$ rpki-client -vvf rpki.apnic.net/member_repository/A91D60CF/E53608F02AFC11EFA0243C4AC4F9AE02/BHT0BqF40ixU1e9yTGssLJo7a5g.mft File: BHT0BqF40ixU1e9yTGssLJo7a5g.mft (raw, json) Hash identifier: UNdZjtnjWKLHt/cdvKV21LDQL+ewBf3gEMNiAflGqRM= Subject key identifier: 71:C4:0C:6E:7C:53:CB:B5:0F:2F:34:8B:0A:F0:49:C9:24:64:42:46 Authority key identifier: 04:74:F4:06:A1:78:D2:2C:54:D5:EF:72:4C:6B:2C:2C:9A:3B:6B:98 Certificate issuer: /CN=A91D60CF/serialNumber=0474F406A178D22C54D5EF724C6B2C2C9A3B6B98 Certificate serial: 0105 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/BHT0BqF40ixU1e9yTGssLJo7a5g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D60CF/E53608F02AFC11EFA0243C4AC4F9AE02/BHT0BqF40ixU1e9yTGssLJo7a5g.mft Manifest number: 0101 Signing time: Sun 19 Oct 2025 08:02:29 +0000 Manifest this update: Sun 19 Oct 2025 08:02:28 +0000 Manifest next update: Sun 26 Oct 2025 08:02:28 +0000 Files and hashes: 1: BHT0BqF40ixU1e9yTGssLJo7a5g.crl (hash: 0OuWwOopoVHfb7+6XbCEApfgW6lLyMjeEBEr8mdwYR4=) 2: B56F40DEE9DB11EFBDD8BD26C4F9AE02.roa (hash: 7PT1hzEu8yFfZFQXURAd4+p59Mps1ow7oAQ1a2yeyaI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D60CF/E53608F02AFC11EFA0243C4AC4F9AE02/BHT0BqF40ixU1e9yTGssLJo7a5g.crl rsync://rpki.apnic.net/member_repository/A91D60CF/E53608F02AFC11EFA0243C4AC4F9AE02/BHT0BqF40ixU1e9yTGssLJo7a5g.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/BHT0BqF40ixU1e9yTGssLJo7a5g.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 08:02:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 261 (0x105) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D60CF, serialNumber=0474F406A178D22C54D5EF724C6B2C2C9A3B6B98 Validity Not Before: Oct 19 08:02:28 2025 GMT Not After : Oct 26 08:02:28 2025 GMT Subject: CN=68f49b14-9086 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:39:d2:83:0e:c2:f2:8e:73:91:6f:35:db:d9: b1:44:5b:6c:fd:b6:26:2a:fd:32:a7:21:ed:16:94: a9:07:d1:61:be:57:9e:b2:76:34:3b:03:d8:87:43: 3e:7f:b9:5e:f0:17:bd:95:92:f6:f4:38:54:53:57: e6:8d:a3:7f:1f:24:3a:3b:ac:b9:e5:14:41:f7:0d: d9:fa:48:83:a1:5b:43:39:60:17:17:21:2b:3a:0c: d6:21:b1:c1:7c:f5:3f:83:9a:29:ba:78:da:b7:b8: f6:a3:1c:f3:c7:8b:a1:83:b5:d6:94:6c:75:45:eb: a1:b7:50:f0:a2:aa:81:df:99:15:7e:51:77:ce:59: 85:2b:22:02:f4:da:75:64:22:65:f0:79:b9:dd:50: 38:9b:e0:2a:dd:0a:68:ee:bc:d0:a7:aa:ee:f6:9d: ea:6c:41:1c:90:5e:62:7c:43:d0:06:25:d5:aa:d1: da:8d:53:19:eb:11:9d:5e:8f:fe:cb:80:57:59:0b: df:26:09:bd:e4:eb:db:35:ab:43:78:1f:00:f1:48: 6e:19:a5:3f:f5:c5:9c:36:a0:a1:ff:f8:9e:d6:9b: 89:9f:93:82:35:9e:72:a4:ef:34:13:8c:c6:eb:77: e6:79:1f:cc:0c:7e:08:39:c7:53:71:0f:e2:2d:c6: 3d:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:C4:0C:6E:7C:53:CB:B5:0F:2F:34:8B:0A:F0:49:C9:24:64:42:46 X509v3 Authority Key Identifier: keyid:04:74:F4:06:A1:78:D2:2C:54:D5:EF:72:4C:6B:2C:2C:9A:3B:6B:98 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D60CF/E53608F02AFC11EFA0243C4AC4F9AE02/BHT0BqF40ixU1e9yTGssLJo7a5g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/BHT0BqF40ixU1e9yTGssLJo7a5g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D60CF/E53608F02AFC11EFA0243C4AC4F9AE02/BHT0BqF40ixU1e9yTGssLJo7a5g.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a9:92:1d:72:e5:ad:7a:38:4c:18:7f:22:2b:a0:b8:a2:41:4f: b3:75:2a:c5:54:03:85:0a:ad:9b:af:f9:d8:e7:c9:a6:79:91: 63:d8:07:1b:f1:5c:39:03:07:2b:79:6d:0f:14:66:66:35:56: 45:bf:80:4b:9e:e5:cc:e3:23:23:2e:fc:e6:26:e6:7c:4d:76: 34:47:ab:50:4a:0d:3a:a5:ff:4b:44:64:a9:81:69:57:d3:88: d0:18:52:26:7a:5a:55:28:ff:c6:5a:ce:93:a1:d4:72:fa:1a: cb:95:25:84:dc:80:de:3a:da:90:fa:c6:d2:bb:17:2b:da:bc: 11:9f:f1:3a:6f:c8:c8:60:d4:41:84:be:a4:94:9f:b6:a0:62: 20:4c:2e:5b:c2:d8:3c:94:5e:4e:d9:7b:c0:14:77:05:f6:92: d5:f0:1d:5f:21:93:5f:3e:0a:31:5d:00:f5:ea:fa:2a:9c:cf: b9:47:cf:21:6d:ba:1c:68:7b:09:f2:5a:ad:f2:2e:d9:e0:bf: 59:43:e5:dc:c0:0b:fb:5c:a3:7e:89:2b:a4:23:b0:e0:76:a6: 1b:21:05:6c:34:f2:78:bd:89:5b:f2:1d:f8:a1:ad:df:aa:f8: ea:31:07:e9:22:22:29:3d:03:e9:10:1f:81:3d:14:ee:e1:6b: df:23:41:3b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAQUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDYwQ0YxMTAvBgNVBAUTKDA0NzRGNDA2QTE3OEQyMkM1NEQ1RUY3MjRDNkIyQzJD OUEzQjZCOTgwHhcNMjUxMDE5MDgwMjI4WhcNMjUxMDI2MDgwMjI4WjAYMRYwFAYD VQQDEw02OGY0OWIxNC05MDg2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3TnSgw7C8o5zkW8129mxRFts/bYmKv0ypyHtFpSpB9FhvleesnY0OwPYh0M+ f7le8Be9lZL29DhUU1fmjaN/HyQ6O6y55RRB9w3Z+kiDoVtDOWAXFyErOgzWIbHB fPU/g5opunjat7j2oxzzx4uhg7XWlGx1Reuht1DwoqqB35kVflF3zlmFKyIC9Np1 ZCJl8Hm53VA4m+Aq3Qpo7rzQp6ru9p3qbEEckF5ifEPQBiXVqtHajVMZ6xGdXo/+ y4BXWQvfJgm95OvbNatDeB8A8UhuGaU/9cWcNqCh//ie1puJn5OCNZ5ypO80E4zG 63fmeR/MDH4IOcdTcQ/iLcY9gQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHHEDG58 U8u1Dy80iwrwSckkZEJGMB8GA1UdIwQYMBaAFAR09AaheNIsVNXvckxrLCyaO2uY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENjBDRi9FNTM2MDhGMDJB RkMxMUVGQTAyNDNDNEFDNEY5QUUwMi9CSFQwQnFGNDBpeFUxZTl5VEdzc0xKbzdh NWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0JIVDBCcUY0MGl4VTFlOXlUR3NzTEpvN2E1Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NjBDRi9FNTM2MDhGMDJBRkMxMUVGQTAyNDNDNEFDNEY5QUUwMi9CSFQwQnFGNDBp eFUxZTl5VEdzc0xKbzdhNWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCpkh1y5a16OEwYfyIroLiiQU+zdSrFVAOFCq2br/nY58mmeZFj2Acb 8Vw5AwcreW0PFGZmNVZFv4BLnuXM4yMjLvzmJuZ8TXY0R6tQSg06pf9LRGSpgWlX 04jQGFImelpVKP/GWs6TodRy+hrLlSWE3IDeOtqQ+sbSuxcr2rwRn/E6b8jIYNRB hL6klJ+2oGIgTC5bwtg8lF5O2XvAFHcF9pLV8B1fIZNfPgoxXQD16voqnM+5R88h bbocaHsJ8lqt8i7Z4L9ZQ+XcwAv7XKN+iSukI7DgdqYbIQVsNPJ4vYlb8h34oa3f qvjqMQfpIiIpPQPpEB+BPRTu4WvfI0E7 -----END CERTIFICATE-----Generated at Mon Oct 20 23:35:19 2025 by rpki-client