$ rpki-client -vvf rpki.apnic.net/member_repository/A91CE821/811FB590605111E88CD8EC47C4F9AE02/Bjfls4xh34PrszAgk7tXbLMdmxA.mft File: Bjfls4xh34PrszAgk7tXbLMdmxA.mft (raw, json) Hash identifier: /tLn8teZ1mdKPLEf8/ZYnfDKoo/80SwzqLCwsIFuNKM= Subject key identifier: 24:08:F0:CC:A6:64:C1:82:F6:16:1D:38:8D:53:15:46:26:69:20:10 Authority key identifier: 06:37:E5:B3:8C:61:DF:83:EB:B3:30:20:93:BB:57:6C:B3:1D:9B:10 Certificate issuer: /CN=A91CE821/serialNumber=0637E5B38C61DF83EBB3302093BB576CB31D9B10 Certificate serial: 04CB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Bjfls4xh34PrszAgk7tXbLMdmxA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CE821/811FB590605111E88CD8EC47C4F9AE02/Bjfls4xh34PrszAgk7tXbLMdmxA.mft Manifest number: 19BB Signing time: Tue 04 Nov 2025 16:55:52 +0000 Manifest this update: Tue 04 Nov 2025 16:55:51 +0000 Manifest next update: Tue 11 Nov 2025 16:55:51 +0000 Files and hashes: 1: Bjfls4xh34PrszAgk7tXbLMdmxA.crl (hash: TojIXvW3dbTtB0PYC66Fjj6GiRb2Lg4qfzKPzbP4U4s=) 2: 2A53DA54332011EF89CABD61C4F9AE02.roa (hash: XAFmHRo+hO35GWVsWHHscFE/9w85d60jx9W3Sf7aA0c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CE821/811FB590605111E88CD8EC47C4F9AE02/Bjfls4xh34PrszAgk7tXbLMdmxA.crl rsync://rpki.apnic.net/member_repository/A91CE821/811FB590605111E88CD8EC47C4F9AE02/Bjfls4xh34PrszAgk7tXbLMdmxA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Bjfls4xh34PrszAgk7tXbLMdmxA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 16:55:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1227 (0x4cb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CE821, serialNumber=0637E5B38C61DF83EBB3302093BB576CB31D9B10 Validity Not Before: Nov 4 16:55:51 2025 GMT Not After : Nov 11 16:55:51 2025 GMT Subject: CN=690a3017-fef1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:bc:56:57:1b:b0:c0:f8:3c:68:58:96:da:96: 56:51:ca:46:21:c8:1f:9e:e9:f0:71:b0:93:4d:ea: 38:f2:fb:46:73:7b:e7:f9:71:2e:18:71:64:07:bb: 24:1b:98:70:aa:17:11:55:29:02:e5:df:90:2a:8a: 38:c9:b9:5b:ab:61:55:cd:eb:3f:8f:88:86:97:02: 81:8e:1a:49:e1:12:93:58:79:f8:d1:73:ff:fc:74: 7d:c5:ea:55:83:18:4c:51:01:ec:69:d5:03:35:56: 92:04:61:a9:0e:29:00:47:99:17:f3:50:ac:c2:21: 74:3f:6b:8d:bb:05:54:44:43:df:12:75:0d:64:32: d8:a6:73:e6:94:90:af:c4:70:2f:84:f3:4f:a4:f8: 9d:14:dc:f6:01:23:89:f0:c0:05:84:82:a4:8c:f0: e8:fc:41:62:51:99:ea:64:40:0a:9f:25:bf:b8:3e: f7:65:22:52:25:b4:1c:a8:bd:b1:bc:1d:f2:c6:bb: 16:ac:78:e0:82:c0:c4:4c:d5:ff:8b:b7:3b:74:a0: c7:a2:80:c3:7e:d4:4b:ce:71:3e:d0:1a:65:05:2a: 70:2f:9e:47:0d:ae:db:9b:b8:d7:6f:66:77:e1:fc: 26:f8:8a:9f:7b:b7:c2:3e:69:74:06:69:b4:29:91: dc:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:08:F0:CC:A6:64:C1:82:F6:16:1D:38:8D:53:15:46:26:69:20:10 X509v3 Authority Key Identifier: keyid:06:37:E5:B3:8C:61:DF:83:EB:B3:30:20:93:BB:57:6C:B3:1D:9B:10 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CE821/811FB590605111E88CD8EC47C4F9AE02/Bjfls4xh34PrszAgk7tXbLMdmxA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Bjfls4xh34PrszAgk7tXbLMdmxA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CE821/811FB590605111E88CD8EC47C4F9AE02/Bjfls4xh34PrszAgk7tXbLMdmxA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5c:19:bc:03:39:24:bf:4a:2c:b6:46:aa:29:9e:cc:74:b1:9f: d3:fe:81:66:52:0f:2e:f9:8a:7e:13:42:ff:bc:bb:87:13:ee: 8d:4b:02:50:e8:db:fd:39:82:1e:99:98:fc:05:b1:0d:0a:80: dc:95:51:96:e6:3c:41:0d:02:18:6e:f6:c4:4a:5b:c5:c0:c5: 8a:51:c5:3e:89:7b:bf:7f:c1:bb:dc:5c:d4:09:ec:4c:ae:f4: 32:69:81:40:80:3f:15:fa:f3:b1:3f:93:04:e1:d5:07:1f:5e: 0e:3f:ee:f0:6d:2f:be:6b:29:91:12:7e:46:27:be:d3:d7:81: 70:78:fb:a7:c8:30:70:53:c3:61:68:de:6f:df:ff:62:e1:8a: f8:bf:5d:de:8a:b2:70:9b:76:03:5e:fb:9b:df:fe:89:6a:24: ba:44:cc:06:a7:98:92:e5:a6:85:48:1f:57:f9:58:d2:d6:96: ea:2e:ad:2b:29:dd:30:e8:84:e0:64:25:ae:24:2b:23:98:e0: f2:e1:e2:52:81:74:4c:60:a8:d7:21:f7:a0:82:8a:e5:dd:8c: 8f:f7:86:2e:64:a8:73:49:45:08:76:41:bf:5e:43:be:4a:03: 49:70:c9:81:4e:33:e0:7f:f8:6f:8f:f4:45:d0:80:8c:d6:f9: ec:67:c4:0e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBMswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0U4MjExMTAvBgNVBAUTKDA2MzdFNUIzOEM2MURGODNFQkIzMzAyMDkzQkI1NzZD QjMxRDlCMTAwHhcNMjUxMTA0MTY1NTUxWhcNMjUxMTExMTY1NTUxWjAYMRYwFAYD VQQDEw02OTBhMzAxNy1mZWYxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtbxWVxuwwPg8aFiW2pZWUcpGIcgfnunwcbCTTeo48vtGc3vn+XEuGHFkB7sk G5hwqhcRVSkC5d+QKoo4yblbq2FVzes/j4iGlwKBjhpJ4RKTWHn40XP//HR9xepV gxhMUQHsadUDNVaSBGGpDikAR5kX81CswiF0P2uNuwVUREPfEnUNZDLYpnPmlJCv xHAvhPNPpPidFNz2ASOJ8MAFhIKkjPDo/EFiUZnqZEAKnyW/uD73ZSJSJbQcqL2x vB3yxrsWrHjggsDETNX/i7c7dKDHooDDftRLznE+0BplBSpwL55HDa7bm7jXb2Z3 4fwm+Iqfe7fCPml0Bmm0KZHcZQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCQI8Mym ZMGC9hYdOI1TFUYmaSAQMB8GA1UdIwQYMBaAFAY35bOMYd+D67MwIJO7V2yzHZsQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRTgyMS84MTFGQjU5MDYw NTExMUU4OENEOEVDNDdDNEY5QUUwMi9CamZsczR4aDM0UHJzekFnazd0WGJMTWRt eEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0JqZmxzNHhoMzRQcnN6QWdrN3RYYkxNZG14QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RTgyMS84MTFGQjU5MDYwNTExMUU4OENEOEVDNDdDNEY5QUUwMi9CamZsczR4aDM0 UHJzekFnazd0WGJMTWRteEEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBcGbwDOSS/Siy2Rqopnsx0sZ/T/oFmUg8u+Yp+E0L/vLuHE+6NSwJQ 6Nv9OYIemZj8BbENCoDclVGW5jxBDQIYbvbESlvFwMWKUcU+iXu/f8G73FzUCexM rvQyaYFAgD8V+vOxP5ME4dUHH14OP+7wbS++aymREn5GJ77T14FwePunyDBwU8Nh aN5v3/9i4Yr4v13eirJwm3YDXvub3/6JaiS6RMwGp5iS5aaFSB9X+VjS1pbqLq0r Kd0w6ITgZCWuJCsjmODy4eJSgXRMYKjXIfeggorl3YyP94YuZKhzSUUIdkG/XkO+ SgNJcMmBTjPgf/hvj/RF0ICM1vnsZ8QO -----END CERTIFICATE-----Generated at Tue Nov 4 21:36:07 2025 by rpki-client