$ rpki-client -vvf rpki.apnic.net/member_repository/A91B9C74/44CC971E4E1F11EDB3E6CC2FC4F9AE02/ABN5IHjRGy-UAw18O-71ATKibUA.mft File: ABN5IHjRGy-UAw18O-71ATKibUA.mft (raw, json) Hash identifier: aFIMbXh2bwkviAJbmht7M2PuV2CmkLYZ3rl1C3awCpk= Subject key identifier: F1:52:66:68:E4:B4:2B:A2:67:A4:4C:90:83:33:7C:2D:88:90:89:BC Authority key identifier: 00:13:79:20:78:D1:1B:2F:94:03:0D:7C:3B:EE:F5:01:32:A2:6D:40 Certificate issuer: /CN=A91B9C74/serialNumber=0013792078D11B2F94030D7C3BEEF50132A26D40 Certificate serial: 0218 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ABN5IHjRGy-UAw18O-71ATKibUA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B9C74/44CC971E4E1F11EDB3E6CC2FC4F9AE02/ABN5IHjRGy-UAw18O-71ATKibUA.mft Manifest number: 020D Signing time: Wed 23 Jul 2025 02:32:32 +0000 Manifest this update: Wed 23 Jul 2025 02:32:32 +0000 Manifest next update: Wed 30 Jul 2025 02:32:32 +0000 Files and hashes: 1: ABN5IHjRGy-UAw18O-71ATKibUA.crl (hash: oXKXsYuho3yJ7DnkfNdZNaMIMJ3m8oBo0sI2553zmOE=) 2: F853742A5A9911EDA14F453FC4F9AE02.roa (hash: KraWg2S7y0V2b10B2mX+HUVf2KSluU5nYap1xQfIHpI=) 3: 273E7B284E2311EDB6F68A4AC4F9AE02.roa (hash: hm2JBw4RijcoPdIwahJRqhi4gARjxEI7uzccrW/R3X8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B9C74/44CC971E4E1F11EDB3E6CC2FC4F9AE02/ABN5IHjRGy-UAw18O-71ATKibUA.crl rsync://rpki.apnic.net/member_repository/A91B9C74/44CC971E4E1F11EDB3E6CC2FC4F9AE02/ABN5IHjRGy-UAw18O-71ATKibUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ABN5IHjRGy-UAw18O-71ATKibUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 30 Jul 2025 02:32:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 536 (0x218) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B9C74, serialNumber=0013792078D11B2F94030D7C3BEEF50132A26D40 Validity Not Before: Jul 23 02:32:32 2025 GMT Not After : Jul 30 02:32:32 2025 GMT Subject: CN=688049c0-eb31 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:f3:7f:ad:c4:16:fb:4f:66:44:7e:8d:af:19: a6:33:aa:64:da:ac:4c:70:1c:ba:40:58:f7:8d:14: 42:d3:f4:4c:18:e1:82:55:6e:ad:fd:f7:d6:13:c7: da:49:8b:cb:18:e1:9c:70:d2:be:b4:db:6c:c5:42: d7:75:51:9c:10:87:2c:8d:48:d9:7a:cb:29:40:ee: 85:53:7a:c8:a2:56:ea:59:37:64:b0:7a:a4:af:b3: 5b:e2:00:3f:81:8f:1a:e2:4c:dc:01:70:ad:8d:2a: 90:dc:43:61:44:e8:d9:4b:cb:eb:c6:11:15:49:18: 45:63:75:87:d8:e4:44:c3:91:18:a8:37:6a:e9:65: cc:53:e3:97:44:83:81:6d:71:89:31:c0:d4:4d:05: ed:bd:2b:c4:bb:8a:37:a9:ce:32:dc:0b:75:f4:e4: b1:1c:50:24:e8:f3:fc:54:93:99:74:81:91:af:31: 1d:7e:5b:7e:c0:29:df:5e:3a:4e:51:b1:d1:11:e7: 42:7f:ec:02:49:b0:55:97:f6:90:ae:ce:8b:b5:9a: 18:5d:24:18:a8:8f:25:eb:79:55:80:87:33:70:87: 68:fb:66:01:e9:09:e8:d8:28:b3:ca:0c:66:ea:08: 25:fb:71:55:9c:49:c0:d0:95:e1:e9:2f:9a:23:32: f6:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:52:66:68:E4:B4:2B:A2:67:A4:4C:90:83:33:7C:2D:88:90:89:BC X509v3 Authority Key Identifier: keyid:00:13:79:20:78:D1:1B:2F:94:03:0D:7C:3B:EE:F5:01:32:A2:6D:40 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B9C74/44CC971E4E1F11EDB3E6CC2FC4F9AE02/ABN5IHjRGy-UAw18O-71ATKibUA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ABN5IHjRGy-UAw18O-71ATKibUA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B9C74/44CC971E4E1F11EDB3E6CC2FC4F9AE02/ABN5IHjRGy-UAw18O-71ATKibUA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6d:8c:cf:97:41:9f:4b:e0:f6:a5:fd:3f:b5:e9:f3:4e:ae:8a: 9f:45:34:59:70:9f:4b:52:38:86:55:e7:5e:8f:51:00:8a:a3: d2:39:65:42:64:fa:c9:33:ac:82:64:aa:7c:1e:c7:4c:61:66: b6:05:c2:db:97:db:9c:34:25:b0:47:99:ce:1d:7c:ff:90:53: 25:1e:36:6f:5f:bb:ca:56:f7:c7:83:cd:7b:0d:8c:48:1c:b8: e1:48:bb:b5:6f:93:f5:34:a1:8f:54:e1:45:59:fb:ef:8e:8e: 57:af:ff:60:fa:52:fd:e0:84:5b:3b:e3:f5:ab:47:0c:69:05: 06:4b:bb:8d:9c:40:12:16:c2:af:8e:c3:0a:e4:40:ec:3f:db: 14:20:81:e6:05:12:65:76:46:5a:36:16:c5:bd:3f:65:2e:a8: df:40:9b:26:b6:b0:ef:f9:c9:5e:c0:96:4b:f4:19:9c:b7:7e: 9d:cf:4e:ec:79:5a:89:6b:f2:b3:58:b1:c1:76:0f:73:08:54: 49:27:d8:33:0f:a9:8b:3e:d0:01:3a:1e:10:ac:1d:2a:83:a0: 69:90:35:bc:4b:98:f8:82:fe:67:ed:b4:58:1b:ee:cd:3d:2e: 2e:05:5e:f3:54:e3:c1:a1:f1:d4:e5:45:04:e5:88:32:be:23: 8f:ea:d2:99 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAhgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjlDNzQxMTAvBgNVBAUTKDAwMTM3OTIwNzhEMTFCMkY5NDAzMEQ3QzNCRUVGNTAx MzJBMjZENDAwHhcNMjUwNzIzMDIzMjMyWhcNMjUwNzMwMDIzMjMyWjAYMRYwFAYD VQQDEw02ODgwNDljMC1lYjMxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsPN/rcQW+09mRH6NrxmmM6pk2qxMcBy6QFj3jRRC0/RMGOGCVW6t/ffWE8fa SYvLGOGccNK+tNtsxULXdVGcEIcsjUjZesspQO6FU3rIolbqWTdksHqkr7Nb4gA/ gY8a4kzcAXCtjSqQ3ENhROjZS8vrxhEVSRhFY3WH2OREw5EYqDdq6WXMU+OXRIOB bXGJMcDUTQXtvSvEu4o3qc4y3At19OSxHFAk6PP8VJOZdIGRrzEdflt+wCnfXjpO UbHREedCf+wCSbBVl/aQrs6LtZoYXSQYqI8l63lVgIczcIdo+2YB6Qno2Cizygxm 6ggl+3FVnEnA0JXh6S+aIzL2iQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPFSZmjk tCuiZ6RMkIMzfC2IkIm8MB8GA1UdIwQYMBaAFAATeSB40RsvlAMNfDvu9QEyom1A MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCOUM3NC80NENDOTcxRTRF MUYxMUVEQjNFNkNDMkZDNEY5QUUwMi9BQk41SUhqUkd5LVVBdzE4Ty03MUFUS2li VUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0FCTjVJSGpSR3ktVUF3MThPLTcxQVRLaWJVQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC OUM3NC80NENDOTcxRTRFMUYxMUVEQjNFNkNDMkZDNEY5QUUwMi9BQk41SUhqUkd5 LVVBdzE4Ty03MUFUS2liVUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBtjM+XQZ9L4Pal/T+16fNOroqfRTRZcJ9LUjiGVedej1EAiqPSOWVC ZPrJM6yCZKp8HsdMYWa2BcLbl9ucNCWwR5nOHXz/kFMlHjZvX7vKVvfHg817DYxI HLjhSLu1b5P1NKGPVOFFWfvvjo5Xr/9g+lL94IRbO+P1q0cMaQUGS7uNnEASFsKv jsMK5EDsP9sUIIHmBRJldkZaNhbFvT9lLqjfQJsmtrDv+clewJZL9Bmct36dz07s eVqJa/KzWLHBdg9zCFRJJ9gzD6mLPtABOh4QrB0qg6BpkDW8S5j4gv5n7bRYG+7N PS4uBV7zVOPBofHU5UUE5YgyviOP6tKZ -----END CERTIFICATE-----Generated at Wed Jul 23 12:10:46 2025 by rpki-client