$ rpki-client -vvf rpki.apnic.net/member_repository/A91D1216/DC78268CB94B11EC832B7419C4F9AE02/bb1cTQEh_LMY54xFG29WcyCYYAI.mft File: bb1cTQEh_LMY54xFG29WcyCYYAI.mft (raw, json) Hash identifier: rGxcIV/ZNv+YzKGotAFRzdpxLlaMTw4kgyzOU4cJ+Gg= Subject key identifier: F6:EC:F7:E9:DC:9A:19:D0:D8:60:A0:36:66:F1:F7:DC:65:E2:AE:21 Authority key identifier: 6D:BD:5C:4D:01:21:FC:B3:18:E7:8C:45:1B:6F:56:73:20:98:60:02 Certificate issuer: /CN=A91D1216/serialNumber=6DBD5C4D0121FCB318E78C451B6F567320986002 Certificate serial: 0406 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bb1cTQEh_LMY54xFG29WcyCYYAI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D1216/DC78268CB94B11EC832B7419C4F9AE02/bb1cTQEh_LMY54xFG29WcyCYYAI.mft Manifest number: 03D2 Signing time: Sun 19 Oct 2025 02:46:33 +0000 Manifest this update: Sun 19 Oct 2025 02:46:32 +0000 Manifest next update: Sun 26 Oct 2025 02:46:32 +0000 Files and hashes: 1: bb1cTQEh_LMY54xFG29WcyCYYAI.crl (hash: lU66lQfbDj7hLjwS3j5mAr0WSYubPhKg2RivetxQeb4=) 2: AEE9F9E6326011ED9031BC4FC4F9AE02.roa (hash: uzprXmLZAeVeFEFGMakzKpKMKq1iIlqcTuQSaK0YrGo=) 3: AD17704445F611EE97DF317CC4F9AE02.roa (hash: sdrVSjIs8Qd6YgjT3RuNMeG76kE1PDfBoWYkgwiCgcM=) 4: 943D15902D1011EFBBEBA67BC4F9AE02.roa (hash: r7+Epywiay/UAmGWjEXTbZ6MxuYjSj6zJi2sl5IN5FE=) 5: 9B0C244C73B611EEB18A0385C4F9AE02.roa (hash: YgWtLAFjeyb8EUf6jgk5P6z3rHF4ij9vs7WYRKlGxPw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D1216/DC78268CB94B11EC832B7419C4F9AE02/bb1cTQEh_LMY54xFG29WcyCYYAI.crl rsync://rpki.apnic.net/member_repository/A91D1216/DC78268CB94B11EC832B7419C4F9AE02/bb1cTQEh_LMY54xFG29WcyCYYAI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bb1cTQEh_LMY54xFG29WcyCYYAI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 02:46:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1030 (0x406) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D1216, serialNumber=6DBD5C4D0121FCB318E78C451B6F567320986002 Validity Not Before: Oct 19 02:46:32 2025 GMT Not After : Oct 26 02:46:32 2025 GMT Subject: CN=68f45109-6761 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:e6:54:72:25:43:26:84:08:02:2e:cf:ef:c7: 0b:48:60:c9:44:4e:d2:95:27:64:5a:0c:1a:0c:be: 9d:ad:93:ed:b0:59:cb:2b:4f:e2:2c:73:2a:11:a4: d7:52:40:96:81:ba:70:f1:ea:eb:c7:33:cd:49:c4: 22:f0:fc:79:bd:7f:84:df:48:db:3b:3b:8a:d6:58: 40:c0:e4:ef:87:61:86:c2:8f:67:a5:cb:2a:60:65: cd:f2:a3:39:96:26:60:0a:47:94:7c:53:c6:6e:98: 0a:cb:d0:67:2c:0b:95:7a:81:f5:41:91:c8:d0:e0: aa:b6:cd:19:bd:25:9d:dd:69:e4:6c:fa:94:7b:6e: a3:35:ab:16:92:e2:64:96:72:7d:59:61:0f:2a:3c: 25:38:c3:1b:b4:48:4a:aa:09:ad:89:07:65:b2:9b: e7:86:06:24:2f:f3:42:46:61:4c:6d:b5:99:00:7b: 46:78:e0:40:a5:3b:91:e7:e6:ef:65:09:20:42:ca: bd:38:87:91:f4:8f:23:e1:fb:70:2d:97:38:d3:85: ce:72:a8:33:96:be:26:f9:06:58:a4:72:48:4a:e4: 85:4b:f8:54:f3:54:41:d1:32:aa:37:ae:ce:aa:ac: 2c:67:f5:a7:77:26:95:74:5f:1e:be:0f:9a:d3:63: b1:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:EC:F7:E9:DC:9A:19:D0:D8:60:A0:36:66:F1:F7:DC:65:E2:AE:21 X509v3 Authority Key Identifier: keyid:6D:BD:5C:4D:01:21:FC:B3:18:E7:8C:45:1B:6F:56:73:20:98:60:02 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D1216/DC78268CB94B11EC832B7419C4F9AE02/bb1cTQEh_LMY54xFG29WcyCYYAI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bb1cTQEh_LMY54xFG29WcyCYYAI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D1216/DC78268CB94B11EC832B7419C4F9AE02/bb1cTQEh_LMY54xFG29WcyCYYAI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 49:04:8d:5a:54:5c:3b:4f:c5:d4:d6:77:61:72:65:19:99:f7: 3f:2d:2b:0b:37:a6:70:f8:df:eb:9f:28:0e:f7:a0:cc:0b:c8: b7:f9:c0:24:99:e9:ed:08:52:31:3b:fa:1e:7c:b0:6f:7b:2d: 16:af:f8:ea:a1:dc:3f:4c:58:89:16:3e:1d:f6:df:d6:73:97: 68:a4:0b:7f:7e:00:f5:10:f2:b1:1f:3d:26:4b:25:5f:eb:9a: 2d:00:44:42:44:2e:71:70:bd:86:f4:4c:14:8d:bb:90:50:9c: 69:96:58:b5:5e:f2:16:9e:af:2b:d6:ac:fb:a6:9c:f6:6c:e0: 4a:fc:eb:b6:26:8b:94:d5:c5:bc:09:f4:80:a3:d6:aa:bb:58: 16:f4:f8:a9:b1:eb:b7:df:bb:e8:a4:60:cc:17:2f:2f:59:ee: f3:a1:e4:34:61:aa:bf:4b:b1:ca:c4:51:58:c2:27:94:df:ef: 38:d0:53:50:81:ff:02:ba:5f:a8:6b:a6:2a:e2:0a:8f:73:8c: 17:8e:64:c2:bd:c6:19:84:6f:23:53:1b:df:4b:a5:fd:f1:89: 31:28:21:ec:3a:e4:4e:27:f1:3b:45:77:fe:31:10:ad:98:9c: 75:3f:57:4c:7d:3a:aa:b4:63:6f:d5:b2:8e:cd:d5:53:00:cb: 64:9f:69:c6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBAYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDEyMTYxMTAvBgNVBAUTKDZEQkQ1QzREMDEyMUZDQjMxOEU3OEM0NTFCNkY1Njcz MjA5ODYwMDIwHhcNMjUxMDE5MDI0NjMyWhcNMjUxMDI2MDI0NjMyWjAYMRYwFAYD VQQDEw02OGY0NTEwOS02NzYxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtOZUciVDJoQIAi7P78cLSGDJRE7SlSdkWgwaDL6drZPtsFnLK0/iLHMqEaTX UkCWgbpw8errxzPNScQi8Px5vX+E30jbOzuK1lhAwOTvh2GGwo9npcsqYGXN8qM5 liZgCkeUfFPGbpgKy9BnLAuVeoH1QZHI0OCqts0ZvSWd3WnkbPqUe26jNasWkuJk lnJ9WWEPKjwlOMMbtEhKqgmtiQdlspvnhgYkL/NCRmFMbbWZAHtGeOBApTuR5+bv ZQkgQsq9OIeR9I8j4ftwLZc404XOcqgzlr4m+QZYpHJISuSFS/hU81RB0TKqN67O qqwsZ/WndyaVdF8evg+a02OxTQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPbs9+nc mhnQ2GCgNmbx99xl4q4hMB8GA1UdIwQYMBaAFG29XE0BIfyzGOeMRRtvVnMgmGAC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMTIxNi9EQzc4MjY4Q0I5 NEIxMUVDODMyQjc0MTlDNEY5QUUwMi9iYjFjVFFFaF9MTVk1NHhGRzI5V2N5Q1lZ QUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2JiMWNUUUVoX0xNWTU0eEZHMjlXY3lDWVlBSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MTIxNi9EQzc4MjY4Q0I5NEIxMUVDODMyQjc0MTlDNEY5QUUwMi9iYjFjVFFFaF9M TVk1NHhGRzI5V2N5Q1lZQUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBJBI1aVFw7T8XU1ndhcmUZmfc/LSsLN6Zw+N/rnygO96DMC8i3+cAk mentCFIxO/oefLBvey0Wr/jqodw/TFiJFj4d9t/Wc5dopAt/fgD1EPKxHz0mSyVf 65otAERCRC5xcL2G9EwUjbuQUJxplli1XvIWnq8r1qz7ppz2bOBK/Ou2JouU1cW8 CfSAo9aqu1gW9Pipseu337vopGDMFy8vWe7zoeQ0Yaq/S7HKxFFYwieU3+840FNQ gf8Cul+oa6Yq4gqPc4wXjmTCvcYZhG8jUxvfS6X98YkxKCHsOuROJ/E7RXf+MRCt mJx1P1dMfTqqtGNv1bKOzdVTAMtkn2nG -----END CERTIFICATE-----Generated at Mon Oct 20 07:11:55 2025 by rpki-client