$ rpki-client -vvf rpki.apnic.net/member_repository/A91CE4C1/3644887AE9BB11EFBAAC9D70C4F9AE02/BH7xoc9llmNJhmdnZVZI7vkRDFo.mft File: BH7xoc9llmNJhmdnZVZI7vkRDFo.mft (raw, json) Hash identifier: Pi/26g95mCokhvSpa7HuYaw6usY5Ew15weGU9Fa12MI= Subject key identifier: 95:C1:13:E9:F6:E3:53:1F:9F:0F:24:70:A5:8B:B4:97:C6:3C:32:90 Authority key identifier: 04:7E:F1:A1:CF:65:96:63:49:86:67:67:65:56:48:EE:F9:11:0C:5A Certificate issuer: /CN=A91CE4C1/serialNumber=047EF1A1CF65966349866767655648EEF9110C5A Certificate serial: 8E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BH7xoc9llmNJhmdnZVZI7vkRDFo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CE4C1/3644887AE9BB11EFBAAC9D70C4F9AE02/BH7xoc9llmNJhmdnZVZI7vkRDFo.mft Manifest number: 87 Signing time: Sun 19 Oct 2025 09:58:18 +0000 Manifest this update: Sun 19 Oct 2025 09:58:17 +0000 Manifest next update: Sun 26 Oct 2025 09:58:17 +0000 Files and hashes: 1: BH7xoc9llmNJhmdnZVZI7vkRDFo.crl (hash: 6m5i0KT/ema9vpcvtUsi+ubtDGnWclO4y41faAHVyik=) 2: 459E12EAE9C611EFB8012F10C4F9AE02.roa (hash: /RmfZz46so9ge+fbPNaFv77MZSPZTzTOQnyx59sNwag=) 3: FB4C0514E9C311EFADA7270AC4F9AE02.roa (hash: b+8Vf+1PI1yNyvvstVRxJPifoMZ8KqBIQc0NBIzO5qc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CE4C1/3644887AE9BB11EFBAAC9D70C4F9AE02/BH7xoc9llmNJhmdnZVZI7vkRDFo.crl rsync://rpki.apnic.net/member_repository/A91CE4C1/3644887AE9BB11EFBAAC9D70C4F9AE02/BH7xoc9llmNJhmdnZVZI7vkRDFo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BH7xoc9llmNJhmdnZVZI7vkRDFo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 09:58:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 142 (0x8e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CE4C1, serialNumber=047EF1A1CF65966349866767655648EEF9110C5A Validity Not Before: Oct 19 09:58:17 2025 GMT Not After : Oct 26 09:58:17 2025 GMT Subject: CN=68f4b639-bef3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:c6:cd:84:25:bb:b0:05:ea:04:13:5b:77:68: e5:68:a7:a6:90:f5:67:b7:23:e4:71:59:90:e6:3d: 53:8b:31:4d:1c:3d:bf:71:73:02:66:58:25:1f:3f: b7:c9:23:f4:3c:e3:f2:e8:b9:ac:5e:36:a9:6b:d6: b2:58:c7:fe:ca:ea:de:cf:11:89:0a:a3:e3:61:b5: 8a:0a:f9:35:be:a8:56:cd:3f:9c:50:e1:22:e2:7e: f3:60:92:d8:0b:79:fd:8e:4d:f9:81:a7:60:c1:d3: 8a:c0:ff:5d:bb:d2:5c:75:0d:78:1c:96:5d:ba:49: c3:5f:52:02:b7:0b:98:74:5f:d8:f5:46:76:c9:71: a4:bf:b1:9e:ce:79:49:4e:92:92:df:14:ba:bf:b7: 49:e4:83:dd:a9:7f:ee:6a:d3:a3:53:8b:32:28:c2: 59:f8:34:4e:39:2d:90:7a:b6:ba:34:e4:39:02:5a: 33:29:fe:df:7b:7f:50:16:08:37:ee:60:c6:5a:2d: 4d:0b:8e:30:8c:e2:2c:b4:cd:a1:78:a0:17:05:94: ef:b7:b7:a8:41:ce:79:f1:2b:1c:77:8e:01:b3:00: fc:ce:c9:51:12:f5:b2:c8:83:5a:a6:8d:be:6b:6b: 26:60:d6:4a:b2:3c:26:3c:e0:3f:12:a7:76:27:06: 8d:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:C1:13:E9:F6:E3:53:1F:9F:0F:24:70:A5:8B:B4:97:C6:3C:32:90 X509v3 Authority Key Identifier: keyid:04:7E:F1:A1:CF:65:96:63:49:86:67:67:65:56:48:EE:F9:11:0C:5A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CE4C1/3644887AE9BB11EFBAAC9D70C4F9AE02/BH7xoc9llmNJhmdnZVZI7vkRDFo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BH7xoc9llmNJhmdnZVZI7vkRDFo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CE4C1/3644887AE9BB11EFBAAC9D70C4F9AE02/BH7xoc9llmNJhmdnZVZI7vkRDFo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1a:a9:65:ab:c4:57:70:1b:ab:5c:40:4e:1b:a4:f0:6b:72:f3: 32:0a:ff:46:f7:4f:ff:15:2c:c7:c3:87:d7:7b:33:0f:26:bb: 2c:f4:da:97:a5:34:fc:e6:2d:19:c0:e5:6c:88:16:66:93:37: 5b:41:2a:1e:1f:8f:2a:b7:f7:0b:78:17:58:ac:e6:b4:77:77: 70:c1:c4:9d:aa:a0:52:da:34:ff:71:08:b5:ae:7c:90:ff:c5: a9:61:08:2c:05:84:18:60:01:d9:ad:1c:d4:7e:a4:93:f4:59: 55:52:ac:3b:12:87:8a:c6:d3:4f:22:b9:17:37:87:7c:c1:e5: c7:4f:cd:7d:45:43:46:4b:a6:ab:0c:55:8a:ca:01:fb:8a:75: ba:95:cd:d5:7f:78:58:71:55:28:c3:ec:7b:c5:99:17:1c:77: 56:95:cf:44:7b:a0:82:35:5c:ef:15:7e:58:d8:71:6b:64:26: 87:8d:cd:66:ea:74:b7:81:60:f9:55:83:15:21:b9:27:7b:d4: e3:5f:82:d9:5a:25:52:e5:b3:71:1a:79:83:dd:d8:55:84:42: 7f:8c:04:73:c8:11:d1:67:68:4a:91:99:d4:30:f2:36:e9:78: dc:57:84:f3:9b:c5:dd:3b:d4:6e:26:48:ce:58:96:3b:0c:fc: 49:08:2e:3a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAI4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0U0QzExMTAvBgNVBAUTKDA0N0VGMUExQ0Y2NTk2NjM0OTg2Njc2NzY1NTY0OEVF RjkxMTBDNUEwHhcNMjUxMDE5MDk1ODE3WhcNMjUxMDI2MDk1ODE3WjAYMRYwFAYD VQQDEw02OGY0YjYzOS1iZWYzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu8bNhCW7sAXqBBNbd2jlaKemkPVntyPkcVmQ5j1TizFNHD2/cXMCZlglHz+3 ySP0POPy6LmsXjapa9ayWMf+yurezxGJCqPjYbWKCvk1vqhWzT+cUOEi4n7zYJLY C3n9jk35gadgwdOKwP9du9JcdQ14HJZduknDX1ICtwuYdF/Y9UZ2yXGkv7GeznlJ TpKS3xS6v7dJ5IPdqX/uatOjU4syKMJZ+DROOS2Qera6NOQ5AlozKf7fe39QFgg3 7mDGWi1NC44wjOIstM2heKAXBZTvt7eoQc558Sscd44BswD8zslREvWyyINapo2+ a2smYNZKsjwmPOA/Eqd2JwaN8QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJXBE+n2 41Mfnw8kcKWLtJfGPDKQMB8GA1UdIwQYMBaAFAR+8aHPZZZjSYZnZ2VWSO75EQxa MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRTRDMS8zNjQ0ODg3QUU5 QkIxMUVGQkFBQzlENzBDNEY5QUUwMi9CSDd4b2M5bGxtTkpobWRuWlZaSTd2a1JE Rm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0JIN3hvYzlsbG1OSmhtZG5aVlpJN3ZrUkRGby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RTRDMS8zNjQ0ODg3QUU5QkIxMUVGQkFBQzlENzBDNEY5QUUwMi9CSDd4b2M5bGxt TkpobWRuWlZaSTd2a1JERm8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAaqWWrxFdwG6tcQE4bpPBrcvMyCv9G90//FSzHw4fXezMPJrss9NqX pTT85i0ZwOVsiBZmkzdbQSoeH48qt/cLeBdYrOa0d3dwwcSdqqBS2jT/cQi1rnyQ /8WpYQgsBYQYYAHZrRzUfqST9FlVUqw7EoeKxtNPIrkXN4d8weXHT819RUNGS6ar DFWKygH7inW6lc3Vf3hYcVUow+x7xZkXHHdWlc9Ee6CCNVzvFX5Y2HFrZCaHjc1m 6nS3gWD5VYMVIbkne9TjX4LZWiVS5bNxGnmD3dhVhEJ/jARzyBHRZ2hKkZnUMPI2 6XjcV4Tzm8XdO9RuJkjOWJY7DPxJCC46 -----END CERTIFICATE-----Generated at Mon Oct 20 01:47:38 2025 by rpki-client