$ rpki-client -vvf rpki.apnic.net/member_repository/A91643F8/F790CC5A7C6A11EF9A688857C4F9AE02/bbZgfaaV3QngKYA6L_JiWtiDguM.mft File: bbZgfaaV3QngKYA6L_JiWtiDguM.mft (raw, json) Hash identifier: VbdZeJCAgnfa5viqIwsh5hAAYMDyidnh77vyMBcK1ac= Subject key identifier: 44:CB:CD:EC:A6:3D:84:42:0C:C6:6A:48:77:7D:75:5F:D4:62:51:33 Authority key identifier: 6D:B6:60:7D:A6:95:DD:09:E0:29:80:3A:2F:F2:62:5A:D8:83:82:E3 Certificate issuer: /CN=A91643F8/serialNumber=6DB6607DA695DD09E029803A2FF2625AD88382E3 Certificate serial: D0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bbZgfaaV3QngKYA6L_JiWtiDguM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91643F8/F790CC5A7C6A11EF9A688857C4F9AE02/bbZgfaaV3QngKYA6L_JiWtiDguM.mft Manifest number: CB Signing time: Sun 19 Oct 2025 08:53:23 +0000 Manifest this update: Sun 19 Oct 2025 08:53:22 +0000 Manifest next update: Sun 26 Oct 2025 08:53:22 +0000 Files and hashes: 1: bbZgfaaV3QngKYA6L_JiWtiDguM.crl (hash: JFifk5a9457LifB006XPyQnxeIf13KnsB+YAxkXWDQM=) 2: F2F0E3FE882E11EFB58CD069C4F9AE02.roa (hash: LLMFfpd/hOZPtrpRcrn1k8tmtQOd8WCmuw0OVbODbIo=) 3: 50A6B6427C6B11EFAB9AB658C4F9AE02.roa (hash: BsH1QXXdR63B8qNDLxP6migCbs5bygzeNgwy6naNCOQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91643F8/F790CC5A7C6A11EF9A688857C4F9AE02/bbZgfaaV3QngKYA6L_JiWtiDguM.crl rsync://rpki.apnic.net/member_repository/A91643F8/F790CC5A7C6A11EF9A688857C4F9AE02/bbZgfaaV3QngKYA6L_JiWtiDguM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bbZgfaaV3QngKYA6L_JiWtiDguM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 08:53:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 208 (0xd0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91643F8, serialNumber=6DB6607DA695DD09E029803A2FF2625AD88382E3 Validity Not Before: Oct 19 08:53:22 2025 GMT Not After : Oct 26 08:53:22 2025 GMT Subject: CN=68f4a702-3b1d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:4d:3f:3a:b9:5f:8b:3f:77:fe:37:7b:f6:5a: 6b:2a:49:30:16:49:c0:4e:75:66:1b:d3:3a:16:75: ce:34:ca:c0:68:a5:d8:13:cd:6c:b5:7f:da:5e:76: db:19:97:2a:2c:b4:3d:8a:7d:ed:4c:ee:6b:c6:80: c6:21:2e:ac:23:7a:38:53:0c:7e:5b:47:d4:41:85: 8c:66:0b:3d:70:4c:60:de:08:65:d8:10:22:ae:28: d2:ef:cf:b1:9f:34:9e:bc:23:a3:a4:ad:a9:a3:e9: 7a:ef:f1:b2:af:14:eb:a4:47:ee:72:21:4f:cd:9c: 37:b7:d8:cc:47:8d:1b:1e:be:72:30:de:ed:f8:da: 3f:42:6e:a5:89:24:79:e8:65:dc:87:d4:10:91:36: c3:e5:ad:ce:4a:1f:35:a2:e1:a4:64:93:64:18:b0: 49:7f:5f:bb:0a:ee:4a:90:08:af:a9:c2:6b:3c:ff: c9:f6:93:c6:c4:7d:4f:13:a7:4a:3c:cb:92:49:33: 65:e0:a1:be:bf:e2:88:ba:a0:a7:f0:6e:65:1c:89: c6:36:7e:f0:63:f6:11:d3:bb:50:59:1b:ea:2f:22: 16:0b:ab:d7:43:b8:da:04:c4:ee:07:7b:c2:d2:41: 4f:2a:d0:d7:e3:e0:6d:20:01:1e:0f:b2:54:db:e1: f5:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:CB:CD:EC:A6:3D:84:42:0C:C6:6A:48:77:7D:75:5F:D4:62:51:33 X509v3 Authority Key Identifier: keyid:6D:B6:60:7D:A6:95:DD:09:E0:29:80:3A:2F:F2:62:5A:D8:83:82:E3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91643F8/F790CC5A7C6A11EF9A688857C4F9AE02/bbZgfaaV3QngKYA6L_JiWtiDguM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bbZgfaaV3QngKYA6L_JiWtiDguM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91643F8/F790CC5A7C6A11EF9A688857C4F9AE02/bbZgfaaV3QngKYA6L_JiWtiDguM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2e:06:fe:06:9b:e5:92:e1:31:32:6c:61:af:22:6c:26:2a:fe: 46:74:d2:1c:b0:36:c3:46:87:25:a6:0f:1c:51:f1:87:11:d4: 80:73:37:24:d9:43:39:db:5a:6f:de:46:e1:21:13:e3:8b:17: fe:f1:50:76:44:c1:39:a4:4e:b1:54:30:76:ae:d9:6c:9b:df: 49:82:2c:5a:0a:61:c8:81:20:35:48:07:4b:91:12:d2:63:93: 60:87:2c:91:d6:03:ac:bb:93:69:cf:af:08:4c:bd:c9:a9:e2: e9:27:44:21:c0:38:2d:99:4d:29:08:4b:25:ae:e8:7a:4f:d1: 35:de:bd:18:70:b0:12:4b:9e:fb:a5:e3:4c:6f:f8:e3:36:b5: bb:9e:51:f5:c3:6f:02:08:5f:d7:30:a1:8f:81:15:f5:c7:99: 9f:94:38:70:c5:d9:88:d6:1b:b4:b3:e7:1a:77:36:38:bb:6f: 61:6f:e7:af:69:c7:46:96:38:33:f5:92:06:82:03:24:20:b8: c9:1b:6e:a0:c3:0f:68:89:e1:4c:ef:ba:9b:72:3b:fa:85:b5: f1:c9:47:c2:3d:a9:10:91:dc:57:8a:f2:64:34:83:7c:18:8e: 54:0d:b5:70:9e:d9:41:79:28:f4:81:57:53:33:26:0f:ba:ef: 3d:cb:db:5b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICANAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjQzRjgxMTAvBgNVBAUTKDZEQjY2MDdEQTY5NUREMDlFMDI5ODAzQTJGRjI2MjVB RDg4MzgyRTMwHhcNMjUxMDE5MDg1MzIyWhcNMjUxMDI2MDg1MzIyWjAYMRYwFAYD VQQDEw02OGY0YTcwMi0zYjFkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAz00/Orlfiz93/jd79lprKkkwFknATnVmG9M6FnXONMrAaKXYE81stX/aXnbb GZcqLLQ9in3tTO5rxoDGIS6sI3o4Uwx+W0fUQYWMZgs9cExg3ghl2BAirijS78+x nzSevCOjpK2po+l67/GyrxTrpEfuciFPzZw3t9jMR40bHr5yMN7t+No/Qm6liSR5 6GXch9QQkTbD5a3OSh81ouGkZJNkGLBJf1+7Cu5KkAivqcJrPP/J9pPGxH1PE6dK PMuSSTNl4KG+v+KIuqCn8G5lHInGNn7wY/YR07tQWRvqLyIWC6vXQ7jaBMTuB3vC 0kFPKtDX4+BtIAEeD7JU2+H1IQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFETLzeym PYRCDMZqSHd9dV/UYlEzMB8GA1UdIwQYMBaAFG22YH2mld0J4CmAOi/yYlrYg4Lj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NDNGOC9GNzkwQ0M1QTdD NkExMUVGOUE2ODg4NTdDNEY5QUUwMi9iYlpnZmFhVjNRbmdLWUE2TF9KaVd0aURn dU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2JiWmdmYWFWM1FuZ0tZQTZMX0ppV3RpRGd1TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 NDNGOC9GNzkwQ0M1QTdDNkExMUVGOUE2ODg4NTdDNEY5QUUwMi9iYlpnZmFhVjNR bmdLWUE2TF9KaVd0aURndU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAuBv4Gm+WS4TEybGGvImwmKv5GdNIcsDbDRoclpg8cUfGHEdSAczck 2UM521pv3kbhIRPjixf+8VB2RME5pE6xVDB2rtlsm99JgixaCmHIgSA1SAdLkRLS Y5NghyyR1gOsu5Npz68ITL3JqeLpJ0QhwDgtmU0pCEslruh6T9E13r0YcLASS577 peNMb/jjNrW7nlH1w28CCF/XMKGPgRX1x5mflDhwxdmI1hu0s+cadzY4u29hb+ev acdGljgz9ZIGggMkILjJG26gww9oieFM77qbcjv6hbXxyUfCPakQkdxXivJkNIN8 GI5UDbVwntlBeSj0gVdTMyYPuu89y9tb -----END CERTIFICATE-----Generated at Mon Oct 20 17:23:59 2025 by rpki-client