$ rpki-client -vvf rpki.apnic.net/member_repository/A91D3F8E/6C4089BA216C11EEB28BF24CC4F9AE02/1ABRvI3aYMky7gd2mrhnvvqNQvY.mft File: 1ABRvI3aYMky7gd2mrhnvvqNQvY.mft (raw, json) Hash identifier: ns9HARjJa2EHXNj5GJz+/on7x1KUph+oIn0biktAJrQ= Subject key identifier: 88:98:5B:3F:BC:10:4A:8B:5E:38:A6:59:7F:61:83:F3:CD:C3:9B:C5 Authority key identifier: D4:00:51:BC:8D:DA:60:C9:32:EE:07:76:9A:B8:67:BE:FA:8D:42:F6 Certificate issuer: /CN=A91D3F8E/serialNumber=D40051BC8DDA60C932EE07769AB867BEFA8D42F6 Certificate serial: 01F0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1ABRvI3aYMky7gd2mrhnvvqNQvY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D3F8E/6C4089BA216C11EEB28BF24CC4F9AE02/1ABRvI3aYMky7gd2mrhnvvqNQvY.mft Manifest number: 01CF Signing time: Sun 19 Oct 2025 05:44:25 +0000 Manifest this update: Sun 19 Oct 2025 05:44:24 +0000 Manifest next update: Sun 26 Oct 2025 05:44:24 +0000 Files and hashes: 1: 1ABRvI3aYMky7gd2mrhnvvqNQvY.crl (hash: 08EK4GqtbRWWtkzwUe8Zp+i/+6AaFtCumAxIaISrT9k=) 2: F8B64B2A97BB11EF9D4C9647C4F9AE02.roa (hash: pyGqakx6aToXl1NPvkP6t5S+uv8P5F7PIid49DfaOVg=) 3: C0E3BC02B8B611EFBD4C6F4AC4F9AE02.roa (hash: iK6flRTT/R1NX18TACntkfKJoThokFSeTRkG+bdqrmA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D3F8E/6C4089BA216C11EEB28BF24CC4F9AE02/1ABRvI3aYMky7gd2mrhnvvqNQvY.crl rsync://rpki.apnic.net/member_repository/A91D3F8E/6C4089BA216C11EEB28BF24CC4F9AE02/1ABRvI3aYMky7gd2mrhnvvqNQvY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1ABRvI3aYMky7gd2mrhnvvqNQvY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 05:44:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 496 (0x1f0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D3F8E, serialNumber=D40051BC8DDA60C932EE07769AB867BEFA8D42F6 Validity Not Before: Oct 19 05:44:24 2025 GMT Not After : Oct 26 05:44:24 2025 GMT Subject: CN=68f47ab8-1d07 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:7e:15:2b:7e:22:b8:45:88:b2:6b:11:27:bb: 00:b6:c5:df:cb:2a:d8:06:1b:83:e3:11:ec:8b:17: 42:ab:24:93:43:12:a8:26:4c:5f:1b:48:cd:39:43: af:cb:4a:51:58:c0:d9:c6:25:29:9f:04:fc:b8:a0: 1a:60:92:16:8c:75:dc:71:36:bb:5d:a6:db:5b:ea: f5:e2:59:82:dd:0c:52:2a:45:e1:b9:84:f9:44:97: f6:a0:48:61:21:cb:d1:91:36:81:e5:16:6e:fa:32: fd:40:7e:6c:20:40:11:6f:40:b6:86:fd:38:47:42: e3:51:a3:7a:1f:b0:c2:e0:58:74:c3:70:76:15:80: f0:60:5e:0c:ef:75:e3:09:b9:54:a4:a6:19:58:ad: a6:0c:6a:27:79:e6:b9:80:c5:73:10:5c:75:82:0c: 8e:84:1e:66:24:01:d5:33:c3:0c:46:ef:fc:ef:67: ee:72:43:6b:f7:c9:3a:a9:74:d3:e1:80:24:14:1e: 17:05:89:97:ba:c8:26:14:1f:fe:5c:f7:ac:7e:0c: 13:59:f6:8a:50:e8:8a:72:99:73:14:45:54:05:4a: 0c:04:2b:02:f2:2f:05:23:2f:f8:fd:fc:25:62:4e: ed:57:33:fd:be:fe:fa:2d:10:cf:f3:ff:02:43:0c: c4:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:98:5B:3F:BC:10:4A:8B:5E:38:A6:59:7F:61:83:F3:CD:C3:9B:C5 X509v3 Authority Key Identifier: keyid:D4:00:51:BC:8D:DA:60:C9:32:EE:07:76:9A:B8:67:BE:FA:8D:42:F6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D3F8E/6C4089BA216C11EEB28BF24CC4F9AE02/1ABRvI3aYMky7gd2mrhnvvqNQvY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1ABRvI3aYMky7gd2mrhnvvqNQvY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D3F8E/6C4089BA216C11EEB28BF24CC4F9AE02/1ABRvI3aYMky7gd2mrhnvvqNQvY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b7:09:83:55:71:4c:8a:f5:09:0c:0e:4e:f2:80:74:ed:b0:62: 45:3d:bd:ae:95:f2:bc:92:96:c3:29:3a:8f:de:b3:c6:d3:0d: 4c:48:f0:a5:4d:d5:99:b0:35:54:ba:c6:9f:40:0f:e9:91:b4: 57:cc:b9:85:d6:5c:d2:29:42:6e:f3:d0:e0:6b:91:67:f2:74: 96:2e:40:be:d2:43:82:bc:8c:8f:0c:28:df:41:75:94:ad:e9: 3e:93:c5:54:14:11:e0:5a:f9:f7:25:56:10:43:cf:a2:d9:53: 00:e3:4d:55:25:e3:71:4b:22:38:a3:75:b1:28:2a:dd:77:14: 3b:99:a8:d1:d9:e6:5f:35:50:63:d7:d1:45:90:30:ed:0e:d9: ad:80:3c:4b:9f:c8:ca:82:c5:0b:c8:e9:df:6d:11:5e:1e:ef: e7:96:0b:86:d8:17:ff:a4:c7:5d:63:20:2c:a2:cc:fe:4a:af: 4d:6c:56:22:eb:67:d6:5a:4d:4a:c6:b0:b8:a5:3e:00:e1:2c: e4:0c:86:d0:12:ba:d8:ed:11:2e:1e:61:38:94:fc:fd:63:8e: e3:2a:58:97:ad:67:ef:4e:d8:1d:28:85:24:fa:78:27:d6:59: 27:f4:fa:36:ba:0e:65:33:3e:2b:5b:b6:2b:d9:c0:f4:ca:7c: 90:7b:9e:ab -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAfAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDNGOEUxMTAvBgNVBAUTKEQ0MDA1MUJDOEREQTYwQzkzMkVFMDc3NjlBQjg2N0JF RkE4RDQyRjYwHhcNMjUxMDE5MDU0NDI0WhcNMjUxMDI2MDU0NDI0WjAYMRYwFAYD VQQDEw02OGY0N2FiOC0xZDA3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyH4VK34iuEWIsmsRJ7sAtsXfyyrYBhuD4xHsixdCqySTQxKoJkxfG0jNOUOv y0pRWMDZxiUpnwT8uKAaYJIWjHXccTa7XabbW+r14lmC3QxSKkXhuYT5RJf2oEhh IcvRkTaB5RZu+jL9QH5sIEARb0C2hv04R0LjUaN6H7DC4Fh0w3B2FYDwYF4M73Xj CblUpKYZWK2mDGoneea5gMVzEFx1ggyOhB5mJAHVM8MMRu/872fuckNr98k6qXTT 4YAkFB4XBYmXusgmFB/+XPesfgwTWfaKUOiKcplzFEVUBUoMBCsC8i8FIy/4/fwl Yk7tVzP9vv76LRDP8/8CQwzEnQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIiYWz+8 EEqLXjimWX9hg/PNw5vFMB8GA1UdIwQYMBaAFNQAUbyN2mDJMu4Hdpq4Z776jUL2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEM0Y4RS82QzQwODlCQTIx NkMxMUVFQjI4QkYyNENDNEY5QUUwMi8xQUJSdkkzYVlNa3k3Z2QybXJobnZ2cU5R dlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzFBQlJ2STNhWU1reTdnZDJtcmhudnZxTlF2WS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE M0Y4RS82QzQwODlCQTIxNkMxMUVFQjI4QkYyNENDNEY5QUUwMi8xQUJSdkkzYVlN a3k3Z2QybXJobnZ2cU5RdlkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC3CYNVcUyK9QkMDk7ygHTtsGJFPb2ulfK8kpbDKTqP3rPG0w1MSPCl TdWZsDVUusafQA/pkbRXzLmF1lzSKUJu89Dga5Fn8nSWLkC+0kOCvIyPDCjfQXWU rek+k8VUFBHgWvn3JVYQQ8+i2VMA401VJeNxSyI4o3WxKCrddxQ7majR2eZfNVBj 19FFkDDtDtmtgDxLn8jKgsULyOnfbRFeHu/nlguG2Bf/pMddYyAsosz+Sq9NbFYi 62fWWk1KxrC4pT4A4SzkDIbQErrY7REuHmE4lPz9Y47jKliXrWfvTtgdKIUk+ngn 1lkn9Po2ug5lMz4rW7Yr2cD0ynyQe56r -----END CERTIFICATE-----Generated at Mon Oct 20 17:24:16 2025 by rpki-client