$ rpki-client -vvf rpki.apnic.net/member_repository/A91D3F8E/6C4089BA216C11EEB28BF24CC4F9AE02/1ABRvI3aYMky7gd2mrhnvvqNQvY.mft File: 1ABRvI3aYMky7gd2mrhnvvqNQvY.mft (raw, json) Hash identifier: 6ELvgKvPB6Pgp0i9e2AKyBU5g6hpZDjuApkhry6GkAE= Subject key identifier: 21:E2:8C:EE:97:5C:E7:E0:FA:E1:C8:D7:1A:E6:4E:ED:B2:B5:3D:E8 Authority key identifier: D4:00:51:BC:8D:DA:60:C9:32:EE:07:76:9A:B8:67:BE:FA:8D:42:F6 Certificate issuer: /CN=A91D3F8E/serialNumber=D40051BC8DDA60C932EE07769AB867BEFA8D42F6 Certificate serial: 01CC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1ABRvI3aYMky7gd2mrhnvvqNQvY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D3F8E/6C4089BA216C11EEB28BF24CC4F9AE02/1ABRvI3aYMky7gd2mrhnvvqNQvY.mft Manifest number: 01AB Signing time: Sat 09 Aug 2025 03:57:29 +0000 Manifest this update: Sat 09 Aug 2025 03:57:28 +0000 Manifest next update: Sat 16 Aug 2025 03:57:28 +0000 Files and hashes: 1: 1ABRvI3aYMky7gd2mrhnvvqNQvY.crl (hash: DOtFPtAwkNGQdoEcgAPLVH3gTn4s7I9I1fcmGcwqJ1Q=) 2: F8B64B2A97BB11EF9D4C9647C4F9AE02.roa (hash: pyGqakx6aToXl1NPvkP6t5S+uv8P5F7PIid49DfaOVg=) 3: C0E3BC02B8B611EFBD4C6F4AC4F9AE02.roa (hash: iK6flRTT/R1NX18TACntkfKJoThokFSeTRkG+bdqrmA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D3F8E/6C4089BA216C11EEB28BF24CC4F9AE02/1ABRvI3aYMky7gd2mrhnvvqNQvY.crl rsync://rpki.apnic.net/member_repository/A91D3F8E/6C4089BA216C11EEB28BF24CC4F9AE02/1ABRvI3aYMky7gd2mrhnvvqNQvY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1ABRvI3aYMky7gd2mrhnvvqNQvY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 460 (0x1cc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D3F8E, serialNumber=D40051BC8DDA60C932EE07769AB867BEFA8D42F6 Validity Not Before: Aug 9 03:57:28 2025 GMT Not After : Aug 16 03:57:28 2025 GMT Subject: CN=6896c729-7324 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:a6:52:17:48:66:fd:08:4b:3e:15:b0:29:12: 22:0e:35:2a:53:8f:4e:f6:54:66:17:5a:0b:c6:14: a8:bb:41:84:65:ce:1f:a2:89:96:89:4d:51:64:07: a9:6d:09:ff:75:6d:c6:29:56:f6:8d:8d:5a:23:15: 4c:38:5e:77:b1:ad:a2:35:3a:b4:55:93:2d:2d:be: 05:06:ec:06:9b:de:58:1a:5b:e3:68:8c:37:38:b8: 29:5b:c9:4b:70:e9:32:3b:b0:22:0b:ba:56:d8:e6: 0d:62:fb:2b:0d:19:5a:5e:4d:c4:d6:18:dc:74:20: 03:d3:a1:02:5f:53:40:1a:eb:13:fc:c1:5b:ad:d9: 2a:f4:98:5b:a0:bc:c1:be:c3:58:7c:1e:ec:b0:c8: ad:40:4c:a5:20:10:12:31:1b:23:4f:97:52:fc:70: 27:70:cc:f9:4f:3b:c1:3a:25:91:fe:a6:b2:64:6c: 5a:3a:ff:ed:86:f1:63:00:da:4e:0d:ee:88:e5:0e: aa:76:9e:c3:26:e7:3a:4e:3b:ce:46:83:ed:ad:de: d6:f1:62:7a:d8:55:0c:73:22:dc:14:20:55:ed:26: c6:b6:61:22:3d:68:f3:5c:e7:2d:48:c4:93:68:11: 3b:78:e1:b8:3f:52:42:72:7d:82:b7:70:2d:8d:58: da:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:E2:8C:EE:97:5C:E7:E0:FA:E1:C8:D7:1A:E6:4E:ED:B2:B5:3D:E8 X509v3 Authority Key Identifier: keyid:D4:00:51:BC:8D:DA:60:C9:32:EE:07:76:9A:B8:67:BE:FA:8D:42:F6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D3F8E/6C4089BA216C11EEB28BF24CC4F9AE02/1ABRvI3aYMky7gd2mrhnvvqNQvY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1ABRvI3aYMky7gd2mrhnvvqNQvY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D3F8E/6C4089BA216C11EEB28BF24CC4F9AE02/1ABRvI3aYMky7gd2mrhnvvqNQvY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 66:16:da:b7:c1:cb:c3:27:43:96:c5:e1:d0:dc:8b:b2:84:69: 3b:2a:fa:2d:4b:08:b2:ff:fa:04:bb:8a:78:c6:53:89:bf:86: cf:d3:d1:27:ed:80:0a:43:ec:a5:82:46:06:ff:29:0a:e2:ce: dc:34:49:6d:e4:a1:7d:ce:5c:61:d8:83:68:f8:c3:87:06:f6: 71:70:fe:ce:3a:81:e7:9e:78:5c:a8:91:b1:41:7e:10:22:f3: 17:87:2d:bf:1d:a1:c2:56:27:9e:ff:37:54:30:c8:b7:ea:a9: a8:ab:44:fc:68:1d:75:8a:81:7a:39:ac:70:fe:81:bd:3b:8a: e0:0d:97:d3:33:cf:65:d5:22:ba:10:b5:5f:d8:e7:f4:f1:53: 40:98:0c:68:8c:05:1a:74:00:1b:a2:7c:25:05:e5:c9:7d:8a: 4a:cf:e5:6d:2d:18:f1:0b:26:c5:65:5a:44:b7:5d:ba:3a:29: 94:c9:fa:aa:27:41:dd:1a:4b:52:7b:43:6a:ec:88:18:d1:43: c5:0b:0c:7c:01:b6:9d:d0:17:12:2c:22:84:ff:8d:70:c7:35: f3:c6:54:89:db:00:4e:79:09:26:fd:52:39:c2:54:cc:f4:2b: 5e:ff:94:36:7b:91:09:08:bc:11:f2:6a:70:80:d8:8b:c9:3f: b0:38:8d:50 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAcwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDNGOEUxMTAvBgNVBAUTKEQ0MDA1MUJDOEREQTYwQzkzMkVFMDc3NjlBQjg2N0JF RkE4RDQyRjYwHhcNMjUwODA5MDM1NzI4WhcNMjUwODE2MDM1NzI4WjAYMRYwFAYD VQQDEw02ODk2YzcyOS03MzI0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu6ZSF0hm/QhLPhWwKRIiDjUqU49O9lRmF1oLxhSou0GEZc4foomWiU1RZAep bQn/dW3GKVb2jY1aIxVMOF53sa2iNTq0VZMtLb4FBuwGm95YGlvjaIw3OLgpW8lL cOkyO7AiC7pW2OYNYvsrDRlaXk3E1hjcdCAD06ECX1NAGusT/MFbrdkq9JhboLzB vsNYfB7ssMitQEylIBASMRsjT5dS/HAncMz5TzvBOiWR/qayZGxaOv/thvFjANpO De6I5Q6qdp7DJuc6TjvORoPtrd7W8WJ62FUMcyLcFCBV7SbGtmEiPWjzXOctSMST aBE7eOG4P1JCcn2Ct3AtjVja5QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCHijO6X XOfg+uHI1xrmTu2ytT3oMB8GA1UdIwQYMBaAFNQAUbyN2mDJMu4Hdpq4Z776jUL2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEM0Y4RS82QzQwODlCQTIx NkMxMUVFQjI4QkYyNENDNEY5QUUwMi8xQUJSdkkzYVlNa3k3Z2QybXJobnZ2cU5R dlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzFBQlJ2STNhWU1reTdnZDJtcmhudnZxTlF2WS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE M0Y4RS82QzQwODlCQTIxNkMxMUVFQjI4QkYyNENDNEY5QUUwMi8xQUJSdkkzYVlN a3k3Z2QybXJobnZ2cU5RdlkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBmFtq3wcvDJ0OWxeHQ3IuyhGk7KvotSwiy//oEu4p4xlOJv4bP09En 7YAKQ+ylgkYG/ykK4s7cNElt5KF9zlxh2INo+MOHBvZxcP7OOoHnnnhcqJGxQX4Q IvMXhy2/HaHCViee/zdUMMi36qmoq0T8aB11ioF6Oaxw/oG9O4rgDZfTM89l1SK6 ELVf2Of08VNAmAxojAUadAAbonwlBeXJfYpKz+VtLRjxCybFZVpEt126OimUyfqq J0HdGktSe0Nq7IgY0UPFCwx8Abad0BcSLCKE/41wxzXzxlSJ2wBOeQkm/VI5wlTM 9Cte/5Q2e5EJCLwR8mpwgNiLyT+wOI1Q -----END CERTIFICATE-----Generated at Mon Aug 11 04:15:04 2025 by rpki-client