$ rpki-client -vvf rpki.apnic.net/member_repository/A91A3526/A13C55CE98B611EE8B490487C4F9AE02/Bf0tUZ1AyyCJN7-KjkY-bYQswH0.mft File: Bf0tUZ1AyyCJN7-KjkY-bYQswH0.mft (raw, json) Hash identifier: 3joWyQLH6E0RJX9Buis6ke8aW2J5/KmM0uU+tVaTqss= Subject key identifier: 87:52:0E:59:EB:9F:1A:B9:01:92:AB:4A:DE:C5:D6:92:C5:81:A2:D1 Authority key identifier: 05:FD:2D:51:9D:40:CB:20:89:37:BF:8A:8E:46:3E:6D:84:2C:C0:7D Certificate issuer: /CN=A91A3526/serialNumber=05FD2D519D40CB208937BF8A8E463E6D842CC07D Certificate serial: 016D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Bf0tUZ1AyyCJN7-KjkY-bYQswH0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A3526/A13C55CE98B611EE8B490487C4F9AE02/Bf0tUZ1AyyCJN7-KjkY-bYQswH0.mft Manifest number: 0166 Signing time: Mon 03 Nov 2025 04:01:22 +0000 Manifest this update: Mon 03 Nov 2025 04:01:22 +0000 Manifest next update: Mon 10 Nov 2025 04:01:22 +0000 Files and hashes: 1: Bf0tUZ1AyyCJN7-KjkY-bYQswH0.crl (hash: QO/ECOIIwuOqVEBHGPZ1IskJYADAIbvsVmDuz40D4So=) 2: 134D519098B711EE99FD1F09C4F9AE02.roa (hash: vJ2YKh1qvo6z7EsNb01ZnfIC7WfZlHkFbVKbRaXaFP0=) 3: 13E4471298B711EE99FD1F09C4F9AE02.roa (hash: /ZzSx5BufcsBFJm8hzU4SO+vyDuIxcR/d9CCuElSRT0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A3526/A13C55CE98B611EE8B490487C4F9AE02/Bf0tUZ1AyyCJN7-KjkY-bYQswH0.crl rsync://rpki.apnic.net/member_repository/A91A3526/A13C55CE98B611EE8B490487C4F9AE02/Bf0tUZ1AyyCJN7-KjkY-bYQswH0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Bf0tUZ1AyyCJN7-KjkY-bYQswH0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 04:01:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 365 (0x16d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A3526, serialNumber=05FD2D519D40CB208937BF8A8E463E6D842CC07D Validity Not Before: Nov 3 04:01:22 2025 GMT Not After : Nov 10 04:01:22 2025 GMT Subject: CN=69082912-972f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:28:0a:9b:ee:ad:34:2e:d4:e4:8e:30:80:1a: f0:c0:cc:31:6a:4f:d3:59:03:6a:52:32:08:58:e7: a4:e2:40:e9:03:68:49:5c:9b:04:d1:de:30:34:47: c8:25:f9:99:48:d7:36:45:fa:41:aa:41:1d:82:11: af:cd:c1:47:b8:49:fd:85:a5:5c:47:2f:e3:fd:14: e9:a9:62:4c:9e:b1:1d:33:0b:dd:d9:dd:2d:79:62: 49:c0:e8:00:3e:9f:22:50:d3:07:02:0b:1a:89:f5: dd:20:32:49:76:74:60:4c:41:29:70:4f:f4:ba:fe: 09:aa:7d:c0:ea:70:a6:3e:95:67:fa:3b:75:3b:3c: 2d:ed:bf:d3:af:00:43:b8:7b:db:0b:9b:e7:93:83: 32:85:e8:cd:57:f8:b4:50:26:2d:8c:68:d5:d9:76: 8d:51:6e:b4:92:76:eb:6e:e0:6d:84:19:18:f1:45: e8:7b:d9:f8:5a:35:d8:b5:56:ed:00:5c:5a:0f:7a: 69:fa:5d:4d:3b:bf:27:2f:78:ae:a6:c5:11:c8:b0: b5:c8:56:e9:df:12:ab:07:71:2b:7e:b2:ae:86:b0: d0:ef:26:6a:8a:d2:0e:b9:60:4f:f9:8c:c0:65:3c: 03:a0:20:48:5c:05:f6:05:f2:1a:7d:07:ad:6c:f0: 05:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:52:0E:59:EB:9F:1A:B9:01:92:AB:4A:DE:C5:D6:92:C5:81:A2:D1 X509v3 Authority Key Identifier: keyid:05:FD:2D:51:9D:40:CB:20:89:37:BF:8A:8E:46:3E:6D:84:2C:C0:7D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A3526/A13C55CE98B611EE8B490487C4F9AE02/Bf0tUZ1AyyCJN7-KjkY-bYQswH0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Bf0tUZ1AyyCJN7-KjkY-bYQswH0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A3526/A13C55CE98B611EE8B490487C4F9AE02/Bf0tUZ1AyyCJN7-KjkY-bYQswH0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 37:8c:b2:cf:aa:9b:9a:8f:f5:d1:fc:62:3e:8a:75:40:42:97: 2b:3e:9b:93:b8:e4:19:cb:1b:89:be:77:1b:7a:e4:5b:b7:f1: c2:38:b9:c3:df:53:7f:25:ed:c0:06:fe:c1:95:1d:47:0b:3c: 38:ea:1b:be:61:e0:4e:06:72:6a:79:41:fa:ad:91:c9:b5:f9: ca:11:97:b5:49:0a:d9:67:a3:02:e5:3c:a9:5e:99:f1:69:85: b9:98:6a:da:d1:c7:a6:7a:4e:07:a3:15:5a:de:a1:17:72:e0: 35:4f:14:35:96:90:33:36:03:08:91:15:54:f2:22:c7:30:8b: 07:90:f7:00:e8:c4:df:71:91:c3:95:07:19:7f:ae:b5:ae:06: 9e:35:1d:59:0f:09:c4:1f:10:24:9d:b8:bd:1d:61:11:8c:6c: ce:f5:75:32:0f:50:18:de:bf:57:ca:d3:38:35:db:e9:ef:7d: c2:53:ba:66:11:c0:e8:3f:66:e2:5b:7e:25:4c:e5:86:dc:1f: db:f0:54:ce:5a:3a:91:fd:ba:93:28:9e:ab:6f:60:70:bc:a4: 6b:c5:16:46:0b:9a:4c:5f:ea:dd:ad:23:ac:05:98:d1:4a:8d: 0c:c9:25:7c:ed:3d:e7:9a:c8:97:c8:50:ef:43:c7:46:3f:14: 1b:70:a1:19 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAW0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTM1MjYxMTAvBgNVBAUTKDA1RkQyRDUxOUQ0MENCMjA4OTM3QkY4QThFNDYzRTZE ODQyQ0MwN0QwHhcNMjUxMTAzMDQwMTIyWhcNMjUxMTEwMDQwMTIyWjAYMRYwFAYD VQQDEw02OTA4MjkxMi05NzJmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvCgKm+6tNC7U5I4wgBrwwMwxak/TWQNqUjIIWOek4kDpA2hJXJsE0d4wNEfI JfmZSNc2RfpBqkEdghGvzcFHuEn9haVcRy/j/RTpqWJMnrEdMwvd2d0teWJJwOgA Pp8iUNMHAgsaifXdIDJJdnRgTEEpcE/0uv4Jqn3A6nCmPpVn+jt1Ozwt7b/TrwBD uHvbC5vnk4MyhejNV/i0UCYtjGjV2XaNUW60knbrbuBthBkY8UXoe9n4WjXYtVbt AFxaD3pp+l1NO78nL3iupsURyLC1yFbp3xKrB3ErfrKuhrDQ7yZqitIOuWBP+YzA ZTwDoCBIXAX2BfIafQetbPAFRwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIdSDlnr nxq5AZKrSt7F1pLFgaLRMB8GA1UdIwQYMBaAFAX9LVGdQMsgiTe/io5GPm2ELMB9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMzUyNi9BMTNDNTVDRTk4 QjYxMUVFOEI0OTA0ODdDNEY5QUUwMi9CZjB0VVoxQXl5Q0pONy1LamtZLWJZUXN3 SDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0JmMHRVWjFBeXlDSk43LUtqa1ktYllRc3dIMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB MzUyNi9BMTNDNTVDRTk4QjYxMUVFOEI0OTA0ODdDNEY5QUUwMi9CZjB0VVoxQXl5 Q0pONy1LamtZLWJZUXN3SDAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA3jLLPqpuaj/XR/GI+inVAQpcrPpuTuOQZyxuJvncbeuRbt/HCOLnD 31N/Je3ABv7BlR1HCzw46hu+YeBOBnJqeUH6rZHJtfnKEZe1SQrZZ6MC5TypXpnx aYW5mGra0cemek4HoxVa3qEXcuA1TxQ1lpAzNgMIkRVU8iLHMIsHkPcA6MTfcZHD lQcZf661rgaeNR1ZDwnEHxAknbi9HWERjGzO9XUyD1AY3r9XytM4Ndvp733CU7pm EcDoP2biW34lTOWG3B/b8FTOWjqR/bqTKJ6rb2BwvKRrxRZGC5pMX+rdrSOsBZjR So0MySV87T3nmsiXyFDvQ8dGPxQbcKEZ -----END CERTIFICATE-----Generated at Tue Nov 4 08:30:27 2025 by rpki-client