$ rpki-client -vvf rpki.apnic.net/member_repository/A91CC564/4F29D0C4C40F11EA9C15B470C4F9AE02/ABXboDjLzLFS7RcROqCo1ddIjSE.mft File: ABXboDjLzLFS7RcROqCo1ddIjSE.mft (raw, json) Hash identifier: ZYZz76BixHFZcdDt+TT/Asv8VUvwZ+cR5egOaOpmTdo= Subject key identifier: 56:57:6A:24:A6:33:E2:F4:17:B1:46:07:52:77:2E:A2:B8:95:77:EC Authority key identifier: 00:15:DB:A0:38:CB:CC:B1:52:ED:17:11:3A:A0:A8:D5:D7:48:8D:21 Certificate issuer: /CN=A91CC564/serialNumber=0015DBA038CBCCB152ED17113AA0A8D5D7488D21 Certificate serial: 0866 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ABXboDjLzLFS7RcROqCo1ddIjSE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CC564/4F29D0C4C40F11EA9C15B470C4F9AE02/ABXboDjLzLFS7RcROqCo1ddIjSE.mft Manifest number: 0860 Signing time: Thu 24 Apr 2025 20:34:00 +0000 Manifest this update: Thu 24 Apr 2025 20:33:59 +0000 Manifest next update: Thu 01 May 2025 20:33:59 +0000 Files and hashes: 1: ABXboDjLzLFS7RcROqCo1ddIjSE.crl (hash: WRPaWQNK/XCZJbdWqC3ledlboVIuAsQyKkP2sRLE5uU=) 2: 74CCA13ADBE811EA8D063B7DC4F9AE02.roa (hash: r8kplkUIga9YQn8b4xbaXWuaaJUEiwNgh+YYSbpeRUQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CC564/4F29D0C4C40F11EA9C15B470C4F9AE02/ABXboDjLzLFS7RcROqCo1ddIjSE.crl rsync://rpki.apnic.net/member_repository/A91CC564/4F29D0C4C40F11EA9C15B470C4F9AE02/ABXboDjLzLFS7RcROqCo1ddIjSE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ABXboDjLzLFS7RcROqCo1ddIjSE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 20:33:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2150 (0x866) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CC564, serialNumber=0015DBA038CBCCB152ED17113AA0A8D5D7488D21 Validity Not Before: Apr 24 20:33:59 2025 GMT Not After : May 1 20:33:59 2025 GMT Subject: CN=680aa037-061a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:e4:74:a9:37:6a:f8:ee:74:3b:d1:61:92:a2: 4c:c7:5d:eb:ba:2f:1e:c3:db:33:08:9f:c2:f5:61: 63:ca:08:46:5b:ed:3b:8e:8a:81:3b:d0:71:dd:55: 19:27:63:a2:0a:4f:08:c5:09:af:eb:52:5e:7e:0f: 48:b6:95:45:12:c7:ec:c7:a1:81:2a:62:c0:92:5d: 11:5a:c0:7c:6f:a4:bc:63:61:96:e3:d0:88:b2:04: f0:b5:5f:13:34:77:5a:00:b3:c2:c6:7e:7e:c3:c4: ca:89:26:44:0d:21:8e:2b:6d:2b:96:0a:0d:88:77: 87:81:c2:ca:a9:ee:7a:c2:35:1c:25:73:aa:ad:54: 07:f4:6a:86:9e:f4:04:91:7b:ea:35:71:00:dd:73: cc:9c:b2:e0:e7:3a:e3:15:2b:d0:36:48:ae:3a:08: 43:5c:23:f4:cc:0e:b8:af:a7:78:3c:4e:d7:4a:f9: f6:d2:16:82:58:30:b2:9c:6b:c0:09:3e:2f:7a:64: f5:31:20:61:20:d2:cf:33:0f:7b:13:4b:89:94:1e: 59:ab:52:30:11:ec:58:eb:6a:93:1c:23:29:fb:43: 53:45:98:f4:a7:5c:8b:bd:4c:d4:d3:8c:4f:04:33: b2:9a:bb:45:87:a1:9a:04:d7:80:83:e3:1a:8d:aa: ad:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:57:6A:24:A6:33:E2:F4:17:B1:46:07:52:77:2E:A2:B8:95:77:EC X509v3 Authority Key Identifier: keyid:00:15:DB:A0:38:CB:CC:B1:52:ED:17:11:3A:A0:A8:D5:D7:48:8D:21 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CC564/4F29D0C4C40F11EA9C15B470C4F9AE02/ABXboDjLzLFS7RcROqCo1ddIjSE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ABXboDjLzLFS7RcROqCo1ddIjSE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CC564/4F29D0C4C40F11EA9C15B470C4F9AE02/ABXboDjLzLFS7RcROqCo1ddIjSE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 88:3d:2a:cc:b0:16:40:c2:ae:bf:36:88:79:a2:56:e4:17:67: 60:09:57:58:7b:1f:d4:14:2b:3a:63:2f:63:34:cd:aa:99:45: 7f:71:d0:a2:c5:8c:cb:a9:83:db:d0:89:ec:22:3b:e9:18:2d: 61:e0:4b:30:2e:0c:ba:46:5a:af:f8:e6:53:1d:b0:37:fc:fb: 48:14:bc:3f:c1:c6:24:aa:d5:5f:4f:7f:d7:85:92:89:54:50: 6d:f8:06:d7:46:73:16:b5:49:e9:73:c6:d0:70:b6:04:58:3b: 61:25:b3:27:06:ff:be:08:72:d4:5c:f2:b6:06:65:3a:6c:d6: 9a:35:45:c0:0d:00:68:36:42:80:86:5e:05:14:2f:4e:fe:aa: 8c:0f:01:09:3a:c9:3e:51:d9:3d:7e:e9:bc:2c:83:d4:51:a2: b0:d5:b7:7d:bb:22:f3:94:2c:af:20:8a:ff:d9:43:6d:68:18: 9b:53:cf:7a:ef:94:bc:62:53:3f:26:83:8c:f6:6f:6e:56:3b: 3b:55:26:f7:fe:aa:6a:58:a3:9c:ff:ea:b1:4a:50:f2:e7:ee: 68:34:02:90:fc:8c:b7:f3:01:d6:80:9c:14:f3:d8:34:c9:d7: 9a:0a:59:46:8f:f1:ef:c8:d1:13:6e:3a:dc:51:33:bb:70:88: 7d:01:17:19 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCGYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0M1NjQxMTAvBgNVBAUTKDAwMTVEQkEwMzhDQkNDQjE1MkVEMTcxMTNBQTBBOEQ1 RDc0ODhEMjEwHhcNMjUwNDI0MjAzMzU5WhcNMjUwNTAxMjAzMzU5WjAYMRYwFAYD VQQDEw02ODBhYTAzNy0wNjFhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu+R0qTdq+O50O9FhkqJMx13rui8ew9szCJ/C9WFjyghGW+07joqBO9Bx3VUZ J2OiCk8IxQmv61Jefg9ItpVFEsfsx6GBKmLAkl0RWsB8b6S8Y2GW49CIsgTwtV8T NHdaALPCxn5+w8TKiSZEDSGOK20rlgoNiHeHgcLKqe56wjUcJXOqrVQH9GqGnvQE kXvqNXEA3XPMnLLg5zrjFSvQNkiuOghDXCP0zA64r6d4PE7XSvn20haCWDCynGvA CT4vemT1MSBhINLPMw97E0uJlB5Zq1IwEexY62qTHCMp+0NTRZj0p1yLvUzU04xP BDOymrtFh6GaBNeAg+MajaqtqQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFZXaiSm M+L0F7FGB1J3LqK4lXfsMB8GA1UdIwQYMBaAFAAV26A4y8yxUu0XETqgqNXXSI0h MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQzU2NC80RjI5RDBDNEM0 MEYxMUVBOUMxNUI0NzBDNEY5QUUwMi9BQlhib0RqTHpMRlM3UmNST3FDbzFkZElq U0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0FCWGJvRGpMekxGUzdSY1JPcUNvMWRkSWpTRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD QzU2NC80RjI5RDBDNEM0MEYxMUVBOUMxNUI0NzBDNEY5QUUwMi9BQlhib0RqTHpM RlM3UmNST3FDbzFkZElqU0UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCIPSrMsBZAwq6/Noh5olbkF2dgCVdYex/UFCs6Yy9jNM2qmUV/cdCi xYzLqYPb0InsIjvpGC1h4EswLgy6Rlqv+OZTHbA3/PtIFLw/wcYkqtVfT3/XhZKJ VFBt+AbXRnMWtUnpc8bQcLYEWDthJbMnBv++CHLUXPK2BmU6bNaaNUXADQBoNkKA hl4FFC9O/qqMDwEJOsk+Udk9fum8LIPUUaKw1bd9uyLzlCyvIIr/2UNtaBibU896 75S8YlM/JoOM9m9uVjs7VSb3/qpqWKOc/+qxSlDy5+5oNAKQ/Iy38wHWgJwU89g0 ydeaCllGj/HvyNETbjrcUTO7cIh9ARcZ -----END CERTIFICATE-----Generated at Sat Apr 26 04:23:44 2025 by rpki-client