$ rpki-client -vvf rpki.apnic.net/member_repository/A91C95AA/156BD89E242711EDB3EA3480C4F9AE02/bJuWh9BeK1vlNhCaavm_-hmYc9Q.mft File: bJuWh9BeK1vlNhCaavm_-hmYc9Q.mft (raw, json) Hash identifier: VWVm7R688vmGNTXh0tYaB5A+DNswpW+3zzzvXzYKESk= Subject key identifier: F2:DE:29:A3:3F:70:27:A8:B4:40:F0:B1:2E:1A:3C:07:49:A9:98:C6 Authority key identifier: 6C:9B:96:87:D0:5E:2B:5B:E5:36:10:9A:6A:F9:BF:FA:19:98:73:D4 Certificate issuer: /CN=A91C95AA/serialNumber=6C9B9687D05E2B5BE536109A6AF9BFFA199873D4 Certificate serial: 028D Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/bJuWh9BeK1vlNhCaavm_-hmYc9Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C95AA/156BD89E242711EDB3EA3480C4F9AE02/bJuWh9BeK1vlNhCaavm_-hmYc9Q.mft Manifest number: 0288 Signing time: Sun 19 Oct 2025 03:49:07 +0000 Manifest this update: Sun 19 Oct 2025 03:49:07 +0000 Manifest next update: Sun 26 Oct 2025 03:49:07 +0000 Files and hashes: 1: bJuWh9BeK1vlNhCaavm_-hmYc9Q.crl (hash: qwTaOHh2umwZghAdUCCie4z5Noe1a1mRUSfcg1BU5dI=) 2: FB1F8158242A11ED9547B486C4F9AE02.roa (hash: F+DLJ1aQV5oLLpGFe5erh1ip1G2eNsPVMkZyfdufJjc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C95AA/156BD89E242711EDB3EA3480C4F9AE02/bJuWh9BeK1vlNhCaavm_-hmYc9Q.crl rsync://rpki.apnic.net/member_repository/A91C95AA/156BD89E242711EDB3EA3480C4F9AE02/bJuWh9BeK1vlNhCaavm_-hmYc9Q.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/bJuWh9BeK1vlNhCaavm_-hmYc9Q.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 03:49:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 653 (0x28d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C95AA, serialNumber=6C9B9687D05E2B5BE536109A6AF9BFFA199873D4 Validity Not Before: Oct 19 03:49:07 2025 GMT Not After : Oct 26 03:49:07 2025 GMT Subject: CN=68f45fb3-091a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:ea:6d:f0:d7:93:f4:c4:23:b0:01:de:9d:cb: 44:ad:99:82:c5:46:34:19:d3:ea:63:5e:73:44:81: 44:48:47:60:85:e3:3a:a3:63:8f:ef:71:58:2c:58: e9:99:3c:31:96:0c:cf:6a:03:66:da:99:3b:75:2b: 07:de:f8:68:b3:ea:07:85:18:72:32:79:c4:4b:5c: ed:66:f0:52:53:45:05:2a:24:64:d7:f7:56:66:52: c3:64:b5:66:5d:ff:92:92:a9:15:c7:e3:57:a1:b4: 5c:5a:76:5e:f9:8e:00:58:83:1c:a6:32:00:5c:72: f6:3c:2b:ab:42:51:43:da:68:55:f1:4f:8e:01:0b: 34:45:bb:a7:42:c1:4d:b8:9f:0a:3d:c1:12:bc:e2: c3:5e:15:12:d0:43:de:8b:13:4c:72:53:06:e4:1c: a0:d2:02:e8:ad:d8:44:91:d9:04:e4:17:07:d0:3b: 71:0b:f7:42:96:d2:02:28:7a:e1:09:f0:75:ae:49: 61:79:e7:ee:e0:30:a3:51:b7:ad:36:81:c7:c3:d8: 4d:1e:f9:fb:3e:4f:26:e3:90:51:9a:fe:78:45:27: d9:89:2c:c6:90:70:bd:b8:45:d4:46:c1:09:e2:1b: 42:39:04:f3:95:a4:13:0f:a7:e5:96:4f:1a:04:ad: 41:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:DE:29:A3:3F:70:27:A8:B4:40:F0:B1:2E:1A:3C:07:49:A9:98:C6 X509v3 Authority Key Identifier: keyid:6C:9B:96:87:D0:5E:2B:5B:E5:36:10:9A:6A:F9:BF:FA:19:98:73:D4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C95AA/156BD89E242711EDB3EA3480C4F9AE02/bJuWh9BeK1vlNhCaavm_-hmYc9Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/bJuWh9BeK1vlNhCaavm_-hmYc9Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C95AA/156BD89E242711EDB3EA3480C4F9AE02/bJuWh9BeK1vlNhCaavm_-hmYc9Q.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7f:b3:44:b2:44:ad:2f:15:a4:3d:10:45:44:94:dd:7f:c0:22: 43:59:06:0a:56:06:e2:c7:78:82:f9:16:12:b7:31:84:8c:4b: ae:04:85:84:a3:8c:e9:39:31:d1:0a:5e:d0:06:27:e9:09:e0: ad:7d:82:e3:dc:6f:d2:a7:ad:c9:0a:96:d4:b2:cb:ce:75:c7: 25:c1:71:75:bc:53:8a:7f:3f:25:2f:4f:d2:2f:76:d7:2e:8c: c0:45:96:93:df:1b:be:95:02:2c:b1:64:7c:75:df:4d:a6:49: c5:3e:66:56:e7:be:60:cf:bc:be:ad:3f:72:ca:0b:f1:3f:eb: 22:d0:ed:4b:21:4e:0f:e5:43:32:21:9f:a0:a2:e9:83:b0:9d: 14:0b:2d:a5:3d:e3:9f:45:72:43:ea:73:a1:f8:45:f5:40:8a: 7d:7f:c8:90:dc:7a:db:3c:b2:b8:bd:ff:28:91:d2:f1:e8:b3: 78:42:e1:ef:dc:1d:1f:19:1e:16:97:ea:fc:d8:54:57:ec:7e: 45:57:0c:26:5e:b4:b0:84:3a:f6:f5:32:ce:c7:17:ac:c4:26: c8:dd:77:73:bc:c3:a8:fb:55:ad:06:cf:62:26:28:d4:4c:6b: 00:e4:57:2d:28:f1:39:81:50:61:2f:fc:05:f5:8c:ab:95:d2: b5:2a:2d:d7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAo0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Qzk1QUExMTAvBgNVBAUTKDZDOUI5Njg3RDA1RTJCNUJFNTM2MTA5QTZBRjlCRkZB MTk5ODczRDQwHhcNMjUxMDE5MDM0OTA3WhcNMjUxMDI2MDM0OTA3WjAYMRYwFAYD VQQDEw02OGY0NWZiMy0wOTFhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqOpt8NeT9MQjsAHenctErZmCxUY0GdPqY15zRIFESEdgheM6o2OP73FYLFjp mTwxlgzPagNm2pk7dSsH3vhos+oHhRhyMnnES1ztZvBSU0UFKiRk1/dWZlLDZLVm Xf+SkqkVx+NXobRcWnZe+Y4AWIMcpjIAXHL2PCurQlFD2mhV8U+OAQs0RbunQsFN uJ8KPcESvOLDXhUS0EPeixNMclMG5Byg0gLordhEkdkE5BcH0DtxC/dCltICKHrh CfB1rklheefu4DCjUbetNoHHw9hNHvn7Pk8m45BRmv54RSfZiSzGkHC9uEXURsEJ 4htCOQTzlaQTD6fllk8aBK1B5QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPLeKaM/ cCeotEDwsS4aPAdJqZjGMB8GA1UdIwQYMBaAFGyblofQXitb5TYQmmr5v/oZmHPU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDOTVBQS8xNTZCRDg5RTI0 MjcxMUVEQjNFQTM0ODBDNEY5QUUwMi9iSnVXaDlCZUsxdmxOaENhYXZtXy1obVlj OVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2JKdVdoOUJlSzF2bE5oQ2Fhdm1fLWhtWWM5US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD OTVBQS8xNTZCRDg5RTI0MjcxMUVEQjNFQTM0ODBDNEY5QUUwMi9iSnVXaDlCZUsx dmxOaENhYXZtXy1obVljOVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB/s0SyRK0vFaQ9EEVElN1/wCJDWQYKVgbix3iC+RYStzGEjEuuBIWE o4zpOTHRCl7QBifpCeCtfYLj3G/Sp63JCpbUssvOdcclwXF1vFOKfz8lL0/SL3bX LozARZaT3xu+lQIssWR8dd9NpknFPmZW575gz7y+rT9yygvxP+si0O1LIU4P5UMy IZ+goumDsJ0UCy2lPeOfRXJD6nOh+EX1QIp9f8iQ3HrbPLK4vf8okdLx6LN4QuHv 3B0fGR4Wl+r82FRX7H5FVwwmXrSwhDr29TLOxxesxCbI3XdzvMOo+1WtBs9iJijU TGsA5FctKPE5gVBhL/wF9YyrldK1Ki3X -----END CERTIFICATE-----Generated at Mon Oct 20 21:26:25 2025 by rpki-client