$ rpki-client -vvf rpki.apnic.net/member_repository/A91D3F8E/6C4089BA216C11EEB28BF24CC4F9AE02/1ABRvI3aYMky7gd2mrhnvvqNQvY.mft File: 1ABRvI3aYMky7gd2mrhnvvqNQvY.mft (raw, json) Hash identifier: dtNySnrhtN09DMusTc6uHDsF6E1rCZINyiUkp+QHs28= Subject key identifier: 80:7D:8A:86:0E:66:73:01:EA:50:EE:47:17:4A:13:74:DD:25:96:16 Authority key identifier: D4:00:51:BC:8D:DA:60:C9:32:EE:07:76:9A:B8:67:BE:FA:8D:42:F6 Certificate issuer: /CN=A91D3F8E/serialNumber=D40051BC8DDA60C932EE07769AB867BEFA8D42F6 Certificate serial: 01D3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1ABRvI3aYMky7gd2mrhnvvqNQvY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D3F8E/6C4089BA216C11EEB28BF24CC4F9AE02/1ABRvI3aYMky7gd2mrhnvvqNQvY.mft Manifest number: 01B2 Signing time: Sat 23 Aug 2025 03:37:40 +0000 Manifest this update: Sat 23 Aug 2025 03:37:40 +0000 Manifest next update: Sat 30 Aug 2025 03:37:40 +0000 Files and hashes: 1: 1ABRvI3aYMky7gd2mrhnvvqNQvY.crl (hash: A7CprRzgfkvIEwxxdxxc7eRYuS1jouqW1tshtt+NYyY=) 2: F8B64B2A97BB11EF9D4C9647C4F9AE02.roa (hash: pyGqakx6aToXl1NPvkP6t5S+uv8P5F7PIid49DfaOVg=) 3: C0E3BC02B8B611EFBD4C6F4AC4F9AE02.roa (hash: iK6flRTT/R1NX18TACntkfKJoThokFSeTRkG+bdqrmA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D3F8E/6C4089BA216C11EEB28BF24CC4F9AE02/1ABRvI3aYMky7gd2mrhnvvqNQvY.crl rsync://rpki.apnic.net/member_repository/A91D3F8E/6C4089BA216C11EEB28BF24CC4F9AE02/1ABRvI3aYMky7gd2mrhnvvqNQvY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1ABRvI3aYMky7gd2mrhnvvqNQvY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 03:37:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 467 (0x1d3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D3F8E, serialNumber=D40051BC8DDA60C932EE07769AB867BEFA8D42F6 Validity Not Before: Aug 23 03:37:40 2025 GMT Not After : Aug 30 03:37:40 2025 GMT Subject: CN=68a93784-5ec3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:75:df:0d:bf:9f:e2:37:85:29:0f:b0:f5:09: 3b:c2:4a:51:f6:5d:76:b9:4f:a6:09:73:3b:c2:49: 67:29:ea:db:c6:5b:cb:95:18:c5:a2:3e:14:15:d8: 7b:46:56:f9:c4:65:04:a4:37:75:43:28:1c:7f:b6: d1:16:ec:e6:b9:8f:93:76:0f:93:82:82:1d:6e:6a: 94:68:72:35:c0:36:0d:52:ac:d6:48:0e:71:47:61: 87:85:68:cd:10:68:45:97:be:06:2e:8b:71:26:44: 7f:47:84:10:76:61:5f:11:76:72:7c:ab:dd:33:e0: 8e:e4:63:54:a9:83:9b:30:d8:a5:82:0b:69:d9:92: 9c:e4:a4:60:d5:7b:e9:64:e3:0a:bc:e3:0c:26:d9: da:31:09:ea:cf:ae:7f:3e:af:74:56:5f:6c:28:46: dd:31:44:23:5a:f9:b4:3e:d8:11:d7:e6:3e:df:7b: 80:df:73:d1:2e:76:32:34:68:e2:af:52:d9:4f:cd: a1:1b:c6:d2:55:98:c7:d1:c5:06:5d:f9:e7:46:6b: a3:52:2f:85:ed:8a:8c:59:d7:b7:cf:1e:68:4d:67: a6:5b:3b:39:d2:b2:7a:00:95:dc:09:42:ea:b9:f6: 3d:15:04:f9:41:38:8f:98:5e:b2:30:c3:0d:dc:7b: 09:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:7D:8A:86:0E:66:73:01:EA:50:EE:47:17:4A:13:74:DD:25:96:16 X509v3 Authority Key Identifier: keyid:D4:00:51:BC:8D:DA:60:C9:32:EE:07:76:9A:B8:67:BE:FA:8D:42:F6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D3F8E/6C4089BA216C11EEB28BF24CC4F9AE02/1ABRvI3aYMky7gd2mrhnvvqNQvY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1ABRvI3aYMky7gd2mrhnvvqNQvY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D3F8E/6C4089BA216C11EEB28BF24CC4F9AE02/1ABRvI3aYMky7gd2mrhnvvqNQvY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 80:1a:98:65:a1:7d:72:2b:5e:4a:b9:d7:78:48:0c:79:8f:61: a0:a2:64:29:b2:91:11:1b:92:95:69:35:40:f3:88:f5:70:4e: 25:27:fb:0e:24:bc:ce:30:21:fd:cc:70:4b:27:59:5d:f7:a2: 29:2c:0f:17:e0:85:53:96:7a:6c:74:a9:bc:d3:62:7a:d4:10: 3a:99:fa:83:97:92:13:49:8d:fc:cd:72:b9:3f:eb:b5:c4:7a: 29:f4:24:49:99:c5:76:45:12:4c:54:76:1c:30:cf:94:01:36: 8c:ad:34:f7:f9:78:a5:4d:2e:ff:3a:c7:44:8b:9e:c0:f0:13: 57:a0:fb:00:cb:d0:23:70:c7:43:2b:29:fe:33:58:04:01:01: 3e:c1:2a:f3:e9:17:61:5f:b1:ab:58:3d:57:45:19:6e:c5:d3: 7c:7b:ad:16:4f:44:fd:4d:ae:df:e7:96:ba:cd:63:d0:2c:52: a1:ac:a4:ca:a1:bf:8c:3b:c5:7d:9d:0c:81:25:8a:19:e8:aa: 27:8c:fe:11:a2:2b:56:82:fe:96:8b:6b:22:9d:ee:38:44:e7: bf:73:72:f1:68:63:cd:09:7c:f6:8b:be:61:57:e6:d6:c2:4f: a7:c3:38:7e:a5:64:10:b8:7e:31:78:b1:11:91:95:3f:e0:cc: df:fb:f5:a1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAdMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDNGOEUxMTAvBgNVBAUTKEQ0MDA1MUJDOEREQTYwQzkzMkVFMDc3NjlBQjg2N0JF RkE4RDQyRjYwHhcNMjUwODIzMDMzNzQwWhcNMjUwODMwMDMzNzQwWjAYMRYwFAYD VQQDEw02OGE5Mzc4NC01ZWMzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA63XfDb+f4jeFKQ+w9Qk7wkpR9l12uU+mCXM7wklnKerbxlvLlRjFoj4UFdh7 Rlb5xGUEpDd1Qygcf7bRFuzmuY+Tdg+TgoIdbmqUaHI1wDYNUqzWSA5xR2GHhWjN EGhFl74GLotxJkR/R4QQdmFfEXZyfKvdM+CO5GNUqYObMNilggtp2ZKc5KRg1Xvp ZOMKvOMMJtnaMQnqz65/Pq90Vl9sKEbdMUQjWvm0PtgR1+Y+33uA33PRLnYyNGji r1LZT82hG8bSVZjH0cUGXfnnRmujUi+F7YqMWde3zx5oTWemWzs50rJ6AJXcCULq ufY9FQT5QTiPmF6yMMMN3HsJ0QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIB9ioYO ZnMB6lDuRxdKE3TdJZYWMB8GA1UdIwQYMBaAFNQAUbyN2mDJMu4Hdpq4Z776jUL2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEM0Y4RS82QzQwODlCQTIx NkMxMUVFQjI4QkYyNENDNEY5QUUwMi8xQUJSdkkzYVlNa3k3Z2QybXJobnZ2cU5R dlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzFBQlJ2STNhWU1reTdnZDJtcmhudnZxTlF2WS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE M0Y4RS82QzQwODlCQTIxNkMxMUVFQjI4QkYyNENDNEY5QUUwMi8xQUJSdkkzYVlN a3k3Z2QybXJobnZ2cU5RdlkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCAGphloX1yK15Kudd4SAx5j2GgomQpspERG5KVaTVA84j1cE4lJ/sO JLzOMCH9zHBLJ1ld96IpLA8X4IVTlnpsdKm802J61BA6mfqDl5ITSY38zXK5P+u1 xHop9CRJmcV2RRJMVHYcMM+UATaMrTT3+XilTS7/OsdEi57A8BNXoPsAy9AjcMdD Kyn+M1gEAQE+wSrz6RdhX7GrWD1XRRluxdN8e60WT0T9Ta7f55a6zWPQLFKhrKTK ob+MO8V9nQyBJYoZ6KonjP4RoitWgv6Wi2sine44ROe/c3LxaGPNCXz2i75hV+bW wk+nwzh+pWQQuH4xeLERkZU/4Mzf+/Wh -----END CERTIFICATE-----Generated at Sun Aug 24 00:44:01 2025 by rpki-client