$ rpki-client -vvf rpki.apnic.net/member_repository/A91A546E/0CD41DA8B76A11EA814F5084C4F9AE02/bFpYn5JM6b7R_Yn1r_YwySdXRCA.mft File: bFpYn5JM6b7R_Yn1r_YwySdXRCA.mft (raw, json) Hash identifier: YtFFnIhh52rlrmXbFEMUC7PdupXbM8zkCRCuM+J+m3w= Subject key identifier: 3D:39:48:8E:83:08:A9:49:F2:60:C6:53:81:29:F4:7F:B5:2F:7C:54 Authority key identifier: 6C:5A:58:9F:92:4C:E9:BE:D1:FD:89:F5:AF:F6:30:C9:27:57:44:20 Certificate issuer: /CN=A91A546E/serialNumber=6C5A589F924CE9BED1FD89F5AFF630C927574420 Certificate serial: 0969 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bFpYn5JM6b7R_Yn1r_YwySdXRCA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A546E/0CD41DA8B76A11EA814F5084C4F9AE02/bFpYn5JM6b7R_Yn1r_YwySdXRCA.mft Manifest number: 092F Signing time: Sat 18 Oct 2025 21:26:52 +0000 Manifest this update: Sat 18 Oct 2025 21:26:52 +0000 Manifest next update: Sat 25 Oct 2025 21:26:52 +0000 Files and hashes: 1: bFpYn5JM6b7R_Yn1r_YwySdXRCA.crl (hash: ErZe0naWwUU15+fJUtPo5XhHKi5tS4tN5w4T1xmBYj8=) 2: F2A462E66B6C11F0B453B656C4F9AE02.roa (hash: Ms6hkj2gNBoVKwju3YpVFi7TOZ5XoCEB+ud2155SGQw=) 3: 1A8C65506B6E11F0AEECA858C4F9AE02.roa (hash: krOpio4wz9zZ7mzvOOi6fz/jljv3s2vU7Ok4eA4dM3Q=) 4: 50805C5C6CF911F0A63D4C65C4F9AE02.roa (hash: Qpx6+MAMFv4aX1D2NecodjsfaY0GuU6bXaL2b1GdFHc=) 5: 88252000B55C11ECA9565039C4F9AE02.roa (hash: ROM2aBA2uOLvGraWZ2OMfhtRxZ5DusfnSKSNI9N61E8=) 6: CCBF0CF6B55911EC9256FE19C4F9AE02.roa (hash: J9pnyjCXshJdQFSggqWmHXW0nySYEfDGHTCaX/EZOYk=) 7: CC3B5938B55911EC9256FE19C4F9AE02.roa (hash: Ejx3yVkwMIGPx4PH4VpagQp/pASvV9ahz0Vqhx7EKZo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A546E/0CD41DA8B76A11EA814F5084C4F9AE02/bFpYn5JM6b7R_Yn1r_YwySdXRCA.crl rsync://rpki.apnic.net/member_repository/A91A546E/0CD41DA8B76A11EA814F5084C4F9AE02/bFpYn5JM6b7R_Yn1r_YwySdXRCA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bFpYn5JM6b7R_Yn1r_YwySdXRCA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 21:26:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2409 (0x969) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A546E, serialNumber=6C5A589F924CE9BED1FD89F5AFF630C927574420 Validity Not Before: Oct 18 21:26:52 2025 GMT Not After : Oct 25 21:26:52 2025 GMT Subject: CN=68f4061c-f369 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:99:d4:46:47:10:fd:37:46:c6:12:0d:63:cc: 4a:c2:59:ac:61:4b:c3:66:40:16:d5:d0:d8:0b:1f: e6:15:32:76:26:d6:e9:0a:23:e7:94:96:b9:58:5e: de:a3:2f:2d:b4:fc:49:49:b3:68:f9:31:75:91:61: 6a:60:27:36:b1:9f:1a:e0:b9:39:a1:75:bf:42:03: e0:35:d2:df:4d:d0:b8:37:b0:f3:62:ff:78:f1:a8: 28:75:e8:b3:2b:e5:83:ea:bd:6a:d3:f9:70:04:a8: 0d:b7:26:ac:8c:d7:69:bb:5b:d0:34:7a:88:29:dc: 73:86:e8:1b:d7:a3:f1:c8:bf:00:b9:0a:a1:52:a8: 23:9f:9a:6e:19:93:f9:37:0a:a6:6a:17:60:8e:97: 6f:41:29:8b:11:df:a4:ff:15:27:5b:f5:bf:00:c5: 91:e0:37:5f:69:8a:c0:d3:ce:24:76:58:bf:c0:ae: a5:45:b9:e4:f7:8b:58:05:4d:c2:ef:75:87:c0:4e: 72:f0:3d:4c:a8:d3:a9:74:77:fd:e8:dd:89:82:da: f3:d9:a8:d7:1e:07:6c:70:05:1f:74:61:8c:7e:52: 48:24:77:d3:08:2c:4e:7a:42:55:3a:4f:8b:57:fe: b2:a5:56:89:27:eb:08:78:d0:de:bb:67:98:e3:b4: 91:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:39:48:8E:83:08:A9:49:F2:60:C6:53:81:29:F4:7F:B5:2F:7C:54 X509v3 Authority Key Identifier: keyid:6C:5A:58:9F:92:4C:E9:BE:D1:FD:89:F5:AF:F6:30:C9:27:57:44:20 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A546E/0CD41DA8B76A11EA814F5084C4F9AE02/bFpYn5JM6b7R_Yn1r_YwySdXRCA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bFpYn5JM6b7R_Yn1r_YwySdXRCA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A546E/0CD41DA8B76A11EA814F5084C4F9AE02/bFpYn5JM6b7R_Yn1r_YwySdXRCA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 05:2a:f2:46:25:d5:de:f1:ae:a4:50:6f:89:8f:54:5f:6f:f1: ca:fe:8b:0f:58:df:75:f1:2d:d9:b9:e0:51:12:ca:6f:e0:15: 5d:c9:85:db:a0:8a:b1:60:65:60:a0:80:29:05:01:e6:07:2a: bd:6e:21:13:30:75:c4:6f:09:9b:f6:72:c2:54:2c:05:e1:4a: f3:d5:0d:c0:e4:1a:17:b9:de:c5:33:98:0b:62:69:43:c6:49: 0d:79:99:e0:d2:a4:75:0c:20:b5:33:b2:b7:1d:bf:83:e7:42: ae:74:8a:1b:d8:a0:c5:84:e9:57:be:66:26:ea:49:04:49:d5: ec:a6:48:5b:76:9f:04:22:ed:c7:9d:e0:a8:dd:74:7c:2f:ea: b9:dd:00:23:8c:4f:5a:67:ae:1c:05:98:e4:6e:09:c0:b2:10: 9b:bd:20:8f:36:38:78:f6:d9:5a:96:55:f4:82:27:f3:10:99: 63:18:cc:77:ee:8a:0c:05:cb:e3:1b:75:e6:a7:e5:0a:1e:0c: 77:30:ed:13:5e:b9:e0:0c:74:12:fc:c8:86:10:8e:55:3a:b4: 22:ed:e3:b2:3f:25:1f:d0:51:a0:7e:3a:5a:7d:a8:d7:66:34: 21:9b:42:47:d8:43:3b:45:7d:58:fe:b7:21:75:36:4a:57:54: 7e:6c:16:ba -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCWkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTU0NkUxMTAvBgNVBAUTKDZDNUE1ODlGOTI0Q0U5QkVEMUZEODlGNUFGRjYzMEM5 Mjc1NzQ0MjAwHhcNMjUxMDE4MjEyNjUyWhcNMjUxMDI1MjEyNjUyWjAYMRYwFAYD VQQDEw02OGY0MDYxYy1mMzY5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnJnURkcQ/TdGxhINY8xKwlmsYUvDZkAW1dDYCx/mFTJ2JtbpCiPnlJa5WF7e oy8ttPxJSbNo+TF1kWFqYCc2sZ8a4Lk5oXW/QgPgNdLfTdC4N7DzYv948agodeiz K+WD6r1q0/lwBKgNtyasjNdpu1vQNHqIKdxzhugb16PxyL8AuQqhUqgjn5puGZP5 NwqmahdgjpdvQSmLEd+k/xUnW/W/AMWR4DdfaYrA084kdli/wK6lRbnk94tYBU3C 73WHwE5y8D1MqNOpdHf96N2Jgtrz2ajXHgdscAUfdGGMflJIJHfTCCxOekJVOk+L V/6ypVaJJ+sIeNDeu2eY47SRFQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFD05SI6D CKlJ8mDGU4Ep9H+1L3xUMB8GA1UdIwQYMBaAFGxaWJ+STOm+0f2J9a/2MMknV0Qg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNTQ2RS8wQ0Q0MURBOEI3 NkExMUVBODE0RjUwODRDNEY5QUUwMi9iRnBZbjVKTTZiN1JfWW4xcl9Zd3lTZFhS Q0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2JGcFluNUpNNmI3Ul9ZbjFyX1l3eVNkWFJDQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NTQ2RS8wQ0Q0MURBOEI3NkExMUVBODE0RjUwODRDNEY5QUUwMi9iRnBZbjVKTTZi N1JfWW4xcl9Zd3lTZFhSQ0EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAFKvJGJdXe8a6kUG+Jj1Rfb/HK/osPWN918S3ZueBREspv4BVdyYXb oIqxYGVgoIApBQHmByq9biETMHXEbwmb9nLCVCwF4Urz1Q3A5BoXud7FM5gLYmlD xkkNeZng0qR1DCC1M7K3Hb+D50KudIob2KDFhOlXvmYm6kkESdXspkhbdp8EIu3H neCo3XR8L+q53QAjjE9aZ64cBZjkbgnAshCbvSCPNjh49tlallX0gifzEJljGMx3 7ooMBcvjG3Xmp+UKHgx3MO0TXrngDHQS/MiGEI5VOrQi7eOyPyUf0FGgfjpafajX ZjQhm0JH2EM7RX1Y/rchdTZKV1R+bBa6 -----END CERTIFICATE-----Generated at Sun Oct 19 23:33:23 2025 by rpki-client