$ rpki-client -vvf rpki.apnic.net/member_repository/A91D3F8E/6C4089BA216C11EEB28BF24CC4F9AE02/1ABRvI3aYMky7gd2mrhnvvqNQvY.mft File: 1ABRvI3aYMky7gd2mrhnvvqNQvY.mft (raw, json) Hash identifier: g/MxBKv82d7I/NaLC4AR8b1faQoVsR5o6fG3uHab46k= Subject key identifier: BF:22:00:0A:F9:67:1B:57:53:2D:DF:46:62:AF:2F:AC:E6:A5:B1:5B Authority key identifier: D4:00:51:BC:8D:DA:60:C9:32:EE:07:76:9A:B8:67:BE:FA:8D:42:F6 Certificate issuer: /CN=A91D3F8E/serialNumber=D40051BC8DDA60C932EE07769AB867BEFA8D42F6 Certificate serial: 01BF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1ABRvI3aYMky7gd2mrhnvvqNQvY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D3F8E/6C4089BA216C11EEB28BF24CC4F9AE02/1ABRvI3aYMky7gd2mrhnvvqNQvY.mft Manifest number: 019E Signing time: Sat 19 Jul 2025 03:53:44 +0000 Manifest this update: Sat 19 Jul 2025 03:53:44 +0000 Manifest next update: Sat 26 Jul 2025 03:53:44 +0000 Files and hashes: 1: 1ABRvI3aYMky7gd2mrhnvvqNQvY.crl (hash: 7Kzloi9Mu77DBk8qPw3g0lpqwvov4p9huWWv4kM76Wc=) 2: F8B64B2A97BB11EF9D4C9647C4F9AE02.roa (hash: pyGqakx6aToXl1NPvkP6t5S+uv8P5F7PIid49DfaOVg=) 3: C0E3BC02B8B611EFBD4C6F4AC4F9AE02.roa (hash: iK6flRTT/R1NX18TACntkfKJoThokFSeTRkG+bdqrmA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D3F8E/6C4089BA216C11EEB28BF24CC4F9AE02/1ABRvI3aYMky7gd2mrhnvvqNQvY.crl rsync://rpki.apnic.net/member_repository/A91D3F8E/6C4089BA216C11EEB28BF24CC4F9AE02/1ABRvI3aYMky7gd2mrhnvvqNQvY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1ABRvI3aYMky7gd2mrhnvvqNQvY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 03:53:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 447 (0x1bf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D3F8E, serialNumber=D40051BC8DDA60C932EE07769AB867BEFA8D42F6 Validity Not Before: Jul 19 03:53:44 2025 GMT Not After : Jul 26 03:53:44 2025 GMT Subject: CN=687b16c8-07c7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:6a:3a:63:f6:c3:93:c2:1c:6d:78:c5:87:50: 07:70:d2:bc:34:2c:f1:37:80:23:02:6e:5c:58:e6: 99:0b:9c:3e:0e:f4:1d:53:b8:44:ab:84:6a:33:3f: 76:8e:a8:20:97:a1:bb:60:eb:52:a8:1e:2e:c5:c5: fa:b0:d3:dc:6a:01:e5:3d:00:87:aa:52:e3:de:69: cc:21:3a:1f:03:a7:c1:ce:c2:13:83:08:cb:4b:04: 0d:84:83:f4:cd:8b:2e:5e:55:e6:eb:3c:4e:e9:dd: 16:e2:30:56:ba:aa:24:4c:f1:01:8d:7f:e1:31:5a: 21:be:19:02:a6:9d:84:d3:b7:a0:ff:d6:8c:d7:74: b7:53:9e:e2:04:7c:9c:d9:f3:e3:ee:1c:1d:78:f0: 5e:16:27:13:5b:56:56:d0:76:e5:2a:09:1e:bd:e7: 9f:cd:34:c2:e1:7a:8e:60:e3:01:60:8b:6e:d3:21: 53:9b:c3:33:bb:95:5f:af:df:f3:82:87:c2:bb:9b: da:f6:30:a2:bf:ef:16:f7:88:91:a0:86:d1:6d:f7: 28:77:3c:60:e3:6d:70:a2:de:73:c2:db:a7:82:f9: 39:78:1b:1f:8f:ad:2c:98:53:6d:33:e0:fc:d4:eb: 06:ac:76:2e:0e:a0:e4:de:9c:66:a7:9e:94:1c:d8: e5:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:22:00:0A:F9:67:1B:57:53:2D:DF:46:62:AF:2F:AC:E6:A5:B1:5B X509v3 Authority Key Identifier: keyid:D4:00:51:BC:8D:DA:60:C9:32:EE:07:76:9A:B8:67:BE:FA:8D:42:F6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D3F8E/6C4089BA216C11EEB28BF24CC4F9AE02/1ABRvI3aYMky7gd2mrhnvvqNQvY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1ABRvI3aYMky7gd2mrhnvvqNQvY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D3F8E/6C4089BA216C11EEB28BF24CC4F9AE02/1ABRvI3aYMky7gd2mrhnvvqNQvY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1e:7f:d1:ac:a7:df:60:0d:24:35:e1:85:3f:77:ed:3a:f4:57: 15:d2:92:6d:29:52:fe:f2:12:dc:45:e0:25:62:dd:0d:87:8d: d5:47:24:8e:95:6b:9a:75:7e:38:68:b1:0e:ef:cf:1c:8b:d8: 03:21:44:72:bd:50:1b:2f:51:f3:54:b3:47:1e:28:0a:f2:d5: bc:fb:bf:78:53:28:2a:62:0b:a6:6b:fd:30:3b:f2:e3:49:4f: dd:fd:66:cd:da:6c:45:80:40:3f:cb:0c:1b:ac:d8:8e:73:c0: 6e:a2:20:7d:26:fd:f7:5c:87:4e:4d:16:d7:c4:f3:1d:d8:c7: a7:4e:c6:24:42:b6:12:8e:18:0c:ac:c0:8d:6a:6f:51:be:cd: 47:fa:bc:b4:74:f5:fd:d3:45:a6:ec:f4:0b:e6:d5:f0:3c:f7: 61:1a:20:55:5b:ee:4b:e4:8d:b8:65:00:5f:42:73:d8:53:2b: 78:eb:ad:0f:51:0d:c3:63:72:30:03:e0:19:ab:08:6c:7b:e0: c6:44:c7:c9:95:db:f7:9b:5d:f9:54:4c:fe:4d:23:4f:2b:47: 66:7c:b3:b3:b9:01:e5:bc:b3:52:29:50:b1:18:16:e4:28:12: 6e:d2:19:92:ae:99:9d:1e:de:d0:05:0d:73:ad:55:75:46:27: 90:38:30:03 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAb8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDNGOEUxMTAvBgNVBAUTKEQ0MDA1MUJDOEREQTYwQzkzMkVFMDc3NjlBQjg2N0JF RkE4RDQyRjYwHhcNMjUwNzE5MDM1MzQ0WhcNMjUwNzI2MDM1MzQ0WjAYMRYwFAYD VQQDEw02ODdiMTZjOC0wN2M3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAy2o6Y/bDk8IcbXjFh1AHcNK8NCzxN4AjAm5cWOaZC5w+DvQdU7hEq4RqMz92 jqggl6G7YOtSqB4uxcX6sNPcagHlPQCHqlLj3mnMITofA6fBzsITgwjLSwQNhIP0 zYsuXlXm6zxO6d0W4jBWuqokTPEBjX/hMVohvhkCpp2E07eg/9aM13S3U57iBHyc 2fPj7hwdePBeFicTW1ZW0HblKgkeveefzTTC4XqOYOMBYItu0yFTm8Mzu5Vfr9/z gofCu5va9jCiv+8W94iRoIbRbfcodzxg421wot5zwtungvk5eBsfj60smFNtM+D8 1OsGrHYuDqDk3pxmp56UHNjlzwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFL8iAAr5 ZxtXUy3fRmKvL6zmpbFbMB8GA1UdIwQYMBaAFNQAUbyN2mDJMu4Hdpq4Z776jUL2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEM0Y4RS82QzQwODlCQTIx NkMxMUVFQjI4QkYyNENDNEY5QUUwMi8xQUJSdkkzYVlNa3k3Z2QybXJobnZ2cU5R dlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzFBQlJ2STNhWU1reTdnZDJtcmhudnZxTlF2WS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE M0Y4RS82QzQwODlCQTIxNkMxMUVFQjI4QkYyNENDNEY5QUUwMi8xQUJSdkkzYVlN a3k3Z2QybXJobnZ2cU5RdlkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAef9Gsp99gDSQ14YU/d+069FcV0pJtKVL+8hLcReAlYt0Nh43VRySO lWuadX44aLEO788ci9gDIURyvVAbL1HzVLNHHigK8tW8+794UygqYguma/0wO/Lj SU/d/WbN2mxFgEA/ywwbrNiOc8BuoiB9Jv33XIdOTRbXxPMd2MenTsYkQrYSjhgM rMCNam9Rvs1H+ry0dPX900Wm7PQL5tXwPPdhGiBVW+5L5I24ZQBfQnPYUyt4660P UQ3DY3IwA+AZqwhse+DGRMfJldv3m135VEz+TSNPK0dmfLOzuQHlvLNSKVCxGBbk KBJu0hmSrpmdHt7QBQ1zrVV1RieQODAD -----END CERTIFICATE-----Generated at Sun Jul 20 03:40:04 2025 by rpki-client