$ rpki-client -vvf rpki.apnic.net/member_repository/A91DACA7/517E6E4C45B211EFA5DF6D19C4F9AE02/Abso_b4VWoZixe5oDP3wyY1OvR0.mft File: Abso_b4VWoZixe5oDP3wyY1OvR0.mft (raw, json) Hash identifier: dIEMJTstzVaA3hQFl2Oia1zIC0iKGT0n72fSidzw56g= Subject key identifier: 6F:66:B9:EA:A1:A2:A2:9A:1C:A7:CB:33:84:A8:60:0D:62:F2:A4:27 Authority key identifier: 01:BB:28:FD:BE:15:5A:86:62:C5:EE:68:0C:FD:F0:C9:8D:4E:BD:1D Certificate issuer: /CN=A91DACA7/serialNumber=01BB28FDBE155A8662C5EE680CFDF0C98D4EBD1D Certificate serial: 94 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Abso_b4VWoZixe5oDP3wyY1OvR0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DACA7/517E6E4C45B211EFA5DF6D19C4F9AE02/Abso_b4VWoZixe5oDP3wyY1OvR0.mft Manifest number: 92 Signing time: Fri 25 Apr 2025 05:25:49 +0000 Manifest this update: Fri 25 Apr 2025 05:25:49 +0000 Manifest next update: Fri 02 May 2025 05:25:49 +0000 Files and hashes: 1: Abso_b4VWoZixe5oDP3wyY1OvR0.crl (hash: QL5V/8i14kyV9ouLp4M8Fjxom+bjBWP/j+kACaDtU8Q=) 2: ECB0C56845B211EFBCC09A1AC4F9AE02.roa (hash: EGPY/0B+FhNPcxx4yI5SHvTWW9NTcAbNHzvZ84arIm4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DACA7/517E6E4C45B211EFA5DF6D19C4F9AE02/Abso_b4VWoZixe5oDP3wyY1OvR0.crl rsync://rpki.apnic.net/member_repository/A91DACA7/517E6E4C45B211EFA5DF6D19C4F9AE02/Abso_b4VWoZixe5oDP3wyY1OvR0.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Abso_b4VWoZixe5oDP3wyY1OvR0.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 05:25:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 148 (0x94) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DACA7, serialNumber=01BB28FDBE155A8662C5EE680CFDF0C98D4EBD1D Validity Not Before: Apr 25 05:25:49 2025 GMT Not After : May 2 05:25:49 2025 GMT Subject: CN=680b1cdd-fd86 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:f4:ab:fa:e2:22:48:88:0b:30:41:4e:59:6e: 0e:51:7a:7b:91:f3:f3:d8:7b:a1:60:5e:0c:44:97: 25:0c:7f:7a:74:ff:56:ae:d2:55:21:14:62:2b:9b: 27:61:5f:1c:70:06:3e:bb:bc:82:c1:61:23:71:2c: 72:99:0c:e0:13:d3:a6:ee:d9:3f:63:ee:36:3c:f2: f4:e6:a6:db:31:c8:d2:58:9f:ef:d1:69:23:54:83: 40:9f:1f:72:92:ea:70:cc:8e:e5:dc:9d:46:80:ca: 0b:fb:a8:59:2f:ff:36:3a:50:17:70:62:6c:60:91: 04:f3:16:63:1e:dc:14:76:92:fc:bc:3f:9c:df:89: 5b:84:84:11:41:7d:0c:77:63:ce:7f:36:c3:04:20: 39:35:cd:c4:a6:c8:02:e6:cc:64:38:ee:80:b7:07: 4d:80:d8:96:1b:56:84:f1:5b:c8:20:d0:02:7d:8d: 16:ee:21:9d:42:44:d9:cf:0c:95:cb:f8:5e:25:a9: 15:41:71:62:b0:fb:24:e5:c5:64:d4:12:24:36:23: b4:e1:df:56:87:91:94:31:a5:15:80:4b:60:f4:ac: 02:0f:da:80:0b:6b:dc:d3:94:1f:dc:d4:10:96:55: dc:53:cc:cb:21:43:a9:ef:54:bb:64:31:e4:40:a2: 45:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:66:B9:EA:A1:A2:A2:9A:1C:A7:CB:33:84:A8:60:0D:62:F2:A4:27 X509v3 Authority Key Identifier: keyid:01:BB:28:FD:BE:15:5A:86:62:C5:EE:68:0C:FD:F0:C9:8D:4E:BD:1D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DACA7/517E6E4C45B211EFA5DF6D19C4F9AE02/Abso_b4VWoZixe5oDP3wyY1OvR0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Abso_b4VWoZixe5oDP3wyY1OvR0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DACA7/517E6E4C45B211EFA5DF6D19C4F9AE02/Abso_b4VWoZixe5oDP3wyY1OvR0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6e:bb:43:72:d8:60:7d:c8:3f:1c:85:8f:52:02:c9:84:a1:0b: 12:37:1b:f2:d1:f3:fe:46:cd:8f:af:dd:83:c6:c0:9c:59:d9: 20:c5:1f:68:89:0c:85:e1:66:d6:32:9a:db:1a:7b:26:5a:25: 3b:7f:14:58:8d:9b:4a:0e:8e:6b:f4:01:4d:9d:e9:0c:d0:c7: f3:df:fe:f0:81:2b:75:36:f6:52:75:8d:7e:19:06:43:d8:02: 89:94:9f:7a:14:59:6a:f6:cf:b0:64:30:52:53:d0:05:59:d4: 30:c9:84:71:6c:85:fe:b0:2b:c7:9f:2e:84:e9:31:af:9f:c3: 59:e5:ce:a8:62:fe:0b:ea:56:ca:a6:27:55:da:d0:bd:ee:f8: e4:94:32:82:a9:67:c8:64:7b:3c:d8:a5:cc:0e:45:bb:ea:d7: 61:c7:02:3a:c5:85:53:8a:cc:5c:bf:82:09:4a:84:26:c9:52: 83:b1:d2:8b:2f:b5:2f:3f:88:32:b1:6f:9d:6c:68:d9:e4:de: 1a:d0:e0:6f:e9:5f:97:f2:bc:c3:f3:ca:b2:88:3e:ae:04:ab: e8:1c:ec:57:45:91:9a:6f:bb:00:5e:b3:0c:00:5a:d1:eb:f9: d9:69:4a:d6:54:0c:8c:b6:2b:1d:99:86:56:81:22:b7:da:72: de:bc:4f:24 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAJQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REFDQTcxMTAvBgNVBAUTKDAxQkIyOEZEQkUxNTVBODY2MkM1RUU2ODBDRkRGMEM5 OEQ0RUJEMUQwHhcNMjUwNDI1MDUyNTQ5WhcNMjUwNTAyMDUyNTQ5WjAYMRYwFAYD VQQDEw02ODBiMWNkZC1mZDg2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5fSr+uIiSIgLMEFOWW4OUXp7kfPz2HuhYF4MRJclDH96dP9WrtJVIRRiK5sn YV8ccAY+u7yCwWEjcSxymQzgE9Om7tk/Y+42PPL05qbbMcjSWJ/v0WkjVINAnx9y kupwzI7l3J1GgMoL+6hZL/82OlAXcGJsYJEE8xZjHtwUdpL8vD+c34lbhIQRQX0M d2POfzbDBCA5Nc3EpsgC5sxkOO6AtwdNgNiWG1aE8VvIINACfY0W7iGdQkTZzwyV y/heJakVQXFisPsk5cVk1BIkNiO04d9Wh5GUMaUVgEtg9KwCD9qAC2vc05Qf3NQQ llXcU8zLIUOp71S7ZDHkQKJFXwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFG9mueqh oqKaHKfLM4SoYA1i8qQnMB8GA1UdIwQYMBaAFAG7KP2+FVqGYsXuaAz98MmNTr0d MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQUNBNy81MTdFNkU0QzQ1 QjIxMUVGQTVERjZEMTlDNEY5QUUwMi9BYnNvX2I0VldvWml4ZTVvRFAzd3lZMU92 UjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0Fic29fYjRWV29aaXhlNW9EUDN3eVkxT3ZSMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE QUNBNy81MTdFNkU0QzQ1QjIxMUVGQTVERjZEMTlDNEY5QUUwMi9BYnNvX2I0Vldv Wml4ZTVvRFAzd3lZMU92UjAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBuu0Ny2GB9yD8chY9SAsmEoQsSNxvy0fP+Rs2Pr92DxsCcWdkgxR9o iQyF4WbWMprbGnsmWiU7fxRYjZtKDo5r9AFNnekM0Mfz3/7wgSt1NvZSdY1+GQZD 2AKJlJ96FFlq9s+wZDBSU9AFWdQwyYRxbIX+sCvHny6E6TGvn8NZ5c6oYv4L6lbK pidV2tC97vjklDKCqWfIZHs82KXMDkW76tdhxwI6xYVTisxcv4IJSoQmyVKDsdKL L7UvP4gysW+dbGjZ5N4a0OBv6V+X8rzD88qyiD6uBKvoHOxXRZGab7sAXrMMAFrR 6/nZaUrWVAyMtisdmYZWgSK32nLevE8k -----END CERTIFICATE-----Generated at Sat Apr 26 12:31:14 2025 by rpki-client