$ rpki-client -vvf rpki.apnic.net/member_repository/A91D425A/024C24F8416C11EA83C3EF5AC4F9AE02/BIqpjz7FSpBg5bwwBZ1cQiDXwvc.mft File: BIqpjz7FSpBg5bwwBZ1cQiDXwvc.mft (raw, json) Hash identifier: Os6TU6zizp3eiawoaU1qOD1ipfmh+eFMl7CqW/KHBJg= Subject key identifier: 3E:3D:29:65:0A:20:7E:64:2F:D2:58:CA:11:8D:73:80:BE:9A:7B:6B Authority key identifier: 04:8A:A9:8F:3E:C5:4A:90:60:E5:BC:30:05:9D:5C:42:20:D7:C2:F7 Certificate issuer: /CN=A91D425A/serialNumber=048AA98F3EC54A9060E5BC30059D5C4220D7C2F7 Certificate serial: 0B5B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BIqpjz7FSpBg5bwwBZ1cQiDXwvc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D425A/024C24F8416C11EA83C3EF5AC4F9AE02/BIqpjz7FSpBg5bwwBZ1cQiDXwvc.mft Manifest number: 0B54 Signing time: Sat 18 Oct 2025 20:01:05 +0000 Manifest this update: Sat 18 Oct 2025 20:01:04 +0000 Manifest next update: Sat 25 Oct 2025 20:01:04 +0000 Files and hashes: 1: BIqpjz7FSpBg5bwwBZ1cQiDXwvc.crl (hash: xR/ibmcS7Op8rI8FfeEKW/0CObQXBn1fFoA3didu4pY=) 2: 494B4070419C11EAAE836772C4F9AE02.roa (hash: Y3JTz6x7Gh76YU/+03lkuBO3MY94CeW1sP7iPG9gZfk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D425A/024C24F8416C11EA83C3EF5AC4F9AE02/BIqpjz7FSpBg5bwwBZ1cQiDXwvc.crl rsync://rpki.apnic.net/member_repository/A91D425A/024C24F8416C11EA83C3EF5AC4F9AE02/BIqpjz7FSpBg5bwwBZ1cQiDXwvc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BIqpjz7FSpBg5bwwBZ1cQiDXwvc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 20:01:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2907 (0xb5b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D425A, serialNumber=048AA98F3EC54A9060E5BC30059D5C4220D7C2F7 Validity Not Before: Oct 18 20:01:04 2025 GMT Not After : Oct 25 20:01:04 2025 GMT Subject: CN=68f3f201-71b7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:29:d5:8a:9b:3b:70:61:cb:d2:45:17:fe:d3: 55:39:47:ff:44:0c:9a:8c:a3:05:e6:a5:83:55:cf: f0:86:0f:45:85:2a:70:9c:f9:49:a1:bc:10:eb:4e: 3e:64:45:4a:47:05:61:3f:bb:1f:a4:7c:39:ac:b8: 64:62:99:64:0a:69:f4:99:a4:92:83:15:cd:27:1d: 14:a8:52:ae:4a:8d:92:94:d2:aa:56:79:b3:2f:1a: 82:d9:93:5b:b4:95:8e:9a:aa:49:b6:6c:10:5e:f1: bf:9d:ef:03:fd:cb:09:a5:11:db:0b:40:ec:88:db: 3a:b4:1a:33:ec:14:4f:16:6e:cc:15:e6:52:8a:64: 63:ab:26:2e:a7:46:8b:de:e0:19:78:17:70:eb:fc: 70:b1:4b:28:52:53:76:38:b1:68:a0:f6:22:ff:d7: a6:f2:19:09:af:7f:f7:15:68:f4:c3:0e:35:04:41: fa:da:71:03:1c:a1:1e:5a:e5:22:6e:37:a0:41:dd: 10:00:75:a7:9e:89:5a:0a:86:d5:84:62:58:49:cb: 61:5e:7d:44:c9:c8:82:87:f0:2a:83:dc:b9:3b:47: 9d:22:83:54:66:d6:96:26:69:bd:8a:94:81:ac:8e: 59:e8:c2:c8:01:f6:5c:d1:d8:84:14:20:21:40:51: 22:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:3D:29:65:0A:20:7E:64:2F:D2:58:CA:11:8D:73:80:BE:9A:7B:6B X509v3 Authority Key Identifier: keyid:04:8A:A9:8F:3E:C5:4A:90:60:E5:BC:30:05:9D:5C:42:20:D7:C2:F7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D425A/024C24F8416C11EA83C3EF5AC4F9AE02/BIqpjz7FSpBg5bwwBZ1cQiDXwvc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BIqpjz7FSpBg5bwwBZ1cQiDXwvc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D425A/024C24F8416C11EA83C3EF5AC4F9AE02/BIqpjz7FSpBg5bwwBZ1cQiDXwvc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 23:5b:be:91:9a:cf:91:b9:69:bb:aa:f2:8c:38:4b:c1:03:c2: 67:85:50:d2:a0:eb:23:df:12:48:63:e6:99:2e:91:f3:59:3e: 34:80:69:48:41:05:d6:22:bc:cc:59:f9:e5:dc:fe:c7:c7:6a: 01:e4:a5:2f:5c:6f:b4:1a:73:c2:3a:32:75:09:c4:42:38:a4: 73:a9:6e:fd:65:60:1f:e8:77:fa:ac:1f:68:30:55:d3:cb:69: a1:95:cf:b3:b6:34:35:fb:c9:49:44:7f:b6:41:e4:2c:e5:46: a5:7b:ec:ec:5c:f6:74:9f:e3:ca:48:87:2e:a5:6d:55:93:c5: 62:23:78:19:d9:1d:82:d5:92:8a:a5:e2:98:e2:0b:4a:3e:1f: 13:11:be:65:8c:78:20:c6:1b:fe:d0:95:53:5c:56:a8:d7:2b: 33:40:8f:6b:94:2b:4a:8b:15:5f:f4:06:62:f6:55:63:2b:09: f6:c9:92:7e:c1:42:c1:1c:85:61:5c:c3:06:26:16:4d:44:5d: 96:47:12:b9:fc:c7:50:91:8f:c5:5c:24:98:4c:9c:31:29:fa: df:05:e8:a9:75:99:73:d8:dc:6d:9f:a9:13:61:cc:fa:6d:5d: e3:c8:6e:19:b0:5d:4e:42:4d:f4:d8:87:d2:06:76:12:1e:53: 35:40:36:93 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC1swDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDQyNUExMTAvBgNVBAUTKDA0OEFBOThGM0VDNTRBOTA2MEU1QkMzMDA1OUQ1QzQy MjBEN0MyRjcwHhcNMjUxMDE4MjAwMTA0WhcNMjUxMDI1MjAwMTA0WjAYMRYwFAYD VQQDEw02OGYzZjIwMS03MWI3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApinVips7cGHL0kUX/tNVOUf/RAyajKMF5qWDVc/whg9FhSpwnPlJobwQ604+ ZEVKRwVhP7sfpHw5rLhkYplkCmn0maSSgxXNJx0UqFKuSo2SlNKqVnmzLxqC2ZNb tJWOmqpJtmwQXvG/ne8D/csJpRHbC0DsiNs6tBoz7BRPFm7MFeZSimRjqyYup0aL 3uAZeBdw6/xwsUsoUlN2OLFooPYi/9em8hkJr3/3FWj0ww41BEH62nEDHKEeWuUi bjegQd0QAHWnnolaCobVhGJYScthXn1EyciCh/Aqg9y5O0edIoNUZtaWJmm9ipSB rI5Z6MLIAfZc0diEFCAhQFEiPwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFD49KWUK IH5kL9JYyhGNc4C+mntrMB8GA1UdIwQYMBaAFASKqY8+xUqQYOW8MAWdXEIg18L3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENDI1QS8wMjRDMjRGODQx NkMxMUVBODNDM0VGNUFDNEY5QUUwMi9CSXFwano3RlNwQmc1Ynd3QloxY1FpRFh3 dmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0JJcXBqejdGU3BCZzVid3dCWjFjUWlEWHd2Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NDI1QS8wMjRDMjRGODQxNkMxMUVBODNDM0VGNUFDNEY5QUUwMi9CSXFwano3RlNw Qmc1Ynd3QloxY1FpRFh3dmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAjW76Rms+RuWm7qvKMOEvBA8JnhVDSoOsj3xJIY+aZLpHzWT40gGlI QQXWIrzMWfnl3P7Hx2oB5KUvXG+0GnPCOjJ1CcRCOKRzqW79ZWAf6Hf6rB9oMFXT y2mhlc+ztjQ1+8lJRH+2QeQs5Uale+zsXPZ0n+PKSIcupW1Vk8ViI3gZ2R2C1ZKK peKY4gtKPh8TEb5ljHggxhv+0JVTXFao1yszQI9rlCtKixVf9AZi9lVjKwn2yZJ+ wULBHIVhXMMGJhZNRF2WRxK5/MdQkY/FXCSYTJwxKfrfBeipdZlz2Nxtn6kTYcz6 bV3jyG4ZsF1OQk302IfSBnYSHlM1QDaT -----END CERTIFICATE-----Generated at Mon Oct 20 18:39:12 2025 by rpki-client