$ rpki-client -vvf rpki.apnic.net/member_repository/A91E01F7/F91D0D282A5B11EBB8921C35C4F9AE02/bicEPDr0D8Xll5OLFU9ci-D9_2w.mft File: bicEPDr0D8Xll5OLFU9ci-D9_2w.mft (raw, json) Hash identifier: VbwmWL9ay0l02MJKzdGRMRFXl3wGM3r53G0W8Tb7QXc= Subject key identifier: 8E:9C:96:87:1E:24:C9:F7:3F:A9:AD:59:D6:6C:C9:1D:60:AC:1D:1F Authority key identifier: 6E:27:04:3C:3A:F4:0F:C5:E5:97:93:8B:15:4F:5C:8B:E0:FD:FF:6C Certificate issuer: /CN=A91E01F7/serialNumber=6E27043C3AF40FC5E597938B154F5C8BE0FDFF6C Certificate serial: 0791 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bicEPDr0D8Xll5OLFU9ci-D9_2w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E01F7/F91D0D282A5B11EBB8921C35C4F9AE02/bicEPDr0D8Xll5OLFU9ci-D9_2w.mft Manifest number: 078B Signing time: Sat 18 Oct 2025 22:50:53 +0000 Manifest this update: Sat 18 Oct 2025 22:50:52 +0000 Manifest next update: Sat 25 Oct 2025 22:50:52 +0000 Files and hashes: 1: bicEPDr0D8Xll5OLFU9ci-D9_2w.crl (hash: jKHB1lz9/gYzNaIha4XYNGfCQyLLQKm27gG7pe2wneA=) 2: C4E6FFAE2A5C11EB9D022535C4F9AE02.roa (hash: sxwsat/jz73BmJhm+NJpdHINgb9WZYUhdohcJK8DuQg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E01F7/F91D0D282A5B11EBB8921C35C4F9AE02/bicEPDr0D8Xll5OLFU9ci-D9_2w.crl rsync://rpki.apnic.net/member_repository/A91E01F7/F91D0D282A5B11EBB8921C35C4F9AE02/bicEPDr0D8Xll5OLFU9ci-D9_2w.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bicEPDr0D8Xll5OLFU9ci-D9_2w.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 22:50:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1937 (0x791) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E01F7, serialNumber=6E27043C3AF40FC5E597938B154F5C8BE0FDFF6C Validity Not Before: Oct 18 22:50:52 2025 GMT Not After : Oct 25 22:50:52 2025 GMT Subject: CN=68f419cc-b270 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:0a:b4:ef:ee:f7:a5:33:5f:a0:b7:84:3c:be: 74:ae:56:6f:06:4a:b2:c7:4f:5f:cf:4d:da:04:b2: bc:c2:34:b9:9d:8a:59:6e:d1:e5:af:c6:6a:8e:87: 66:42:e5:7c:50:55:e0:d0:3b:79:2f:f2:2b:c4:c7: f0:89:4b:9e:42:a6:1f:cf:ef:01:01:53:26:da:fc: b0:39:3b:e8:b9:a6:22:a5:7a:87:f2:f9:73:7a:68: fd:80:12:40:e8:56:56:3f:da:2d:a0:37:27:f2:67: 89:e6:db:7a:53:9b:22:ca:07:bf:7a:51:1b:d1:24: 6b:53:cc:fe:30:fa:15:98:f3:62:8c:66:98:a1:0d: 8e:20:b4:59:15:c7:37:72:2c:e6:00:f4:c6:1d:37: 97:da:d4:83:54:5e:7a:d7:d6:17:96:2f:93:34:bd: c7:d5:00:54:38:c6:49:b8:0c:b3:5e:66:4f:65:52: 92:54:7a:d7:dd:5d:14:51:65:7c:2e:7d:83:8a:ed: 9d:bd:8c:f8:8f:7a:ba:5e:65:ef:fa:e6:a2:51:23: 2e:8e:fd:d6:6b:7e:79:e2:02:bc:13:82:86:c9:1d: 29:0d:85:d4:59:36:c3:e8:2d:39:3a:75:e0:5a:06: 0c:f6:3d:ce:b0:37:9d:38:20:36:10:e9:98:d9:bf: d5:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:9C:96:87:1E:24:C9:F7:3F:A9:AD:59:D6:6C:C9:1D:60:AC:1D:1F X509v3 Authority Key Identifier: keyid:6E:27:04:3C:3A:F4:0F:C5:E5:97:93:8B:15:4F:5C:8B:E0:FD:FF:6C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E01F7/F91D0D282A5B11EBB8921C35C4F9AE02/bicEPDr0D8Xll5OLFU9ci-D9_2w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bicEPDr0D8Xll5OLFU9ci-D9_2w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E01F7/F91D0D282A5B11EBB8921C35C4F9AE02/bicEPDr0D8Xll5OLFU9ci-D9_2w.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a9:7b:d2:f5:48:f8:86:10:5e:23:27:28:5b:0b:21:57:04:33: 75:b5:84:60:7b:c7:15:f5:d7:ab:26:66:06:93:65:f2:57:30: ac:c6:cb:39:4c:b7:b9:3c:68:44:17:68:3e:7b:62:ea:35:a1: db:ce:fc:01:16:4d:e8:18:aa:a7:82:8a:59:02:72:c2:74:53: 0c:d1:24:ac:72:f0:90:5c:17:e9:fc:56:8e:01:96:f5:86:37: 01:38:1d:88:6d:e5:73:2d:32:5d:94:1b:29:a9:69:77:96:55: a2:8f:ec:72:59:67:7b:cb:2e:2e:51:92:1e:98:0d:35:1e:fd: 65:fe:02:6f:7f:26:6c:b6:2a:ca:94:cb:42:b3:92:d9:cc:55: 84:13:5e:ff:e9:56:f6:ed:13:2a:f9:c8:1d:04:0f:c5:a6:66: 44:6e:2a:59:d4:3a:07:6c:13:d7:7e:97:09:4e:bb:0f:43:89: b0:ed:a8:43:c3:a8:a2:52:7f:eb:a4:b6:e2:24:38:3d:34:9b: 77:d2:22:46:d4:8c:40:90:71:ab:04:3f:c2:9c:6a:a9:b6:75: d1:93:12:0d:1e:83:b1:7f:1a:eb:df:6b:81:c8:6e:30:53:59: 0c:ff:f1:28:2e:86:8d:a0:19:7d:07:ff:c7:03:4a:2e:e2:34: 0a:14:e1:3e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB5EwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTAxRjcxMTAvBgNVBAUTKDZFMjcwNDNDM0FGNDBGQzVFNTk3OTM4QjE1NEY1QzhC RTBGREZGNkMwHhcNMjUxMDE4MjI1MDUyWhcNMjUxMDI1MjI1MDUyWjAYMRYwFAYD VQQDEw02OGY0MTljYy1iMjcwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvgq07+73pTNfoLeEPL50rlZvBkqyx09fz03aBLK8wjS5nYpZbtHlr8Zqjodm QuV8UFXg0Dt5L/IrxMfwiUueQqYfz+8BAVMm2vywOTvouaYipXqH8vlzemj9gBJA 6FZWP9otoDcn8meJ5tt6U5siyge/elEb0SRrU8z+MPoVmPNijGaYoQ2OILRZFcc3 cizmAPTGHTeX2tSDVF5619YXli+TNL3H1QBUOMZJuAyzXmZPZVKSVHrX3V0UUWV8 Ln2Diu2dvYz4j3q6XmXv+uaiUSMujv3Wa3554gK8E4KGyR0pDYXUWTbD6C05OnXg WgYM9j3OsDedOCA2EOmY2b/VIwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFI6cloce JMn3P6mtWdZsyR1grB0fMB8GA1UdIwQYMBaAFG4nBDw69A/F5ZeTixVPXIvg/f9s MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMDFGNy9GOTFEMEQyODJB NUIxMUVCQjg5MjFDMzVDNEY5QUUwMi9iaWNFUERyMEQ4WGxsNU9MRlU5Y2ktRDlf MncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2JpY0VQRHIwRDhYbGw1T0xGVTljaS1EOV8ydy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MDFGNy9GOTFEMEQyODJBNUIxMUVCQjg5MjFDMzVDNEY5QUUwMi9iaWNFUERyMEQ4 WGxsNU9MRlU5Y2ktRDlfMncubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCpe9L1SPiGEF4jJyhbCyFXBDN1tYRge8cV9derJmYGk2XyVzCsxss5 TLe5PGhEF2g+e2LqNaHbzvwBFk3oGKqngopZAnLCdFMM0SSscvCQXBfp/FaOAZb1 hjcBOB2IbeVzLTJdlBspqWl3llWij+xyWWd7yy4uUZIemA01Hv1l/gJvfyZstirK lMtCs5LZzFWEE17/6Vb27RMq+cgdBA/FpmZEbipZ1DoHbBPXfpcJTrsPQ4mw7ahD w6iiUn/rpLbiJDg9NJt30iJG1IxAkHGrBD/CnGqptnXRkxINHoOxfxrr32uByG4w U1kM//EoLoaNoBl9B//HA0ou4jQKFOE+ -----END CERTIFICATE-----Generated at Mon Oct 20 14:46:17 2025 by rpki-client