$ rpki-client -vvf rpki.apnic.net/member_repository/A91C95AA/156BD89E242711EDB3EA3480C4F9AE02/bJuWh9BeK1vlNhCaavm_-hmYc9Q.mft File: bJuWh9BeK1vlNhCaavm_-hmYc9Q.mft (raw, json) Hash identifier: eZBCcF0v5/6ajyUpP3FO906hp3sXXxR+//boqDdThUI= Subject key identifier: 0F:13:6D:2B:8F:A7:D1:8A:94:AF:55:8A:D3:E8:79:B1:F9:0B:85:D1 Authority key identifier: 6C:9B:96:87:D0:5E:2B:5B:E5:36:10:9A:6A:F9:BF:FA:19:98:73:D4 Certificate issuer: /CN=A91C95AA/serialNumber=6C9B9687D05E2B5BE536109A6AF9BFFA199873D4 Certificate serial: 0295 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/bJuWh9BeK1vlNhCaavm_-hmYc9Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C95AA/156BD89E242711EDB3EA3480C4F9AE02/bJuWh9BeK1vlNhCaavm_-hmYc9Q.mft Manifest number: 0290 Signing time: Wed 05 Nov 2025 01:40:57 +0000 Manifest this update: Wed 05 Nov 2025 01:40:57 +0000 Manifest next update: Wed 12 Nov 2025 01:40:57 +0000 Files and hashes: 1: bJuWh9BeK1vlNhCaavm_-hmYc9Q.crl (hash: rP6/TlewsdJB+OekDg9uCmjnTPj/7+r0PZ1/Wip+JUg=) 2: FB1F8158242A11ED9547B486C4F9AE02.roa (hash: F+DLJ1aQV5oLLpGFe5erh1ip1G2eNsPVMkZyfdufJjc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C95AA/156BD89E242711EDB3EA3480C4F9AE02/bJuWh9BeK1vlNhCaavm_-hmYc9Q.crl rsync://rpki.apnic.net/member_repository/A91C95AA/156BD89E242711EDB3EA3480C4F9AE02/bJuWh9BeK1vlNhCaavm_-hmYc9Q.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/bJuWh9BeK1vlNhCaavm_-hmYc9Q.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 01:40:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 661 (0x295) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C95AA, serialNumber=6C9B9687D05E2B5BE536109A6AF9BFFA199873D4 Validity Not Before: Nov 5 01:40:57 2025 GMT Not After : Nov 12 01:40:57 2025 GMT Subject: CN=690aab29-7a3c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:c3:a9:65:a3:11:1c:4b:82:b9:98:f4:99:8f: b3:3b:4d:89:c0:c1:1a:78:70:2d:31:da:20:b3:17: fe:9a:b0:ba:1d:4c:e0:e3:9e:46:0f:80:84:92:d0: 4b:c8:d7:e2:00:f8:c9:77:a6:ea:5f:01:73:af:33: a1:d6:f3:b8:67:38:b6:76:ad:e1:6d:37:6d:39:40: 72:5e:6b:e4:9c:fd:64:17:85:6b:c1:75:1c:05:fe: 03:a9:89:d5:3e:f2:b2:73:2e:12:ea:d9:57:46:49: 16:88:c8:14:96:6d:2b:39:86:d2:26:c6:28:1d:63: 71:0b:36:35:d5:84:5e:27:40:6d:d9:87:77:50:34: b1:c6:63:24:0a:d6:97:fa:57:e8:d6:5f:a4:04:21: 4b:84:c3:19:1d:ef:55:8b:e3:3d:72:fa:bf:c1:8e: 5b:33:9f:31:92:91:04:46:a5:4e:20:23:cc:20:bc: 74:d4:3b:ec:01:b8:09:73:92:a3:2f:c3:ef:c3:49: bd:d1:e8:8c:d9:19:3d:b5:f4:c0:48:60:ad:2f:4d: c2:77:8c:c0:7f:58:81:5d:2d:5b:67:16:39:69:dd: 8b:2d:51:f6:87:de:b3:15:66:55:f0:05:0d:74:2a: 66:42:b7:16:e1:d1:42:bd:aa:0c:de:c3:01:5d:59: 42:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:13:6D:2B:8F:A7:D1:8A:94:AF:55:8A:D3:E8:79:B1:F9:0B:85:D1 X509v3 Authority Key Identifier: keyid:6C:9B:96:87:D0:5E:2B:5B:E5:36:10:9A:6A:F9:BF:FA:19:98:73:D4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C95AA/156BD89E242711EDB3EA3480C4F9AE02/bJuWh9BeK1vlNhCaavm_-hmYc9Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/bJuWh9BeK1vlNhCaavm_-hmYc9Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C95AA/156BD89E242711EDB3EA3480C4F9AE02/bJuWh9BeK1vlNhCaavm_-hmYc9Q.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5f:ec:ab:ce:c7:b8:be:33:65:e6:88:0b:1d:7f:2b:1d:c9:96: 13:fb:19:2e:df:a4:b7:da:fc:db:67:d1:61:4c:68:dc:2f:3b: 5f:0a:e0:41:77:13:aa:08:ea:2d:d1:d5:a9:b0:47:e0:67:57: 40:1b:cf:3c:8d:26:41:a9:ec:5f:a3:c0:46:f2:ce:64:9c:9a: 9e:61:91:36:b0:4d:e3:00:9d:e0:2b:d4:97:ee:f1:ce:9e:37: c5:95:32:b8:3c:75:67:cf:84:7c:37:bb:42:ac:44:b6:c9:b3: 03:81:f4:2a:30:7c:06:4e:bb:a4:22:fa:e5:13:a0:e4:36:a6: 3e:9e:97:94:5d:65:a9:10:3f:9c:52:d5:5c:10:49:44:14:9c: de:4a:ec:30:b5:a3:a8:80:59:8c:ea:13:d0:e4:d2:e3:2d:ad: b9:2c:a3:8c:18:a7:44:40:0f:d9:e7:6e:10:5f:45:7a:9c:7d: fe:26:01:20:32:e2:79:0c:57:ad:9f:fa:de:44:fe:bc:93:9c: 72:ba:c0:8d:c1:63:00:84:f8:a9:8e:d6:db:d7:58:92:2d:e0: b8:4c:cb:40:91:13:4d:cf:41:37:12:27:a5:71:21:6e:cd:a4: 8e:79:c7:d1:f3:fe:5d:23:bd:f6:5c:f7:3a:26:3d:58:7c:b6: 90:9a:55:b3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICApUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Qzk1QUExMTAvBgNVBAUTKDZDOUI5Njg3RDA1RTJCNUJFNTM2MTA5QTZBRjlCRkZB MTk5ODczRDQwHhcNMjUxMTA1MDE0MDU3WhcNMjUxMTEyMDE0MDU3WjAYMRYwFAYD VQQDEw02OTBhYWIyOS03YTNjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0sOpZaMRHEuCuZj0mY+zO02JwMEaeHAtMdogsxf+mrC6HUzg455GD4CEktBL yNfiAPjJd6bqXwFzrzOh1vO4Zzi2dq3hbTdtOUByXmvknP1kF4VrwXUcBf4DqYnV PvKycy4S6tlXRkkWiMgUlm0rOYbSJsYoHWNxCzY11YReJ0Bt2Yd3UDSxxmMkCtaX +lfo1l+kBCFLhMMZHe9Vi+M9cvq/wY5bM58xkpEERqVOICPMILx01DvsAbgJc5Kj L8Pvw0m90eiM2Rk9tfTASGCtL03Cd4zAf1iBXS1bZxY5ad2LLVH2h96zFWZV8AUN dCpmQrcW4dFCvaoM3sMBXVlC0wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFA8TbSuP p9GKlK9VitPoebH5C4XRMB8GA1UdIwQYMBaAFGyblofQXitb5TYQmmr5v/oZmHPU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDOTVBQS8xNTZCRDg5RTI0 MjcxMUVEQjNFQTM0ODBDNEY5QUUwMi9iSnVXaDlCZUsxdmxOaENhYXZtXy1obVlj OVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2JKdVdoOUJlSzF2bE5oQ2Fhdm1fLWhtWWM5US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD OTVBQS8xNTZCRDg5RTI0MjcxMUVEQjNFQTM0ODBDNEY5QUUwMi9iSnVXaDlCZUsx dmxOaENhYXZtXy1obVljOVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBf7KvOx7i+M2XmiAsdfysdyZYT+xku36S32vzbZ9FhTGjcLztfCuBB dxOqCOot0dWpsEfgZ1dAG888jSZBqexfo8BG8s5knJqeYZE2sE3jAJ3gK9SX7vHO njfFlTK4PHVnz4R8N7tCrES2ybMDgfQqMHwGTrukIvrlE6DkNqY+npeUXWWpED+c UtVcEElEFJzeSuwwtaOogFmM6hPQ5NLjLa25LKOMGKdEQA/Z524QX0V6nH3+JgEg MuJ5DFetn/reRP68k5xyusCNwWMAhPipjtbb11iSLeC4TMtAkRNNz0E3EielcSFu zaSOecfR8/5dI732XPc6Jj1YfLaQmlWz -----END CERTIFICATE-----Generated at Wed Nov 5 17:16:48 2025 by rpki-client