$ rpki-client -vvf rpki.apnic.net/member_repository/A91CC564/4F29D0C4C40F11EA9C15B470C4F9AE02/ABXboDjLzLFS7RcROqCo1ddIjSE.mft File: ABXboDjLzLFS7RcROqCo1ddIjSE.mft (raw, json) Hash identifier: OyiLBsEjx1fFQ3TjLR9eXBRxGdJh837xnBeq91bDmvs= Subject key identifier: 96:CB:CD:9C:E3:0F:E5:FC:F7:86:B3:E3:40:B4:AD:C2:4D:EE:66:77 Authority key identifier: 00:15:DB:A0:38:CB:CC:B1:52:ED:17:11:3A:A0:A8:D5:D7:48:8D:21 Certificate issuer: /CN=A91CC564/serialNumber=0015DBA038CBCCB152ED17113AA0A8D5D7488D21 Certificate serial: 0896 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ABXboDjLzLFS7RcROqCo1ddIjSE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CC564/4F29D0C4C40F11EA9C15B470C4F9AE02/ABXboDjLzLFS7RcROqCo1ddIjSE.mft Manifest number: 088F Signing time: Thu 24 Jul 2025 21:00:48 +0000 Manifest this update: Thu 24 Jul 2025 21:00:47 +0000 Manifest next update: Thu 31 Jul 2025 21:00:47 +0000 Files and hashes: 1: ABXboDjLzLFS7RcROqCo1ddIjSE.crl (hash: NJyNsTKdeskqdmfw3nLpRTtjNYEFVorM9npaxbKUDvI=) 2: 74CCA13ADBE811EA8D063B7DC4F9AE02.roa (hash: Zy35shBaA7kL0uiX8MFYVjG3k67WMwjlOa39yPU2npo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CC564/4F29D0C4C40F11EA9C15B470C4F9AE02/ABXboDjLzLFS7RcROqCo1ddIjSE.crl rsync://rpki.apnic.net/member_repository/A91CC564/4F29D0C4C40F11EA9C15B470C4F9AE02/ABXboDjLzLFS7RcROqCo1ddIjSE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ABXboDjLzLFS7RcROqCo1ddIjSE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 31 Jul 2025 21:00:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2198 (0x896) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CC564, serialNumber=0015DBA038CBCCB152ED17113AA0A8D5D7488D21 Validity Not Before: Jul 24 21:00:47 2025 GMT Not After : Jul 31 21:00:47 2025 GMT Subject: CN=68829eff-e0ca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:f7:c0:45:55:e5:a0:c1:b3:d4:a9:2b:ed:ff: 79:62:43:a5:21:9d:78:77:78:a6:a2:7f:0a:9f:18: ec:6a:93:dc:ad:9b:f6:e9:f4:9f:d3:70:c7:60:29: e1:0e:6c:67:29:6c:fe:98:96:c6:39:fa:c2:fc:d2: 22:2d:23:e0:2b:03:4e:a5:5a:ec:35:04:51:26:cb: cd:fb:2e:24:fc:fe:e5:04:0d:28:68:7c:80:f3:67: 7d:7b:74:4c:45:ed:21:ea:d4:40:af:99:0a:df:d6: a2:9d:0c:8b:76:6c:57:0b:02:8f:3c:e9:04:96:01: 5d:1d:ef:07:4a:ba:f7:3c:94:2f:b0:b7:44:a0:33: 0a:13:54:e5:88:c7:a5:59:a5:6b:b6:98:5b:24:1b: 9c:b5:58:66:1f:48:4a:f7:cd:8c:2d:43:45:36:98: 18:ef:8d:83:a3:c5:50:18:a0:7e:79:f1:52:3e:bf: 12:90:fd:c7:63:0d:83:e7:c4:89:4b:9f:7c:56:bc: 0c:ec:04:33:06:f1:1b:4f:6a:b8:73:34:ed:8e:7d: fc:bb:a7:9a:0a:51:91:79:c2:93:de:da:b9:9a:ab: fe:1b:49:0c:bd:46:b2:81:89:1d:24:3d:30:a9:67: 4c:39:3c:90:95:f4:94:48:1c:8f:8e:02:45:86:4d: cf:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:CB:CD:9C:E3:0F:E5:FC:F7:86:B3:E3:40:B4:AD:C2:4D:EE:66:77 X509v3 Authority Key Identifier: keyid:00:15:DB:A0:38:CB:CC:B1:52:ED:17:11:3A:A0:A8:D5:D7:48:8D:21 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CC564/4F29D0C4C40F11EA9C15B470C4F9AE02/ABXboDjLzLFS7RcROqCo1ddIjSE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ABXboDjLzLFS7RcROqCo1ddIjSE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CC564/4F29D0C4C40F11EA9C15B470C4F9AE02/ABXboDjLzLFS7RcROqCo1ddIjSE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c4:c8:25:65:a5:dd:1d:85:b8:35:15:b1:bf:9a:70:c7:09:0d: e3:ad:d9:5e:80:c8:83:97:68:f8:1a:ce:36:d6:23:89:9a:da: 67:12:f9:f8:ae:33:79:df:9c:82:a1:bd:4b:e8:8a:95:ff:c5: b2:4f:09:a2:92:3b:af:1f:25:84:08:24:86:8b:a4:dd:75:ff: cf:fe:e8:92:66:45:90:fd:52:1d:58:40:61:11:54:d4:7f:d6: 62:70:48:b0:c4:9f:61:a7:d4:a9:4b:18:82:13:87:6a:a7:4e: b6:62:79:6d:3f:12:0a:c0:6c:9e:2e:d2:b0:c8:51:a1:7d:a6: c6:9b:f1:e3:fa:f9:2f:f8:9b:0b:20:e6:26:8d:36:38:14:64: 1d:73:22:2c:1b:bf:80:4c:03:68:d0:4d:bc:3b:d1:13:af:c4: b8:c8:79:c6:e5:d1:c0:f1:78:44:46:e2:98:25:66:20:ee:db: 27:bb:ab:da:2d:2e:ae:41:29:82:b1:35:d0:e6:57:28:66:fa: 7f:39:de:eb:24:3d:9c:99:d3:4c:87:47:3a:9d:39:a6:70:5d: e6:ce:a5:1e:8d:e4:7c:45:ce:27:32:60:b4:1d:d8:53:47:51: 04:c7:a0:b5:4e:2c:35:a3:0a:e2:5b:18:0f:0f:29:d8:cb:79: 09:2b:2b:ea -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCJYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0M1NjQxMTAvBgNVBAUTKDAwMTVEQkEwMzhDQkNDQjE1MkVEMTcxMTNBQTBBOEQ1 RDc0ODhEMjEwHhcNMjUwNzI0MjEwMDQ3WhcNMjUwNzMxMjEwMDQ3WjAYMRYwFAYD VQQDEw02ODgyOWVmZi1lMGNhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnvfARVXloMGz1Kkr7f95YkOlIZ14d3imon8KnxjsapPcrZv26fSf03DHYCnh DmxnKWz+mJbGOfrC/NIiLSPgKwNOpVrsNQRRJsvN+y4k/P7lBA0oaHyA82d9e3RM Re0h6tRAr5kK39ainQyLdmxXCwKPPOkElgFdHe8HSrr3PJQvsLdEoDMKE1TliMel WaVrtphbJBuctVhmH0hK982MLUNFNpgY742Do8VQGKB+efFSPr8SkP3HYw2D58SJ S598VrwM7AQzBvEbT2q4czTtjn38u6eaClGRecKT3tq5mqv+G0kMvUaygYkdJD0w qWdMOTyQlfSUSByPjgJFhk3P7QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJbLzZzj D+X894az40C0rcJN7mZ3MB8GA1UdIwQYMBaAFAAV26A4y8yxUu0XETqgqNXXSI0h MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQzU2NC80RjI5RDBDNEM0 MEYxMUVBOUMxNUI0NzBDNEY5QUUwMi9BQlhib0RqTHpMRlM3UmNST3FDbzFkZElq U0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0FCWGJvRGpMekxGUzdSY1JPcUNvMWRkSWpTRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD QzU2NC80RjI5RDBDNEM0MEYxMUVBOUMxNUI0NzBDNEY5QUUwMi9BQlhib0RqTHpM RlM3UmNST3FDbzFkZElqU0UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDEyCVlpd0dhbg1FbG/mnDHCQ3jrdlegMiDl2j4Gs421iOJmtpnEvn4 rjN535yCob1L6IqV/8WyTwmikjuvHyWECCSGi6Tddf/P/uiSZkWQ/VIdWEBhEVTU f9ZicEiwxJ9hp9SpSxiCE4dqp062YnltPxIKwGyeLtKwyFGhfabGm/Hj+vkv+JsL IOYmjTY4FGQdcyIsG7+ATANo0E28O9ETr8S4yHnG5dHA8XhERuKYJWYg7tsnu6va LS6uQSmCsTXQ5lcoZvp/Od7rJD2cmdNMh0c6nTmmcF3mzqUejeR8Rc4nMmC0HdhT R1EEx6C1Tiw1owriWxgPDynYy3kJKyvq -----END CERTIFICATE-----Generated at Fri Jul 25 15:39:15 2025 by rpki-client