$ rpki-client -vvf rpki.apnic.net/member_repository/A91CC564/4F29D0C4C40F11EA9C15B470C4F9AE02/ABXboDjLzLFS7RcROqCo1ddIjSE.mft File: ABXboDjLzLFS7RcROqCo1ddIjSE.mft (raw, json) Hash identifier: rswKsYypjW60aPoVwatKw3n2GJi958xmgmpEme7O2P8= Subject key identifier: FA:A4:64:33:DA:C5:6C:34:99:E2:D1:69:3A:F4:14:2E:93:B3:72:44 Authority key identifier: 00:15:DB:A0:38:CB:CC:B1:52:ED:17:11:3A:A0:A8:D5:D7:48:8D:21 Certificate issuer: /CN=A91CC564/serialNumber=0015DBA038CBCCB152ED17113AA0A8D5D7488D21 Certificate serial: 08A5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ABXboDjLzLFS7RcROqCo1ddIjSE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CC564/4F29D0C4C40F11EA9C15B470C4F9AE02/ABXboDjLzLFS7RcROqCo1ddIjSE.mft Manifest number: 089E Signing time: Fri 22 Aug 2025 20:41:32 +0000 Manifest this update: Fri 22 Aug 2025 20:41:32 +0000 Manifest next update: Fri 29 Aug 2025 20:41:32 +0000 Files and hashes: 1: ABXboDjLzLFS7RcROqCo1ddIjSE.crl (hash: 0oQ+Aodru4LwQCXglR6FmwDww8QwdO+5W3ZmSnipvp0=) 2: 74CCA13ADBE811EA8D063B7DC4F9AE02.roa (hash: Zy35shBaA7kL0uiX8MFYVjG3k67WMwjlOa39yPU2npo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CC564/4F29D0C4C40F11EA9C15B470C4F9AE02/ABXboDjLzLFS7RcROqCo1ddIjSE.crl rsync://rpki.apnic.net/member_repository/A91CC564/4F29D0C4C40F11EA9C15B470C4F9AE02/ABXboDjLzLFS7RcROqCo1ddIjSE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ABXboDjLzLFS7RcROqCo1ddIjSE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 20:41:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2213 (0x8a5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CC564, serialNumber=0015DBA038CBCCB152ED17113AA0A8D5D7488D21 Validity Not Before: Aug 22 20:41:32 2025 GMT Not After : Aug 29 20:41:32 2025 GMT Subject: CN=68a8d5fc-953e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:b1:9d:57:82:b0:ba:2a:66:7d:00:61:d2:d6: 8b:ea:bd:f3:ff:e4:63:b6:ca:e9:67:72:a2:f5:62: fe:38:17:19:11:75:dd:5a:1f:7d:79:b7:a7:dd:f1: e1:04:f8:be:46:c5:8b:6c:e5:19:59:a3:31:a8:f8: 8d:c7:56:9d:0e:5b:3d:be:36:2b:d0:10:5b:7e:a9: e2:73:21:4b:60:41:9b:30:65:c8:78:b8:84:9b:43: cc:28:25:c9:01:dc:c1:5d:c2:6c:37:3a:4d:a2:4d: 63:91:59:bf:2b:34:69:02:72:93:37:f7:cf:6c:3a: 50:75:7e:13:04:a7:11:ab:a5:db:be:d5:9d:3e:c4: ec:1b:b5:76:e8:2a:be:49:9b:f6:57:4d:ea:94:10: 53:c2:dd:a1:d2:aa:05:af:54:ef:e5:01:80:df:30: 3b:60:02:ad:88:ec:7f:0d:83:c5:bb:91:b4:68:40: fd:38:ab:cd:60:fb:9b:12:fd:d9:ad:bc:b9:d3:c8: d7:12:83:de:16:58:92:5d:4b:f6:af:69:78:07:3b: d9:e0:53:42:ac:71:f4:35:ee:e2:65:ce:38:6e:c9: 96:c5:11:cf:ec:dc:0c:d7:04:6e:48:52:96:09:96: e6:a6:6b:8a:fa:e5:4c:ef:53:80:fe:79:bd:e5:6d: a4:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:A4:64:33:DA:C5:6C:34:99:E2:D1:69:3A:F4:14:2E:93:B3:72:44 X509v3 Authority Key Identifier: keyid:00:15:DB:A0:38:CB:CC:B1:52:ED:17:11:3A:A0:A8:D5:D7:48:8D:21 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CC564/4F29D0C4C40F11EA9C15B470C4F9AE02/ABXboDjLzLFS7RcROqCo1ddIjSE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ABXboDjLzLFS7RcROqCo1ddIjSE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CC564/4F29D0C4C40F11EA9C15B470C4F9AE02/ABXboDjLzLFS7RcROqCo1ddIjSE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 84:41:7f:00:50:21:ac:88:84:4d:18:98:94:90:82:2e:58:76: 85:c8:eb:89:4c:c5:e8:4e:88:cf:84:ed:d5:5d:40:c4:77:eb: 51:f2:5d:60:ea:a2:a3:61:1b:5b:42:38:95:09:bb:d1:d4:e3: 14:73:7e:74:85:f5:50:a1:59:ae:97:cb:de:05:92:37:3a:da: 24:6e:37:59:44:64:0a:6a:6a:39:d0:d5:5d:bb:13:6a:91:94: 17:d8:f1:fa:47:93:ac:d0:a5:6b:a7:67:11:93:91:14:23:aa: 5c:c8:77:fa:96:de:f3:95:03:8c:f4:24:33:6a:76:5a:58:82: 9d:f3:c4:63:2b:39:59:02:cb:f9:bb:72:a3:23:3c:44:b0:87: bd:e0:04:c8:41:6b:b1:67:aa:47:43:70:44:52:b7:2b:16:33: f5:bb:fc:0d:a8:7c:81:33:6f:a5:7c:f8:82:4f:0f:7f:88:68: b8:f7:a3:a4:66:41:f8:d4:91:f2:2c:a0:e2:ce:f8:03:50:86: 8d:c7:e2:49:5a:68:79:6b:e3:9c:46:cb:42:06:fb:00:78:3e: da:71:a6:b0:e6:1e:b7:c4:75:14:d5:f7:04:9a:02:29:7e:ea: b1:e7:cc:d3:fc:6b:9b:cb:87:b4:ad:4e:e3:e7:a4:84:4a:4b: 28:aa:1c:62 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCKUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0M1NjQxMTAvBgNVBAUTKDAwMTVEQkEwMzhDQkNDQjE1MkVEMTcxMTNBQTBBOEQ1 RDc0ODhEMjEwHhcNMjUwODIyMjA0MTMyWhcNMjUwODI5MjA0MTMyWjAYMRYwFAYD VQQDEw02OGE4ZDVmYy05NTNlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxLGdV4KwuipmfQBh0taL6r3z/+RjtsrpZ3Ki9WL+OBcZEXXdWh99eben3fHh BPi+RsWLbOUZWaMxqPiNx1adDls9vjYr0BBbfqnicyFLYEGbMGXIeLiEm0PMKCXJ AdzBXcJsNzpNok1jkVm/KzRpAnKTN/fPbDpQdX4TBKcRq6XbvtWdPsTsG7V26Cq+ SZv2V03qlBBTwt2h0qoFr1Tv5QGA3zA7YAKtiOx/DYPFu5G0aED9OKvNYPubEv3Z rby508jXEoPeFliSXUv2r2l4BzvZ4FNCrHH0Ne7iZc44bsmWxRHP7NwM1wRuSFKW CZbmpmuK+uVM71OA/nm95W2kxwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPqkZDPa xWw0meLRaTr0FC6Ts3JEMB8GA1UdIwQYMBaAFAAV26A4y8yxUu0XETqgqNXXSI0h MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQzU2NC80RjI5RDBDNEM0 MEYxMUVBOUMxNUI0NzBDNEY5QUUwMi9BQlhib0RqTHpMRlM3UmNST3FDbzFkZElq U0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0FCWGJvRGpMekxGUzdSY1JPcUNvMWRkSWpTRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD QzU2NC80RjI5RDBDNEM0MEYxMUVBOUMxNUI0NzBDNEY5QUUwMi9BQlhib0RqTHpM RlM3UmNST3FDbzFkZElqU0UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCEQX8AUCGsiIRNGJiUkIIuWHaFyOuJTMXoTojPhO3VXUDEd+tR8l1g 6qKjYRtbQjiVCbvR1OMUc350hfVQoVmul8veBZI3OtokbjdZRGQKamo50NVduxNq kZQX2PH6R5Os0KVrp2cRk5EUI6pcyHf6lt7zlQOM9CQzanZaWIKd88RjKzlZAsv5 u3KjIzxEsIe94ATIQWuxZ6pHQ3BEUrcrFjP1u/wNqHyBM2+lfPiCTw9/iGi496Ok ZkH41JHyLKDizvgDUIaNx+JJWmh5a+OcRstCBvsAeD7acaaw5h63xHUU1fcEmgIp fuqx58zT/Guby4e0rU7j56SESksoqhxi -----END CERTIFICATE-----Generated at Sat Aug 23 15:16:59 2025 by rpki-client