$ rpki-client -vvf rpki.apnic.net/member_repository/A91D3F8E/6C4089BA216C11EEB28BF24CC4F9AE02/1ABRvI3aYMky7gd2mrhnvvqNQvY.mft File: 1ABRvI3aYMky7gd2mrhnvvqNQvY.mft (raw, json) Hash identifier: eDIpwBo3tDUHaUHX1o9zU4fu2k8G6MPHaYUhunYuTo8= Subject key identifier: 32:B3:A3:B1:8F:C0:22:8C:FC:40:AA:3A:9B:F6:61:F6:A7:71:32:48 Authority key identifier: D4:00:51:BC:8D:DA:60:C9:32:EE:07:76:9A:B8:67:BE:FA:8D:42:F6 Certificate issuer: /CN=A91D3F8E/serialNumber=D40051BC8DDA60C932EE07769AB867BEFA8D42F6 Certificate serial: 018E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1ABRvI3aYMky7gd2mrhnvvqNQvY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D3F8E/6C4089BA216C11EEB28BF24CC4F9AE02/1ABRvI3aYMky7gd2mrhnvvqNQvY.mft Manifest number: 0170 Signing time: Fri 25 Apr 2025 03:17:43 +0000 Manifest this update: Fri 25 Apr 2025 03:17:42 +0000 Manifest next update: Fri 02 May 2025 03:17:42 +0000 Files and hashes: 1: 1ABRvI3aYMky7gd2mrhnvvqNQvY.crl (hash: xPsOFnZWY6SRj2oUI0kVFBHBNmNCDx8eYIak7WoXv84=) 2: F8B64B2A97BB11EF9D4C9647C4F9AE02.roa (hash: 61jykwbjSWlecTxQbXexQrYBIHCiEouIxmqT8SrgbD0=) 3: C0E3BC02B8B611EFBD4C6F4AC4F9AE02.roa (hash: W/53nThgtqJJzKbcr1z4E+VxinzpZInwajjfUaYcr0E=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D3F8E/6C4089BA216C11EEB28BF24CC4F9AE02/1ABRvI3aYMky7gd2mrhnvvqNQvY.crl rsync://rpki.apnic.net/member_repository/A91D3F8E/6C4089BA216C11EEB28BF24CC4F9AE02/1ABRvI3aYMky7gd2mrhnvvqNQvY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1ABRvI3aYMky7gd2mrhnvvqNQvY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 03:17:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 398 (0x18e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D3F8E, serialNumber=D40051BC8DDA60C932EE07769AB867BEFA8D42F6 Validity Not Before: Apr 25 03:17:42 2025 GMT Not After : May 2 03:17:42 2025 GMT Subject: CN=680afed7-ed9b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:12:1d:1d:7a:48:a0:6e:7c:d2:e4:0a:1a:c6: 40:45:13:cc:6a:e8:58:63:19:6b:7f:4f:68:54:48: de:2b:33:4b:ab:84:33:b7:26:b7:46:66:b6:7a:3d: 62:34:56:d0:46:5f:d5:95:cb:c7:f5:8f:37:71:32: 84:e9:19:c5:3e:3b:48:c0:2b:53:86:69:f1:c5:81: 8f:71:8c:9e:01:23:f7:bc:87:e7:a3:13:c8:43:37: 16:60:c3:db:01:0c:fc:2e:52:72:1b:44:b2:12:24: 2b:ca:b8:f4:64:e7:d4:cc:8a:14:46:85:7c:da:58: 35:22:8c:dd:f1:3a:5d:cc:d4:36:22:b6:d8:da:d6: a2:e8:fa:82:c3:be:49:c9:7c:46:43:12:7b:de:c9: 4c:e4:52:a3:75:a1:d6:45:5c:d3:d4:a3:32:40:d1: 19:2b:1d:13:2d:97:0c:30:c1:9b:6d:c4:ea:7e:26: d0:d2:cf:12:7a:eb:c1:2d:6d:5b:f9:35:e9:64:f1: 16:39:82:d7:09:f6:9b:76:34:58:c5:40:be:28:ab: c3:37:b5:5c:8b:15:06:47:67:c8:ff:f7:ed:34:69: cb:63:23:18:7b:e2:8a:c1:82:f2:2b:68:30:e5:38: bc:c5:51:fe:38:cd:0e:f3:42:b2:56:bb:5c:26:06: a0:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:B3:A3:B1:8F:C0:22:8C:FC:40:AA:3A:9B:F6:61:F6:A7:71:32:48 X509v3 Authority Key Identifier: keyid:D4:00:51:BC:8D:DA:60:C9:32:EE:07:76:9A:B8:67:BE:FA:8D:42:F6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D3F8E/6C4089BA216C11EEB28BF24CC4F9AE02/1ABRvI3aYMky7gd2mrhnvvqNQvY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1ABRvI3aYMky7gd2mrhnvvqNQvY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D3F8E/6C4089BA216C11EEB28BF24CC4F9AE02/1ABRvI3aYMky7gd2mrhnvvqNQvY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b7:25:99:11:9c:27:3b:a8:2f:f0:ae:0b:b1:0c:d6:4c:35:fc: 3b:cf:6e:25:ba:a4:35:c6:8d:76:8c:63:e2:bf:68:b6:e3:31: 4c:99:12:2a:96:81:27:05:ae:fe:e6:3c:41:2d:ba:5f:bb:8c: 69:88:c1:c2:f6:ee:b7:fa:40:5d:49:e9:59:0e:4b:26:06:4e: 6e:2e:25:98:29:fa:16:1e:5f:3f:bf:cf:6c:1f:88:20:0c:f5: b1:c4:9d:14:e4:51:fe:ce:72:cd:48:02:b0:8c:5c:d9:c1:a6: d5:09:c2:e6:8c:40:ab:52:ac:68:fc:d0:a6:79:51:d0:f6:89: 24:58:37:bc:44:d0:54:5b:5f:a6:c7:a4:a3:2d:76:c3:33:d7: 4f:51:ac:c6:2c:1c:f9:f3:09:f6:3f:69:34:b5:5c:e5:88:0d: 65:d2:3a:52:03:8d:82:a3:da:87:c6:b6:6e:5d:df:f5:fe:2f: 8d:28:ed:d4:dd:c3:1d:1c:b1:b9:d5:6b:ba:88:3d:9c:a3:5c: 57:2f:0b:2d:c6:70:14:03:9d:7b:b6:21:ce:00:f2:95:c4:60: 18:cd:d9:ea:80:4c:f2:25:49:d8:56:12:fc:22:9a:3b:47:0f: 30:f4:35:9d:7c:9f:8b:70:53:4f:75:e6:07:2f:f2:c9:63:9a: 4e:51:16:5c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAY4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDNGOEUxMTAvBgNVBAUTKEQ0MDA1MUJDOEREQTYwQzkzMkVFMDc3NjlBQjg2N0JF RkE4RDQyRjYwHhcNMjUwNDI1MDMxNzQyWhcNMjUwNTAyMDMxNzQyWjAYMRYwFAYD VQQDEw02ODBhZmVkNy1lZDliMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuRIdHXpIoG580uQKGsZARRPMauhYYxlrf09oVEjeKzNLq4Qztya3Rma2ej1i NFbQRl/VlcvH9Y83cTKE6RnFPjtIwCtThmnxxYGPcYyeASP3vIfnoxPIQzcWYMPb AQz8LlJyG0SyEiQryrj0ZOfUzIoURoV82lg1Iozd8TpdzNQ2IrbY2tai6PqCw75J yXxGQxJ73slM5FKjdaHWRVzT1KMyQNEZKx0TLZcMMMGbbcTqfibQ0s8SeuvBLW1b +TXpZPEWOYLXCfabdjRYxUC+KKvDN7VcixUGR2fI//ftNGnLYyMYe+KKwYLyK2gw 5Ti8xVH+OM0O80KyVrtcJgagbwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDKzo7GP wCKM/ECqOpv2YfancTJIMB8GA1UdIwQYMBaAFNQAUbyN2mDJMu4Hdpq4Z776jUL2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEM0Y4RS82QzQwODlCQTIx NkMxMUVFQjI4QkYyNENDNEY5QUUwMi8xQUJSdkkzYVlNa3k3Z2QybXJobnZ2cU5R dlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzFBQlJ2STNhWU1reTdnZDJtcmhudnZxTlF2WS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE M0Y4RS82QzQwODlCQTIxNkMxMUVFQjI4QkYyNENDNEY5QUUwMi8xQUJSdkkzYVlN a3k3Z2QybXJobnZ2cU5RdlkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC3JZkRnCc7qC/wrguxDNZMNfw7z24luqQ1xo12jGPiv2i24zFMmRIq loEnBa7+5jxBLbpfu4xpiMHC9u63+kBdSelZDksmBk5uLiWYKfoWHl8/v89sH4gg DPWxxJ0U5FH+znLNSAKwjFzZwabVCcLmjECrUqxo/NCmeVHQ9okkWDe8RNBUW1+m x6SjLXbDM9dPUazGLBz58wn2P2k0tVzliA1l0jpSA42Co9qHxrZuXd/1/i+NKO3U 3cMdHLG51Wu6iD2co1xXLwstxnAUA517tiHOAPKVxGAYzdnqgEzyJUnYVhL8Ipo7 Rw8w9DWdfJ+LcFNPdeYHL/LJY5pOURZc -----END CERTIFICATE-----Generated at Sat Apr 26 13:06:36 2025 by rpki-client