$ rpki-client -vvf rpki.apnic.net/member_repository/A91C37ED/6DB954A262A311EE82B90074C4F9AE02/Bx-BGRcUQYAr4yYfFWJ9ryidszY.mft File: Bx-BGRcUQYAr4yYfFWJ9ryidszY.mft (raw, json) Hash identifier: HYDMxlWUYabkJGaY+Y3Dm1UhfyzOqw0d9xQkRwS5uTY= Subject key identifier: 5B:89:B4:A0:C6:F8:27:8B:DA:47:30:20:A0:9E:DA:5A:38:B8:89:38 Authority key identifier: 07:1F:81:19:17:14:41:80:2B:E3:26:1F:15:62:7D:AF:28:9D:B3:36 Certificate issuer: /CN=A91C37ED/serialNumber=071F8119171441802BE3261F15627DAF289DB336 Certificate serial: 017F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Bx-BGRcUQYAr4yYfFWJ9ryidszY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C37ED/6DB954A262A311EE82B90074C4F9AE02/Bx-BGRcUQYAr4yYfFWJ9ryidszY.mft Manifest number: 017D Signing time: Sun 19 Oct 2025 06:18:00 +0000 Manifest this update: Sun 19 Oct 2025 06:17:59 +0000 Manifest next update: Sun 26 Oct 2025 06:17:59 +0000 Files and hashes: 1: Bx-BGRcUQYAr4yYfFWJ9ryidszY.crl (hash: Q4r2SEGOIG33utJpL2IXc8eVTH/XeCE6IsBpwOg1EIE=) 2: 6CE66CFC630E11EEA9EDC20FC4F9AE02.roa (hash: GWZ2MHtEWnxPiTCBVRb6cUY0T8WOEUXRXli5S8fNKVc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C37ED/6DB954A262A311EE82B90074C4F9AE02/Bx-BGRcUQYAr4yYfFWJ9ryidszY.crl rsync://rpki.apnic.net/member_repository/A91C37ED/6DB954A262A311EE82B90074C4F9AE02/Bx-BGRcUQYAr4yYfFWJ9ryidszY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Bx-BGRcUQYAr4yYfFWJ9ryidszY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 06:17:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 383 (0x17f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C37ED, serialNumber=071F8119171441802BE3261F15627DAF289DB336 Validity Not Before: Oct 19 06:17:59 2025 GMT Not After : Oct 26 06:17:59 2025 GMT Subject: CN=68f48297-75e0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:00:42:79:42:e3:b2:71:6f:29:82:29:05:cb: 50:6a:6e:bc:37:ab:77:6d:6a:83:43:7c:af:82:68: f7:e8:32:d9:f8:f6:ce:91:d5:c5:78:7a:c2:6c:72: b0:50:d7:7d:a8:23:19:5d:dc:e6:af:23:fb:b4:35: 3a:cc:13:fa:59:1f:5d:00:3f:98:28:7e:23:26:07: bd:9f:14:60:11:09:d0:e0:8a:77:fd:20:b8:42:31: 21:02:a5:f0:b7:6a:c7:56:fb:57:c7:e1:a3:a7:4f: de:29:90:a1:3c:b1:ee:55:36:81:48:1b:e1:ef:e2: 73:42:77:fc:41:68:83:63:38:c9:11:17:f2:13:c1: 87:d6:ec:f5:b2:63:45:a7:c8:90:2e:51:94:0b:c4: 0c:db:d4:f1:9b:60:c9:cc:d1:0a:f0:d3:f6:ed:d3: ce:5a:d8:f0:84:7c:b8:a2:73:42:53:fc:7d:dc:16: a2:aa:be:c3:a8:ee:ca:69:9d:1b:a6:19:52:d7:70: 07:bc:7b:f1:99:6c:fc:88:a3:20:cb:81:9c:ac:f8: 63:74:ee:0a:a0:7e:7e:66:04:a2:47:29:c1:19:96: fb:e3:cf:62:0a:a8:58:8a:38:b4:92:ad:af:d8:ba: f0:41:4c:f6:f3:ac:9f:31:5c:49:10:a0:c0:86:82: 45:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:89:B4:A0:C6:F8:27:8B:DA:47:30:20:A0:9E:DA:5A:38:B8:89:38 X509v3 Authority Key Identifier: keyid:07:1F:81:19:17:14:41:80:2B:E3:26:1F:15:62:7D:AF:28:9D:B3:36 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C37ED/6DB954A262A311EE82B90074C4F9AE02/Bx-BGRcUQYAr4yYfFWJ9ryidszY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Bx-BGRcUQYAr4yYfFWJ9ryidszY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C37ED/6DB954A262A311EE82B90074C4F9AE02/Bx-BGRcUQYAr4yYfFWJ9ryidszY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 28:38:1f:84:35:42:41:31:52:f7:98:58:e0:74:fb:a2:40:bb: e6:f6:92:06:e7:07:53:1d:85:21:f8:87:24:da:80:12:3f:98: 9d:78:6b:74:eb:cb:7e:b2:94:31:81:62:c6:3e:e1:5d:0d:9c: 53:62:54:a8:f5:ae:e0:da:e3:69:dd:c9:30:4f:90:8d:c7:e2: 11:5c:14:ec:71:1f:8c:86:28:cb:65:39:c2:a7:bc:f6:13:6b: d7:2c:f5:49:36:be:53:73:68:43:a5:cc:70:c0:e0:12:f8:9d: 15:f8:c6:a3:d0:a7:55:b6:5e:dc:e5:b2:53:03:d7:f6:16:59: 59:ea:97:0e:ec:86:65:aa:d7:01:2e:b1:38:81:e2:ec:d1:64: 50:6d:d7:27:90:14:3e:0e:6f:06:61:08:7c:31:2c:24:9e:4c: a2:a6:90:97:e2:ac:25:f5:ca:a6:2f:58:79:a6:25:56:80:3e: 80:ae:55:6e:15:cd:c2:3d:7f:08:6b:da:5b:cb:d3:d9:0a:79: 03:2b:31:53:04:38:0f:14:1f:5a:70:d5:03:4a:f2:05:1c:77: fb:cd:93:88:66:e7:2f:db:3d:25:11:3e:3e:11:61:0e:3b:38: e8:7b:1e:97:b7:66:3a:41:a3:b8:ac:62:2f:31:f8:fa:d1:79: c3:70:86:70 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAX8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzM3RUQxMTAvBgNVBAUTKDA3MUY4MTE5MTcxNDQxODAyQkUzMjYxRjE1NjI3REFG Mjg5REIzMzYwHhcNMjUxMDE5MDYxNzU5WhcNMjUxMDI2MDYxNzU5WjAYMRYwFAYD VQQDEw02OGY0ODI5Ny03NWUwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1QBCeULjsnFvKYIpBctQam68N6t3bWqDQ3yvgmj36DLZ+PbOkdXFeHrCbHKw UNd9qCMZXdzmryP7tDU6zBP6WR9dAD+YKH4jJge9nxRgEQnQ4Ip3/SC4QjEhAqXw t2rHVvtXx+Gjp0/eKZChPLHuVTaBSBvh7+JzQnf8QWiDYzjJERfyE8GH1uz1smNF p8iQLlGUC8QM29Txm2DJzNEK8NP27dPOWtjwhHy4onNCU/x93Baiqr7DqO7KaZ0b phlS13AHvHvxmWz8iKMgy4GcrPhjdO4KoH5+ZgSiRynBGZb7489iCqhYiji0kq2v 2LrwQUz286yfMVxJEKDAhoJF9QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFuJtKDG +CeL2kcwIKCe2lo4uIk4MB8GA1UdIwQYMBaAFAcfgRkXFEGAK+MmHxVifa8onbM2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMzdFRC82REI5NTRBMjYy QTMxMUVFODJCOTAwNzRDNEY5QUUwMi9CeC1CR1JjVVFZQXI0eVlmRldKOXJ5aWRz elkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0J4LUJHUmNVUVlBcjR5WWZGV0o5cnlpZHN6WS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MzdFRC82REI5NTRBMjYyQTMxMUVFODJCOTAwNzRDNEY5QUUwMi9CeC1CR1JjVVFZ QXI0eVlmRldKOXJ5aWRzelkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAoOB+ENUJBMVL3mFjgdPuiQLvm9pIG5wdTHYUh+Ick2oASP5ideGt0 68t+spQxgWLGPuFdDZxTYlSo9a7g2uNp3ckwT5CNx+IRXBTscR+MhijLZTnCp7z2 E2vXLPVJNr5Tc2hDpcxwwOAS+J0V+Maj0KdVtl7c5bJTA9f2FllZ6pcO7IZlqtcB LrE4geLs0WRQbdcnkBQ+Dm8GYQh8MSwknkyippCX4qwl9cqmL1h5piVWgD6ArlVu Fc3CPX8Ia9pby9PZCnkDKzFTBDgPFB9acNUDSvIFHHf7zZOIZucv2z0lET4+EWEO Ozjoex6Xt2Y6QaO4rGIvMfj60XnDcIZw -----END CERTIFICATE-----Generated at Mon Oct 20 15:40:49 2025 by rpki-client