$ rpki-client -vvf rpki.apnic.net/member_repository/A91B9C74/44CC971E4E1F11EDB3E6CC2FC4F9AE02/ABN5IHjRGy-UAw18O-71ATKibUA.mft File: ABN5IHjRGy-UAw18O-71ATKibUA.mft (raw, json) Hash identifier: REHR6PxWj/ZXlDwuLrWZlNdEFbLklR6KU4i5mIT9oEE= Subject key identifier: 98:76:E2:15:72:B6:95:FF:BC:77:46:5A:2E:4E:E9:A1:BB:DC:AC:82 Authority key identifier: 00:13:79:20:78:D1:1B:2F:94:03:0D:7C:3B:EE:F5:01:32:A2:6D:40 Certificate issuer: /CN=A91B9C74/serialNumber=0013792078D11B2F94030D7C3BEEF50132A26D40 Certificate serial: 01EC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ABN5IHjRGy-UAw18O-71ATKibUA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B9C74/44CC971E4E1F11EDB3E6CC2FC4F9AE02/ABN5IHjRGy-UAw18O-71ATKibUA.mft Manifest number: 01E1 Signing time: Fri 25 Apr 2025 01:56:48 +0000 Manifest this update: Fri 25 Apr 2025 01:56:48 +0000 Manifest next update: Fri 02 May 2025 01:56:48 +0000 Files and hashes: 1: ABN5IHjRGy-UAw18O-71ATKibUA.crl (hash: LtuIfjDgMrniWnINYNb95q4XWAlne61nAI8s+ICsomE=) 2: F853742A5A9911EDA14F453FC4F9AE02.roa (hash: KraWg2S7y0V2b10B2mX+HUVf2KSluU5nYap1xQfIHpI=) 3: 273E7B284E2311EDB6F68A4AC4F9AE02.roa (hash: hm2JBw4RijcoPdIwahJRqhi4gARjxEI7uzccrW/R3X8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B9C74/44CC971E4E1F11EDB3E6CC2FC4F9AE02/ABN5IHjRGy-UAw18O-71ATKibUA.crl rsync://rpki.apnic.net/member_repository/A91B9C74/44CC971E4E1F11EDB3E6CC2FC4F9AE02/ABN5IHjRGy-UAw18O-71ATKibUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ABN5IHjRGy-UAw18O-71ATKibUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 01:56:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 492 (0x1ec) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B9C74, serialNumber=0013792078D11B2F94030D7C3BEEF50132A26D40 Validity Not Before: Apr 25 01:56:48 2025 GMT Not After : May 2 01:56:48 2025 GMT Subject: CN=680aebe0-de8e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:3f:18:da:40:2d:78:90:8f:2c:14:fd:f0:59: f3:34:b1:af:ed:8e:ee:a9:32:29:4a:2e:13:93:fb: 14:67:52:fe:f5:07:ca:a6:88:68:8f:b9:80:5d:48: d8:dc:0c:9d:e0:2f:4e:92:1a:79:98:75:24:b2:b0: a0:04:db:23:c3:4d:ef:3c:5a:f0:96:c4:e2:0a:18: 5e:0c:7a:3a:a3:b6:5a:ea:10:2a:24:20:09:21:7e: c2:f0:44:d8:42:00:b5:9c:60:e0:9b:29:0b:02:73: 50:bd:b3:06:80:4a:94:26:42:4d:57:21:af:4d:91: 13:2e:c6:69:7f:5d:33:fe:aa:64:44:6f:25:d9:d6: 2e:90:22:c0:55:dd:81:44:5c:7f:3f:f4:ce:d0:23: c6:16:31:dc:9c:94:bd:59:2a:41:f1:f4:63:b6:5e: 26:14:03:5c:d6:d6:4c:cb:23:20:14:8a:cc:4d:a8: f9:d5:fc:0c:28:e9:8f:35:3a:8a:fd:79:53:3d:fe: b0:99:1a:cb:fa:eb:2f:9a:03:42:b5:0e:9d:38:2d: 17:7f:86:12:24:6e:97:42:77:61:c6:08:2c:1e:4d: 44:c3:f7:80:cd:f2:6f:e0:57:cd:1c:e9:3b:5c:8f: 76:6d:ca:ad:47:cd:dc:ae:91:f5:30:22:72:6c:c8: b7:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:76:E2:15:72:B6:95:FF:BC:77:46:5A:2E:4E:E9:A1:BB:DC:AC:82 X509v3 Authority Key Identifier: keyid:00:13:79:20:78:D1:1B:2F:94:03:0D:7C:3B:EE:F5:01:32:A2:6D:40 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B9C74/44CC971E4E1F11EDB3E6CC2FC4F9AE02/ABN5IHjRGy-UAw18O-71ATKibUA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ABN5IHjRGy-UAw18O-71ATKibUA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B9C74/44CC971E4E1F11EDB3E6CC2FC4F9AE02/ABN5IHjRGy-UAw18O-71ATKibUA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0e:84:31:43:bb:d2:ee:d7:42:09:05:ae:e1:e7:82:67:a8:6f: cb:83:c3:c3:f0:8d:3e:1b:6f:fc:69:16:bd:0f:2e:0a:a3:b8: 81:ed:d7:ee:0d:19:0c:4e:19:6f:a0:7e:71:c3:03:5d:f8:25: bc:2b:73:d5:21:25:c3:40:99:4a:77:8d:97:cd:d3:66:28:aa: fa:14:ee:a4:ef:f3:a8:68:7c:06:12:0c:77:83:f9:76:71:9b: 84:1a:11:78:07:29:4a:77:ab:73:2d:20:7e:e3:8b:80:d0:ce: 5d:d7:24:57:d1:43:9d:32:1b:cc:81:aa:28:f1:ad:fa:15:8f: e2:b1:2d:50:3a:e6:bd:30:cc:e2:35:87:d1:a8:09:ea:fb:98: 2a:7a:ae:c8:44:26:f0:ff:b6:41:c2:c0:1f:0d:04:e7:01:4b: 49:86:c3:53:eb:a9:67:3e:bf:c7:37:93:ed:c0:3c:a3:13:1f: f0:b0:4a:53:fd:ba:9d:d9:19:83:c3:77:72:c9:c9:6b:af:e7: 7d:75:80:79:1f:5e:4d:13:ef:db:6f:5f:a3:99:3f:e3:0c:a0: b3:ac:c5:3d:15:af:29:f1:c2:6c:e2:e3:88:51:ba:0d:e9:78: 9a:06:4f:9b:f7:1b:e5:13:4e:ce:a4:94:87:d2:99:ab:45:93: 42:ec:1a:bc -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAewwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjlDNzQxMTAvBgNVBAUTKDAwMTM3OTIwNzhEMTFCMkY5NDAzMEQ3QzNCRUVGNTAx MzJBMjZENDAwHhcNMjUwNDI1MDE1NjQ4WhcNMjUwNTAyMDE1NjQ4WjAYMRYwFAYD VQQDEw02ODBhZWJlMC1kZThlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxz8Y2kAteJCPLBT98FnzNLGv7Y7uqTIpSi4Tk/sUZ1L+9QfKpohoj7mAXUjY 3Ayd4C9Okhp5mHUksrCgBNsjw03vPFrwlsTiChheDHo6o7Za6hAqJCAJIX7C8ETY QgC1nGDgmykLAnNQvbMGgEqUJkJNVyGvTZETLsZpf10z/qpkRG8l2dYukCLAVd2B RFx/P/TO0CPGFjHcnJS9WSpB8fRjtl4mFANc1tZMyyMgFIrMTaj51fwMKOmPNTqK /XlTPf6wmRrL+usvmgNCtQ6dOC0Xf4YSJG6XQndhxggsHk1Ew/eAzfJv4FfNHOk7 XI92bcqtR83crpH1MCJybMi3lQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJh24hVy tpX/vHdGWi5O6aG73KyCMB8GA1UdIwQYMBaAFAATeSB40RsvlAMNfDvu9QEyom1A MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCOUM3NC80NENDOTcxRTRF MUYxMUVEQjNFNkNDMkZDNEY5QUUwMi9BQk41SUhqUkd5LVVBdzE4Ty03MUFUS2li VUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0FCTjVJSGpSR3ktVUF3MThPLTcxQVRLaWJVQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC OUM3NC80NENDOTcxRTRFMUYxMUVEQjNFNkNDMkZDNEY5QUUwMi9BQk41SUhqUkd5 LVVBdzE4Ty03MUFUS2liVUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAOhDFDu9Lu10IJBa7h54JnqG/Lg8PD8I0+G2/8aRa9Dy4Ko7iB7dfu DRkMThlvoH5xwwNd+CW8K3PVISXDQJlKd42XzdNmKKr6FO6k7/OoaHwGEgx3g/l2 cZuEGhF4BylKd6tzLSB+44uA0M5d1yRX0UOdMhvMgaoo8a36FY/isS1QOua9MMzi NYfRqAnq+5gqeq7IRCbw/7ZBwsAfDQTnAUtJhsNT66lnPr/HN5PtwDyjEx/wsEpT /bqd2RmDw3dyyclrr+d9dYB5H15NE+/bb1+jmT/jDKCzrMU9Fa8p8cJs4uOIUboN 6XiaBk+b9xvlE07OpJSH0pmrRZNC7Bq8 -----END CERTIFICATE-----Generated at Sat Apr 26 03:24:57 2025 by rpki-client