$ rpki-client -vvf rpki.apnic.net/member_repository/A91F9605/36666D6E870911EB823B3356C4F9AE02/aBiEwMdVflJu8rxNHlq8M2rif54.mft File: aBiEwMdVflJu8rxNHlq8M2rif54.mft (raw, json) Hash identifier: o4fSF7/sl3RrgzXqYKqVqaoTjp927hIHR+0cv6qbnc0= Subject key identifier: A0:02:06:B1:06:A8:EC:03:40:89:2B:7C:9F:3C:EC:FA:9F:95:94:FD Authority key identifier: 68:18:84:C0:C7:55:7E:52:6E:F2:BC:4D:1E:5A:BC:33:6A:E2:7F:9E Certificate issuer: /CN=A91F9605/serialNumber=681884C0C7557E526EF2BC4D1E5ABC336AE27F9E Certificate serial: 0684 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aBiEwMdVflJu8rxNHlq8M2rif54.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F9605/36666D6E870911EB823B3356C4F9AE02/aBiEwMdVflJu8rxNHlq8M2rif54.mft Manifest number: 067D Signing time: Sun 10 Aug 2025 22:29:42 +0000 Manifest this update: Sun 10 Aug 2025 22:29:42 +0000 Manifest next update: Sun 17 Aug 2025 22:29:42 +0000 Files and hashes: 1: aBiEwMdVflJu8rxNHlq8M2rif54.crl (hash: 9vJBQmvMLiFOyNHbnvF9FImUnnMyA1J5acfwwVFoXD0=) 2: 75AB03A2870B11EB88E44876C4F9AE02.roa (hash: 7qI+njWvbbh+KneeLcZmySdlxOhiGVsKeC65nMgeI7E=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F9605/36666D6E870911EB823B3356C4F9AE02/aBiEwMdVflJu8rxNHlq8M2rif54.crl rsync://rpki.apnic.net/member_repository/A91F9605/36666D6E870911EB823B3356C4F9AE02/aBiEwMdVflJu8rxNHlq8M2rif54.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aBiEwMdVflJu8rxNHlq8M2rif54.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1668 (0x684) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F9605, serialNumber=681884C0C7557E526EF2BC4D1E5ABC336AE27F9E Validity Not Before: Aug 10 22:29:42 2025 GMT Not After : Aug 17 22:29:42 2025 GMT Subject: CN=68991d56-ef65 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:75:dc:24:60:bc:e5:60:e9:6f:67:a3:02:9f: 67:24:26:ab:69:ab:99:40:d9:bf:2b:0c:e8:fd:d7: 2c:c6:d2:8d:36:54:52:02:ab:5c:c1:bd:38:81:10: d0:fd:c7:b7:07:ba:8f:57:2d:63:03:83:39:d2:e4: 08:02:66:9e:fc:9f:c0:5c:04:f3:c6:09:fa:28:8f: 77:c7:7a:d4:d0:92:a2:ac:2a:25:da:72:65:1a:b1: 90:4f:6d:03:0b:ae:4f:02:a6:ab:75:f3:a2:44:b2: b7:00:61:fc:2c:96:84:9b:8e:e9:99:79:b0:70:0b: bd:9d:46:54:2f:49:f1:bd:d8:51:b5:0d:7b:2d:f7: 11:20:b2:80:a2:56:b6:97:1d:ab:4e:fe:a0:59:8e: 7c:cc:bd:35:0f:f1:df:96:08:b3:62:58:f2:08:4e: 44:b9:f6:f7:37:fa:fa:54:c2:e1:94:bf:23:de:03: 66:87:0d:2c:e9:1c:41:92:e3:89:51:74:b6:d4:0e: fc:25:06:0b:a6:d5:ff:31:d0:71:64:32:e1:84:e8: 09:c6:73:26:44:28:da:cd:63:a5:c1:71:11:30:86: a5:ce:dc:c0:96:c9:ea:50:36:14:62:cd:ae:47:dc: 03:f5:8b:18:58:90:27:5a:03:78:c0:5d:be:7d:a6: 8e:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:02:06:B1:06:A8:EC:03:40:89:2B:7C:9F:3C:EC:FA:9F:95:94:FD X509v3 Authority Key Identifier: keyid:68:18:84:C0:C7:55:7E:52:6E:F2:BC:4D:1E:5A:BC:33:6A:E2:7F:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F9605/36666D6E870911EB823B3356C4F9AE02/aBiEwMdVflJu8rxNHlq8M2rif54.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aBiEwMdVflJu8rxNHlq8M2rif54.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F9605/36666D6E870911EB823B3356C4F9AE02/aBiEwMdVflJu8rxNHlq8M2rif54.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a9:db:df:e2:fb:7c:c1:cc:69:f6:13:77:11:9a:cd:b7:f6:6d: 29:5a:b8:50:bc:a3:03:18:81:9a:74:c8:55:00:6e:40:27:26: 84:39:b4:c5:4a:1e:6a:89:6c:1b:a6:f2:56:ce:c1:c9:41:59: 22:33:ad:e9:0a:ef:37:e4:48:24:7d:b1:47:40:0e:28:b7:4b: c4:fc:c1:76:2e:45:c7:d3:7a:31:f7:fb:a3:fc:39:6d:a5:07: 51:6d:b3:22:7d:8a:ce:c9:dc:d7:be:6b:28:3c:70:38:d4:d3: 51:a3:f2:f7:98:1f:d2:1f:03:89:1b:93:69:e8:eb:22:8c:c5: 45:4d:c0:b9:67:3d:dd:a0:e3:2f:28:ac:c3:4f:f5:7f:f8:67: a4:45:84:01:12:53:33:df:e2:17:43:95:f0:90:74:09:69:20: 01:fd:ed:5e:f4:87:78:ff:61:d0:35:d4:a5:51:6f:2f:9d:e2: 98:a3:b7:21:9e:54:73:c1:3c:23:e0:37:59:42:3b:6e:7f:50: 9f:8b:0f:08:29:10:b1:42:86:35:fd:82:6c:55:b5:71:08:a0: 71:4f:a6:24:b0:bd:62:66:33:64:31:eb:5d:92:5a:b2:fe:07: 3c:c3:30:63:31:b0:4b:55:51:89:9f:c0:ff:d3:7e:88:69:31: fb:ef:24:d8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBoQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Rjk2MDUxMTAvBgNVBAUTKDY4MTg4NEMwQzc1NTdFNTI2RUYyQkM0RDFFNUFCQzMz NkFFMjdGOUUwHhcNMjUwODEwMjIyOTQyWhcNMjUwODE3MjIyOTQyWjAYMRYwFAYD VQQDEw02ODk5MWQ1Ni1lZjY1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA8nXcJGC85WDpb2ejAp9nJCaraauZQNm/Kwzo/dcsxtKNNlRSAqtcwb04gRDQ /ce3B7qPVy1jA4M50uQIAmae/J/AXATzxgn6KI93x3rU0JKirCol2nJlGrGQT20D C65PAqardfOiRLK3AGH8LJaEm47pmXmwcAu9nUZUL0nxvdhRtQ17LfcRILKAola2 lx2rTv6gWY58zL01D/HflgizYljyCE5Eufb3N/r6VMLhlL8j3gNmhw0s6RxBkuOJ UXS21A78JQYLptX/MdBxZDLhhOgJxnMmRCjazWOlwXERMIalztzAlsnqUDYUYs2u R9wD9YsYWJAnWgN4wF2+faaO/QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKACBrEG qOwDQIkrfJ887PqflZT9MB8GA1UdIwQYMBaAFGgYhMDHVX5SbvK8TR5avDNq4n+e MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGOTYwNS8zNjY2NkQ2RTg3 MDkxMUVCODIzQjMzNTZDNEY5QUUwMi9hQmlFd01kVmZsSnU4cnhOSGxxOE0ycmlm NTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2FCaUV3TWRWZmxKdThyeE5IbHE4TTJyaWY1NC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG OTYwNS8zNjY2NkQ2RTg3MDkxMUVCODIzQjMzNTZDNEY5QUUwMi9hQmlFd01kVmZs SnU4cnhOSGxxOE0ycmlmNTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCp29/i+3zBzGn2E3cRms239m0pWrhQvKMDGIGadMhVAG5AJyaEObTF Sh5qiWwbpvJWzsHJQVkiM63pCu835EgkfbFHQA4ot0vE/MF2LkXH03ox9/uj/Dlt pQdRbbMifYrOydzXvmsoPHA41NNRo/L3mB/SHwOJG5Np6OsijMVFTcC5Zz3doOMv KKzDT/V/+GekRYQBElMz3+IXQ5XwkHQJaSAB/e1e9Id4/2HQNdSlUW8vneKYo7ch nlRzwTwj4DdZQjtuf1Cfiw8IKRCxQoY1/YJsVbVxCKBxT6YksL1iZjNkMetdklqy /gc8wzBjMbBLVVGJn8D/036IaTH77yTY -----END CERTIFICATE-----Generated at Mon Aug 11 04:17:29 2025 by rpki-client