$ rpki-client -vvf rpki.apnic.net/member_repository/A91B74E8/47F6201243EA11EC84AB6347C4F9AE02/bAgKK6farJXU2TSIqQAVGuOlnfg.mft File: bAgKK6farJXU2TSIqQAVGuOlnfg.mft (raw, json) Hash identifier: S6cpMOphj5c1Mg5RApgjVRzl0uqywINecWjC5/mXeek= Subject key identifier: D5:9E:78:95:67:85:92:08:34:78:E4:3D:C1:B4:47:FE:56:0B:F3:99 Authority key identifier: 6C:08:0A:2B:A7:DA:AC:95:D4:D9:34:88:A9:00:15:1A:E3:A5:9D:F8 Certificate issuer: /CN=A91B74E8/serialNumber=6C080A2BA7DAAC95D4D93488A900151AE3A59DF8 Certificate serial: 04FD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bAgKK6farJXU2TSIqQAVGuOlnfg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B74E8/47F6201243EA11EC84AB6347C4F9AE02/bAgKK6farJXU2TSIqQAVGuOlnfg.mft Manifest number: 04E3 Signing time: Sun 02 Nov 2025 23:48:30 +0000 Manifest this update: Sun 02 Nov 2025 23:48:30 +0000 Manifest next update: Sun 09 Nov 2025 23:48:30 +0000 Files and hashes: 1: bAgKK6farJXU2TSIqQAVGuOlnfg.crl (hash: 9oe6+zXHrKZn8yWmx3+a2ofD7Y2qXpr8qn8qNQFhjbQ=) 2: 51FD604CE08711EFA06D6434C4F9AE02.roa (hash: doR4Y7/9fJwk4I8rzXTdhySC0dSmOygHgP5L2cehpw4=) 3: CCF1692CC85111EFAEC7B83FC4F9AE02.roa (hash: YNmXXeohBLlW644lJk9sQ0wTlKH8+7poI39Ki1Khyx0=) 4: AD5EE696C0A711EE97A2E984C4F9AE02.roa (hash: 8jti7DRjplfPDOWY06XiRJGfKvNLpJCDztlNbOL025A=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B74E8/47F6201243EA11EC84AB6347C4F9AE02/bAgKK6farJXU2TSIqQAVGuOlnfg.crl rsync://rpki.apnic.net/member_repository/A91B74E8/47F6201243EA11EC84AB6347C4F9AE02/bAgKK6farJXU2TSIqQAVGuOlnfg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bAgKK6farJXU2TSIqQAVGuOlnfg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 23:48:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1277 (0x4fd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B74E8, serialNumber=6C080A2BA7DAAC95D4D93488A900151AE3A59DF8 Validity Not Before: Nov 2 23:48:30 2025 GMT Not After : Nov 9 23:48:30 2025 GMT Subject: CN=6907edce-1682 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:fc:05:02:d0:23:7d:4b:11:c3:86:de:6d:2c: 1b:47:97:79:7e:c4:c3:64:28:57:0b:63:56:a9:92: 93:d9:f3:4a:5f:38:31:89:c9:a2:cd:31:4d:3a:2d: 77:db:7a:1c:72:75:b2:c4:27:3e:a9:0e:2c:fa:9a: bb:63:2f:06:a4:f8:59:f6:5d:d1:b6:1d:79:ba:b5: 2a:83:f4:e7:b6:4b:fc:4a:51:ff:7f:1e:a6:bb:64: 2f:ba:98:90:f6:ee:e8:74:97:aa:81:d4:5f:ff:7c: 2b:44:53:3d:fa:8a:be:4e:69:9e:67:ba:0d:fb:39: 28:c3:0e:9a:ff:00:49:a7:0b:3a:e0:8a:9b:7c:ef: 0b:c0:d2:7b:4e:3a:a8:c0:b5:b6:eb:0d:de:79:73: 9a:8a:1e:73:b7:d8:3d:c4:7e:d5:4a:fd:03:07:c0: 0b:65:73:e8:b9:02:ea:c2:05:95:74:92:d7:1a:5b: da:ef:13:77:f6:16:dd:74:b1:cf:76:9b:91:74:e5: 71:cb:ac:f5:5f:b6:2d:74:44:0e:f2:71:11:76:23: 4f:48:a5:80:76:4f:d1:30:12:da:54:10:09:88:28: 48:de:54:02:f6:c4:aa:61:ab:36:45:18:b7:bd:5a: 3e:93:6e:1e:cd:f6:08:9d:61:da:0b:d9:56:b5:72: dc:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:9E:78:95:67:85:92:08:34:78:E4:3D:C1:B4:47:FE:56:0B:F3:99 X509v3 Authority Key Identifier: keyid:6C:08:0A:2B:A7:DA:AC:95:D4:D9:34:88:A9:00:15:1A:E3:A5:9D:F8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B74E8/47F6201243EA11EC84AB6347C4F9AE02/bAgKK6farJXU2TSIqQAVGuOlnfg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bAgKK6farJXU2TSIqQAVGuOlnfg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B74E8/47F6201243EA11EC84AB6347C4F9AE02/bAgKK6farJXU2TSIqQAVGuOlnfg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 56:f6:36:2b:41:12:f9:f7:7c:42:f9:4b:f5:51:56:c9:6a:10: 27:81:0d:52:06:3e:0f:a6:ac:3d:6e:21:4f:50:71:68:f3:81: 5a:14:9c:1d:67:93:a2:17:01:c6:4f:d2:a5:fc:37:cd:4b:d0: 76:c1:e4:ae:5a:0c:d0:a6:e5:6a:28:83:2d:3f:ca:db:02:8b: 0f:db:64:30:c1:2e:2c:62:c9:11:d1:00:15:e5:45:a6:a1:23: d6:71:55:56:5b:0b:9c:bf:8b:f8:89:dc:b0:b7:e3:a7:c0:12: 9b:57:ef:0c:6f:78:01:5c:5b:98:5a:f2:18:3d:24:0d:28:13: 58:df:2f:0c:20:27:39:c0:9c:01:d7:bb:76:52:69:aa:9a:09: 28:6b:5e:7b:22:c2:66:2a:47:e2:e3:5e:a2:9e:f7:82:c5:57: 53:61:5b:04:b0:ed:f8:3e:4b:a6:72:3f:d4:09:cb:66:20:14: d7:2b:7c:f0:33:de:7a:da:df:1f:62:67:75:cf:3e:d2:e6:c5: 1d:4c:e7:3e:be:72:3b:f0:8d:1c:44:52:b8:f8:62:84:ce:2e: e9:50:7a:dd:13:60:6d:4e:17:e1:79:06:ba:61:b0:25:11:57: 82:bb:ee:d7:1d:75:83:5c:2f:68:9d:6a:b9:d8:c3:0f:c1:29: 10:62:17:39 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBP0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Qjc0RTgxMTAvBgNVBAUTKDZDMDgwQTJCQTdEQUFDOTVENEQ5MzQ4OEE5MDAxNTFB RTNBNTlERjgwHhcNMjUxMTAyMjM0ODMwWhcNMjUxMTA5MjM0ODMwWjAYMRYwFAYD VQQDEw02OTA3ZWRjZS0xNjgyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzvwFAtAjfUsRw4bebSwbR5d5fsTDZChXC2NWqZKT2fNKXzgxicmizTFNOi13 23occnWyxCc+qQ4s+pq7Yy8GpPhZ9l3Rth15urUqg/Tntkv8SlH/fx6mu2QvupiQ 9u7odJeqgdRf/3wrRFM9+oq+TmmeZ7oN+zkoww6a/wBJpws64IqbfO8LwNJ7Tjqo wLW26w3eeXOaih5zt9g9xH7VSv0DB8ALZXPouQLqwgWVdJLXGlva7xN39hbddLHP dpuRdOVxy6z1X7YtdEQO8nERdiNPSKWAdk/RMBLaVBAJiChI3lQC9sSqYas2RRi3 vVo+k24ezfYInWHaC9lWtXLcYwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNWeeJVn hZIINHjkPcG0R/5WC/OZMB8GA1UdIwQYMBaAFGwICiun2qyV1Nk0iKkAFRrjpZ34 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNzRFOC80N0Y2MjAxMjQz RUExMUVDODRBQjYzNDdDNEY5QUUwMi9iQWdLSzZmYXJKWFUyVFNJcVFBVkd1T2xu ZmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2JBZ0tLNmZhckpYVTJUU0lxUUFWR3VPbG5mZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NzRFOC80N0Y2MjAxMjQzRUExMUVDODRBQjYzNDdDNEY5QUUwMi9iQWdLSzZmYXJK WFUyVFNJcVFBVkd1T2xuZmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBW9jYrQRL593xC+Uv1UVbJahAngQ1SBj4Ppqw9biFPUHFo84FaFJwd Z5OiFwHGT9Kl/DfNS9B2weSuWgzQpuVqKIMtP8rbAosP22QwwS4sYskR0QAV5UWm oSPWcVVWWwucv4v4idywt+OnwBKbV+8Mb3gBXFuYWvIYPSQNKBNY3y8MICc5wJwB 17t2Ummqmgkoa157IsJmKkfi416inveCxVdTYVsEsO34Pkumcj/UCctmIBTXK3zw M9562t8fYmd1zz7S5sUdTOc+vnI78I0cRFK4+GKEzi7pUHrdE2BtThfheQa6YbAl EVeCu+7XHXWDXC9onWq52MMPwSkQYhc5 -----END CERTIFICATE-----Generated at Tue Nov 4 20:21:42 2025 by rpki-client