$ rpki-client -vvf rpki.apnic.net/member_repository/A91BE056/003E1158D78B11EEA2EBD712C4F9AE02/fBlP7bilyMl2697IST3zw_CMyOI.mft File: fBlP7bilyMl2697IST3zw_CMyOI.mft (raw, json) Hash identifier: bYu9njTqunkXIqg4oWCFsvHM1WpfurAdUdZ8csy6nqw= Subject key identifier: 7A:91:19:4A:8E:5B:F9:0C:ED:9C:1A:F6:40:69:46:D8:7E:AA:52:D0 Authority key identifier: 7C:19:4F:ED:B8:A5:C8:C9:76:EB:DE:C8:49:3D:F3:C3:F0:8C:C8:E2 Certificate issuer: /CN=A91BE056/serialNumber=7C194FEDB8A5C8C976EBDEC8493DF3C3F08CC8E2 Certificate serial: 014E Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fBlP7bilyMl2697IST3zw_CMyOI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BE056/003E1158D78B11EEA2EBD712C4F9AE02/fBlP7bilyMl2697IST3zw_CMyOI.mft Manifest number: 0147 Signing time: Tue 04 Nov 2025 23:20:23 +0000 Manifest this update: Tue 04 Nov 2025 23:20:23 +0000 Manifest next update: Tue 11 Nov 2025 23:20:23 +0000 Files and hashes: 1: fBlP7bilyMl2697IST3zw_CMyOI.crl (hash: KU/9fBjBjJvuZXDAOb9wtJa0DnxF4z5XEAQ7SVXMSfI=) 2: C7AAEA76637311EF97465324C4F9AE02.roa (hash: ZzX2pAU2hf9tsTLmwqMICAJ5lNGrFfo//Sr5B58TslI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BE056/003E1158D78B11EEA2EBD712C4F9AE02/fBlP7bilyMl2697IST3zw_CMyOI.crl rsync://rpki.apnic.net/member_repository/A91BE056/003E1158D78B11EEA2EBD712C4F9AE02/fBlP7bilyMl2697IST3zw_CMyOI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fBlP7bilyMl2697IST3zw_CMyOI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 23:20:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 334 (0x14e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BE056, serialNumber=7C194FEDB8A5C8C976EBDEC8493DF3C3F08CC8E2 Validity Not Before: Nov 4 23:20:23 2025 GMT Not After : Nov 11 23:20:23 2025 GMT Subject: CN=690a8a37-28a7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:f6:c4:5f:51:b7:d9:18:fd:35:7d:a0:d2:24: ed:28:01:ab:d7:4a:a2:3b:61:5c:c7:17:52:aa:4b: 12:17:84:0e:d6:f1:5d:24:cf:a1:5d:67:46:2a:be: 56:da:65:98:02:30:9c:e3:6b:8f:00:2e:05:19:d5: 48:82:8f:85:8d:e1:37:b0:ce:4d:1c:7c:e0:26:e8: d9:11:bd:dd:24:14:07:b1:01:57:7b:60:a9:ab:f0: a6:d0:e4:bb:5a:7a:63:1c:30:1c:87:6f:c7:16:d9: e8:38:f9:57:40:dc:5c:5f:8c:51:be:bc:ee:be:65: 0f:ef:a1:4f:01:ed:41:19:86:00:db:6d:59:70:6e: de:90:17:f5:90:24:d1:88:38:21:81:df:05:33:1d: c2:e6:c3:05:d4:11:f8:da:88:1b:83:a4:2c:90:b2: 1d:1d:95:78:54:23:5e:97:70:52:24:56:96:16:27: 40:bb:9e:24:d6:dc:20:1b:2f:66:49:25:47:57:de: 8e:35:7d:3d:87:c6:41:47:bd:61:22:a0:89:f8:a9: dd:b2:da:a3:a3:7f:01:98:4a:b3:02:a8:0b:45:e2: 69:42:de:57:41:18:a5:20:71:b5:46:da:84:49:32: 49:b2:a7:79:3e:78:c5:2f:9c:7a:cb:aa:6a:f8:17: 9c:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:91:19:4A:8E:5B:F9:0C:ED:9C:1A:F6:40:69:46:D8:7E:AA:52:D0 X509v3 Authority Key Identifier: keyid:7C:19:4F:ED:B8:A5:C8:C9:76:EB:DE:C8:49:3D:F3:C3:F0:8C:C8:E2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BE056/003E1158D78B11EEA2EBD712C4F9AE02/fBlP7bilyMl2697IST3zw_CMyOI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fBlP7bilyMl2697IST3zw_CMyOI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BE056/003E1158D78B11EEA2EBD712C4F9AE02/fBlP7bilyMl2697IST3zw_CMyOI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 87:78:3d:8a:e5:a3:3b:4d:e7:e9:45:da:a6:99:2c:a3:70:2d: 9b:2a:fe:51:76:14:bf:20:f5:15:c6:10:9b:b3:0b:85:e6:bd: f5:0a:1c:c3:5c:9e:82:fe:62:b5:56:a9:b4:d0:29:99:e3:5f: ac:f5:81:3a:cf:2e:55:25:9f:d4:07:76:9c:99:2a:0f:4c:3c: 5f:8e:6b:44:ad:d9:9d:33:56:2b:7b:e9:48:65:c8:23:a7:0a: 0d:66:de:75:8f:a3:bf:99:02:1a:0b:6c:19:8f:65:9f:dd:c4: 42:af:32:51:18:6c:51:99:39:70:e0:8e:5d:25:7d:0d:c0:ab: d7:f4:b3:2d:33:c2:b6:a9:c8:71:92:c4:7e:14:38:5b:ff:ac: 1f:ce:10:ec:46:59:36:6f:e2:e6:33:47:2d:9e:c5:7d:88:20: f6:3e:eb:d0:50:8b:a9:95:37:e9:fa:61:bf:3a:64:51:fc:71: c3:7a:36:cb:33:d8:ba:3e:ce:60:12:fd:46:33:60:5e:8b:fd: 4b:aa:99:e8:95:fb:c0:18:4f:68:1d:f3:b0:e0:df:bf:1a:e4: 82:70:0f:c4:d2:76:f5:a2:66:77:21:58:f5:cf:74:f5:39:34: cf:4f:ac:c8:1d:a1:00:b3:da:13:d8:e1:19:ee:67:0c:a9:8c: 1d:b2:16:e6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAU4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkUwNTYxMTAvBgNVBAUTKDdDMTk0RkVEQjhBNUM4Qzk3NkVCREVDODQ5M0RGM0Mz RjA4Q0M4RTIwHhcNMjUxMTA0MjMyMDIzWhcNMjUxMTExMjMyMDIzWjAYMRYwFAYD VQQDEw02OTBhOGEzNy0yOGE3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2/bEX1G32Rj9NX2g0iTtKAGr10qiO2FcxxdSqksSF4QO1vFdJM+hXWdGKr5W 2mWYAjCc42uPAC4FGdVIgo+FjeE3sM5NHHzgJujZEb3dJBQHsQFXe2Cpq/Cm0OS7 WnpjHDAch2/HFtnoOPlXQNxcX4xRvrzuvmUP76FPAe1BGYYA221ZcG7ekBf1kCTR iDghgd8FMx3C5sMF1BH42ogbg6QskLIdHZV4VCNel3BSJFaWFidAu54k1twgGy9m SSVHV96ONX09h8ZBR71hIqCJ+Kndstqjo38BmEqzAqgLReJpQt5XQRilIHG1RtqE STJJsqd5PnjFL5x6y6pq+BecCwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHqRGUqO W/kM7Zwa9kBpRth+qlLQMB8GA1UdIwQYMBaAFHwZT+24pcjJduveyEk988PwjMji MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCRTA1Ni8wMDNFMTE1OEQ3 OEIxMUVFQTJFQkQ3MTJDNEY5QUUwMi9mQmxQN2JpbHlNbDI2OTdJU1QzendfQ015 T0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2ZCbFA3YmlseU1sMjY5N0lTVDN6d19DTXlPSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC RTA1Ni8wMDNFMTE1OEQ3OEIxMUVFQTJFQkQ3MTJDNEY5QUUwMi9mQmxQN2JpbHlN bDI2OTdJU1QzendfQ015T0kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCHeD2K5aM7TefpRdqmmSyjcC2bKv5RdhS/IPUVxhCbswuF5r31ChzD XJ6C/mK1Vqm00CmZ41+s9YE6zy5VJZ/UB3acmSoPTDxfjmtErdmdM1Yre+lIZcgj pwoNZt51j6O/mQIaC2wZj2Wf3cRCrzJRGGxRmTlw4I5dJX0NwKvX9LMtM8K2qchx ksR+FDhb/6wfzhDsRlk2b+LmM0ctnsV9iCD2PuvQUIuplTfp+mG/OmRR/HHDejbL M9i6Ps5gEv1GM2Bei/1LqpnolfvAGE9oHfOw4N+/GuSCcA/E0nb1omZ3IVj1z3T1 OTTPT6zIHaEAs9oT2OEZ7mcMqYwdshbm -----END CERTIFICATE-----Generated at Wed Nov 5 15:04:27 2025 by rpki-client