$ rpki-client -vvf rpki.apnic.net/member_repository/A91FD292/D1619A646CC511EAA8359953C4F9AE02/-AbfRcmATdTJ0eUsYuDig8D4DFM.mft File: -AbfRcmATdTJ0eUsYuDig8D4DFM.mft (raw, json) Hash identifier: efdSTmdbGFQYqsTVxzfMSOvEfTtcwW7eVCFVCamvAVw= Subject key identifier: 9F:EA:08:14:5A:37:39:8E:F6:86:08:BD:27:2B:CA:8F:2F:C7:B5:E3 Authority key identifier: F8:06:DF:45:C9:80:4D:D4:C9:D1:E5:2C:62:E0:E2:83:C0:F8:0C:53 Certificate issuer: /CN=A91FD292/serialNumber=F806DF45C9804DD4C9D1E52C62E0E283C0F80C53 Certificate serial: 0A0B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-AbfRcmATdTJ0eUsYuDig8D4DFM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FD292/D1619A646CC511EAA8359953C4F9AE02/-AbfRcmATdTJ0eUsYuDig8D4DFM.mft Manifest number: 0A0B Signing time: Fri 04 Apr 2025 19:58:25 +0000 Manifest this update: Fri 04 Apr 2025 19:58:24 +0000 Manifest next update: Fri 11 Apr 2025 19:58:24 +0000 Files and hashes: 1: -AbfRcmATdTJ0eUsYuDig8D4DFM.crl (hash: xT/SBFPEDKYwUSXcHlazFshg198xundwOWl0D9bfjdQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FD292/D1619A646CC511EAA8359953C4F9AE02/-AbfRcmATdTJ0eUsYuDig8D4DFM.crl rsync://rpki.apnic.net/member_repository/A91FD292/D1619A646CC511EAA8359953C4F9AE02/-AbfRcmATdTJ0eUsYuDig8D4DFM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-AbfRcmATdTJ0eUsYuDig8D4DFM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Apr 2025 19:58:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2571 (0xa0b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FD292 Validity Not Before: Apr 4 19:58:24 2025 GMT Not After : Apr 11 19:58:24 2025 GMT Subject: CN=67f039e0-b4b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:dd:c5:de:97:d3:cd:6e:4c:5e:df:31:15:93: 38:09:67:91:98:6f:1f:83:7c:55:ce:c2:c6:d1:4f: 8c:7b:df:34:f1:e6:81:c9:81:67:d1:29:00:e4:99: f1:61:67:af:7d:54:8c:5d:d8:42:eb:87:d0:8b:ca: 32:49:10:5c:ca:ae:78:31:97:46:5e:b4:a5:70:ac: e5:f1:4f:ba:3c:2a:32:a8:cc:11:df:8c:38:79:a9: 56:db:20:0e:72:d4:93:a8:28:08:66:dd:b0:0a:dd: f0:ac:d3:a0:88:fb:db:06:4e:fc:5f:a3:4b:39:dc: 51:bb:d0:ba:80:e8:d8:46:e6:2c:18:f5:57:a6:4a: ad:09:ae:07:71:c5:46:93:44:b3:3c:ce:34:61:dd: d3:4f:84:84:55:04:91:a3:df:1f:52:da:43:c4:2a: 3c:39:a1:e8:fc:6f:b9:41:1b:ce:77:90:1d:7e:20: c5:b6:f4:67:4c:a6:82:da:fd:11:9c:6e:f2:66:be: 46:78:ea:c4:4d:d0:4d:92:f2:1d:99:90:b7:9c:f7: 40:4d:19:a0:9a:74:de:49:72:68:65:24:47:fc:10: bb:e4:bb:68:6e:c7:1b:3e:56:71:03:ba:52:51:18: 9c:dd:02:fc:a0:6d:9d:c8:89:17:f5:17:11:73:6b: 55:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:EA:08:14:5A:37:39:8E:F6:86:08:BD:27:2B:CA:8F:2F:C7:B5:E3 X509v3 Authority Key Identifier: keyid:F8:06:DF:45:C9:80:4D:D4:C9:D1:E5:2C:62:E0:E2:83:C0:F8:0C:53 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FD292/D1619A646CC511EAA8359953C4F9AE02/-AbfRcmATdTJ0eUsYuDig8D4DFM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-AbfRcmATdTJ0eUsYuDig8D4DFM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FD292/D1619A646CC511EAA8359953C4F9AE02/-AbfRcmATdTJ0eUsYuDig8D4DFM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 97:65:8b:b0:47:87:4f:82:66:9c:7d:2c:89:c7:22:f5:1e:26: b7:e5:80:8a:cd:13:7f:3f:cc:9b:48:4c:f2:c3:9d:38:68:e0: 6c:06:be:d2:c0:b7:78:60:46:fe:4b:c0:ca:65:a5:e1:9d:fd: 44:b3:d3:43:36:71:10:98:68:f1:b8:5f:0f:b0:72:80:11:79: 9e:3a:81:7a:0b:f1:58:f4:b8:fc:65:4e:8f:0f:5e:13:f5:ac: 07:f8:59:ed:d8:c5:06:88:48:3a:6c:46:43:48:12:c2:03:37: 0c:bb:90:17:bd:05:6c:0e:bf:93:67:25:03:78:1c:20:85:e2: 0a:69:d2:1f:b5:f9:74:fd:7d:16:aa:af:80:8c:5c:5a:8f:c2: f1:31:89:c3:e4:25:ba:e4:1c:88:e5:54:d0:e5:aa:93:e5:43: 38:f8:22:65:a3:22:6c:22:6c:06:3a:75:bc:4d:83:63:08:b1: b0:41:9d:68:05:85:96:c3:e0:f9:3b:7c:70:40:24:cf:b9:f4: 8e:2a:56:e4:44:ac:f8:d6:48:0a:55:15:fe:2b:d0:f7:05:dc: e5:67:11:f1:ad:4b:91:06:34:8c:41:62:ec:e6:15:fd:b2:9d: a6:22:fc:09:d9:d5:d8:76:cd:59:80:53:fc:ce:3c:82:2e:b3: 66:db:b0:f2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCgswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkQyOTIxMTAvBgNVBAUTKEY4MDZERjQ1Qzk4MDRERDRDOUQxRTUyQzYyRTBFMjgz QzBGODBDNTMwHhcNMjUwNDA0MTk1ODI0WhcNMjUwNDExMTk1ODI0WjAYMRYwFAYD VQQDEw02N2YwMzllMC1iNGI4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA393F3pfTzW5MXt8xFZM4CWeRmG8fg3xVzsLG0U+Me9808eaByYFn0SkA5Jnx YWevfVSMXdhC64fQi8oySRBcyq54MZdGXrSlcKzl8U+6PCoyqMwR34w4ealW2yAO ctSTqCgIZt2wCt3wrNOgiPvbBk78X6NLOdxRu9C6gOjYRuYsGPVXpkqtCa4HccVG k0SzPM40Yd3TT4SEVQSRo98fUtpDxCo8OaHo/G+5QRvOd5AdfiDFtvRnTKaC2v0R nG7yZr5GeOrETdBNkvIdmZC3nPdATRmgmnTeSXJoZSRH/BC75LtobscbPlZxA7pS URic3QL8oG2dyIkX9RcRc2tVrwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJ/qCBRa NzmO9oYIvScryo8vx7XjMB8GA1UdIwQYMBaAFPgG30XJgE3UydHlLGLg4oPA+AxT MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGRDI5Mi9EMTYxOUE2NDZD QzUxMUVBQTgzNTk5NTNDNEY5QUUwMi8tQWJmUmNtQVRkVEowZVVzWXVEaWc4RDRE Rk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy1BYmZSY21BVGRUSjBlVXNZdURpZzhENERGTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG RDI5Mi9EMTYxOUE2NDZDQzUxMUVBQTgzNTk5NTNDNEY5QUUwMi8tQWJmUmNtQVRk VEowZVVzWXVEaWc4RDRERk0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCXZYuwR4dPgmacfSyJxyL1Hia35YCKzRN/P8ybSEzyw504aOBsBr7S wLd4YEb+S8DKZaXhnf1Es9NDNnEQmGjxuF8PsHKAEXmeOoF6C/FY9Lj8ZU6PD14T 9awH+Fnt2MUGiEg6bEZDSBLCAzcMu5AXvQVsDr+TZyUDeBwgheIKadIftfl0/X0W qq+AjFxaj8LxMYnD5CW65ByI5VTQ5aqT5UM4+CJloyJsImwGOnW8TYNjCLGwQZ1o BYWWw+D5O3xwQCTPufSOKlbkRKz41kgKVRX+K9D3BdzlZxHxrUuRBjSMQWLs5hX9 sp2mIvwJ2dXYds1ZgFP8zjyCLrNm27Dy -----END CERTIFICATE-----Generated at Sat Apr 5 14:17:00 2025 by rpki-client