$ rpki-client -vvf rpki.apnic.net/member_repository/A91F3D37/5EE9782ADCEE11ED8C38D031C4F9AE02/bPYEPvYahE8I4lOhk9XZRlSWJ50.mft File: bPYEPvYahE8I4lOhk9XZRlSWJ50.mft (raw, json) Hash identifier: eO7+n/zxIQawPhuB699WnmGCrByZXaeZAJF5M7uPnyo= Subject key identifier: 96:35:E4:FB:86:AA:20:D1:64:2C:1B:81:5E:6F:F3:96:68:12:6D:F6 Authority key identifier: 6C:F6:04:3E:F6:1A:84:4F:08:E2:53:A1:93:D5:D9:46:54:96:27:9D Certificate issuer: /CN=A91F3D37/serialNumber=6CF6043EF61A844F08E253A193D5D9465496279D Certificate serial: 01D8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bPYEPvYahE8I4lOhk9XZRlSWJ50.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F3D37/5EE9782ADCEE11ED8C38D031C4F9AE02/bPYEPvYahE8I4lOhk9XZRlSWJ50.mft Manifest number: 01D5 Signing time: Sun 19 Oct 2025 05:13:13 +0000 Manifest this update: Sun 19 Oct 2025 05:13:13 +0000 Manifest next update: Sun 26 Oct 2025 05:13:12 +0000 Files and hashes: 1: bPYEPvYahE8I4lOhk9XZRlSWJ50.crl (hash: DBSXWdYSY8iTL5DXnh9HpVc70YBSDdhxXAoNXg8pjSY=) 2: 6F67CF8CDCF111ED9828F232C4F9AE02.roa (hash: UUhAaQeYrl7H0iCSeqj7JAOZrw6JcIfsjlzbvaWf61k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F3D37/5EE9782ADCEE11ED8C38D031C4F9AE02/bPYEPvYahE8I4lOhk9XZRlSWJ50.crl rsync://rpki.apnic.net/member_repository/A91F3D37/5EE9782ADCEE11ED8C38D031C4F9AE02/bPYEPvYahE8I4lOhk9XZRlSWJ50.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bPYEPvYahE8I4lOhk9XZRlSWJ50.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 05:13:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 472 (0x1d8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F3D37, serialNumber=6CF6043EF61A844F08E253A193D5D9465496279D Validity Not Before: Oct 19 05:13:13 2025 GMT Not After : Oct 26 05:13:12 2025 GMT Subject: CN=68f47369-de85 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:53:12:1f:a2:8a:6f:14:70:77:d7:b9:44:c9: e6:e8:94:38:8f:f3:7a:64:25:ca:79:38:65:e5:ec: f7:2f:d2:69:de:bb:cd:6b:ec:f2:86:d5:f9:33:6f: 72:e1:93:24:44:7a:2d:82:2c:a5:d9:98:bf:66:9a: 76:54:a1:9a:f2:6e:58:ae:b3:d2:35:4f:ec:9e:5e: 2f:d9:41:06:1a:02:b7:7c:e4:40:5d:b3:38:f8:18: 6e:fe:8a:b1:28:73:0f:24:01:5e:d4:77:eb:c1:ab: ea:b9:96:79:fa:c1:5c:6e:b5:44:34:fd:c7:1f:b2: be:29:d6:f7:ce:7e:e0:81:3a:f1:9c:76:cd:93:c7: 8f:04:d8:31:5f:0f:1a:2d:de:07:78:db:aa:57:11: 43:a4:0c:c0:e7:f5:c7:80:35:fe:ad:c1:83:f9:4c: 29:6f:b2:30:99:16:a6:0f:60:e4:34:d2:97:10:47: ea:ec:9c:80:c4:ae:3e:ed:da:e0:12:ac:10:45:fa: a7:2a:88:1d:6c:e9:d5:72:76:58:2e:9a:ab:7f:65: 75:62:9b:0d:1e:77:0c:f4:e1:5b:db:fb:81:fb:44: 12:46:ed:a9:95:ce:c0:1c:bc:d5:95:2a:6e:50:ad: 5b:b0:6f:3e:8a:f9:d5:d0:b4:2e:29:e4:cf:0e:a0: 00:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:35:E4:FB:86:AA:20:D1:64:2C:1B:81:5E:6F:F3:96:68:12:6D:F6 X509v3 Authority Key Identifier: keyid:6C:F6:04:3E:F6:1A:84:4F:08:E2:53:A1:93:D5:D9:46:54:96:27:9D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F3D37/5EE9782ADCEE11ED8C38D031C4F9AE02/bPYEPvYahE8I4lOhk9XZRlSWJ50.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bPYEPvYahE8I4lOhk9XZRlSWJ50.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F3D37/5EE9782ADCEE11ED8C38D031C4F9AE02/bPYEPvYahE8I4lOhk9XZRlSWJ50.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0f:1e:d9:95:f4:fa:02:18:21:24:ee:cb:5c:a3:bd:5a:f9:a5: 59:82:18:85:66:21:c8:9b:62:3f:9b:fa:db:ee:bb:95:83:84: dd:96:ee:9a:e1:81:3d:56:52:3d:42:5b:a6:2d:e3:76:b1:5f: 96:c2:15:93:ee:a8:e7:5d:6c:02:7e:10:b2:e2:02:98:53:43: 42:42:fa:6f:bc:b7:99:49:a4:b3:d4:94:8a:47:95:46:92:76: 35:6a:16:7e:bf:f9:a2:11:80:61:de:28:a2:8b:bb:7b:ee:03: 2b:33:78:71:85:a0:b3:42:06:36:1a:0c:9d:39:69:c1:80:c2: da:81:c9:62:46:5d:72:a8:d3:ba:90:05:eb:88:44:cd:79:fd: 78:47:a9:45:1a:18:ac:b1:99:b1:1e:63:70:26:f8:ea:87:48: a8:96:d0:ae:35:b0:ff:2f:df:83:66:0a:25:0e:06:50:85:5a: b0:07:15:02:97:ff:ab:84:ba:bd:a9:2b:a5:c0:5d:ed:51:10: 08:7c:44:23:47:5b:68:d7:d8:7f:25:02:26:3b:fe:da:8b:47: c4:a5:25:6b:e7:8f:15:50:08:ac:62:f3:df:73:d5:3f:49:09: fa:c0:78:ad:3e:22:68:12:87:4a:2a:e3:d4:4c:ef:a1:cf:2a: 2a:93:75:f7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAdgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjNEMzcxMTAvBgNVBAUTKDZDRjYwNDNFRjYxQTg0NEYwOEUyNTNBMTkzRDVEOTQ2 NTQ5NjI3OUQwHhcNMjUxMDE5MDUxMzEzWhcNMjUxMDI2MDUxMzEyWjAYMRYwFAYD VQQDEw02OGY0NzM2OS1kZTg1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2VMSH6KKbxRwd9e5RMnm6JQ4j/N6ZCXKeThl5ez3L9Jp3rvNa+zyhtX5M29y 4ZMkRHotgiyl2Zi/Zpp2VKGa8m5YrrPSNU/snl4v2UEGGgK3fORAXbM4+Bhu/oqx KHMPJAFe1HfrwavquZZ5+sFcbrVENP3HH7K+Kdb3zn7ggTrxnHbNk8ePBNgxXw8a Ld4HeNuqVxFDpAzA5/XHgDX+rcGD+Uwpb7IwmRamD2DkNNKXEEfq7JyAxK4+7drg EqwQRfqnKogdbOnVcnZYLpqrf2V1YpsNHncM9OFb2/uB+0QSRu2plc7AHLzVlSpu UK1bsG8+ivnV0LQuKeTPDqAAVwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJY15PuG qiDRZCwbgV5v85ZoEm32MB8GA1UdIwQYMBaAFGz2BD72GoRPCOJToZPV2UZUlied MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGM0QzNy81RUU5NzgyQURD RUUxMUVEOEMzOEQwMzFDNEY5QUUwMi9iUFlFUHZZYWhFOEk0bE9oazlYWlJsU1dK NTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2JQWUVQdllhaEU4STRsT2hrOVhaUmxTV0o1MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG M0QzNy81RUU5NzgyQURDRUUxMUVEOEMzOEQwMzFDNEY5QUUwMi9iUFlFUHZZYWhF OEk0bE9oazlYWlJsU1dKNTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAPHtmV9PoCGCEk7stco71a+aVZghiFZiHIm2I/m/rb7ruVg4Tdlu6a 4YE9VlI9QlumLeN2sV+WwhWT7qjnXWwCfhCy4gKYU0NCQvpvvLeZSaSz1JSKR5VG knY1ahZ+v/miEYBh3iiii7t77gMrM3hxhaCzQgY2GgydOWnBgMLagcliRl1yqNO6 kAXriETNef14R6lFGhissZmxHmNwJvjqh0ioltCuNbD/L9+DZgolDgZQhVqwBxUC l/+rhLq9qSulwF3tURAIfEQjR1to19h/JQImO/7ai0fEpSVr548VUAisYvPfc9U/ SQn6wHitPiJoEodKKuPUTO+hzyoqk3X3 -----END CERTIFICATE-----Generated at Mon Oct 20 06:55:45 2025 by rpki-client