$ rpki-client -vvf rpki.apnic.net/member_repository/A91F9605/36666D6E870911EB823B3356C4F9AE02/aBiEwMdVflJu8rxNHlq8M2rif54.mft File: aBiEwMdVflJu8rxNHlq8M2rif54.mft (raw, json) Hash identifier: CiTuFdJ8l4scXmZp4Magk57HVZ5EghbWUIxjoLAYtuc= Subject key identifier: F0:91:E6:8F:9C:36:8C:E5:F7:D9:82:8B:7E:BE:3B:09:FE:F2:45:02 Authority key identifier: 68:18:84:C0:C7:55:7E:52:6E:F2:BC:4D:1E:5A:BC:33:6A:E2:7F:9E Certificate issuer: /CN=A91F9605/serialNumber=681884C0C7557E526EF2BC4D1E5ABC336AE27F9E Certificate serial: 065F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aBiEwMdVflJu8rxNHlq8M2rif54.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F9605/36666D6E870911EB823B3356C4F9AE02/aBiEwMdVflJu8rxNHlq8M2rif54.mft Manifest number: 0658 Signing time: Fri 30 May 2025 22:44:18 +0000 Manifest this update: Fri 30 May 2025 22:44:17 +0000 Manifest next update: Fri 06 Jun 2025 22:44:17 +0000 Files and hashes: 1: aBiEwMdVflJu8rxNHlq8M2rif54.crl (hash: 2h8bebqUTeziyTYBlwoK3jOJjdHyOeesDo22q/rxg74=) 2: 75AB03A2870B11EB88E44876C4F9AE02.roa (hash: 7qI+njWvbbh+KneeLcZmySdlxOhiGVsKeC65nMgeI7E=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F9605/36666D6E870911EB823B3356C4F9AE02/aBiEwMdVflJu8rxNHlq8M2rif54.crl rsync://rpki.apnic.net/member_repository/A91F9605/36666D6E870911EB823B3356C4F9AE02/aBiEwMdVflJu8rxNHlq8M2rif54.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aBiEwMdVflJu8rxNHlq8M2rif54.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 22:44:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1631 (0x65f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F9605, serialNumber=681884C0C7557E526EF2BC4D1E5ABC336AE27F9E Validity Not Before: May 30 22:44:17 2025 GMT Not After : Jun 6 22:44:17 2025 GMT Subject: CN=683a34c1-b526 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:92:82:89:90:fa:8c:eb:17:c3:b5:ee:12:fa: 29:62:58:1c:7b:11:86:55:09:e8:8d:11:c8:eb:16: 85:9e:f7:c2:e5:3c:6d:7b:a0:5f:4e:73:e1:be:78: 9f:fd:ed:c8:44:da:cd:7c:8a:cf:44:37:0b:41:01: 1b:be:02:fc:46:d7:34:99:ea:bb:53:ab:58:88:5f: f5:52:1e:1b:42:04:ac:b6:e5:5e:ab:98:3e:ab:da: 7a:b2:e5:9b:f7:52:a3:7b:45:a5:64:c4:f3:9a:80: d4:49:37:69:79:55:c5:14:31:09:e6:05:f1:bf:4b: 35:c2:25:dc:e3:85:3a:fa:78:1d:4c:bd:53:a6:9a: 87:d1:56:aa:5e:02:10:c1:8e:6b:16:ac:1f:5c:8c: e4:bd:f7:c6:48:c4:c7:0e:b1:d4:be:f8:eb:d5:97: 09:a2:cf:d1:bb:de:d1:1c:38:2c:df:f5:50:c4:9c: 4b:ed:fb:93:d5:46:9d:f6:2f:2c:2a:47:44:69:e3: dd:f0:07:bb:cf:17:43:68:8a:59:e3:c2:85:56:55: 2b:76:dc:d5:08:6e:5f:c7:c2:f4:a0:66:8a:7b:5f: f0:30:f3:f0:ef:1a:db:6f:37:44:95:33:f7:4a:30: c2:29:73:72:eb:1c:3f:b2:7d:61:00:ed:0c:b8:90: ee:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:91:E6:8F:9C:36:8C:E5:F7:D9:82:8B:7E:BE:3B:09:FE:F2:45:02 X509v3 Authority Key Identifier: keyid:68:18:84:C0:C7:55:7E:52:6E:F2:BC:4D:1E:5A:BC:33:6A:E2:7F:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F9605/36666D6E870911EB823B3356C4F9AE02/aBiEwMdVflJu8rxNHlq8M2rif54.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aBiEwMdVflJu8rxNHlq8M2rif54.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F9605/36666D6E870911EB823B3356C4F9AE02/aBiEwMdVflJu8rxNHlq8M2rif54.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 67:29:3e:f2:03:08:85:1a:eb:7c:1a:ef:56:98:08:1e:b2:6a: 6c:18:5d:4e:d8:28:f2:2f:2c:26:e1:04:52:34:e7:65:f5:27: a8:57:77:0d:43:e1:f9:5a:97:04:21:f2:39:c0:32:3a:73:e9: 92:22:76:ec:03:cf:05:67:61:2c:44:37:54:7f:8f:d2:17:a0: e5:f7:15:c8:bc:ee:f8:22:6d:b9:e3:ef:64:18:01:bc:60:43: 3c:eb:5a:29:3f:2c:3e:99:39:ee:fb:5e:14:f7:72:96:64:68: 44:e8:bd:71:d7:d2:ba:45:1d:0a:7c:40:6a:f0:c1:2c:9a:08: 0b:36:cf:6d:80:84:e0:e6:2a:07:4b:a7:bc:f9:b4:38:1b:e4: f3:dd:54:5f:a6:5a:04:c1:f6:81:67:55:7a:b1:f2:fe:bb:87: 30:23:14:54:51:9a:7a:4c:9e:2a:9d:bc:10:0c:bf:8d:e5:12: c1:19:99:48:b2:eb:e1:75:9e:a6:2c:3b:fa:2d:f3:f7:0f:c1: e4:9e:45:87:36:df:93:58:6e:f9:a2:8a:e6:57:9b:c8:8c:fe: 98:68:0b:45:5c:62:73:77:18:b5:ac:5b:c8:92:98:36:9b:93: c2:bb:be:d8:a3:49:b8:dc:7a:4e:9e:61:b4:e2:c4:91:ae:55: 32:3f:8d:3f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBl8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Rjk2MDUxMTAvBgNVBAUTKDY4MTg4NEMwQzc1NTdFNTI2RUYyQkM0RDFFNUFCQzMz NkFFMjdGOUUwHhcNMjUwNTMwMjI0NDE3WhcNMjUwNjA2MjI0NDE3WjAYMRYwFAYD VQQDEw02ODNhMzRjMS1iNTI2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0JKCiZD6jOsXw7XuEvopYlgcexGGVQnojRHI6xaFnvfC5Txte6BfTnPhvnif /e3IRNrNfIrPRDcLQQEbvgL8Rtc0meq7U6tYiF/1Uh4bQgSstuVeq5g+q9p6suWb 91Kje0WlZMTzmoDUSTdpeVXFFDEJ5gXxv0s1wiXc44U6+ngdTL1TppqH0VaqXgIQ wY5rFqwfXIzkvffGSMTHDrHUvvjr1ZcJos/Ru97RHDgs3/VQxJxL7fuT1Uad9i8s KkdEaePd8Ae7zxdDaIpZ48KFVlUrdtzVCG5fx8L0oGaKe1/wMPPw7xrbbzdElTP3 SjDCKXNy6xw/sn1hAO0MuJDuJwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPCR5o+c Nozl99mCi36+Own+8kUCMB8GA1UdIwQYMBaAFGgYhMDHVX5SbvK8TR5avDNq4n+e MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGOTYwNS8zNjY2NkQ2RTg3 MDkxMUVCODIzQjMzNTZDNEY5QUUwMi9hQmlFd01kVmZsSnU4cnhOSGxxOE0ycmlm NTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2FCaUV3TWRWZmxKdThyeE5IbHE4TTJyaWY1NC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG OTYwNS8zNjY2NkQ2RTg3MDkxMUVCODIzQjMzNTZDNEY5QUUwMi9hQmlFd01kVmZs SnU4cnhOSGxxOE0ycmlmNTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBnKT7yAwiFGut8Gu9WmAgesmpsGF1O2CjyLywm4QRSNOdl9SeoV3cN Q+H5WpcEIfI5wDI6c+mSInbsA88FZ2EsRDdUf4/SF6Dl9xXIvO74Im254+9kGAG8 YEM861opPyw+mTnu+14U93KWZGhE6L1x19K6RR0KfEBq8MEsmggLNs9tgITg5ioH S6e8+bQ4G+Tz3VRfploEwfaBZ1V6sfL+u4cwIxRUUZp6TJ4qnbwQDL+N5RLBGZlI suvhdZ6mLDv6LfP3D8HknkWHNt+TWG75oormV5vIjP6YaAtFXGJzdxi1rFvIkpg2 m5PCu77Yo0m43HpOnmG04sSRrlUyP40/ -----END CERTIFICATE-----Generated at Sat May 31 17:37:46 2025 by rpki-client