$ rpki-client -vvf rpki.apnic.net/member_repository/A91FD292/D1619A646CC511EAA8359953C4F9AE02/-AbfRcmATdTJ0eUsYuDig8D4DFM.mft File: -AbfRcmATdTJ0eUsYuDig8D4DFM.mft (raw, json) Hash identifier: N852vOGG4AQowel2UJMasNfys9BpA2MxW7ArEWthlRE= Subject key identifier: 18:03:0E:88:BF:0D:6E:67:3A:2A:F6:4B:4C:6B:74:FA:A4:57:61:87 Authority key identifier: F8:06:DF:45:C9:80:4D:D4:C9:D1:E5:2C:62:E0:E2:83:C0:F8:0C:53 Certificate issuer: /CN=A91FD292/serialNumber=F806DF45C9804DD4C9D1E52C62E0E283C0F80C53 Certificate serial: 0A77 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-AbfRcmATdTJ0eUsYuDig8D4DFM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FD292/D1619A646CC511EAA8359953C4F9AE02/-AbfRcmATdTJ0eUsYuDig8D4DFM.mft Manifest number: 0A77 Signing time: Sun 02 Nov 2025 19:33:59 +0000 Manifest this update: Sun 02 Nov 2025 19:33:59 +0000 Manifest next update: Sun 09 Nov 2025 19:33:59 +0000 Files and hashes: 1: -AbfRcmATdTJ0eUsYuDig8D4DFM.crl (hash: qEBWjuqOXZe9ghK36I5mR5Y5Z+QuhDd0DvvLrTh/Ak4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FD292/D1619A646CC511EAA8359953C4F9AE02/-AbfRcmATdTJ0eUsYuDig8D4DFM.crl rsync://rpki.apnic.net/member_repository/A91FD292/D1619A646CC511EAA8359953C4F9AE02/-AbfRcmATdTJ0eUsYuDig8D4DFM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-AbfRcmATdTJ0eUsYuDig8D4DFM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 19:33:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2679 (0xa77) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FD292, serialNumber=F806DF45C9804DD4C9D1E52C62E0E283C0F80C53 Validity Not Before: Nov 2 19:33:59 2025 GMT Not After : Nov 9 19:33:59 2025 GMT Subject: CN=6907b227-080a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:dc:1f:73:2b:a6:fc:4a:6b:34:5c:11:24:0b: 6d:73:f7:a1:76:f2:ec:92:f8:00:27:be:0c:c0:39: f5:ba:61:83:cd:3f:36:97:5c:0c:3d:b6:ce:8a:ad: 85:0b:2a:ad:80:0d:5c:bc:ef:78:2d:21:2f:f8:f7: 19:0b:99:b5:b5:69:c4:48:d2:07:b5:f7:d6:06:10: bb:e3:47:ef:82:99:ec:ce:a0:85:37:e1:14:5e:7d: 4d:a9:15:e4:8e:eb:4e:11:c6:35:04:c2:0b:78:5a: 7e:e5:3a:44:dd:d0:b0:e3:33:66:54:71:ff:82:fa: c6:5f:39:1b:c3:b9:2a:47:f6:1c:ff:36:b9:28:f0: cd:15:8f:e1:06:cf:ca:fd:dc:8a:d5:35:6f:f9:c4: 47:60:7b:3c:9f:0d:75:0a:26:73:20:2e:66:8c:af: d5:52:08:f6:c5:09:bd:a9:a8:73:01:02:7d:74:62: 87:fe:88:89:cc:d3:0f:2a:6a:b5:99:d1:1e:76:e8: 02:7e:6b:2a:55:7f:e4:da:d2:59:9f:fb:20:9a:fc: 41:03:ad:48:f0:6f:bf:da:22:c2:75:fd:1f:c4:dc: 8e:6c:49:9b:50:23:fd:46:60:3c:34:33:55:d0:65: 3f:7c:8a:12:62:4d:27:00:95:92:5d:8a:ea:09:3f: 2e:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:03:0E:88:BF:0D:6E:67:3A:2A:F6:4B:4C:6B:74:FA:A4:57:61:87 X509v3 Authority Key Identifier: keyid:F8:06:DF:45:C9:80:4D:D4:C9:D1:E5:2C:62:E0:E2:83:C0:F8:0C:53 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FD292/D1619A646CC511EAA8359953C4F9AE02/-AbfRcmATdTJ0eUsYuDig8D4DFM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-AbfRcmATdTJ0eUsYuDig8D4DFM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FD292/D1619A646CC511EAA8359953C4F9AE02/-AbfRcmATdTJ0eUsYuDig8D4DFM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 31:41:d4:25:ab:5e:4e:0c:e6:99:78:d9:d4:d2:0f:23:51:93: bc:a1:51:14:ee:1b:f6:5a:b9:87:62:a1:ad:df:7b:fb:d7:42: ed:c7:6f:85:c2:53:54:4b:42:ce:02:72:0e:41:ab:0a:6d:7c: 00:a0:40:55:f9:ba:5c:b7:49:fe:df:73:00:58:20:64:33:34: d7:2b:b5:f3:bc:1e:b2:65:44:08:ea:6a:73:7a:d3:37:13:4f: 6f:10:46:3d:c9:fd:28:00:7d:51:df:86:ca:e5:43:1c:05:54: a2:ba:93:b5:fb:fb:94:ff:73:4a:6b:c9:ec:e0:fb:15:32:ed: 60:4d:98:ee:0d:b0:f2:3f:8c:0b:3f:01:9f:9f:86:eb:98:a8: 01:c2:f0:98:ca:91:8d:d8:26:67:15:04:54:9e:06:75:a5:e0: 98:ee:bf:bc:d5:b0:d9:67:7e:d6:76:93:6b:60:89:9a:1a:9c: 08:26:46:08:78:76:46:8e:60:ef:e5:1f:e4:20:c8:62:93:b9: 5e:de:c8:c1:af:62:ea:7f:02:27:f8:d7:ef:0f:12:36:ea:b4: f3:db:21:55:52:ec:8a:ea:cd:8d:69:18:33:93:88:58:9f:8d: 55:a2:f7:ce:5f:d6:ff:70:41:53:04:7c:70:c7:56:1e:a2:ad: 92:77:5f:c1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCncwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkQyOTIxMTAvBgNVBAUTKEY4MDZERjQ1Qzk4MDRERDRDOUQxRTUyQzYyRTBFMjgz QzBGODBDNTMwHhcNMjUxMTAyMTkzMzU5WhcNMjUxMTA5MTkzMzU5WjAYMRYwFAYD VQQDEw02OTA3YjIyNy0wODBhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3twfcyum/EprNFwRJAttc/ehdvLskvgAJ74MwDn1umGDzT82l1wMPbbOiq2F CyqtgA1cvO94LSEv+PcZC5m1tWnESNIHtffWBhC740fvgpnszqCFN+EUXn1NqRXk jutOEcY1BMILeFp+5TpE3dCw4zNmVHH/gvrGXzkbw7kqR/Yc/za5KPDNFY/hBs/K /dyK1TVv+cRHYHs8nw11CiZzIC5mjK/VUgj2xQm9qahzAQJ9dGKH/oiJzNMPKmq1 mdEedugCfmsqVX/k2tJZn/sgmvxBA61I8G+/2iLCdf0fxNyObEmbUCP9RmA8NDNV 0GU/fIoSYk0nAJWSXYrqCT8uMwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBgDDoi/ DW5nOir2S0xrdPqkV2GHMB8GA1UdIwQYMBaAFPgG30XJgE3UydHlLGLg4oPA+AxT MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGRDI5Mi9EMTYxOUE2NDZD QzUxMUVBQTgzNTk5NTNDNEY5QUUwMi8tQWJmUmNtQVRkVEowZVVzWXVEaWc4RDRE Rk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy1BYmZSY21BVGRUSjBlVXNZdURpZzhENERGTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG RDI5Mi9EMTYxOUE2NDZDQzUxMUVBQTgzNTk5NTNDNEY5QUUwMi8tQWJmUmNtQVRk VEowZVVzWXVEaWc4RDRERk0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAxQdQlq15ODOaZeNnU0g8jUZO8oVEU7hv2WrmHYqGt33v710Ltx2+F wlNUS0LOAnIOQasKbXwAoEBV+bpct0n+33MAWCBkMzTXK7XzvB6yZUQI6mpzetM3 E09vEEY9yf0oAH1R34bK5UMcBVSiupO1+/uU/3NKa8ns4PsVMu1gTZjuDbDyP4wL PwGfn4brmKgBwvCYypGN2CZnFQRUngZ1peCY7r+81bDZZ37WdpNrYImaGpwIJkYI eHZGjmDv5R/kIMhik7le3sjBr2LqfwIn+NfvDxI26rTz2yFVUuyK6s2NaRgzk4hY n41VovfOX9b/cEFTBHxwx1Yeoq2Sd1/B -----END CERTIFICATE-----Generated at Mon Nov 3 18:10:02 2025 by rpki-client