$ rpki-client -vvf rpki.apnic.net/member_repository/A91FD292/D1619A646CC511EAA8359953C4F9AE02/-AbfRcmATdTJ0eUsYuDig8D4DFM.mft File: -AbfRcmATdTJ0eUsYuDig8D4DFM.mft (raw, json) Hash identifier: DilHLGwIyVN0rcA9yi+sh6jc1YZgUV/aNPoUTEypELE= Subject key identifier: 92:F3:40:0A:ED:10:D3:4A:D3:1E:D2:9A:14:CE:B2:15:F9:1F:A5:90 Authority key identifier: F8:06:DF:45:C9:80:4D:D4:C9:D1:E5:2C:62:E0:E2:83:C0:F8:0C:53 Certificate issuer: /CN=A91FD292/serialNumber=F806DF45C9804DD4C9D1E52C62E0E283C0F80C53 Certificate serial: 0A40 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-AbfRcmATdTJ0eUsYuDig8D4DFM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FD292/D1619A646CC511EAA8359953C4F9AE02/-AbfRcmATdTJ0eUsYuDig8D4DFM.mft Manifest number: 0A40 Signing time: Fri 18 Jul 2025 19:56:47 +0000 Manifest this update: Fri 18 Jul 2025 19:56:47 +0000 Manifest next update: Fri 25 Jul 2025 19:56:47 +0000 Files and hashes: 1: -AbfRcmATdTJ0eUsYuDig8D4DFM.crl (hash: C4aVqFFZFkbZ/Equehwzo7PrcdnsM/xT59icUDN1Zdw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FD292/D1619A646CC511EAA8359953C4F9AE02/-AbfRcmATdTJ0eUsYuDig8D4DFM.crl rsync://rpki.apnic.net/member_repository/A91FD292/D1619A646CC511EAA8359953C4F9AE02/-AbfRcmATdTJ0eUsYuDig8D4DFM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-AbfRcmATdTJ0eUsYuDig8D4DFM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Jul 2025 19:56:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2624 (0xa40) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FD292, serialNumber=F806DF45C9804DD4C9D1E52C62E0E283C0F80C53 Validity Not Before: Jul 18 19:56:47 2025 GMT Not After : Jul 25 19:56:47 2025 GMT Subject: CN=687aa6ff-9d7e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:20:41:85:d3:84:24:f3:d6:9e:d9:5c:1d:11: e7:79:7d:ed:af:77:29:00:09:4e:fd:ed:fe:32:18: e5:37:74:6c:25:67:22:41:a9:bf:f0:48:b6:ed:77: ee:fb:ca:8c:63:12:a1:4e:4f:15:59:5c:b7:96:a1: b4:86:31:3a:74:59:8e:1e:68:ac:a9:82:72:df:45: 8c:61:c8:06:e8:af:1d:b1:75:ae:58:ad:fc:fd:64: 47:79:60:0e:16:92:35:e2:3d:ca:c7:81:ba:03:5c: 35:a1:bd:ef:56:9a:48:44:a5:33:98:3c:cc:0f:d5: b4:76:3a:83:1e:66:86:29:c9:c4:1d:7b:d9:52:4c: c9:8e:aa:f2:50:b1:a7:be:6f:93:ac:92:18:a5:a0: db:99:3a:6b:e6:21:db:39:b8:00:2c:2e:ce:70:06: ea:dd:2f:f9:4c:df:0b:17:3f:f8:65:16:8f:47:36: 39:1b:53:f0:7e:3a:06:83:dd:fa:43:50:6b:a0:a2: 91:64:38:19:79:9e:28:02:cc:0f:78:91:1b:fc:22: 0f:b0:ec:87:c5:33:65:28:16:01:03:69:fb:f1:44: 06:f0:9f:08:bc:b7:59:b4:bf:55:7b:d6:be:6d:83: 9d:cb:01:13:08:ab:54:57:02:ca:29:36:05:75:7d: de:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:F3:40:0A:ED:10:D3:4A:D3:1E:D2:9A:14:CE:B2:15:F9:1F:A5:90 X509v3 Authority Key Identifier: keyid:F8:06:DF:45:C9:80:4D:D4:C9:D1:E5:2C:62:E0:E2:83:C0:F8:0C:53 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FD292/D1619A646CC511EAA8359953C4F9AE02/-AbfRcmATdTJ0eUsYuDig8D4DFM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-AbfRcmATdTJ0eUsYuDig8D4DFM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FD292/D1619A646CC511EAA8359953C4F9AE02/-AbfRcmATdTJ0eUsYuDig8D4DFM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9e:3d:a5:4f:94:c9:e2:27:07:87:88:c7:66:42:ee:68:c3:0c: ef:a3:19:2e:73:b8:fe:31:d2:13:66:0b:5e:5c:bf:73:33:d6: 11:8c:26:9f:7b:c5:24:65:f6:34:b1:88:5a:4d:0a:7e:c0:57: ca:5c:40:4f:1f:2c:8b:5b:72:01:45:dc:8b:09:0d:5b:ca:bf: ab:03:00:35:3d:8e:6d:5b:a5:d3:fa:32:3c:6d:2d:e7:1a:43: c0:58:b8:0d:35:8e:c5:8a:75:59:ac:1a:66:85:f2:86:f7:86: f5:79:ea:50:4b:21:9a:e0:60:bf:e0:a6:06:d8:f8:d9:4c:7b: e6:81:68:e2:0b:f7:a7:d6:12:26:77:b9:2f:2a:14:ba:d1:91: e6:2d:34:fb:1a:f9:ff:f7:dd:bd:ff:29:be:a6:03:7b:a4:b0: 0c:30:9c:08:ba:90:ae:2a:9c:e7:4a:5f:07:11:b7:79:b0:5f: fa:43:f4:95:83:b9:53:31:fb:b6:92:50:1c:d6:f7:fc:41:dd: 95:13:e3:7f:95:7b:52:cc:80:a8:f8:a6:ef:fd:c5:50:2f:7f: 46:3e:1d:56:a5:17:ea:99:41:7f:af:07:a9:79:e6:0f:94:be: 9b:af:7c:ba:09:6e:fb:82:de:9e:3c:f0:6c:2b:81:50:31:c3: e5:84:37:de -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCkAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkQyOTIxMTAvBgNVBAUTKEY4MDZERjQ1Qzk4MDRERDRDOUQxRTUyQzYyRTBFMjgz QzBGODBDNTMwHhcNMjUwNzE4MTk1NjQ3WhcNMjUwNzI1MTk1NjQ3WjAYMRYwFAYD VQQDEw02ODdhYTZmZi05ZDdlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApCBBhdOEJPPWntlcHRHneX3tr3cpAAlO/e3+MhjlN3RsJWciQam/8Ei27Xfu +8qMYxKhTk8VWVy3lqG0hjE6dFmOHmisqYJy30WMYcgG6K8dsXWuWK38/WRHeWAO FpI14j3Kx4G6A1w1ob3vVppIRKUzmDzMD9W0djqDHmaGKcnEHXvZUkzJjqryULGn vm+TrJIYpaDbmTpr5iHbObgALC7OcAbq3S/5TN8LFz/4ZRaPRzY5G1PwfjoGg936 Q1BroKKRZDgZeZ4oAswPeJEb/CIPsOyHxTNlKBYBA2n78UQG8J8IvLdZtL9Ve9a+ bYOdywETCKtUVwLKKTYFdX3eHwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJLzQArt ENNK0x7SmhTOshX5H6WQMB8GA1UdIwQYMBaAFPgG30XJgE3UydHlLGLg4oPA+AxT MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGRDI5Mi9EMTYxOUE2NDZD QzUxMUVBQTgzNTk5NTNDNEY5QUUwMi8tQWJmUmNtQVRkVEowZVVzWXVEaWc4RDRE Rk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy1BYmZSY21BVGRUSjBlVXNZdURpZzhENERGTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG RDI5Mi9EMTYxOUE2NDZDQzUxMUVBQTgzNTk5NTNDNEY5QUUwMi8tQWJmUmNtQVRk VEowZVVzWXVEaWc4RDRERk0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCePaVPlMniJweHiMdmQu5owwzvoxkuc7j+MdITZgteXL9zM9YRjCaf e8UkZfY0sYhaTQp+wFfKXEBPHyyLW3IBRdyLCQ1byr+rAwA1PY5tW6XT+jI8bS3n GkPAWLgNNY7FinVZrBpmhfKG94b1eepQSyGa4GC/4KYG2PjZTHvmgWjiC/en1hIm d7kvKhS60ZHmLTT7Gvn/9929/ym+pgN7pLAMMJwIupCuKpznSl8HEbd5sF/6Q/SV g7lTMfu2klAc1vf8Qd2VE+N/lXtSzICo+Kbv/cVQL39GPh1WpRfqmUF/rwepeeYP lL6br3y6CW77gt6ePPBsK4FQMcPlhDfe -----END CERTIFICATE-----Generated at Sun Jul 20 06:11:20 2025 by rpki-client