$ rpki-client -vvf rpki.apnic.net/member_repository/A91CC564/4F29D0C4C40F11EA9C15B470C4F9AE02/ABXboDjLzLFS7RcROqCo1ddIjSE.mft File: ABXboDjLzLFS7RcROqCo1ddIjSE.mft (raw, json) Hash identifier: 8REMBlrqHFOHSptVZkgA66BLzrrWCJWdor61JV0Qe7c= Subject key identifier: 32:F8:0E:96:5E:82:6A:7C:FD:04:C8:77:4D:C9:24:98:6A:73:9D:51 Authority key identifier: 00:15:DB:A0:38:CB:CC:B1:52:ED:17:11:3A:A0:A8:D5:D7:48:8D:21 Certificate issuer: /CN=A91CC564/serialNumber=0015DBA038CBCCB152ED17113AA0A8D5D7488D21 Certificate serial: 0880 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ABXboDjLzLFS7RcROqCo1ddIjSE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CC564/4F29D0C4C40F11EA9C15B470C4F9AE02/ABXboDjLzLFS7RcROqCo1ddIjSE.mft Manifest number: 087A Signing time: Mon 16 Jun 2025 20:26:46 +0000 Manifest this update: Mon 16 Jun 2025 20:26:45 +0000 Manifest next update: Mon 23 Jun 2025 20:26:45 +0000 Files and hashes: 1: ABXboDjLzLFS7RcROqCo1ddIjSE.crl (hash: pkFRlpDZC90IJCr42j6pZMxqFa8Y3VYLpHHz94hX38k=) 2: 74CCA13ADBE811EA8D063B7DC4F9AE02.roa (hash: r8kplkUIga9YQn8b4xbaXWuaaJUEiwNgh+YYSbpeRUQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CC564/4F29D0C4C40F11EA9C15B470C4F9AE02/ABXboDjLzLFS7RcROqCo1ddIjSE.crl rsync://rpki.apnic.net/member_repository/A91CC564/4F29D0C4C40F11EA9C15B470C4F9AE02/ABXboDjLzLFS7RcROqCo1ddIjSE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ABXboDjLzLFS7RcROqCo1ddIjSE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 23 Jun 2025 20:26:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2176 (0x880) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CC564, serialNumber=0015DBA038CBCCB152ED17113AA0A8D5D7488D21 Validity Not Before: Jun 16 20:26:45 2025 GMT Not After : Jun 23 20:26:45 2025 GMT Subject: CN=68507e06-4eac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:1b:5d:62:c4:39:53:1d:a8:fc:12:08:c0:08: 95:09:96:f6:67:83:56:83:7b:7f:ba:73:a8:84:a3: 46:7b:8b:6d:b1:e7:c3:cc:ef:35:9b:7c:82:ff:38: 21:05:c0:87:59:71:6a:d5:20:d0:e5:54:c7:81:2b: 33:6e:b5:e0:33:13:1b:95:a8:52:c7:d9:27:cf:53: 48:38:0a:2d:83:c7:f1:09:2f:00:e8:13:15:76:7b: 2c:11:0c:fd:df:8a:d3:90:40:b9:7c:3a:57:aa:34: 59:d5:94:7b:00:a2:c0:de:7d:b9:a3:ec:0a:62:3c: e8:87:c0:73:43:f5:48:8e:fe:de:1d:77:35:38:89: b1:cd:e5:65:18:7c:c8:ea:fe:a2:ab:3b:db:81:93: cf:0b:14:31:1f:2e:fb:35:f3:6d:27:69:ea:14:93: 78:6b:67:06:e5:c1:b3:aa:a2:06:7e:80:2f:df:01: e3:bf:ed:a9:66:40:d5:86:b6:7a:da:6d:14:5f:d8: ff:c7:68:2d:09:41:e1:4f:15:a2:16:19:c5:6e:20: 64:24:1f:66:af:d8:20:a5:28:71:e7:d6:01:3a:48: f9:f7:02:93:f2:0e:e3:05:08:42:35:20:6e:99:41: fb:7c:11:ac:21:2d:00:84:88:42:34:26:7a:34:55: 5f:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:F8:0E:96:5E:82:6A:7C:FD:04:C8:77:4D:C9:24:98:6A:73:9D:51 X509v3 Authority Key Identifier: keyid:00:15:DB:A0:38:CB:CC:B1:52:ED:17:11:3A:A0:A8:D5:D7:48:8D:21 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CC564/4F29D0C4C40F11EA9C15B470C4F9AE02/ABXboDjLzLFS7RcROqCo1ddIjSE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ABXboDjLzLFS7RcROqCo1ddIjSE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CC564/4F29D0C4C40F11EA9C15B470C4F9AE02/ABXboDjLzLFS7RcROqCo1ddIjSE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 33:11:2a:08:05:95:18:e9:7c:03:56:bb:b7:22:32:0d:06:5e: 5d:f1:7b:8e:4c:66:06:98:73:5c:98:4b:ae:66:e7:e1:aa:19: 9a:a2:0c:5d:e3:30:4c:11:ec:fd:fd:40:8c:91:ce:9c:5f:63: a5:e8:fc:45:48:ab:f9:af:60:51:4a:dd:18:cf:45:d9:05:28: bc:54:25:91:74:87:bf:b5:b9:ae:ad:2a:5f:a8:04:ab:da:c2: d5:cf:a1:e1:9d:eb:4a:f0:5c:01:d7:dd:74:c3:72:a6:3d:c4: 05:8b:3c:9e:1b:dc:82:ed:27:65:b7:a4:c3:b6:4b:20:c2:45: e0:4f:09:04:54:17:c2:da:ac:e4:b9:4c:77:a5:c0:e8:f7:79: 1d:08:47:13:6f:d6:8d:dc:98:aa:45:37:17:2f:04:cd:0c:aa: 92:03:3c:ba:1e:5d:ab:4f:1c:1d:a3:24:f2:c9:b4:53:73:8f: d9:2c:ee:fb:31:2a:f4:f1:c7:a3:2c:27:d6:ff:ff:c8:41:6e: f2:cc:34:51:74:2a:3b:e6:fa:25:3e:7c:28:4c:85:4c:9f:c7: 08:9e:1d:c4:b7:fb:fe:4d:54:1c:59:c7:6a:fc:5b:c5:ea:6f: 50:5c:f2:8f:22:4a:c5:ae:ee:97:90:6c:82:9c:63:b9:9f:78: 2c:b8:ea:4d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCIAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0M1NjQxMTAvBgNVBAUTKDAwMTVEQkEwMzhDQkNDQjE1MkVEMTcxMTNBQTBBOEQ1 RDc0ODhEMjEwHhcNMjUwNjE2MjAyNjQ1WhcNMjUwNjIzMjAyNjQ1WjAYMRYwFAYD VQQDEw02ODUwN2UwNi00ZWFjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2xtdYsQ5Ux2o/BIIwAiVCZb2Z4NWg3t/unOohKNGe4ttsefDzO81m3yC/zgh BcCHWXFq1SDQ5VTHgSszbrXgMxMblahSx9knz1NIOAotg8fxCS8A6BMVdnssEQz9 34rTkEC5fDpXqjRZ1ZR7AKLA3n25o+wKYjzoh8BzQ/VIjv7eHXc1OImxzeVlGHzI 6v6iqzvbgZPPCxQxHy77NfNtJ2nqFJN4a2cG5cGzqqIGfoAv3wHjv+2pZkDVhrZ6 2m0UX9j/x2gtCUHhTxWiFhnFbiBkJB9mr9ggpShx59YBOkj59wKT8g7jBQhCNSBu mUH7fBGsIS0AhIhCNCZ6NFVfGwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDL4DpZe gmp8/QTId03JJJhqc51RMB8GA1UdIwQYMBaAFAAV26A4y8yxUu0XETqgqNXXSI0h MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQzU2NC80RjI5RDBDNEM0 MEYxMUVBOUMxNUI0NzBDNEY5QUUwMi9BQlhib0RqTHpMRlM3UmNST3FDbzFkZElq U0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0FCWGJvRGpMekxGUzdSY1JPcUNvMWRkSWpTRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD QzU2NC80RjI5RDBDNEM0MEYxMUVBOUMxNUI0NzBDNEY5QUUwMi9BQlhib0RqTHpM RlM3UmNST3FDbzFkZElqU0UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAzESoIBZUY6XwDVru3IjINBl5d8XuOTGYGmHNcmEuuZufhqhmaogxd 4zBMEez9/UCMkc6cX2Ol6PxFSKv5r2BRSt0Yz0XZBSi8VCWRdIe/tbmurSpfqASr 2sLVz6HhnetK8FwB1910w3KmPcQFizyeG9yC7Sdlt6TDtksgwkXgTwkEVBfC2qzk uUx3pcDo93kdCEcTb9aN3JiqRTcXLwTNDKqSAzy6Hl2rTxwdoyTyybRTc4/ZLO77 MSr08cejLCfW///IQW7yzDRRdCo75volPnwoTIVMn8cInh3Et/v+TVQcWcdq/FvF 6m9QXPKPIkrFru6XkGyCnGO5n3gsuOpN -----END CERTIFICATE-----Generated at Wed Jun 18 13:18:18 2025 by rpki-client