$ rpki-client -vvf rpki.apnic.net/member_repository/A91E0CE8/900D2646066A11E8B9BAF682C4F9AE02/BsYn2cMSx7R9HDpTtEdVoQpoSHw.mft File: BsYn2cMSx7R9HDpTtEdVoQpoSHw.mft (raw, json) Hash identifier: xrNuz02wXFpvRdE/l8KuuA3IHk7c5IEUQD7bvriEboI= Subject key identifier: 53:80:BC:CC:05:3C:C1:C1:44:8E:F1:2E:52:70:88:24:36:0C:14:CA Authority key identifier: 06:C6:27:D9:C3:12:C7:B4:7D:1C:3A:53:B4:47:55:A1:0A:68:48:7C Certificate issuer: /CN=A91E0CE8/serialNumber=06C627D9C312C7B47D1C3A53B44755A10A68487C Certificate serial: 16DA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BsYn2cMSx7R9HDpTtEdVoQpoSHw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E0CE8/900D2646066A11E8B9BAF682C4F9AE02/BsYn2cMSx7R9HDpTtEdVoQpoSHw.mft Manifest number: 16C1 Signing time: Sat 18 Oct 2025 17:05:25 +0000 Manifest this update: Sat 18 Oct 2025 17:05:25 +0000 Manifest next update: Sat 25 Oct 2025 17:05:25 +0000 Files and hashes: 1: BsYn2cMSx7R9HDpTtEdVoQpoSHw.crl (hash: jrpdnJW2yQy8a8jP1nkuIhqDMNO6aFndqazvflRK9R0=) 2: 091435C84FA911EFB86F4D40C4F9AE02.roa (hash: e5jgIESXFxNT6NU+78fDrpwylXFQS920y6o/aeQL2pY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E0CE8/900D2646066A11E8B9BAF682C4F9AE02/BsYn2cMSx7R9HDpTtEdVoQpoSHw.crl rsync://rpki.apnic.net/member_repository/A91E0CE8/900D2646066A11E8B9BAF682C4F9AE02/BsYn2cMSx7R9HDpTtEdVoQpoSHw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BsYn2cMSx7R9HDpTtEdVoQpoSHw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 17:05:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5850 (0x16da) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E0CE8, serialNumber=06C627D9C312C7B47D1C3A53B44755A10A68487C Validity Not Before: Oct 18 17:05:25 2025 GMT Not After : Oct 25 17:05:25 2025 GMT Subject: CN=68f3c8d5-0d4c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:17:90:05:8d:a2:a3:35:08:4b:95:76:5d:ea: 07:da:fd:c6:ce:77:70:0e:e6:1d:1b:db:89:d8:e2: fe:44:9e:07:4b:e4:ea:7d:12:74:31:d7:02:84:9d: 55:9c:42:5b:c0:45:c8:d2:5b:68:c0:a7:b3:82:29: 57:32:cf:57:ee:d5:65:66:ba:0a:e0:93:87:98:9d: 98:84:d1:74:ad:ad:36:9e:de:1a:e5:9b:61:59:90: e5:78:26:21:72:5b:30:c4:97:e2:1f:bf:3b:a0:40: 8e:4c:e9:2f:ae:2c:b1:c0:0c:b0:ac:2f:c0:39:d5: b3:50:49:9d:c2:0c:85:8c:a8:88:49:3d:a0:39:21: be:63:90:b5:d4:19:50:22:18:93:87:f6:04:7f:2c: 4a:15:ca:bd:13:a8:8b:cb:58:34:70:24:d9:4b:d9: 5a:51:b4:42:15:8e:58:ec:44:26:c3:9c:b2:70:ec: 79:ff:cf:08:61:ad:85:44:81:26:1f:4c:f8:cd:70: 77:41:0a:00:6f:6a:b5:52:f8:63:44:e1:ed:89:e6: 73:89:48:fa:d6:78:bc:be:2f:e2:13:28:81:95:7a: e0:f5:50:b8:52:20:b3:73:ad:1a:42:c6:bf:0a:73: 2a:c9:e2:ad:11:fc:5e:a9:dc:e0:0a:c8:c0:bf:03: 56:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:80:BC:CC:05:3C:C1:C1:44:8E:F1:2E:52:70:88:24:36:0C:14:CA X509v3 Authority Key Identifier: keyid:06:C6:27:D9:C3:12:C7:B4:7D:1C:3A:53:B4:47:55:A1:0A:68:48:7C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E0CE8/900D2646066A11E8B9BAF682C4F9AE02/BsYn2cMSx7R9HDpTtEdVoQpoSHw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BsYn2cMSx7R9HDpTtEdVoQpoSHw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E0CE8/900D2646066A11E8B9BAF682C4F9AE02/BsYn2cMSx7R9HDpTtEdVoQpoSHw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1d:11:f4:e6:1b:b9:c5:78:9b:e2:20:da:d0:07:84:9c:cc:e4: 55:b9:c2:1f:3b:47:88:ba:02:51:1f:32:4d:96:bf:26:72:81: fc:d6:85:1c:96:50:a8:a4:49:5f:73:7d:bf:21:4a:85:3d:d2: 2b:dc:ce:e7:31:4c:17:15:a7:4d:c7:32:fc:57:5f:47:ca:43: 29:35:ad:f1:a4:c0:f5:64:16:2f:a5:4d:e5:13:61:f0:8c:bb: dc:b1:96:63:ff:e6:2d:75:27:e8:98:b2:94:3b:30:34:00:af: b0:3b:2e:d2:cc:ac:25:95:e2:bb:6f:ca:88:1e:a0:31:1e:75: 23:fe:c6:f1:7a:89:3d:93:28:2e:c5:0d:74:04:1c:59:de:47: 1e:98:13:1a:4e:eb:38:7b:b7:15:d4:6e:0d:2c:99:3b:9c:a3: 8b:e8:a9:dd:21:31:4a:63:71:ba:45:26:50:81:64:52:12:c0: 2c:58:72:bd:12:6f:ee:72:63:51:eb:25:15:72:44:b4:b1:91: 76:21:40:91:a8:1d:7f:b7:1f:07:05:32:e3:bc:52:b1:87:50: b8:9d:31:78:12:54:ae:99:29:82:72:d1:cd:14:6c:a3:9c:29: f6:32:e8:53:ad:2c:c6:16:72:01:be:cb:a7:be:6d:3c:8f:bc: ed:32:cb:aa -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICFtowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTBDRTgxMTAvBgNVBAUTKDA2QzYyN0Q5QzMxMkM3QjQ3RDFDM0E1M0I0NDc1NUEx MEE2ODQ4N0MwHhcNMjUxMDE4MTcwNTI1WhcNMjUxMDI1MTcwNTI1WjAYMRYwFAYD VQQDEw02OGYzYzhkNS0wZDRjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwBeQBY2iozUIS5V2XeoH2v3GzndwDuYdG9uJ2OL+RJ4HS+TqfRJ0MdcChJ1V nEJbwEXI0ltowKezgilXMs9X7tVlZroK4JOHmJ2YhNF0ra02nt4a5ZthWZDleCYh clswxJfiH787oECOTOkvriyxwAywrC/AOdWzUEmdwgyFjKiIST2gOSG+Y5C11BlQ IhiTh/YEfyxKFcq9E6iLy1g0cCTZS9laUbRCFY5Y7EQmw5yycOx5/88IYa2FRIEm H0z4zXB3QQoAb2q1UvhjROHtieZziUj61ni8vi/iEyiBlXrg9VC4UiCzc60aQsa/ CnMqyeKtEfxeqdzgCsjAvwNWhQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFOAvMwF PMHBRI7xLlJwiCQ2DBTKMB8GA1UdIwQYMBaAFAbGJ9nDEse0fRw6U7RHVaEKaEh8 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMENFOC85MDBEMjY0NjA2 NkExMUU4QjlCQUY2ODJDNEY5QUUwMi9Cc1luMmNNU3g3UjlIRHBUdEVkVm9RcG9T SHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0JzWW4yY01TeDdSOUhEcFR0RWRWb1Fwb1NIdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MENFOC85MDBEMjY0NjA2NkExMUU4QjlCQUY2ODJDNEY5QUUwMi9Cc1luMmNNU3g3 UjlIRHBUdEVkVm9RcG9TSHcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAdEfTmG7nFeJviINrQB4SczORVucIfO0eIugJRHzJNlr8mcoH81oUc llCopElfc32/IUqFPdIr3M7nMUwXFadNxzL8V19HykMpNa3xpMD1ZBYvpU3lE2Hw jLvcsZZj/+YtdSfomLKUOzA0AK+wOy7SzKwlleK7b8qIHqAxHnUj/sbxeok9kygu xQ10BBxZ3kcemBMaTus4e7cV1G4NLJk7nKOL6KndITFKY3G6RSZQgWRSEsAsWHK9 Em/ucmNR6yUVckS0sZF2IUCRqB1/tx8HBTLjvFKxh1C4nTF4ElSumSmCctHNFGyj nCn2MuhTrSzGFnIBvsunvm08j7ztMsuq -----END CERTIFICATE-----Generated at Mon Oct 20 01:44:09 2025 by rpki-client