$ rpki-client -vvf rpki.apnic.net/member_repository/A91FD292/D1619A646CC511EAA8359953C4F9AE02/-AbfRcmATdTJ0eUsYuDig8D4DFM.mft File: -AbfRcmATdTJ0eUsYuDig8D4DFM.mft (raw, json) Hash identifier: h7mD6ML27Ovn+BzUE/WWKGAzvNO1AQbVnBGP4kJu9bs= Subject key identifier: 20:BA:35:39:B7:66:17:04:50:AA:F8:E6:76:04:94:ED:0B:10:FA:7D Authority key identifier: F8:06:DF:45:C9:80:4D:D4:C9:D1:E5:2C:62:E0:E2:83:C0:F8:0C:53 Certificate issuer: /CN=A91FD292/serialNumber=F806DF45C9804DD4C9D1E52C62E0E283C0F80C53 Certificate serial: 0A60 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-AbfRcmATdTJ0eUsYuDig8D4DFM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FD292/D1619A646CC511EAA8359953C4F9AE02/-AbfRcmATdTJ0eUsYuDig8D4DFM.mft Manifest number: 0A60 Signing time: Thu 18 Sep 2025 19:52:42 +0000 Manifest this update: Thu 18 Sep 2025 19:52:40 +0000 Manifest next update: Thu 25 Sep 2025 19:52:40 +0000 Files and hashes: 1: -AbfRcmATdTJ0eUsYuDig8D4DFM.crl (hash: jrFKt3S/HZPITOe+nGqcq2rrmopPUjrw6MEmls7nsRg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FD292/D1619A646CC511EAA8359953C4F9AE02/-AbfRcmATdTJ0eUsYuDig8D4DFM.crl rsync://rpki.apnic.net/member_repository/A91FD292/D1619A646CC511EAA8359953C4F9AE02/-AbfRcmATdTJ0eUsYuDig8D4DFM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-AbfRcmATdTJ0eUsYuDig8D4DFM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Sep 2025 19:52:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2656 (0xa60) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FD292, serialNumber=F806DF45C9804DD4C9D1E52C62E0E283C0F80C53 Validity Not Before: Sep 18 19:52:40 2025 GMT Not After : Sep 25 19:52:40 2025 GMT Subject: CN=68cc6309-ba1a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:fe:87:d5:83:d6:a1:7d:0e:0e:c6:46:e1:b8: b1:ad:f5:81:4a:bb:aa:b1:8e:dc:71:b5:8a:99:60: 80:39:0d:b3:da:05:19:82:2d:d1:19:05:9f:1c:ea: 6e:ed:00:90:49:b7:80:3e:04:db:b3:42:e5:2d:e1: ed:52:b2:42:02:89:a8:52:a1:c8:82:df:94:c0:e4: bb:55:33:90:48:66:85:8b:b6:5d:bf:73:b2:a9:75: a8:6b:a6:35:d5:f3:0a:9e:94:16:e3:72:4a:ef:78: 9a:ed:51:9e:fc:c9:20:d2:67:64:22:c3:06:86:83: 37:37:ab:d6:e3:d6:a3:c6:eb:67:1b:a5:e5:05:c9: 08:ca:47:a5:df:58:8c:a3:27:16:09:22:d4:ac:ca: 6a:14:f8:c4:68:ab:ed:26:f3:a4:d7:a4:bc:ba:02: a8:37:eb:fa:33:ca:2f:b3:da:35:3c:53:24:8a:14: 47:ca:96:3e:78:c1:b1:bd:01:22:b0:8d:97:95:41: a3:68:af:0d:a6:7a:78:83:e1:3a:78:d4:cd:80:c3: 4d:9f:56:40:84:41:3a:d7:0d:f9:d4:3a:ba:43:19: ea:03:85:ac:7c:f6:65:e3:c2:8d:b3:b4:20:72:c9: c8:a1:d3:53:d6:21:7b:b4:3d:ef:00:f8:d0:c0:8f: 6a:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:BA:35:39:B7:66:17:04:50:AA:F8:E6:76:04:94:ED:0B:10:FA:7D X509v3 Authority Key Identifier: keyid:F8:06:DF:45:C9:80:4D:D4:C9:D1:E5:2C:62:E0:E2:83:C0:F8:0C:53 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FD292/D1619A646CC511EAA8359953C4F9AE02/-AbfRcmATdTJ0eUsYuDig8D4DFM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-AbfRcmATdTJ0eUsYuDig8D4DFM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FD292/D1619A646CC511EAA8359953C4F9AE02/-AbfRcmATdTJ0eUsYuDig8D4DFM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 84:08:26:c3:d2:c2:f9:c5:9c:ee:ab:3b:45:44:17:32:2c:16: bb:58:28:47:8f:96:d5:69:a3:eb:b5:5d:fc:52:37:d7:14:04: 5b:b6:55:74:14:67:8d:e6:e5:32:e0:6b:ce:9f:c0:dc:0c:78: b7:61:51:10:c7:40:07:1b:d2:9f:7c:37:04:d6:5e:de:6d:90: 17:bb:45:63:3e:22:96:eb:6a:d8:90:c0:29:04:fe:30:02:fd: 3a:5c:c4:7e:ce:16:d8:e4:7c:0d:85:bc:d6:5d:d8:67:a2:41: 6e:9a:a5:83:50:e4:de:85:01:52:af:cc:ca:4c:2f:e5:f9:f8: bf:e3:79:77:1e:9c:e1:f5:98:96:4d:79:8f:c4:b5:e0:a9:f6: d7:bd:e2:49:49:32:c3:38:54:5b:10:df:bb:91:69:27:a0:39: 3d:d3:78:9c:30:6b:3c:35:fa:a5:4c:bf:4f:d1:e0:a8:0c:2f: fb:14:ab:59:90:39:24:2b:cf:7f:d7:de:94:60:fa:24:3e:4a: 96:84:5d:f7:4b:40:6f:9e:8d:16:59:52:25:76:3b:99:95:c4: 38:39:33:7a:7d:fa:39:7c:0a:bb:af:dc:f0:8a:0a:20:9c:da: 24:d7:df:28:e7:70:38:17:c3:66:12:f6:d6:52:a6:b2:9a:72: 7f:d7:47:9f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCmAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkQyOTIxMTAvBgNVBAUTKEY4MDZERjQ1Qzk4MDRERDRDOUQxRTUyQzYyRTBFMjgz QzBGODBDNTMwHhcNMjUwOTE4MTk1MjQwWhcNMjUwOTI1MTk1MjQwWjAYMRYwFAYD VQQDEw02OGNjNjMwOS1iYTFhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyP6H1YPWoX0ODsZG4bixrfWBSruqsY7ccbWKmWCAOQ2z2gUZgi3RGQWfHOpu 7QCQSbeAPgTbs0LlLeHtUrJCAomoUqHIgt+UwOS7VTOQSGaFi7Zdv3OyqXWoa6Y1 1fMKnpQW43JK73ia7VGe/Mkg0mdkIsMGhoM3N6vW49ajxutnG6XlBckIykel31iM oycWCSLUrMpqFPjEaKvtJvOk16S8ugKoN+v6M8ovs9o1PFMkihRHypY+eMGxvQEi sI2XlUGjaK8Npnp4g+E6eNTNgMNNn1ZAhEE61w351Dq6QxnqA4WsfPZl48KNs7Qg csnIodNT1iF7tD3vAPjQwI9q7QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCC6NTm3 ZhcEUKr45nYElO0LEPp9MB8GA1UdIwQYMBaAFPgG30XJgE3UydHlLGLg4oPA+AxT MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGRDI5Mi9EMTYxOUE2NDZD QzUxMUVBQTgzNTk5NTNDNEY5QUUwMi8tQWJmUmNtQVRkVEowZVVzWXVEaWc4RDRE Rk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy1BYmZSY21BVGRUSjBlVXNZdURpZzhENERGTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG RDI5Mi9EMTYxOUE2NDZDQzUxMUVBQTgzNTk5NTNDNEY5QUUwMi8tQWJmUmNtQVRk VEowZVVzWXVEaWc4RDRERk0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCECCbD0sL5xZzuqztFRBcyLBa7WChHj5bVaaPrtV38UjfXFARbtlV0 FGeN5uUy4GvOn8DcDHi3YVEQx0AHG9KffDcE1l7ebZAXu0VjPiKW62rYkMApBP4w Av06XMR+zhbY5HwNhbzWXdhnokFumqWDUOTehQFSr8zKTC/l+fi/43l3Hpzh9ZiW TXmPxLXgqfbXveJJSTLDOFRbEN+7kWknoDk903icMGs8NfqlTL9P0eCoDC/7FKtZ kDkkK89/196UYPokPkqWhF33S0Bvno0WWVIldjuZlcQ4OTN6ffo5fAq7r9zwigog nNok198o53A4F8NmEvbWUqaymnJ/10ef -----END CERTIFICATE-----Generated at Fri Sep 19 05:07:07 2025 by rpki-client