$ rpki-client -vvf rpki.apnic.net/member_repository/A91DACA7/517E6E4C45B211EFA5DF6D19C4F9AE02/Abso_b4VWoZixe5oDP3wyY1OvR0.mft File: Abso_b4VWoZixe5oDP3wyY1OvR0.mft (raw, json) Hash identifier: dtyTahN27RzZlBcZGw9rnPFUh+DmE8M3pf16jTscGyc= Subject key identifier: C9:2E:31:0A:94:9D:63:09:9D:1D:5C:8F:44:6B:B6:B6:B5:5F:6A:25 Authority key identifier: 01:BB:28:FD:BE:15:5A:86:62:C5:EE:68:0C:FD:F0:C9:8D:4E:BD:1D Certificate issuer: /CN=A91DACA7/serialNumber=01BB28FDBE155A8662C5EE680CFDF0C98D4EBD1D Certificate serial: BE Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Abso_b4VWoZixe5oDP3wyY1OvR0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DACA7/517E6E4C45B211EFA5DF6D19C4F9AE02/Abso_b4VWoZixe5oDP3wyY1OvR0.mft Manifest number: BC Signing time: Sat 19 Jul 2025 06:06:53 +0000 Manifest this update: Sat 19 Jul 2025 06:06:53 +0000 Manifest next update: Sat 26 Jul 2025 06:06:53 +0000 Files and hashes: 1: Abso_b4VWoZixe5oDP3wyY1OvR0.crl (hash: lvkYnps0dXmWnIg3X0G/DaDQyE0WcxHsWgu/uylM+R4=) 2: ECB0C56845B211EFBCC09A1AC4F9AE02.roa (hash: EGPY/0B+FhNPcxx4yI5SHvTWW9NTcAbNHzvZ84arIm4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DACA7/517E6E4C45B211EFA5DF6D19C4F9AE02/Abso_b4VWoZixe5oDP3wyY1OvR0.crl rsync://rpki.apnic.net/member_repository/A91DACA7/517E6E4C45B211EFA5DF6D19C4F9AE02/Abso_b4VWoZixe5oDP3wyY1OvR0.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Abso_b4VWoZixe5oDP3wyY1OvR0.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 06:06:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 190 (0xbe) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DACA7, serialNumber=01BB28FDBE155A8662C5EE680CFDF0C98D4EBD1D Validity Not Before: Jul 19 06:06:53 2025 GMT Not After : Jul 26 06:06:53 2025 GMT Subject: CN=687b35fd-edf4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:0d:d8:4d:75:11:0a:9e:77:21:3e:1e:c8:cb: 84:d9:5f:07:fb:d8:24:fc:c5:08:e3:a2:6e:98:26: 12:82:e3:44:8c:1c:ca:22:2f:a4:91:ac:b3:2a:16: 83:88:31:92:95:c4:a0:c9:7b:17:f1:41:b3:06:e9: bb:e6:3e:ea:c6:96:75:f0:de:b9:28:34:7c:88:ec: d3:1a:f2:47:d6:4c:70:e9:94:5f:3f:7a:7f:41:88: 7a:f9:1a:01:33:1a:b3:04:dc:33:18:4c:39:87:6f: ec:b0:01:73:b4:67:f6:80:f2:c7:f3:05:09:02:a0: 8e:71:43:c1:2e:5f:1a:1c:b5:16:e0:61:37:8d:ea: 28:4f:80:02:17:11:a9:0a:af:94:fe:70:71:7a:13: 7b:75:2c:76:ea:44:f0:ed:51:9b:f1:10:95:17:4c: cd:3f:36:b8:f4:f4:69:b2:f4:d9:68:24:3e:44:dc: b9:6c:89:5c:aa:5a:6c:02:36:b6:62:5d:5a:d9:fa: db:c7:f5:64:ce:f3:aa:3d:94:11:32:30:19:02:c4: db:a5:a3:35:ca:f7:f1:13:57:a3:3a:58:60:82:ae: ec:37:4c:e5:87:3f:4f:95:bb:8b:d4:a0:a7:03:bc: cb:69:e3:11:e2:43:61:0f:68:0d:45:0e:04:83:c6: 22:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:2E:31:0A:94:9D:63:09:9D:1D:5C:8F:44:6B:B6:B6:B5:5F:6A:25 X509v3 Authority Key Identifier: keyid:01:BB:28:FD:BE:15:5A:86:62:C5:EE:68:0C:FD:F0:C9:8D:4E:BD:1D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DACA7/517E6E4C45B211EFA5DF6D19C4F9AE02/Abso_b4VWoZixe5oDP3wyY1OvR0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Abso_b4VWoZixe5oDP3wyY1OvR0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DACA7/517E6E4C45B211EFA5DF6D19C4F9AE02/Abso_b4VWoZixe5oDP3wyY1OvR0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4c:a1:a9:6e:c9:d7:69:f5:9f:60:2a:a0:bf:72:5c:d4:98:76: fe:34:0d:b8:b4:20:98:77:61:9e:56:41:57:65:3f:27:0a:a7: c0:80:de:61:c1:9b:3f:05:95:02:30:47:d5:36:e5:d7:94:60: 38:a3:49:13:cd:32:33:c5:af:d3:44:b2:c7:24:4e:85:9c:07: 31:47:00:32:e2:c5:37:19:a5:ad:19:59:b1:a4:63:45:7f:5b: 79:7c:7c:ac:58:09:28:5a:08:9e:0f:1a:f5:c4:67:9d:c8:15: 9c:11:ed:d4:eb:f1:60:78:3a:88:ea:f2:73:55:35:91:b4:f7: 80:95:f8:84:39:f3:6a:0e:d8:c6:87:ab:19:81:5c:a1:58:5c: 90:86:0d:2d:08:0a:3c:75:5f:cd:20:0e:95:a6:d5:02:08:76: 31:1c:d8:31:04:2a:97:07:a3:b2:4f:db:ab:86:03:d4:0b:b2: 17:05:d3:f7:6d:2a:aa:28:00:d9:20:c4:d5:ff:a7:3e:d0:00: b8:7f:d6:f5:e9:0c:15:30:92:86:ac:83:81:fc:1b:92:da:a2: 27:c6:63:86:ef:39:a9:3b:91:ba:bd:9d:89:59:49:ef:24:1d: 76:0b:24:ff:45:38:5e:1d:fe:cc:8d:ca:c9:6f:be:29:a8:ce: 8b:7e:42:d4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAL4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REFDQTcxMTAvBgNVBAUTKDAxQkIyOEZEQkUxNTVBODY2MkM1RUU2ODBDRkRGMEM5 OEQ0RUJEMUQwHhcNMjUwNzE5MDYwNjUzWhcNMjUwNzI2MDYwNjUzWjAYMRYwFAYD VQQDEw02ODdiMzVmZC1lZGY0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArw3YTXURCp53IT4eyMuE2V8H+9gk/MUI46JumCYSguNEjBzKIi+kkayzKhaD iDGSlcSgyXsX8UGzBum75j7qxpZ18N65KDR8iOzTGvJH1kxw6ZRfP3p/QYh6+RoB MxqzBNwzGEw5h2/ssAFztGf2gPLH8wUJAqCOcUPBLl8aHLUW4GE3jeooT4ACFxGp Cq+U/nBxehN7dSx26kTw7VGb8RCVF0zNPza49PRpsvTZaCQ+RNy5bIlcqlpsAja2 Yl1a2frbx/VkzvOqPZQRMjAZAsTbpaM1yvfxE1ejOlhggq7sN0zlhz9PlbuL1KCn A7zLaeMR4kNhD2gNRQ4Eg8Yi8wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMkuMQqU nWMJnR1cj0Rrtra1X2olMB8GA1UdIwQYMBaAFAG7KP2+FVqGYsXuaAz98MmNTr0d MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQUNBNy81MTdFNkU0QzQ1 QjIxMUVGQTVERjZEMTlDNEY5QUUwMi9BYnNvX2I0VldvWml4ZTVvRFAzd3lZMU92 UjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0Fic29fYjRWV29aaXhlNW9EUDN3eVkxT3ZSMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE QUNBNy81MTdFNkU0QzQ1QjIxMUVGQTVERjZEMTlDNEY5QUUwMi9BYnNvX2I0Vldv Wml4ZTVvRFAzd3lZMU92UjAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBMoaluyddp9Z9gKqC/clzUmHb+NA24tCCYd2GeVkFXZT8nCqfAgN5h wZs/BZUCMEfVNuXXlGA4o0kTzTIzxa/TRLLHJE6FnAcxRwAy4sU3GaWtGVmxpGNF f1t5fHysWAkoWgieDxr1xGedyBWcEe3U6/FgeDqI6vJzVTWRtPeAlfiEOfNqDtjG h6sZgVyhWFyQhg0tCAo8dV/NIA6VptUCCHYxHNgxBCqXB6OyT9urhgPUC7IXBdP3 bSqqKADZIMTV/6c+0AC4f9b16QwVMJKGrIOB/BuS2qInxmOG7zmpO5G6vZ2JWUnv JB12CyT/RTheHf7MjcrJb74pqM6LfkLU -----END CERTIFICATE-----Generated at Mon Jul 21 00:27:00 2025 by rpki-client