$ rpki-client -vvf rpki.apnic.net/member_repository/A91B9008/0A8FBB1AB43211EEA264440CC4F9AE02/bLtnZ_Y6DLm3p0kUtKZXQX5MV4o.mft File: bLtnZ_Y6DLm3p0kUtKZXQX5MV4o.mft (raw, json) Hash identifier: xlxjHN71MQCxtkDH7yttTYeJXacV+sKAqdLYi8yQnOQ= Subject key identifier: 6A:DA:5D:D6:73:6D:13:1D:E1:18:EF:AA:9C:E2:6C:C4:F1:88:2B:8B Authority key identifier: 6C:BB:67:67:F6:3A:0C:B9:B7:A7:49:14:B4:A6:57:41:7E:4C:57:8A Certificate issuer: /CN=A91B9008/serialNumber=6CBB6767F63A0CB9B7A74914B4A657417E4C578A Certificate serial: 0159 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bLtnZ_Y6DLm3p0kUtKZXQX5MV4o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B9008/0A8FBB1AB43211EEA264440CC4F9AE02/bLtnZ_Y6DLm3p0kUtKZXQX5MV4o.mft Manifest number: 0155 Signing time: Wed 05 Nov 2025 04:19:40 +0000 Manifest this update: Wed 05 Nov 2025 04:19:40 +0000 Manifest next update: Wed 12 Nov 2025 04:19:39 +0000 Files and hashes: 1: bLtnZ_Y6DLm3p0kUtKZXQX5MV4o.crl (hash: Bpu0p2Yv7cYjtHjyViWfUFrW1VthnDUTESVma+jr3pU=) 2: 4CFDF03AB4DB11EE9FF6FB59C4F9AE02.roa (hash: AnEWPP8X1N6dt7l7V3XsTmB0MKThvDc5dt35NbkXnzs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B9008/0A8FBB1AB43211EEA264440CC4F9AE02/bLtnZ_Y6DLm3p0kUtKZXQX5MV4o.crl rsync://rpki.apnic.net/member_repository/A91B9008/0A8FBB1AB43211EEA264440CC4F9AE02/bLtnZ_Y6DLm3p0kUtKZXQX5MV4o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bLtnZ_Y6DLm3p0kUtKZXQX5MV4o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 04:19:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 345 (0x159) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B9008, serialNumber=6CBB6767F63A0CB9B7A74914B4A657417E4C578A Validity Not Before: Nov 5 04:19:40 2025 GMT Not After : Nov 12 04:19:39 2025 GMT Subject: CN=690ad05c-7edc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:8e:9d:94:10:a9:9a:50:3a:cd:9c:4d:32:c4: 31:33:90:e4:bb:16:58:6b:86:b8:4c:99:21:3d:80: 1b:54:31:c6:3f:e1:bf:91:97:54:5f:a5:31:e2:a4: a1:09:d0:57:e3:d5:c4:1d:ee:7a:1d:5d:c7:d0:e9: c2:99:f1:f5:6e:5e:05:70:6f:d9:79:37:b2:af:37: 1a:e9:c1:97:4f:dd:0b:14:33:b8:ba:bb:c9:cc:41: d7:8f:f2:8b:a2:80:69:68:8f:bf:b7:51:d9:95:c2: 52:7c:08:4e:69:2b:c5:0a:2b:da:2f:7c:de:54:e4: 00:a9:a6:39:e6:16:7a:80:be:e1:49:ae:f9:e8:12: 53:d5:d9:09:8c:07:99:22:3f:c4:be:e9:d0:0c:0f: 79:05:88:91:4b:94:af:a2:1c:b6:59:e9:86:23:fa: 8a:e8:f2:24:1e:5d:dc:fb:1e:ae:7f:d0:e2:ba:16: db:46:36:dc:3e:7f:1b:65:ad:a0:23:a6:3a:6b:ab: 1a:1c:ac:83:0f:32:a6:30:cc:74:19:42:fe:7e:af: 3f:0f:4d:1c:2f:3a:b2:6a:72:94:2f:74:ac:98:be: 99:14:09:00:32:30:09:ef:ec:43:8d:bf:1e:8c:72: 64:d6:13:ff:85:72:e8:3f:fd:fd:7e:91:71:69:37: 8f:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:DA:5D:D6:73:6D:13:1D:E1:18:EF:AA:9C:E2:6C:C4:F1:88:2B:8B X509v3 Authority Key Identifier: keyid:6C:BB:67:67:F6:3A:0C:B9:B7:A7:49:14:B4:A6:57:41:7E:4C:57:8A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B9008/0A8FBB1AB43211EEA264440CC4F9AE02/bLtnZ_Y6DLm3p0kUtKZXQX5MV4o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bLtnZ_Y6DLm3p0kUtKZXQX5MV4o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B9008/0A8FBB1AB43211EEA264440CC4F9AE02/bLtnZ_Y6DLm3p0kUtKZXQX5MV4o.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6d:a4:71:df:ec:d8:7b:29:07:75:85:12:a4:d2:b3:8f:ec:d2: 9e:76:6d:1f:ba:85:cf:b6:aa:d5:89:c3:53:20:3a:bb:2d:7b: fd:d1:b7:54:c1:9c:e1:b1:ad:2a:8c:5d:75:89:91:da:0d:94: 5a:39:0b:a2:b7:77:91:82:5c:41:c2:37:96:0a:fb:44:a0:bf: 03:1c:73:49:f2:6a:c4:0b:24:a6:6e:4c:83:80:e0:a2:86:1e: a7:f8:07:6a:be:5c:9e:3a:18:69:69:0f:5b:95:0e:40:11:e7: c6:73:5a:ce:f9:20:39:ca:67:42:d5:ab:35:de:f9:68:e0:7a: 9e:b4:aa:0c:02:2a:b8:c6:bf:70:64:0f:67:c7:b5:4d:aa:fc: fc:6b:78:1b:69:46:ef:72:09:da:ea:0d:31:62:11:08:b1:02: cc:4c:ee:ca:61:65:75:f8:96:27:44:18:85:90:6f:d7:2a:a2: af:53:72:ad:06:ab:da:9b:63:bb:a7:63:39:f3:ae:eb:d1:54: 00:d4:f2:da:43:b0:5f:be:39:5f:ea:6a:21:32:22:1c:a3:3a: 68:00:14:78:70:bc:d9:8b:cd:31:d6:51:2d:ec:4c:97:7e:d2: b4:07:1a:e4:6e:ba:51:f0:c6:fd:98:49:78:1c:d4:3a:40:c5: 57:ff:14:56 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAVkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjkwMDgxMTAvBgNVBAUTKDZDQkI2NzY3RjYzQTBDQjlCN0E3NDkxNEI0QTY1NzQx N0U0QzU3OEEwHhcNMjUxMTA1MDQxOTQwWhcNMjUxMTEyMDQxOTM5WjAYMRYwFAYD VQQDEw02OTBhZDA1Yy03ZWRjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAy46dlBCpmlA6zZxNMsQxM5DkuxZYa4a4TJkhPYAbVDHGP+G/kZdUX6Ux4qSh CdBX49XEHe56HV3H0OnCmfH1bl4FcG/ZeTeyrzca6cGXT90LFDO4urvJzEHXj/KL ooBpaI+/t1HZlcJSfAhOaSvFCivaL3zeVOQAqaY55hZ6gL7hSa756BJT1dkJjAeZ Ij/EvunQDA95BYiRS5Svohy2WemGI/qK6PIkHl3c+x6uf9DiuhbbRjbcPn8bZa2g I6Y6a6saHKyDDzKmMMx0GUL+fq8/D00cLzqyanKUL3SsmL6ZFAkAMjAJ7+xDjb8e jHJk1hP/hXLoP/39fpFxaTePUQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGraXdZz bRMd4RjvqpzibMTxiCuLMB8GA1UdIwQYMBaAFGy7Z2f2Ogy5t6dJFLSmV0F+TFeK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCOTAwOC8wQThGQkIxQUI0 MzIxMUVFQTI2NDQ0MENDNEY5QUUwMi9iTHRuWl9ZNkRMbTNwMGtVdEtaWFFYNU1W NG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2JMdG5aX1k2RExtM3Awa1V0S1pYUVg1TVY0by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC OTAwOC8wQThGQkIxQUI0MzIxMUVFQTI2NDQ0MENDNEY5QUUwMi9iTHRuWl9ZNkRM bTNwMGtVdEtaWFFYNU1WNG8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBtpHHf7Nh7KQd1hRKk0rOP7NKedm0fuoXPtqrVicNTIDq7LXv90bdU wZzhsa0qjF11iZHaDZRaOQuit3eRglxBwjeWCvtEoL8DHHNJ8mrECySmbkyDgOCi hh6n+AdqvlyeOhhpaQ9blQ5AEefGc1rO+SA5ymdC1as13vlo4HqetKoMAiq4xr9w ZA9nx7VNqvz8a3gbaUbvcgna6g0xYhEIsQLMTO7KYWV1+JYnRBiFkG/XKqKvU3Kt Bqvam2O7p2M5867r0VQA1PLaQ7Bfvjlf6mohMiIcozpoABR4cLzZi80x1lEt7EyX ftK0BxrkbrpR8Mb9mEl4HNQ6QMVX/xRW -----END CERTIFICATE-----Generated at Wed Nov 5 19:22:17 2025 by rpki-client