$ rpki-client -vvf rpki.apnic.net/member_repository/A91DACA7/517E6E4C45B211EFA5DF6D19C4F9AE02/Abso_b4VWoZixe5oDP3wyY1OvR0.mft File: Abso_b4VWoZixe5oDP3wyY1OvR0.mft (raw, json) Hash identifier: 7Hg6ljMvJROom35V2rgKUQwtEJW0WV+ztI2bvXMtFnA= Subject key identifier: 44:77:24:3E:0B:B1:80:E7:44:72:26:49:7C:EB:01:DA:65:6D:5D:01 Authority key identifier: 01:BB:28:FD:BE:15:5A:86:62:C5:EE:68:0C:FD:F0:C9:8D:4E:BD:1D Certificate issuer: /CN=A91DACA7/serialNumber=01BB28FDBE155A8662C5EE680CFDF0C98D4EBD1D Certificate serial: D7 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Abso_b4VWoZixe5oDP3wyY1OvR0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DACA7/517E6E4C45B211EFA5DF6D19C4F9AE02/Abso_b4VWoZixe5oDP3wyY1OvR0.mft Manifest number: D5 Signing time: Fri 05 Sep 2025 06:01:25 +0000 Manifest this update: Fri 05 Sep 2025 06:01:24 +0000 Manifest next update: Fri 12 Sep 2025 06:01:24 +0000 Files and hashes: 1: Abso_b4VWoZixe5oDP3wyY1OvR0.crl (hash: SoWBnLj17zZVaFNEzi8315FH0mqDNTPp2BwLsY/oG3k=) 2: ECB0C56845B211EFBCC09A1AC4F9AE02.roa (hash: EGPY/0B+FhNPcxx4yI5SHvTWW9NTcAbNHzvZ84arIm4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DACA7/517E6E4C45B211EFA5DF6D19C4F9AE02/Abso_b4VWoZixe5oDP3wyY1OvR0.crl rsync://rpki.apnic.net/member_repository/A91DACA7/517E6E4C45B211EFA5DF6D19C4F9AE02/Abso_b4VWoZixe5oDP3wyY1OvR0.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Abso_b4VWoZixe5oDP3wyY1OvR0.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Sep 2025 06:01:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 215 (0xd7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DACA7, serialNumber=01BB28FDBE155A8662C5EE680CFDF0C98D4EBD1D Validity Not Before: Sep 5 06:01:24 2025 GMT Not After : Sep 12 06:01:24 2025 GMT Subject: CN=68ba7cb5-bc10 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:18:ee:bd:d6:a9:23:f7:b6:9d:3b:f1:dd:fa: eb:1b:ee:9a:aa:e6:4b:7b:dc:88:a3:20:10:5a:8d: 3b:fa:58:77:12:24:7c:82:eb:29:3c:d8:4f:9a:76: b2:1a:a5:71:f7:cd:a9:d8:34:75:92:3a:2a:97:42: 8e:76:e1:e8:52:cd:57:2b:6d:9b:25:9f:9a:de:e4: 3e:d4:c5:e9:b5:e9:57:91:9c:78:45:31:c3:22:79: b4:98:89:80:e4:d4:05:81:e4:bc:ec:a1:f2:c3:d3: d7:d9:8e:0f:3e:74:ab:cb:7b:44:cb:94:89:ee:df: 50:64:2f:29:19:ac:c9:1e:19:fe:ba:12:c7:09:bf: 11:20:c1:8b:fe:13:58:03:8f:eb:db:20:5c:55:db: 8d:32:4d:c1:47:70:e7:f1:d0:fe:53:a5:8d:22:ee: 54:d5:1e:8b:2b:4b:0c:3a:7e:ed:09:dd:06:3e:5e: 9f:8d:d7:ae:e3:7f:3c:d6:cb:0d:25:dd:66:86:cd: 1e:3a:5c:a1:26:27:76:96:0b:30:f1:83:32:dc:95: bc:e0:0e:02:cc:7e:3a:5c:74:42:6e:33:67:f2:46: 21:81:7c:97:77:a4:38:d1:cc:03:14:d5:a2:68:88: 76:4d:a1:b7:31:d2:ef:c4:17:d5:e2:6e:5d:1c:79: c1:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:77:24:3E:0B:B1:80:E7:44:72:26:49:7C:EB:01:DA:65:6D:5D:01 X509v3 Authority Key Identifier: keyid:01:BB:28:FD:BE:15:5A:86:62:C5:EE:68:0C:FD:F0:C9:8D:4E:BD:1D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DACA7/517E6E4C45B211EFA5DF6D19C4F9AE02/Abso_b4VWoZixe5oDP3wyY1OvR0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Abso_b4VWoZixe5oDP3wyY1OvR0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DACA7/517E6E4C45B211EFA5DF6D19C4F9AE02/Abso_b4VWoZixe5oDP3wyY1OvR0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 28:0b:2d:db:4f:0f:a5:77:0b:e0:db:56:d1:10:ff:da:18:9f: 94:ec:1a:19:6c:82:34:b9:4d:8b:05:95:ff:fb:cb:6a:da:fa: f2:f1:2a:c2:3e:55:7b:c9:ae:e9:c3:c2:a3:2c:92:cf:c6:8f: 6b:d7:ef:34:c6:09:e0:4d:5a:ec:15:d3:34:b5:54:70:fa:96: 94:39:ab:37:7c:05:8d:3d:db:55:7f:84:29:5f:c6:4c:40:5d: 8a:c6:98:09:5b:2b:c5:d1:44:4b:9f:50:71:22:6d:1d:87:83: 84:28:45:5b:20:c2:91:57:71:a3:0c:64:43:c5:55:07:e8:44: 7a:2d:a7:73:38:a5:86:80:6a:96:74:83:1a:82:fe:70:91:3e: 29:61:dc:21:1e:3f:9b:d5:65:81:f6:e6:4a:c5:11:3d:e3:12: 81:52:20:20:cf:3d:e2:9d:1d:3e:a2:b4:20:81:13:e2:98:21: 8b:48:b1:2f:4c:f0:03:d5:5e:af:db:09:dd:c9:cc:93:10:74: 43:c8:2b:0e:83:3d:c7:c7:30:0b:e7:28:de:8d:30:af:6e:1d: 72:62:27:77:dc:e6:10:a3:5b:c2:91:51:dd:13:b2:a3:19:18: 74:97:4f:9e:b1:0c:f8:bb:07:6b:40:8a:88:d6:eb:ae:6c:03: 09:17:f0:32 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICANcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REFDQTcxMTAvBgNVBAUTKDAxQkIyOEZEQkUxNTVBODY2MkM1RUU2ODBDRkRGMEM5 OEQ0RUJEMUQwHhcNMjUwOTA1MDYwMTI0WhcNMjUwOTEyMDYwMTI0WjAYMRYwFAYD VQQDEw02OGJhN2NiNS1iYzEwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2BjuvdapI/e2nTvx3frrG+6aquZLe9yIoyAQWo07+lh3EiR8guspPNhPmnay GqVx982p2DR1kjoql0KOduHoUs1XK22bJZ+a3uQ+1MXptelXkZx4RTHDInm0mImA 5NQFgeS87KHyw9PX2Y4PPnSry3tEy5SJ7t9QZC8pGazJHhn+uhLHCb8RIMGL/hNY A4/r2yBcVduNMk3BR3Dn8dD+U6WNIu5U1R6LK0sMOn7tCd0GPl6fjdeu43881ssN Jd1mhs0eOlyhJid2lgsw8YMy3JW84A4CzH46XHRCbjNn8kYhgXyXd6Q40cwDFNWi aIh2TaG3MdLvxBfV4m5dHHnBmwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFER3JD4L sYDnRHImSXzrAdplbV0BMB8GA1UdIwQYMBaAFAG7KP2+FVqGYsXuaAz98MmNTr0d MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQUNBNy81MTdFNkU0QzQ1 QjIxMUVGQTVERjZEMTlDNEY5QUUwMi9BYnNvX2I0VldvWml4ZTVvRFAzd3lZMU92 UjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0Fic29fYjRWV29aaXhlNW9EUDN3eVkxT3ZSMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE QUNBNy81MTdFNkU0QzQ1QjIxMUVGQTVERjZEMTlDNEY5QUUwMi9BYnNvX2I0Vldv Wml4ZTVvRFAzd3lZMU92UjAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAoCy3bTw+ldwvg21bREP/aGJ+U7BoZbII0uU2LBZX/+8tq2vry8SrC PlV7ya7pw8KjLJLPxo9r1+80xgngTVrsFdM0tVRw+paUOas3fAWNPdtVf4QpX8ZM QF2KxpgJWyvF0URLn1BxIm0dh4OEKEVbIMKRV3GjDGRDxVUH6ER6LadzOKWGgGqW dIMagv5wkT4pYdwhHj+b1WWB9uZKxRE94xKBUiAgzz3inR0+orQggRPimCGLSLEv TPAD1V6v2wndycyTEHRDyCsOgz3HxzAL5yjejTCvbh1yYid33OYQo1vCkVHdE7Kj GRh0l0+esQz4uwdrQIqI1uuubAMJF/Ay -----END CERTIFICATE-----Generated at Sat Sep 6 21:05:10 2025 by rpki-client