$ rpki-client -vvf rpki.apnic.net/member_repository/A91232C2/1E7FFF9AF0CD11EE881D3C16C4F9AE02/b-jBYY_6_7LM_1aejqkV2vpNTjY.mft File: b-jBYY_6_7LM_1aejqkV2vpNTjY.mft (raw, json) Hash identifier: RsvSCfXkVV6AcPwbntvX/eSUKP+X++dWl3du0i4rdzY= Subject key identifier: 11:32:7E:4A:5D:1A:88:9F:0C:52:C9:2E:78:8A:95:87:AB:4A:53:C3 Authority key identifier: 6F:E8:C1:61:8F:FA:FF:B2:CC:FF:56:9E:8E:A9:15:DA:FA:4D:4E:36 Certificate issuer: /CN=A91232C2/serialNumber=6FE8C1618FFAFFB2CCFF569E8EA915DAFA4D4E36 Certificate serial: 0129 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b-jBYY_6_7LM_1aejqkV2vpNTjY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91232C2/1E7FFF9AF0CD11EE881D3C16C4F9AE02/b-jBYY_6_7LM_1aejqkV2vpNTjY.mft Manifest number: 0127 Signing time: Mon 03 Nov 2025 04:38:23 +0000 Manifest this update: Mon 03 Nov 2025 04:38:23 +0000 Manifest next update: Mon 10 Nov 2025 04:38:23 +0000 Files and hashes: 1: b-jBYY_6_7LM_1aejqkV2vpNTjY.crl (hash: aOKHv2DfBJbBEPDzAGGHWcM+TGTgY2yKgcrPPqtws30=) 2: 85035A64F0CD11EE8CC1FC16C4F9AE02.roa (hash: 9ZKq+nwt9P9nCI+BvZS/E6A1E5sodaBd/S4ZxhUXp0M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91232C2/1E7FFF9AF0CD11EE881D3C16C4F9AE02/b-jBYY_6_7LM_1aejqkV2vpNTjY.crl rsync://rpki.apnic.net/member_repository/A91232C2/1E7FFF9AF0CD11EE881D3C16C4F9AE02/b-jBYY_6_7LM_1aejqkV2vpNTjY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b-jBYY_6_7LM_1aejqkV2vpNTjY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 04:38:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 297 (0x129) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91232C2, serialNumber=6FE8C1618FFAFFB2CCFF569E8EA915DAFA4D4E36 Validity Not Before: Nov 3 04:38:23 2025 GMT Not After : Nov 10 04:38:23 2025 GMT Subject: CN=690831bf-eb23 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:b5:bc:83:c0:fe:8c:a9:bf:d8:44:44:28:8e: 51:23:29:a8:14:f5:1b:77:0b:bb:31:93:f9:9a:a5: 0a:ce:6a:31:60:f8:86:32:6c:96:b3:86:88:40:ba: 33:cd:b9:0c:00:ec:ad:53:86:73:8b:42:7a:b4:74: a1:53:e5:ba:e0:e2:1f:17:64:3a:fc:e4:4f:4a:1c: 78:71:87:c7:27:b6:4f:b7:37:46:fe:0b:10:a9:5a: 76:0b:a7:3e:68:72:33:15:03:4a:ed:80:c2:2c:88: 3d:9f:1f:5e:e4:15:0e:e0:fe:7e:98:a0:e5:a5:ae: 3e:0a:05:5d:e1:13:ba:fc:db:a8:32:ec:c0:f6:e5: a0:99:66:6d:b7:2c:4b:fd:8e:a1:1b:a8:7e:12:fe: 47:d1:ea:81:62:b0:7f:f8:20:ac:2e:0b:b9:b7:23: d5:44:2c:be:fa:a3:86:cd:72:6c:73:12:53:d3:3b: 14:35:da:f8:0b:cd:b5:de:8c:b3:23:41:94:e9:19: fd:87:d9:30:b8:3e:9c:45:63:2f:11:de:6f:2e:e0: e2:0b:1b:5e:ed:e0:c7:b7:04:e6:aa:fa:8b:54:07: 10:27:ea:01:67:e3:5b:d4:0a:4a:0f:98:1d:1a:8f: 3a:73:2e:4c:40:94:47:18:86:f2:2d:a5:98:fe:67: 3d:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:32:7E:4A:5D:1A:88:9F:0C:52:C9:2E:78:8A:95:87:AB:4A:53:C3 X509v3 Authority Key Identifier: keyid:6F:E8:C1:61:8F:FA:FF:B2:CC:FF:56:9E:8E:A9:15:DA:FA:4D:4E:36 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91232C2/1E7FFF9AF0CD11EE881D3C16C4F9AE02/b-jBYY_6_7LM_1aejqkV2vpNTjY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b-jBYY_6_7LM_1aejqkV2vpNTjY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91232C2/1E7FFF9AF0CD11EE881D3C16C4F9AE02/b-jBYY_6_7LM_1aejqkV2vpNTjY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 23:14:22:ad:13:03:a7:65:68:6e:b6:0f:34:70:da:78:a3:f8: cc:89:c5:71:01:d3:b1:33:47:ff:e4:9b:c9:1b:74:48:4c:e9: de:e6:81:9b:a4:b2:26:00:f0:7e:8f:96:15:61:72:d5:8a:c0: c8:37:1d:ad:71:f8:b2:3a:da:89:d4:95:75:cc:40:c5:3e:a2: fc:66:31:80:e2:cb:5d:fc:fc:f5:16:b0:a8:b0:cc:82:10:f8: 10:66:c6:04:48:84:98:1a:43:cf:14:f2:d3:0a:95:7f:8a:17: e6:01:b5:09:8f:4f:db:33:ca:90:6e:db:39:2a:b5:63:07:20: 2d:75:5e:cd:50:51:94:29:71:d9:48:37:7c:7b:e9:e6:4d:c7: 7e:20:d6:f6:1b:f0:ef:97:54:fe:34:b7:5f:57:57:07:43:8d: a6:70:5c:98:62:fe:f8:cb:f7:7a:97:05:5e:3d:cb:a9:b0:3e: bb:94:66:7b:4b:d1:2b:05:2a:0c:54:22:f8:7f:a7:cd:5f:cf: ec:02:6c:0f:02:7c:c6:b6:c8:a4:b2:60:e7:fe:f2:e0:c8:c4: 72:16:e7:4e:ef:2f:59:22:01:e6:8b:44:2b:73:ab:48:71:8d: fe:5e:28:d3:c7:16:dd:e8:e7:d5:b3:3d:12:4b:3b:d4:7e:dc: 41:6b:80:98 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICASkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjMyQzIxMTAvBgNVBAUTKDZGRThDMTYxOEZGQUZGQjJDQ0ZGNTY5RThFQTkxNURB RkE0RDRFMzYwHhcNMjUxMTAzMDQzODIzWhcNMjUxMTEwMDQzODIzWjAYMRYwFAYD VQQDEw02OTA4MzFiZi1lYjIzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw7W8g8D+jKm/2EREKI5RIymoFPUbdwu7MZP5mqUKzmoxYPiGMmyWs4aIQLoz zbkMAOytU4Zzi0J6tHShU+W64OIfF2Q6/ORPShx4cYfHJ7ZPtzdG/gsQqVp2C6c+ aHIzFQNK7YDCLIg9nx9e5BUO4P5+mKDlpa4+CgVd4RO6/NuoMuzA9uWgmWZttyxL /Y6hG6h+Ev5H0eqBYrB/+CCsLgu5tyPVRCy++qOGzXJscxJT0zsUNdr4C8213oyz I0GU6Rn9h9kwuD6cRWMvEd5vLuDiCxte7eDHtwTmqvqLVAcQJ+oBZ+Nb1ApKD5gd Go86cy5MQJRHGIbyLaWY/mc9UwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBEyfkpd GoifDFLJLniKlYerSlPDMB8GA1UdIwQYMBaAFG/owWGP+v+yzP9Wno6pFdr6TU42 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMzJDMi8xRTdGRkY5QUYw Q0QxMUVFODgxRDNDMTZDNEY5QUUwMi9iLWpCWVlfNl83TE1fMWFlanFrVjJ2cE5U alkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ItakJZWV82XzdMTV8xYWVqcWtWMnZwTlRqWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MzJDMi8xRTdGRkY5QUYwQ0QxMUVFODgxRDNDMTZDNEY5QUUwMi9iLWpCWVlfNl83 TE1fMWFlanFrVjJ2cE5UalkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAjFCKtEwOnZWhutg80cNp4o/jMicVxAdOxM0f/5JvJG3RITOne5oGb pLImAPB+j5YVYXLVisDINx2tcfiyOtqJ1JV1zEDFPqL8ZjGA4std/Pz1FrCosMyC EPgQZsYESISYGkPPFPLTCpV/ihfmAbUJj0/bM8qQbts5KrVjByAtdV7NUFGUKXHZ SDd8e+nmTcd+INb2G/Dvl1T+NLdfV1cHQ42mcFyYYv74y/d6lwVePcupsD67lGZ7 S9ErBSoMVCL4f6fNX8/sAmwPAnzGtsiksmDn/vLgyMRyFudO7y9ZIgHmi0Qrc6tI cY3+XijTxxbd6OfVsz0SSzvUftxBa4CY -----END CERTIFICATE-----Generated at Tue Nov 4 08:14:10 2025 by rpki-client