$ rpki-client -vvf rpki.apnic.net/member_repository/A91862F7/5EAC61448FA611EA9ACB7E7FC4F9AE02/BYQh3nB4BzBHPlzFRboK5dubTAo.mft File: BYQh3nB4BzBHPlzFRboK5dubTAo.mft (raw, json) Hash identifier: BobnAesjOnDnILB/4ayRcvnJkhYl/nEgf30Ywjj4jFs= Subject key identifier: AC:65:5A:1D:C6:8E:5F:84:FA:E0:F4:A9:6D:61:A6:77:04:57:87:DC Authority key identifier: 05:84:21:DE:70:78:07:30:47:3E:5C:C5:45:BA:0A:E5:DB:9B:4C:0A Certificate issuer: /CN=A91862F7/serialNumber=058421DE70780730473E5CC545BA0AE5DB9B4C0A Certificate serial: 09E3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BYQh3nB4BzBHPlzFRboK5dubTAo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91862F7/5EAC61448FA611EA9ACB7E7FC4F9AE02/BYQh3nB4BzBHPlzFRboK5dubTAo.mft Manifest number: 09D7 Signing time: Tue 04 Nov 2025 17:22:43 +0000 Manifest this update: Tue 04 Nov 2025 17:22:43 +0000 Manifest next update: Tue 11 Nov 2025 17:22:43 +0000 Files and hashes: 1: BYQh3nB4BzBHPlzFRboK5dubTAo.crl (hash: uPs6yuX3QJcSdOEeqzQzGzAGzJ/wtKI3wpTlQZjefMI=) 2: 0619825C2F2A11ED9F62040DC4F9AE02.roa (hash: kL+XFv+JIBMzJ5k9XXPNiC6YLDiIMa15JQqj4/UV838=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91862F7/5EAC61448FA611EA9ACB7E7FC4F9AE02/BYQh3nB4BzBHPlzFRboK5dubTAo.crl rsync://rpki.apnic.net/member_repository/A91862F7/5EAC61448FA611EA9ACB7E7FC4F9AE02/BYQh3nB4BzBHPlzFRboK5dubTAo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BYQh3nB4BzBHPlzFRboK5dubTAo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 17:22:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2531 (0x9e3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862F7, serialNumber=058421DE70780730473E5CC545BA0AE5DB9B4C0A Validity Not Before: Nov 4 17:22:43 2025 GMT Not After : Nov 11 17:22:43 2025 GMT Subject: CN=690a3663-7a7b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:7c:17:19:79:9f:72:83:ac:18:28:b1:4d:61: 1d:8b:a9:7f:17:da:95:19:7d:cb:1e:d9:51:88:fb: ed:89:c8:c8:bd:e6:ca:aa:03:4b:5d:9f:89:34:2c: 6d:23:96:cd:62:e4:f9:17:c6:29:8c:da:6a:73:54: 23:e4:7b:ac:e2:ab:a4:17:56:d3:a1:c9:5a:cb:48: af:36:dc:5c:5e:a3:48:68:9f:54:b5:47:63:54:57: 3e:fe:40:09:6c:e2:be:f6:ce:10:b9:f3:32:d2:88: fe:b9:65:67:93:10:fa:75:42:fb:6f:97:68:2d:a3: 5b:73:d5:65:d5:6a:b3:c0:2d:80:16:86:d1:40:96: 95:23:d1:4f:7b:4e:f2:19:cd:c8:0d:d1:7b:fb:ea: 91:43:ae:e2:92:43:ac:ce:c6:20:fe:6d:5f:0c:68: 3f:c9:20:f3:c8:5a:f3:8b:20:e9:75:11:5b:16:c0: db:92:5c:44:63:e2:21:17:09:6c:14:9b:7d:24:88: 11:7f:d5:6b:e3:24:4e:9e:99:10:28:64:de:70:bb: bc:32:c0:fc:c4:7f:da:9b:6c:1f:a6:dc:d0:39:7f: f4:e4:d5:15:aa:1c:4c:85:c6:33:3b:58:e9:fa:f8: f9:ac:96:b2:fd:0f:12:4b:71:d5:07:49:53:77:0a: 63:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:65:5A:1D:C6:8E:5F:84:FA:E0:F4:A9:6D:61:A6:77:04:57:87:DC X509v3 Authority Key Identifier: keyid:05:84:21:DE:70:78:07:30:47:3E:5C:C5:45:BA:0A:E5:DB:9B:4C:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91862F7/5EAC61448FA611EA9ACB7E7FC4F9AE02/BYQh3nB4BzBHPlzFRboK5dubTAo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BYQh3nB4BzBHPlzFRboK5dubTAo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91862F7/5EAC61448FA611EA9ACB7E7FC4F9AE02/BYQh3nB4BzBHPlzFRboK5dubTAo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a5:1b:fc:50:0e:8a:38:ce:81:61:9d:b4:f2:ce:94:69:20:29: ca:4b:e7:af:67:fa:d3:20:15:87:69:76:ec:52:28:2d:b9:9c: 4f:89:67:2a:03:fd:43:03:71:49:c7:ce:eb:6d:cd:b2:00:b1: c1:5a:19:ac:90:25:47:1f:e2:fb:0b:ac:a0:16:d6:5d:71:78: 18:23:7f:2b:c8:be:32:d4:ae:85:6f:92:bd:78:87:f6:9e:3c: 11:b9:a5:ed:e8:44:1b:91:49:f4:f5:b8:b8:92:e5:8b:74:49: b2:a3:90:62:84:3f:ac:40:85:42:17:be:32:b8:e5:f3:c1:3c: 19:85:63:ea:5c:51:c6:42:d8:cf:37:04:1e:d9:c9:3b:b5:fe: e1:bc:16:a8:74:b6:fd:6a:3c:60:0e:89:60:b1:7f:db:63:f1: eb:7a:da:af:54:81:ad:0c:f3:60:26:aa:d7:2a:b3:0d:d4:1d: d2:25:ec:3a:5a:5c:fd:08:3e:bd:33:58:1f:97:16:4b:55:c3: 23:3a:f5:aa:5c:09:1a:49:84:32:bf:60:b0:00:94:14:4a:65: 6c:b6:20:5f:fa:66:33:78:b3:3f:02:8d:a6:59:c7:2d:ea:98: 1b:1d:23:7b:c2:6c:68:b8:fd:f4:79:41:5b:7d:d0:95:83:4b: 4f:d0:1b:7d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCeMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODYyRjcxMTAvBgNVBAUTKDA1ODQyMURFNzA3ODA3MzA0NzNFNUNDNTQ1QkEwQUU1 REI5QjRDMEEwHhcNMjUxMTA0MTcyMjQzWhcNMjUxMTExMTcyMjQzWjAYMRYwFAYD VQQDEw02OTBhMzY2My03YTdiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyHwXGXmfcoOsGCixTWEdi6l/F9qVGX3LHtlRiPvticjIvebKqgNLXZ+JNCxt I5bNYuT5F8YpjNpqc1Qj5Hus4qukF1bToclay0ivNtxcXqNIaJ9UtUdjVFc+/kAJ bOK+9s4QufMy0oj+uWVnkxD6dUL7b5doLaNbc9Vl1WqzwC2AFobRQJaVI9FPe07y Gc3IDdF7++qRQ67ikkOszsYg/m1fDGg/ySDzyFrziyDpdRFbFsDbklxEY+IhFwls FJt9JIgRf9Vr4yROnpkQKGTecLu8MsD8xH/am2wfptzQOX/05NUVqhxMhcYzO1jp +vj5rJay/Q8SS3HVB0lTdwpjQQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKxlWh3G jl+E+uD0qW1hpncEV4fcMB8GA1UdIwQYMBaAFAWEId5weAcwRz5cxUW6CuXbm0wK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NjJGNy81RUFDNjE0NDhG QTYxMUVBOUFDQjdFN0ZDNEY5QUUwMi9CWVFoM25CNEJ6QkhQbHpGUmJvSzVkdWJU QW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0JZUWgzbkI0QnpCSFBsekZSYm9LNWR1YlRBby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NjJGNy81RUFDNjE0NDhGQTYxMUVBOUFDQjdFN0ZDNEY5QUUwMi9CWVFoM25CNEJ6 QkhQbHpGUmJvSzVkdWJUQW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQClG/xQDoo4zoFhnbTyzpRpICnKS+evZ/rTIBWHaXbsUigtuZxPiWcq A/1DA3FJx87rbc2yALHBWhmskCVHH+L7C6ygFtZdcXgYI38ryL4y1K6Fb5K9eIf2 njwRuaXt6EQbkUn09bi4kuWLdEmyo5BihD+sQIVCF74yuOXzwTwZhWPqXFHGQtjP NwQe2ck7tf7hvBaodLb9ajxgDolgsX/bY/HretqvVIGtDPNgJqrXKrMN1B3SJew6 Wlz9CD69M1gflxZLVcMjOvWqXAkaSYQyv2CwAJQUSmVstiBf+mYzeLM/Ao2mWcct 6pgbHSN7wmxouP30eUFbfdCVg0tP0Bt9 -----END CERTIFICATE-----Generated at Wed Nov 5 05:48:05 2025 by rpki-client