$ rpki-client -vvf rpki.apnic.net/member_repository/A91D3F8E/6C4089BA216C11EEB28BF24CC4F9AE02/1ABRvI3aYMky7gd2mrhnvvqNQvY.mft File: 1ABRvI3aYMky7gd2mrhnvvqNQvY.mft (raw, json) Hash identifier: x/m4LBaUeQxeGNhoNde04rYGWfgNcH5aepRLfRc1lfc= Subject key identifier: 52:33:AD:5D:84:BD:DE:5C:7F:22:D4:78:1B:92:01:4B:94:82:13:D2 Authority key identifier: D4:00:51:BC:8D:DA:60:C9:32:EE:07:76:9A:B8:67:BE:FA:8D:42:F6 Certificate issuer: /CN=A91D3F8E/serialNumber=D40051BC8DDA60C932EE07769AB867BEFA8D42F6 Certificate serial: 01F7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1ABRvI3aYMky7gd2mrhnvvqNQvY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D3F8E/6C4089BA216C11EEB28BF24CC4F9AE02/1ABRvI3aYMky7gd2mrhnvvqNQvY.mft Manifest number: 01D6 Signing time: Mon 03 Nov 2025 03:07:58 +0000 Manifest this update: Mon 03 Nov 2025 03:07:58 +0000 Manifest next update: Mon 10 Nov 2025 03:07:58 +0000 Files and hashes: 1: 1ABRvI3aYMky7gd2mrhnvvqNQvY.crl (hash: oiZ3GsJf54jbcFtJEG0rRhGqF7ymU2M2tFgvGLMImwU=) 2: F8B64B2A97BB11EF9D4C9647C4F9AE02.roa (hash: pyGqakx6aToXl1NPvkP6t5S+uv8P5F7PIid49DfaOVg=) 3: C0E3BC02B8B611EFBD4C6F4AC4F9AE02.roa (hash: iK6flRTT/R1NX18TACntkfKJoThokFSeTRkG+bdqrmA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D3F8E/6C4089BA216C11EEB28BF24CC4F9AE02/1ABRvI3aYMky7gd2mrhnvvqNQvY.crl rsync://rpki.apnic.net/member_repository/A91D3F8E/6C4089BA216C11EEB28BF24CC4F9AE02/1ABRvI3aYMky7gd2mrhnvvqNQvY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1ABRvI3aYMky7gd2mrhnvvqNQvY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 03:07:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 503 (0x1f7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D3F8E, serialNumber=D40051BC8DDA60C932EE07769AB867BEFA8D42F6 Validity Not Before: Nov 3 03:07:58 2025 GMT Not After : Nov 10 03:07:58 2025 GMT Subject: CN=69081c8e-9dc1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:97:7f:88:23:7b:51:03:30:0a:c5:81:58:4a: 45:4f:2c:2f:d5:39:bd:29:75:32:95:50:47:9a:f9: 77:f9:96:3d:cd:c3:cf:44:ef:5f:1f:a3:4b:28:20: d9:4d:e2:c7:46:c6:4e:f7:1f:47:45:36:fb:f6:29: 2b:34:c5:5c:df:28:20:01:55:62:eb:bc:e2:5e:3a: 36:63:9b:c6:3b:5b:b9:e7:18:62:e6:b7:a4:cd:d1: 4d:5c:66:dd:df:a0:3d:43:08:52:27:f4:66:16:a9: 7f:cf:51:bb:ea:c7:56:5a:c5:c0:c0:42:50:3f:91: 39:a1:0b:bd:ee:88:fa:cf:33:bd:42:e3:7e:a0:09: e4:80:df:38:da:80:c6:bc:46:2a:5d:06:0c:10:fc: 37:52:0f:ff:17:12:8a:29:53:1d:4c:e5:ee:7a:36: ff:e9:ac:9d:24:2e:2f:d1:f6:c3:37:4b:a0:a2:99: 83:4a:79:c3:95:0b:f3:2b:80:bc:9d:bc:9f:26:d7: 77:65:91:a5:bb:0c:6d:89:f2:2d:de:0a:8f:fd:a1: d7:a1:82:e8:4c:26:ee:dc:41:58:36:6a:18:24:58: 5f:c7:46:69:de:13:c2:9b:3c:2c:5e:ee:79:d9:1d: 0a:2a:3b:23:5c:84:7d:3c:77:77:6f:68:54:ff:37: fc:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:33:AD:5D:84:BD:DE:5C:7F:22:D4:78:1B:92:01:4B:94:82:13:D2 X509v3 Authority Key Identifier: keyid:D4:00:51:BC:8D:DA:60:C9:32:EE:07:76:9A:B8:67:BE:FA:8D:42:F6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D3F8E/6C4089BA216C11EEB28BF24CC4F9AE02/1ABRvI3aYMky7gd2mrhnvvqNQvY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1ABRvI3aYMky7gd2mrhnvvqNQvY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D3F8E/6C4089BA216C11EEB28BF24CC4F9AE02/1ABRvI3aYMky7gd2mrhnvvqNQvY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a8:01:d7:70:6c:d4:6d:1b:a0:f1:a2:7f:2d:71:5a:b0:9a:93: d1:fd:bc:f8:5a:e7:e9:53:b4:23:1c:08:cf:ac:ab:63:bc:47: 84:54:44:43:36:2c:a5:07:c2:23:27:18:13:1e:9a:7b:1c:cf: 26:3f:22:da:c7:d9:0c:77:77:3d:29:d6:ba:c9:6a:74:a9:76: 24:7e:4c:30:b4:56:a6:b4:7e:58:a4:6a:e6:18:da:68:1b:11: 5f:1e:6f:94:1b:58:5d:c0:73:89:17:22:c5:d3:ff:b4:1a:9a: ed:11:fd:3c:68:0e:5e:f3:e7:3d:19:fb:ae:c0:6b:71:be:dd: cc:04:36:6b:62:bc:2f:dc:72:01:d2:55:67:68:28:55:b5:84: 17:71:88:8b:ac:71:db:5b:cc:8a:a9:c1:a5:b5:76:6e:f2:50: 25:54:7e:7a:0d:e2:42:d7:93:4f:f5:2c:43:12:3e:87:f3:27: 28:ef:a4:0c:af:3b:d2:52:59:23:02:01:14:70:10:4d:ad:27: 8d:bc:61:b0:b9:cd:14:5f:93:92:18:d8:40:86:b4:79:a4:72: 50:21:94:74:16:53:30:b9:52:5c:06:fb:77:a3:26:42:77:38: fb:2f:9b:ac:50:ae:79:bf:5e:fb:ac:68:94:59:8a:34:2d:24: 45:36:18:34 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAfcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDNGOEUxMTAvBgNVBAUTKEQ0MDA1MUJDOEREQTYwQzkzMkVFMDc3NjlBQjg2N0JF RkE4RDQyRjYwHhcNMjUxMTAzMDMwNzU4WhcNMjUxMTEwMDMwNzU4WjAYMRYwFAYD VQQDEw02OTA4MWM4ZS05ZGMxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4pd/iCN7UQMwCsWBWEpFTywv1Tm9KXUylVBHmvl3+ZY9zcPPRO9fH6NLKCDZ TeLHRsZO9x9HRTb79ikrNMVc3yggAVVi67ziXjo2Y5vGO1u55xhi5rekzdFNXGbd 36A9QwhSJ/RmFql/z1G76sdWWsXAwEJQP5E5oQu97oj6zzO9QuN+oAnkgN842oDG vEYqXQYMEPw3Ug//FxKKKVMdTOXuejb/6aydJC4v0fbDN0ugopmDSnnDlQvzK4C8 nbyfJtd3ZZGluwxtifIt3gqP/aHXoYLoTCbu3EFYNmoYJFhfx0Zp3hPCmzwsXu55 2R0KKjsjXIR9PHd3b2hU/zf89wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFIzrV2E vd5cfyLUeBuSAUuUghPSMB8GA1UdIwQYMBaAFNQAUbyN2mDJMu4Hdpq4Z776jUL2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEM0Y4RS82QzQwODlCQTIx NkMxMUVFQjI4QkYyNENDNEY5QUUwMi8xQUJSdkkzYVlNa3k3Z2QybXJobnZ2cU5R dlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzFBQlJ2STNhWU1reTdnZDJtcmhudnZxTlF2WS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE M0Y4RS82QzQwODlCQTIxNkMxMUVFQjI4QkYyNENDNEY5QUUwMi8xQUJSdkkzYVlN a3k3Z2QybXJobnZ2cU5RdlkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCoAddwbNRtG6Dxon8tcVqwmpPR/bz4WufpU7QjHAjPrKtjvEeEVERD NiylB8IjJxgTHpp7HM8mPyLax9kMd3c9Kda6yWp0qXYkfkwwtFamtH5YpGrmGNpo GxFfHm+UG1hdwHOJFyLF0/+0GprtEf08aA5e8+c9GfuuwGtxvt3MBDZrYrwv3HIB 0lVnaChVtYQXcYiLrHHbW8yKqcGltXZu8lAlVH56DeJC15NP9SxDEj6H8yco76QM rzvSUlkjAgEUcBBNrSeNvGGwuc0UX5OSGNhAhrR5pHJQIZR0FlMwuVJcBvt3oyZC dzj7L5usUK55v177rGiUWYo0LSRFNhg0 -----END CERTIFICATE-----Generated at Tue Nov 4 22:20:54 2025 by rpki-client