$ rpki-client -vvf rpki.apnic.net/member_repository/A91F9605/36666D6E870911EB823B3356C4F9AE02/aBiEwMdVflJu8rxNHlq8M2rif54.mft File: aBiEwMdVflJu8rxNHlq8M2rif54.mft (raw, json) Hash identifier: 85zGxn0IoLFfiF8W/Vz/Z48qjoeffJZwi+obX1WpOmI= Subject key identifier: 84:D8:D3:7D:86:8E:A7:A0:40:8B:2C:D2:95:3B:B9:44:FF:9E:D8:43 Authority key identifier: 68:18:84:C0:C7:55:7E:52:6E:F2:BC:4D:1E:5A:BC:33:6A:E2:7F:9E Certificate issuer: /CN=A91F9605/serialNumber=681884C0C7557E526EF2BC4D1E5ABC336AE27F9E Certificate serial: 064E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aBiEwMdVflJu8rxNHlq8M2rif54.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F9605/36666D6E870911EB823B3356C4F9AE02/aBiEwMdVflJu8rxNHlq8M2rif54.mft Manifest number: 0647 Signing time: Thu 24 Apr 2025 22:22:17 +0000 Manifest this update: Thu 24 Apr 2025 22:22:17 +0000 Manifest next update: Thu 01 May 2025 22:22:17 +0000 Files and hashes: 1: aBiEwMdVflJu8rxNHlq8M2rif54.crl (hash: sDnPLPelk1utkyGwKUPPJE/n+Me7UZkcv4QkOSWKdV4=) 2: 75AB03A2870B11EB88E44876C4F9AE02.roa (hash: 7qI+njWvbbh+KneeLcZmySdlxOhiGVsKeC65nMgeI7E=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F9605/36666D6E870911EB823B3356C4F9AE02/aBiEwMdVflJu8rxNHlq8M2rif54.crl rsync://rpki.apnic.net/member_repository/A91F9605/36666D6E870911EB823B3356C4F9AE02/aBiEwMdVflJu8rxNHlq8M2rif54.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aBiEwMdVflJu8rxNHlq8M2rif54.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 22:22:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1614 (0x64e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F9605, serialNumber=681884C0C7557E526EF2BC4D1E5ABC336AE27F9E Validity Not Before: Apr 24 22:22:17 2025 GMT Not After : May 1 22:22:17 2025 GMT Subject: CN=680ab999-b504 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:6a:30:96:1c:59:b5:aa:7e:13:73:0f:48:0d: 42:34:a4:8b:7c:7f:46:e0:f7:75:34:1d:9e:00:72: f9:67:99:7b:31:08:11:d8:22:6e:77:dd:50:9c:19: 56:4a:a7:a9:59:6f:86:2c:3d:d8:f7:90:95:25:ad: a2:c2:3a:a2:99:bc:1d:da:47:c2:8c:10:a2:20:57: 71:32:c4:76:e0:52:37:0b:f1:e3:6d:19:f5:03:06: 00:00:2c:d0:c9:ed:6d:c1:2e:8b:c2:46:05:0b:70: 7a:4b:a6:85:da:2f:a6:10:cf:26:ad:fb:11:88:a9: 6a:36:89:cb:4e:f3:04:f2:d1:bd:ea:a8:d4:15:1f: 3a:ac:a0:fb:db:b3:04:f8:63:d7:68:ae:96:02:42: dc:6d:6c:d5:d1:8a:32:2b:b7:35:50:42:a5:9a:ac: e5:f4:9a:d9:63:73:fc:49:41:13:f4:9b:cb:55:1a: 25:88:a2:93:5a:a5:9f:ab:af:98:55:97:95:c2:00: f1:8f:b9:c6:b1:be:37:c2:90:38:84:ea:9f:49:6f: 0a:ab:f5:c8:2c:d5:df:ed:85:d2:0d:6d:ad:3f:84: f5:95:47:b2:71:a4:04:6f:5c:23:be:68:b6:78:c5: 27:00:fc:a6:f8:03:c4:52:b2:fe:57:1a:dd:2e:9f: e6:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:D8:D3:7D:86:8E:A7:A0:40:8B:2C:D2:95:3B:B9:44:FF:9E:D8:43 X509v3 Authority Key Identifier: keyid:68:18:84:C0:C7:55:7E:52:6E:F2:BC:4D:1E:5A:BC:33:6A:E2:7F:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F9605/36666D6E870911EB823B3356C4F9AE02/aBiEwMdVflJu8rxNHlq8M2rif54.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aBiEwMdVflJu8rxNHlq8M2rif54.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F9605/36666D6E870911EB823B3356C4F9AE02/aBiEwMdVflJu8rxNHlq8M2rif54.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a4:e7:23:1a:9f:dd:f9:05:48:6a:f7:1f:c6:f1:80:68:90:3d: f7:31:dd:22:19:9c:7d:c3:01:aa:a2:ab:bc:47:3c:f3:04:0e: ca:15:75:66:27:54:4b:5f:aa:03:a1:11:78:49:f0:a6:8d:d8: 5b:19:66:d0:0d:03:ae:69:18:ed:f7:41:22:87:0d:cd:82:68: 23:c3:4d:53:f2:7d:ef:e4:32:af:7a:ce:4d:59:30:91:a3:b2: 9a:e4:58:b8:8a:5f:0e:65:19:37:66:12:f8:ff:8f:0c:16:09: 19:47:2e:13:1a:ba:3b:92:f7:01:50:03:8d:d1:d3:db:74:e1: 53:c4:77:a5:2c:d2:26:93:14:e8:f5:93:93:5a:a6:03:6e:74: 8a:6a:f4:da:6a:aa:d0:f5:c9:e2:59:2f:93:e8:6e:16:36:6c: 62:aa:48:00:0c:d2:44:78:86:bd:b9:63:12:ab:b7:dc:fd:97: 34:95:5d:69:b3:5e:c8:eb:66:69:b3:be:f9:0d:e9:99:03:82: 8b:91:c6:d5:22:e0:2b:1a:1f:21:6e:7d:1e:b3:0c:b4:24:7b: 44:17:ba:a3:89:7e:4a:8d:9b:f7:83:92:c3:be:0a:82:45:17: 93:2c:27:d8:76:a8:14:d9:32:76:86:7e:07:0d:13:8b:c0:5c: 39:d5:de:4e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBk4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Rjk2MDUxMTAvBgNVBAUTKDY4MTg4NEMwQzc1NTdFNTI2RUYyQkM0RDFFNUFCQzMz NkFFMjdGOUUwHhcNMjUwNDI0MjIyMjE3WhcNMjUwNTAxMjIyMjE3WjAYMRYwFAYD VQQDEw02ODBhYjk5OS1iNTA0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwGowlhxZtap+E3MPSA1CNKSLfH9G4Pd1NB2eAHL5Z5l7MQgR2CJud91QnBlW SqepWW+GLD3Y95CVJa2iwjqimbwd2kfCjBCiIFdxMsR24FI3C/HjbRn1AwYAACzQ ye1twS6LwkYFC3B6S6aF2i+mEM8mrfsRiKlqNonLTvME8tG96qjUFR86rKD727ME +GPXaK6WAkLcbWzV0YoyK7c1UEKlmqzl9JrZY3P8SUET9JvLVRoliKKTWqWfq6+Y VZeVwgDxj7nGsb43wpA4hOqfSW8Kq/XILNXf7YXSDW2tP4T1lUeycaQEb1wjvmi2 eMUnAPym+APEUrL+VxrdLp/mcQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFITY032G jqegQIss0pU7uUT/nthDMB8GA1UdIwQYMBaAFGgYhMDHVX5SbvK8TR5avDNq4n+e MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGOTYwNS8zNjY2NkQ2RTg3 MDkxMUVCODIzQjMzNTZDNEY5QUUwMi9hQmlFd01kVmZsSnU4cnhOSGxxOE0ycmlm NTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2FCaUV3TWRWZmxKdThyeE5IbHE4TTJyaWY1NC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG OTYwNS8zNjY2NkQ2RTg3MDkxMUVCODIzQjMzNTZDNEY5QUUwMi9hQmlFd01kVmZs SnU4cnhOSGxxOE0ycmlmNTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCk5yMan935BUhq9x/G8YBokD33Md0iGZx9wwGqoqu8RzzzBA7KFXVm J1RLX6oDoRF4SfCmjdhbGWbQDQOuaRjt90Eihw3Ngmgjw01T8n3v5DKves5NWTCR o7Ka5Fi4il8OZRk3ZhL4/48MFgkZRy4TGro7kvcBUAON0dPbdOFTxHelLNImkxTo 9ZOTWqYDbnSKavTaaqrQ9cniWS+T6G4WNmxiqkgADNJEeIa9uWMSq7fc/Zc0lV1p s17I62Zps775DemZA4KLkcbVIuArGh8hbn0eswy0JHtEF7qjiX5KjZv3g5LDvgqC RReTLCfYdqgU2TJ2hn4HDROLwFw51d5O -----END CERTIFICATE-----Generated at Sat Apr 26 15:06:58 2025 by rpki-client