$ rpki-client -vvf rpki.apnic.net/member_repository/A91C2C8A/61EC491624C911EF9C8C6259C4F9AE02/bOe1dQ5uF9PTnrWwh_0_rVlZ8yU.mft File: bOe1dQ5uF9PTnrWwh_0_rVlZ8yU.mft (raw, json) Hash identifier: PqvS+GtN/NKC6jgqokw+fsi/6WKu8N5NtpvvvUB/OMQ= Subject key identifier: 8A:6A:1A:09:41:82:AF:B1:BE:FA:2A:2F:DD:A5:EE:E3:EA:3C:3B:65 Authority key identifier: 6C:E7:B5:75:0E:6E:17:D3:D3:9E:B5:B0:87:FD:3F:AD:59:59:F3:25 Certificate issuer: /CN=A91C2C8A/serialNumber=6CE7B5750E6E17D3D39EB5B087FD3FAD5959F325 Certificate serial: 0116 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bOe1dQ5uF9PTnrWwh_0_rVlZ8yU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C2C8A/61EC491624C911EF9C8C6259C4F9AE02/bOe1dQ5uF9PTnrWwh_0_rVlZ8yU.mft Manifest number: 0109 Signing time: Sun 19 Oct 2025 08:00:35 +0000 Manifest this update: Sun 19 Oct 2025 08:00:35 +0000 Manifest next update: Sun 26 Oct 2025 08:00:35 +0000 Files and hashes: 1: bOe1dQ5uF9PTnrWwh_0_rVlZ8yU.crl (hash: D3cOUqIY/nqAM3xYzrEuk+b+pZfGohhlRlPhNP3pMzI=) 2: AA97516E24CA11EFB59A9379C4F9AE02.roa (hash: vY7AsZ08Pw1TlHVY7hGbU3NQuV3eecatAeSNrTUiOFk=) 3: A1732A0E24CA11EF93486579C4F9AE02.roa (hash: c1fiRMTzx+sKc+PUXDGG2MhU2IceNjiS5ZTGcmsSFDc=) 4: 41A8950C272F11EF9D0A0C5CC4F9AE02.roa (hash: Zeo9E1pvK7pqXxcoNJpNgvy4k5rrUkurswNhSqNf24s=) 5: A074721624CA11EF93486579C4F9AE02.roa (hash: EAuwmClXGMo+6npZ19N/RRkMj4x/6MUGDRCOhMDeS9A=) 6: 0E49D1E024CC11EFB113A27BC4F9AE02.roa (hash: NR/+YgQkm7A4mmhSV+xz9O4OYp+ZS9oT3gP6zL7oedM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C2C8A/61EC491624C911EF9C8C6259C4F9AE02/bOe1dQ5uF9PTnrWwh_0_rVlZ8yU.crl rsync://rpki.apnic.net/member_repository/A91C2C8A/61EC491624C911EF9C8C6259C4F9AE02/bOe1dQ5uF9PTnrWwh_0_rVlZ8yU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bOe1dQ5uF9PTnrWwh_0_rVlZ8yU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 08:00:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 278 (0x116) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C2C8A, serialNumber=6CE7B5750E6E17D3D39EB5B087FD3FAD5959F325 Validity Not Before: Oct 19 08:00:35 2025 GMT Not After : Oct 26 08:00:35 2025 GMT Subject: CN=68f49aa3-601f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:2b:de:5f:b5:df:07:3f:a4:fd:c9:51:f9:b3: 5b:c7:56:4c:48:47:84:98:db:f2:21:fa:3b:b1:8f: 19:95:7a:68:73:a6:9e:8e:a4:c5:06:47:2a:18:01: 44:f8:f7:58:fb:83:a7:61:3f:4b:a6:08:49:57:02: 28:ff:ff:f7:fc:ce:70:fa:a7:4c:d8:33:fc:71:b5: 9b:d3:2b:42:e5:93:9f:2a:93:df:fc:e1:7d:d7:89: 69:1c:3f:e2:9b:d5:13:90:38:d2:a7:ef:13:96:2a: 17:0d:37:20:20:91:3c:f5:b6:f3:fa:da:b7:7b:62: 5a:57:85:b7:f1:90:8f:de:eb:e5:3e:2a:3c:4b:b0: 16:c2:6d:c0:04:19:92:ad:c3:79:fe:46:13:67:5a: 3b:b1:af:3b:9b:d1:ac:d7:e5:91:f8:a8:dc:cf:9b: 04:3a:14:14:69:e9:a3:04:07:68:46:3f:43:7a:3e: 01:42:ea:5e:48:60:f9:fa:3e:fd:e6:ea:3c:55:b1: 57:f8:92:b5:26:4d:b6:b9:2d:24:99:81:20:53:4d: f7:94:f1:ac:a1:bf:a0:91:0c:b1:a4:9c:87:af:d6: 53:22:ee:64:64:6d:27:ed:bd:31:31:6f:15:9b:bc: b5:a1:bc:07:17:68:28:3e:84:8d:ca:99:3b:5b:11: 06:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:6A:1A:09:41:82:AF:B1:BE:FA:2A:2F:DD:A5:EE:E3:EA:3C:3B:65 X509v3 Authority Key Identifier: keyid:6C:E7:B5:75:0E:6E:17:D3:D3:9E:B5:B0:87:FD:3F:AD:59:59:F3:25 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C2C8A/61EC491624C911EF9C8C6259C4F9AE02/bOe1dQ5uF9PTnrWwh_0_rVlZ8yU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bOe1dQ5uF9PTnrWwh_0_rVlZ8yU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C2C8A/61EC491624C911EF9C8C6259C4F9AE02/bOe1dQ5uF9PTnrWwh_0_rVlZ8yU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4a:8e:ed:35:16:df:05:b0:52:c5:e1:bc:9b:09:58:54:99:2e: 00:7f:17:3a:9a:b1:05:21:da:2c:56:72:cf:23:e0:43:f9:3b: 07:5a:86:4f:7a:1e:35:73:ff:32:4d:3b:6d:37:ba:06:5c:e5: 33:35:8f:21:6a:36:f8:93:7b:e9:83:6b:c7:35:bd:8d:48:66: 9b:ea:fa:c5:2b:45:fb:da:32:5d:6b:19:be:ea:f9:a4:c7:25: 31:a2:de:5b:45:41:ca:5c:e5:3d:d1:6b:b4:a0:3b:70:e1:19: a0:e9:4c:f9:cd:a3:3b:d5:14:c7:58:11:c1:32:a9:ca:67:28: be:6b:c6:41:ee:d5:18:23:fd:13:5a:f3:f3:4f:67:8f:3a:e2: 61:6a:aa:c2:44:fe:7f:bb:de:9b:4f:1c:57:4c:97:b1:17:fc: 90:05:b3:9c:7d:6d:50:32:c4:1d:a9:f9:ea:b7:c8:7b:31:3d: 92:0a:b7:80:b7:45:56:7c:6c:ab:84:c5:d5:02:ce:0d:a7:b6: f4:9f:76:d0:37:ae:d1:d8:a4:0b:5f:b5:49:d3:3e:00:ce:7b: 65:47:ca:29:15:0b:a5:ea:97:fe:2a:c9:7d:b9:2b:d3:3c:f1: 00:83:78:cd:8d:6d:b4:db:32:cd:49:52:d9:c5:bb:08:d5:af: 91:72:c6:8d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICARYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzJDOEExMTAvBgNVBAUTKDZDRTdCNTc1MEU2RTE3RDNEMzlFQjVCMDg3RkQzRkFE NTk1OUYzMjUwHhcNMjUxMDE5MDgwMDM1WhcNMjUxMDI2MDgwMDM1WjAYMRYwFAYD VQQDEw02OGY0OWFhMy02MDFmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2iveX7XfBz+k/clR+bNbx1ZMSEeEmNvyIfo7sY8ZlXpoc6aejqTFBkcqGAFE +PdY+4OnYT9LpghJVwIo///3/M5w+qdM2DP8cbWb0ytC5ZOfKpPf/OF914lpHD/i m9UTkDjSp+8TlioXDTcgIJE89bbz+tq3e2JaV4W38ZCP3uvlPio8S7AWwm3ABBmS rcN5/kYTZ1o7sa87m9Gs1+WR+Kjcz5sEOhQUaemjBAdoRj9Dej4BQupeSGD5+j79 5uo8VbFX+JK1Jk22uS0kmYEgU033lPGsob+gkQyxpJyHr9ZTIu5kZG0n7b0xMW8V m7y1obwHF2goPoSNypk7WxEG1QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIpqGglB gq+xvvoqL92l7uPqPDtlMB8GA1UdIwQYMBaAFGzntXUObhfT0561sIf9P61ZWfMl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMkM4QS82MUVDNDkxNjI0 QzkxMUVGOUM4QzYyNTlDNEY5QUUwMi9iT2UxZFE1dUY5UFRucld3aF8wX3JWbFo4 eVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2JPZTFkUTV1RjlQVG5yV3doXzBfclZsWjh5VS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MkM4QS82MUVDNDkxNjI0QzkxMUVGOUM4QzYyNTlDNEY5QUUwMi9iT2UxZFE1dUY5 UFRucld3aF8wX3JWbFo4eVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBKju01Ft8FsFLF4bybCVhUmS4Afxc6mrEFIdosVnLPI+BD+TsHWoZP eh41c/8yTTttN7oGXOUzNY8hajb4k3vpg2vHNb2NSGab6vrFK0X72jJdaxm+6vmk xyUxot5bRUHKXOU90Wu0oDtw4Rmg6Uz5zaM71RTHWBHBMqnKZyi+a8ZB7tUYI/0T WvPzT2ePOuJhaqrCRP5/u96bTxxXTJexF/yQBbOcfW1QMsQdqfnqt8h7MT2SCreA t0VWfGyrhMXVAs4Np7b0n3bQN67R2KQLX7VJ0z4AzntlR8opFQul6pf+Ksl9uSvT PPEAg3jNjW202zLNSVLZxbsI1a+RcsaN -----END CERTIFICATE-----Generated at Mon Oct 20 13:42:47 2025 by rpki-client