$ rpki-client -vvf rpki.apnic.net/member_repository/A91C7672/43764BECF72411E6ABF02B3CC4F9AE02/bG1HsRFPLVgaghKAXxLDdH80r4M.mft File: bG1HsRFPLVgaghKAXxLDdH80r4M.mft (raw, json) Hash identifier: 5M4gm2JAmEpAwpUM2z6Yi4sDfaaWorMNiioXxBCw0kA= Subject key identifier: F3:7D:B5:7F:38:B7:C1:27:3A:EF:DC:56:96:7E:B8:4F:B0:26:55:F6 Authority key identifier: 6C:6D:47:B1:11:4F:2D:58:1A:82:12:80:5F:12:C3:74:7F:34:AF:83 Certificate issuer: /CN=A91C7672/serialNumber=6C6D47B1114F2D581A8212805F12C3747F34AF83 Certificate serial: 5F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bG1HsRFPLVgaghKAXxLDdH80r4M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C7672/43764BECF72411E6ABF02B3CC4F9AE02/bG1HsRFPLVgaghKAXxLDdH80r4M.mft Manifest number: 1CA5 Signing time: Tue 04 Nov 2025 16:18:25 +0000 Manifest this update: Tue 04 Nov 2025 16:18:24 +0000 Manifest next update: Tue 11 Nov 2025 16:18:24 +0000 Files and hashes: 1: bG1HsRFPLVgaghKAXxLDdH80r4M.crl (hash: 6jJDMn3SXnpeLFsFJnMWkudcEJHrQwZF/ABn/6RG4+Q=) 2: 08F61730538311F0860B155FC4F9AE02.roa (hash: 5tUhujimGcuYk2iCXVJH6UfqyUCQhG2eSFGvMuoYcGw=) 3: 18BDABD2537F11F0A9531C09C4F9AE02.roa (hash: jBvkqb6jI6ollOqdN8B9OtpQXSI083YHITbt77mXBK8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C7672/43764BECF72411E6ABF02B3CC4F9AE02/bG1HsRFPLVgaghKAXxLDdH80r4M.crl rsync://rpki.apnic.net/member_repository/A91C7672/43764BECF72411E6ABF02B3CC4F9AE02/bG1HsRFPLVgaghKAXxLDdH80r4M.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bG1HsRFPLVgaghKAXxLDdH80r4M.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 16:18:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 95 (0x5f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C7672, serialNumber=6C6D47B1114F2D581A8212805F12C3747F34AF83 Validity Not Before: Nov 4 16:18:24 2025 GMT Not After : Nov 11 16:18:24 2025 GMT Subject: CN=690a2751-342f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:92:6c:27:39:11:cb:f7:c2:c5:e0:8b:b8:6f: c2:93:a8:3a:06:81:35:1f:a3:ef:05:42:62:99:c1: f3:35:b0:b6:73:4b:4a:54:f6:8e:b8:d3:70:1a:5e: 0a:28:7b:50:e9:f0:d8:07:07:b0:46:6b:17:17:2e: e5:8a:be:5b:8f:76:ac:c1:55:89:08:58:c2:5b:e7: 6b:49:f9:3a:c9:bb:d7:22:d3:6f:30:aa:2a:56:29: d8:a5:3a:c2:f3:cb:fe:79:d7:bf:c3:30:02:7a:68: 15:32:94:e4:b6:d5:26:00:f1:63:ab:e5:6f:1d:9c: 84:41:d9:54:10:98:2c:b3:4e:b8:75:a4:f3:87:af: 4f:07:86:96:92:33:32:75:25:44:e3:2a:8c:28:13: 8c:ea:bb:82:eb:12:71:26:05:ad:ca:06:55:11:dc: 02:ce:b9:2b:bb:ca:52:e6:b8:a6:85:aa:72:2d:bb: 86:5a:af:f3:77:e5:cd:a7:50:c8:85:0b:e7:8f:b2: a2:03:e7:47:e4:c8:cc:45:b1:c5:58:56:f4:07:8a: 5f:12:56:4d:5c:f9:cb:df:bf:f8:ff:e0:61:20:cc: 6e:0f:04:3f:fb:b4:56:08:5d:e8:41:77:57:d1:5e: 37:4f:2f:f5:e3:b8:ef:33:6b:09:fc:c8:e6:1f:3e: 33:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:7D:B5:7F:38:B7:C1:27:3A:EF:DC:56:96:7E:B8:4F:B0:26:55:F6 X509v3 Authority Key Identifier: keyid:6C:6D:47:B1:11:4F:2D:58:1A:82:12:80:5F:12:C3:74:7F:34:AF:83 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C7672/43764BECF72411E6ABF02B3CC4F9AE02/bG1HsRFPLVgaghKAXxLDdH80r4M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bG1HsRFPLVgaghKAXxLDdH80r4M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C7672/43764BECF72411E6ABF02B3CC4F9AE02/bG1HsRFPLVgaghKAXxLDdH80r4M.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 88:62:15:5b:6c:e9:57:08:c6:35:f1:30:e1:41:ed:67:c0:31: 0e:eb:99:fb:d1:eb:b9:56:75:e0:f9:99:be:c0:29:3b:34:8a: de:81:e7:91:c8:8a:41:e7:0c:1a:cb:81:5c:31:f0:e9:70:c1: d1:92:06:34:49:85:07:2f:fb:77:11:e6:40:a5:75:a6:24:55: 26:58:1b:2b:70:b6:fc:a7:4f:0f:78:08:33:1b:55:ce:d0:22: 87:5a:d6:6d:df:0d:10:45:ee:fc:95:01:71:69:76:e0:d1:b5: cf:a5:18:79:bc:64:bc:30:08:71:9a:69:42:7a:16:eb:ad:bf: 08:59:9c:42:bf:2e:99:92:af:7c:92:8b:2c:28:46:39:3b:eb: d8:5f:81:fc:12:f2:4d:b0:c3:19:16:0e:75:28:bd:7b:d5:5c: 30:18:98:7a:1d:a2:c9:47:93:50:67:8b:bc:99:1d:c4:8a:c4: c6:b3:4e:c6:6f:4a:ee:1b:f3:8c:35:04:31:96:17:80:58:fb: 9a:ed:02:95:e4:e3:62:85:05:5f:57:ed:89:05:b7:4c:2c:ad: b1:12:0f:7d:71:91:26:4c:52:5a:85:05:2c:f6:38:ff:1d:d7: 8f:2d:e7:c7:15:02:5c:e0:d6:c7:fd:a3:49:12:bc:eb:11:57: a0:7b:65:43 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBXzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD NzY3MjExMC8GA1UEBRMoNkM2RDQ3QjExMTRGMkQ1ODFBODIxMjgwNUYxMkMzNzQ3 RjM0QUY4MzAeFw0yNTExMDQxNjE4MjRaFw0yNTExMTExNjE4MjRaMBgxFjAUBgNV BAMTDTY5MGEyNzUxLTM0MmYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCskmwnORHL98LF4Iu4b8KTqDoGgTUfo+8FQmKZwfM1sLZzS0pU9o6403AaXgoo e1Dp8NgHB7BGaxcXLuWKvluPdqzBVYkIWMJb52tJ+TrJu9ci028wqipWKdilOsLz y/5517/DMAJ6aBUylOS21SYA8WOr5W8dnIRB2VQQmCyzTrh1pPOHr08HhpaSMzJ1 JUTjKowoE4zqu4LrEnEmBa3KBlUR3ALOuSu7ylLmuKaFqnItu4Zar/N35c2nUMiF C+ePsqID50fkyMxFscVYVvQHil8SVk1c+cvfv/j/4GEgzG4PBD/7tFYIXehBd1fR XjdPL/XjuO8zawn8yOYfPjOjAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU8321fzi3 wSc679xWln64T7AmVfYwHwYDVR0jBBgwFoAUbG1HsRFPLVgaghKAXxLDdH80r4Mw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUM3NjcyLzQzNzY0QkVDRjcy NDExRTZBQkYwMkIzQ0M0RjlBRTAyL2JHMUhzUkZQTFZnYWdoS0FYeExEZEg4MHI0 TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvYkcxSHNSRlBMVmdhZ2hLQVh4TERkSDgwcjRNLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUM3 NjcyLzQzNzY0QkVDRjcyNDExRTZBQkYwMkIzQ0M0RjlBRTAyL2JHMUhzUkZQTFZn YWdoS0FYeExEZEg4MHI0TS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAIhiFVts6VcIxjXxMOFB7WfAMQ7rmfvR67lWdeD5mb7AKTs0it6B55HI ikHnDBrLgVwx8OlwwdGSBjRJhQcv+3cR5kCldaYkVSZYGytwtvynTw94CDMbVc7Q Ioda1m3fDRBF7vyVAXFpduDRtc+lGHm8ZLwwCHGaaUJ6FuutvwhZnEK/LpmSr3yS iywoRjk769hfgfwS8k2wwxkWDnUovXvVXDAYmHodoslHk1Bni7yZHcSKxMazTsZv Su4b84w1BDGWF4BY+5rtApXk42KFBV9X7YkFt0wsrbESD31xkSZMUlqFBSz2OP8d 148t58cVAlzg1sf9o0kSvOsRV6B7ZUM= -----END CERTIFICATE-----Generated at Wed Nov 5 05:47:55 2025 by rpki-client