:18:e4:e1:b3:b2:86:59:33:b6:fb: 7c:db:02:92:e2:af:42:81:b9:99:cc:df:0c:9c:50: 74:20:0f:0a:98:9d:81:7a:bb:8c:b8:fd:c3:df:20: 90:56:29:dc:ab:85:b9:1c:35:d8:cb:d0:e3:96:2e: fe:d5:b3:f8:33:7b:e3:a7:28:18:8f:10:51:bc:47: 21:f9:90:15:b9:75:b3:47:07:38:54:bd:13:38:e2: 6e:77:5d:f9:6d:40:e2:12:7a:86:f3:01:1c:28:44: ca:43:de:77:de:c9:28:d6:9c:f9:b9:3d:a7:94:e6: af:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:BA:61:D8:1A:5A:A8:CD:4F:05:FC:D9:35:39:C4:EA:52:C6:A6:D0 X509v3 Authority Key Identifier: keyid:68:18:84:C0:C7:55:7E:52:6E:F2:BC:4D:1E:5A:BC:33:6A:E2:7F:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F9605/36666D6E870911EB823B3356C4F9AE02/aBiEwMdVflJu8rxNHlq8M2rif54.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aBiEwMdVflJu8rxNHlq8M2rif54.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F9605/36666D6E870911EB823B3356C4F9AE02/aBiEwMdVflJu8rxNHlq8M2rif54.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 95:2d:0a:f3:b8:3d:ac:ba:90:c2:dc:d1:12:c9:42:3f:8e:a3: 64:33:e4:64:85:fa:9b:10:33:cc:1b:0c:6e:b9:08:74:22:f5: ea:9c:1d:88:ec:1e:e8:39:ea:cf:54:ef:b6:d6:b6:28:8b:08: 80:0b:32:80:52:2e:d5:ac:c3:27:f3:3c:01:ab:52:ad:6d:44: 11:03:14:1d:30:53:ac:be:96:85:b8:bf:3b:20:4c:76:67:b5: 26:9c:07:10:2a:6e:a6:de:7d:80:04:4b:59:c6:e6:9e:81:6a: 52:20:d4:cc:d6:74:a5:d7:4d:ef:a9:93:49:cd:1f:cd:b5:4a: b7:a2:f0:14:25:a4:fa:bc:69:16:a6:7d:6d:34:9f:e2:21:f3: ef:6c:df:0d:f3:70:43:15:0e:cb:5c:59:a0:a9:3e:c7:fd:e0: 17:5e:7a:82:cd:5a:db:09:0e:97:cd:23:ed:f0:e0:0f:77:cc: 7b:cd:b3:e7:ec:25:f0:a6:b8:72:4d:7a:cd:ff:dd:f0:72:22: 02:28:09:82:ef:55:5e:1f:f6:f5:fd:28:b0:9e:49:d5:dd:e1: ac:bc:bb:36:43:df:fa:a9:d2:52:33:7d:a4:5d:4f:69:d5:00: d5:e1:ff:4a:bf:db:e6:f0:8f:7d:0c:7e:d4:ae:eb:ea:1b:76: fb:3e:d6:93 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBlgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Rjk2MDUxMTAvBgNVBAUTKDY4MTg4NEMwQzc1NTdFNTI2RUYyQkM0RDFFNUFCQzMz NkFFMjdGOUUwHhcNMjUwNTE0MjIzNjEyWhcNMjUwNTIxMjIzNjEyWjAYMRYwFAYD VQQDEw02ODI1MWFkYy1jY2U0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwANvvh1VTdxO+Ad6+baCZmo12QSQKCivKGCNXLRd/Cm9/sDAJ3/Xm1FJ0Bfx u6d+jl0H9wr8j5QV1sw4AS2GhhoA7SkAsGvwygbC6XWQNcwR3LYm07+n4+pzaHw0 R9eLPEVzvJm67jt9gJqer4B2vvjdg9U3fYkvsiDJrhDZGO4M2yEXlaohJryp1Rjk 4bOyhlkztvt82wKS4q9CgbmZzN8MnFB0IA8KmJ2BeruMuP3D3yCQVincq4W5HDXY y9Djli7+1bP4M3vjpygYjxBRvEch+ZAVuXWzRwc4VL0TOOJud135bUDiEnqG8wEc KETKQ9533sko1pz5uT2nlOav4QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDK6Ydga WqjNTwX82TU5xOpSxqbQMB8GA1UdIwQYMBaAFGgYhMDHVX5SbvK8TR5avDNq4n+e MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGOTYwNS8zNjY2NkQ2RTg3 MDkxMUVCODIzQjMzNTZDNEY5QUUwMi9hQmlFd01kVmZsSnU4cnhOSGxxOE0ycmlm NTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2FCaUV3TWRWZmxKdThyeE5IbHE4TTJyaWY1NC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG OTYwNS8zNjY2NkQ2RTg3MDkxMUVCODIzQjMzNTZDNEY5QUUwMi9hQmlFd01kVmZs SnU4cnhOSGxxOE0ycmlmNTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCVLQrzuD2supDC3NESyUI/jqNkM+RkhfqbEDPMGwxuuQh0IvXqnB2I 7B7oOerPVO+21rYoiwiACzKAUi7VrMMn8zwBq1KtbUQRAxQdMFOsvpaFuL87IEx2 Z7UmnAcQKm6m3n2ABEtZxuaegWpSINTM1nSl103vqZNJzR/NtUq3ovAUJaT6vGkW pn1tNJ/iIfPvbN8N83BDFQ7LXFmgqT7H/eAXXnqCzVrbCQ6XzSPt8OAPd8x7zbPn 7CXwprhyTXrN/93wciICKAmC71VeH/b1/SiwnknV3eGsvLs2Q9/6qdJSM32kXU9p 1QDV4f9Kv9vm8I99DH7UruvqG3b7PtaT -----END CERTIFICATE-----Generated at Thu May 15 20:00:24 2025 by rpki-client