$ rpki-client -vvf rpki.apnic.net/member_repository/A91E5C49/8A87EFC21A4811EB8F143246C4F9AE02/RBbomFjaZ3sM2jO4ey6Miv0cYHg.mft File: RBbomFjaZ3sM2jO4ey6Miv0cYHg.mft (raw, json) Hash identifier: aIB16BexlMFZaoeh8+CVaQQgq09esnxh3AqjIkbWdu0= Subject key identifier: 20:7F:D8:25:52:63:90:4A:C1:EB:63:00:AD:FE:39:79:AF:6A:88:32 Authority key identifier: 44:16:E8:98:58:DA:67:7B:0C:DA:33:B8:7B:2E:8C:8A:FD:1C:60:78 Certificate issuer: /CN=A91E5C49/serialNumber=4416E89858DA677B0CDA33B87B2E8C8AFD1C6078 Certificate serial: 07B7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RBbomFjaZ3sM2jO4ey6Miv0cYHg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E5C49/8A87EFC21A4811EB8F143246C4F9AE02/RBbomFjaZ3sM2jO4ey6Miv0cYHg.mft Manifest number: 0F60 Signing time: Sat 18 Oct 2025 22:38:58 +0000 Manifest this update: Sat 18 Oct 2025 22:38:58 +0000 Manifest next update: Sat 25 Oct 2025 22:38:58 +0000 Files and hashes: 1: RBbomFjaZ3sM2jO4ey6Miv0cYHg.crl (hash: duyBtF6vNYPkesNVyCTLnnM89kake98TQTuFFygToYc=) 2: 84FDF25A396711ED8AF52966C4F9AE02.roa (hash: hkxmNGokisQG0mbBKypviapB/RNUZ9nsMjdRwBRak9A=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E5C49/8A87EFC21A4811EB8F143246C4F9AE02/RBbomFjaZ3sM2jO4ey6Miv0cYHg.crl rsync://rpki.apnic.net/member_repository/A91E5C49/8A87EFC21A4811EB8F143246C4F9AE02/RBbomFjaZ3sM2jO4ey6Miv0cYHg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RBbomFjaZ3sM2jO4ey6Miv0cYHg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 22:38:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1975 (0x7b7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5C49, serialNumber=4416E89858DA677B0CDA33B87B2E8C8AFD1C6078 Validity Not Before: Oct 18 22:38:58 2025 GMT Not After : Oct 25 22:38:58 2025 GMT Subject: CN=68f41702-18a0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:b6:5d:aa:6e:15:44:9a:01:9e:0f:00:ab:0e: 28:ac:af:9e:62:c0:1b:ff:58:77:d8:72:11:52:23: 59:76:2f:18:1e:f0:0d:6d:80:03:98:8e:79:01:2a: e0:31:67:c7:2a:c6:1a:c8:37:55:18:b3:b0:dd:08: 13:4f:e2:dd:03:cc:1e:95:a6:4e:f3:a7:d9:d8:53: 3b:bf:89:9d:6a:3b:a3:72:92:bf:54:d2:8c:e4:f7: 92:dc:12:56:0d:16:b9:4d:db:47:09:49:a0:e4:c3: 77:ea:c3:0b:a9:db:9c:65:e3:fd:fb:42:7c:b9:e5: 28:ee:b2:1f:b0:4b:3a:78:ce:d1:d3:2c:3c:d7:03: 84:51:95:41:9f:2f:21:23:16:29:18:1d:c2:d8:99: 56:f1:6d:cc:f6:9a:77:d7:68:a9:e4:35:95:c3:f7: 24:99:29:65:34:ad:84:36:d6:bc:ad:4e:13:f3:22: c7:ba:25:1c:80:eb:25:c2:8e:56:b9:16:c0:d3:b5: cf:21:63:0a:8a:36:58:56:fd:c8:8d:2d:6d:e5:51: 4c:87:4c:3c:1d:5d:80:66:ba:9e:70:e7:29:bb:db: 0f:57:2a:08:f7:9e:f7:46:9d:5b:2c:5d:dc:ab:fe: 10:1b:e1:eb:75:00:bc:fe:fe:76:ba:8d:24:62:08: e4:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:7F:D8:25:52:63:90:4A:C1:EB:63:00:AD:FE:39:79:AF:6A:88:32 X509v3 Authority Key Identifier: keyid:44:16:E8:98:58:DA:67:7B:0C:DA:33:B8:7B:2E:8C:8A:FD:1C:60:78 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E5C49/8A87EFC21A4811EB8F143246C4F9AE02/RBbomFjaZ3sM2jO4ey6Miv0cYHg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RBbomFjaZ3sM2jO4ey6Miv0cYHg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E5C49/8A87EFC21A4811EB8F143246C4F9AE02/RBbomFjaZ3sM2jO4ey6Miv0cYHg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 98:b7:e4:1a:35:ac:83:e7:f8:92:51:1d:60:41:80:59:d2:bf: 65:6c:3e:ad:aa:33:3b:8c:f4:c9:cf:f2:3f:af:da:1d:05:e0: ac:0a:52:4f:9f:b1:e7:81:04:55:77:47:54:33:b0:2a:2c:d7: 15:d1:ea:0d:5f:04:8e:7d:a1:16:b7:3c:9b:90:d2:c0:c7:24: 3a:9e:a7:61:36:c7:a4:26:11:35:75:ed:e2:56:1d:18:47:38: 61:68:dd:11:d1:f3:75:22:03:4f:cb:7e:66:e1:42:1d:41:59: 2c:79:09:22:09:d8:fd:e1:53:ec:a0:ec:8c:2c:f0:6b:26:03: 65:c4:00:f9:67:56:c6:ad:26:fb:77:06:2c:51:2e:bd:73:df: 69:7f:d9:78:0f:97:61:18:99:1a:82:95:ef:8a:25:4a:45:93: 59:dc:9c:c0:a6:cc:e7:ff:75:e1:a8:5e:e1:f2:b0:7e:f7:7c: fe:e4:a8:73:23:5f:e2:55:e5:9e:30:c5:a7:63:7e:aa:65:5f: 05:67:ae:88:08:56:66:5c:7c:31:81:2d:76:2e:f3:5f:86:1a: 40:2d:1f:41:59:6f:33:20:1a:bc:25:f8:0b:e8:e7:9f:97:40: 09:94:99:f1:33:97:fb:3b:62:c6:a0:62:11:ff:ce:34:5b:ae: 26:14:40:04 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB7cwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTVDNDkxMTAvBgNVBAUTKDQ0MTZFODk4NThEQTY3N0IwQ0RBMzNCODdCMkU4QzhB RkQxQzYwNzgwHhcNMjUxMDE4MjIzODU4WhcNMjUxMDI1MjIzODU4WjAYMRYwFAYD VQQDEw02OGY0MTcwMi0xOGEwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA27Zdqm4VRJoBng8Aqw4orK+eYsAb/1h32HIRUiNZdi8YHvANbYADmI55ASrg MWfHKsYayDdVGLOw3QgTT+LdA8welaZO86fZ2FM7v4mdajujcpK/VNKM5PeS3BJW DRa5TdtHCUmg5MN36sMLqducZeP9+0J8ueUo7rIfsEs6eM7R0yw81wOEUZVBny8h IxYpGB3C2JlW8W3M9pp312ip5DWVw/ckmSllNK2ENta8rU4T8yLHuiUcgOslwo5W uRbA07XPIWMKijZYVv3IjS1t5VFMh0w8HV2AZrqecOcpu9sPVyoI9573Rp1bLF3c q/4QG+HrdQC8/v52uo0kYgjkjwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCB/2CVS Y5BKwetjAK3+OXmvaogyMB8GA1UdIwQYMBaAFEQW6JhY2md7DNozuHsujIr9HGB4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNUM0OS84QTg3RUZDMjFB NDgxMUVCOEYxNDMyNDZDNEY5QUUwMi9SQmJvbUZqYVozc00yak80ZXk2TWl2MGNZ SGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1JCYm9tRmphWjNzTTJqTzRleTZNaXYwY1lIZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NUM0OS84QTg3RUZDMjFBNDgxMUVCOEYxNDMyNDZDNEY5QUUwMi9SQmJvbUZqYVoz c00yak80ZXk2TWl2MGNZSGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCYt+QaNayD5/iSUR1gQYBZ0r9lbD6tqjM7jPTJz/I/r9odBeCsClJP n7HngQRVd0dUM7AqLNcV0eoNXwSOfaEWtzybkNLAxyQ6nqdhNsekJhE1de3iVh0Y RzhhaN0R0fN1IgNPy35m4UIdQVkseQkiCdj94VPsoOyMLPBrJgNlxAD5Z1bGrSb7 dwYsUS69c99pf9l4D5dhGJkagpXviiVKRZNZ3JzApszn/3XhqF7h8rB+93z+5Khz I1/iVeWeMMWnY36qZV8FZ66ICFZmXHwxgS12LvNfhhpALR9BWW8zIBq8JfgL6Oef l0AJlJnxM5f7O2LGoGIR/840W64mFEAE -----END CERTIFICATE-----Generated at Mon Oct 20 04:06:25 2025 by rpki-client