$ rpki-client -vvf rpki.apnic.net/member_repository/A91D3F8E/6C4089BA216C11EEB28BF24CC4F9AE02/1ABRvI3aYMky7gd2mrhnvvqNQvY.mft File: 1ABRvI3aYMky7gd2mrhnvvqNQvY.mft (raw, json) Hash identifier: kRvLprjbJf9dSjofUqTFNhBbWnBxQyUBalslmfB9i+8= Subject key identifier: BB:AA:83:68:55:08:55:AC:C6:19:EC:7D:51:18:97:1F:41:C4:2B:34 Authority key identifier: D4:00:51:BC:8D:DA:60:C9:32:EE:07:76:9A:B8:67:BE:FA:8D:42:F6 Certificate issuer: /CN=A91D3F8E/serialNumber=D40051BC8DDA60C932EE07769AB867BEFA8D42F6 Certificate serial: 01A1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1ABRvI3aYMky7gd2mrhnvvqNQvY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D3F8E/6C4089BA216C11EEB28BF24CC4F9AE02/1ABRvI3aYMky7gd2mrhnvvqNQvY.mft Manifest number: 0182 Signing time: Sat 31 May 2025 03:39:17 +0000 Manifest this update: Sat 31 May 2025 03:39:16 +0000 Manifest next update: Sat 07 Jun 2025 03:39:16 +0000 Files and hashes: 1: 1ABRvI3aYMky7gd2mrhnvvqNQvY.crl (hash: xPyHu3nGfinyWGGvtRC2SNn2BZYFTZBZuMqDCsJ8PCY=) 2: F8B64B2A97BB11EF9D4C9647C4F9AE02.roa (hash: 61jykwbjSWlecTxQbXexQrYBIHCiEouIxmqT8SrgbD0=) 3: C0E3BC02B8B611EFBD4C6F4AC4F9AE02.roa (hash: W/53nThgtqJJzKbcr1z4E+VxinzpZInwajjfUaYcr0E=) 4: F5255EAA3C0811F0AFF79131C4F9AE02.roa (hash: nFm23iH3I1F34dB9UDlNybSGhGS63ZlRXe8i6nMlPtk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D3F8E/6C4089BA216C11EEB28BF24CC4F9AE02/1ABRvI3aYMky7gd2mrhnvvqNQvY.crl rsync://rpki.apnic.net/member_repository/A91D3F8E/6C4089BA216C11EEB28BF24CC4F9AE02/1ABRvI3aYMky7gd2mrhnvvqNQvY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1ABRvI3aYMky7gd2mrhnvvqNQvY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 03:39:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 417 (0x1a1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D3F8E, serialNumber=D40051BC8DDA60C932EE07769AB867BEFA8D42F6 Validity Not Before: May 31 03:39:16 2025 GMT Not After : Jun 7 03:39:16 2025 GMT Subject: CN=683a79e5-67a0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:1b:b7:c2:2f:3d:12:d3:b2:ea:b3:df:42:7e: ca:6d:a5:d8:19:ed:70:e7:10:bf:65:c5:b1:95:fd: eb:92:82:02:6b:2d:49:0d:04:a9:45:bf:c3:f4:96: 87:be:f9:41:dc:52:0c:16:81:5d:11:ce:b9:42:2e: eb:81:5b:50:dc:0a:e4:35:15:9f:b9:d8:03:ce:bb: 3c:dd:4c:66:f5:b8:1b:a2:51:4f:17:3c:e6:96:14: 51:a4:35:f7:dd:cb:f1:e8:95:f1:e8:09:33:16:b4: ac:c4:2b:5d:ad:a4:35:0b:ee:9f:2b:a4:8a:3d:17: 2b:46:6f:d7:92:58:a1:d1:34:b3:be:81:a4:d3:b6: 0a:0c:7a:c8:d5:c0:1e:94:0f:70:1c:43:ca:f0:61: 53:f6:cd:51:ff:af:3a:0e:28:b9:38:79:bb:ea:16: 5e:07:70:3b:bc:2c:af:e5:a9:e2:f9:43:f8:5f:46: 75:34:fd:63:df:63:b4:e4:88:16:8e:3d:0f:a0:7f: af:9c:51:f0:29:93:cd:3c:cc:7d:89:fc:28:55:a1: 0c:b8:19:0b:b1:b7:fb:60:de:d9:69:28:a2:56:75: 75:61:69:25:86:ac:ec:40:70:e5:6f:99:3c:7e:6e: 8c:24:29:87:df:e0:a7:79:11:31:5b:1e:ba:35:8a: 2f:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:AA:83:68:55:08:55:AC:C6:19:EC:7D:51:18:97:1F:41:C4:2B:34 X509v3 Authority Key Identifier: keyid:D4:00:51:BC:8D:DA:60:C9:32:EE:07:76:9A:B8:67:BE:FA:8D:42:F6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D3F8E/6C4089BA216C11EEB28BF24CC4F9AE02/1ABRvI3aYMky7gd2mrhnvvqNQvY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1ABRvI3aYMky7gd2mrhnvvqNQvY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D3F8E/6C4089BA216C11EEB28BF24CC4F9AE02/1ABRvI3aYMky7gd2mrhnvvqNQvY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 73:de:ee:20:9e:0b:e6:dd:7f:0c:d4:15:be:78:7e:5b:f3:19: d4:1e:6d:3d:14:16:3e:24:e8:e4:d4:d8:e7:18:66:49:2c:bd: f7:a5:b3:3d:bd:ab:b8:c1:c7:49:f2:c5:ce:ad:b6:f8:3e:66: b3:1a:23:f2:5c:ef:73:3c:16:1a:99:6a:23:2f:1e:81:44:4b: c4:37:5d:12:25:eb:c2:9b:13:39:06:c1:cf:bb:a8:bd:df:fd: 09:51:12:92:ba:d9:41:61:51:84:c4:14:fe:a4:c4:09:01:4c: 38:1f:04:60:ea:d6:7e:bb:82:b2:75:35:d2:a1:e8:e6:f9:04: a9:da:b8:a8:4b:2a:33:1e:ca:21:f9:3b:07:54:1b:dc:06:81: 1f:00:ec:d3:3b:7c:8d:7f:6b:1a:30:3d:07:e1:f8:22:1a:62: 98:09:6b:7c:04:b0:64:90:ae:06:9a:2a:6c:2c:33:2d:7b:92: a5:65:37:18:ec:66:ca:fe:a0:9c:e1:b0:db:ab:92:c0:e0:5f: d5:af:4d:29:15:2c:6a:a1:c7:9d:39:07:bd:0e:17:a9:87:0a: 91:13:98:d5:c1:09:da:62:2c:30:98:b4:f8:85:05:86:13:0a: 4c:9f:e1:db:92:67:e3:c7:c6:38:96:98:32:7e:4f:43:cf:fd: a1:02:f5:85 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAaEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDNGOEUxMTAvBgNVBAUTKEQ0MDA1MUJDOEREQTYwQzkzMkVFMDc3NjlBQjg2N0JF RkE4RDQyRjYwHhcNMjUwNTMxMDMzOTE2WhcNMjUwNjA3MDMzOTE2WjAYMRYwFAYD VQQDEw02ODNhNzllNS02N2EwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxBu3wi89EtOy6rPfQn7KbaXYGe1w5xC/ZcWxlf3rkoICay1JDQSpRb/D9JaH vvlB3FIMFoFdEc65Qi7rgVtQ3ArkNRWfudgDzrs83Uxm9bgbolFPFzzmlhRRpDX3 3cvx6JXx6AkzFrSsxCtdraQ1C+6fK6SKPRcrRm/Xklih0TSzvoGk07YKDHrI1cAe lA9wHEPK8GFT9s1R/686Dii5OHm76hZeB3A7vCyv5ani+UP4X0Z1NP1j32O05IgW jj0PoH+vnFHwKZPNPMx9ifwoVaEMuBkLsbf7YN7ZaSiiVnV1YWklhqzsQHDlb5k8 fm6MJCmH3+CneRExWx66NYov+wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLuqg2hV CFWsxhnsfVEYlx9BxCs0MB8GA1UdIwQYMBaAFNQAUbyN2mDJMu4Hdpq4Z776jUL2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEM0Y4RS82QzQwODlCQTIx NkMxMUVFQjI4QkYyNENDNEY5QUUwMi8xQUJSdkkzYVlNa3k3Z2QybXJobnZ2cU5R dlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzFBQlJ2STNhWU1reTdnZDJtcmhudnZxTlF2WS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE M0Y4RS82QzQwODlCQTIxNkMxMUVFQjI4QkYyNENDNEY5QUUwMi8xQUJSdkkzYVlN a3k3Z2QybXJobnZ2cU5RdlkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBz3u4gngvm3X8M1BW+eH5b8xnUHm09FBY+JOjk1NjnGGZJLL33pbM9 vau4wcdJ8sXOrbb4PmazGiPyXO9zPBYamWojLx6BREvEN10SJevCmxM5BsHPu6i9 3/0JURKSutlBYVGExBT+pMQJAUw4HwRg6tZ+u4KydTXSoejm+QSp2rioSyozHsoh +TsHVBvcBoEfAOzTO3yNf2saMD0H4fgiGmKYCWt8BLBkkK4GmipsLDMte5KlZTcY 7GbK/qCc4bDbq5LA4F/Vr00pFSxqocedOQe9DhephwqRE5jVwQnaYiwwmLT4hQWG EwpMn+Hbkmfjx8Y4lpgyfk9Dz/2hAvWF -----END CERTIFICATE-----Generated at Sat May 31 17:34:21 2025 by rpki-client