$ rpki-client -vvf rpki.apnic.net/member_repository/A91A4402/FDBFD0203D9611EA8EA0702FC4F9AE02/tBFqjm2pkf3PcWJue-oR_2nLqEY.mft File: tBFqjm2pkf3PcWJue-oR_2nLqEY.mft (raw, json) Hash identifier: TGasOc3jQS85M5sMNze9TG06gnyCzjJYifjdmCJowBc= Subject key identifier: D4:22:5E:1F:CF:3B:8E:7C:C9:A9:B7:25:CB:B8:69:1F:E9:91:9C:70 Authority key identifier: B4:11:6A:8E:6D:A9:91:FD:CF:71:62:6E:7B:EA:11:FF:69:CB:A8:46 Certificate issuer: /CN=A91A4402/serialNumber=B4116A8E6DA991FDCF71626E7BEA11FF69CBA846 Certificate serial: 0C83 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tBFqjm2pkf3PcWJue-oR_2nLqEY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A4402/FDBFD0203D9611EA8EA0702FC4F9AE02/tBFqjm2pkf3PcWJue-oR_2nLqEY.mft Manifest number: 0BFF Signing time: Mon 20 Oct 2025 19:46:25 +0000 Manifest this update: Mon 20 Oct 2025 19:46:24 +0000 Manifest next update: Mon 27 Oct 2025 19:46:24 +0000 Files and hashes: 1: tBFqjm2pkf3PcWJue-oR_2nLqEY.crl (hash: 5jZSbY6lMhj/2gsgQtH+CgVtEmVhWAnTz8xGUj8VXKI=) 2: 234D0D6C500611F08771CE55C4F9AE02.roa (hash: tT6wpY26Z4BuIfJge3UrKFFEij5wdhpGksDHGEKyueE=) 3: F3B9AEC4740A11F09DAF2A29C4F9AE02.roa (hash: BAnbwoxPeN/akyQ4VZTfLI7vBW7dc5W2AtRL8aSNk8w=) 4: C3CFE8A06B7B11F0B6D16E2AC4F9AE02.roa (hash: FuJ+0zC5emsysfIUM1yM5haaZPmnTrgVqP1fYVReGjo=) 5: 6CAE0142092E11F094B4703FC4F9AE02.roa (hash: dAr5iBEgksscApG/hnOmTYygVomN/E/w8I2tDgWWF54=) 6: 52636904771911F083181320C4F9AE02.roa (hash: 1KusZBNNW/qOCnR0kl7JmRQp5eJkrJEh2HYRqvBUy6w=) 7: 76BF01E88EF511F0BA815369C4F9AE02.roa (hash: IWHAsp5GSTIoMqNKo0F2rFXfmQxpgUta2Oi8tYKu1uo=) 8: B43088B457F311F099129754C4F9AE02.roa (hash: G/js9Bvm1ldv3EUjoboyUhcQNgg/29Bat68H2Q8xFls=) 9: 8B5ED70E821611F0B778F47DC4F9AE02.roa (hash: ec9OX9UoLwyn7wN5VObF9v2iz3RI0N5kTbWroMU/2/c=) 10: 266FDBAE7CA811F099F0EC6BC4F9AE02.roa (hash: bzHe5eQXvAgJqQB53X3rSQRyXfwO/6bU3D4zIt0omyE=) 11: 0E43AECA3B5D11F0A26BC064C4F9AE02.roa (hash: EDVStKKxG06lw8JN0F9X4jCTKiN0LdF9zVSZbm6YceU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A4402/FDBFD0203D9611EA8EA0702FC4F9AE02/tBFqjm2pkf3PcWJue-oR_2nLqEY.crl rsync://rpki.apnic.net/member_repository/A91A4402/FDBFD0203D9611EA8EA0702FC4F9AE02/tBFqjm2pkf3PcWJue-oR_2nLqEY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tBFqjm2pkf3PcWJue-oR_2nLqEY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 27 Oct 2025 19:46:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3203 (0xc83) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A4402, serialNumber=B4116A8E6DA991FDCF71626E7BEA11FF69CBA846 Validity Not Before: Oct 20 19:46:24 2025 GMT Not After : Oct 27 19:46:24 2025 GMT Subject: CN=68f69190-9b1b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:05:c5:9f:d5:c3:01:a3:41:44:4e:04:6c:00: dc:53:20:68:e0:3c:d5:67:77:47:f4:e1:84:a7:5f: d4:6a:97:28:73:57:d1:ca:f0:63:50:c7:d7:39:70: df:65:ca:4f:ab:91:1b:c6:19:fe:62:b5:7a:0b:1c: e1:bd:14:e0:06:98:2f:f8:d5:1d:ff:0d:a2:65:10: eb:79:4f:dc:a7:8d:12:ac:de:26:4c:58:fa:22:f3: a2:3a:18:b4:c1:8e:d6:7e:86:7b:d1:05:77:96:14: 9d:83:fe:95:84:f8:d9:7d:d2:73:db:56:2d:13:29: ee:e8:82:3a:8d:a9:7f:9e:10:9e:22:86:95:c5:99: d9:90:f8:fe:c7:3d:dc:cf:90:d5:48:97:0c:9d:89: a6:3d:86:95:58:04:d6:00:36:f1:d2:d3:7b:fd:09: 37:0d:ba:56:83:e2:76:6a:f1:e0:1c:6d:cc:dd:62: 5f:17:36:4d:45:63:89:dc:b2:e8:83:96:17:e7:e2: c8:bd:53:d7:46:fd:13:88:5f:70:22:2e:df:07:28: 22:bd:95:db:8f:fb:37:17:04:ac:f7:dc:ce:2d:a3: 43:12:ad:94:3d:b5:44:21:37:90:b8:d8:c5:b0:2e: 94:91:e5:a6:04:eb:67:c7:82:be:76:51:3c:6d:f6: ca:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:22:5E:1F:CF:3B:8E:7C:C9:A9:B7:25:CB:B8:69:1F:E9:91:9C:70 X509v3 Authority Key Identifier: keyid:B4:11:6A:8E:6D:A9:91:FD:CF:71:62:6E:7B:EA:11:FF:69:CB:A8:46 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A4402/FDBFD0203D9611EA8EA0702FC4F9AE02/tBFqjm2pkf3PcWJue-oR_2nLqEY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tBFqjm2pkf3PcWJue-oR_2nLqEY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A4402/FDBFD0203D9611EA8EA0702FC4F9AE02/tBFqjm2pkf3PcWJue-oR_2nLqEY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption be:61:51:55:41:bf:9c:bd:47:cf:15:24:37:e7:41:bd:04:5f: 2e:c4:98:1d:10:1e:f4:80:78:bd:a9:c9:59:c7:dd:ba:21:cd: 23:4a:eb:01:2c:c3:16:32:3d:59:c6:9b:48:6d:79:e2:26:47: 03:e8:f8:c0:67:86:57:3b:c9:aa:63:0d:ed:fe:4f:91:d0:ba: 87:a5:4f:fa:79:ea:f4:a3:e7:e7:7f:79:81:85:a1:52:87:d9: f8:7b:e8:db:28:ef:00:95:c1:25:2d:e7:d8:fa:b9:0e:9c:5f: a3:a3:a7:2f:a2:7a:d0:9f:11:20:81:c3:8d:42:db:62:84:aa: 43:8b:22:cd:d1:a3:dd:e2:d4:0d:40:69:72:38:73:15:27:29: f7:c5:95:cc:83:2e:83:da:76:56:79:44:5e:8e:06:93:c7:04: 27:46:29:ae:2c:8b:22:06:a3:a9:48:ca:7b:a1:bb:da:13:2a: 49:29:f7:ce:fb:d9:94:95:82:89:9d:b9:1c:88:3b:74:2c:63: e5:a2:e9:54:a6:fd:9b:ae:07:3f:1a:f1:ab:01:69:e4:c3:c8: 2c:55:56:70:16:3d:09:79:d0:55:80:42:43:87:e1:78:fe:1f: 14:59:ea:37:2b:70:19:96:11:5e:c1:63:b6:3c:96:de:82:f8: 66:f7:78:d5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDIMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTQ0MDIxMTAvBgNVBAUTKEI0MTE2QThFNkRBOTkxRkRDRjcxNjI2RTdCRUExMUZG NjlDQkE4NDYwHhcNMjUxMDIwMTk0NjI0WhcNMjUxMDI3MTk0NjI0WjAYMRYwFAYD VQQDEw02OGY2OTE5MC05YjFiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwgXFn9XDAaNBRE4EbADcUyBo4DzVZ3dH9OGEp1/Uapcoc1fRyvBjUMfXOXDf ZcpPq5Ebxhn+YrV6CxzhvRTgBpgv+NUd/w2iZRDreU/cp40SrN4mTFj6IvOiOhi0 wY7WfoZ70QV3lhSdg/6VhPjZfdJz21YtEynu6II6jal/nhCeIoaVxZnZkPj+xz3c z5DVSJcMnYmmPYaVWATWADbx0tN7/Qk3DbpWg+J2avHgHG3M3WJfFzZNRWOJ3LLo g5YX5+LIvVPXRv0TiF9wIi7fBygivZXbj/s3FwSs99zOLaNDEq2UPbVEITeQuNjF sC6UkeWmBOtnx4K+dlE8bfbKZwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNQiXh/P O458yam3Jcu4aR/pkZxwMB8GA1UdIwQYMBaAFLQRao5tqZH9z3FibnvqEf9py6hG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNDQwMi9GREJGRDAyMDNE OTYxMUVBOEVBMDcwMkZDNEY5QUUwMi90QkZxam0ycGtmM1BjV0p1ZS1vUl8ybkxx RVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RCRnFqbTJwa2YzUGNXSnVlLW9SXzJuTHFFWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NDQwMi9GREJGRDAyMDNEOTYxMUVBOEVBMDcwMkZDNEY5QUUwMi90QkZxam0ycGtm M1BjV0p1ZS1vUl8ybkxxRVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC+YVFVQb+cvUfPFSQ350G9BF8uxJgdEB70gHi9qclZx926Ic0jSusB LMMWMj1ZxptIbXniJkcD6PjAZ4ZXO8mqYw3t/k+R0LqHpU/6eer0o+fnf3mBhaFS h9n4e+jbKO8AlcElLefY+rkOnF+jo6cvonrQnxEggcONQttihKpDiyLN0aPd4tQN QGlyOHMVJyn3xZXMgy6D2nZWeURejgaTxwQnRimuLIsiBqOpSMp7obvaEypJKffO +9mUlYKJnbkciDt0LGPloulUpv2brgc/GvGrAWnkw8gsVVZwFj0JedBVgEJDh+F4 /h8UWeo3K3AZlhFewWO2PJbegvhm93jV -----END CERTIFICATE-----Generated at Wed Oct 22 17:33:50 2025 by rpki-client