$ rpki-client -vvf rpki.apnic.net/member_repository/A91A3C52/7DC3A342841E11EE88983087C4F9AE02/AbbbS_HTOjQfR2CpjIX4dhA_ruk.mft File: AbbbS_HTOjQfR2CpjIX4dhA_ruk.mft (raw, json) Hash identifier: lS/CVuIz6/rpedlirpSEfUZKL6zmtQyT0MXaPc/MFd0= Subject key identifier: 27:E1:6D:3F:A8:1C:5C:38:15:90:0A:C6:50:5D:B1:EE:95:E8:99:D1 Authority key identifier: 01:B6:DB:4B:F1:D3:3A:34:1F:47:60:A9:8C:85:F8:76:10:3F:AE:E9 Certificate issuer: /CN=A91A3C52/serialNumber=01B6DB4BF1D33A341F4760A98C85F876103FAEE9 Certificate serial: 014D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AbbbS_HTOjQfR2CpjIX4dhA_ruk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A3C52/7DC3A342841E11EE88983087C4F9AE02/AbbbS_HTOjQfR2CpjIX4dhA_ruk.mft Manifest number: 0148 Signing time: Sat 09 Aug 2025 04:42:16 +0000 Manifest this update: Sat 09 Aug 2025 04:42:15 +0000 Manifest next update: Sat 16 Aug 2025 04:42:15 +0000 Files and hashes: 1: AbbbS_HTOjQfR2CpjIX4dhA_ruk.crl (hash: Z3YbOQh+7kPk5abJSMQ2E2mdLNKe/NX+HJt7RZ6P/tQ=) 2: 110A7248841F11EEAF514B09C4F9AE02.roa (hash: K6AeShDx5+I/nCnkd6XWtADIagUHyyAB2FaUjuCmbW8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A3C52/7DC3A342841E11EE88983087C4F9AE02/AbbbS_HTOjQfR2CpjIX4dhA_ruk.crl rsync://rpki.apnic.net/member_repository/A91A3C52/7DC3A342841E11EE88983087C4F9AE02/AbbbS_HTOjQfR2CpjIX4dhA_ruk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AbbbS_HTOjQfR2CpjIX4dhA_ruk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 333 (0x14d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A3C52, serialNumber=01B6DB4BF1D33A341F4760A98C85F876103FAEE9 Validity Not Before: Aug 9 04:42:15 2025 GMT Not After : Aug 16 04:42:15 2025 GMT Subject: CN=6896d1a7-c218 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:f2:5a:81:fc:03:38:b8:c3:df:c0:26:10:e6: 0b:48:4e:09:e3:c8:c6:51:6e:62:af:1e:1f:8e:66: 15:49:65:2a:26:16:66:de:3d:cd:4e:2c:f0:f2:b0: c1:23:b4:60:d6:11:fd:67:62:38:6f:c7:cf:af:fd: c7:b6:92:13:6b:20:0c:ab:e2:39:59:2a:ef:17:44: df:5e:41:19:15:65:9c:46:ed:00:81:ec:35:6e:41: 41:cf:21:f6:a0:99:8b:11:85:d3:75:06:95:ee:ab: 0b:6e:2e:ab:1a:ab:d7:65:c4:b4:40:d9:fd:cb:ea: 7c:30:a4:8e:48:d2:82:fb:ef:5d:79:21:d9:1a:2b: 94:62:d2:4e:de:a1:ab:1c:98:0d:9c:3c:f2:1d:9d: 53:9a:47:be:5a:13:67:a0:ae:08:44:19:6f:70:80: 50:94:12:81:d2:19:35:4a:79:f1:be:55:66:50:0a: 72:53:33:c1:fc:11:f6:31:81:b9:7c:b2:00:7c:dc: 7a:1b:74:79:2c:57:3e:aa:43:d2:d5:ce:fd:1d:6a: 97:0a:fb:14:67:16:86:d7:f1:70:d3:57:80:ab:4e: d3:9e:9c:ad:0a:ba:7c:91:c9:1d:8e:3e:ae:3a:3a: 88:17:a2:10:45:c9:d7:7d:7c:92:d3:f0:bb:58:44: e5:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:E1:6D:3F:A8:1C:5C:38:15:90:0A:C6:50:5D:B1:EE:95:E8:99:D1 X509v3 Authority Key Identifier: keyid:01:B6:DB:4B:F1:D3:3A:34:1F:47:60:A9:8C:85:F8:76:10:3F:AE:E9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A3C52/7DC3A342841E11EE88983087C4F9AE02/AbbbS_HTOjQfR2CpjIX4dhA_ruk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AbbbS_HTOjQfR2CpjIX4dhA_ruk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A3C52/7DC3A342841E11EE88983087C4F9AE02/AbbbS_HTOjQfR2CpjIX4dhA_ruk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a4:0c:06:52:55:65:9a:e8:ae:5c:04:29:96:af:b3:71:f1:59: e7:fc:48:c4:87:64:8f:c0:99:52:06:d5:be:c1:2a:e1:26:af: 94:67:fa:1f:f6:43:f0:50:f4:00:4c:45:62:fe:18:ff:fc:7a: 0a:2e:7f:ca:21:ac:9a:d3:63:06:7e:36:2d:d7:61:94:f9:3a: 77:16:b9:a8:c8:5c:0b:6d:f5:df:a0:91:7d:f6:ff:bd:71:a3: 51:16:6e:55:46:88:ab:98:f0:1f:af:2f:34:72:29:b6:39:a3: c1:4f:75:a8:c6:d8:3c:02:b5:33:ac:8b:33:1e:54:3a:38:b4: d9:19:82:8c:39:d0:a3:dd:22:88:56:d2:73:84:af:e8:2f:71: 85:33:e5:41:21:4d:d2:7e:6f:3d:a7:04:4f:69:26:5f:16:b6: 8c:a2:a5:33:f7:4f:b5:71:ee:26:82:ab:97:d1:ab:04:43:b2: 6b:ab:1b:ff:23:81:93:15:30:02:1a:f6:3b:ad:6f:64:93:de: da:13:2c:d5:e7:56:61:da:cc:bd:50:5c:23:72:44:81:18:6d: f6:23:ab:fe:e1:6e:90:63:15:14:45:d7:74:4a:d9:fd:86:03: 1c:a9:9b:e1:1f:d6:c9:22:c4:87:67:ad:84:0b:69:55:b4:2c: ef:82:5a:17 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAU0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTNDNTIxMTAvBgNVBAUTKDAxQjZEQjRCRjFEMzNBMzQxRjQ3NjBBOThDODVGODc2 MTAzRkFFRTkwHhcNMjUwODA5MDQ0MjE1WhcNMjUwODE2MDQ0MjE1WjAYMRYwFAYD VQQDEw02ODk2ZDFhNy1jMjE4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3vJagfwDOLjD38AmEOYLSE4J48jGUW5irx4fjmYVSWUqJhZm3j3NTizw8rDB I7Rg1hH9Z2I4b8fPr/3HtpITayAMq+I5WSrvF0TfXkEZFWWcRu0Agew1bkFBzyH2 oJmLEYXTdQaV7qsLbi6rGqvXZcS0QNn9y+p8MKSOSNKC++9deSHZGiuUYtJO3qGr HJgNnDzyHZ1Tmke+WhNnoK4IRBlvcIBQlBKB0hk1SnnxvlVmUApyUzPB/BH2MYG5 fLIAfNx6G3R5LFc+qkPS1c79HWqXCvsUZxaG1/Fw01eAq07TnpytCrp8kckdjj6u OjqIF6IQRcnXfXyS0/C7WETlNwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCfhbT+o HFw4FZAKxlBdse6V6JnRMB8GA1UdIwQYMBaAFAG220vx0zo0H0dgqYyF+HYQP67p MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBM0M1Mi83REMzQTM0Mjg0 MUUxMUVFODg5ODMwODdDNEY5QUUwMi9BYmJiU19IVE9qUWZSMkNwaklYNGRoQV9y dWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0FiYmJTX0hUT2pRZlIyQ3BqSVg0ZGhBX3J1ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB M0M1Mi83REMzQTM0Mjg0MUUxMUVFODg5ODMwODdDNEY5QUUwMi9BYmJiU19IVE9q UWZSMkNwaklYNGRoQV9ydWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCkDAZSVWWa6K5cBCmWr7Nx8Vnn/EjEh2SPwJlSBtW+wSrhJq+UZ/of 9kPwUPQATEVi/hj//HoKLn/KIaya02MGfjYt12GU+Tp3FrmoyFwLbfXfoJF99v+9 caNRFm5VRoirmPAfry80cim2OaPBT3Woxtg8ArUzrIszHlQ6OLTZGYKMOdCj3SKI VtJzhK/oL3GFM+VBIU3Sfm89pwRPaSZfFraMoqUz90+1ce4mgquX0asEQ7Jrqxv/ I4GTFTACGvY7rW9kk97aEyzV51Zh2sy9UFwjckSBGG32I6v+4W6QYxUURdd0Stn9 hgMcqZvhH9bJIsSHZ62EC2lVtCzvgloX -----END CERTIFICATE-----Generated at Sun Aug 10 16:06:08 2025 by rpki-client