$ rpki-client -vvf rpki.apnic.net/member_repository/A91CE821/811FB590605111E88CD8EC47C4F9AE02/Bjfls4xh34PrszAgk7tXbLMdmxA.mft File: Bjfls4xh34PrszAgk7tXbLMdmxA.mft (raw, json) Hash identifier: VUPV64Xt2xs3v3mdQzdBdF21vkFZzdvjUTdV5IuvHE8= Subject key identifier: 6D:3F:33:AA:B4:92:B0:A6:32:AF:9B:23:42:6B:4C:33:D9:03:3C:6B Authority key identifier: 06:37:E5:B3:8C:61:DF:83:EB:B3:30:20:93:BB:57:6C:B3:1D:9B:10 Certificate issuer: /CN=A91CE821/serialNumber=0637E5B38C61DF83EBB3302093BB576CB31D9B10 Certificate serial: 04C2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Bjfls4xh34PrszAgk7tXbLMdmxA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CE821/811FB590605111E88CD8EC47C4F9AE02/Bjfls4xh34PrszAgk7tXbLMdmxA.mft Manifest number: 19A9 Signing time: Sat 18 Oct 2025 17:17:47 +0000 Manifest this update: Sat 18 Oct 2025 17:17:46 +0000 Manifest next update: Sat 25 Oct 2025 17:17:46 +0000 Files and hashes: 1: Bjfls4xh34PrszAgk7tXbLMdmxA.crl (hash: /29v8KMSKrGnQCFFDCTp0PX1ImOj72j6NAbv55/7mkY=) 2: 2A53DA54332011EF89CABD61C4F9AE02.roa (hash: XAFmHRo+hO35GWVsWHHscFE/9w85d60jx9W3Sf7aA0c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CE821/811FB590605111E88CD8EC47C4F9AE02/Bjfls4xh34PrszAgk7tXbLMdmxA.crl rsync://rpki.apnic.net/member_repository/A91CE821/811FB590605111E88CD8EC47C4F9AE02/Bjfls4xh34PrszAgk7tXbLMdmxA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Bjfls4xh34PrszAgk7tXbLMdmxA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 17:17:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1218 (0x4c2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CE821, serialNumber=0637E5B38C61DF83EBB3302093BB576CB31D9B10 Validity Not Before: Oct 18 17:17:46 2025 GMT Not After : Oct 25 17:17:46 2025 GMT Subject: CN=68f3cbbb-e8f5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:3c:95:b7:e0:27:c1:11:b8:32:1e:bf:51:f4: d0:1f:6a:97:21:d3:58:a0:d4:b7:b8:f5:91:0c:00: e8:e4:0a:22:63:c8:f8:f8:4a:91:79:3f:7e:9a:c8: 48:4b:9f:68:ab:65:23:cd:73:d4:0f:95:6e:54:86: 40:85:53:3f:ed:bd:f0:32:7b:65:6b:7b:79:00:35: 4c:07:ce:b7:d5:24:70:9f:08:89:de:f5:a6:8b:85: f5:f7:b3:39:45:b1:82:0e:c1:a2:58:35:59:35:db: 3b:88:32:a8:0e:4c:83:54:77:06:73:b6:11:b9:ad: c1:4b:42:ab:11:3d:70:95:a9:74:7e:6a:8b:bc:82: 56:88:81:89:46:88:0a:c8:35:a4:83:64:56:ad:3b: a4:7c:23:19:c8:c1:d3:c6:ce:d6:3f:8e:aa:7b:50: 9f:8d:1c:0d:65:ce:bf:57:7a:90:aa:e7:35:7d:38: ed:48:67:db:b7:f7:35:10:6b:bf:85:65:9f:31:95: ea:39:cf:60:d0:11:1a:5f:50:44:82:a0:d8:2e:81: 14:06:32:94:69:be:24:1d:9a:7a:d4:f6:8a:7f:14: 3e:b4:2d:bc:c9:47:35:8b:dc:dd:3c:ee:e0:94:3d: 25:6e:1a:b4:53:73:ab:b4:4b:ee:97:48:3d:2e:98: a9:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:3F:33:AA:B4:92:B0:A6:32:AF:9B:23:42:6B:4C:33:D9:03:3C:6B X509v3 Authority Key Identifier: keyid:06:37:E5:B3:8C:61:DF:83:EB:B3:30:20:93:BB:57:6C:B3:1D:9B:10 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CE821/811FB590605111E88CD8EC47C4F9AE02/Bjfls4xh34PrszAgk7tXbLMdmxA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Bjfls4xh34PrszAgk7tXbLMdmxA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CE821/811FB590605111E88CD8EC47C4F9AE02/Bjfls4xh34PrszAgk7tXbLMdmxA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 39:8d:f1:20:70:14:1a:c1:1b:07:76:b8:e6:4f:d0:77:3f:93: 5a:96:8b:1d:7b:49:ef:7b:7d:11:43:14:77:56:f1:d4:d7:e7: 9f:1e:af:43:4a:b1:b2:00:60:62:03:05:64:da:a8:be:ad:79: 5e:6c:46:b1:7f:1d:dd:6f:89:06:44:d0:42:f2:5f:60:df:06: 1a:1a:c9:53:ba:96:76:8c:07:fe:98:4b:1b:df:cf:dd:ce:7c: 86:c0:64:64:36:b1:22:d1:e8:08:11:8b:3b:9a:a3:fa:61:53: 9c:cc:09:e2:82:f2:a6:aa:d2:b5:60:ab:59:a0:72:4c:fa:18: 46:43:b8:a7:0a:17:29:7c:03:3f:4f:3c:13:1f:74:11:73:b9: c3:49:5a:2c:3e:82:7d:7e:50:70:15:70:6e:ec:f0:7b:71:40: 1d:d6:9b:04:ce:64:4c:da:d8:5e:02:4c:c9:fa:2b:62:9f:5f: cd:a3:cd:8e:53:73:15:a0:ce:ed:ba:0c:06:15:c2:ea:89:cb: 68:5b:af:9c:15:ae:26:8b:91:8f:1f:89:b2:ce:29:03:c7:c8: e0:ea:3c:af:5e:60:06:29:90:dd:a2:e2:4d:f5:d1:b6:d0:82: 32:10:e0:28:e1:3f:a1:15:74:a7:08:a5:64:7a:6b:27:49:5b: f9:3d:38:72 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBMIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0U4MjExMTAvBgNVBAUTKDA2MzdFNUIzOEM2MURGODNFQkIzMzAyMDkzQkI1NzZD QjMxRDlCMTAwHhcNMjUxMDE4MTcxNzQ2WhcNMjUxMDI1MTcxNzQ2WjAYMRYwFAYD VQQDEw02OGYzY2JiYi1lOGY1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApDyVt+AnwRG4Mh6/UfTQH2qXIdNYoNS3uPWRDADo5AoiY8j4+EqReT9+mshI S59oq2UjzXPUD5VuVIZAhVM/7b3wMntla3t5ADVMB8631SRwnwiJ3vWmi4X197M5 RbGCDsGiWDVZNds7iDKoDkyDVHcGc7YRua3BS0KrET1wlal0fmqLvIJWiIGJRogK yDWkg2RWrTukfCMZyMHTxs7WP46qe1CfjRwNZc6/V3qQquc1fTjtSGfbt/c1EGu/ hWWfMZXqOc9g0BEaX1BEgqDYLoEUBjKUab4kHZp61PaKfxQ+tC28yUc1i9zdPO7g lD0lbhq0U3OrtEvul0g9LpipXwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFG0/M6q0 krCmMq+bI0JrTDPZAzxrMB8GA1UdIwQYMBaAFAY35bOMYd+D67MwIJO7V2yzHZsQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRTgyMS84MTFGQjU5MDYw NTExMUU4OENEOEVDNDdDNEY5QUUwMi9CamZsczR4aDM0UHJzekFnazd0WGJMTWRt eEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0JqZmxzNHhoMzRQcnN6QWdrN3RYYkxNZG14QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RTgyMS84MTFGQjU5MDYwNTExMUU4OENEOEVDNDdDNEY5QUUwMi9CamZsczR4aDM0 UHJzekFnazd0WGJMTWRteEEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA5jfEgcBQawRsHdrjmT9B3P5Nalosde0nve30RQxR3VvHU1+efHq9D SrGyAGBiAwVk2qi+rXlebEaxfx3db4kGRNBC8l9g3wYaGslTupZ2jAf+mEsb38/d znyGwGRkNrEi0egIEYs7mqP6YVOczAnigvKmqtK1YKtZoHJM+hhGQ7inChcpfAM/ TzwTH3QRc7nDSVosPoJ9flBwFXBu7PB7cUAd1psEzmRM2theAkzJ+itin1/No82O U3MVoM7tugwGFcLqictoW6+cFa4mi5GPH4myzikDx8jg6jyvXmAGKZDdouJN9dG2 0IIyEOAo4T+hFXSnCKVkemsnSVv5PThy -----END CERTIFICATE-----Generated at Mon Oct 20 14:46:49 2025 by rpki-client