$ rpki-client -vvf rpki.apnic.net/member_repository/A91CC564/4F29D0C4C40F11EA9C15B470C4F9AE02/ABXboDjLzLFS7RcROqCo1ddIjSE.mft File: ABXboDjLzLFS7RcROqCo1ddIjSE.mft (raw, json) Hash identifier: 9tXB5E1EAaqjvg8WlUut4RrCFaPs4cbTNZUR3pOrOPs= Subject key identifier: CD:DD:6E:65:0C:7A:69:74:7B:46:39:AC:2B:5C:21:B7:DA:5A:2E:1A Authority key identifier: 00:15:DB:A0:38:CB:CC:B1:52:ED:17:11:3A:A0:A8:D5:D7:48:8D:21 Certificate issuer: /CN=A91CC564/serialNumber=0015DBA038CBCCB152ED17113AA0A8D5D7488D21 Certificate serial: 08B2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ABXboDjLzLFS7RcROqCo1ddIjSE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CC564/4F29D0C4C40F11EA9C15B470C4F9AE02/ABXboDjLzLFS7RcROqCo1ddIjSE.mft Manifest number: 08AB Signing time: Tue 16 Sep 2025 20:45:08 +0000 Manifest this update: Tue 16 Sep 2025 20:45:08 +0000 Manifest next update: Tue 23 Sep 2025 20:45:08 +0000 Files and hashes: 1: ABXboDjLzLFS7RcROqCo1ddIjSE.crl (hash: hL22tWwKNc4PHAsnKKLXZ72ZbnETAjkT7Q+ST1x2ksM=) 2: 74CCA13ADBE811EA8D063B7DC4F9AE02.roa (hash: Zy35shBaA7kL0uiX8MFYVjG3k67WMwjlOa39yPU2npo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CC564/4F29D0C4C40F11EA9C15B470C4F9AE02/ABXboDjLzLFS7RcROqCo1ddIjSE.crl rsync://rpki.apnic.net/member_repository/A91CC564/4F29D0C4C40F11EA9C15B470C4F9AE02/ABXboDjLzLFS7RcROqCo1ddIjSE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ABXboDjLzLFS7RcROqCo1ddIjSE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 23 Sep 2025 20:45:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2226 (0x8b2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CC564, serialNumber=0015DBA038CBCCB152ED17113AA0A8D5D7488D21 Validity Not Before: Sep 16 20:45:08 2025 GMT Not After : Sep 23 20:45:08 2025 GMT Subject: CN=68c9cc54-f04e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:41:61:0f:5a:3e:77:36:9a:ad:cb:f0:7a:bc: 1a:ad:9e:44:9f:82:a4:c1:43:5f:01:b2:b4:17:96: c5:bb:27:36:3c:51:9e:a9:e9:89:ca:08:50:1a:a6: 38:8a:61:2e:03:57:bc:dd:d0:e1:8f:fb:4b:2c:72: 48:83:86:32:b8:e5:31:12:48:2f:c3:1c:34:1b:8e: ae:b6:d4:43:e1:ae:78:23:9d:54:dc:62:70:1e:2c: a8:79:81:2f:88:0d:f9:a4:93:f9:90:69:5f:38:3b: a2:ad:14:67:ca:fd:a7:45:30:2b:d7:8d:cc:31:67: 5d:42:5c:8b:3b:36:14:54:e6:11:73:39:4a:f6:d4: 4d:b3:8c:ec:7e:a0:fc:23:65:1e:b2:ce:6b:37:1d: c5:cc:d8:4d:d7:55:ef:60:4d:3b:64:19:3e:08:77: d4:ac:72:43:a8:88:b5:18:bf:a5:09:51:ed:4f:00: bf:97:26:6b:4e:90:cc:41:ae:69:a0:70:8e:e9:68: 50:91:30:3c:b3:25:9c:c6:98:7d:aa:26:5f:2b:d0: f7:2b:7b:74:49:f8:4e:de:3f:bc:96:c7:03:09:f9: bb:fb:12:a5:d5:f1:b5:a0:b0:5d:56:65:cb:bf:ad: d6:d0:12:ba:7f:97:fb:39:43:1d:6e:1e:30:ba:81: 10:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:DD:6E:65:0C:7A:69:74:7B:46:39:AC:2B:5C:21:B7:DA:5A:2E:1A X509v3 Authority Key Identifier: keyid:00:15:DB:A0:38:CB:CC:B1:52:ED:17:11:3A:A0:A8:D5:D7:48:8D:21 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CC564/4F29D0C4C40F11EA9C15B470C4F9AE02/ABXboDjLzLFS7RcROqCo1ddIjSE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ABXboDjLzLFS7RcROqCo1ddIjSE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CC564/4F29D0C4C40F11EA9C15B470C4F9AE02/ABXboDjLzLFS7RcROqCo1ddIjSE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ad:a8:ca:ab:79:06:b4:9b:45:e2:ca:3d:65:34:a5:dd:45:f0: d0:f1:c8:a4:94:e9:ff:2c:6d:4e:da:45:1a:e7:1f:64:40:d8: 91:9a:e2:49:87:1d:cb:8d:4b:9c:f2:9e:8a:fb:6f:bd:7d:10: 73:f8:c0:24:5a:e7:35:bb:7a:19:a9:8c:10:d0:e8:16:8f:ac: e8:8e:3d:31:a8:8c:b1:ac:cf:53:c3:73:ea:0c:8f:12:57:9a: ea:89:64:f2:73:ad:38:39:86:9f:a0:46:b8:92:b6:7d:f5:95: a3:47:4a:ee:d6:a2:cc:ff:4d:67:07:e8:24:12:93:f1:bf:c4: 26:da:05:47:3e:75:11:a5:c5:f9:51:75:08:1e:8d:33:db:6c: 04:c0:a2:df:b1:9d:8c:b4:a7:db:2b:63:b2:f9:c4:c4:d9:48: 2e:5d:b9:87:05:7d:e9:2f:90:27:7e:9d:e3:28:ce:52:59:47: 82:48:fa:84:08:5b:61:80:42:6d:52:62:d6:a2:61:16:dd:50: 4f:51:88:51:97:1f:b4:47:7b:3d:f3:05:91:de:bf:35:dd:8a: 70:b9:a4:d6:d3:dc:ad:43:67:ef:37:bd:4c:62:4e:79:08:c4: 36:83:71:4a:f6:f2:45:69:91:c0:72:25:77:b8:b0:56:d9:ec: 54:3b:bd:91 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCLIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0M1NjQxMTAvBgNVBAUTKDAwMTVEQkEwMzhDQkNDQjE1MkVEMTcxMTNBQTBBOEQ1 RDc0ODhEMjEwHhcNMjUwOTE2MjA0NTA4WhcNMjUwOTIzMjA0NTA4WjAYMRYwFAYD VQQDEw02OGM5Y2M1NC1mMDRlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4EFhD1o+dzaarcvwerwarZ5En4KkwUNfAbK0F5bFuyc2PFGeqemJyghQGqY4 imEuA1e83dDhj/tLLHJIg4YyuOUxEkgvwxw0G46uttRD4a54I51U3GJwHiyoeYEv iA35pJP5kGlfODuirRRnyv2nRTAr143MMWddQlyLOzYUVOYRczlK9tRNs4zsfqD8 I2Uess5rNx3FzNhN11XvYE07ZBk+CHfUrHJDqIi1GL+lCVHtTwC/lyZrTpDMQa5p oHCO6WhQkTA8syWcxph9qiZfK9D3K3t0SfhO3j+8lscDCfm7+xKl1fG1oLBdVmXL v63W0BK6f5f7OUMdbh4wuoEQjwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFM3dbmUM eml0e0Y5rCtcIbfaWi4aMB8GA1UdIwQYMBaAFAAV26A4y8yxUu0XETqgqNXXSI0h MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQzU2NC80RjI5RDBDNEM0 MEYxMUVBOUMxNUI0NzBDNEY5QUUwMi9BQlhib0RqTHpMRlM3UmNST3FDbzFkZElq U0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0FCWGJvRGpMekxGUzdSY1JPcUNvMWRkSWpTRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD QzU2NC80RjI5RDBDNEM0MEYxMUVBOUMxNUI0NzBDNEY5QUUwMi9BQlhib0RqTHpM RlM3UmNST3FDbzFkZElqU0UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCtqMqreQa0m0Xiyj1lNKXdRfDQ8ciklOn/LG1O2kUa5x9kQNiRmuJJ hx3LjUuc8p6K+2+9fRBz+MAkWuc1u3oZqYwQ0OgWj6zojj0xqIyxrM9Tw3PqDI8S V5rqiWTyc604OYafoEa4krZ99ZWjR0ru1qLM/01nB+gkEpPxv8Qm2gVHPnURpcX5 UXUIHo0z22wEwKLfsZ2MtKfbK2Oy+cTE2UguXbmHBX3pL5Anfp3jKM5SWUeCSPqE CFthgEJtUmLWomEW3VBPUYhRlx+0R3s98wWR3r813YpwuaTW09ytQ2fvN71MYk55 CMQ2g3FK9vJFaZHAciV3uLBW2exUO72R -----END CERTIFICATE-----Generated at Thu Sep 18 19:10:27 2025 by rpki-client