$ rpki-client -vvf rpki.apnic.net/member_repository/A91F9605/36666D6E870911EB823B3356C4F9AE02/aBiEwMdVflJu8rxNHlq8M2rif54.mft File: aBiEwMdVflJu8rxNHlq8M2rif54.mft (raw, json) Hash identifier: RpnaWcEWJNy8ymxPlkHO7R0PLRCzyc0kMZB8nDdjjXc= Subject key identifier: 4B:61:63:A9:B1:4C:46:A0:BE:87:21:2B:16:3E:92:8A:E0:D1:5E:A7 Authority key identifier: 68:18:84:C0:C7:55:7E:52:6E:F2:BC:4D:1E:5A:BC:33:6A:E2:7F:9E Certificate issuer: /CN=A91F9605/serialNumber=681884C0C7557E526EF2BC4D1E5ABC336AE27F9E Certificate serial: 0640 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aBiEwMdVflJu8rxNHlq8M2rif54.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F9605/36666D6E870911EB823B3356C4F9AE02/aBiEwMdVflJu8rxNHlq8M2rif54.mft Manifest number: 0639 Signing time: Fri 28 Mar 2025 22:53:55 +0000 Manifest this update: Fri 28 Mar 2025 22:53:54 +0000 Manifest next update: Fri 04 Apr 2025 22:53:54 +0000 Files and hashes: 1: aBiEwMdVflJu8rxNHlq8M2rif54.crl (hash: BYer4p+yktN2HIS9+oEf8glj5WmcrYnr8SlmtEXjk8A=) 2: 75AB03A2870B11EB88E44876C4F9AE02.roa (hash: 7qI+njWvbbh+KneeLcZmySdlxOhiGVsKeC65nMgeI7E=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F9605/36666D6E870911EB823B3356C4F9AE02/aBiEwMdVflJu8rxNHlq8M2rif54.crl rsync://rpki.apnic.net/member_repository/A91F9605/36666D6E870911EB823B3356C4F9AE02/aBiEwMdVflJu8rxNHlq8M2rif54.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aBiEwMdVflJu8rxNHlq8M2rif54.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 04 Apr 2025 22:53:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1600 (0x640) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F9605 Validity Not Before: Mar 28 22:53:54 2025 GMT Not After : Apr 4 22:53:54 2025 GMT Subject: CN=67e72883-ba2e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:82:1c:57:7e:d5:66:f3:5f:eb:6e:32:09:da: 47:45:3a:32:c1:8f:48:63:34:2f:9a:4c:a4:82:ef: 8c:59:e3:f8:6b:48:b4:c8:2a:c3:63:14:92:96:72: fa:ba:6d:c9:78:01:ee:af:cc:4b:3b:6b:95:df:03: 13:b8:da:17:8e:3f:eb:16:11:42:48:75:18:7f:48: 82:ac:b4:ef:70:ab:a5:6f:78:ca:67:66:c3:05:d7: 9c:c6:69:bb:0c:22:30:e1:92:1a:35:4d:d6:6c:5a: 5d:da:0d:da:b2:f1:a5:a9:e8:12:a1:97:7d:35:ca: b8:ff:15:0e:48:29:c0:b3:8b:9a:f0:05:10:bc:a2: c6:e2:24:87:53:2f:1f:8f:62:51:09:61:5b:dd:01: d0:1b:c3:a8:4e:09:01:85:68:14:21:fa:c6:87:4f: c3:38:9a:2f:dd:7b:3a:f2:17:7b:0e:5d:a8:a7:e6: ce:82:03:3d:94:5a:43:79:16:9b:df:68:25:28:2d: a2:f4:bd:29:7e:2d:72:e0:e6:a1:af:1e:be:30:fe: e5:66:86:28:d4:db:aa:3d:b8:9a:66:39:52:bb:1b: f9:eb:dc:15:4b:d2:5c:7d:ee:c4:5c:a9:ab:47:07: 5c:af:d5:82:a9:b9:51:cb:35:d3:b6:9a:42:59:ea: 8b:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:61:63:A9:B1:4C:46:A0:BE:87:21:2B:16:3E:92:8A:E0:D1:5E:A7 X509v3 Authority Key Identifier: keyid:68:18:84:C0:C7:55:7E:52:6E:F2:BC:4D:1E:5A:BC:33:6A:E2:7F:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F9605/36666D6E870911EB823B3356C4F9AE02/aBiEwMdVflJu8rxNHlq8M2rif54.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aBiEwMdVflJu8rxNHlq8M2rif54.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F9605/36666D6E870911EB823B3356C4F9AE02/aBiEwMdVflJu8rxNHlq8M2rif54.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6c:4c:70:7b:7f:3a:8c:0b:45:d5:09:91:fe:c9:47:1b:85:9b: 27:49:e2:70:6f:92:00:17:55:37:04:b7:f1:3c:90:12:34:71: 88:3b:46:6a:6d:84:30:51:72:f7:85:5f:7a:1b:3a:b3:0e:47: d0:db:d5:0d:c5:c5:07:0a:9d:74:f6:29:df:20:b4:7b:8f:23: 86:b1:6d:99:7b:58:83:6f:66:f4:54:04:f8:a0:b4:2a:16:ed: f6:df:59:35:00:30:b1:d7:5b:a8:f1:7b:f4:e2:c1:30:d1:12: b7:e4:43:e4:87:a3:ef:90:dc:a6:c0:25:7e:7c:2e:6e:ce:bd: b8:9a:fe:5c:17:55:f3:3b:3d:ac:25:15:ea:19:92:b0:8b:e4: 7b:80:c8:07:40:e2:7f:e3:cb:8d:1d:79:63:75:db:51:0c:f5: dd:c9:d5:e0:b7:ee:3c:f9:88:fc:33:03:99:85:c3:3e:cb:7b: e3:d5:7f:b2:2b:91:a3:68:9b:cb:61:c2:50:64:2c:92:06:97: 5e:e9:03:63:ff:a9:bf:45:5b:86:0a:5a:97:8a:fd:04:bf:ba: 40:a8:f1:50:e5:d6:6b:a2:a1:e6:29:d4:d3:49:2b:1c:41:20: d0:25:ae:99:0e:b8:90:f6:cb:db:9f:43:65:91:2d:d8:42:93: a1:e5:3e:26 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBkAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Rjk2MDUxMTAvBgNVBAUTKDY4MTg4NEMwQzc1NTdFNTI2RUYyQkM0RDFFNUFCQzMz NkFFMjdGOUUwHhcNMjUwMzI4MjI1MzU0WhcNMjUwNDA0MjI1MzU0WjAYMRYwFAYD VQQDEw02N2U3Mjg4My1iYTJlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu4IcV37VZvNf624yCdpHRToywY9IYzQvmkykgu+MWeP4a0i0yCrDYxSSlnL6 um3JeAHur8xLO2uV3wMTuNoXjj/rFhFCSHUYf0iCrLTvcKulb3jKZ2bDBdecxmm7 DCIw4ZIaNU3WbFpd2g3asvGlqegSoZd9Ncq4/xUOSCnAs4ua8AUQvKLG4iSHUy8f j2JRCWFb3QHQG8OoTgkBhWgUIfrGh0/DOJov3Xs68hd7Dl2op+bOggM9lFpDeRab 32glKC2i9L0pfi1y4Oahrx6+MP7lZoYo1NuqPbiaZjlSuxv569wVS9Jcfe7EXKmr Rwdcr9WCqblRyzXTtppCWeqLAwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEthY6mx TEagvochKxY+korg0V6nMB8GA1UdIwQYMBaAFGgYhMDHVX5SbvK8TR5avDNq4n+e MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGOTYwNS8zNjY2NkQ2RTg3 MDkxMUVCODIzQjMzNTZDNEY5QUUwMi9hQmlFd01kVmZsSnU4cnhOSGxxOE0ycmlm NTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2FCaUV3TWRWZmxKdThyeE5IbHE4TTJyaWY1NC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG OTYwNS8zNjY2NkQ2RTg3MDkxMUVCODIzQjMzNTZDNEY5QUUwMi9hQmlFd01kVmZs SnU4cnhOSGxxOE0ycmlmNTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBsTHB7fzqMC0XVCZH+yUcbhZsnSeJwb5IAF1U3BLfxPJASNHGIO0Zq bYQwUXL3hV96GzqzDkfQ29UNxcUHCp109infILR7jyOGsW2Ze1iDb2b0VAT4oLQq Fu3231k1ADCx11uo8Xv04sEw0RK35EPkh6PvkNymwCV+fC5uzr24mv5cF1XzOz2s JRXqGZKwi+R7gMgHQOJ/48uNHXljddtRDPXdydXgt+48+Yj8MwOZhcM+y3vj1X+y K5GjaJvLYcJQZCySBpde6QNj/6m/RVuGClqXiv0Ev7pAqPFQ5dZroqHmKdTTSSsc QSDQJa6ZDriQ9svbn0NlkS3YQpOh5T4m -----END CERTIFICATE-----Generated at Fri Apr 4 22:24:48 2025 by rpki-client