$ rpki-client -vvf rpki.apnic.net/member_repository/A91B9008/0A8FBB1AB43211EEA264440CC4F9AE02/bLtnZ_Y6DLm3p0kUtKZXQX5MV4o.mft File: bLtnZ_Y6DLm3p0kUtKZXQX5MV4o.mft (raw, json) Hash identifier: rIAGknXkB4xXSkOX4cuuI8icQaDAZPfduLhSjwxC26Y= Subject key identifier: 2E:D4:98:49:5E:BF:62:48:3E:8B:4E:E7:A0:AE:23:5F:E4:DB:9D:02 Authority key identifier: 6C:BB:67:67:F6:3A:0C:B9:B7:A7:49:14:B4:A6:57:41:7E:4C:57:8A Certificate issuer: /CN=A91B9008/serialNumber=6CBB6767F63A0CB9B7A74914B4A657417E4C578A Certificate serial: 0151 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bLtnZ_Y6DLm3p0kUtKZXQX5MV4o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B9008/0A8FBB1AB43211EEA264440CC4F9AE02/bLtnZ_Y6DLm3p0kUtKZXQX5MV4o.mft Manifest number: 014D Signing time: Sun 19 Oct 2025 07:00:21 +0000 Manifest this update: Sun 19 Oct 2025 07:00:20 +0000 Manifest next update: Sun 26 Oct 2025 07:00:20 +0000 Files and hashes: 1: bLtnZ_Y6DLm3p0kUtKZXQX5MV4o.crl (hash: MQC9DFtmFo0c4nZAqsISrBckd1qfwh9srzXZA44+yac=) 2: 4CFDF03AB4DB11EE9FF6FB59C4F9AE02.roa (hash: AnEWPP8X1N6dt7l7V3XsTmB0MKThvDc5dt35NbkXnzs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B9008/0A8FBB1AB43211EEA264440CC4F9AE02/bLtnZ_Y6DLm3p0kUtKZXQX5MV4o.crl rsync://rpki.apnic.net/member_repository/A91B9008/0A8FBB1AB43211EEA264440CC4F9AE02/bLtnZ_Y6DLm3p0kUtKZXQX5MV4o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bLtnZ_Y6DLm3p0kUtKZXQX5MV4o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 07:00:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 337 (0x151) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B9008, serialNumber=6CBB6767F63A0CB9B7A74914B4A657417E4C578A Validity Not Before: Oct 19 07:00:20 2025 GMT Not After : Oct 26 07:00:20 2025 GMT Subject: CN=68f48c84-875b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:31:2d:91:b8:c6:75:bf:f9:10:16:c4:88:ca: 55:48:df:ea:6e:cb:6f:48:f5:0a:0a:26:51:f7:5c: 0f:13:97:e7:51:d1:f3:df:ad:8b:4c:3a:57:67:dc: 21:2a:1b:79:4c:27:fc:df:61:bf:61:99:7a:f4:8e: 31:a3:88:99:7a:85:d6:26:d2:cb:1e:3d:a6:a6:08: 0f:6b:e3:ad:4f:24:16:25:df:6d:91:b4:27:94:af: 07:a5:c1:42:c5:64:77:95:35:e0:37:90:1e:f7:51: b2:12:b8:5b:36:7d:0a:30:d7:25:ae:20:2f:65:7f: 4a:11:a0:1b:3b:ac:20:99:cd:e7:f1:7f:b0:b8:a0: 24:28:4e:7c:bf:9d:ed:8e:ec:a4:20:98:86:a9:01: 2b:d9:36:9d:6b:37:38:21:3a:0e:61:83:da:31:bf: 22:80:92:00:6d:7c:70:e7:e1:8c:b0:7a:88:cc:86: bd:ea:f8:5f:49:a0:48:11:a4:81:1b:ec:9a:16:e3: 44:a0:03:2f:bf:32:e7:08:69:0b:1e:4b:62:ab:bc: b8:5c:8d:b7:d2:9c:fe:19:d2:dc:00:e5:9f:59:6e: 9c:d4:24:52:9e:a6:ca:d2:79:ef:a8:0c:fe:4b:be: 31:68:7b:1c:01:dd:84:37:e7:1d:af:49:ba:5b:3d: ac:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:D4:98:49:5E:BF:62:48:3E:8B:4E:E7:A0:AE:23:5F:E4:DB:9D:02 X509v3 Authority Key Identifier: keyid:6C:BB:67:67:F6:3A:0C:B9:B7:A7:49:14:B4:A6:57:41:7E:4C:57:8A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B9008/0A8FBB1AB43211EEA264440CC4F9AE02/bLtnZ_Y6DLm3p0kUtKZXQX5MV4o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bLtnZ_Y6DLm3p0kUtKZXQX5MV4o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B9008/0A8FBB1AB43211EEA264440CC4F9AE02/bLtnZ_Y6DLm3p0kUtKZXQX5MV4o.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 98:28:af:41:16:d4:72:48:47:70:d0:37:02:4f:88:eb:6a:96: 8e:34:87:05:ea:ab:87:de:00:3f:c8:eb:77:84:e9:6e:84:b8: c2:ae:1a:6f:0c:3a:0a:a8:7f:5c:29:e1:33:b3:f3:92:75:62: f9:9c:5f:de:0b:d5:c7:29:ab:7e:13:72:8a:27:b5:76:5c:fa: d1:56:e8:d6:28:f8:7b:5f:b9:c2:eb:2c:3c:ce:8e:35:8a:73: 72:68:a3:be:ce:77:75:51:90:1c:ee:17:f4:35:6d:36:65:91: b7:54:a6:a4:c6:b6:e5:9f:33:da:2b:6f:a6:31:d2:2c:30:8e: b9:12:cb:f4:0d:31:4f:d5:f6:fd:a2:be:be:f0:22:39:1e:bd: 29:18:cc:2e:a1:18:ce:5c:71:e3:94:ec:72:a6:28:93:b9:0a: 0a:17:18:f9:ca:5e:51:58:34:7e:bb:48:a4:80:0b:b7:6f:57: 86:03:a7:06:25:38:c9:58:ab:03:86:b4:9a:0f:14:c9:94:68: 36:71:ce:31:9c:0d:9d:2d:46:4a:9d:6b:05:aa:f0:a5:ab:c5: a5:3a:f0:f1:c4:f9:99:78:dc:9d:cb:6d:21:58:7d:f4:3e:5f: ac:88:2f:c3:96:e2:a6:3e:3b:49:a5:9c:44:4b:71:26:24:e5: 1c:9c:5c:aa -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAVEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjkwMDgxMTAvBgNVBAUTKDZDQkI2NzY3RjYzQTBDQjlCN0E3NDkxNEI0QTY1NzQx N0U0QzU3OEEwHhcNMjUxMDE5MDcwMDIwWhcNMjUxMDI2MDcwMDIwWjAYMRYwFAYD VQQDEw02OGY0OGM4NC04NzViMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsjEtkbjGdb/5EBbEiMpVSN/qbstvSPUKCiZR91wPE5fnUdHz362LTDpXZ9wh Kht5TCf832G/YZl69I4xo4iZeoXWJtLLHj2mpggPa+OtTyQWJd9tkbQnlK8HpcFC xWR3lTXgN5Ae91GyErhbNn0KMNclriAvZX9KEaAbO6wgmc3n8X+wuKAkKE58v53t juykIJiGqQEr2Tadazc4IToOYYPaMb8igJIAbXxw5+GMsHqIzIa96vhfSaBIEaSB G+yaFuNEoAMvvzLnCGkLHktiq7y4XI230pz+GdLcAOWfWW6c1CRSnqbK0nnvqAz+ S74xaHscAd2EN+cdr0m6Wz2svwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFC7UmEle v2JIPotO56CuI1/k250CMB8GA1UdIwQYMBaAFGy7Z2f2Ogy5t6dJFLSmV0F+TFeK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCOTAwOC8wQThGQkIxQUI0 MzIxMUVFQTI2NDQ0MENDNEY5QUUwMi9iTHRuWl9ZNkRMbTNwMGtVdEtaWFFYNU1W NG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2JMdG5aX1k2RExtM3Awa1V0S1pYUVg1TVY0by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC OTAwOC8wQThGQkIxQUI0MzIxMUVFQTI2NDQ0MENDNEY5QUUwMi9iTHRuWl9ZNkRM bTNwMGtVdEtaWFFYNU1WNG8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCYKK9BFtRySEdw0DcCT4jrapaONIcF6quH3gA/yOt3hOluhLjCrhpv DDoKqH9cKeEzs/OSdWL5nF/eC9XHKat+E3KKJ7V2XPrRVujWKPh7X7nC6yw8zo41 inNyaKO+znd1UZAc7hf0NW02ZZG3VKakxrblnzPaK2+mMdIsMI65Esv0DTFP1fb9 or6+8CI5Hr0pGMwuoRjOXHHjlOxypiiTuQoKFxj5yl5RWDR+u0ikgAu3b1eGA6cG JTjJWKsDhrSaDxTJlGg2cc4xnA2dLUZKnWsFqvClq8WlOvDxxPmZeNydy20hWH30 Pl+siC/DluKmPjtJpZxES3EmJOUcnFyq -----END CERTIFICATE-----Generated at Mon Oct 20 05:33:59 2025 by rpki-client