$ rpki-client -vvf rpki.apnic.net/member_repository/A91FF74B/61A3384A782C11EBAC04F672C4F9AE02/BZ5vA652dqnQ8J1fbL25CGGFWlc.mft File: BZ5vA652dqnQ8J1fbL25CGGFWlc.mft (raw, json) Hash identifier: FTSBfdXj0pgHCmq+qwRIQlrJ9E6JK4A/M37tKeRZVto= Subject key identifier: D2:B8:80:29:C2:A0:07:49:6F:2C:3F:CB:D8:D8:39:FB:8D:1F:32:CB Authority key identifier: 05:9E:6F:03:AE:76:76:A9:D0:F0:9D:5F:6C:BD:B9:08:61:85:5A:57 Certificate issuer: /CN=A91FF74B/serialNumber=059E6F03AE7676A9D0F09D5F6CBDB90861855A57 Certificate serial: 0714 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/BZ5vA652dqnQ8J1fbL25CGGFWlc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FF74B/61A3384A782C11EBAC04F672C4F9AE02/BZ5vA652dqnQ8J1fbL25CGGFWlc.mft Manifest number: 06F8 Signing time: Sat 18 Oct 2025 22:55:54 +0000 Manifest this update: Sat 18 Oct 2025 22:55:53 +0000 Manifest next update: Sat 25 Oct 2025 22:55:53 +0000 Files and hashes: 1: BZ5vA652dqnQ8J1fbL25CGGFWlc.crl (hash: gqjqkmTkMNNm1zBJWyYUqG8EEin4h0NufCmy+yFR5BY=) 2: 7E0AB01C782C11EBB0B71971C4F9AE02.roa (hash: k3Hyvnta3NTSihzOI6GhNOzxp4Li4ZxAgK0C//8NE4o=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FF74B/61A3384A782C11EBAC04F672C4F9AE02/BZ5vA652dqnQ8J1fbL25CGGFWlc.crl rsync://rpki.apnic.net/member_repository/A91FF74B/61A3384A782C11EBAC04F672C4F9AE02/BZ5vA652dqnQ8J1fbL25CGGFWlc.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/BZ5vA652dqnQ8J1fbL25CGGFWlc.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 22:55:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1812 (0x714) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FF74B, serialNumber=059E6F03AE7676A9D0F09D5F6CBDB90861855A57 Validity Not Before: Oct 18 22:55:53 2025 GMT Not After : Oct 25 22:55:53 2025 GMT Subject: CN=68f41af9-48b2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:9e:ce:b2:8e:e7:52:89:d6:12:70:3e:55:1b: 55:61:2b:1f:88:a5:f3:3a:e7:1a:f6:22:13:fd:03: 7d:bc:59:6f:b2:b7:24:09:b3:9f:ec:50:6d:d2:6b: 42:5b:2f:a2:97:0a:e3:71:d7:fe:d3:7d:7d:67:00: 0f:d5:8b:92:8d:df:03:9e:61:b9:97:2c:71:fc:84: 09:1d:04:09:8c:c9:3a:4a:db:06:29:e8:a8:1f:d9: 6b:f0:41:e4:73:83:16:89:3c:bc:3d:e6:6e:a3:fe: 1a:5b:ba:ee:0d:da:e2:8c:17:d5:cd:3e:2f:46:fe: 52:c8:1e:91:da:88:b8:ec:ad:0b:8a:5d:d1:70:e8: 85:da:d7:ae:5a:ff:69:45:42:c6:6f:65:6c:95:5c: 3b:7c:b5:2e:2f:09:56:9b:fb:26:ca:81:da:26:5e: f8:d7:be:40:97:0b:bf:e9:29:08:5f:9d:14:b9:32: a9:23:7d:33:96:2b:44:85:05:27:35:d9:6a:78:b6: 0a:8c:46:f5:b7:d7:fb:b0:b5:63:2a:99:f5:24:b0: 26:ce:f4:d6:f6:dd:ee:29:42:81:8c:95:cc:2f:fe: b5:cf:9b:e8:80:38:08:57:0d:e5:3e:fa:e3:ef:20: 93:85:c6:98:7f:f4:89:55:82:e5:81:22:67:59:9c: 33:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:B8:80:29:C2:A0:07:49:6F:2C:3F:CB:D8:D8:39:FB:8D:1F:32:CB X509v3 Authority Key Identifier: keyid:05:9E:6F:03:AE:76:76:A9:D0:F0:9D:5F:6C:BD:B9:08:61:85:5A:57 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FF74B/61A3384A782C11EBAC04F672C4F9AE02/BZ5vA652dqnQ8J1fbL25CGGFWlc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/BZ5vA652dqnQ8J1fbL25CGGFWlc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FF74B/61A3384A782C11EBAC04F672C4F9AE02/BZ5vA652dqnQ8J1fbL25CGGFWlc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3f:9f:89:34:de:fb:10:7a:00:cf:db:b3:49:f3:a0:7a:bb:34: bf:4a:6b:93:21:34:29:44:9c:ff:c4:de:7a:36:b1:04:e2:5c: e2:86:f9:cb:fd:e2:4e:1b:b2:6c:65:70:1d:cd:72:6c:ad:11: ba:8a:d3:24:e5:7b:9b:ae:71:96:99:e2:66:53:36:09:39:2c: 46:1f:62:1d:d0:0b:10:87:c2:1b:f3:63:e5:06:21:98:31:de: 2a:60:47:69:f8:c1:03:a8:29:60:53:8b:e4:42:2c:86:bd:09: bd:90:5e:a8:18:cd:ae:ca:c6:82:3e:05:2f:a5:9e:e2:e4:4d: ec:95:0a:17:81:74:e5:0b:ac:b2:f4:58:a2:bf:51:95:df:25: 4b:64:bc:0f:7f:eb:aa:3e:92:1e:8c:68:05:6c:59:71:45:7a: c5:60:b8:b3:71:73:2b:3a:57:db:fc:65:ea:95:ad:ec:fa:43: 77:3f:c6:31:67:30:13:09:00:30:bd:30:fe:35:23:63:3f:93: 5c:d9:4b:2c:b6:22:f5:84:73:80:cb:f6:34:32:12:df:f4:f7: e3:6a:0e:b9:e9:6b:1c:23:48:ee:8b:91:7e:05:9b:f7:70:86: 60:2b:d6:b5:d7:de:6d:b2:69:ed:47:ac:01:f3:96:1a:21:d4: 39:c7:6a:7d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBxQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkY3NEIxMTAvBgNVBAUTKDA1OUU2RjAzQUU3Njc2QTlEMEYwOUQ1RjZDQkRCOTA4 NjE4NTVBNTcwHhcNMjUxMDE4MjI1NTUzWhcNMjUxMDI1MjI1NTUzWjAYMRYwFAYD VQQDEw02OGY0MWFmOS00OGIyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwp7Oso7nUonWEnA+VRtVYSsfiKXzOuca9iIT/QN9vFlvsrckCbOf7FBt0mtC Wy+ilwrjcdf+0319ZwAP1YuSjd8DnmG5lyxx/IQJHQQJjMk6StsGKeioH9lr8EHk c4MWiTy8PeZuo/4aW7ruDdrijBfVzT4vRv5SyB6R2oi47K0Lil3RcOiF2teuWv9p RULGb2VslVw7fLUuLwlWm/smyoHaJl74175Alwu/6SkIX50UuTKpI30zlitEhQUn NdlqeLYKjEb1t9f7sLVjKpn1JLAmzvTW9t3uKUKBjJXML/61z5vogDgIVw3lPvrj 7yCThcaYf/SJVYLlgSJnWZwz1wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNK4gCnC oAdJbyw/y9jYOfuNHzLLMB8GA1UdIwQYMBaAFAWebwOudnap0PCdX2y9uQhhhVpX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGRjc0Qi82MUEzMzg0QTc4 MkMxMUVCQUMwNEY2NzJDNEY5QUUwMi9CWjV2QTY1MmRxblE4SjFmYkwyNUNHR0ZX bGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0JaNXZBNjUyZHFuUThKMWZiTDI1Q0dHRldsYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG Rjc0Qi82MUEzMzg0QTc4MkMxMUVCQUMwNEY2NzJDNEY5QUUwMi9CWjV2QTY1MmRx blE4SjFmYkwyNUNHR0ZXbGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA/n4k03vsQegDP27NJ86B6uzS/SmuTITQpRJz/xN56NrEE4lzihvnL /eJOG7JsZXAdzXJsrRG6itMk5XubrnGWmeJmUzYJOSxGH2Id0AsQh8Ib82PlBiGY Md4qYEdp+MEDqClgU4vkQiyGvQm9kF6oGM2uysaCPgUvpZ7i5E3slQoXgXTlC6yy 9Fiiv1GV3yVLZLwPf+uqPpIejGgFbFlxRXrFYLizcXMrOlfb/GXqla3s+kN3P8Yx ZzATCQAwvTD+NSNjP5Nc2UsstiL1hHOAy/Y0MhLf9Pfjag656WscI0jui5F+BZv3 cIZgK9a1195tsmntR6wB85YaIdQ5x2p9 -----END CERTIFICATE-----Generated at Mon Oct 20 13:50:59 2025 by rpki-client