$ rpki-client -vvf rpki.apnic.net/member_repository/A91AB1F6/0F14015094C911EAB1DB627CC4F9AE02/CBzlpnA274VGmQv1lMzWMoB0BR0.mft File: CBzlpnA274VGmQv1lMzWMoB0BR0.mft (raw, json) Hash identifier: eUDHlwfKNTMEbGjikzDY0H5ErZG8KUn5dK2FWMH9eD8= Subject key identifier: 7B:21:DB:14:11:C4:91:D1:56:6B:2D:F9:BD:89:38:C6:76:08:3E:A8 Authority key identifier: 08:1C:E5:A6:70:36:EF:85:46:99:0B:F5:94:CC:D6:32:80:74:05:1D Certificate issuer: /CN=A91AB1F6/serialNumber=081CE5A67036EF8546990BF594CCD6328074051D Certificate serial: 09BB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CBzlpnA274VGmQv1lMzWMoB0BR0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AB1F6/0F14015094C911EAB1DB627CC4F9AE02/CBzlpnA274VGmQv1lMzWMoB0BR0.mft Manifest number: 09B0 Signing time: Sat 18 Oct 2025 21:04:32 +0000 Manifest this update: Sat 18 Oct 2025 21:04:32 +0000 Manifest next update: Sat 25 Oct 2025 21:04:32 +0000 Files and hashes: 1: CBzlpnA274VGmQv1lMzWMoB0BR0.crl (hash: Zbr1z4WIxOVuxXGpqRPINF3RrOSti96w7CFnizuBolc=) 2: 59675AB20A4011F0AC302962C4F9AE02.roa (hash: fiBakfl0c7PhMdoRRAbYSKMEPuxbVJY/KVuQO5mDKMk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AB1F6/0F14015094C911EAB1DB627CC4F9AE02/CBzlpnA274VGmQv1lMzWMoB0BR0.crl rsync://rpki.apnic.net/member_repository/A91AB1F6/0F14015094C911EAB1DB627CC4F9AE02/CBzlpnA274VGmQv1lMzWMoB0BR0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CBzlpnA274VGmQv1lMzWMoB0BR0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 21:04:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2491 (0x9bb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AB1F6, serialNumber=081CE5A67036EF8546990BF594CCD6328074051D Validity Not Before: Oct 18 21:04:32 2025 GMT Not After : Oct 25 21:04:32 2025 GMT Subject: CN=68f400e0-a146 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:43:9c:05:e3:c8:6c:fe:ee:ed:2a:20:87:1c: 2b:66:59:de:3f:7d:21:39:b6:78:23:18:bc:7b:7f: e6:f8:c0:8c:59:40:c0:45:ff:f4:32:47:bf:d7:39: b2:d0:c2:7f:19:cc:23:21:b6:82:c2:d1:52:2c:65: 91:6f:31:e3:53:bf:2e:c4:55:f9:85:f3:7f:65:b7: 8a:bb:58:76:a7:9b:24:05:e0:df:33:01:60:1e:ce: 36:c1:0c:23:c4:61:ac:a3:de:3c:81:f9:99:66:d1: a0:a7:dc:de:21:e0:25:dd:b8:1d:77:5a:f2:b4:7a: cd:b4:38:65:96:20:3c:9c:7a:d8:d6:22:09:f8:ca: a6:ad:1f:91:2e:5f:72:a3:6c:60:db:e1:0c:17:35: 11:ab:20:6d:b1:f6:7a:c1:2b:83:8c:67:d9:9a:1e: bb:42:c3:18:bd:77:a4:12:51:19:54:c5:72:af:fa: e3:04:85:b2:b4:70:9c:dd:c1:6f:c3:e5:49:77:5a: 85:22:f8:3f:5e:13:ea:77:d2:3e:20:a7:b7:02:94: 85:af:81:f8:36:cf:0e:b2:84:c7:bb:9a:a8:74:c1: 7e:14:e2:c3:f1:d8:ab:b7:b4:a7:7a:15:7f:d6:04: e8:fc:3f:39:e4:c7:05:37:f2:2e:73:aa:05:8b:cc: 62:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:21:DB:14:11:C4:91:D1:56:6B:2D:F9:BD:89:38:C6:76:08:3E:A8 X509v3 Authority Key Identifier: keyid:08:1C:E5:A6:70:36:EF:85:46:99:0B:F5:94:CC:D6:32:80:74:05:1D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AB1F6/0F14015094C911EAB1DB627CC4F9AE02/CBzlpnA274VGmQv1lMzWMoB0BR0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CBzlpnA274VGmQv1lMzWMoB0BR0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AB1F6/0F14015094C911EAB1DB627CC4F9AE02/CBzlpnA274VGmQv1lMzWMoB0BR0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 38:b9:39:e8:62:48:e5:04:bd:29:cf:06:0f:32:3a:78:b3:de: e3:8b:39:c7:2d:68:5d:7a:e7:52:ee:47:af:60:b6:2c:c0:13: ff:a4:86:4b:be:35:d0:3b:14:c6:a6:86:37:95:3a:f8:4e:b5: 1a:b5:b8:50:b3:38:09:71:6a:05:03:d5:29:5b:f1:c9:a3:1d: 35:da:9e:42:35:f7:8e:68:d0:8f:a3:5f:a7:04:bd:41:4b:9a: fb:f1:51:b2:a8:d7:b2:f6:34:14:c5:5a:fc:6b:07:06:75:8e: 63:62:d6:df:dd:e8:e5:b5:c0:12:3f:86:12:2a:9a:fa:d9:c7: bb:e5:ba:dd:6d:bb:b7:96:a1:20:b7:4b:86:d6:a9:55:6d:ff: 30:43:8a:a8:f7:66:7f:8a:4a:8e:9d:f1:53:d3:d1:23:19:7d: 06:15:6d:17:d9:d4:20:9a:b4:f2:e6:37:04:7e:98:32:1d:53: ba:59:3a:5b:b9:e9:ca:ad:47:1c:3a:2d:63:ed:98:95:7f:74: d1:47:c0:6c:97:9e:68:1b:18:64:7d:6c:fa:d3:8e:a2:46:de: 32:46:c6:4a:68:aa:fd:3f:a1:7d:a8:09:42:90:90:15:86:78: 32:ea:d3:88:f7:ee:ec:d7:96:08:91:f9:a9:91:81:f7:44:75: 57:4f:1d:8f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCbswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUIxRjYxMTAvBgNVBAUTKDA4MUNFNUE2NzAzNkVGODU0Njk5MEJGNTk0Q0NENjMy ODA3NDA1MUQwHhcNMjUxMDE4MjEwNDMyWhcNMjUxMDI1MjEwNDMyWjAYMRYwFAYD VQQDEw02OGY0MDBlMC1hMTQ2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAskOcBePIbP7u7SoghxwrZlneP30hObZ4Ixi8e3/m+MCMWUDARf/0Mke/1zmy 0MJ/GcwjIbaCwtFSLGWRbzHjU78uxFX5hfN/ZbeKu1h2p5skBeDfMwFgHs42wQwj xGGso948gfmZZtGgp9zeIeAl3bgdd1rytHrNtDhlliA8nHrY1iIJ+MqmrR+RLl9y o2xg2+EMFzURqyBtsfZ6wSuDjGfZmh67QsMYvXekElEZVMVyr/rjBIWytHCc3cFv w+VJd1qFIvg/XhPqd9I+IKe3ApSFr4H4Ns8OsoTHu5qodMF+FOLD8dirt7SnehV/ 1gTo/D855McFN/Iuc6oFi8xigQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHsh2xQR xJHRVmst+b2JOMZ2CD6oMB8GA1UdIwQYMBaAFAgc5aZwNu+FRpkL9ZTM1jKAdAUd MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQjFGNi8wRjE0MDE1MDk0 QzkxMUVBQjFEQjYyN0NDNEY5QUUwMi9DQnpscG5BMjc0VkdtUXYxbE16V01vQjBC UjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NCemxwbkEyNzRWR21RdjFsTXpXTW9CMEJSMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB QjFGNi8wRjE0MDE1MDk0QzkxMUVBQjFEQjYyN0NDNEY5QUUwMi9DQnpscG5BMjc0 VkdtUXYxbE16V01vQjBCUjAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA4uTnoYkjlBL0pzwYPMjp4s97jiznHLWhdeudS7kevYLYswBP/pIZL vjXQOxTGpoY3lTr4TrUatbhQszgJcWoFA9UpW/HJox012p5CNfeOaNCPo1+nBL1B S5r78VGyqNey9jQUxVr8awcGdY5jYtbf3ejltcASP4YSKpr62ce75brdbbu3lqEg t0uG1qlVbf8wQ4qo92Z/ikqOnfFT09EjGX0GFW0X2dQgmrTy5jcEfpgyHVO6WTpb uenKrUccOi1j7ZiVf3TRR8Bsl55oGxhkfWz6046iRt4yRsZKaKr9P6F9qAlCkJAV hngy6tOI9+7s15YIkfmpkYH3RHVXTx2P -----END CERTIFICATE-----Generated at Mon Oct 20 01:46:24 2025 by rpki-client