$ rpki-client -vvf rpki.apnic.net/member_repository/A91B4AA0/1041E5EAE2C311EAB818D17FC4F9AE02/BM9X8qf_ynLAdGioxtXyRRf_Rrk.mft File: BM9X8qf_ynLAdGioxtXyRRf_Rrk.mft (raw, json) Hash identifier: jXqiQ5cnJWb3nAjffBd/qBypLauQ11MkUby0td2mZNs= Subject key identifier: D6:98:1D:B2:36:6D:60:B9:B5:7E:08:43:81:AB:25:8F:84:2B:1F:BB Authority key identifier: 04:CF:57:F2:A7:FF:CA:72:C0:74:68:A8:C6:D5:F2:45:17:FF:46:B9 Certificate issuer: /CN=A91B4AA0/serialNumber=04CF57F2A7FFCA72C07468A8C6D5F24517FF46B9 Certificate serial: 0858 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BM9X8qf_ynLAdGioxtXyRRf_Rrk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B4AA0/1041E5EAE2C311EAB818D17FC4F9AE02/BM9X8qf_ynLAdGioxtXyRRf_Rrk.mft Manifest number: 084C Signing time: Sat 18 Oct 2025 21:55:21 +0000 Manifest this update: Sat 18 Oct 2025 21:55:20 +0000 Manifest next update: Sat 25 Oct 2025 21:55:20 +0000 Files and hashes: 1: BM9X8qf_ynLAdGioxtXyRRf_Rrk.crl (hash: IRweXUoZ4LGnkcM4Db5A2VGsGghPzJSV1VqSXy6vqGs=) 2: 02F863F6C09211EC8950E57AC4F9AE02.roa (hash: CW8cYbzHOyc7H5WlbPNiikLuHtC0kPX2gHGH/bCo7qc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B4AA0/1041E5EAE2C311EAB818D17FC4F9AE02/BM9X8qf_ynLAdGioxtXyRRf_Rrk.crl rsync://rpki.apnic.net/member_repository/A91B4AA0/1041E5EAE2C311EAB818D17FC4F9AE02/BM9X8qf_ynLAdGioxtXyRRf_Rrk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BM9X8qf_ynLAdGioxtXyRRf_Rrk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 21:55:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2136 (0x858) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B4AA0, serialNumber=04CF57F2A7FFCA72C07468A8C6D5F24517FF46B9 Validity Not Before: Oct 18 21:55:20 2025 GMT Not After : Oct 25 21:55:20 2025 GMT Subject: CN=68f40cc9-c332 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:ca:60:66:77:80:7e:2d:0a:57:af:3c:51:e3: f3:a3:09:5e:50:bd:6f:7c:30:19:5a:c4:ba:75:f3: 00:77:99:77:af:78:33:75:cb:95:78:ee:f5:77:af: eb:b5:5f:54:fa:1e:b7:25:9c:2c:29:7d:15:8a:30: 3e:70:24:3f:3a:40:c6:2d:8d:01:da:60:b9:e9:70: 2a:6b:c1:05:69:b5:9a:da:0c:a9:fe:4e:78:d6:92: fb:bb:65:af:f4:71:bf:50:0b:03:98:37:ce:8d:1c: 31:86:b3:9d:b0:77:48:ab:a2:6d:a4:7d:cf:dd:3f: 4d:4e:5b:3b:a7:26:c6:c9:5b:76:ba:c4:00:7e:bf: 56:23:b4:1c:89:16:8c:84:ac:24:b2:29:a0:c9:ef: fb:02:49:e3:4e:30:7f:6d:56:29:38:13:30:36:a5: ec:4b:69:af:2b:2a:d8:8a:6f:e6:93:fc:1e:db:15: fa:61:bc:3e:3e:43:1d:34:fa:12:c4:0b:12:25:86: 96:eb:ff:b1:b8:78:93:15:d4:05:6a:0c:b1:ad:4f: da:7f:e8:0d:11:bf:6e:19:6e:54:74:9e:f2:ce:ba: 67:1e:eb:1e:1e:bb:db:47:e0:0c:43:5a:d8:a6:95: 93:bf:52:84:10:d4:ca:b0:e7:01:de:c3:cc:4e:50: ff:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:98:1D:B2:36:6D:60:B9:B5:7E:08:43:81:AB:25:8F:84:2B:1F:BB X509v3 Authority Key Identifier: keyid:04:CF:57:F2:A7:FF:CA:72:C0:74:68:A8:C6:D5:F2:45:17:FF:46:B9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B4AA0/1041E5EAE2C311EAB818D17FC4F9AE02/BM9X8qf_ynLAdGioxtXyRRf_Rrk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BM9X8qf_ynLAdGioxtXyRRf_Rrk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B4AA0/1041E5EAE2C311EAB818D17FC4F9AE02/BM9X8qf_ynLAdGioxtXyRRf_Rrk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 92:0e:a2:93:d6:1d:4b:c3:ff:ae:37:ea:80:f9:8a:3b:7a:0e: bb:06:40:56:78:47:a8:62:0a:5b:1e:a9:f1:82:bc:77:35:fe: bb:40:8a:61:cb:52:10:3b:4a:1b:fc:35:8a:98:29:6a:2a:aa: 57:4c:93:87:81:b6:9e:d1:35:14:0c:47:ee:bb:a9:49:0c:28: 46:00:a6:04:48:98:00:6d:35:63:f4:ea:43:fc:04:fb:ec:e6: 5d:38:a8:7b:40:d3:91:bb:ee:ac:1b:7e:50:5d:fd:da:a0:c9: c0:1d:f6:f0:7a:6f:30:ac:fb:39:65:7d:1a:bb:38:ec:b6:74: 6a:a0:0c:1e:c1:6c:61:d6:2a:84:e9:7b:61:86:96:d2:cf:37: ff:7e:4b:61:8a:5d:7e:43:55:bd:8e:ab:c7:a9:7b:2e:d6:c2: 7d:cf:2a:7b:c6:31:8c:c8:07:e3:90:8b:e3:cc:92:e6:85:bb: 8a:4d:85:fb:33:86:03:75:ed:cf:2a:8f:b1:d6:00:b2:10:27: ff:d9:27:64:9e:4a:6d:11:e6:d5:dc:00:ac:2d:60:f7:dd:f3: 5d:37:f3:9b:33:24:26:0c:e0:8f:6b:f6:d8:89:1f:a8:c0:07: c8:a7:ef:ce:07:52:97:8a:1f:7b:dd:be:f8:6e:98:24:02:66: 12:78:86:01 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCFgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjRBQTAxMTAvBgNVBAUTKDA0Q0Y1N0YyQTdGRkNBNzJDMDc0NjhBOEM2RDVGMjQ1 MTdGRjQ2QjkwHhcNMjUxMDE4MjE1NTIwWhcNMjUxMDI1MjE1NTIwWjAYMRYwFAYD VQQDEw02OGY0MGNjOS1jMzMyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzcpgZneAfi0KV688UePzowleUL1vfDAZWsS6dfMAd5l3r3gzdcuVeO71d6/r tV9U+h63JZwsKX0VijA+cCQ/OkDGLY0B2mC56XAqa8EFabWa2gyp/k541pL7u2Wv 9HG/UAsDmDfOjRwxhrOdsHdIq6JtpH3P3T9NTls7pybGyVt2usQAfr9WI7QciRaM hKwksimgye/7AknjTjB/bVYpOBMwNqXsS2mvKyrYim/mk/we2xX6Ybw+PkMdNPoS xAsSJYaW6/+xuHiTFdQFagyxrU/af+gNEb9uGW5UdJ7yzrpnHuseHrvbR+AMQ1rY ppWTv1KEENTKsOcB3sPMTlD/nQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNaYHbI2 bWC5tX4IQ4GrJY+EKx+7MB8GA1UdIwQYMBaAFATPV/Kn/8pywHRoqMbV8kUX/0a5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNEFBMC8xMDQxRTVFQUUy QzMxMUVBQjgxOEQxN0ZDNEY5QUUwMi9CTTlYOHFmX3luTEFkR2lveHRYeVJSZl9S cmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0JNOVg4cWZfeW5MQWRHaW94dFh5UlJmX1Jyay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NEFBMC8xMDQxRTVFQUUyQzMxMUVBQjgxOEQxN0ZDNEY5QUUwMi9CTTlYOHFmX3lu TEFkR2lveHRYeVJSZl9ScmsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCSDqKT1h1Lw/+uN+qA+Yo7eg67BkBWeEeoYgpbHqnxgrx3Nf67QIph y1IQO0ob/DWKmClqKqpXTJOHgbae0TUUDEfuu6lJDChGAKYESJgAbTVj9OpD/AT7 7OZdOKh7QNORu+6sG35QXf3aoMnAHfbwem8wrPs5ZX0auzjstnRqoAwewWxh1iqE 6XthhpbSzzf/fkthil1+Q1W9jqvHqXsu1sJ9zyp7xjGMyAfjkIvjzJLmhbuKTYX7 M4YDde3PKo+x1gCyECf/2SdknkptEebV3ACsLWD33fNdN/ObMyQmDOCPa/bYiR+o wAfIp+/OB1KXih973b74bpgkAmYSeIYB -----END CERTIFICATE-----Generated at Mon Oct 20 04:06:18 2025 by rpki-client