$ rpki-client -vvf rpki.apnic.net/member_repository/A91B9C74/44CC971E4E1F11EDB3E6CC2FC4F9AE02/ABN5IHjRGy-UAw18O-71ATKibUA.mft File: ABN5IHjRGy-UAw18O-71ATKibUA.mft (raw, json) Hash identifier: wtykfuf8V9Uuab9zFy6tRPcVXXm9LQAzbPIqM5r7mK0= Subject key identifier: A4:C7:8A:3D:CA:29:60:4F:02:27:A7:E5:02:C5:61:6C:66:C1:68:8C Authority key identifier: 00:13:79:20:78:D1:1B:2F:94:03:0D:7C:3B:EE:F5:01:32:A2:6D:40 Certificate issuer: /CN=A91B9C74/serialNumber=0013792078D11B2F94030D7C3BEEF50132A26D40 Certificate serial: 01FD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ABN5IHjRGy-UAw18O-71ATKibUA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B9C74/44CC971E4E1F11EDB3E6CC2FC4F9AE02/ABN5IHjRGy-UAw18O-71ATKibUA.mft Manifest number: 01F2 Signing time: Sat 31 May 2025 02:18:58 +0000 Manifest this update: Sat 31 May 2025 02:18:58 +0000 Manifest next update: Sat 07 Jun 2025 02:18:58 +0000 Files and hashes: 1: ABN5IHjRGy-UAw18O-71ATKibUA.crl (hash: uk2JG7s1OeGy626YnDP5QfOaEF7qRvlqDPiw+V0vIPU=) 2: F853742A5A9911EDA14F453FC4F9AE02.roa (hash: KraWg2S7y0V2b10B2mX+HUVf2KSluU5nYap1xQfIHpI=) 3: 273E7B284E2311EDB6F68A4AC4F9AE02.roa (hash: hm2JBw4RijcoPdIwahJRqhi4gARjxEI7uzccrW/R3X8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B9C74/44CC971E4E1F11EDB3E6CC2FC4F9AE02/ABN5IHjRGy-UAw18O-71ATKibUA.crl rsync://rpki.apnic.net/member_repository/A91B9C74/44CC971E4E1F11EDB3E6CC2FC4F9AE02/ABN5IHjRGy-UAw18O-71ATKibUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ABN5IHjRGy-UAw18O-71ATKibUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 02:18:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 509 (0x1fd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B9C74, serialNumber=0013792078D11B2F94030D7C3BEEF50132A26D40 Validity Not Before: May 31 02:18:58 2025 GMT Not After : Jun 7 02:18:58 2025 GMT Subject: CN=683a6712-502c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:4e:91:50:c3:8a:cf:cf:dd:4f:4e:42:30:e1: 94:b4:f2:fd:c0:b1:cb:d8:86:8b:99:6b:68:89:ae: 68:97:39:9c:85:b9:5a:77:84:ea:ad:03:72:a2:b8: cd:e6:fb:93:a4:52:18:42:75:e9:45:79:77:d0:7c: 93:eb:4f:3b:ee:a8:b3:cd:f7:d8:a8:22:64:78:96: a1:6a:09:9e:7c:85:45:71:6c:85:5d:0c:cf:d9:78: 42:92:43:5f:c9:56:41:ee:4f:3e:a1:c6:1f:73:52: a9:ab:9a:dd:7b:3f:6c:c0:9c:9d:22:e0:98:55:f9: 03:8d:fe:42:b0:96:8c:82:3d:e2:e4:17:0d:b6:0c: 3f:37:99:6f:05:e9:98:4e:40:38:32:5c:f3:d6:2c: 57:07:d7:7a:f9:8f:34:07:59:aa:44:3e:f9:ca:f6: 63:55:b0:6e:ad:6a:a8:ad:9e:e2:6a:34:61:50:5d: b1:90:c1:38:5c:c3:3a:bc:f2:73:5f:78:71:d6:27: bb:c5:b2:41:e7:0a:a0:fd:ec:6c:bf:54:92:d0:2e: 1a:3c:b3:32:86:2d:10:c2:fb:e6:34:32:69:94:a4: eb:09:ed:ba:17:9f:77:27:a8:8b:bd:da:71:62:3a: 45:94:89:a2:11:1d:9e:c8:6d:57:b1:f0:fc:bc:ac: 7d:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:C7:8A:3D:CA:29:60:4F:02:27:A7:E5:02:C5:61:6C:66:C1:68:8C X509v3 Authority Key Identifier: keyid:00:13:79:20:78:D1:1B:2F:94:03:0D:7C:3B:EE:F5:01:32:A2:6D:40 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B9C74/44CC971E4E1F11EDB3E6CC2FC4F9AE02/ABN5IHjRGy-UAw18O-71ATKibUA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ABN5IHjRGy-UAw18O-71ATKibUA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B9C74/44CC971E4E1F11EDB3E6CC2FC4F9AE02/ABN5IHjRGy-UAw18O-71ATKibUA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 64:d8:8d:78:a2:ef:d0:78:37:06:f5:18:d0:ec:54:80:6e:e6: 24:b5:14:10:4d:d8:f5:b7:01:ff:8f:ad:4d:79:26:b8:68:f7: a6:65:ed:53:36:0e:cc:0b:67:4a:ca:53:0b:e2:3f:c9:26:04: 70:54:d1:ea:bc:28:32:a8:d7:a2:5e:dd:c7:c9:72:0e:31:f5: cf:d3:1e:fb:37:99:0f:79:a2:1a:b3:aa:6e:f9:3b:a7:15:5c: 83:23:8d:11:d9:f2:b0:a5:31:47:6f:0e:45:93:d8:1e:f6:e4: f2:79:de:f7:3e:31:9b:bb:68:f2:f3:0d:7e:4c:57:41:d2:2b: 35:3b:20:84:01:d4:73:66:86:5f:bf:0b:67:a1:76:6e:52:50: ab:67:f3:5a:13:8e:2f:ad:73:c2:9a:28:4e:cf:da:2a:5f:6f: 7d:a5:85:ec:c4:0d:79:f3:3b:fd:a4:31:89:b8:dc:80:c3:05: 99:f4:b8:1e:2a:85:36:b6:ca:b5:ac:09:63:66:20:25:af:77: b1:7b:1b:ec:00:8a:b4:2e:c6:96:d1:0b:16:89:a2:a5:8c:7c: a9:9b:30:01:45:de:ae:16:48:69:6c:30:94:1b:3f:94:bb:25: 8b:ee:84:b2:b8:49:f9:0a:d2:b0:0c:cb:92:58:c7:d8:6d:8b: 4b:0a:65:e5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAf0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjlDNzQxMTAvBgNVBAUTKDAwMTM3OTIwNzhEMTFCMkY5NDAzMEQ3QzNCRUVGNTAx MzJBMjZENDAwHhcNMjUwNTMxMDIxODU4WhcNMjUwNjA3MDIxODU4WjAYMRYwFAYD VQQDEw02ODNhNjcxMi01MDJjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAq06RUMOKz8/dT05CMOGUtPL9wLHL2IaLmWtoia5olzmchblad4TqrQNyorjN 5vuTpFIYQnXpRXl30HyT60877qizzffYqCJkeJahagmefIVFcWyFXQzP2XhCkkNf yVZB7k8+ocYfc1Kpq5rdez9swJydIuCYVfkDjf5CsJaMgj3i5BcNtgw/N5lvBemY TkA4Mlzz1ixXB9d6+Y80B1mqRD75yvZjVbBurWqorZ7iajRhUF2xkME4XMM6vPJz X3hx1ie7xbJB5wqg/exsv1SS0C4aPLMyhi0QwvvmNDJplKTrCe26F593J6iLvdpx YjpFlImiER2eyG1XsfD8vKx9eQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKTHij3K KWBPAien5QLFYWxmwWiMMB8GA1UdIwQYMBaAFAATeSB40RsvlAMNfDvu9QEyom1A MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCOUM3NC80NENDOTcxRTRF MUYxMUVEQjNFNkNDMkZDNEY5QUUwMi9BQk41SUhqUkd5LVVBdzE4Ty03MUFUS2li VUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0FCTjVJSGpSR3ktVUF3MThPLTcxQVRLaWJVQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC OUM3NC80NENDOTcxRTRFMUYxMUVEQjNFNkNDMkZDNEY5QUUwMi9BQk41SUhqUkd5 LVVBdzE4Ty03MUFUS2liVUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBk2I14ou/QeDcG9RjQ7FSAbuYktRQQTdj1twH/j61NeSa4aPemZe1T Ng7MC2dKylML4j/JJgRwVNHqvCgyqNeiXt3HyXIOMfXP0x77N5kPeaIas6pu+Tun FVyDI40R2fKwpTFHbw5Fk9ge9uTyed73PjGbu2jy8w1+TFdB0is1OyCEAdRzZoZf vwtnoXZuUlCrZ/NaE44vrXPCmihOz9oqX299pYXsxA158zv9pDGJuNyAwwWZ9Lge KoU2tsq1rAljZiAlr3exexvsAIq0LsaW0QsWiaKljHypmzABRd6uFkhpbDCUGz+U uyWL7oSyuEn5CtKwDMuSWMfYbYtLCmXl -----END CERTIFICATE-----Generated at Sat May 31 16:26:50 2025 by rpki-client