$ rpki-client -vvf rpki.apnic.net/member_repository/A91E504E/44A51948960811ECA04A0086C4F9AE02/BO4Hal36lIw4-DyMrCD-Do6G2As.mft File: BO4Hal36lIw4-DyMrCD-Do6G2As.mft (raw, json) Hash identifier: kGC/hmOuB7DKIvSyahQElsMAjVsQGttrLJAauh9dp/o= Subject key identifier: 52:8B:32:DF:CD:9B:67:78:2A:8A:32:A7:1B:86:9D:D7:46:67:5C:CC Authority key identifier: 04:EE:07:6A:5D:FA:94:8C:38:F8:3C:8C:AC:20:FE:0E:8E:86:D8:0B Certificate issuer: /CN=A91E504E/serialNumber=04EE076A5DFA948C38F83C8CAC20FE0E8E86D80B Certificate serial: 0403 Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/BO4Hal36lIw4-DyMrCD-Do6G2As.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E504E/44A51948960811ECA04A0086C4F9AE02/BO4Hal36lIw4-DyMrCD-Do6G2As.mft Manifest number: 03F8 Signing time: Sun 19 Oct 2025 02:26:49 +0000 Manifest this update: Sun 19 Oct 2025 02:26:48 +0000 Manifest next update: Sun 26 Oct 2025 02:26:48 +0000 Files and hashes: 1: BO4Hal36lIw4-DyMrCD-Do6G2As.crl (hash: FOmFHTpchG5/Bg4OJJddj3qEwZGw63QECPJWJKWL3VM=) 2: 29D2F7BE0CA711ED98CF681AC4F9AE02.roa (hash: yEVRrXufQh+Qc/HqPk/jAvaqGmnT+PN1jZ/kXTfyo9A=) 3: ACC1DEB0960A11EC8BB4F586C4F9AE02.roa (hash: hYiudA2rwhN316Pb5lt+GNf53uhu2FFhMUzTaTRI2hw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E504E/44A51948960811ECA04A0086C4F9AE02/BO4Hal36lIw4-DyMrCD-Do6G2As.crl rsync://rpki.apnic.net/member_repository/A91E504E/44A51948960811ECA04A0086C4F9AE02/BO4Hal36lIw4-DyMrCD-Do6G2As.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/BO4Hal36lIw4-DyMrCD-Do6G2As.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 02:26:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1027 (0x403) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E504E, serialNumber=04EE076A5DFA948C38F83C8CAC20FE0E8E86D80B Validity Not Before: Oct 19 02:26:48 2025 GMT Not After : Oct 26 02:26:48 2025 GMT Subject: CN=68f44c69-be94 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:25:5e:0e:b1:c4:7e:74:5c:42:e8:dd:cc:85: 1d:30:7a:08:2c:48:ee:57:6e:1b:a7:03:dd:5e:f5: 65:23:36:73:ff:23:18:b7:09:fd:e5:da:e7:de:4e: 66:75:da:ca:d3:a0:f5:ec:e3:a7:45:4c:5b:8c:60: 7e:36:73:fb:85:01:f7:31:88:46:c4:c5:7e:10:29: cc:ed:49:84:a2:3f:5b:0d:8d:82:ae:8d:40:5a:6b: 5e:19:cd:2e:91:b4:47:86:3b:ae:0b:a3:50:84:36: 10:02:26:51:92:70:a6:92:46:66:76:fa:51:46:1c: 83:37:24:83:68:b1:e8:1d:71:be:ac:89:1c:95:b0: 5c:c3:45:33:e6:42:bf:68:7d:44:b8:f8:be:b4:2c: d2:b0:c6:27:f9:e7:8e:1e:3c:01:26:62:56:e1:e2: d7:7b:55:28:4c:8a:36:18:0c:94:d9:0b:c0:27:48: 58:a3:84:ae:c8:21:81:91:a6:d0:07:22:a2:8f:64: f5:6b:a4:f3:55:af:eb:1d:a1:3f:a6:24:88:58:28: 79:4d:e3:7e:cb:a9:c6:e7:70:48:b4:af:38:d0:4e: af:18:4d:a4:92:22:bb:c6:fd:d1:0d:a0:a5:02:54: 6b:43:65:32:27:60:dc:69:84:6c:20:00:82:d2:44: cc:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:8B:32:DF:CD:9B:67:78:2A:8A:32:A7:1B:86:9D:D7:46:67:5C:CC X509v3 Authority Key Identifier: keyid:04:EE:07:6A:5D:FA:94:8C:38:F8:3C:8C:AC:20:FE:0E:8E:86:D8:0B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E504E/44A51948960811ECA04A0086C4F9AE02/BO4Hal36lIw4-DyMrCD-Do6G2As.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/BO4Hal36lIw4-DyMrCD-Do6G2As.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E504E/44A51948960811ECA04A0086C4F9AE02/BO4Hal36lIw4-DyMrCD-Do6G2As.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 41:e3:d9:e0:3c:a6:b1:0d:6f:67:f3:20:4b:17:ac:98:10:4a: 3d:e4:36:48:34:59:c8:72:86:6b:ed:7d:95:ba:f1:f7:c1:12: b2:69:10:28:98:31:b3:55:e4:df:5c:d0:9c:bc:02:2d:4b:0a: 7e:13:81:99:f6:ef:66:82:17:d9:8c:34:8a:25:3b:06:36:c1: 00:1b:fc:88:bd:cd:45:d9:a4:7f:00:57:3b:59:a0:37:0e:62: 4f:e6:ae:c2:55:82:4e:2e:69:f3:12:79:38:5a:da:07:80:26: 25:b5:b3:57:aa:02:1b:76:bc:73:6a:5c:df:b5:eb:2b:22:46: 6d:28:1a:cd:0a:27:a9:da:19:50:82:3d:77:ff:c1:dd:c3:98: 5f:6b:c3:97:9e:ca:5c:6d:04:24:9b:84:ac:6b:d2:1b:6c:8a: 3d:76:6a:cc:e2:59:c0:b4:52:bd:49:54:2b:98:e8:ff:75:d7: 3f:18:53:15:fc:16:40:fd:f8:a3:e9:c1:86:b7:b1:d0:00:31: 41:eb:37:a6:14:20:b3:aa:bb:fd:66:6d:8e:e4:48:60:98:cc: 83:11:f5:31:39:82:e7:c2:ea:41:1e:e1:02:ed:8e:f7:0e:33: af:22:c4:e6:63:32:ea:88:91:81:d2:33:2a:1a:b7:87:60:25: d0:d9:60:65 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBAMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTUwNEUxMTAvBgNVBAUTKDA0RUUwNzZBNURGQTk0OEMzOEY4M0M4Q0FDMjBGRTBF OEU4NkQ4MEIwHhcNMjUxMDE5MDIyNjQ4WhcNMjUxMDI2MDIyNjQ4WjAYMRYwFAYD VQQDEw02OGY0NGM2OS1iZTk0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0iVeDrHEfnRcQujdzIUdMHoILEjuV24bpwPdXvVlIzZz/yMYtwn95drn3k5m ddrK06D17OOnRUxbjGB+NnP7hQH3MYhGxMV+ECnM7UmEoj9bDY2Cro1AWmteGc0u kbRHhjuuC6NQhDYQAiZRknCmkkZmdvpRRhyDNySDaLHoHXG+rIkclbBcw0Uz5kK/ aH1EuPi+tCzSsMYn+eeOHjwBJmJW4eLXe1UoTIo2GAyU2QvAJ0hYo4SuyCGBkabQ ByKij2T1a6TzVa/rHaE/piSIWCh5TeN+y6nG53BItK840E6vGE2kkiK7xv3RDaCl AlRrQ2UyJ2DcaYRsIACC0kTMkQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFKLMt/N m2d4KooypxuGnddGZ1zMMB8GA1UdIwQYMBaAFATuB2pd+pSMOPg8jKwg/g6OhtgL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNTA0RS80NEE1MTk0ODk2 MDgxMUVDQTA0QTAwODZDNEY5QUUwMi9CTzRIYWwzNmxJdzQtRHlNckNELURvNkcy QXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyL0JPNEhhbDM2bEl3NC1EeU1yQ0QtRG82RzJBcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NTA0RS80NEE1MTk0ODk2MDgxMUVDQTA0QTAwODZDNEY5QUUwMi9CTzRIYWwzNmxJ dzQtRHlNckNELURvNkcyQXMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBB49ngPKaxDW9n8yBLF6yYEEo95DZINFnIcoZr7X2VuvH3wRKyaRAo mDGzVeTfXNCcvAItSwp+E4GZ9u9mghfZjDSKJTsGNsEAG/yIvc1F2aR/AFc7WaA3 DmJP5q7CVYJOLmnzEnk4WtoHgCYltbNXqgIbdrxzalzftesrIkZtKBrNCiep2hlQ gj13/8Hdw5hfa8OXnspcbQQkm4Ssa9IbbIo9dmrM4lnAtFK9SVQrmOj/ddc/GFMV /BZA/fij6cGGt7HQADFB6zemFCCzqrv9Zm2O5EhgmMyDEfUxOYLnwupBHuEC7Y73 DjOvIsTmYzLqiJGB0jMqGreHYCXQ2WBl -----END CERTIFICATE-----Generated at Mon Oct 20 08:50:49 2025 by rpki-client