$ rpki-client -vvf rpki.apnic.net/member_repository/A91FD292/D1619A646CC511EAA8359953C4F9AE02/-AbfRcmATdTJ0eUsYuDig8D4DFM.mft File: -AbfRcmATdTJ0eUsYuDig8D4DFM.mft (raw, json) Hash identifier: /sPKYT9k/8vPfyPiOZ+5ZIrDfvB80ngp+y90XM0MuuA= Subject key identifier: 64:A1:8E:8D:88:F8:0B:BE:C3:BE:8C:08:18:38:BF:75:EC:30:04:A5 Authority key identifier: F8:06:DF:45:C9:80:4D:D4:C9:D1:E5:2C:62:E0:E2:83:C0:F8:0C:53 Certificate issuer: /CN=A91FD292/serialNumber=F806DF45C9804DD4C9D1E52C62E0E283C0F80C53 Certificate serial: 0A2F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-AbfRcmATdTJ0eUsYuDig8D4DFM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FD292/D1619A646CC511EAA8359953C4F9AE02/-AbfRcmATdTJ0eUsYuDig8D4DFM.mft Manifest number: 0A2F Signing time: Sat 14 Jun 2025 19:34:30 +0000 Manifest this update: Sat 14 Jun 2025 19:34:30 +0000 Manifest next update: Sat 21 Jun 2025 19:34:30 +0000 Files and hashes: 1: -AbfRcmATdTJ0eUsYuDig8D4DFM.crl (hash: i8uWH1qUaZCkoEASHZmM9KNkjnlQFjpvMyHxgWHUTu8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FD292/D1619A646CC511EAA8359953C4F9AE02/-AbfRcmATdTJ0eUsYuDig8D4DFM.crl rsync://rpki.apnic.net/member_repository/A91FD292/D1619A646CC511EAA8359953C4F9AE02/-AbfRcmATdTJ0eUsYuDig8D4DFM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-AbfRcmATdTJ0eUsYuDig8D4DFM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Jun 2025 19:34:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2607 (0xa2f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FD292, serialNumber=F806DF45C9804DD4C9D1E52C62E0E283C0F80C53 Validity Not Before: Jun 14 19:34:30 2025 GMT Not After : Jun 21 19:34:30 2025 GMT Subject: CN=684dcec6-6775 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:19:03:3a:e9:94:64:64:22:d8:5e:cc:2d:1c: b1:d2:28:c9:bb:90:10:9f:74:84:fe:9f:0a:01:94: 75:97:cd:e1:82:d7:0c:3b:50:2c:09:28:28:6b:8f: 2a:5b:13:c1:8c:79:d2:6a:73:92:46:a7:cf:96:a7: 8b:71:3c:5d:6e:c4:6e:56:c5:23:8b:63:65:b0:70: 47:e7:b6:de:0e:5c:a6:d5:68:21:b8:74:dd:e0:e9: 8d:f0:15:3c:82:37:8c:98:79:e8:01:a3:ba:80:d4: f4:c0:ac:51:4c:c2:b5:8e:0c:2f:45:db:e7:e7:e3: 2b:b5:a3:d9:7f:87:a5:ac:a0:e8:ae:cd:e1:6e:ca: e3:4a:cc:89:d0:ac:c1:bb:0b:ef:52:c7:6e:d8:f9: fd:35:5b:0f:8e:9a:57:67:c0:3d:57:40:d8:34:33: 54:10:30:bf:87:e3:bc:6e:a7:61:0e:75:2d:fe:80: e6:82:c9:6e:51:3b:23:3f:18:0b:a7:d1:b5:5b:23: 77:53:37:b7:5a:d5:e4:ff:46:88:2d:fe:ff:39:1a: 78:b6:88:bf:ad:1f:39:75:ea:7b:5a:75:bb:39:4a: 91:ed:97:8a:f9:68:4f:fb:66:61:6c:5a:93:fb:5e: be:37:1a:d4:6a:8c:bf:84:1e:c3:f3:d8:74:f9:1e: 68:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:A1:8E:8D:88:F8:0B:BE:C3:BE:8C:08:18:38:BF:75:EC:30:04:A5 X509v3 Authority Key Identifier: keyid:F8:06:DF:45:C9:80:4D:D4:C9:D1:E5:2C:62:E0:E2:83:C0:F8:0C:53 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FD292/D1619A646CC511EAA8359953C4F9AE02/-AbfRcmATdTJ0eUsYuDig8D4DFM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-AbfRcmATdTJ0eUsYuDig8D4DFM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FD292/D1619A646CC511EAA8359953C4F9AE02/-AbfRcmATdTJ0eUsYuDig8D4DFM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4c:b2:6d:82:33:83:51:1f:b6:9f:cb:07:d3:f6:05:c5:ee:d1: 18:09:a0:aa:7a:44:8b:55:64:37:75:7d:63:a5:42:40:12:0b: e1:24:76:d2:df:74:af:12:f7:b2:87:e3:fb:a0:4e:fd:af:e5: 74:4c:04:25:e8:b2:3d:60:25:a8:6c:c2:5d:f6:83:37:31:3b: 6b:05:6d:ca:ec:e1:9e:5a:53:bb:a8:36:07:72:11:36:39:4c: 78:af:1a:39:52:83:2f:5a:a5:46:89:37:cf:ad:69:f7:cc:ae: fa:ae:01:b6:54:13:52:21:0a:a6:11:94:f9:f2:bd:e6:94:fa: c8:d7:e1:6e:cf:8a:09:3e:b2:37:b9:8f:bc:30:b7:1d:b3:13: 6a:0d:e9:00:7b:06:aa:49:a5:ba:bf:2c:e1:01:0a:b8:af:63: 85:1e:5c:8c:e4:f6:ce:7d:e2:7c:f3:fd:47:20:5c:7e:f4:df: c7:b0:09:f5:9a:39:99:64:5b:8d:be:7c:59:e0:1e:16:7e:de: a3:6e:02:f9:e1:e4:13:d5:38:83:37:a7:a7:d9:f6:9e:6f:c2: a7:c0:e5:47:fa:6c:97:b6:64:2b:f8:e6:52:aa:d1:0d:42:05: c5:9d:b1:90:df:d9:1b:7c:5d:d6:ab:9d:d4:40:07:6a:7a:f3: 19:85:ef:a8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCi8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkQyOTIxMTAvBgNVBAUTKEY4MDZERjQ1Qzk4MDRERDRDOUQxRTUyQzYyRTBFMjgz QzBGODBDNTMwHhcNMjUwNjE0MTkzNDMwWhcNMjUwNjIxMTkzNDMwWjAYMRYwFAYD VQQDEw02ODRkY2VjNi02Nzc1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAthkDOumUZGQi2F7MLRyx0ijJu5AQn3SE/p8KAZR1l83hgtcMO1AsCSgoa48q WxPBjHnSanOSRqfPlqeLcTxdbsRuVsUji2NlsHBH57beDlym1WghuHTd4OmN8BU8 gjeMmHnoAaO6gNT0wKxRTMK1jgwvRdvn5+MrtaPZf4elrKDors3hbsrjSsyJ0KzB uwvvUsdu2Pn9NVsPjppXZ8A9V0DYNDNUEDC/h+O8bqdhDnUt/oDmgsluUTsjPxgL p9G1WyN3Uze3WtXk/0aILf7/ORp4toi/rR85dep7WnW7OUqR7ZeK+WhP+2ZhbFqT +16+NxrUaoy/hB7D89h0+R5obwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGShjo2I +Au+w76MCBg4v3XsMASlMB8GA1UdIwQYMBaAFPgG30XJgE3UydHlLGLg4oPA+AxT MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGRDI5Mi9EMTYxOUE2NDZD QzUxMUVBQTgzNTk5NTNDNEY5QUUwMi8tQWJmUmNtQVRkVEowZVVzWXVEaWc4RDRE Rk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy1BYmZSY21BVGRUSjBlVXNZdURpZzhENERGTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG RDI5Mi9EMTYxOUE2NDZDQzUxMUVBQTgzNTk5NTNDNEY5QUUwMi8tQWJmUmNtQVRk VEowZVVzWXVEaWc4RDRERk0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBMsm2CM4NRH7afywfT9gXF7tEYCaCqekSLVWQ3dX1jpUJAEgvhJHbS 33SvEveyh+P7oE79r+V0TAQl6LI9YCWobMJd9oM3MTtrBW3K7OGeWlO7qDYHchE2 OUx4rxo5UoMvWqVGiTfPrWn3zK76rgG2VBNSIQqmEZT58r3mlPrI1+Fuz4oJPrI3 uY+8MLcdsxNqDekAewaqSaW6vyzhAQq4r2OFHlyM5PbOfeJ88/1HIFx+9N/HsAn1 mjmZZFuNvnxZ4B4Wft6jbgL54eQT1TiDN6en2faeb8KnwOVH+myXtmQr+OZSqtEN QgXFnbGQ39kbfF3Wq53UQAdqevMZhe+o -----END CERTIFICATE-----Generated at Sun Jun 15 05:10:12 2025 by rpki-client