$ rpki-client -vvf rpki.apnic.net/member_repository/A91BBA80/B98E81D605B911EA8208996EC4F9AE02/Bg9-d8AKy-CGjcC4_KI9Sl8H13o.mft File: Bg9-d8AKy-CGjcC4_KI9Sl8H13o.mft (raw, json) Hash identifier: f8F5aMsSKqcKdk3HRkfGAmKCh0Vmb7cPUzVbm/m3lNM= Subject key identifier: F0:10:BF:F2:64:DD:72:F4:8E:CA:08:15:A5:73:A1:1C:3E:C6:8C:42 Authority key identifier: 06:0F:7E:77:C0:0A:CB:E0:86:8D:C0:B8:FC:A2:3D:4A:5F:07:D7:7A Certificate issuer: /CN=A91BBA80/serialNumber=060F7E77C00ACBE0868DC0B8FCA23D4A5F07D77A Certificate serial: 0CF8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Bg9-d8AKy-CGjcC4_KI9Sl8H13o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BBA80/B98E81D605B911EA8208996EC4F9AE02/Bg9-d8AKy-CGjcC4_KI9Sl8H13o.mft Manifest number: 0CC0 Signing time: Sat 18 Oct 2025 19:06:27 +0000 Manifest this update: Sat 18 Oct 2025 19:06:26 +0000 Manifest next update: Sat 25 Oct 2025 19:06:26 +0000 Files and hashes: 1: Bg9-d8AKy-CGjcC4_KI9Sl8H13o.crl (hash: nMPFWFtgjjNGVyAHradrgRXKX2kbU/AZKXL9tLFPejs=) 2: 12561046368911EEA0CB766BC4F9AE02.roa (hash: ZsNiLxfxjjXIOR9efOK6g19RpsthQOBE4XYCmM1hnq8=) 3: 21A9C2D4221211EF9624DB0CC4F9AE02.roa (hash: UuY5qtUwk8Dlu801YZxvnO/xKQaWGop0bKAvOOHuar0=) 4: 2FC3DE84B15B11EB8CCCD624C4F9AE02.roa (hash: e/Kuo5QdtsaM/mztDHYG4XkizjKIPPrgUEb1ap1W45w=) 5: 22E63812221211EF9624DB0CC4F9AE02.roa (hash: tEtTFQOPTziC3M/Up8UOSv6VFGJx+4dP/cUQCVWj4l4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BBA80/B98E81D605B911EA8208996EC4F9AE02/Bg9-d8AKy-CGjcC4_KI9Sl8H13o.crl rsync://rpki.apnic.net/member_repository/A91BBA80/B98E81D605B911EA8208996EC4F9AE02/Bg9-d8AKy-CGjcC4_KI9Sl8H13o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Bg9-d8AKy-CGjcC4_KI9Sl8H13o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 19:06:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3320 (0xcf8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BBA80, serialNumber=060F7E77C00ACBE0868DC0B8FCA23D4A5F07D77A Validity Not Before: Oct 18 19:06:26 2025 GMT Not After : Oct 25 19:06:26 2025 GMT Subject: CN=68f3e532-f86d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:96:d6:54:94:cc:7a:93:63:13:c7:53:ee:04: 29:e2:1a:73:31:cc:40:a3:b3:c9:35:ae:24:3a:ce: 50:7f:f6:16:f9:68:36:28:9f:09:e4:6a:9e:ac:a0: c3:07:4f:8e:11:4a:aa:37:ea:7e:26:97:0e:8f:75: 15:94:cc:2d:d4:78:9d:90:e9:5d:b4:52:5c:4f:a3: 4c:bc:e6:60:d0:2f:c7:93:08:77:b2:f4:6c:72:74: a5:45:a1:20:96:bd:51:01:61:61:95:84:de:04:ea: c7:63:c3:f1:6d:d1:f0:8c:2d:18:45:19:ec:d8:cf: 0e:78:a2:1e:eb:b7:fc:1d:a8:1c:9b:33:14:a3:b1: bf:9a:cd:9c:cb:75:df:ba:fc:cb:a9:42:c0:4f:72: 24:f5:32:e5:c7:4d:07:06:2d:32:31:f4:42:2f:a0: 53:3b:e8:93:ec:d7:a0:00:64:89:4b:0b:c1:73:7c: d1:8e:3a:3e:14:c1:92:bf:2c:2b:f1:65:ce:e6:0b: 91:ad:ac:2f:c9:01:d6:6f:4e:ae:0c:f1:03:dc:a2: c6:41:60:f1:c9:c8:70:f9:e3:83:9a:df:6f:bb:b3: 0e:a8:44:1c:b4:ed:7d:a2:eb:ca:dd:83:ee:99:29: 6d:c3:5b:8b:ca:22:da:fb:5d:c1:97:e0:d3:19:0d: 11:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:10:BF:F2:64:DD:72:F4:8E:CA:08:15:A5:73:A1:1C:3E:C6:8C:42 X509v3 Authority Key Identifier: keyid:06:0F:7E:77:C0:0A:CB:E0:86:8D:C0:B8:FC:A2:3D:4A:5F:07:D7:7A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BBA80/B98E81D605B911EA8208996EC4F9AE02/Bg9-d8AKy-CGjcC4_KI9Sl8H13o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Bg9-d8AKy-CGjcC4_KI9Sl8H13o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BBA80/B98E81D605B911EA8208996EC4F9AE02/Bg9-d8AKy-CGjcC4_KI9Sl8H13o.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3f:dc:6a:a6:aa:04:ae:b2:8a:3e:aa:a4:4a:a4:5e:9c:8a:dd: 05:b9:c4:1b:77:f0:24:b5:43:5b:36:06:fe:b8:b0:1c:ec:45: 3a:95:d0:38:50:19:93:a6:24:9f:88:c6:14:68:d9:2f:34:93: fa:59:68:79:0a:01:e1:08:11:2a:86:87:3b:ad:0b:7f:28:50: 92:20:8f:50:4f:41:ac:44:d3:20:0d:a6:f5:fd:4b:35:d7:43: 47:f9:52:f0:5d:b2:e4:c0:62:82:57:b4:8e:9b:80:69:54:64: 6f:5f:00:28:89:e5:a2:30:20:a8:32:fe:4a:01:97:8b:6b:42: 66:53:da:b4:1c:81:ad:c7:1c:0a:ab:b0:52:43:a8:4b:85:3d: a1:84:ee:09:c4:dc:f3:95:62:1e:fc:7c:0f:d3:a8:3a:c3:57: a2:0a:1a:28:ba:dd:b7:51:84:fe:db:3d:53:2e:3d:3a:e3:09: f8:b9:98:05:a4:23:ce:f6:e7:85:47:11:47:4d:e2:dc:71:5a: a5:11:73:e2:3d:b7:c6:2b:a0:8a:8f:b6:de:2b:cf:28:52:ec: c7:f1:05:2e:41:48:74:b0:1d:46:96:e8:09:18:9e:5e:81:83: 34:97:3e:03:fb:c4:64:37:42:61:1e:ad:02:33:ca:93:4b:c6: 45:68:87:f5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDPgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkJBODAxMTAvBgNVBAUTKDA2MEY3RTc3QzAwQUNCRTA4NjhEQzBCOEZDQTIzRDRB NUYwN0Q3N0EwHhcNMjUxMDE4MTkwNjI2WhcNMjUxMDI1MTkwNjI2WjAYMRYwFAYD VQQDEw02OGYzZTUzMi1mODZkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAupbWVJTMepNjE8dT7gQp4hpzMcxAo7PJNa4kOs5Qf/YW+Wg2KJ8J5GqerKDD B0+OEUqqN+p+JpcOj3UVlMwt1HidkOldtFJcT6NMvOZg0C/Hkwh3svRscnSlRaEg lr1RAWFhlYTeBOrHY8PxbdHwjC0YRRns2M8OeKIe67f8HagcmzMUo7G/ms2cy3Xf uvzLqULAT3Ik9TLlx00HBi0yMfRCL6BTO+iT7NegAGSJSwvBc3zRjjo+FMGSvywr 8WXO5guRrawvyQHWb06uDPED3KLGQWDxychw+eODmt9vu7MOqEQctO19ouvK3YPu mSltw1uLyiLa+13Bl+DTGQ0RQwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPAQv/Jk 3XL0jsoIFaVzoRw+xoxCMB8GA1UdIwQYMBaAFAYPfnfACsvgho3AuPyiPUpfB9d6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQkE4MC9COThFODFENjA1 QjkxMUVBODIwODk5NkVDNEY5QUUwMi9CZzktZDhBS3ktQ0dqY0M0X0tJOVNsOEgx M28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0JnOS1kOEFLeS1DR2pjQzRfS0k5U2w4SDEzby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC QkE4MC9COThFODFENjA1QjkxMUVBODIwODk5NkVDNEY5QUUwMi9CZzktZDhBS3kt Q0dqY0M0X0tJOVNsOEgxM28ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA/3GqmqgSusoo+qqRKpF6cit0FucQbd/AktUNbNgb+uLAc7EU6ldA4 UBmTpiSfiMYUaNkvNJP6WWh5CgHhCBEqhoc7rQt/KFCSII9QT0GsRNMgDab1/Us1 10NH+VLwXbLkwGKCV7SOm4BpVGRvXwAoieWiMCCoMv5KAZeLa0JmU9q0HIGtxxwK q7BSQ6hLhT2hhO4JxNzzlWIe/HwP06g6w1eiChoout23UYT+2z1TLj064wn4uZgF pCPO9ueFRxFHTeLccVqlEXPiPbfGK6CKj7beK88oUuzH8QUuQUh0sB1GlugJGJ5e gYM0lz4D+8RkN0JhHq0CM8qTS8ZFaIf1 -----END CERTIFICATE-----Generated at Mon Oct 20 04:46:26 2025 by rpki-client