$ rpki-client -vvf rpki.apnic.net/member_repository/A91881D9/D89BB30EB47711E7AD54B664C4F9AE02/bBtjjqnXxs4CPLXlfjyuFqEbRQU.mft File: bBtjjqnXxs4CPLXlfjyuFqEbRQU.mft (raw, json) Hash identifier: aKR+h0r2ugwYJfXAFbHyjcE2lsW82NYip0nyiH5SB2I= Subject key identifier: A7:5F:70:4B:CB:F9:DD:35:48:50:1D:69:B7:3D:56:D2:22:91:17:FC Authority key identifier: 6C:1B:63:8E:A9:D7:C6:CE:02:3C:B5:E5:7E:3C:AE:16:A1:1B:45:05 Certificate issuer: /CN=A91881D9/serialNumber=6C1B638EA9D7C6CE023CB5E57E3CAE16A11B4505 Certificate serial: 1864 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bBtjjqnXxs4CPLXlfjyuFqEbRQU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91881D9/D89BB30EB47711E7AD54B664C4F9AE02/bBtjjqnXxs4CPLXlfjyuFqEbRQU.mft Manifest number: 185B Signing time: Sun 02 Nov 2025 16:30:26 +0000 Manifest this update: Sun 02 Nov 2025 16:30:26 +0000 Manifest next update: Sun 09 Nov 2025 16:30:26 +0000 Files and hashes: 1: bBtjjqnXxs4CPLXlfjyuFqEbRQU.crl (hash: aVsLJ/jB6TUKY26yiRheHqFXcKWYmtSfNAAi94UyLQM=) 2: 870C2B58B47811E788EC7E65C4F9AE02.roa (hash: IgkWueiZzDaSaqXsqac+/PyEgRdDcfnQbUbjQVGTTtM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91881D9/D89BB30EB47711E7AD54B664C4F9AE02/bBtjjqnXxs4CPLXlfjyuFqEbRQU.crl rsync://rpki.apnic.net/member_repository/A91881D9/D89BB30EB47711E7AD54B664C4F9AE02/bBtjjqnXxs4CPLXlfjyuFqEbRQU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bBtjjqnXxs4CPLXlfjyuFqEbRQU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 16:30:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6244 (0x1864) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91881D9, serialNumber=6C1B638EA9D7C6CE023CB5E57E3CAE16A11B4505 Validity Not Before: Nov 2 16:30:26 2025 GMT Not After : Nov 9 16:30:26 2025 GMT Subject: CN=69078722-1568 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:5b:6e:17:f0:79:58:79:6e:fb:f7:3b:7d:84: ab:eb:5a:bd:37:a6:49:5d:24:5f:6a:ac:ab:e3:85: 3d:41:29:30:19:d9:67:55:e0:e5:0d:d1:24:84:cc: f6:81:88:83:e1:eb:4c:2e:94:4c:3e:77:5e:66:64: 9e:5a:1c:22:3a:f2:4b:a0:1c:d4:6e:d2:0a:33:12: 3b:3a:07:69:60:b1:45:67:84:b3:47:12:33:1b:23: 37:73:5c:fb:56:cd:80:2e:b2:73:18:40:31:ad:5a: 07:44:79:59:fb:5f:67:36:e4:f8:63:1c:e8:8b:3a: d3:83:a2:06:7c:8f:b0:4c:6b:d6:5e:0b:6b:c3:10: ec:ef:d1:29:82:1d:46:a1:80:b9:3c:08:e6:a3:7a: 2c:ad:5a:4d:2c:8b:bb:d3:2d:0f:6d:17:c7:3b:cd: 76:15:c2:41:d2:d0:34:0a:9b:6c:49:2e:c0:20:69: d3:c7:7c:46:44:83:a7:6e:43:10:1e:d0:55:2c:3a: a6:fe:80:07:f8:cc:3c:27:b2:7b:d5:66:b2:e0:85: c2:2a:9a:7e:b5:5e:77:e1:64:77:35:ae:b2:f0:ea: 37:a8:fe:e1:24:47:6c:7a:c3:28:ea:63:84:a7:d0: 63:eb:88:d2:94:67:4f:e6:33:84:1a:2e:dc:75:07: 5f:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:5F:70:4B:CB:F9:DD:35:48:50:1D:69:B7:3D:56:D2:22:91:17:FC X509v3 Authority Key Identifier: keyid:6C:1B:63:8E:A9:D7:C6:CE:02:3C:B5:E5:7E:3C:AE:16:A1:1B:45:05 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91881D9/D89BB30EB47711E7AD54B664C4F9AE02/bBtjjqnXxs4CPLXlfjyuFqEbRQU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bBtjjqnXxs4CPLXlfjyuFqEbRQU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91881D9/D89BB30EB47711E7AD54B664C4F9AE02/bBtjjqnXxs4CPLXlfjyuFqEbRQU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 21:c9:40:64:7e:35:39:dd:14:b7:32:7c:89:1d:55:e6:c9:f5: c2:c2:9a:3e:c1:03:ea:1e:25:50:47:a8:7b:09:c4:ee:08:51: 20:8c:29:92:da:d6:1e:1f:bc:9e:0a:cb:eb:8a:62:06:5f:8b: 12:da:6f:d4:94:5d:14:67:ca:93:ea:fe:e9:2d:43:fd:a1:3d: 60:4b:89:26:ad:33:e6:b5:f9:b1:3e:fe:c3:05:73:9b:3a:3a: ef:f1:41:58:4a:7d:6f:71:4c:c7:ca:33:0c:ce:22:c0:e5:c1: 2f:a8:92:d3:11:32:28:6b:74:18:b2:3a:bd:77:ae:59:bb:18: 79:1b:24:79:80:1b:3e:4b:b6:73:35:32:eb:1a:fb:a8:4f:a8: f4:74:93:d0:3c:fe:e6:0e:74:75:d9:df:60:7a:c5:e9:b8:ad: 51:b2:88:d4:0c:e9:38:67:45:b7:a9:f4:dd:e7:49:e6:35:7b: ab:00:d8:ac:11:b9:d4:0d:b4:4f:15:6f:f8:af:36:12:ff:f3: 1c:07:d8:18:b5:20:f4:e2:7f:c6:da:54:8d:c7:4b:67:b9:e2: 00:e5:06:df:b4:bc:c1:4d:03:f8:1d:d2:24:83:45:dd:3a:f5: 12:17:c0:fd:25:74:dc:75:30:50:3f:c8:1f:03:ec:f0:f3:c7: f1:10:e9:5c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICGGQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODgxRDkxMTAvBgNVBAUTKDZDMUI2MzhFQTlEN0M2Q0UwMjNDQjVFNTdFM0NBRTE2 QTExQjQ1MDUwHhcNMjUxMTAyMTYzMDI2WhcNMjUxMTA5MTYzMDI2WjAYMRYwFAYD VQQDEw02OTA3ODcyMi0xNTY4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAz1tuF/B5WHlu+/c7fYSr61q9N6ZJXSRfaqyr44U9QSkwGdlnVeDlDdEkhMz2 gYiD4etMLpRMPndeZmSeWhwiOvJLoBzUbtIKMxI7OgdpYLFFZ4SzRxIzGyM3c1z7 Vs2ALrJzGEAxrVoHRHlZ+19nNuT4YxzoizrTg6IGfI+wTGvWXgtrwxDs79Epgh1G oYC5PAjmo3osrVpNLIu70y0PbRfHO812FcJB0tA0CptsSS7AIGnTx3xGRIOnbkMQ HtBVLDqm/oAH+Mw8J7J71Way4IXCKpp+tV534WR3Na6y8Oo3qP7hJEdsesMo6mOE p9Bj64jSlGdP5jOEGi7cdQdfbwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKdfcEvL +d01SFAdabc9VtIikRf8MB8GA1UdIwQYMBaAFGwbY46p18bOAjy15X48rhahG0UF MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4ODFEOS9EODlCQjMwRUI0 NzcxMUU3QUQ1NEI2NjRDNEY5QUUwMi9iQnRqanFuWHhzNENQTFhsZmp5dUZxRWJS UVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2JCdGpqcW5YeHM0Q1BMWGxmanl1RnFFYlJRVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 ODFEOS9EODlCQjMwRUI0NzcxMUU3QUQ1NEI2NjRDNEY5QUUwMi9iQnRqanFuWHhz NENQTFhsZmp5dUZxRWJSUVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAhyUBkfjU53RS3MnyJHVXmyfXCwpo+wQPqHiVQR6h7CcTuCFEgjCmS 2tYeH7yeCsvrimIGX4sS2m/UlF0UZ8qT6v7pLUP9oT1gS4kmrTPmtfmxPv7DBXOb Ojrv8UFYSn1vcUzHyjMMziLA5cEvqJLTETIoa3QYsjq9d65Zuxh5GyR5gBs+S7Zz NTLrGvuoT6j0dJPQPP7mDnR12d9gesXpuK1RsojUDOk4Z0W3qfTd50nmNXurANis EbnUDbRPFW/4rzYS//McB9gYtSD04n/G2lSNx0tnueIA5QbftLzBTQP4HdIkg0Xd OvUSF8D9JXTcdTBQP8gfA+zw88fxEOlc -----END CERTIFICATE-----Generated at Tue Nov 4 07:19:24 2025 by rpki-client