$ rpki-client -vvf rpki.apnic.net/member_repository/A91FD292/D1619A646CC511EAA8359953C4F9AE02/-AbfRcmATdTJ0eUsYuDig8D4DFM.mft File: -AbfRcmATdTJ0eUsYuDig8D4DFM.mft (raw, json) Hash identifier: FsLKw2qmIjiy0ScdciWHEsDgYmmc9hVikYbDC856Lpg= Subject key identifier: 96:76:B4:2C:5E:EE:EC:78:F4:F5:DE:7C:DA:4E:EE:80:16:CB:1D:1E Authority key identifier: F8:06:DF:45:C9:80:4D:D4:C9:D1:E5:2C:62:E0:E2:83:C0:F8:0C:53 Certificate issuer: /CN=A91FD292/serialNumber=F806DF45C9804DD4C9D1E52C62E0E283C0F80C53 Certificate serial: 0A6F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-AbfRcmATdTJ0eUsYuDig8D4DFM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FD292/D1619A646CC511EAA8359953C4F9AE02/-AbfRcmATdTJ0eUsYuDig8D4DFM.mft Manifest number: 0A6F Signing time: Sat 18 Oct 2025 20:35:25 +0000 Manifest this update: Sat 18 Oct 2025 20:35:24 +0000 Manifest next update: Sat 25 Oct 2025 20:35:24 +0000 Files and hashes: 1: -AbfRcmATdTJ0eUsYuDig8D4DFM.crl (hash: si0q5nxBOHH/rVkSmvIEQ+cbx80PR+Co4+cmHxOcot8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FD292/D1619A646CC511EAA8359953C4F9AE02/-AbfRcmATdTJ0eUsYuDig8D4DFM.crl rsync://rpki.apnic.net/member_repository/A91FD292/D1619A646CC511EAA8359953C4F9AE02/-AbfRcmATdTJ0eUsYuDig8D4DFM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-AbfRcmATdTJ0eUsYuDig8D4DFM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 20:35:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2671 (0xa6f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FD292, serialNumber=F806DF45C9804DD4C9D1E52C62E0E283C0F80C53 Validity Not Before: Oct 18 20:35:24 2025 GMT Not After : Oct 25 20:35:24 2025 GMT Subject: CN=68f3fa0c-bf75 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:2c:2c:56:f8:da:2c:b6:04:8b:26:b4:55:d9: 6b:87:95:c5:3f:03:b3:1f:b4:5a:4c:4a:ec:e9:07: af:92:8d:b8:98:bf:f5:6e:da:6a:c2:44:31:d4:da: 7a:f8:40:d0:a8:29:a0:8a:e1:40:80:c1:00:94:bd: 71:9c:34:1c:e1:a9:0c:e6:75:fb:c5:c7:5e:09:b2: 87:1e:2d:e2:89:a7:6b:4f:af:58:6d:5b:fc:38:10: cc:a0:a5:99:3f:4f:7e:18:a2:29:cd:f3:4d:0e:8c: 06:16:9e:51:e8:12:ab:4a:d4:44:06:67:ad:b6:c3: 9f:27:b3:68:c4:e5:9f:a0:ea:cd:af:1d:0a:84:7a: a6:e7:da:e4:3b:57:31:46:cf:2f:76:e8:47:03:dd: 71:e2:62:54:17:15:2e:33:e8:f9:fc:f4:e6:c4:01: c7:e3:d5:8f:ce:d4:bb:04:b5:43:23:4f:4a:68:0b: bb:a2:dd:ed:06:14:6b:3f:22:e4:c3:1c:1f:b0:3f: da:bc:32:9c:71:ad:56:88:82:07:14:a0:c8:6d:bd: d8:e1:f4:37:05:77:d8:da:c4:0a:d9:20:da:b9:f7: 25:d9:58:93:5e:87:60:83:25:98:95:91:6c:5f:c6: 24:7d:b9:70:30:99:69:17:67:7c:1b:4e:dd:36:7c: fd:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:76:B4:2C:5E:EE:EC:78:F4:F5:DE:7C:DA:4E:EE:80:16:CB:1D:1E X509v3 Authority Key Identifier: keyid:F8:06:DF:45:C9:80:4D:D4:C9:D1:E5:2C:62:E0:E2:83:C0:F8:0C:53 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FD292/D1619A646CC511EAA8359953C4F9AE02/-AbfRcmATdTJ0eUsYuDig8D4DFM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-AbfRcmATdTJ0eUsYuDig8D4DFM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FD292/D1619A646CC511EAA8359953C4F9AE02/-AbfRcmATdTJ0eUsYuDig8D4DFM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8d:91:fd:39:c4:28:21:4e:47:55:4f:b8:35:bc:e3:55:b3:fe: c4:48:a9:92:cf:09:79:db:bb:dd:43:d6:d3:31:51:5a:18:8a: a7:47:6d:a7:9a:e7:0d:a2:a4:ec:40:2f:cf:6b:da:fd:86:39: ab:cd:ae:23:a7:0f:6a:fa:84:5e:52:49:73:59:3e:1b:b0:ef: 66:90:d9:60:07:f5:ee:a9:ec:7a:ef:81:f3:2c:4f:e0:cc:17: 86:28:65:91:22:c5:e0:2f:a4:75:19:f2:02:46:9e:b2:0c:59: b8:d3:3b:52:c7:e1:53:fe:2e:5b:65:27:36:3b:59:46:7e:71: 77:3f:77:05:41:a6:b7:78:0b:d0:d3:d4:96:15:e3:1a:fd:09: 9f:d2:24:bc:ca:70:c3:73:47:09:02:d9:98:23:3b:05:36:43: 64:72:b8:5f:24:4a:bf:af:eb:23:8e:96:39:5a:43:c8:b3:e0: d9:b5:87:6e:75:3b:a1:96:4b:3e:98:18:f2:4b:bd:8e:30:e7: 66:bf:e6:67:a2:e4:5b:cc:56:c8:66:0a:79:1a:08:66:02:1a: 8e:39:ab:43:67:6d:de:19:16:d3:28:b1:7f:a4:48:ae:42:88: ca:80:9b:7e:72:9f:88:1e:07:cf:4d:11:07:5b:80:b6:99:7b: 0f:00:b0:b6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCm8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkQyOTIxMTAvBgNVBAUTKEY4MDZERjQ1Qzk4MDRERDRDOUQxRTUyQzYyRTBFMjgz QzBGODBDNTMwHhcNMjUxMDE4MjAzNTI0WhcNMjUxMDI1MjAzNTI0WjAYMRYwFAYD VQQDEw02OGYzZmEwYy1iZjc1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApywsVvjaLLYEiya0Vdlrh5XFPwOzH7RaTErs6Qevko24mL/1btpqwkQx1Np6 +EDQqCmgiuFAgMEAlL1xnDQc4akM5nX7xcdeCbKHHi3iiadrT69YbVv8OBDMoKWZ P09+GKIpzfNNDowGFp5R6BKrStREBmettsOfJ7NoxOWfoOrNrx0KhHqm59rkO1cx Rs8vduhHA91x4mJUFxUuM+j5/PTmxAHH49WPztS7BLVDI09KaAu7ot3tBhRrPyLk wxwfsD/avDKcca1WiIIHFKDIbb3Y4fQ3BXfY2sQK2SDaufcl2ViTXodggyWYlZFs X8YkfblwMJlpF2d8G07dNnz91wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJZ2tCxe 7ux49PXefNpO7oAWyx0eMB8GA1UdIwQYMBaAFPgG30XJgE3UydHlLGLg4oPA+AxT MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGRDI5Mi9EMTYxOUE2NDZD QzUxMUVBQTgzNTk5NTNDNEY5QUUwMi8tQWJmUmNtQVRkVEowZVVzWXVEaWc4RDRE Rk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy1BYmZSY21BVGRUSjBlVXNZdURpZzhENERGTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG RDI5Mi9EMTYxOUE2NDZDQzUxMUVBQTgzNTk5NTNDNEY5QUUwMi8tQWJmUmNtQVRk VEowZVVzWXVEaWc4RDRERk0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCNkf05xCghTkdVT7g1vONVs/7ESKmSzwl527vdQ9bTMVFaGIqnR22n mucNoqTsQC/Pa9r9hjmrza4jpw9q+oReUklzWT4bsO9mkNlgB/Xuqex674HzLE/g zBeGKGWRIsXgL6R1GfICRp6yDFm40ztSx+FT/i5bZSc2O1lGfnF3P3cFQaa3eAvQ 09SWFeMa/Qmf0iS8ynDDc0cJAtmYIzsFNkNkcrhfJEq/r+sjjpY5WkPIs+DZtYdu dTuhlks+mBjyS72OMOdmv+ZnouRbzFbIZgp5GghmAhqOOatDZ23eGRbTKLF/pEiu QojKgJt+cp+IHgfPTREHW4C2mXsPALC2 -----END CERTIFICATE-----Generated at Mon Oct 20 12:40:36 2025 by rpki-client