$ rpki-client -vvf rpki.apnic.net/member_repository/A91DACA7/517E6E4C45B211EFA5DF6D19C4F9AE02/Abso_b4VWoZixe5oDP3wyY1OvR0.mft File: Abso_b4VWoZixe5oDP3wyY1OvR0.mft (raw, json) Hash identifier: WNYXqXIJC44pCRuaCiiPVrWfuNNS3qPzcXwU+klZa7U= Subject key identifier: 3C:A0:03:B3:20:F0:01:4A:F9:86:F8:32:61:53:F0:59:35:E1:1B:66 Authority key identifier: 01:BB:28:FD:BE:15:5A:86:62:C5:EE:68:0C:FD:F0:C9:8D:4E:BD:1D Certificate issuer: /CN=A91DACA7/serialNumber=01BB28FDBE155A8662C5EE680CFDF0C98D4EBD1D Certificate serial: AF Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Abso_b4VWoZixe5oDP3wyY1OvR0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DACA7/517E6E4C45B211EFA5DF6D19C4F9AE02/Abso_b4VWoZixe5oDP3wyY1OvR0.mft Manifest number: AD Signing time: Thu 19 Jun 2025 05:26:18 +0000 Manifest this update: Thu 19 Jun 2025 05:26:18 +0000 Manifest next update: Thu 26 Jun 2025 05:26:18 +0000 Files and hashes: 1: Abso_b4VWoZixe5oDP3wyY1OvR0.crl (hash: 9IVjXMknqTvRzur7pBNGBO8IbSWsYJX9+tVriHYPpiw=) 2: ECB0C56845B211EFBCC09A1AC4F9AE02.roa (hash: EGPY/0B+FhNPcxx4yI5SHvTWW9NTcAbNHzvZ84arIm4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DACA7/517E6E4C45B211EFA5DF6D19C4F9AE02/Abso_b4VWoZixe5oDP3wyY1OvR0.crl rsync://rpki.apnic.net/member_repository/A91DACA7/517E6E4C45B211EFA5DF6D19C4F9AE02/Abso_b4VWoZixe5oDP3wyY1OvR0.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Abso_b4VWoZixe5oDP3wyY1OvR0.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 26 Jun 2025 05:26:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 175 (0xaf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DACA7, serialNumber=01BB28FDBE155A8662C5EE680CFDF0C98D4EBD1D Validity Not Before: Jun 19 05:26:18 2025 GMT Not After : Jun 26 05:26:18 2025 GMT Subject: CN=68539f7a-4f1d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:a1:8f:77:9f:ee:3e:f5:e9:c0:9b:60:47:7a: b4:55:b9:d1:a3:6f:b6:64:72:bc:53:9f:88:af:10: 77:ae:2a:b2:9b:a9:e6:cd:52:78:5d:a0:72:c8:79: 70:2d:c6:ae:50:4b:1c:83:89:12:9d:6f:73:83:3e: 71:39:0c:25:38:34:88:00:95:92:54:d2:ee:aa:f8: ef:ee:00:2f:92:55:04:54:7c:f4:88:ec:71:c9:a9: 61:5d:de:91:e6:ca:d7:5b:89:52:84:53:a9:77:1d: f1:cc:97:e7:b7:8c:70:44:47:34:9c:31:fe:3f:fa: 15:9c:59:5b:86:be:8f:d6:e8:9e:04:29:59:e8:7a: 70:2a:d6:22:30:7b:35:d5:7d:67:57:36:ff:7a:67: f7:19:ee:83:71:1c:0b:16:5a:87:0d:4c:88:6b:05: 62:37:53:10:9c:43:6c:c0:53:bb:e2:c1:0d:c3:6c: 14:b3:cb:9c:34:cf:90:99:e5:85:a1:bc:d2:c8:a8: 1b:91:f9:de:75:6a:20:05:1e:49:6d:88:98:3f:62: fa:00:43:1a:10:c4:3c:37:ec:26:a3:bd:69:f7:e8: bc:f8:94:fb:1a:3e:a9:cb:63:b8:92:28:ec:bd:42: 8b:79:c7:05:eb:a9:07:3a:82:b4:e5:ff:45:2f:88: 74:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:A0:03:B3:20:F0:01:4A:F9:86:F8:32:61:53:F0:59:35:E1:1B:66 X509v3 Authority Key Identifier: keyid:01:BB:28:FD:BE:15:5A:86:62:C5:EE:68:0C:FD:F0:C9:8D:4E:BD:1D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DACA7/517E6E4C45B211EFA5DF6D19C4F9AE02/Abso_b4VWoZixe5oDP3wyY1OvR0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Abso_b4VWoZixe5oDP3wyY1OvR0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DACA7/517E6E4C45B211EFA5DF6D19C4F9AE02/Abso_b4VWoZixe5oDP3wyY1OvR0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c3:14:27:e5:e7:2c:69:9a:96:3c:59:e4:27:bc:84:5a:74:23: d4:68:61:7e:eb:c3:3d:1b:0b:a3:61:61:92:b9:35:c0:3d:6a: ec:16:12:37:47:6b:3f:6e:6d:ca:d6:72:40:e4:91:4f:04:1c: cb:20:a8:b9:e9:4f:1b:84:ac:48:cb:6b:cc:90:a5:5d:80:d4: e2:53:a4:2e:f7:e5:12:4d:b8:8b:1d:61:98:c4:6c:ec:36:e2: cf:84:5f:b8:f3:5b:38:4f:2b:73:fe:59:af:36:52:9d:09:4a: a9:50:a6:5c:89:56:7e:95:62:25:09:37:fd:76:29:82:62:e0: 61:44:be:aa:52:d0:44:e8:39:b1:1b:56:4e:1a:44:eb:1a:4e: 2d:a0:fc:7e:53:f0:21:04:18:5b:43:42:7d:b3:94:bb:ad:66: 88:32:42:d9:4a:d6:cd:a4:b6:66:37:46:03:a9:a3:cb:fd:ee: 4d:ac:c2:9e:fd:37:5c:79:ea:00:6f:93:cb:44:ce:f2:f4:1e: 5a:f3:df:41:50:fb:9c:ad:31:fb:6e:fe:89:fe:ef:69:55:ae: 9b:f7:b8:38:41:b4:9a:b9:1e:88:25:8c:49:5c:07:95:75:35: aa:6c:18:ed:25:63:fa:d7:d1:7c:1e:b9:2b:29:c6:7e:5f:f1: 62:2d:26:07 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAK8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REFDQTcxMTAvBgNVBAUTKDAxQkIyOEZEQkUxNTVBODY2MkM1RUU2ODBDRkRGMEM5 OEQ0RUJEMUQwHhcNMjUwNjE5MDUyNjE4WhcNMjUwNjI2MDUyNjE4WjAYMRYwFAYD VQQDEw02ODUzOWY3YS00ZjFkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAs6GPd5/uPvXpwJtgR3q0VbnRo2+2ZHK8U5+IrxB3riqym6nmzVJ4XaByyHlw LcauUEscg4kSnW9zgz5xOQwlODSIAJWSVNLuqvjv7gAvklUEVHz0iOxxyalhXd6R 5srXW4lShFOpdx3xzJfnt4xwREc0nDH+P/oVnFlbhr6P1uieBClZ6HpwKtYiMHs1 1X1nVzb/emf3Ge6DcRwLFlqHDUyIawViN1MQnENswFO74sENw2wUs8ucNM+QmeWF obzSyKgbkfnedWogBR5JbYiYP2L6AEMaEMQ8N+wmo71p9+i8+JT7Gj6py2O4kijs vUKLeccF66kHOoK05f9FL4h03wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDygA7Mg 8AFK+Yb4MmFT8Fk14RtmMB8GA1UdIwQYMBaAFAG7KP2+FVqGYsXuaAz98MmNTr0d MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQUNBNy81MTdFNkU0QzQ1 QjIxMUVGQTVERjZEMTlDNEY5QUUwMi9BYnNvX2I0VldvWml4ZTVvRFAzd3lZMU92 UjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0Fic29fYjRWV29aaXhlNW9EUDN3eVkxT3ZSMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE QUNBNy81MTdFNkU0QzQ1QjIxMUVGQTVERjZEMTlDNEY5QUUwMi9BYnNvX2I0Vldv Wml4ZTVvRFAzd3lZMU92UjAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDDFCfl5yxpmpY8WeQnvIRadCPUaGF+68M9GwujYWGSuTXAPWrsFhI3 R2s/bm3K1nJA5JFPBBzLIKi56U8bhKxIy2vMkKVdgNTiU6Qu9+USTbiLHWGYxGzs NuLPhF+481s4Tytz/lmvNlKdCUqpUKZciVZ+lWIlCTf9dimCYuBhRL6qUtBE6Dmx G1ZOGkTrGk4toPx+U/AhBBhbQ0J9s5S7rWaIMkLZStbNpLZmN0YDqaPL/e5NrMKe /TdceeoAb5PLRM7y9B5a899BUPucrTH7bv6J/u9pVa6b97g4QbSauR6IJYxJXAeV dTWqbBjtJWP619F8HrkrKcZ+X/FiLSYH -----END CERTIFICATE-----Generated at Fri Jun 20 02:33:03 2025 by rpki-client