$ rpki-client -vvf rpki.apnic.net/member_repository/A91D3F8E/6C4089BA216C11EEB28BF24CC4F9AE02/1ABRvI3aYMky7gd2mrhnvvqNQvY.mft File: 1ABRvI3aYMky7gd2mrhnvvqNQvY.mft (raw, json) Hash identifier: lwXP98eB+f61T71R2HKAGzakXVdtjA4wunkGs/47gmM= Subject key identifier: EC:B2:7C:15:2C:6C:F6:CE:B8:19:EB:EC:CA:31:CA:DE:B7:43:21:7F Authority key identifier: D4:00:51:BC:8D:DA:60:C9:32:EE:07:76:9A:B8:67:BE:FA:8D:42:F6 Certificate issuer: /CN=A91D3F8E/serialNumber=D40051BC8DDA60C932EE07769AB867BEFA8D42F6 Certificate serial: 01DC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1ABRvI3aYMky7gd2mrhnvvqNQvY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D3F8E/6C4089BA216C11EEB28BF24CC4F9AE02/1ABRvI3aYMky7gd2mrhnvvqNQvY.mft Manifest number: 01BB Signing time: Tue 09 Sep 2025 03:28:29 +0000 Manifest this update: Tue 09 Sep 2025 03:28:28 +0000 Manifest next update: Tue 16 Sep 2025 03:28:28 +0000 Files and hashes: 1: 1ABRvI3aYMky7gd2mrhnvvqNQvY.crl (hash: 2Ha37JGyjFbgON8F+eHZbJG3kiQ7xCOilbybaIESAh8=) 2: F8B64B2A97BB11EF9D4C9647C4F9AE02.roa (hash: pyGqakx6aToXl1NPvkP6t5S+uv8P5F7PIid49DfaOVg=) 3: C0E3BC02B8B611EFBD4C6F4AC4F9AE02.roa (hash: iK6flRTT/R1NX18TACntkfKJoThokFSeTRkG+bdqrmA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D3F8E/6C4089BA216C11EEB28BF24CC4F9AE02/1ABRvI3aYMky7gd2mrhnvvqNQvY.crl rsync://rpki.apnic.net/member_repository/A91D3F8E/6C4089BA216C11EEB28BF24CC4F9AE02/1ABRvI3aYMky7gd2mrhnvvqNQvY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1ABRvI3aYMky7gd2mrhnvvqNQvY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 16 Sep 2025 03:28:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 476 (0x1dc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D3F8E, serialNumber=D40051BC8DDA60C932EE07769AB867BEFA8D42F6 Validity Not Before: Sep 9 03:28:28 2025 GMT Not After : Sep 16 03:28:28 2025 GMT Subject: CN=68bf9edc-06b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:94:fc:13:09:40:87:7e:66:22:27:f6:4d:53: 80:af:da:fc:b4:e8:06:a3:5d:d4:1e:b5:20:a9:e3: a3:59:22:5c:78:54:f7:88:f8:49:4d:76:5d:66:6b: a9:cf:f2:f0:12:22:bf:9b:69:5a:95:f5:8b:43:58: e3:f1:42:76:7e:d1:49:47:10:ae:6b:6f:c5:82:53: ec:6a:83:ea:51:31:e6:7e:c0:fc:aa:5a:6a:91:b0: ed:75:26:ab:66:22:7c:58:d3:c5:5c:50:4b:dd:60: 6a:04:2c:05:f6:03:2f:8a:74:76:91:4c:70:34:dc: 40:65:13:64:83:ee:7e:02:5a:bf:d2:9a:13:d2:dd: 58:03:9c:1a:9d:b4:f0:14:24:8d:b3:d4:3b:8c:50: 9c:39:20:4d:62:c1:c5:2b:3c:6d:28:ed:f5:35:fb: 7a:3e:c1:fb:ea:e7:d3:3b:fc:36:d2:97:9b:48:b9: fa:7a:a5:6a:08:13:1c:cc:16:65:87:de:c4:9c:58: f3:eb:18:f5:8d:5b:6d:da:7c:f6:e7:bc:e6:38:83: b7:69:94:b4:9e:01:cd:6e:9c:29:64:e2:52:68:6c: 78:36:d7:0d:76:67:6d:21:7f:b5:54:f5:63:1e:d4: e3:58:ea:98:1d:93:67:33:b1:35:c1:36:74:f0:01: 78:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:B2:7C:15:2C:6C:F6:CE:B8:19:EB:EC:CA:31:CA:DE:B7:43:21:7F X509v3 Authority Key Identifier: keyid:D4:00:51:BC:8D:DA:60:C9:32:EE:07:76:9A:B8:67:BE:FA:8D:42:F6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D3F8E/6C4089BA216C11EEB28BF24CC4F9AE02/1ABRvI3aYMky7gd2mrhnvvqNQvY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1ABRvI3aYMky7gd2mrhnvvqNQvY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D3F8E/6C4089BA216C11EEB28BF24CC4F9AE02/1ABRvI3aYMky7gd2mrhnvvqNQvY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 63:a0:75:2d:c5:2d:8f:45:a7:40:8f:12:cf:86:55:2b:7d:f2: 94:31:a5:50:4d:4a:1b:bb:59:e7:e3:57:35:65:76:05:4d:ae: e9:23:5e:88:d5:cb:f0:33:af:15:51:bc:f4:72:de:c8:92:9a: 96:30:a9:80:fc:1a:df:f4:8a:1a:40:94:eb:01:13:30:86:f7: 47:21:e4:de:aa:cf:f3:7d:13:c7:da:85:66:b5:62:75:61:f1: 27:05:77:49:b1:d5:52:b6:de:9e:1a:bf:64:bb:49:7d:0a:33: 81:7b:c6:d7:4b:dc:e2:bd:fd:26:7b:04:19:a7:44:b3:a6:b1: ed:59:27:f7:98:82:c2:db:2a:06:62:09:3b:f8:c6:9e:3d:8c: 2f:9c:0b:89:53:c5:ff:80:31:08:27:d7:6b:46:c8:c7:28:91: 9c:b1:e1:98:b7:68:c7:ee:27:d8:49:6f:89:5d:aa:f3:84:a2: 7b:fb:2b:88:90:e0:9b:15:98:65:62:74:4e:e8:67:b4:4e:69: d4:a5:d8:7f:f0:f5:4b:65:4f:0d:5b:7b:85:82:20:58:8e:9e: 88:f1:e1:e3:64:42:fe:46:e6:53:e1:e2:8b:b7:78:1f:4c:c8: d8:00:4a:a9:6e:08:60:1f:fa:e9:20:07:30:1a:9e:3c:a0:72: 78:5f:ba:f3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAdwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDNGOEUxMTAvBgNVBAUTKEQ0MDA1MUJDOEREQTYwQzkzMkVFMDc3NjlBQjg2N0JF RkE4RDQyRjYwHhcNMjUwOTA5MDMyODI4WhcNMjUwOTE2MDMyODI4WjAYMRYwFAYD VQQDEw02OGJmOWVkYy0wNmI4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwpT8EwlAh35mIif2TVOAr9r8tOgGo13UHrUgqeOjWSJceFT3iPhJTXZdZmup z/LwEiK/m2lalfWLQ1jj8UJ2ftFJRxCua2/FglPsaoPqUTHmfsD8qlpqkbDtdSar ZiJ8WNPFXFBL3WBqBCwF9gMvinR2kUxwNNxAZRNkg+5+Alq/0poT0t1YA5wanbTw FCSNs9Q7jFCcOSBNYsHFKzxtKO31Nft6PsH76ufTO/w20pebSLn6eqVqCBMczBZl h97EnFjz6xj1jVtt2nz257zmOIO3aZS0ngHNbpwpZOJSaGx4NtcNdmdtIX+1VPVj HtTjWOqYHZNnM7E1wTZ08AF49QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOyyfBUs bPbOuBnr7Moxyt63QyF/MB8GA1UdIwQYMBaAFNQAUbyN2mDJMu4Hdpq4Z776jUL2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEM0Y4RS82QzQwODlCQTIx NkMxMUVFQjI4QkYyNENDNEY5QUUwMi8xQUJSdkkzYVlNa3k3Z2QybXJobnZ2cU5R dlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzFBQlJ2STNhWU1reTdnZDJtcmhudnZxTlF2WS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE M0Y4RS82QzQwODlCQTIxNkMxMUVFQjI4QkYyNENDNEY5QUUwMi8xQUJSdkkzYVlN a3k3Z2QybXJobnZ2cU5RdlkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBjoHUtxS2PRadAjxLPhlUrffKUMaVQTUobu1nn41c1ZXYFTa7pI16I 1cvwM68VUbz0ct7IkpqWMKmA/Brf9IoaQJTrARMwhvdHIeTeqs/zfRPH2oVmtWJ1 YfEnBXdJsdVStt6eGr9ku0l9CjOBe8bXS9zivf0mewQZp0SzprHtWSf3mILC2yoG Ygk7+MaePYwvnAuJU8X/gDEIJ9drRsjHKJGcseGYt2jH7ifYSW+JXarzhKJ7+yuI kOCbFZhlYnRO6Ge0TmnUpdh/8PVLZU8NW3uFgiBYjp6I8eHjZEL+RuZT4eKLt3gf TMjYAEqpbghgH/rpIAcwGp48oHJ4X7rz -----END CERTIFICATE-----Generated at Wed Sep 10 13:35:13 2025 by rpki-client