$ rpki-client -vvf rpki.apnic.net/member_repository/A91B0F3F/09373AD678C211EABD772359C4F9AE02/-Bj8mI7HAyw-LGpIpVSYq3zVZf0.mft File: -Bj8mI7HAyw-LGpIpVSYq3zVZf0.mft (raw, json) Hash identifier: IluMqtMk1+NY+vu2Eh+lMZ/GcnJsDy5d06lkinCYrnk= Subject key identifier: E1:94:57:A8:71:9B:B0:80:4D:9D:D2:10:22:D0:04:05:4B:70:FE:A2 Authority key identifier: F8:18:FC:98:8E:C7:03:2C:3E:2C:6A:48:A5:54:98:AB:7C:D5:65:FD Certificate issuer: /CN=A91B0F3F/serialNumber=F818FC988EC7032C3E2C6A48A55498AB7CD565FD Certificate serial: 0A79 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-Bj8mI7HAyw-LGpIpVSYq3zVZf0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B0F3F/09373AD678C211EABD772359C4F9AE02/-Bj8mI7HAyw-LGpIpVSYq3zVZf0.mft Manifest number: 0A5A Signing time: Sat 18 Oct 2025 20:42:35 +0000 Manifest this update: Sat 18 Oct 2025 20:42:34 +0000 Manifest next update: Sat 25 Oct 2025 20:42:34 +0000 Files and hashes: 1: -Bj8mI7HAyw-LGpIpVSYq3zVZf0.crl (hash: bnyMJPyPF4YABQhuo7H6QT2G8CwPOY8DbIhsk1cqA0o=) 2: 59E4B0A81B9211F0A5D50649C4F9AE02.roa (hash: 4uAphyYn6AbiifiDtaxCom6jwozyhzmoBVY1cw2irI4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B0F3F/09373AD678C211EABD772359C4F9AE02/-Bj8mI7HAyw-LGpIpVSYq3zVZf0.crl rsync://rpki.apnic.net/member_repository/A91B0F3F/09373AD678C211EABD772359C4F9AE02/-Bj8mI7HAyw-LGpIpVSYq3zVZf0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-Bj8mI7HAyw-LGpIpVSYq3zVZf0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 20:42:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2681 (0xa79) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B0F3F, serialNumber=F818FC988EC7032C3E2C6A48A55498AB7CD565FD Validity Not Before: Oct 18 20:42:34 2025 GMT Not After : Oct 25 20:42:34 2025 GMT Subject: CN=68f3fbbb-3bb9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:1c:6a:47:c5:88:83:67:9e:8a:cb:24:0c:45: 99:0d:b9:94:af:e5:a3:6d:eb:0b:06:5f:31:3f:78: 60:37:95:fa:c5:04:4e:6a:11:49:8e:e8:96:a5:12: b8:0c:35:90:a8:5d:1d:f7:30:a2:85:4d:dd:00:30: 82:88:83:07:95:55:93:cb:0c:a8:c6:1b:21:ae:94: d3:a2:34:5d:5f:d6:a5:39:08:fb:1d:5f:ac:50:91: c6:9d:e7:bd:3a:de:56:21:13:a6:99:e1:ed:8b:dd: 98:49:fc:f0:46:04:50:e1:75:fd:49:94:ee:8b:fd: 12:cf:6f:ac:23:ec:3a:0f:84:75:91:01:a6:0a:0b: dd:29:63:69:60:99:e4:c0:14:f9:81:c6:22:c6:5d: 03:48:04:a8:c1:76:a6:1f:65:a0:80:86:ac:aa:7f: 7e:72:4e:fc:26:48:9a:88:d5:2f:bf:36:c5:74:0b: 09:e4:85:86:33:38:7d:e5:e2:3f:bd:13:2a:04:9c: a0:23:43:77:08:3d:46:78:27:90:76:67:e6:35:f2: 9a:38:cf:fb:6b:db:63:1c:27:65:c8:10:47:10:2e: b4:9e:a1:8b:e3:18:9e:8a:ed:2a:b2:f8:db:91:66: 9f:f8:6f:f4:b9:4c:3c:95:16:d1:f2:49:2c:5b:92: 30:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:94:57:A8:71:9B:B0:80:4D:9D:D2:10:22:D0:04:05:4B:70:FE:A2 X509v3 Authority Key Identifier: keyid:F8:18:FC:98:8E:C7:03:2C:3E:2C:6A:48:A5:54:98:AB:7C:D5:65:FD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B0F3F/09373AD678C211EABD772359C4F9AE02/-Bj8mI7HAyw-LGpIpVSYq3zVZf0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-Bj8mI7HAyw-LGpIpVSYq3zVZf0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B0F3F/09373AD678C211EABD772359C4F9AE02/-Bj8mI7HAyw-LGpIpVSYq3zVZf0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 53:52:e6:d8:e8:aa:e7:51:6a:8f:9c:3b:91:dc:a1:7d:2d:d2: 53:31:73:f0:ad:13:5f:77:1a:89:4b:6a:2d:42:b0:3f:e7:1b: ee:b8:8b:5a:28:87:a3:e4:cf:f3:b7:87:8e:9b:a2:27:2e:35: dd:98:54:9e:73:b0:d5:8b:f2:01:30:43:46:61:ea:d0:b1:2c: 7c:6e:ed:a1:88:75:a8:6f:9a:ce:0a:8d:d8:e9:de:c0:82:13: 18:ee:0c:05:8d:fa:47:70:4e:49:06:46:87:a4:69:b1:ce:a6: 8b:d7:6f:be:ed:e0:77:fb:e4:b6:9e:77:de:0a:c7:0b:d2:ac: bf:40:27:30:ac:d0:6b:11:9c:8d:10:11:1a:13:68:05:4c:80: 8b:3d:de:80:83:da:c0:5d:c1:7a:6a:db:03:a5:92:26:d6:9e: 15:47:76:d6:3a:73:54:4e:57:20:99:df:c7:e6:90:af:2d:bd: 82:32:64:0c:a4:a3:b7:70:54:78:c9:25:08:83:47:74:b2:fa: d8:7b:78:61:3b:c8:32:73:98:90:10:79:a8:7d:76:92:13:51: 43:82:d6:e5:33:86:cc:43:89:f5:e8:5d:0e:ba:16:ce:ff:3e: f9:7f:c4:aa:1e:34:02:9b:29:09:c0:5a:fa:5c:d4:84:b1:5b: 9a:4c:31:a5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCnkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjBGM0YxMTAvBgNVBAUTKEY4MThGQzk4OEVDNzAzMkMzRTJDNkE0OEE1NTQ5OEFC N0NENTY1RkQwHhcNMjUxMDE4MjA0MjM0WhcNMjUxMDI1MjA0MjM0WjAYMRYwFAYD VQQDEw02OGYzZmJiYi0zYmI5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnhxqR8WIg2eeisskDEWZDbmUr+WjbesLBl8xP3hgN5X6xQROahFJjuiWpRK4 DDWQqF0d9zCihU3dADCCiIMHlVWTywyoxhshrpTTojRdX9alOQj7HV+sUJHGnee9 Ot5WIROmmeHti92YSfzwRgRQ4XX9SZTui/0Sz2+sI+w6D4R1kQGmCgvdKWNpYJnk wBT5gcYixl0DSASowXamH2WggIasqn9+ck78JkiaiNUvvzbFdAsJ5IWGMzh95eI/ vRMqBJygI0N3CD1GeCeQdmfmNfKaOM/7a9tjHCdlyBBHEC60nqGL4xieiu0qsvjb kWaf+G/0uUw8lRbR8kksW5IwzQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOGUV6hx m7CATZ3SECLQBAVLcP6iMB8GA1UdIwQYMBaAFPgY/JiOxwMsPixqSKVUmKt81WX9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMEYzRi8wOTM3M0FENjc4 QzIxMUVBQkQ3NzIzNTlDNEY5QUUwMi8tQmo4bUk3SEF5dy1MR3BJcFZTWXEzelZa ZjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy1CajhtSTdIQXl3LUxHcElwVlNZcTN6VlpmMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MEYzRi8wOTM3M0FENjc4QzIxMUVBQkQ3NzIzNTlDNEY5QUUwMi8tQmo4bUk3SEF5 dy1MR3BJcFZTWXEzelZaZjAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBTUubY6KrnUWqPnDuR3KF9LdJTMXPwrRNfdxqJS2otQrA/5xvuuIta KIej5M/zt4eOm6InLjXdmFSec7DVi/IBMENGYerQsSx8bu2hiHWob5rOCo3Y6d7A ghMY7gwFjfpHcE5JBkaHpGmxzqaL12++7eB3++S2nnfeCscL0qy/QCcwrNBrEZyN EBEaE2gFTICLPd6Ag9rAXcF6atsDpZIm1p4VR3bWOnNUTlcgmd/H5pCvLb2CMmQM pKO3cFR4ySUIg0d0svrYe3hhO8gyc5iQEHmofXaSE1FDgtblM4bMQ4n16F0OuhbO /z75f8SqHjQCmykJwFr6XNSEsVuaTDGl -----END CERTIFICATE-----Generated at Mon Oct 20 13:51:04 2025 by rpki-client