$ rpki-client -vvf rpki.apnic.net/member_repository/A91DACA7/517E6E4C45B211EFA5DF6D19C4F9AE02/Abso_b4VWoZixe5oDP3wyY1OvR0.mft File: Abso_b4VWoZixe5oDP3wyY1OvR0.mft (raw, json) Hash identifier: r6XKwSpxJzsgNv2ZBLH7a9zH9Ob0PbPp1KiyMeu3mNw= Subject key identifier: BF:A3:B9:D3:37:6B:59:A6:67:9C:A5:A3:EB:23:11:AA:61:5B:28:2C Authority key identifier: 01:BB:28:FD:BE:15:5A:86:62:C5:EE:68:0C:FD:F0:C9:8D:4E:BD:1D Certificate issuer: /CN=A91DACA7/serialNumber=01BB28FDBE155A8662C5EE680CFDF0C98D4EBD1D Certificate serial: ED Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Abso_b4VWoZixe5oDP3wyY1OvR0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DACA7/517E6E4C45B211EFA5DF6D19C4F9AE02/Abso_b4VWoZixe5oDP3wyY1OvR0.mft Manifest number: EB Signing time: Sun 19 Oct 2025 08:19:57 +0000 Manifest this update: Sun 19 Oct 2025 08:19:56 +0000 Manifest next update: Sun 26 Oct 2025 08:19:56 +0000 Files and hashes: 1: Abso_b4VWoZixe5oDP3wyY1OvR0.crl (hash: 9DS8YcEOr9ETrp1Z/iXzj+QgFgtChNCicEsSfSDtOK8=) 2: ECB0C56845B211EFBCC09A1AC4F9AE02.roa (hash: EGPY/0B+FhNPcxx4yI5SHvTWW9NTcAbNHzvZ84arIm4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DACA7/517E6E4C45B211EFA5DF6D19C4F9AE02/Abso_b4VWoZixe5oDP3wyY1OvR0.crl rsync://rpki.apnic.net/member_repository/A91DACA7/517E6E4C45B211EFA5DF6D19C4F9AE02/Abso_b4VWoZixe5oDP3wyY1OvR0.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Abso_b4VWoZixe5oDP3wyY1OvR0.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 08:19:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 237 (0xed) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DACA7, serialNumber=01BB28FDBE155A8662C5EE680CFDF0C98D4EBD1D Validity Not Before: Oct 19 08:19:56 2025 GMT Not After : Oct 26 08:19:56 2025 GMT Subject: CN=68f49f2d-153f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:a4:e9:07:99:ab:69:dd:29:7f:ed:21:af:2d: 9c:f3:28:ae:57:84:f3:45:b7:93:81:22:fe:4d:ea: ed:10:26:c4:f7:6a:8d:e5:a1:f4:6c:84:dc:7f:f0: b1:c3:3b:4a:14:17:a9:3a:8e:54:a2:7d:07:56:3f: 5f:b8:03:9f:d1:e9:db:4a:21:5b:3a:96:d3:24:33: 1d:eb:1b:be:3f:b3:12:0e:1a:85:3d:87:d3:2b:35: 44:a6:3b:92:6d:4a:20:bf:24:ee:3e:ad:d0:67:7d: 7e:74:77:4b:13:58:1c:40:b8:da:38:32:61:a0:17: f2:c7:40:7c:53:ec:cb:3d:23:c7:80:d3:d4:d8:d0: 69:b3:90:5d:0a:f8:71:bc:b9:71:80:00:12:9a:ea: 8c:e3:b6:41:d9:12:91:3f:9d:83:97:76:92:fd:6c: 5c:56:87:66:12:03:4b:6e:e8:f3:52:5c:e7:06:03: 4a:4b:fe:05:6b:26:0f:d1:7c:ee:50:c5:34:9e:fe: 3e:57:8d:cb:ee:43:b2:93:b9:75:76:92:ab:f1:a5: b1:f8:c5:9d:59:a5:6b:e4:82:90:df:b9:19:2d:da: 18:96:44:84:37:3d:e2:23:8c:b1:89:73:a8:47:5c: b1:87:a9:06:c6:7f:96:f8:21:2e:1d:0b:36:85:4f: d4:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:A3:B9:D3:37:6B:59:A6:67:9C:A5:A3:EB:23:11:AA:61:5B:28:2C X509v3 Authority Key Identifier: keyid:01:BB:28:FD:BE:15:5A:86:62:C5:EE:68:0C:FD:F0:C9:8D:4E:BD:1D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DACA7/517E6E4C45B211EFA5DF6D19C4F9AE02/Abso_b4VWoZixe5oDP3wyY1OvR0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Abso_b4VWoZixe5oDP3wyY1OvR0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DACA7/517E6E4C45B211EFA5DF6D19C4F9AE02/Abso_b4VWoZixe5oDP3wyY1OvR0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3a:f0:4d:99:70:ab:91:f9:bf:7e:ae:fc:82:39:0c:19:34:46: 04:ff:00:75:92:f8:e7:20:83:05:4a:21:8c:a9:f2:25:34:7a: fa:d0:64:c4:44:ff:7b:5d:ef:99:f6:97:b7:78:0b:d9:4f:75: b4:32:1f:f0:eb:5b:36:a9:de:54:92:5b:5b:dd:c8:de:e3:32: cb:1b:21:b6:56:c4:94:e2:8c:23:a4:57:f2:30:2e:56:09:45: 59:c0:a4:e3:24:d2:59:c9:0f:fe:45:02:fb:08:de:60:af:3b: 21:aa:88:bf:c5:c2:4d:63:46:f3:3b:ea:7b:01:e9:13:d5:c0: ac:7c:cc:0a:9f:25:bb:28:2f:d0:7a:d2:3b:10:eb:3a:06:00: d4:1f:de:e2:a8:87:06:bc:c4:83:cf:72:6b:b4:18:f9:d9:85: 3b:a4:97:ef:d7:bd:ce:7b:5b:e3:9e:1c:89:a9:e0:a4:ac:5f: ef:fa:38:2e:dd:02:db:ed:95:a5:f3:b7:e6:d7:26:3a:3c:be: 3d:14:87:3e:d1:d0:5e:28:7b:81:84:b5:64:e9:f3:d2:7a:bb: 2c:81:7c:ff:20:d7:53:98:3d:d0:9d:c1:78:c2:8e:e8:2e:62: 2a:e1:f4:41:03:df:4b:6e:45:32:82:9d:77:bd:0a:36:fd:e9: 30:1f:f5:03 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAO0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REFDQTcxMTAvBgNVBAUTKDAxQkIyOEZEQkUxNTVBODY2MkM1RUU2ODBDRkRGMEM5 OEQ0RUJEMUQwHhcNMjUxMDE5MDgxOTU2WhcNMjUxMDI2MDgxOTU2WjAYMRYwFAYD VQQDEw02OGY0OWYyZC0xNTNmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA76TpB5mrad0pf+0hry2c8yiuV4TzRbeTgSL+TertECbE92qN5aH0bITcf/Cx wztKFBepOo5Uon0HVj9fuAOf0enbSiFbOpbTJDMd6xu+P7MSDhqFPYfTKzVEpjuS bUogvyTuPq3QZ31+dHdLE1gcQLjaODJhoBfyx0B8U+zLPSPHgNPU2NBps5BdCvhx vLlxgAASmuqM47ZB2RKRP52Dl3aS/WxcVodmEgNLbujzUlznBgNKS/4FayYP0Xzu UMU0nv4+V43L7kOyk7l1dpKr8aWx+MWdWaVr5IKQ37kZLdoYlkSENz3iI4yxiXOo R1yxh6kGxn+W+CEuHQs2hU/ULwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFL+judM3 a1mmZ5ylo+sjEaphWygsMB8GA1UdIwQYMBaAFAG7KP2+FVqGYsXuaAz98MmNTr0d MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQUNBNy81MTdFNkU0QzQ1 QjIxMUVGQTVERjZEMTlDNEY5QUUwMi9BYnNvX2I0VldvWml4ZTVvRFAzd3lZMU92 UjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0Fic29fYjRWV29aaXhlNW9EUDN3eVkxT3ZSMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE QUNBNy81MTdFNkU0QzQ1QjIxMUVGQTVERjZEMTlDNEY5QUUwMi9BYnNvX2I0Vldv Wml4ZTVvRFAzd3lZMU92UjAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA68E2ZcKuR+b9+rvyCOQwZNEYE/wB1kvjnIIMFSiGMqfIlNHr60GTE RP97Xe+Z9pe3eAvZT3W0Mh/w61s2qd5Ukltb3cje4zLLGyG2VsSU4owjpFfyMC5W CUVZwKTjJNJZyQ/+RQL7CN5grzshqoi/xcJNY0bzO+p7AekT1cCsfMwKnyW7KC/Q etI7EOs6BgDUH97iqIcGvMSDz3JrtBj52YU7pJfv173Oe1vjnhyJqeCkrF/v+jgu 3QLb7ZWl87fm1yY6PL49FIc+0dBeKHuBhLVk6fPSerssgXz/INdTmD3QncF4wo7o LmIq4fRBA99LbkUygp13vQo2/ekwH/UD -----END CERTIFICATE-----Generated at Tue Oct 21 00:03:54 2025 by rpki-client