$ rpki-client -vvf rpki.apnic.net/member_repository/A91862F7/5EAC61448FA611EA9ACB7E7FC4F9AE02/BYQh3nB4BzBHPlzFRboK5dubTAo.mft File: BYQh3nB4BzBHPlzFRboK5dubTAo.mft (raw, json) Hash identifier: NOjwsOhLeJemrYyXYVgoZSAWUGt7YuYtt9HBsWFot70= Subject key identifier: 44:66:91:AF:69:26:B6:09:1D:CD:FC:17:6E:B4:EA:72:0F:88:F7:97 Authority key identifier: 05:84:21:DE:70:78:07:30:47:3E:5C:C5:45:BA:0A:E5:DB:9B:4C:0A Certificate issuer: /CN=A91862F7/serialNumber=058421DE70780730473E5CC545BA0AE5DB9B4C0A Certificate serial: 09E2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BYQh3nB4BzBHPlzFRboK5dubTAo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91862F7/5EAC61448FA611EA9ACB7E7FC4F9AE02/BYQh3nB4BzBHPlzFRboK5dubTAo.mft Manifest number: 09D6 Signing time: Sun 02 Nov 2025 17:18:37 +0000 Manifest this update: Sun 02 Nov 2025 17:18:37 +0000 Manifest next update: Sun 09 Nov 2025 17:18:37 +0000 Files and hashes: 1: BYQh3nB4BzBHPlzFRboK5dubTAo.crl (hash: rpdjhY7TzoMy5AX9NfwzYvtrQfvqKkb4fUiKexBr5SE=) 2: 0619825C2F2A11ED9F62040DC4F9AE02.roa (hash: kL+XFv+JIBMzJ5k9XXPNiC6YLDiIMa15JQqj4/UV838=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91862F7/5EAC61448FA611EA9ACB7E7FC4F9AE02/BYQh3nB4BzBHPlzFRboK5dubTAo.crl rsync://rpki.apnic.net/member_repository/A91862F7/5EAC61448FA611EA9ACB7E7FC4F9AE02/BYQh3nB4BzBHPlzFRboK5dubTAo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BYQh3nB4BzBHPlzFRboK5dubTAo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 17:18:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2530 (0x9e2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862F7, serialNumber=058421DE70780730473E5CC545BA0AE5DB9B4C0A Validity Not Before: Nov 2 17:18:37 2025 GMT Not After : Nov 9 17:18:37 2025 GMT Subject: CN=6907926d-0aa5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:a0:42:6f:c7:42:f5:d9:8c:7a:d7:7d:ab:51: 52:47:7c:22:4a:20:54:19:8e:78:ff:c2:9a:3d:78: a1:cb:5f:8f:a0:6c:a1:18:0c:49:8d:2f:b2:fa:c0: 8e:03:21:4c:e1:36:3b:7b:2f:35:75:69:09:db:b4: 4f:3e:2d:02:e6:b5:90:6c:cf:69:b2:85:3f:5d:b7: a8:a7:f5:a5:ff:c9:9e:53:80:2d:23:2c:c1:61:96: db:fc:f2:86:9b:f4:d1:26:43:3f:24:02:3b:9e:52: 3d:83:98:e2:e8:ae:f8:cf:8c:2e:42:0d:4e:0f:f4: cb:c5:d5:37:82:96:fe:21:64:27:30:a8:a1:0d:ca: 5b:3a:9c:69:cd:fb:a0:24:c1:23:4e:90:48:7a:fe: 9f:97:30:18:0f:0f:15:b5:a7:99:53:53:fc:de:5a: 15:f7:81:90:95:ae:79:8f:c9:15:41:7a:42:dd:b5: 91:72:1a:5a:01:ec:d2:0c:6c:a5:99:3e:13:c4:64: f0:8c:56:2d:78:b1:5f:0a:a9:1d:50:aa:a3:2e:8d: a5:f4:e9:86:4a:9e:4c:ef:9a:37:96:a2:d5:6f:b1: 99:6e:95:5b:db:0d:d9:b5:19:89:95:75:5b:d0:b0: ad:ad:83:2c:f9:01:f8:12:62:14:83:d8:ac:f8:a5: be:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:66:91:AF:69:26:B6:09:1D:CD:FC:17:6E:B4:EA:72:0F:88:F7:97 X509v3 Authority Key Identifier: keyid:05:84:21:DE:70:78:07:30:47:3E:5C:C5:45:BA:0A:E5:DB:9B:4C:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91862F7/5EAC61448FA611EA9ACB7E7FC4F9AE02/BYQh3nB4BzBHPlzFRboK5dubTAo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BYQh3nB4BzBHPlzFRboK5dubTAo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91862F7/5EAC61448FA611EA9ACB7E7FC4F9AE02/BYQh3nB4BzBHPlzFRboK5dubTAo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4f:26:19:3f:51:58:ad:30:09:35:b0:a9:ab:69:a7:2a:da:93: 8b:1b:c7:29:11:fb:7e:9e:27:b8:80:91:c2:2a:54:1a:2e:86: b7:84:cd:d7:b8:83:23:35:b9:02:89:71:b8:1a:55:cb:38:c4: 6c:13:40:34:c0:e5:cd:96:65:3d:e4:ac:f1:a8:bb:50:16:63: f1:3f:a2:d6:27:e2:dd:39:22:41:c9:62:6e:60:43:e3:39:65: 56:7c:ff:b4:41:84:56:bf:30:fa:0f:cc:25:75:dc:d3:f8:f6: 1a:80:9b:db:4c:c7:0f:f9:06:b6:35:cf:58:a6:94:2a:01:4d: 40:4a:b6:32:b6:25:c1:c7:79:be:46:95:50:eb:85:f5:b2:9f: cb:fa:2f:3d:5d:a7:f9:5a:2b:cf:71:d3:26:b8:29:d4:04:5a: fa:d1:1d:0d:bb:eb:7a:1b:6c:c6:86:9e:84:15:75:e2:24:db: 36:a8:6c:3c:b4:93:e7:e1:89:b7:18:64:1b:ba:cd:8c:b4:d4: f2:88:82:08:36:8c:5e:f1:01:1f:69:7c:13:dd:07:44:fa:19: 67:8b:d0:9c:32:59:4d:6d:15:99:ce:08:da:6e:0e:86:65:2d: b3:e9:2b:46:df:a5:ed:48:5a:f0:15:72:86:ea:04:b4:36:21: d4:be:01:1b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCeIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODYyRjcxMTAvBgNVBAUTKDA1ODQyMURFNzA3ODA3MzA0NzNFNUNDNTQ1QkEwQUU1 REI5QjRDMEEwHhcNMjUxMTAyMTcxODM3WhcNMjUxMTA5MTcxODM3WjAYMRYwFAYD VQQDEw02OTA3OTI2ZC0wYWE1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsKBCb8dC9dmMetd9q1FSR3wiSiBUGY54/8KaPXihy1+PoGyhGAxJjS+y+sCO AyFM4TY7ey81dWkJ27RPPi0C5rWQbM9psoU/Xbeop/Wl/8meU4AtIyzBYZbb/PKG m/TRJkM/JAI7nlI9g5ji6K74z4wuQg1OD/TLxdU3gpb+IWQnMKihDcpbOpxpzfug JMEjTpBIev6flzAYDw8VtaeZU1P83loV94GQla55j8kVQXpC3bWRchpaAezSDGyl mT4TxGTwjFYteLFfCqkdUKqjLo2l9OmGSp5M75o3lqLVb7GZbpVb2w3ZtRmJlXVb 0LCtrYMs+QH4EmIUg9is+KW+gwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFERmka9p JrYJHc38F2606nIPiPeXMB8GA1UdIwQYMBaAFAWEId5weAcwRz5cxUW6CuXbm0wK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NjJGNy81RUFDNjE0NDhG QTYxMUVBOUFDQjdFN0ZDNEY5QUUwMi9CWVFoM25CNEJ6QkhQbHpGUmJvSzVkdWJU QW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0JZUWgzbkI0QnpCSFBsekZSYm9LNWR1YlRBby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NjJGNy81RUFDNjE0NDhGQTYxMUVBOUFDQjdFN0ZDNEY5QUUwMi9CWVFoM25CNEJ6 QkhQbHpGUmJvSzVkdWJUQW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBPJhk/UVitMAk1sKmraacq2pOLG8cpEft+nie4gJHCKlQaLoa3hM3X uIMjNbkCiXG4GlXLOMRsE0A0wOXNlmU95KzxqLtQFmPxP6LWJ+LdOSJByWJuYEPj OWVWfP+0QYRWvzD6D8wlddzT+PYagJvbTMcP+Qa2Nc9YppQqAU1ASrYytiXBx3m+ RpVQ64X1sp/L+i89Xaf5WivPcdMmuCnUBFr60R0Nu+t6G2zGhp6EFXXiJNs2qGw8 tJPn4Ym3GGQbus2MtNTyiIIINoxe8QEfaXwT3QdE+hlni9CcMllNbRWZzgjabg6G ZS2z6StG36XtSFrwFXKG6gS0NiHUvgEb -----END CERTIFICATE-----Generated at Mon Nov 3 18:17:26 2025 by rpki-client