$ rpki-client -vvf rpki.apnic.net/member_repository/A91B9C74/44CC971E4E1F11EDB3E6CC2FC4F9AE02/ABN5IHjRGy-UAw18O-71ATKibUA.mft File: ABN5IHjRGy-UAw18O-71ATKibUA.mft (raw, json) Hash identifier: oibwXfKhFIdfHsZduwywi7EURbxNScJd6nxvbfhTQHc= Subject key identifier: B4:A6:5C:AE:A9:14:22:43:00:76:C6:66:1C:AD:37:82:C8:1C:29:E0 Authority key identifier: 00:13:79:20:78:D1:1B:2F:94:03:0D:7C:3B:EE:F5:01:32:A2:6D:40 Certificate issuer: /CN=A91B9C74/serialNumber=0013792078D11B2F94030D7C3BEEF50132A26D40 Certificate serial: 0208 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ABN5IHjRGy-UAw18O-71ATKibUA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B9C74/44CC971E4E1F11EDB3E6CC2FC4F9AE02/ABN5IHjRGy-UAw18O-71ATKibUA.mft Manifest number: 01FD Signing time: Sat 21 Jun 2025 01:46:14 +0000 Manifest this update: Sat 21 Jun 2025 01:46:13 +0000 Manifest next update: Sat 28 Jun 2025 01:46:13 +0000 Files and hashes: 1: ABN5IHjRGy-UAw18O-71ATKibUA.crl (hash: lbEcOn1nmo+HJMdfDNE/bB9Easl0dZEQioiSKzav7k4=) 2: F853742A5A9911EDA14F453FC4F9AE02.roa (hash: KraWg2S7y0V2b10B2mX+HUVf2KSluU5nYap1xQfIHpI=) 3: 273E7B284E2311EDB6F68A4AC4F9AE02.roa (hash: hm2JBw4RijcoPdIwahJRqhi4gARjxEI7uzccrW/R3X8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B9C74/44CC971E4E1F11EDB3E6CC2FC4F9AE02/ABN5IHjRGy-UAw18O-71ATKibUA.crl rsync://rpki.apnic.net/member_repository/A91B9C74/44CC971E4E1F11EDB3E6CC2FC4F9AE02/ABN5IHjRGy-UAw18O-71ATKibUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ABN5IHjRGy-UAw18O-71ATKibUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Jun 2025 01:46:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 520 (0x208) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B9C74, serialNumber=0013792078D11B2F94030D7C3BEEF50132A26D40 Validity Not Before: Jun 21 01:46:13 2025 GMT Not After : Jun 28 01:46:13 2025 GMT Subject: CN=68560ee6-9b4a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:1a:6b:32:3b:2c:bf:ab:64:52:df:d7:67:32: e7:b4:15:e5:46:17:c9:95:ca:25:1c:2e:0d:fa:a1: 38:7f:03:24:33:92:11:53:a1:4a:bd:66:07:5d:5f: ac:71:d4:72:56:f7:9b:9d:db:c8:7c:e3:5e:ef:4f: bb:5c:1b:16:23:82:ab:13:bd:ae:92:af:18:3e:6a: f0:01:d5:a9:a8:e0:e9:cd:cd:d2:b2:89:ef:02:89: c7:4e:61:d2:f1:e0:7b:15:b3:eb:24:d0:af:b1:b1: 82:bc:24:10:83:bf:00:c3:44:c4:52:15:d0:10:6d: 58:6c:27:20:40:8e:63:4c:6b:e7:e6:9f:73:12:12: d4:97:7b:ba:9e:e4:71:f9:e1:37:64:16:03:b8:fb: 46:22:43:45:ae:33:64:06:42:5a:b8:cf:85:88:dd: 8a:3f:43:83:d5:f8:4f:32:9e:c5:85:3d:7a:1a:3d: e7:69:64:dc:f2:05:e0:48:01:61:00:0c:5b:bc:fc: 34:b1:12:92:90:1e:4b:2d:d8:3e:85:2c:b0:17:b9: 7b:95:0f:1a:0a:3b:f0:3c:31:68:cf:c7:61:3c:42: 06:91:ab:14:3d:50:ad:03:d7:c2:bb:87:c7:ce:75: 32:1c:46:3a:bc:2f:57:ee:76:e7:40:a0:bf:44:7d: c1:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:A6:5C:AE:A9:14:22:43:00:76:C6:66:1C:AD:37:82:C8:1C:29:E0 X509v3 Authority Key Identifier: keyid:00:13:79:20:78:D1:1B:2F:94:03:0D:7C:3B:EE:F5:01:32:A2:6D:40 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B9C74/44CC971E4E1F11EDB3E6CC2FC4F9AE02/ABN5IHjRGy-UAw18O-71ATKibUA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ABN5IHjRGy-UAw18O-71ATKibUA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B9C74/44CC971E4E1F11EDB3E6CC2FC4F9AE02/ABN5IHjRGy-UAw18O-71ATKibUA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6b:2b:85:04:56:97:e1:2a:31:0e:fc:63:18:37:76:50:d9:7a: 1a:d8:48:c3:3f:47:c5:cd:82:3e:b4:a5:a8:48:15:2d:ac:4e: a1:67:90:27:d7:26:42:38:70:f8:5d:ca:d0:3d:7a:56:a4:76: 77:46:72:2e:0e:1e:5c:62:d7:ce:e5:8f:50:bb:5d:97:53:7e: 3f:ed:07:58:b3:b9:7f:48:c7:64:d2:e5:03:4c:ac:ea:53:4a: 01:f6:5c:85:30:5e:a6:c6:2c:4d:d6:ba:13:a0:88:7f:69:15: 82:ab:7a:40:e9:ba:cc:32:04:96:c7:ed:c6:5e:93:05:28:c1: 7c:90:ce:42:33:a3:d6:56:4a:12:de:8a:ca:71:a5:ed:c3:c4: a3:b2:fa:8f:2e:26:01:1a:46:b7:3c:28:54:00:a1:73:69:41: 33:4e:4e:69:7f:d6:ca:c7:c6:40:27:79:90:5e:ce:06:0e:30: ed:1e:79:fe:02:2d:ef:a0:e3:ff:95:ad:a0:07:c6:ac:ff:a9: c2:49:6d:9a:ce:2f:6e:de:cc:b9:da:4d:36:0a:54:8b:3f:c6: 16:1a:70:ee:7a:1f:f3:05:d2:f0:a9:c0:29:8d:08:70:63:c0: 85:d4:b0:a0:99:34:92:a2:3f:05:cf:0f:d5:6b:48:ab:10:30: e2:05:87:89 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAggwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjlDNzQxMTAvBgNVBAUTKDAwMTM3OTIwNzhEMTFCMkY5NDAzMEQ3QzNCRUVGNTAx MzJBMjZENDAwHhcNMjUwNjIxMDE0NjEzWhcNMjUwNjI4MDE0NjEzWjAYMRYwFAYD VQQDEw02ODU2MGVlNi05YjRhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2RprMjssv6tkUt/XZzLntBXlRhfJlcolHC4N+qE4fwMkM5IRU6FKvWYHXV+s cdRyVvebndvIfONe70+7XBsWI4KrE72ukq8YPmrwAdWpqODpzc3SsonvAonHTmHS 8eB7FbPrJNCvsbGCvCQQg78Aw0TEUhXQEG1YbCcgQI5jTGvn5p9zEhLUl3u6nuRx +eE3ZBYDuPtGIkNFrjNkBkJauM+FiN2KP0OD1fhPMp7FhT16Gj3naWTc8gXgSAFh AAxbvPw0sRKSkB5LLdg+hSywF7l7lQ8aCjvwPDFoz8dhPEIGkasUPVCtA9fCu4fH znUyHEY6vC9X7nbnQKC/RH3B0QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLSmXK6p FCJDAHbGZhytN4LIHCngMB8GA1UdIwQYMBaAFAATeSB40RsvlAMNfDvu9QEyom1A MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCOUM3NC80NENDOTcxRTRF MUYxMUVEQjNFNkNDMkZDNEY5QUUwMi9BQk41SUhqUkd5LVVBdzE4Ty03MUFUS2li VUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0FCTjVJSGpSR3ktVUF3MThPLTcxQVRLaWJVQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC OUM3NC80NENDOTcxRTRFMUYxMUVEQjNFNkNDMkZDNEY5QUUwMi9BQk41SUhqUkd5 LVVBdzE4Ty03MUFUS2liVUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBrK4UEVpfhKjEO/GMYN3ZQ2Xoa2EjDP0fFzYI+tKWoSBUtrE6hZ5An 1yZCOHD4XcrQPXpWpHZ3RnIuDh5cYtfO5Y9Qu12XU34/7QdYs7l/SMdk0uUDTKzq U0oB9lyFMF6mxixN1roToIh/aRWCq3pA6brMMgSWx+3GXpMFKMF8kM5CM6PWVkoS 3orKcaXtw8SjsvqPLiYBGka3PChUAKFzaUEzTk5pf9bKx8ZAJ3mQXs4GDjDtHnn+ Ai3voOP/la2gB8as/6nCSW2azi9u3sy52k02ClSLP8YWGnDueh/zBdLwqcApjQhw Y8CF1LCgmTSSoj8Fzw/Va0irEDDiBYeJ -----END CERTIFICATE-----Generated at Sun Jun 22 12:53:30 2025 by rpki-client