$ rpki-client -vvf rpki.apnic.net/member_repository/A91D3F8E/6C4089BA216C11EEB28BF24CC4F9AE02/1ABRvI3aYMky7gd2mrhnvvqNQvY.mft File: 1ABRvI3aYMky7gd2mrhnvvqNQvY.mft (raw, json) Hash identifier: cN6QHz0KAMJVPaMfblFoUwkJeDWlEQAE5WOs7if5CpQ= Subject key identifier: 31:B2:F4:A3:DE:0D:54:8B:03:C4:D8:61:B1:FD:23:64:6D:81:47:9C Authority key identifier: D4:00:51:BC:8D:DA:60:C9:32:EE:07:76:9A:B8:67:BE:FA:8D:42:F6 Certificate issuer: /CN=A91D3F8E/serialNumber=D40051BC8DDA60C932EE07769AB867BEFA8D42F6 Certificate serial: 0183 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1ABRvI3aYMky7gd2mrhnvvqNQvY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D3F8E/6C4089BA216C11EEB28BF24CC4F9AE02/1ABRvI3aYMky7gd2mrhnvvqNQvY.mft Manifest number: 0165 Signing time: Thu 03 Apr 2025 03:33:42 +0000 Manifest this update: Thu 03 Apr 2025 03:33:42 +0000 Manifest next update: Thu 10 Apr 2025 03:33:42 +0000 Files and hashes: 1: 1ABRvI3aYMky7gd2mrhnvvqNQvY.crl (hash: TgBUDhwzZYytva/WMvoS6Lf1uSzQ+NIeK77x8PNq+WA=) 2: F8B64B2A97BB11EF9D4C9647C4F9AE02.roa (hash: 61jykwbjSWlecTxQbXexQrYBIHCiEouIxmqT8SrgbD0=) 3: C0E3BC02B8B611EFBD4C6F4AC4F9AE02.roa (hash: W/53nThgtqJJzKbcr1z4E+VxinzpZInwajjfUaYcr0E=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D3F8E/6C4089BA216C11EEB28BF24CC4F9AE02/1ABRvI3aYMky7gd2mrhnvvqNQvY.crl rsync://rpki.apnic.net/member_repository/A91D3F8E/6C4089BA216C11EEB28BF24CC4F9AE02/1ABRvI3aYMky7gd2mrhnvvqNQvY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1ABRvI3aYMky7gd2mrhnvvqNQvY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Apr 2025 03:33:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 387 (0x183) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D3F8E Validity Not Before: Apr 3 03:33:42 2025 GMT Not After : Apr 10 03:33:42 2025 GMT Subject: CN=67ee0196-6661 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:20:cc:47:71:38:b8:e3:cb:a1:f7:d4:4f:fd: ee:bb:4e:b9:76:fa:35:7b:2e:ec:18:40:35:f6:59: 75:47:71:36:63:dc:3b:e6:09:97:44:a6:01:43:e7: 82:7a:01:db:2f:cf:b5:78:fd:90:a5:8a:33:6e:50: 90:2c:9e:72:bd:dd:d5:9a:d0:78:28:bf:79:7b:99: f9:2b:5a:74:b4:15:67:09:b5:42:cb:26:0c:67:88: df:82:22:2f:19:43:bb:e6:8f:0b:4e:0e:6d:60:0d: 6c:93:22:0c:c4:ff:7c:39:16:ad:65:ce:ee:91:d1: db:ae:fd:2d:f1:e9:60:d1:9f:cb:4d:43:fb:0c:86: 17:ae:37:69:d4:46:98:62:27:65:6e:af:9f:e4:f3: 1d:6a:60:86:97:a1:02:59:ea:51:ef:62:6b:af:4d: df:c6:6b:53:aa:96:0a:c9:0c:b8:27:f8:fe:f5:fe: 1c:fc:ed:85:3d:c0:da:eb:9b:5e:a5:61:22:96:a1: 4b:f1:6b:f2:71:cb:56:79:3c:58:8a:77:55:5f:df: a3:b1:d3:7e:47:b1:58:73:3f:74:f2:5d:88:b1:5e: 9b:e3:94:c3:de:1e:7e:af:fa:5e:f5:55:ab:2c:25: 44:c6:71:3f:ee:77:43:bb:75:89:22:cc:a4:4f:dd: 5c:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:B2:F4:A3:DE:0D:54:8B:03:C4:D8:61:B1:FD:23:64:6D:81:47:9C X509v3 Authority Key Identifier: keyid:D4:00:51:BC:8D:DA:60:C9:32:EE:07:76:9A:B8:67:BE:FA:8D:42:F6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D3F8E/6C4089BA216C11EEB28BF24CC4F9AE02/1ABRvI3aYMky7gd2mrhnvvqNQvY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1ABRvI3aYMky7gd2mrhnvvqNQvY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D3F8E/6C4089BA216C11EEB28BF24CC4F9AE02/1ABRvI3aYMky7gd2mrhnvvqNQvY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption aa:08:65:23:57:ec:04:86:7e:e7:f3:be:87:61:91:4f:dc:2b: d8:be:26:3c:cf:a9:88:c8:3e:c2:29:22:8a:9f:84:26:ad:17: f4:34:a0:8d:cd:da:da:67:1d:8f:ab:c7:f3:f9:57:c6:b7:a3: 95:71:2f:b8:d8:de:69:e7:35:ff:39:be:1d:6b:8d:e5:e8:7d: cc:57:84:35:4f:c3:dd:f0:73:49:1d:ed:9a:87:fa:52:92:75: fd:0e:cc:e6:7e:d3:7d:3f:e3:d5:96:70:37:6d:c2:0c:72:2d: f6:93:37:c0:5f:aa:e8:87:46:dd:c8:76:6a:7a:42:be:00:22: b8:0c:52:35:16:c6:bc:f7:c6:0a:05:dd:51:28:b0:bb:23:d8: 91:c3:97:bf:d0:69:b6:11:98:ed:ed:23:42:8e:1a:67:cd:16: 28:ff:e1:4b:87:02:af:1d:43:60:0c:29:76:f0:01:74:9d:13: 05:d0:07:f5:6e:1c:82:b0:2e:85:ec:0c:59:bd:58:5f:47:e6: 5e:0e:58:da:fe:a8:06:45:bf:c5:5f:be:6c:ac:78:e0:b2:cd: 79:4b:1e:d0:e6:2b:fd:0a:3b:fd:8d:e7:57:68:6a:b2:81:b1: 5d:57:d1:95:df:42:a5:51:ca:a2:69:7f:71:6f:04:5b:f5:da: 07:58:cf:cd -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAYMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDNGOEUxMTAvBgNVBAUTKEQ0MDA1MUJDOEREQTYwQzkzMkVFMDc3NjlBQjg2N0JF RkE4RDQyRjYwHhcNMjUwNDAzMDMzMzQyWhcNMjUwNDEwMDMzMzQyWjAYMRYwFAYD VQQDEw02N2VlMDE5Ni02NjYxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3CDMR3E4uOPLoffUT/3uu065dvo1ey7sGEA19ll1R3E2Y9w75gmXRKYBQ+eC egHbL8+1eP2QpYozblCQLJ5yvd3VmtB4KL95e5n5K1p0tBVnCbVCyyYMZ4jfgiIv GUO75o8LTg5tYA1skyIMxP98ORatZc7ukdHbrv0t8elg0Z/LTUP7DIYXrjdp1EaY Yidlbq+f5PMdamCGl6ECWepR72Jrr03fxmtTqpYKyQy4J/j+9f4c/O2FPcDa65te pWEilqFL8WvycctWeTxYindVX9+jsdN+R7FYcz908l2IsV6b45TD3h5+r/pe9VWr LCVExnE/7ndDu3WJIsykT91ckQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDGy9KPe DVSLA8TYYbH9I2RtgUecMB8GA1UdIwQYMBaAFNQAUbyN2mDJMu4Hdpq4Z776jUL2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEM0Y4RS82QzQwODlCQTIx NkMxMUVFQjI4QkYyNENDNEY5QUUwMi8xQUJSdkkzYVlNa3k3Z2QybXJobnZ2cU5R dlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzFBQlJ2STNhWU1reTdnZDJtcmhudnZxTlF2WS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE M0Y4RS82QzQwODlCQTIxNkMxMUVFQjI4QkYyNENDNEY5QUUwMi8xQUJSdkkzYVlN a3k3Z2QybXJobnZ2cU5RdlkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCqCGUjV+wEhn7n876HYZFP3CvYviY8z6mIyD7CKSKKn4QmrRf0NKCN zdraZx2Pq8fz+VfGt6OVcS+42N5p5zX/Ob4da43l6H3MV4Q1T8Pd8HNJHe2ah/pS knX9DszmftN9P+PVlnA3bcIMci32kzfAX6roh0bdyHZqekK+ACK4DFI1Fsa898YK Bd1RKLC7I9iRw5e/0Gm2EZjt7SNCjhpnzRYo/+FLhwKvHUNgDCl28AF0nRMF0Af1 bhyCsC6F7AxZvVhfR+ZeDlja/qgGRb/FX75srHjgss15Sx7Q5iv9Cjv9jedXaGqy gbFdV9GV30KlUcqiaX9xbwRb9doHWM/N -----END CERTIFICATE-----Generated at Fri Apr 4 22:22:06 2025 by rpki-client