$ rpki-client -vvf rpki.apnic.net/member_repository/A91B4873/56A5B2AE38E711EF844B4F65C4F9AE02/bdB1wHDNGUBcCU1NPUvaFjQM7vw.mft File: bdB1wHDNGUBcCU1NPUvaFjQM7vw.mft (raw, json) Hash identifier: rTCTcjLAe5mohNd1U5MKNt86hTozZuGfJs64gIFqq3o= Subject key identifier: D8:88:79:88:B8:28:59:25:54:34:BC:23:24:E1:3A:4A:70:0E:9B:23 Authority key identifier: 6D:D0:75:C0:70:CD:19:40:5C:09:4D:4D:3D:4B:DA:16:34:0C:EE:FC Certificate issuer: /CN=A91B4873/serialNumber=6DD075C070CD19405C094D4D3D4BDA16340CEEFC Certificate serial: F2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bdB1wHDNGUBcCU1NPUvaFjQM7vw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B4873/56A5B2AE38E711EF844B4F65C4F9AE02/bdB1wHDNGUBcCU1NPUvaFjQM7vw.mft Manifest number: F2 Signing time: Sun 19 Oct 2025 08:11:28 +0000 Manifest this update: Sun 19 Oct 2025 08:11:28 +0000 Manifest next update: Sun 26 Oct 2025 08:11:28 +0000 Files and hashes: 1: bdB1wHDNGUBcCU1NPUvaFjQM7vw.crl (hash: KYPEmft7gaUQJ7X+duwh/wQ90f4BJv7/WxJkzB/uPOY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B4873/56A5B2AE38E711EF844B4F65C4F9AE02/bdB1wHDNGUBcCU1NPUvaFjQM7vw.crl rsync://rpki.apnic.net/member_repository/A91B4873/56A5B2AE38E711EF844B4F65C4F9AE02/bdB1wHDNGUBcCU1NPUvaFjQM7vw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bdB1wHDNGUBcCU1NPUvaFjQM7vw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 08:11:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 242 (0xf2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B4873, serialNumber=6DD075C070CD19405C094D4D3D4BDA16340CEEFC Validity Not Before: Oct 19 08:11:28 2025 GMT Not After : Oct 26 08:11:28 2025 GMT Subject: CN=68f49d30-9691 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:4b:3a:9e:ed:ce:b0:ba:67:ca:2c:97:13:31: 58:b2:b1:17:a2:a5:2a:7b:70:5e:47:d2:9f:bc:55: be:a0:9b:b7:15:a8:a0:1c:da:4c:c9:49:ea:36:a8: 1f:15:e8:c8:4b:81:7b:92:60:2b:2f:b1:23:0b:02: 72:5f:3e:e2:e8:8e:94:7e:13:14:b6:dd:72:98:ab: 32:e7:fd:59:e8:c4:50:cd:cb:5d:2c:da:a9:a2:ae: 59:a0:cf:ac:e5:41:b5:cc:1c:e6:12:4b:7b:0a:72: 8d:b7:bd:9a:3a:7b:59:c5:a5:c2:7f:d8:73:68:ec: 54:3a:cc:0d:7b:26:08:0a:bd:2c:56:35:1b:9f:62: bb:0c:a1:0d:5f:09:90:cd:1e:9c:ea:5d:88:9e:87: 1e:63:9b:58:d0:9c:32:61:f4:09:fb:11:24:86:bd: 47:d1:cf:1b:b9:51:02:e7:50:99:18:64:aa:55:82: 97:d2:53:6c:07:a8:7c:e7:4b:6f:05:63:3a:2b:0b: 7c:8c:c6:f9:d3:00:6e:02:85:2a:2f:3a:fb:ab:08: d8:58:1d:34:25:7d:36:64:df:ba:24:8d:61:e0:98: b7:10:96:8f:d6:84:d4:d7:34:ac:d5:96:98:06:31: 20:6a:47:4e:af:e1:f2:69:d8:79:a8:96:a0:c1:88: 86:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:88:79:88:B8:28:59:25:54:34:BC:23:24:E1:3A:4A:70:0E:9B:23 X509v3 Authority Key Identifier: keyid:6D:D0:75:C0:70:CD:19:40:5C:09:4D:4D:3D:4B:DA:16:34:0C:EE:FC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B4873/56A5B2AE38E711EF844B4F65C4F9AE02/bdB1wHDNGUBcCU1NPUvaFjQM7vw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bdB1wHDNGUBcCU1NPUvaFjQM7vw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B4873/56A5B2AE38E711EF844B4F65C4F9AE02/bdB1wHDNGUBcCU1NPUvaFjQM7vw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1e:5d:5d:b2:5f:d8:36:98:f7:50:40:c0:29:e4:2a:b1:0a:c4: f0:93:2b:20:9c:71:3c:69:38:cf:95:57:86:eb:76:2c:9c:5f: 58:64:0d:ae:02:ec:f6:25:c9:fa:ee:52:b1:cf:2d:bb:d6:d6: 2b:3f:60:d6:a6:77:be:e3:24:a5:d7:d9:a5:2d:95:e8:ad:9d: b5:92:ad:6e:76:d3:c0:4b:eb:82:fc:1e:97:ad:ac:89:a9:d6: 9a:5f:a1:f2:e3:c6:31:e4:86:1d:84:35:5f:59:c5:9e:1b:26: 1c:fb:5b:47:04:40:e9:28:98:20:60:05:ab:71:d8:7c:95:42: a4:3c:16:f8:24:90:2b:ff:eb:dc:ac:85:dc:ee:bd:a0:5a:25: a3:8e:c3:9a:04:b0:3e:e8:46:d4:ec:99:56:a3:93:e2:2b:35: 2a:53:7c:cc:cc:64:6e:18:21:6f:6b:ba:fc:67:3f:b2:dd:8b: 3d:04:26:99:d9:63:3b:60:77:69:18:4d:f9:52:72:b3:f2:d1: ba:95:dd:87:5e:74:d1:89:e5:a8:bc:ef:be:e7:68:65:d2:13: 91:b4:70:44:38:b1:81:c1:2b:f7:61:39:4d:db:f2:21:18:e0: bc:b3:78:62:37:29:64:97:7f:43:46:e5:53:53:60:51:c2:9e: f9:31:3c:9b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAPIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjQ4NzMxMTAvBgNVBAUTKDZERDA3NUMwNzBDRDE5NDA1QzA5NEQ0RDNENEJEQTE2 MzQwQ0VFRkMwHhcNMjUxMDE5MDgxMTI4WhcNMjUxMDI2MDgxMTI4WjAYMRYwFAYD VQQDEw02OGY0OWQzMC05NjkxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuUs6nu3OsLpnyiyXEzFYsrEXoqUqe3BeR9KfvFW+oJu3FaigHNpMyUnqNqgf FejIS4F7kmArL7EjCwJyXz7i6I6UfhMUtt1ymKsy5/1Z6MRQzctdLNqpoq5ZoM+s 5UG1zBzmEkt7CnKNt72aOntZxaXCf9hzaOxUOswNeyYICr0sVjUbn2K7DKENXwmQ zR6c6l2InoceY5tY0JwyYfQJ+xEkhr1H0c8buVEC51CZGGSqVYKX0lNsB6h850tv BWM6Kwt8jMb50wBuAoUqLzr7qwjYWB00JX02ZN+6JI1h4Ji3EJaP1oTU1zSs1ZaY BjEgakdOr+Hyadh5qJagwYiGNwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNiIeYi4 KFklVDS8IyThOkpwDpsjMB8GA1UdIwQYMBaAFG3QdcBwzRlAXAlNTT1L2hY0DO78 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNDg3My81NkE1QjJBRTM4 RTcxMUVGODQ0QjRGNjVDNEY5QUUwMi9iZEIxd0hETkdVQmNDVTFOUFV2YUZqUU03 dncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2JkQjF3SEROR1VCY0NVMU5QVXZhRmpRTTd2dy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NDg3My81NkE1QjJBRTM4RTcxMUVGODQ0QjRGNjVDNEY5QUUwMi9iZEIxd0hETkdV QmNDVTFOUFV2YUZqUU03dncubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAeXV2yX9g2mPdQQMAp5CqxCsTwkysgnHE8aTjPlVeG63YsnF9YZA2u Auz2Jcn67lKxzy271tYrP2DWpne+4ySl19mlLZXorZ21kq1udtPAS+uC/B6XrayJ qdaaX6Hy48Yx5IYdhDVfWcWeGyYc+1tHBEDpKJggYAWrcdh8lUKkPBb4JJAr/+vc rIXc7r2gWiWjjsOaBLA+6EbU7JlWo5PiKzUqU3zMzGRuGCFva7r8Zz+y3Ys9BCaZ 2WM7YHdpGE35UnKz8tG6ld2HXnTRieWovO++52hl0hORtHBEOLGBwSv3YTlN2/Ih GOC8s3hiNylkl39DRuVTU2BRwp75MTyb -----END CERTIFICATE-----Generated at Tue Oct 21 01:02:43 2025 by rpki-client