$ rpki-client -vvf rpki.apnic.net/member_repository/A91CE4C1/3644887AE9BB11EFBAAC9D70C4F9AE02/BH7xoc9llmNJhmdnZVZI7vkRDFo.mft File: BH7xoc9llmNJhmdnZVZI7vkRDFo.mft (raw, json) Hash identifier: U5VFfz9km+FnEP7ZBjcb541cIDfiuWvoJ6hdOXt+3PM= Subject key identifier: 3C:5A:57:03:1B:15:66:76:8A:A3:3C:9F:E4:68:68:13:FD:B3:2E:1B Authority key identifier: 04:7E:F1:A1:CF:65:96:63:49:86:67:67:65:56:48:EE:F9:11:0C:5A Certificate issuer: /CN=A91CE4C1/serialNumber=047EF1A1CF65966349866767655648EEF9110C5A Certificate serial: 95 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BH7xoc9llmNJhmdnZVZI7vkRDFo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CE4C1/3644887AE9BB11EFBAAC9D70C4F9AE02/BH7xoc9llmNJhmdnZVZI7vkRDFo.mft Manifest number: 8E Signing time: Mon 03 Nov 2025 06:36:00 +0000 Manifest this update: Mon 03 Nov 2025 06:36:00 +0000 Manifest next update: Mon 10 Nov 2025 06:36:00 +0000 Files and hashes: 1: BH7xoc9llmNJhmdnZVZI7vkRDFo.crl (hash: 2m5tEx+QpZU4IuoZJDhO+Gv7//Ck7WOH3B/+o2awm4s=) 2: 459E12EAE9C611EFB8012F10C4F9AE02.roa (hash: /RmfZz46so9ge+fbPNaFv77MZSPZTzTOQnyx59sNwag=) 3: FB4C0514E9C311EFADA7270AC4F9AE02.roa (hash: b+8Vf+1PI1yNyvvstVRxJPifoMZ8KqBIQc0NBIzO5qc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CE4C1/3644887AE9BB11EFBAAC9D70C4F9AE02/BH7xoc9llmNJhmdnZVZI7vkRDFo.crl rsync://rpki.apnic.net/member_repository/A91CE4C1/3644887AE9BB11EFBAAC9D70C4F9AE02/BH7xoc9llmNJhmdnZVZI7vkRDFo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BH7xoc9llmNJhmdnZVZI7vkRDFo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 06:35:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 149 (0x95) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CE4C1, serialNumber=047EF1A1CF65966349866767655648EEF9110C5A Validity Not Before: Nov 3 06:36:00 2025 GMT Not After : Nov 10 06:36:00 2025 GMT Subject: CN=69084d50-cfc4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:30:81:d9:4f:1c:43:f5:10:08:62:a8:5d:ce: 76:33:11:71:bd:49:a9:d7:ea:f3:6e:a1:a0:56:bf: 03:f9:0b:ff:38:f8:10:ea:e3:e6:c5:28:b3:77:39: cf:8e:5f:e6:44:62:e4:97:a4:d3:a2:37:9c:ef:fb: 27:3a:5a:85:7c:ed:c1:1a:c6:03:33:49:2c:05:ad: c2:7c:46:7e:3e:17:8e:30:ec:76:bc:79:da:39:dd: 2f:7f:29:c6:6a:a6:38:54:45:fa:54:81:c4:bd:57: 35:1a:69:e8:c8:3e:90:87:5b:0a:ac:e6:fe:02:53: 2e:7d:66:8a:c2:d0:0c:5d:a5:c8:c9:87:3b:aa:53: bd:3f:00:6c:64:00:ff:6c:72:b3:b2:92:61:9f:1c: 1a:e5:19:73:c3:4b:9f:0f:1a:f6:b0:af:17:dd:06: e8:58:bc:fc:bf:b9:61:3a:2c:c9:74:b2:01:e4:52: 94:25:c4:3d:77:ae:21:e3:76:8c:27:45:b0:fa:ed: 9b:a2:95:85:10:c7:7f:a4:e8:72:97:72:21:d5:64: 4b:d8:7b:b2:84:fb:21:4e:c8:23:46:07:8d:0d:47: 4d:d0:f9:dc:c1:96:d8:ff:da:16:0e:ca:1d:36:30: a8:35:f0:04:b9:23:6c:43:1c:13:36:5e:e1:fa:9b: 94:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:5A:57:03:1B:15:66:76:8A:A3:3C:9F:E4:68:68:13:FD:B3:2E:1B X509v3 Authority Key Identifier: keyid:04:7E:F1:A1:CF:65:96:63:49:86:67:67:65:56:48:EE:F9:11:0C:5A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CE4C1/3644887AE9BB11EFBAAC9D70C4F9AE02/BH7xoc9llmNJhmdnZVZI7vkRDFo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BH7xoc9llmNJhmdnZVZI7vkRDFo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CE4C1/3644887AE9BB11EFBAAC9D70C4F9AE02/BH7xoc9llmNJhmdnZVZI7vkRDFo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 61:aa:5f:bb:f9:5b:5e:fa:e7:a3:1a:89:14:2a:e1:75:ac:a6: 63:7b:ee:b9:39:9e:26:3e:4f:05:d2:18:f0:c7:02:1b:29:6c: fe:1a:d5:82:d5:bb:69:a3:48:e8:62:15:69:bd:a2:95:0f:40: f4:fc:73:a0:43:01:8e:bb:cb:5c:f9:b7:50:0b:60:7a:eb:47: 9d:67:80:ef:6d:e8:97:4b:54:09:25:c4:67:53:02:c3:79:40: 39:b2:f9:03:b8:72:d7:61:bc:0a:e3:df:7c:ea:ff:68:14:23: 2e:1d:dc:45:a5:28:2c:d9:7b:e3:c2:1b:f3:48:f2:8d:46:30: 49:56:c4:2d:92:16:9b:64:b1:8d:da:d4:86:4a:fd:1a:6b:c3: 09:6d:29:3a:b2:2a:7e:4c:0f:fc:3f:d5:50:9b:2a:75:5b:65: 23:05:92:b9:cf:23:cc:4a:0e:25:15:51:1a:44:91:9a:b6:80: 80:e6:9f:4c:e6:e0:eb:54:26:45:a0:53:32:a8:e7:73:da:50: 6a:34:3e:aa:58:0d:f0:75:e9:d0:fd:fb:35:c3:9b:3f:61:13: 11:47:01:4b:1d:ae:86:1c:86:f2:47:43:b1:09:dc:db:32:2b: 47:5a:d2:ff:ca:15:af:a2:ce:e9:b5:ab:41:cc:10:95:45:df: 07:65:16:c2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAJUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0U0QzExMTAvBgNVBAUTKDA0N0VGMUExQ0Y2NTk2NjM0OTg2Njc2NzY1NTY0OEVF RjkxMTBDNUEwHhcNMjUxMTAzMDYzNjAwWhcNMjUxMTEwMDYzNjAwWjAYMRYwFAYD VQQDEw02OTA4NGQ1MC1jZmM0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3DCB2U8cQ/UQCGKoXc52MxFxvUmp1+rzbqGgVr8D+Qv/OPgQ6uPmxSizdznP jl/mRGLkl6TTojec7/snOlqFfO3BGsYDM0ksBa3CfEZ+PheOMOx2vHnaOd0vfynG aqY4VEX6VIHEvVc1GmnoyD6Qh1sKrOb+AlMufWaKwtAMXaXIyYc7qlO9PwBsZAD/ bHKzspJhnxwa5Rlzw0ufDxr2sK8X3QboWLz8v7lhOizJdLIB5FKUJcQ9d64h43aM J0Ww+u2bopWFEMd/pOhyl3Ih1WRL2HuyhPshTsgjRgeNDUdN0PncwZbY/9oWDsod NjCoNfAEuSNsQxwTNl7h+puUNQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDxaVwMb FWZ2iqM8n+RoaBP9sy4bMB8GA1UdIwQYMBaAFAR+8aHPZZZjSYZnZ2VWSO75EQxa MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRTRDMS8zNjQ0ODg3QUU5 QkIxMUVGQkFBQzlENzBDNEY5QUUwMi9CSDd4b2M5bGxtTkpobWRuWlZaSTd2a1JE Rm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0JIN3hvYzlsbG1OSmhtZG5aVlpJN3ZrUkRGby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RTRDMS8zNjQ0ODg3QUU5QkIxMUVGQkFBQzlENzBDNEY5QUUwMi9CSDd4b2M5bGxt TkpobWRuWlZaSTd2a1JERm8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBhql+7+Vte+uejGokUKuF1rKZje+65OZ4mPk8F0hjwxwIbKWz+GtWC 1btpo0joYhVpvaKVD0D0/HOgQwGOu8tc+bdQC2B660edZ4DvbeiXS1QJJcRnUwLD eUA5svkDuHLXYbwK49986v9oFCMuHdxFpSgs2XvjwhvzSPKNRjBJVsQtkhabZLGN 2tSGSv0aa8MJbSk6sip+TA/8P9VQmyp1W2UjBZK5zyPMSg4lFVEaRJGatoCA5p9M 5uDrVCZFoFMyqOdz2lBqND6qWA3wdenQ/fs1w5s/YRMRRwFLHa6GHIbyR0OxCdzb MitHWtL/yhWvos7ptatBzBCVRd8HZRbC -----END CERTIFICATE-----Generated at Tue Nov 4 16:04:03 2025 by rpki-client