$ rpki-client -vvf rpki.apnic.net/member_repository/A91D60CF/E53608F02AFC11EFA0243C4AC4F9AE02/BHT0BqF40ixU1e9yTGssLJo7a5g.mft File: BHT0BqF40ixU1e9yTGssLJo7a5g.mft (raw, json) Hash identifier: W9oB785nEnT9+Q/SYxuw08nB1Epg05PZDeMUyeS8BLE= Subject key identifier: 44:B4:20:23:78:04:3B:EB:E8:B6:75:AC:0A:B3:5B:9C:ED:29:90:49 Authority key identifier: 04:74:F4:06:A1:78:D2:2C:54:D5:EF:72:4C:6B:2C:2C:9A:3B:6B:98 Certificate issuer: /CN=A91D60CF/serialNumber=0474F406A178D22C54D5EF724C6B2C2C9A3B6B98 Certificate serial: 010C Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/BHT0BqF40ixU1e9yTGssLJo7a5g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D60CF/E53608F02AFC11EFA0243C4AC4F9AE02/BHT0BqF40ixU1e9yTGssLJo7a5g.mft Manifest number: 0108 Signing time: Mon 03 Nov 2025 05:01:08 +0000 Manifest this update: Mon 03 Nov 2025 05:01:07 +0000 Manifest next update: Mon 10 Nov 2025 05:01:07 +0000 Files and hashes: 1: BHT0BqF40ixU1e9yTGssLJo7a5g.crl (hash: DyvCUGECLy4vqkXo2+LwEa4p+41H+ckoenwGLVdM/HI=) 2: B56F40DEE9DB11EFBDD8BD26C4F9AE02.roa (hash: 7PT1hzEu8yFfZFQXURAd4+p59Mps1ow7oAQ1a2yeyaI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D60CF/E53608F02AFC11EFA0243C4AC4F9AE02/BHT0BqF40ixU1e9yTGssLJo7a5g.crl rsync://rpki.apnic.net/member_repository/A91D60CF/E53608F02AFC11EFA0243C4AC4F9AE02/BHT0BqF40ixU1e9yTGssLJo7a5g.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/BHT0BqF40ixU1e9yTGssLJo7a5g.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 05:01:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 268 (0x10c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D60CF, serialNumber=0474F406A178D22C54D5EF724C6B2C2C9A3B6B98 Validity Not Before: Nov 3 05:01:07 2025 GMT Not After : Nov 10 05:01:07 2025 GMT Subject: CN=69083713-77a7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:06:ea:51:7a:a6:c7:01:24:ed:20:1a:ed:a3: 5b:83:ce:97:4e:d9:40:ec:85:48:55:72:90:f2:22: 59:0a:f6:74:46:77:81:08:53:ea:9f:c3:3f:d4:0e: 45:d5:b9:71:24:15:49:ee:b6:c7:b1:48:5e:f1:e1: 95:5e:66:64:30:ec:31:fe:30:cc:84:5f:8e:ba:70: 7c:f8:99:65:05:2e:44:b4:8b:4a:a4:2f:39:42:99: 60:b4:23:0c:ba:8f:00:29:2f:c3:71:0f:b9:3a:d3: 44:0b:32:58:1c:81:dc:ae:e6:17:52:95:c3:76:81: 2e:1b:b1:7e:75:32:0f:7e:5f:d0:d9:67:d7:5c:e4: 34:b4:e9:69:db:76:01:f0:4e:10:0e:7f:bb:79:43: d1:df:d7:b0:35:73:07:fa:fd:a4:51:5a:50:4d:dc: a2:9a:6d:14:90:8e:82:9c:24:dc:37:22:bb:3f:15: 6b:c1:97:40:af:c9:b0:80:9e:bc:dd:e4:02:41:ff: cc:b0:2f:d3:c2:55:36:36:fd:44:4e:49:e1:f7:b5: 11:49:18:7d:e5:f0:80:5f:b5:15:68:34:33:94:82: 08:91:f5:92:96:83:14:4c:db:3c:1c:43:e6:70:d4: 6b:bd:c4:ea:f7:3e:66:63:20:e7:32:a3:6c:f8:7b: e5:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:B4:20:23:78:04:3B:EB:E8:B6:75:AC:0A:B3:5B:9C:ED:29:90:49 X509v3 Authority Key Identifier: keyid:04:74:F4:06:A1:78:D2:2C:54:D5:EF:72:4C:6B:2C:2C:9A:3B:6B:98 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D60CF/E53608F02AFC11EFA0243C4AC4F9AE02/BHT0BqF40ixU1e9yTGssLJo7a5g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/BHT0BqF40ixU1e9yTGssLJo7a5g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D60CF/E53608F02AFC11EFA0243C4AC4F9AE02/BHT0BqF40ixU1e9yTGssLJo7a5g.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 52:0c:50:eb:fb:dc:e4:4a:33:15:64:a5:64:c9:e3:3f:1b:8c: 14:ca:6a:e3:20:98:11:6e:09:27:60:66:f3:1a:08:85:83:cd: 1d:7e:a5:39:10:82:50:ec:55:50:d8:c8:97:cd:2f:21:ae:04: 9f:f0:f2:14:d2:9e:f3:bb:3c:a7:db:0e:ef:de:39:f3:21:43: 39:31:fe:58:0b:57:bf:d3:85:64:c8:1a:42:bc:3f:b4:09:ed: 89:d2:d6:82:af:a9:c0:b1:70:0c:af:3f:43:d3:5d:83:0e:02: f8:45:ff:64:76:27:fa:f5:58:25:82:eb:3a:ff:a4:66:05:cd: 67:c2:93:17:73:6a:29:02:84:70:c1:46:6f:73:27:1b:64:2e: 80:85:f3:43:34:65:87:9a:bb:5a:fe:e6:0f:04:44:59:6f:d2: ea:b3:b7:ab:2a:39:a4:3b:81:5e:d7:ca:9e:78:82:f1:f7:a6: d4:eb:70:69:19:ba:29:76:a0:9d:8e:f5:03:6a:e8:3e:a6:16: a7:f7:61:84:3b:a2:b4:fa:74:70:03:70:ec:b6:17:43:36:96: ab:df:ae:87:5a:d8:44:18:71:c7:43:05:67:c6:44:cf:22:39: 3b:ec:ae:f2:0b:3d:f8:82:fb:af:60:c6:3e:1d:9e:16:32:2d: 7b:0e:56:34 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAQwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDYwQ0YxMTAvBgNVBAUTKDA0NzRGNDA2QTE3OEQyMkM1NEQ1RUY3MjRDNkIyQzJD OUEzQjZCOTgwHhcNMjUxMTAzMDUwMTA3WhcNMjUxMTEwMDUwMTA3WjAYMRYwFAYD VQQDEw02OTA4MzcxMy03N2E3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvAbqUXqmxwEk7SAa7aNbg86XTtlA7IVIVXKQ8iJZCvZ0RneBCFPqn8M/1A5F 1blxJBVJ7rbHsUhe8eGVXmZkMOwx/jDMhF+OunB8+JllBS5EtItKpC85QplgtCMM uo8AKS/DcQ+5OtNECzJYHIHcruYXUpXDdoEuG7F+dTIPfl/Q2WfXXOQ0tOlp23YB 8E4QDn+7eUPR39ewNXMH+v2kUVpQTdyimm0UkI6CnCTcNyK7PxVrwZdAr8mwgJ68 3eQCQf/MsC/TwlU2Nv1ETknh97URSRh95fCAX7UVaDQzlIIIkfWSloMUTNs8HEPm cNRrvcTq9z5mYyDnMqNs+HvlEwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFES0ICN4 BDvr6LZ1rAqzW5ztKZBJMB8GA1UdIwQYMBaAFAR09AaheNIsVNXvckxrLCyaO2uY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENjBDRi9FNTM2MDhGMDJB RkMxMUVGQTAyNDNDNEFDNEY5QUUwMi9CSFQwQnFGNDBpeFUxZTl5VEdzc0xKbzdh NWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0JIVDBCcUY0MGl4VTFlOXlUR3NzTEpvN2E1Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NjBDRi9FNTM2MDhGMDJBRkMxMUVGQTAyNDNDNEFDNEY5QUUwMi9CSFQwQnFGNDBp eFUxZTl5VEdzc0xKbzdhNWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBSDFDr+9zkSjMVZKVkyeM/G4wUymrjIJgRbgknYGbzGgiFg80dfqU5 EIJQ7FVQ2MiXzS8hrgSf8PIU0p7zuzyn2w7v3jnzIUM5Mf5YC1e/04VkyBpCvD+0 Ce2J0taCr6nAsXAMrz9D012DDgL4Rf9kdif69Vglgus6/6RmBc1nwpMXc2opAoRw wUZvcycbZC6AhfNDNGWHmrta/uYPBERZb9Lqs7erKjmkO4Fe18qeeILx96bU63Bp GbopdqCdjvUDaug+phan92GEO6K0+nRwA3DsthdDNpar366HWthEGHHHQwVnxkTP Ijk77K7yCz34gvuvYMY+HZ4WMi17DlY0 -----END CERTIFICATE-----Generated at Tue Nov 4 19:02:25 2025 by rpki-client