$ rpki-client -vvf rpki.apnic.net/member_repository/A91DACA7/517E6E4C45B211EFA5DF6D19C4F9AE02/Abso_b4VWoZixe5oDP3wyY1OvR0.mft File: Abso_b4VWoZixe5oDP3wyY1OvR0.mft (raw, json) Hash identifier: lR2fznnPRMG/6q1gwsX8OS35IzabFct3ty9jl/NSExk= Subject key identifier: 0F:9D:64:B5:00:56:AF:3C:4D:21:46:E9:1B:B9:6F:6A:E6:C5:8C:12 Authority key identifier: 01:BB:28:FD:BE:15:5A:86:62:C5:EE:68:0C:FD:F0:C9:8D:4E:BD:1D Certificate issuer: /CN=A91DACA7/serialNumber=01BB28FDBE155A8662C5EE680CFDF0C98D4EBD1D Certificate serial: D0 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Abso_b4VWoZixe5oDP3wyY1OvR0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DACA7/517E6E4C45B211EFA5DF6D19C4F9AE02/Abso_b4VWoZixe5oDP3wyY1OvR0.mft Manifest number: CE Signing time: Sat 23 Aug 2025 05:51:12 +0000 Manifest this update: Sat 23 Aug 2025 05:51:12 +0000 Manifest next update: Sat 30 Aug 2025 05:51:12 +0000 Files and hashes: 1: Abso_b4VWoZixe5oDP3wyY1OvR0.crl (hash: d8OMOpmcUrr/2qtmwRQ9bc4iXHXuKjpRewEdbVMBhmI=) 2: ECB0C56845B211EFBCC09A1AC4F9AE02.roa (hash: EGPY/0B+FhNPcxx4yI5SHvTWW9NTcAbNHzvZ84arIm4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DACA7/517E6E4C45B211EFA5DF6D19C4F9AE02/Abso_b4VWoZixe5oDP3wyY1OvR0.crl rsync://rpki.apnic.net/member_repository/A91DACA7/517E6E4C45B211EFA5DF6D19C4F9AE02/Abso_b4VWoZixe5oDP3wyY1OvR0.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Abso_b4VWoZixe5oDP3wyY1OvR0.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 05:51:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 208 (0xd0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DACA7, serialNumber=01BB28FDBE155A8662C5EE680CFDF0C98D4EBD1D Validity Not Before: Aug 23 05:51:12 2025 GMT Not After : Aug 30 05:51:12 2025 GMT Subject: CN=68a956d0-82cc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:36:21:53:53:76:d5:0f:c8:76:4b:92:54:6d: 67:17:c5:8e:e4:b4:74:e6:d3:c6:06:d7:23:9b:d7: 36:75:7a:55:d4:f5:0b:49:15:9b:5f:38:71:20:80: f2:91:07:d1:16:fa:ce:50:3d:a3:bf:37:ae:61:9a: 24:8f:7d:7c:91:dd:8f:ea:33:c6:e3:3f:7b:c9:ae: 35:2d:ad:d6:ae:40:9e:c8:80:6d:eb:ab:9f:1d:bf: 3a:c8:a0:ca:6e:a3:c3:f8:5a:09:6d:de:9a:21:75: e7:fd:25:0f:44:28:fa:17:a9:8b:dc:de:30:6b:c4: 74:ce:f4:9c:9f:23:c9:dd:ba:c3:36:7c:99:1b:f3: 65:1b:90:e3:2a:71:95:33:ae:9b:83:aa:92:e7:b0: ad:c3:13:dd:43:e6:a4:55:77:66:c9:95:55:35:fc: 45:7d:2b:a2:3c:b0:f3:72:7b:6a:60:bb:51:ec:07: af:3c:9d:ca:89:50:6a:62:84:fd:77:b9:d7:74:27: c9:80:57:bf:df:b1:f8:db:df:b0:0b:6c:64:a5:63: b0:e8:57:a6:34:47:7e:14:ca:7b:aa:c5:46:f0:b0: 78:34:5f:29:ea:ef:39:41:57:ed:27:16:db:05:ab: 6f:1f:0e:d0:9b:4e:fc:13:6e:cc:2f:c0:c8:53:a6: a5:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:9D:64:B5:00:56:AF:3C:4D:21:46:E9:1B:B9:6F:6A:E6:C5:8C:12 X509v3 Authority Key Identifier: keyid:01:BB:28:FD:BE:15:5A:86:62:C5:EE:68:0C:FD:F0:C9:8D:4E:BD:1D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DACA7/517E6E4C45B211EFA5DF6D19C4F9AE02/Abso_b4VWoZixe5oDP3wyY1OvR0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Abso_b4VWoZixe5oDP3wyY1OvR0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DACA7/517E6E4C45B211EFA5DF6D19C4F9AE02/Abso_b4VWoZixe5oDP3wyY1OvR0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9f:9f:7c:2c:10:32:11:74:5b:0f:cf:5d:4f:c9:d5:e7:95:eb: 64:fc:d3:6a:ff:55:e6:4e:5e:64:c0:23:1b:ce:0e:d4:81:93: 77:d9:a8:6e:53:7b:d3:c4:c3:1b:08:ed:65:9d:84:18:d2:03: b0:f9:75:74:41:a4:2e:5c:c0:e8:c0:29:39:4c:88:38:f7:92: 0d:9f:b6:cf:f1:42:24:21:70:85:a1:9c:68:4e:34:02:d8:f1: ea:8b:97:ce:5a:9d:a2:40:7f:a2:f3:d0:0f:08:ee:a4:a5:55: 80:23:30:c8:f6:40:cd:af:cd:87:99:58:c0:5b:71:88:64:dc: 75:8e:34:70:53:42:ab:01:eb:52:18:7c:28:10:21:b7:d3:5c: 8a:2c:ba:fd:fd:71:bd:91:46:be:5b:ed:1a:d8:aa:16:ac:55: 22:11:49:19:b8:72:86:d9:64:ae:dc:6a:68:7b:8f:56:30:c9: 4a:3c:38:01:f0:e5:56:e1:f7:8d:07:1f:59:fb:a9:a7:0f:c8: db:58:67:9a:2a:52:28:24:65:4f:09:25:fd:ff:c1:dd:7e:e5: 01:4d:e2:54:f7:97:e9:19:ff:6d:c1:03:ab:44:41:1e:29:de: cf:c0:d8:b3:69:5d:ac:4b:1d:9b:3b:3f:97:e2:1d:61:f6:f2: 14:3c:ba:69 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICANAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REFDQTcxMTAvBgNVBAUTKDAxQkIyOEZEQkUxNTVBODY2MkM1RUU2ODBDRkRGMEM5 OEQ0RUJEMUQwHhcNMjUwODIzMDU1MTEyWhcNMjUwODMwMDU1MTEyWjAYMRYwFAYD VQQDEw02OGE5NTZkMC04MmNjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtzYhU1N21Q/IdkuSVG1nF8WO5LR05tPGBtcjm9c2dXpV1PULSRWbXzhxIIDy kQfRFvrOUD2jvzeuYZokj318kd2P6jPG4z97ya41La3WrkCeyIBt66ufHb86yKDK bqPD+FoJbd6aIXXn/SUPRCj6F6mL3N4wa8R0zvScnyPJ3brDNnyZG/NlG5DjKnGV M66bg6qS57CtwxPdQ+akVXdmyZVVNfxFfSuiPLDzcntqYLtR7AevPJ3KiVBqYoT9 d7nXdCfJgFe/37H429+wC2xkpWOw6FemNEd+FMp7qsVG8LB4NF8p6u85QVftJxbb BatvHw7Qm078E27ML8DIU6alrQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFA+dZLUA Vq88TSFG6Ru5b2rmxYwSMB8GA1UdIwQYMBaAFAG7KP2+FVqGYsXuaAz98MmNTr0d MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQUNBNy81MTdFNkU0QzQ1 QjIxMUVGQTVERjZEMTlDNEY5QUUwMi9BYnNvX2I0VldvWml4ZTVvRFAzd3lZMU92 UjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0Fic29fYjRWV29aaXhlNW9EUDN3eVkxT3ZSMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE QUNBNy81MTdFNkU0QzQ1QjIxMUVGQTVERjZEMTlDNEY5QUUwMi9BYnNvX2I0Vldv Wml4ZTVvRFAzd3lZMU92UjAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCfn3wsEDIRdFsPz11PydXnletk/NNq/1XmTl5kwCMbzg7UgZN32ahu U3vTxMMbCO1lnYQY0gOw+XV0QaQuXMDowCk5TIg495INn7bP8UIkIXCFoZxoTjQC 2PHqi5fOWp2iQH+i89APCO6kpVWAIzDI9kDNr82HmVjAW3GIZNx1jjRwU0KrAetS GHwoECG301yKLLr9/XG9kUa+W+0a2KoWrFUiEUkZuHKG2WSu3Gpoe49WMMlKPDgB 8OVW4feNBx9Z+6mnD8jbWGeaKlIoJGVPCSX9/8HdfuUBTeJU95fpGf9twQOrREEe Kd7PwNizaV2sSx2bOz+X4h1h9vIUPLpp -----END CERTIFICATE-----Generated at Sat Aug 23 10:39:22 2025 by rpki-client