$ rpki-client -vvf rpki.apnic.net/member_repository/A91FD292/D1619A646CC511EAA8359953C4F9AE02/-AbfRcmATdTJ0eUsYuDig8D4DFM.mft File: -AbfRcmATdTJ0eUsYuDig8D4DFM.mft (raw, json) Hash identifier: 2oIJWhUGXFUVo6k9ex9mzyoL+jqd3m9syQSLvtwzC/g= Subject key identifier: 10:CB:A8:C6:C7:BD:B4:63:55:61:A0:BA:52:C9:F2:24:74:C6:D4:EC Authority key identifier: F8:06:DF:45:C9:80:4D:D4:C9:D1:E5:2C:62:E0:E2:83:C0:F8:0C:53 Certificate issuer: /CN=A91FD292/serialNumber=F806DF45C9804DD4C9D1E52C62E0E283C0F80C53 Certificate serial: 0A52 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-AbfRcmATdTJ0eUsYuDig8D4DFM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FD292/D1619A646CC511EAA8359953C4F9AE02/-AbfRcmATdTJ0eUsYuDig8D4DFM.mft Manifest number: 0A52 Signing time: Fri 22 Aug 2025 19:48:51 +0000 Manifest this update: Fri 22 Aug 2025 19:48:51 +0000 Manifest next update: Fri 29 Aug 2025 19:48:51 +0000 Files and hashes: 1: -AbfRcmATdTJ0eUsYuDig8D4DFM.crl (hash: EySzKdNBp5qEf2Oa5ou3SGMXXh6PaTDu5LRbQelU+LU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FD292/D1619A646CC511EAA8359953C4F9AE02/-AbfRcmATdTJ0eUsYuDig8D4DFM.crl rsync://rpki.apnic.net/member_repository/A91FD292/D1619A646CC511EAA8359953C4F9AE02/-AbfRcmATdTJ0eUsYuDig8D4DFM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-AbfRcmATdTJ0eUsYuDig8D4DFM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 19:48:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2642 (0xa52) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FD292, serialNumber=F806DF45C9804DD4C9D1E52C62E0E283C0F80C53 Validity Not Before: Aug 22 19:48:51 2025 GMT Not After : Aug 29 19:48:51 2025 GMT Subject: CN=68a8c9a3-e038 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:f4:10:ac:b9:d6:3d:70:b5:bb:d9:95:db:ad: 80:c7:3b:dd:cb:d2:bb:02:4e:96:f0:b0:24:01:aa: e4:7c:70:d5:95:ec:90:a1:55:b4:32:e1:5d:b5:8f: be:9c:8f:9a:59:b5:50:6f:ca:10:23:a2:7c:77:d9: ac:99:11:bd:28:47:bd:f0:ba:86:70:ee:35:5e:3e: 62:ab:1b:b5:32:c3:25:95:e4:0d:cd:16:10:5b:63: 9c:02:f5:8e:8d:e6:a0:1f:dd:56:c7:2d:28:41:82: 43:a1:5d:63:3a:68:ee:ce:35:2a:6e:cd:64:47:b2: 64:65:39:90:15:3a:b5:48:97:a7:e3:2f:ee:67:2e: f0:64:a3:39:51:b1:4f:32:dd:6e:80:25:a6:5b:23: 7a:dd:2d:67:69:d9:45:93:54:8a:da:37:50:aa:b0: fe:a6:e1:f1:25:4b:75:0d:61:b9:46:c7:6d:37:0e: ae:2a:0b:99:ab:bf:e6:c7:08:3e:42:f3:77:c2:89: 93:10:34:b7:86:45:16:5b:ea:df:31:10:a8:2e:70: 37:41:f3:16:3c:1c:c9:d8:79:79:40:9a:88:63:28: a6:cb:53:71:dc:1f:83:3c:9c:9e:ea:52:d2:a0:22: 62:8a:e0:10:9e:db:96:43:f8:c2:aa:02:89:98:8f: 15:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:CB:A8:C6:C7:BD:B4:63:55:61:A0:BA:52:C9:F2:24:74:C6:D4:EC X509v3 Authority Key Identifier: keyid:F8:06:DF:45:C9:80:4D:D4:C9:D1:E5:2C:62:E0:E2:83:C0:F8:0C:53 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FD292/D1619A646CC511EAA8359953C4F9AE02/-AbfRcmATdTJ0eUsYuDig8D4DFM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-AbfRcmATdTJ0eUsYuDig8D4DFM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FD292/D1619A646CC511EAA8359953C4F9AE02/-AbfRcmATdTJ0eUsYuDig8D4DFM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9e:c0:e4:d5:91:8f:bd:03:44:c2:44:f2:a9:83:ac:8f:80:d8: 8c:c4:ab:25:25:79:7f:46:a6:60:e5:0f:4c:36:bb:ff:99:32: a1:54:32:af:60:3b:9c:70:00:76:5e:57:bb:27:25:8f:e7:2b: e9:8a:9f:3d:ef:8c:48:69:09:f0:66:66:d1:d2:fe:15:68:9b: 5b:fe:89:3a:7d:f0:65:5b:19:44:44:43:80:6d:a7:87:ed:6e: 2c:a7:23:fc:ec:57:3a:5c:30:ad:c8:9d:06:c2:e0:83:c9:23: c0:e4:43:c8:5f:32:bf:1d:6c:e0:da:82:64:5b:bf:10:f4:d6: e9:df:d4:df:bb:fd:0e:28:50:4c:0e:34:56:13:ea:31:a0:21: c1:01:fb:c1:de:bf:29:85:b0:08:b2:d9:af:16:3e:ef:9b:56: dd:a9:3a:6f:11:aa:43:cd:60:89:a5:83:c7:3e:53:29:f7:01: 2f:ac:90:b7:d6:99:04:09:c8:a6:fd:1f:c3:96:3a:ec:b4:4d: d6:54:3d:f6:a6:8a:40:0a:cd:77:8a:fc:ff:a6:65:37:71:0e: c3:a8:2c:15:b0:a2:13:5f:a8:16:38:db:5f:60:4e:6b:de:e6: 90:99:ce:9a:1e:6d:72:91:ba:a5:c0:a6:fd:43:14:34:26:e7: f6:9d:0d:ad -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICClIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkQyOTIxMTAvBgNVBAUTKEY4MDZERjQ1Qzk4MDRERDRDOUQxRTUyQzYyRTBFMjgz QzBGODBDNTMwHhcNMjUwODIyMTk0ODUxWhcNMjUwODI5MTk0ODUxWjAYMRYwFAYD VQQDEw02OGE4YzlhMy1lMDM4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArPQQrLnWPXC1u9mV262Axzvdy9K7Ak6W8LAkAarkfHDVleyQoVW0MuFdtY++ nI+aWbVQb8oQI6J8d9msmRG9KEe98LqGcO41Xj5iqxu1MsMlleQNzRYQW2OcAvWO jeagH91Wxy0oQYJDoV1jOmjuzjUqbs1kR7JkZTmQFTq1SJen4y/uZy7wZKM5UbFP Mt1ugCWmWyN63S1nadlFk1SK2jdQqrD+puHxJUt1DWG5RsdtNw6uKguZq7/mxwg+ QvN3womTEDS3hkUWW+rfMRCoLnA3QfMWPBzJ2Hl5QJqIYyimy1Nx3B+DPJye6lLS oCJiiuAQntuWQ/jCqgKJmI8V0QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBDLqMbH vbRjVWGgulLJ8iR0xtTsMB8GA1UdIwQYMBaAFPgG30XJgE3UydHlLGLg4oPA+AxT MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGRDI5Mi9EMTYxOUE2NDZD QzUxMUVBQTgzNTk5NTNDNEY5QUUwMi8tQWJmUmNtQVRkVEowZVVzWXVEaWc4RDRE Rk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy1BYmZSY21BVGRUSjBlVXNZdURpZzhENERGTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG RDI5Mi9EMTYxOUE2NDZDQzUxMUVBQTgzNTk5NTNDNEY5QUUwMi8tQWJmUmNtQVRk VEowZVVzWXVEaWc4RDRERk0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCewOTVkY+9A0TCRPKpg6yPgNiMxKslJXl/RqZg5Q9MNrv/mTKhVDKv YDuccAB2Xle7JyWP5yvpip8974xIaQnwZmbR0v4VaJtb/ok6ffBlWxlEREOAbaeH 7W4spyP87Fc6XDCtyJ0GwuCDySPA5EPIXzK/HWzg2oJkW78Q9Nbp39Tfu/0OKFBM DjRWE+oxoCHBAfvB3r8phbAIstmvFj7vm1bdqTpvEapDzWCJpYPHPlMp9wEvrJC3 1pkECcim/R/DljrstE3WVD32popACs13ivz/pmU3cQ7DqCwVsKITX6gWONtfYE5r 3uaQmc6aHm1ykbqlwKb9QxQ0Juf2nQ2t -----END CERTIFICATE-----Generated at Sat Aug 23 17:54:31 2025 by rpki-client