$ rpki-client -vvf rpki.apnic.net/member_repository/A91E1CB1/3F4A5A2EEA0811EF9D339B29C4F9AE02/Bj4BJ0cqfipvhHBAnJuCOQX6_o4.mft File: Bj4BJ0cqfipvhHBAnJuCOQX6_o4.mft (raw, json) Hash identifier: bsyHAeXnmUOFw+hfcM1pVtC1eQGCG0OpRncO2o5b420= Subject key identifier: CC:BA:0A:28:A3:1E:C6:30:38:B3:EF:C6:50:0E:D7:82:97:36:43:F4 Authority key identifier: 06:3E:01:27:47:2A:7E:2A:6F:84:70:40:9C:9B:82:39:05:FA:FE:8E Certificate issuer: /CN=A91E1CB1/serialNumber=063E0127472A7E2A6F8470409C9B823905FAFE8E Certificate serial: 85 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Bj4BJ0cqfipvhHBAnJuCOQX6_o4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E1CB1/3F4A5A2EEA0811EF9D339B29C4F9AE02/Bj4BJ0cqfipvhHBAnJuCOQX6_o4.mft Manifest number: 81 Signing time: Sun 19 Oct 2025 09:59:17 +0000 Manifest this update: Sun 19 Oct 2025 09:59:16 +0000 Manifest next update: Sun 26 Oct 2025 09:59:16 +0000 Files and hashes: 1: Bj4BJ0cqfipvhHBAnJuCOQX6_o4.crl (hash: lQ39wmcq4XiaRKtVj/qv5eIrPxehezzApw4SWiUCsXA=) 2: 8291E388EA0811EFB385192AC4F9AE02.roa (hash: Ca2pEWIV/EJ5w4q8uyfY/09SxRF8GtoaKpWxctigiRA=) 3: 8322D244EA0811EFB385192AC4F9AE02.roa (hash: oTDfgY49fmT+y8+2GJaPDtK7EdeEE+LjLlZzrGykmgw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E1CB1/3F4A5A2EEA0811EF9D339B29C4F9AE02/Bj4BJ0cqfipvhHBAnJuCOQX6_o4.crl rsync://rpki.apnic.net/member_repository/A91E1CB1/3F4A5A2EEA0811EF9D339B29C4F9AE02/Bj4BJ0cqfipvhHBAnJuCOQX6_o4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Bj4BJ0cqfipvhHBAnJuCOQX6_o4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 09:59:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 133 (0x85) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E1CB1, serialNumber=063E0127472A7E2A6F8470409C9B823905FAFE8E Validity Not Before: Oct 19 09:59:16 2025 GMT Not After : Oct 26 09:59:16 2025 GMT Subject: CN=68f4b675-06ab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:fa:b2:ac:75:9d:59:b6:30:b5:90:fc:4f:f7: 62:75:dc:54:c5:f6:b1:09:2e:5d:25:89:19:ac:e4: 9f:27:01:60:ff:4d:a8:a4:4b:42:e3:58:1c:0d:c0: 47:cd:86:df:ce:dc:ef:45:5b:a3:a4:67:90:bf:9d: 9a:b3:65:12:61:aa:53:2a:a1:06:0e:0a:89:e4:dd: 26:fc:71:24:0e:9b:ec:62:60:f3:4c:2a:f8:18:15: 8d:c7:1d:3d:26:fd:3f:6e:39:5f:9e:d0:42:02:e4: cb:52:34:88:6b:b1:a9:4b:25:fa:5e:c4:93:b8:f0: 39:c6:49:ea:07:15:d7:3f:aa:a7:d7:e7:8d:af:09: 1a:1f:85:3d:0a:22:b9:dc:3f:92:9d:f9:50:e2:50: 4b:f6:8d:20:db:e4:61:cf:de:77:89:2a:87:81:95: 49:8b:f8:83:0c:3a:68:e7:16:e6:43:a9:ce:dc:8c: ea:5d:99:00:91:78:81:38:b7:02:46:1e:90:08:0b: 36:ab:e0:6b:da:84:7b:fe:5b:70:75:93:0f:6c:03: fe:82:74:b5:48:53:85:18:56:13:e8:c4:46:f5:03: 1a:82:26:76:2e:91:ab:e2:ae:a8:2e:f5:af:b1:e4: e5:b9:d7:13:48:58:b7:0d:3b:7e:39:fd:3e:d5:ff: c7:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:BA:0A:28:A3:1E:C6:30:38:B3:EF:C6:50:0E:D7:82:97:36:43:F4 X509v3 Authority Key Identifier: keyid:06:3E:01:27:47:2A:7E:2A:6F:84:70:40:9C:9B:82:39:05:FA:FE:8E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E1CB1/3F4A5A2EEA0811EF9D339B29C4F9AE02/Bj4BJ0cqfipvhHBAnJuCOQX6_o4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Bj4BJ0cqfipvhHBAnJuCOQX6_o4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E1CB1/3F4A5A2EEA0811EF9D339B29C4F9AE02/Bj4BJ0cqfipvhHBAnJuCOQX6_o4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 37:c1:21:dd:39:1f:75:d3:b3:59:cb:5b:41:3a:a4:4c:c6:b2: 5a:e9:e1:00:7d:93:c3:76:d8:e1:63:60:7e:5b:dc:54:69:47: a8:6f:38:d0:ca:fc:88:92:78:9a:bb:59:67:31:94:ed:bc:75: a2:99:d9:cc:f9:60:3b:f6:0c:69:0c:ab:55:7f:f1:22:44:e9: 4b:4e:9f:01:87:eb:39:8c:22:29:91:94:bf:ef:ab:de:33:ca: 5b:e3:2b:08:82:3f:e5:6b:82:d0:09:71:b5:2a:34:5b:ba:bb: bc:65:a7:20:4c:b0:65:82:dd:9e:83:90:56:eb:b6:75:09:e0: 39:ad:61:05:91:dd:f1:66:9e:d0:07:9f:81:34:90:7d:d2:26: a3:b8:f2:db:61:4f:76:cf:ff:77:c0:af:26:18:37:35:56:c1: 8e:94:3e:25:b4:54:ce:f7:8b:e4:b8:90:ed:fe:4d:cd:87:64: 77:cd:9b:61:d3:f5:06:d8:9d:cb:45:c1:63:b2:a5:1c:b1:0c: a7:8a:4a:1d:08:35:6b:dc:09:57:39:91:18:46:31:14:56:cd: 3c:d7:a5:98:6b:3c:a8:a1:ba:8a:6c:07:ea:86:49:a8:b4:1a: ae:d5:f0:6b:08:bd:e4:37:a7:60:9d:82:8d:3c:91:16:f3:b5: 4c:ac:77:79 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAIUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTFDQjExMTAvBgNVBAUTKDA2M0UwMTI3NDcyQTdFMkE2Rjg0NzA0MDlDOUI4MjM5 MDVGQUZFOEUwHhcNMjUxMDE5MDk1OTE2WhcNMjUxMDI2MDk1OTE2WjAYMRYwFAYD VQQDEw02OGY0YjY3NS0wNmFiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3vqyrHWdWbYwtZD8T/diddxUxfaxCS5dJYkZrOSfJwFg/02opEtC41gcDcBH zYbfztzvRVujpGeQv52as2USYapTKqEGDgqJ5N0m/HEkDpvsYmDzTCr4GBWNxx09 Jv0/bjlfntBCAuTLUjSIa7GpSyX6XsSTuPA5xknqBxXXP6qn1+eNrwkaH4U9CiK5 3D+SnflQ4lBL9o0g2+Rhz953iSqHgZVJi/iDDDpo5xbmQ6nO3IzqXZkAkXiBOLcC Rh6QCAs2q+Br2oR7/ltwdZMPbAP+gnS1SFOFGFYT6MRG9QMagiZ2LpGr4q6oLvWv seTludcTSFi3DTt+Of0+1f/HjQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMy6Ciij HsYwOLPvxlAO14KXNkP0MB8GA1UdIwQYMBaAFAY+ASdHKn4qb4RwQJybgjkF+v6O MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMUNCMS8zRjRBNUEyRUVB MDgxMUVGOUQzMzlCMjlDNEY5QUUwMi9CajRCSjBjcWZpcHZoSEJBbkp1Q09RWDZf bzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0JqNEJKMGNxZmlwdmhIQkFuSnVDT1FYNl9vNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MUNCMS8zRjRBNUEyRUVBMDgxMUVGOUQzMzlCMjlDNEY5QUUwMi9CajRCSjBjcWZp cHZoSEJBbkp1Q09RWDZfbzQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA3wSHdOR9107NZy1tBOqRMxrJa6eEAfZPDdtjhY2B+W9xUaUeobzjQ yvyIkniau1lnMZTtvHWimdnM+WA79gxpDKtVf/EiROlLTp8Bh+s5jCIpkZS/76ve M8pb4ysIgj/la4LQCXG1KjRburu8ZacgTLBlgt2eg5BW67Z1CeA5rWEFkd3xZp7Q B5+BNJB90iajuPLbYU92z/93wK8mGDc1VsGOlD4ltFTO94vkuJDt/k3Nh2R3zZth 0/UG2J3LRcFjsqUcsQynikodCDVr3AlXOZEYRjEUVs0816WYazyoobqKbAfqhkmo tBqu1fBrCL3kN6dgnYKNPJEW87VMrHd5 -----END CERTIFICATE-----Generated at Mon Oct 20 01:44:21 2025 by rpki-client