$ rpki-client -vvf rpki.apnic.net/member_repository/A91240E6/660742C8FD2111E488AB0C34C4F9AE02/bc5S-aIoy_bzDNVdQzhNEmhIe2U.mft File: bc5S-aIoy_bzDNVdQzhNEmhIe2U.mft (raw, json) Hash identifier: SaISX5/tmWSiSFKODpUoUNenWUuKP3P5rUoQMI4pwLc= Subject key identifier: 7D:2F:B8:57:D9:F6:8D:A9:E1:3E:F9:26:6D:F0:FA:A2:E3:CC:A4:CB Authority key identifier: 6D:CE:52:F9:A2:28:CB:F6:F3:0C:D5:5D:43:38:4D:12:68:48:7B:65 Certificate issuer: /CN=A91240E6/serialNumber=6DCE52F9A228CBF6F30CD55D43384D1268487B65 Certificate serial: 2666 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bc5S-aIoy_bzDNVdQzhNEmhIe2U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91240E6/660742C8FD2111E488AB0C34C4F9AE02/bc5S-aIoy_bzDNVdQzhNEmhIe2U.mft Manifest number: 264C Signing time: Sat 18 Oct 2025 15:54:59 +0000 Manifest this update: Sat 18 Oct 2025 15:54:58 +0000 Manifest next update: Sat 25 Oct 2025 15:54:58 +0000 Files and hashes: 1: bc5S-aIoy_bzDNVdQzhNEmhIe2U.crl (hash: XiRu1lnL3c+F2b1sh2qfRZ94tIwaSjljvqptfGws5/E=) 2: 8A721F4EB10C11E5BB6B2A16C4F9AE02.roa (hash: IwUXo20n+V2B2SbXh2brhMIgczh2mlcm0AjnKKmeoo8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91240E6/660742C8FD2111E488AB0C34C4F9AE02/bc5S-aIoy_bzDNVdQzhNEmhIe2U.crl rsync://rpki.apnic.net/member_repository/A91240E6/660742C8FD2111E488AB0C34C4F9AE02/bc5S-aIoy_bzDNVdQzhNEmhIe2U.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bc5S-aIoy_bzDNVdQzhNEmhIe2U.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 15:54:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9830 (0x2666) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91240E6, serialNumber=6DCE52F9A228CBF6F30CD55D43384D1268487B65 Validity Not Before: Oct 18 15:54:58 2025 GMT Not After : Oct 25 15:54:58 2025 GMT Subject: CN=68f3b853-7fe0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:3e:6d:cb:11:b4:ab:bf:58:b2:dd:95:36:ff: 5f:0a:da:eb:6d:7f:37:33:dd:08:55:8a:a4:36:0a: 86:e8:9c:04:d8:8f:cc:45:7f:4b:44:f8:44:a8:ea: 9d:2f:9f:83:75:d7:7d:90:62:93:24:95:62:a0:51: 45:57:df:6e:3e:a1:57:c9:50:fd:9e:e6:ec:32:3a: 98:98:07:a1:fe:eb:49:09:86:1f:bc:f4:ee:be:17: a8:3a:ff:06:41:39:a2:9a:f0:61:42:4c:c9:07:2d: 31:41:17:7d:19:c7:17:ff:eb:7e:2d:75:0b:05:e7: 16:f1:e3:a6:59:64:7d:c9:14:4a:75:72:f4:9e:66: 20:ee:17:91:2f:eb:7d:27:aa:1e:79:12:1a:3d:34: 08:33:0f:6e:a2:6e:03:81:19:b3:d1:5a:6a:f7:31: 4a:83:07:6a:d7:cc:0a:b3:35:2d:59:28:0d:b4:e5: a5:40:2e:48:36:5c:02:c2:af:24:8a:57:16:fc:21: 74:2b:af:ae:9f:04:f3:41:ca:cd:8b:67:31:a0:a7: 3d:24:b2:49:8d:97:43:09:9d:bb:ea:7d:1f:98:c2: 41:e8:27:1f:d5:83:e9:42:94:41:8b:7b:d1:71:a5: 4c:a7:8d:7d:dc:bf:31:74:55:f9:d3:f3:4e:eb:0a: f8:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:2F:B8:57:D9:F6:8D:A9:E1:3E:F9:26:6D:F0:FA:A2:E3:CC:A4:CB X509v3 Authority Key Identifier: keyid:6D:CE:52:F9:A2:28:CB:F6:F3:0C:D5:5D:43:38:4D:12:68:48:7B:65 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91240E6/660742C8FD2111E488AB0C34C4F9AE02/bc5S-aIoy_bzDNVdQzhNEmhIe2U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bc5S-aIoy_bzDNVdQzhNEmhIe2U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91240E6/660742C8FD2111E488AB0C34C4F9AE02/bc5S-aIoy_bzDNVdQzhNEmhIe2U.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 97:88:d7:49:90:e2:9a:cc:b6:34:b8:b3:a0:84:f7:e6:19:a9: 1e:ba:22:1f:79:f0:97:e1:33:6a:21:63:2a:c9:35:aa:90:5e: 53:da:ab:ed:f7:57:d3:1a:4f:ca:5e:c5:0c:05:a7:fc:7d:67: 25:25:44:fe:9d:e8:83:1c:45:9c:86:0e:d8:9d:84:35:77:12: eb:64:4a:01:ad:1e:ac:4b:db:2b:3a:22:ce:94:30:de:5c:e2: 31:89:56:17:4c:1e:d3:58:54:5b:e2:8b:e0:fc:bb:d2:91:2d: 17:9f:0c:24:e3:51:67:4e:5c:f5:28:a6:14:7a:71:11:d6:9c: 16:99:24:cf:33:16:42:e0:1a:2b:1d:3f:2f:bb:9d:6b:d6:ee: bc:74:fa:2b:14:17:ef:a5:49:d3:2b:b8:c0:54:e5:d4:9d:5d: 04:25:ad:f8:03:d7:02:ad:12:5b:39:4e:35:2e:f8:93:55:ac: fb:85:67:f5:e1:a5:8c:e6:15:59:af:d6:dd:d7:1c:e2:e8:f5: 35:5a:7b:5b:6d:fd:a1:b6:81:c4:e3:e5:a7:0a:3f:e0:65:13: 59:b3:2a:9e:a7:6e:59:69:65:8c:08:58:71:a0:a6:f5:4d:1e: a5:c2:26:d7:59:af:4f:a7:17:3e:15:7b:a9:d4:21:b3:c9:dd: d2:1d:7d:30 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICJmYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjQwRTYxMTAvBgNVBAUTKDZEQ0U1MkY5QTIyOENCRjZGMzBDRDU1RDQzMzg0RDEy Njg0ODdCNjUwHhcNMjUxMDE4MTU1NDU4WhcNMjUxMDI1MTU1NDU4WjAYMRYwFAYD VQQDEw02OGYzYjg1My03ZmUwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoj5tyxG0q79Yst2VNv9fCtrrbX83M90IVYqkNgqG6JwE2I/MRX9LRPhEqOqd L5+Dddd9kGKTJJVioFFFV99uPqFXyVD9nubsMjqYmAeh/utJCYYfvPTuvheoOv8G QTmimvBhQkzJBy0xQRd9GccX/+t+LXULBecW8eOmWWR9yRRKdXL0nmYg7heRL+t9 J6oeeRIaPTQIMw9uom4DgRmz0Vpq9zFKgwdq18wKszUtWSgNtOWlQC5INlwCwq8k ilcW/CF0K6+unwTzQcrNi2cxoKc9JLJJjZdDCZ276n0fmMJB6Ccf1YPpQpRBi3vR caVMp4193L8xdFX50/NO6wr4KQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFH0vuFfZ 9o2p4T75Jm3w+qLjzKTLMB8GA1UdIwQYMBaAFG3OUvmiKMv28wzVXUM4TRJoSHtl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNDBFNi82NjA3NDJDOEZE MjExMUU0ODhBQjBDMzRDNEY5QUUwMi9iYzVTLWFJb3lfYnpETlZkUXpoTkVtaEll MlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2JjNVMtYUlveV9iekROVmRRemhORW1oSWUyVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NDBFNi82NjA3NDJDOEZEMjExMUU0ODhBQjBDMzRDNEY5QUUwMi9iYzVTLWFJb3lf YnpETlZkUXpoTkVtaEllMlUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCXiNdJkOKazLY0uLOghPfmGakeuiIfefCX4TNqIWMqyTWqkF5T2qvt 91fTGk/KXsUMBaf8fWclJUT+neiDHEWchg7YnYQ1dxLrZEoBrR6sS9srOiLOlDDe XOIxiVYXTB7TWFRb4ovg/LvSkS0Xnwwk41FnTlz1KKYUenER1pwWmSTPMxZC4Bor HT8vu51r1u68dPorFBfvpUnTK7jAVOXUnV0EJa34A9cCrRJbOU41LviTVaz7hWf1 4aWM5hVZr9bd1xzi6PU1Wntbbf2htoHE4+WnCj/gZRNZsyqep25ZaWWMCFhxoKb1 TR6lwibXWa9Ppxc+FXup1CGzyd3SHX0w -----END CERTIFICATE-----Generated at Mon Oct 20 01:44:54 2025 by rpki-client