$ rpki-client -vvf rpki.apnic.net/member_repository/A91A91A2/8971309C7B1211EAA9210F60C4F9AE02/bpJrzmGeT1AKv6Qk_bB2TSWMq1M.mft File: bpJrzmGeT1AKv6Qk_bB2TSWMq1M.mft (raw, json) Hash identifier: 5EoGDS8EjGwsLE9NM9XKi5ln1vRD060/3NMeC06W1IM= Subject key identifier: 26:28:18:8A:21:CD:09:C0:F0:0E:50:2C:78:D4:9A:0E:65:7B:92:0F Authority key identifier: 6E:92:6B:CE:61:9E:4F:50:0A:BF:A4:24:FD:B0:76:4D:25:8C:AB:53 Certificate issuer: /CN=A91A91A2/serialNumber=6E926BCE619E4F500ABFA424FDB0764D258CAB53 Certificate serial: 0A45 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bpJrzmGeT1AKv6Qk_bB2TSWMq1M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A91A2/8971309C7B1211EAA9210F60C4F9AE02/bpJrzmGeT1AKv6Qk_bB2TSWMq1M.mft Manifest number: 0A3C Signing time: Tue 04 Nov 2025 19:49:21 +0000 Manifest this update: Tue 04 Nov 2025 19:49:21 +0000 Manifest next update: Tue 11 Nov 2025 19:49:21 +0000 Files and hashes: 1: bpJrzmGeT1AKv6Qk_bB2TSWMq1M.crl (hash: aV4fJLeV1F09UaNhYrtaVXd+vVv3cQXfyunHNGl4Urk=) 2: 10238C387B1411EA8C690465C4F9AE02.roa (hash: HX1z061ITJ/Mm5axSNQ3ySg9hGI3PSjhgq8jl6nzC3A=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A91A2/8971309C7B1211EAA9210F60C4F9AE02/bpJrzmGeT1AKv6Qk_bB2TSWMq1M.crl rsync://rpki.apnic.net/member_repository/A91A91A2/8971309C7B1211EAA9210F60C4F9AE02/bpJrzmGeT1AKv6Qk_bB2TSWMq1M.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bpJrzmGeT1AKv6Qk_bB2TSWMq1M.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 19:17:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2629 (0xa45) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A91A2, serialNumber=6E926BCE619E4F500ABFA424FDB0764D258CAB53 Validity Not Before: Nov 4 19:49:21 2025 GMT Not After : Nov 11 19:49:21 2025 GMT Subject: CN=690a58c1-10fc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:67:17:67:ae:06:22:d5:d7:de:12:c4:f4:e2: 3a:ae:68:a7:e5:d3:99:3f:0e:62:b1:38:93:4c:97: a9:47:50:ee:bc:a7:3a:89:a8:21:0c:72:a2:cb:2f: 6a:c6:f5:a1:ff:be:2c:a4:52:7c:56:e0:ed:7d:2e: aa:43:66:65:df:64:bf:37:68:6f:3a:f0:18:30:19: 98:de:66:d8:95:d6:ee:57:e3:5c:f1:72:fa:16:17: 2b:6f:8b:5e:c5:05:67:d3:76:ee:29:01:7f:94:6a: c2:ec:f3:c2:53:d2:84:6b:02:30:e8:2d:8a:02:7d: 2b:50:6c:60:ff:8a:be:b9:30:25:e6:20:f7:68:f6: d7:b9:d0:c5:07:79:18:59:28:c3:36:c2:75:d5:f1: 37:12:4a:00:11:19:39:db:b9:81:d8:80:07:cc:c3: 6a:88:5b:68:13:c4:fb:c6:62:a0:5e:dc:32:59:74: 34:8e:53:31:7a:4a:42:6e:c3:28:df:6e:d7:77:36: 9b:f6:ce:de:cb:28:61:cd:35:03:21:a1:84:2d:44: b9:a3:6e:7e:b2:87:de:83:90:a7:19:0a:64:7e:cc: ac:79:5b:4f:80:f8:9d:27:f3:f0:97:0d:aa:34:0b: a1:81:57:f0:88:06:ec:92:1f:90:e9:e9:30:ba:e9: ef:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:28:18:8A:21:CD:09:C0:F0:0E:50:2C:78:D4:9A:0E:65:7B:92:0F X509v3 Authority Key Identifier: keyid:6E:92:6B:CE:61:9E:4F:50:0A:BF:A4:24:FD:B0:76:4D:25:8C:AB:53 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A91A2/8971309C7B1211EAA9210F60C4F9AE02/bpJrzmGeT1AKv6Qk_bB2TSWMq1M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bpJrzmGeT1AKv6Qk_bB2TSWMq1M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A91A2/8971309C7B1211EAA9210F60C4F9AE02/bpJrzmGeT1AKv6Qk_bB2TSWMq1M.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 15:08:e3:02:1b:ac:ca:1a:4e:94:c9:68:94:ef:38:b1:52:e3: ba:1f:15:68:1c:3e:2d:0f:b0:b8:ae:df:ab:3a:01:93:6f:9c: 7f:2b:83:b0:29:cc:b4:8f:df:0d:22:d5:ea:82:b8:56:49:e4: 5a:92:bd:44:7b:8f:60:28:a5:08:08:35:90:f9:5c:92:03:0b: c8:a7:58:cd:af:3c:01:c3:71:ba:be:ea:dd:e1:4e:b6:f8:19: b2:bd:e6:b0:4b:b4:b2:1d:67:38:61:38:89:dd:a4:7e:00:e4: 81:3d:b3:3e:df:df:9e:ea:0d:b6:53:de:c7:04:3a:96:34:70: 08:2a:38:64:4e:16:01:4b:4d:b9:e2:0f:0b:30:f9:d6:cb:ca: 84:9d:7c:7f:c1:5f:3a:eb:97:06:11:9d:05:74:88:ce:0e:e3: 7d:22:b1:c9:fa:2d:b4:78:ea:f9:67:33:24:10:ff:f6:02:e4: 1e:22:01:a8:8c:51:73:ba:80:32:0d:e3:57:68:e2:40:ff:69: 73:b9:32:cf:0a:22:94:72:f4:0d:7c:9b:f7:e4:29:e6:b8:3d: a1:df:00:c6:bd:f5:c6:ce:0e:7c:7e:af:34:75:db:0d:9b:3c: 34:1a:d4:3a:eb:f5:c5:17:bc:c5:e3:f7:18:d7:8d:7e:a4:ef: bf:f6:cb:9c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCkUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTkxQTIxMTAvBgNVBAUTKDZFOTI2QkNFNjE5RTRGNTAwQUJGQTQyNEZEQjA3NjRE MjU4Q0FCNTMwHhcNMjUxMTA0MTk0OTIxWhcNMjUxMTExMTk0OTIxWjAYMRYwFAYD VQQDEw02OTBhNThjMS0xMGZjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAumcXZ64GItXX3hLE9OI6rmin5dOZPw5isTiTTJepR1DuvKc6iaghDHKiyy9q xvWh/74spFJ8VuDtfS6qQ2Zl32S/N2hvOvAYMBmY3mbYldbuV+Nc8XL6Fhcrb4te xQVn03buKQF/lGrC7PPCU9KEawIw6C2KAn0rUGxg/4q+uTAl5iD3aPbXudDFB3kY WSjDNsJ11fE3EkoAERk527mB2IAHzMNqiFtoE8T7xmKgXtwyWXQ0jlMxekpCbsMo 327Xdzab9s7eyyhhzTUDIaGELUS5o25+sofeg5CnGQpkfsyseVtPgPidJ/Pwlw2q NAuhgVfwiAbskh+Q6ekwuunvBQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCYoGIoh zQnA8A5QLHjUmg5le5IPMB8GA1UdIwQYMBaAFG6Sa85hnk9QCr+kJP2wdk0ljKtT MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBOTFBMi84OTcxMzA5QzdC MTIxMUVBQTkyMTBGNjBDNEY5QUUwMi9icEpyem1HZVQxQUt2NlFrX2JCMlRTV01x MU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2JwSnJ6bUdlVDFBS3Y2UWtfYkIyVFNXTXExTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB OTFBMi84OTcxMzA5QzdCMTIxMUVBQTkyMTBGNjBDNEY5QUUwMi9icEpyem1HZVQx QUt2NlFrX2JCMlRTV01xMU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAVCOMCG6zKGk6UyWiU7zixUuO6HxVoHD4tD7C4rt+rOgGTb5x/K4Ow Kcy0j98NItXqgrhWSeRakr1Ee49gKKUICDWQ+VySAwvIp1jNrzwBw3G6vurd4U62 +BmyveawS7SyHWc4YTiJ3aR+AOSBPbM+39+e6g22U97HBDqWNHAIKjhkThYBS025 4g8LMPnWy8qEnXx/wV8665cGEZ0FdIjODuN9IrHJ+i20eOr5ZzMkEP/2AuQeIgGo jFFzuoAyDeNXaOJA/2lzuTLPCiKUcvQNfJv35CnmuD2h3wDGvfXGzg58fq80ddsN mzw0GtQ66/XFF7zF4/cY141+pO+/9suc -----END CERTIFICATE-----Generated at Tue Nov 4 21:17:49 2025 by rpki-client