$ rpki-client -vvf rpki.apnic.net/member_repository/A91D795B/A88FB3E200C011EC96C2D583C4F9AE02/Bb7zt2RjVs5An8Vj8qaQeGd5Xvc.mft File: Bb7zt2RjVs5An8Vj8qaQeGd5Xvc.mft (raw, json) Hash identifier: lYP8tXxsegZDSsUtz5hcx9njRuHPOEPfyzWs3OI/1Jg= Subject key identifier: FF:85:81:88:C4:3D:B8:A8:F4:EF:B0:E3:69:4E:13:12:44:0E:4E:35 Authority key identifier: 05:BE:F3:B7:64:63:56:CE:40:9F:C5:63:F2:A6:90:78:67:79:5E:F7 Certificate issuer: /CN=A91D795B/serialNumber=05BEF3B7646356CE409FC563F2A6907867795EF7 Certificate serial: 056F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Bb7zt2RjVs5An8Vj8qaQeGd5Xvc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D795B/A88FB3E200C011EC96C2D583C4F9AE02/Bb7zt2RjVs5An8Vj8qaQeGd5Xvc.mft Manifest number: 0569 Signing time: Sun 19 Oct 2025 01:03:56 +0000 Manifest this update: Sun 19 Oct 2025 01:03:55 +0000 Manifest next update: Sun 26 Oct 2025 01:03:55 +0000 Files and hashes: 1: Bb7zt2RjVs5An8Vj8qaQeGd5Xvc.crl (hash: yBZo6vgbxd1rOaCgArGrxjTRcR5odWm3f8XojCOXW9Y=) 2: 7C05ACEE75B311EF83EC6F78C4F9AE02.roa (hash: i9keOrGgDPDdpLU7sFp0e9zDGCL/M7UVsmnKpkq7UPk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D795B/A88FB3E200C011EC96C2D583C4F9AE02/Bb7zt2RjVs5An8Vj8qaQeGd5Xvc.crl rsync://rpki.apnic.net/member_repository/A91D795B/A88FB3E200C011EC96C2D583C4F9AE02/Bb7zt2RjVs5An8Vj8qaQeGd5Xvc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Bb7zt2RjVs5An8Vj8qaQeGd5Xvc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 01:03:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1391 (0x56f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D795B, serialNumber=05BEF3B7646356CE409FC563F2A6907867795EF7 Validity Not Before: Oct 19 01:03:55 2025 GMT Not After : Oct 26 01:03:55 2025 GMT Subject: CN=68f438fb-0c89 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:2c:27:8a:78:d4:d9:9b:b5:2d:4b:a4:4d:0a: ce:5e:e2:ac:0e:14:4c:e1:38:de:4d:1a:02:52:73: b8:b9:7a:ae:8a:83:7a:ce:72:a6:4a:74:5c:84:c3: e1:07:8a:d2:de:44:64:5d:f5:91:f9:e8:f2:97:0d: e3:2d:68:47:d5:83:c1:82:5a:75:02:da:00:81:f1: 74:ff:bc:3d:ed:68:ad:7d:03:b8:3d:d0:a1:20:b7: 58:05:69:42:52:fb:23:d8:71:24:07:e3:1a:31:f1: 8f:82:58:ad:f9:90:d7:4e:48:e0:73:c8:a0:30:ed: 9c:33:ff:8e:dc:4e:f7:3b:5c:09:99:0f:9a:b6:43: 7a:2c:dd:4b:5f:e8:85:ac:39:0e:0c:6a:57:75:1f: 29:7e:43:ef:d1:3f:b0:5b:ba:8b:90:28:0a:87:cc: 52:7b:61:d2:54:d2:d7:c1:20:d3:55:1a:6f:bf:fb: 1d:54:3a:66:61:ae:27:c9:d8:1a:92:c5:f8:9d:af: 77:39:21:57:b2:af:5c:88:c1:07:5a:09:47:a6:49: bb:54:7f:75:d6:0f:03:c2:74:45:15:54:4c:c7:f3: 7c:69:d6:41:ba:89:b9:0d:05:ee:d1:43:32:95:db: e9:4b:e5:46:37:31:10:c3:7f:a8:12:33:a7:54:1a: 13:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:85:81:88:C4:3D:B8:A8:F4:EF:B0:E3:69:4E:13:12:44:0E:4E:35 X509v3 Authority Key Identifier: keyid:05:BE:F3:B7:64:63:56:CE:40:9F:C5:63:F2:A6:90:78:67:79:5E:F7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D795B/A88FB3E200C011EC96C2D583C4F9AE02/Bb7zt2RjVs5An8Vj8qaQeGd5Xvc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Bb7zt2RjVs5An8Vj8qaQeGd5Xvc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D795B/A88FB3E200C011EC96C2D583C4F9AE02/Bb7zt2RjVs5An8Vj8qaQeGd5Xvc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 96:1a:72:f6:06:32:5c:57:72:0a:08:60:1d:40:15:c8:38:fa: 47:07:41:d5:5e:8e:02:54:19:cb:e8:bd:ec:23:38:1d:57:a3: 14:8e:3a:5e:53:04:10:e7:1f:c2:58:65:8f:f3:4a:df:ff:cf: 3e:c4:24:b3:7e:85:ad:39:72:5b:8e:4e:27:fd:80:9e:38:58: 70:ba:72:ac:80:4a:42:c5:0f:2d:03:a0:d7:81:f3:da:d6:11: 0c:ec:ce:d7:b5:73:6c:e5:59:b2:58:24:8e:8d:cc:f5:d0:e1: f1:4a:7f:65:21:3a:84:33:18:39:f3:ac:65:56:fb:42:5d:c5: cd:7b:8e:73:95:8a:49:69:33:4d:84:9a:8b:b7:c1:cf:da:b6: f0:75:48:1a:bb:68:c6:9e:f4:b4:57:85:9d:36:78:f2:eb:e5: 26:93:38:22:9b:b3:73:30:2e:cf:30:0e:6d:f6:1d:e0:ad:9d: 56:f7:45:08:ce:c3:8c:57:0f:d5:ec:8d:6a:75:13:21:67:21: cc:81:ba:cb:05:64:16:9b:16:51:cf:89:b6:c2:61:75:8b:74: 0d:e9:d8:5d:ee:cd:83:24:31:0d:7b:da:ae:fc:1f:f6:84:5a: 84:58:b0:a7:1a:d4:4a:55:8e:57:81:e1:9f:99:54:a2:91:f4: 33:ec:dc:6c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBW8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDc5NUIxMTAvBgNVBAUTKDA1QkVGM0I3NjQ2MzU2Q0U0MDlGQzU2M0YyQTY5MDc4 Njc3OTVFRjcwHhcNMjUxMDE5MDEwMzU1WhcNMjUxMDI2MDEwMzU1WjAYMRYwFAYD VQQDEw02OGY0MzhmYi0wYzg5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAySwninjU2Zu1LUukTQrOXuKsDhRM4TjeTRoCUnO4uXquioN6znKmSnRchMPh B4rS3kRkXfWR+ejylw3jLWhH1YPBglp1AtoAgfF0/7w97WitfQO4PdChILdYBWlC Uvsj2HEkB+MaMfGPglit+ZDXTkjgc8igMO2cM/+O3E73O1wJmQ+atkN6LN1LX+iF rDkODGpXdR8pfkPv0T+wW7qLkCgKh8xSe2HSVNLXwSDTVRpvv/sdVDpmYa4nydga ksX4na93OSFXsq9ciMEHWglHpkm7VH911g8DwnRFFVRMx/N8adZBuom5DQXu0UMy ldvpS+VGNzEQw3+oEjOnVBoTxwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFP+FgYjE Pbio9O+w42lOExJEDk41MB8GA1UdIwQYMBaAFAW+87dkY1bOQJ/FY/KmkHhneV73 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENzk1Qi9BODhGQjNFMjAw QzAxMUVDOTZDMkQ1ODNDNEY5QUUwMi9CYjd6dDJSalZzNUFuOFZqOHFhUWVHZDVY dmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0JiN3p0MlJqVnM1QW44Vmo4cWFRZUdkNVh2Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE Nzk1Qi9BODhGQjNFMjAwQzAxMUVDOTZDMkQ1ODNDNEY5QUUwMi9CYjd6dDJSalZz NUFuOFZqOHFhUWVHZDVYdmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCWGnL2BjJcV3IKCGAdQBXIOPpHB0HVXo4CVBnL6L3sIzgdV6MUjjpe UwQQ5x/CWGWP80rf/88+xCSzfoWtOXJbjk4n/YCeOFhwunKsgEpCxQ8tA6DXgfPa 1hEM7M7XtXNs5VmyWCSOjcz10OHxSn9lITqEMxg586xlVvtCXcXNe45zlYpJaTNN hJqLt8HP2rbwdUgau2jGnvS0V4WdNnjy6+Umkzgim7NzMC7PMA5t9h3grZ1W90UI zsOMVw/V7I1qdRMhZyHMgbrLBWQWmxZRz4m2wmF1i3QN6dhd7s2DJDENe9qu/B/2 hFqEWLCnGtRKVY5XgeGfmVSikfQz7Nxs -----END CERTIFICATE-----Generated at Sun Oct 19 23:20:50 2025 by rpki-client