$ rpki-client -vvf rpki.apnic.net/member_repository/A91F6E7D/1759E4C8838111EAACB9BC30C4F9AE02/Bt9S0pFQPQ4rEXLThcKxh3lMecc.mft File: Bt9S0pFQPQ4rEXLThcKxh3lMecc.mft (raw, json) Hash identifier: qLWcUSCIp/LpxTZWwa1jUgpk8BYeGwd6T/6uKvusByE= Subject key identifier: 7B:24:27:93:46:AF:F1:8D:31:0D:9C:20:D9:DB:D2:6E:D6:FB:AC:5F Authority key identifier: 06:DF:52:D2:91:50:3D:0E:2B:11:72:D3:85:C2:B1:87:79:4C:79:C7 Certificate issuer: /CN=A91F6E7D/serialNumber=06DF52D291503D0E2B1172D385C2B187794C79C7 Certificate serial: 0A06 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Bt9S0pFQPQ4rEXLThcKxh3lMecc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F6E7D/1759E4C8838111EAACB9BC30C4F9AE02/Bt9S0pFQPQ4rEXLThcKxh3lMecc.mft Manifest number: 09FF Signing time: Mon 20 Oct 2025 20:38:22 +0000 Manifest this update: Mon 20 Oct 2025 20:38:21 +0000 Manifest next update: Mon 27 Oct 2025 20:38:21 +0000 Files and hashes: 1: Bt9S0pFQPQ4rEXLThcKxh3lMecc.crl (hash: ipPdNU52KrIwdGUD4Ow3qIKynqH66sA22oWRDA+Pgo4=) 2: 401EA996B5B511EABB640052C4F9AE02.roa (hash: rjAdNfdV9AdfawHfPlvLtufzt08XjVklPQmY9MfBrEE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F6E7D/1759E4C8838111EAACB9BC30C4F9AE02/Bt9S0pFQPQ4rEXLThcKxh3lMecc.crl rsync://rpki.apnic.net/member_repository/A91F6E7D/1759E4C8838111EAACB9BC30C4F9AE02/Bt9S0pFQPQ4rEXLThcKxh3lMecc.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Bt9S0pFQPQ4rEXLThcKxh3lMecc.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 27 Oct 2025 19:55:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2566 (0xa06) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F6E7D, serialNumber=06DF52D291503D0E2B1172D385C2B187794C79C7 Validity Not Before: Oct 20 20:38:21 2025 GMT Not After : Oct 27 20:38:21 2025 GMT Subject: CN=68f69dbe-8b80 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:4e:45:3f:9e:dc:46:45:3a:e3:98:b5:5a:53: df:71:25:c6:f1:89:60:42:a0:12:d3:7f:66:a1:7a: 29:04:11:ea:2b:a2:4e:37:4d:22:bb:91:34:5d:5b: 59:99:70:f8:27:d3:95:81:7b:cf:f6:5b:16:08:a4: 00:89:35:2e:6f:46:2d:0b:e1:e8:a4:2a:c8:9d:bc: 16:e0:cc:f3:1d:5e:60:f8:8b:8f:84:4f:23:0c:43: d8:92:f7:3f:ff:06:1a:77:c8:3c:26:0f:58:79:2a: 92:17:01:13:4b:6b:10:b7:ce:27:59:6f:8d:7b:d7: b0:9c:50:b7:1a:b0:b1:f7:c7:62:c6:60:8c:43:ac: 2f:c4:6c:3d:d3:b2:0c:d3:50:51:78:b5:a8:f3:52: 36:93:7d:44:21:02:36:02:92:e8:e6:21:83:0b:3a: cc:db:51:8c:cc:59:de:c6:5d:4a:02:81:df:6c:f9: 6f:e7:ec:ed:68:1e:e1:5e:f6:5a:9a:e4:1d:8c:51: fe:5e:27:64:c6:b7:08:34:a2:00:0d:36:e6:7d:3a: 7e:de:3b:a6:e6:c2:a9:60:0a:c6:86:06:c3:7b:c6: fa:12:2e:30:ae:1d:77:01:83:33:29:80:f2:e4:a2: 9a:c0:bb:fe:92:5d:59:ce:d4:b4:b5:a1:20:19:f1: aa:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:24:27:93:46:AF:F1:8D:31:0D:9C:20:D9:DB:D2:6E:D6:FB:AC:5F X509v3 Authority Key Identifier: keyid:06:DF:52:D2:91:50:3D:0E:2B:11:72:D3:85:C2:B1:87:79:4C:79:C7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F6E7D/1759E4C8838111EAACB9BC30C4F9AE02/Bt9S0pFQPQ4rEXLThcKxh3lMecc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Bt9S0pFQPQ4rEXLThcKxh3lMecc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F6E7D/1759E4C8838111EAACB9BC30C4F9AE02/Bt9S0pFQPQ4rEXLThcKxh3lMecc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7e:ce:8c:2b:9f:e7:df:78:db:81:33:84:d5:6b:8e:d4:55:82: da:ff:cc:40:0c:f8:b3:65:15:ba:8e:83:db:84:86:ca:a3:f1: 9c:1b:c5:f0:e7:93:e2:da:be:76:14:a9:a7:fa:25:9a:42:67: 44:dd:cc:75:0b:79:e6:65:4e:4e:46:e4:70:c6:d2:3a:3a:51: 80:66:26:3e:12:24:52:91:2f:a7:43:cc:bc:9e:64:68:bc:35: c3:bb:4b:c5:dd:66:e4:7e:de:4d:d2:e9:35:dd:ff:6b:71:dc: f3:14:37:2c:46:48:21:4e:e4:05:e6:7d:73:92:c4:5c:39:10: 82:10:02:24:bc:0f:4d:30:ed:91:27:4b:db:ad:8d:d0:50:00: ed:73:31:31:0b:66:31:64:e3:42:6a:b1:cf:13:94:a0:a7:a5: e4:0d:f4:0d:be:e0:2e:1a:66:2d:a7:73:5e:7d:34:9c:68:98: 0a:f0:69:89:89:2e:f9:9d:59:2d:ad:41:c5:f7:8a:e3:f8:0b: 72:59:6c:03:d9:58:75:76:10:33:63:9c:a4:7b:3f:68:83:63: ed:ad:b8:1a:35:f1:67:d5:45:86:13:4b:54:a7:fb:72:1f:7f: 68:8e:51:ae:74:a6:f0:81:bd:b9:c5:85:1b:58:ba:83:95:62: a5:a9:bc:de -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCgYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjZFN0QxMTAvBgNVBAUTKDA2REY1MkQyOTE1MDNEMEUyQjExNzJEMzg1QzJCMTg3 Nzk0Qzc5QzcwHhcNMjUxMDIwMjAzODIxWhcNMjUxMDI3MjAzODIxWjAYMRYwFAYD VQQDEw02OGY2OWRiZS04YjgwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzE5FP57cRkU645i1WlPfcSXG8YlgQqAS039moXopBBHqK6JON00iu5E0XVtZ mXD4J9OVgXvP9lsWCKQAiTUub0YtC+HopCrInbwW4MzzHV5g+IuPhE8jDEPYkvc/ /wYad8g8Jg9YeSqSFwETS2sQt84nWW+Ne9ewnFC3GrCx98dixmCMQ6wvxGw907IM 01BReLWo81I2k31EIQI2ApLo5iGDCzrM21GMzFnexl1KAoHfbPlv5+ztaB7hXvZa muQdjFH+XidkxrcINKIADTbmfTp+3jum5sKpYArGhgbDe8b6Ei4wrh13AYMzKYDy 5KKawLv+kl1ZztS0taEgGfGq3wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHskJ5NG r/GNMQ2cINnb0m7W+6xfMB8GA1UdIwQYMBaAFAbfUtKRUD0OKxFy04XCsYd5THnH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNkU3RC8xNzU5RTRDODgz ODExMUVBQUNCOUJDMzBDNEY5QUUwMi9CdDlTMHBGUVBRNHJFWExUaGNLeGgzbE1l Y2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0J0OVMwcEZRUFE0ckVYTFRoY0t4aDNsTWVjYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NkU3RC8xNzU5RTRDODgzODExMUVBQUNCOUJDMzBDNEY5QUUwMi9CdDlTMHBGUVBR NHJFWExUaGNLeGgzbE1lY2MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB+zowrn+ffeNuBM4TVa47UVYLa/8xADPizZRW6joPbhIbKo/GcG8Xw 55Pi2r52FKmn+iWaQmdE3cx1C3nmZU5ORuRwxtI6OlGAZiY+EiRSkS+nQ8y8nmRo vDXDu0vF3Wbkft5N0uk13f9rcdzzFDcsRkghTuQF5n1zksRcORCCEAIkvA9NMO2R J0vbrY3QUADtczExC2YxZONCarHPE5Sgp6XkDfQNvuAuGmYtp3NefTScaJgK8GmJ iS75nVktrUHF94rj+AtyWWwD2Vh1dhAzY5ykez9og2PtrbgaNfFn1UWGE0tUp/ty H39ojlGudKbwgb25xYUbWLqDlWKlqbze -----END CERTIFICATE-----Generated at Tue Oct 21 02:25:22 2025 by rpki-client