$ rpki-client -vvf rpki.apnic.net/member_repository/A91881D9/D89BB30EB47711E7AD54B664C4F9AE02/bBtjjqnXxs4CPLXlfjyuFqEbRQU.mft File: bBtjjqnXxs4CPLXlfjyuFqEbRQU.mft (raw, json) Hash identifier: 2F6MW+tzf1d56YDc5fwJVC5Jd+Mu31H20JCwvEumlvY= Subject key identifier: 9F:3A:F7:12:E4:A2:5A:FE:90:9C:5C:C9:EA:17:E2:4B:C7:65:4A:C9 Authority key identifier: 6C:1B:63:8E:A9:D7:C6:CE:02:3C:B5:E5:7E:3C:AE:16:A1:1B:45:05 Certificate issuer: /CN=A91881D9/serialNumber=6C1B638EA9D7C6CE023CB5E57E3CAE16A11B4505 Certificate serial: 1865 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bBtjjqnXxs4CPLXlfjyuFqEbRQU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91881D9/D89BB30EB47711E7AD54B664C4F9AE02/bBtjjqnXxs4CPLXlfjyuFqEbRQU.mft Manifest number: 185C Signing time: Tue 04 Nov 2025 16:35:53 +0000 Manifest this update: Tue 04 Nov 2025 16:35:52 +0000 Manifest next update: Tue 11 Nov 2025 16:35:52 +0000 Files and hashes: 1: bBtjjqnXxs4CPLXlfjyuFqEbRQU.crl (hash: 4wDm6pCbCFHij2rtwsI0JC3xs+r7BHqeyMrOBD9n320=) 2: 870C2B58B47811E788EC7E65C4F9AE02.roa (hash: IgkWueiZzDaSaqXsqac+/PyEgRdDcfnQbUbjQVGTTtM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91881D9/D89BB30EB47711E7AD54B664C4F9AE02/bBtjjqnXxs4CPLXlfjyuFqEbRQU.crl rsync://rpki.apnic.net/member_repository/A91881D9/D89BB30EB47711E7AD54B664C4F9AE02/bBtjjqnXxs4CPLXlfjyuFqEbRQU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bBtjjqnXxs4CPLXlfjyuFqEbRQU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 16:35:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6245 (0x1865) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91881D9, serialNumber=6C1B638EA9D7C6CE023CB5E57E3CAE16A11B4505 Validity Not Before: Nov 4 16:35:52 2025 GMT Not After : Nov 11 16:35:52 2025 GMT Subject: CN=690a2b68-7996 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:f1:c8:c1:85:8d:65:38:db:a1:5f:91:10:95: fa:cd:51:dd:0d:09:ff:1f:44:8d:fa:b5:48:cb:dd: 5e:9c:32:4e:01:05:7a:49:0d:bf:92:d2:83:7b:0a: c1:f7:81:17:e8:cc:75:fe:ab:12:ae:ad:66:27:45: 56:0b:ee:da:b8:62:92:bb:72:6d:73:3b:98:16:ab: e1:32:c4:ff:e2:6c:f8:25:6c:5d:b3:29:51:bb:6e: f5:90:4a:88:72:fe:cc:c9:31:48:73:9e:64:47:36: 49:aa:11:77:95:5a:7c:d7:a6:eb:f2:9a:37:d2:d5: a2:a5:2b:f5:2d:49:c7:e3:72:d4:6e:99:a4:fc:dd: 20:2c:09:14:1c:f6:4e:14:2b:ec:f8:c7:8f:94:f1: 02:71:0e:39:a7:78:a7:8d:34:6c:7f:08:dc:5d:45: ee:9d:a4:84:7f:67:8e:f3:73:06:0b:8b:ff:0a:1b: 72:02:ae:04:cb:cf:9d:6e:5e:0e:e5:3a:72:bd:c4: 10:e7:56:86:88:1b:fd:8a:d9:92:9d:90:3a:7d:5c: cd:01:47:cb:e5:22:24:9b:0b:fe:46:56:6d:e4:a5: fd:12:18:1e:18:db:3f:00:6c:a5:4f:a6:05:bf:6e: 47:0b:5f:4d:bc:cd:71:c9:6a:60:ef:93:c0:21:a6: b1:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:3A:F7:12:E4:A2:5A:FE:90:9C:5C:C9:EA:17:E2:4B:C7:65:4A:C9 X509v3 Authority Key Identifier: keyid:6C:1B:63:8E:A9:D7:C6:CE:02:3C:B5:E5:7E:3C:AE:16:A1:1B:45:05 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91881D9/D89BB30EB47711E7AD54B664C4F9AE02/bBtjjqnXxs4CPLXlfjyuFqEbRQU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bBtjjqnXxs4CPLXlfjyuFqEbRQU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91881D9/D89BB30EB47711E7AD54B664C4F9AE02/bBtjjqnXxs4CPLXlfjyuFqEbRQU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 38:b3:cc:14:6b:32:6c:e8:d3:2e:33:ab:0c:74:34:09:69:64: e9:e3:d6:32:6a:94:bf:3d:e0:f8:72:17:26:db:60:a3:76:97: 5a:d8:5b:ff:56:07:04:bc:0c:29:48:53:36:2d:78:de:46:88: 2c:35:28:52:b6:5a:df:82:21:9f:00:0a:c2:08:fa:23:6c:6b: 23:7b:19:6e:b6:ae:67:68:dd:d0:52:e8:80:bd:87:e1:e6:31: 97:47:87:d4:be:1b:82:cb:d0:f1:1b:67:44:d1:71:1d:08:de: b8:d1:ad:47:b7:e2:ed:b8:b8:95:36:d8:40:4b:7a:8e:ff:f5: 20:42:3c:b3:cd:4e:53:ee:1a:87:b0:07:91:4b:02:76:59:ae: 30:1b:b9:c3:94:7e:d7:60:90:58:fd:26:a5:4e:95:dd:d6:e6: 77:df:20:f7:3f:e8:cb:5d:b9:a8:80:7c:c2:d7:42:43:8d:e7: 03:f0:e4:d1:b9:b5:8b:eb:55:6f:0d:93:57:16:2a:99:dd:ab: a4:32:db:5e:b5:dd:b2:1f:35:a9:7b:c9:ef:ff:15:89:7d:08: 65:4c:a6:40:9d:3f:7f:62:31:74:95:b8:ff:cf:ea:36:ea:91: 17:3f:f3:3c:90:5f:86:fa:a8:e6:2c:d0:3c:e6:55:35:0f:c9: 12:22:35:56 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICGGUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODgxRDkxMTAvBgNVBAUTKDZDMUI2MzhFQTlEN0M2Q0UwMjNDQjVFNTdFM0NBRTE2 QTExQjQ1MDUwHhcNMjUxMTA0MTYzNTUyWhcNMjUxMTExMTYzNTUyWjAYMRYwFAYD VQQDEw02OTBhMmI2OC03OTk2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzvHIwYWNZTjboV+REJX6zVHdDQn/H0SN+rVIy91enDJOAQV6SQ2/ktKDewrB 94EX6Mx1/qsSrq1mJ0VWC+7auGKSu3JtczuYFqvhMsT/4mz4JWxdsylRu271kEqI cv7MyTFIc55kRzZJqhF3lVp816br8po30tWipSv1LUnH43LUbpmk/N0gLAkUHPZO FCvs+MePlPECcQ45p3injTRsfwjcXUXunaSEf2eO83MGC4v/ChtyAq4Ey8+dbl4O 5TpyvcQQ51aGiBv9itmSnZA6fVzNAUfL5SIkmwv+RlZt5KX9EhgeGNs/AGylT6YF v25HC19NvM1xyWpg75PAIaax7wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJ869xLk olr+kJxcyeoX4kvHZUrJMB8GA1UdIwQYMBaAFGwbY46p18bOAjy15X48rhahG0UF MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4ODFEOS9EODlCQjMwRUI0 NzcxMUU3QUQ1NEI2NjRDNEY5QUUwMi9iQnRqanFuWHhzNENQTFhsZmp5dUZxRWJS UVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2JCdGpqcW5YeHM0Q1BMWGxmanl1RnFFYlJRVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 ODFEOS9EODlCQjMwRUI0NzcxMUU3QUQ1NEI2NjRDNEY5QUUwMi9iQnRqanFuWHhz NENQTFhsZmp5dUZxRWJSUVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA4s8wUazJs6NMuM6sMdDQJaWTp49YyapS/PeD4chcm22Cjdpda2Fv/ VgcEvAwpSFM2LXjeRogsNShStlrfgiGfAArCCPojbGsjexlutq5naN3QUuiAvYfh 5jGXR4fUvhuCy9DxG2dE0XEdCN640a1Ht+LtuLiVNthAS3qO//UgQjyzzU5T7hqH sAeRSwJ2Wa4wG7nDlH7XYJBY/SalTpXd1uZ33yD3P+jLXbmogHzC10JDjecD8OTR ubWL61VvDZNXFiqZ3aukMttetd2yHzWpe8nv/xWJfQhlTKZAnT9/YjF0lbj/z+o2 6pEXP/M8kF+G+qjmLNA85lU1D8kSIjVW -----END CERTIFICATE-----Generated at Wed Nov 5 15:03:09 2025 by rpki-client