$ rpki-client -vvf rpki.apnic.net/member_repository/A91E0AAD/0DE5B40E79E211ECB5013148C4F9AE02/ABc0faPzW3U5Ub30sbB_dh49nr8.mft File: ABc0faPzW3U5Ub30sbB_dh49nr8.mft (raw, json) Hash identifier: UDBETN2SueDkBTbZ4a0tn5t1tXnd7Wqgs/QUPalp0RE= Subject key identifier: 97:3D:C9:E0:4D:D0:F8:12:6F:88:41:D3:BF:26:6E:60:FE:C2:25:FF Authority key identifier: 00:17:34:7D:A3:F3:5B:75:39:51:BD:F4:B1:B0:7F:76:1E:3D:9E:BF Certificate issuer: /CN=A91E0AAD/serialNumber=0017347DA3F35B753951BDF4B1B07F761E3D9EBF Certificate serial: 0440 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ABc0faPzW3U5Ub30sbB_dh49nr8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E0AAD/0DE5B40E79E211ECB5013148C4F9AE02/ABc0faPzW3U5Ub30sbB_dh49nr8.mft Manifest number: 0434 Signing time: Sun 07 Sep 2025 00:42:56 +0000 Manifest this update: Sun 07 Sep 2025 00:42:55 +0000 Manifest next update: Sun 14 Sep 2025 00:42:55 +0000 Files and hashes: 1: ABc0faPzW3U5Ub30sbB_dh49nr8.crl (hash: XYiXShMtQs0uHkgJx8eS4aHK/ZagSHvj5SouznR9erA=) 2: 0BE6F39E79E611EC99DA1B51C4F9AE02.roa (hash: 8N17MFKiZRA58NKBpmx9ZFKXCm0hJsn02fp1o1On+1I=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E0AAD/0DE5B40E79E211ECB5013148C4F9AE02/ABc0faPzW3U5Ub30sbB_dh49nr8.crl rsync://rpki.apnic.net/member_repository/A91E0AAD/0DE5B40E79E211ECB5013148C4F9AE02/ABc0faPzW3U5Ub30sbB_dh49nr8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ABc0faPzW3U5Ub30sbB_dh49nr8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Sep 2025 00:42:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1088 (0x440) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E0AAD, serialNumber=0017347DA3F35B753951BDF4B1B07F761E3D9EBF Validity Not Before: Sep 7 00:42:55 2025 GMT Not After : Sep 14 00:42:55 2025 GMT Subject: CN=68bcd50f-d922 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:02:4a:c9:06:9c:4c:96:93:b0:6f:fc:dd:c7: c3:7e:d1:1d:f8:e2:2b:2f:b3:2c:e6:66:3e:a6:db: a3:84:7e:b5:f2:0c:0a:bc:39:39:5a:eb:96:be:ce: bc:96:a0:a8:c9:1a:87:a4:bb:62:83:18:cd:40:90: 20:a3:40:37:00:9b:b9:77:69:a9:52:6a:3e:89:4a: 89:b7:8d:f7:90:26:cb:81:48:e0:1b:cd:2f:27:68: 65:7b:ec:bf:48:9d:80:55:8f:5d:09:7c:96:7c:12: d2:ca:e0:c7:48:73:a6:66:49:70:14:54:94:3c:96: 9a:49:df:5a:d2:a9:f9:80:22:c3:6a:49:98:c8:c5: ba:e9:ba:f6:04:51:6c:a6:9d:49:e1:68:1c:8d:e3: ef:ef:e8:9a:45:81:bb:df:b1:e9:c7:15:84:e1:b2: b6:93:2e:06:fe:4f:2c:08:01:a3:32:84:78:03:28: ae:32:ed:5f:80:d7:a3:9a:cd:03:c4:de:dc:25:89: 19:cf:9a:4b:c1:2a:8b:cf:58:9a:79:49:dd:3f:84: 44:49:3d:a2:6c:9c:a4:41:48:79:f3:d8:56:63:1e: fd:50:f0:42:e4:ef:e6:76:39:3d:48:49:bf:9d:85: c0:c4:a8:fa:db:a7:29:8b:70:db:ed:7b:c8:3b:12: 10:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:3D:C9:E0:4D:D0:F8:12:6F:88:41:D3:BF:26:6E:60:FE:C2:25:FF X509v3 Authority Key Identifier: keyid:00:17:34:7D:A3:F3:5B:75:39:51:BD:F4:B1:B0:7F:76:1E:3D:9E:BF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E0AAD/0DE5B40E79E211ECB5013148C4F9AE02/ABc0faPzW3U5Ub30sbB_dh49nr8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ABc0faPzW3U5Ub30sbB_dh49nr8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E0AAD/0DE5B40E79E211ECB5013148C4F9AE02/ABc0faPzW3U5Ub30sbB_dh49nr8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4e:ce:a8:d6:2e:d1:29:47:e4:e9:d7:36:59:53:52:34:54:76: 4d:9a:6f:77:9d:74:3d:85:2d:af:58:24:50:66:10:36:de:e3: e1:9a:65:15:6e:71:f1:d2:83:6f:f3:3e:10:94:05:de:8f:58: 70:1a:c1:3a:88:ad:7f:d1:95:a3:52:82:9a:f5:28:36:81:9e: dc:f3:cd:6b:1c:72:dd:38:5e:58:ef:9c:8f:d6:cf:9b:9d:09: ff:c0:e6:1c:ae:64:1a:b8:6c:03:c6:00:88:58:f2:a1:09:20: 08:97:df:3f:11:14:7d:f8:ed:86:cb:c2:34:cd:b3:09:a5:59: 7d:04:51:2a:2a:f2:37:6d:ee:75:7d:08:d7:b2:f7:e9:ec:b3: 42:7f:12:53:c5:19:21:df:99:b2:88:e7:d5:2b:55:a0:58:3e: 99:36:2e:79:ce:dd:b3:93:cb:61:94:5e:a5:45:15:16:96:c3: 30:eb:f8:96:e0:b4:de:1a:9f:81:b9:8d:60:da:d9:50:d1:30: ba:78:60:15:75:b9:13:42:d4:51:78:fc:9a:1a:83:7f:46:55: ef:37:a8:a0:9b:8f:65:1a:f7:39:8b:18:e9:10:95:c2:a3:7a: 32:e0:96:50:4c:34:ff:04:bb:78:6c:00:f8:49:c3:f6:b8:17: f7:32:9f:70 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBEAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTBBQUQxMTAvBgNVBAUTKDAwMTczNDdEQTNGMzVCNzUzOTUxQkRGNEIxQjA3Rjc2 MUUzRDlFQkYwHhcNMjUwOTA3MDA0MjU1WhcNMjUwOTE0MDA0MjU1WjAYMRYwFAYD VQQDEw02OGJjZDUwZi1kOTIyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApAJKyQacTJaTsG/83cfDftEd+OIrL7Ms5mY+ptujhH618gwKvDk5WuuWvs68 lqCoyRqHpLtigxjNQJAgo0A3AJu5d2mpUmo+iUqJt433kCbLgUjgG80vJ2hle+y/ SJ2AVY9dCXyWfBLSyuDHSHOmZklwFFSUPJaaSd9a0qn5gCLDakmYyMW66br2BFFs pp1J4WgcjePv7+iaRYG737HpxxWE4bK2ky4G/k8sCAGjMoR4AyiuMu1fgNejms0D xN7cJYkZz5pLwSqLz1iaeUndP4REST2ibJykQUh589hWYx79UPBC5O/mdjk9SEm/ nYXAxKj626cpi3Db7XvIOxIQ8wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJc9yeBN 0PgSb4hB078mbmD+wiX/MB8GA1UdIwQYMBaAFAAXNH2j81t1OVG99LGwf3YePZ6/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMEFBRC8wREU1QjQwRTc5 RTIxMUVDQjUwMTMxNDhDNEY5QUUwMi9BQmMwZmFQelczVTVVYjMwc2JCX2RoNDlu cjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0FCYzBmYVB6VzNVNVViMzBzYkJfZGg0OW5yOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MEFBRC8wREU1QjQwRTc5RTIxMUVDQjUwMTMxNDhDNEY5QUUwMi9BQmMwZmFQelcz VTVVYjMwc2JCX2RoNDlucjgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBOzqjWLtEpR+Tp1zZZU1I0VHZNmm93nXQ9hS2vWCRQZhA23uPhmmUV bnHx0oNv8z4QlAXej1hwGsE6iK1/0ZWjUoKa9Sg2gZ7c881rHHLdOF5Y75yP1s+b nQn/wOYcrmQauGwDxgCIWPKhCSAIl98/ERR9+O2Gy8I0zbMJpVl9BFEqKvI3be51 fQjXsvfp7LNCfxJTxRkh35myiOfVK1WgWD6ZNi55zt2zk8thlF6lRRUWlsMw6/iW 4LTeGp+BuY1g2tlQ0TC6eGAVdbkTQtRRePyaGoN/RlXvN6igm49lGvc5ixjpEJXC o3oy4JZQTDT/BLt4bAD4ScP2uBf3Mp9w -----END CERTIFICATE-----Generated at Mon Sep 8 14:35:28 2025 by rpki-client