$ rpki-client -vvf rpki.apnic.net/member_repository/A91CC564/4F29D0C4C40F11EA9C15B470C4F9AE02/ABXboDjLzLFS7RcROqCo1ddIjSE.mft File: ABXboDjLzLFS7RcROqCo1ddIjSE.mft (raw, json) Hash identifier: R7UxTH4CD2sLxfCndB8ay8bB9DVo9Uur0O/4uqeE2G8= Subject key identifier: 40:53:CD:B9:0A:1D:58:7F:66:E3:4E:13:22:92:9A:22:47:A4:FB:C5 Authority key identifier: 00:15:DB:A0:38:CB:CC:B1:52:ED:17:11:3A:A0:A8:D5:D7:48:8D:21 Certificate issuer: /CN=A91CC564/serialNumber=0015DBA038CBCCB152ED17113AA0A8D5D7488D21 Certificate serial: 08CA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ABXboDjLzLFS7RcROqCo1ddIjSE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CC564/4F29D0C4C40F11EA9C15B470C4F9AE02/ABXboDjLzLFS7RcROqCo1ddIjSE.mft Manifest number: 08C3 Signing time: Sun 02 Nov 2025 20:25:00 +0000 Manifest this update: Sun 02 Nov 2025 20:25:00 +0000 Manifest next update: Sun 09 Nov 2025 20:25:00 +0000 Files and hashes: 1: ABXboDjLzLFS7RcROqCo1ddIjSE.crl (hash: iLAMYFz+PbP4XY5TrWVA2JQnQSq+6CaHo/58mXy0fZw=) 2: 74CCA13ADBE811EA8D063B7DC4F9AE02.roa (hash: Zy35shBaA7kL0uiX8MFYVjG3k67WMwjlOa39yPU2npo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CC564/4F29D0C4C40F11EA9C15B470C4F9AE02/ABXboDjLzLFS7RcROqCo1ddIjSE.crl rsync://rpki.apnic.net/member_repository/A91CC564/4F29D0C4C40F11EA9C15B470C4F9AE02/ABXboDjLzLFS7RcROqCo1ddIjSE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ABXboDjLzLFS7RcROqCo1ddIjSE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 20:24:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2250 (0x8ca) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CC564, serialNumber=0015DBA038CBCCB152ED17113AA0A8D5D7488D21 Validity Not Before: Nov 2 20:25:00 2025 GMT Not After : Nov 9 20:25:00 2025 GMT Subject: CN=6907be1c-6e32 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:1e:10:4b:c8:29:e4:b0:d9:5a:bb:8b:08:e3: f2:3c:b6:bc:ef:a2:52:b4:7b:cc:a0:ed:5f:69:c8: 06:ef:5b:40:0c:79:da:e7:e7:2f:4f:26:de:35:19: 9b:42:c1:d5:05:4f:c7:5a:c0:e6:bf:76:56:ae:91: 54:e3:44:1e:f5:dd:f2:42:02:56:80:63:78:28:d2: ef:da:91:97:4b:e7:61:79:e3:10:62:25:4e:9d:7e: cb:42:38:4c:8e:b9:3a:a7:8c:e6:aa:60:0e:16:d4: cc:e0:7f:91:06:12:b2:08:4c:8a:e0:4a:a2:0e:20: d8:b3:d9:ab:d6:2b:78:ed:67:87:de:0b:4a:97:f1: b2:6d:e2:58:a8:fb:15:c7:b7:71:f6:dc:47:b7:45: b4:e5:ad:48:e0:bc:36:9d:80:39:c2:5c:bd:34:3c: a6:19:b3:e8:b9:b9:95:9e:c3:8e:8c:54:bb:d9:da: 1b:22:6c:e2:c5:57:2c:46:27:86:53:19:a3:ad:04: c4:d4:3b:9b:f2:87:bf:6e:21:ea:19:86:06:c3:e5: 40:fb:4b:e4:ca:b9:00:73:57:af:f5:73:d2:15:41: 6c:c2:60:c5:1f:c4:6b:9f:1e:5c:79:e6:bb:92:45: 99:9d:8b:db:f8:43:fa:4c:50:c0:78:13:c9:09:5c: 90:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:53:CD:B9:0A:1D:58:7F:66:E3:4E:13:22:92:9A:22:47:A4:FB:C5 X509v3 Authority Key Identifier: keyid:00:15:DB:A0:38:CB:CC:B1:52:ED:17:11:3A:A0:A8:D5:D7:48:8D:21 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CC564/4F29D0C4C40F11EA9C15B470C4F9AE02/ABXboDjLzLFS7RcROqCo1ddIjSE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ABXboDjLzLFS7RcROqCo1ddIjSE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CC564/4F29D0C4C40F11EA9C15B470C4F9AE02/ABXboDjLzLFS7RcROqCo1ddIjSE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b2:ea:38:5f:bc:86:37:74:9c:b5:07:1f:bd:1a:a1:76:33:8d: da:26:2f:7d:64:16:32:2d:77:00:d5:0d:d8:fe:46:2d:bb:4b: 3f:db:cb:2a:c5:e0:f8:eb:e7:ba:1a:85:fb:71:76:6b:63:92: 25:92:3d:3c:aa:ae:d1:05:60:1a:3c:91:5d:21:2a:58:76:0f: d1:13:87:40:fe:e9:e4:05:9e:6a:82:d2:7a:41:82:c2:e5:0f: ac:5e:c4:58:13:2b:33:95:0c:f2:32:1d:b4:f8:8f:e8:36:f7: 39:49:b8:67:55:30:4d:38:0c:f8:fd:e2:16:be:b5:d5:99:a5: fa:fe:ed:37:2e:2b:a8:8d:09:17:85:61:00:88:b8:81:aa:c6: 92:8d:4c:34:26:95:79:d0:3e:ff:16:aa:1b:fb:3f:1d:7e:58: 01:89:2f:9c:45:5a:a1:15:ad:ed:79:a9:97:51:ae:62:3f:10: 93:00:74:0d:9a:47:0e:cf:4e:47:a6:bb:7f:12:05:d0:ca:be: 0e:d4:cf:10:18:68:a3:0b:3c:0e:95:fc:11:91:94:59:d4:de: 08:1d:34:8b:4c:a8:41:5b:e8:dc:c9:d4:ae:4a:ed:50:c9:e0: bf:1d:6c:50:ce:15:d8:eb:eb:39:f3:5c:a3:6b:79:7e:da:35: 4c:33:9a:7f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCMowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0M1NjQxMTAvBgNVBAUTKDAwMTVEQkEwMzhDQkNDQjE1MkVEMTcxMTNBQTBBOEQ1 RDc0ODhEMjEwHhcNMjUxMTAyMjAyNTAwWhcNMjUxMTA5MjAyNTAwWjAYMRYwFAYD VQQDEw02OTA3YmUxYy02ZTMyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3x4QS8gp5LDZWruLCOPyPLa876JStHvMoO1facgG71tADHna5+cvTybeNRmb QsHVBU/HWsDmv3ZWrpFU40Qe9d3yQgJWgGN4KNLv2pGXS+dheeMQYiVOnX7LQjhM jrk6p4zmqmAOFtTM4H+RBhKyCEyK4EqiDiDYs9mr1it47WeH3gtKl/GybeJYqPsV x7dx9txHt0W05a1I4Lw2nYA5wly9NDymGbPoubmVnsOOjFS72dobImzixVcsRieG UxmjrQTE1Dub8oe/biHqGYYGw+VA+0vkyrkAc1ev9XPSFUFswmDFH8Rrnx5ceea7 kkWZnYvb+EP6TFDAeBPJCVyQMwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEBTzbkK HVh/ZuNOEyKSmiJHpPvFMB8GA1UdIwQYMBaAFAAV26A4y8yxUu0XETqgqNXXSI0h MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQzU2NC80RjI5RDBDNEM0 MEYxMUVBOUMxNUI0NzBDNEY5QUUwMi9BQlhib0RqTHpMRlM3UmNST3FDbzFkZElq U0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0FCWGJvRGpMekxGUzdSY1JPcUNvMWRkSWpTRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD QzU2NC80RjI5RDBDNEM0MEYxMUVBOUMxNUI0NzBDNEY5QUUwMi9BQlhib0RqTHpM RlM3UmNST3FDbzFkZElqU0UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCy6jhfvIY3dJy1Bx+9GqF2M43aJi99ZBYyLXcA1Q3Y/kYtu0s/28sq xeD46+e6GoX7cXZrY5Ilkj08qq7RBWAaPJFdISpYdg/RE4dA/unkBZ5qgtJ6QYLC 5Q+sXsRYEyszlQzyMh20+I/oNvc5SbhnVTBNOAz4/eIWvrXVmaX6/u03LiuojQkX hWEAiLiBqsaSjUw0JpV50D7/Fqob+z8dflgBiS+cRVqhFa3teamXUa5iPxCTAHQN mkcOz05Hprt/EgXQyr4O1M8QGGijCzwOlfwRkZRZ1N4IHTSLTKhBW+jcydSuSu1Q yeC/HWxQzhXY6+s581yja3l+2jVMM5p/ -----END CERTIFICATE-----Generated at Tue Nov 4 12:42:17 2025 by rpki-client